@morojs/moro 1.5.16 → 1.6.0

package/src/core/middleware/built-in/jwt-helpers.ts

@@ -5,6 +5,8 @@
  * in their custom authentication middleware.
  */
 
+import { resolveUserPackage } from '../../utilities/package-utils.js';
+
 export interface JWTVerificationResult {
   success: boolean;
   payload?: any;
@@ -24,15 +26,16 @@ export interface JWTVerificationResult {
  * @param options - Additional JWT verification options
  * @returns JWTVerificationResult with success status and payload or error details
  */
-export function safeVerifyJWT(
+export async function safeVerifyJWT(
   token: string,
   secret: string,
   options: any = {}
-): JWTVerificationResult {
+): Promise<JWTVerificationResult> {
   // Check if jsonwebtoken is available
   let jwt: any;
   try {
-    jwt = require('jsonwebtoken');
+    const jwtPath = resolveUserPackage('jsonwebtoken');
+    jwt = await import(jwtPath);
   } catch (error) {
     return {
       success: false,
@@ -178,7 +181,7 @@ export function createAuthErrorResponse(error: JWTVerificationResult['error']) {
 }
 
 /**
- * Example usage for custom middleware:
+ * Example usage for custom middleware with elegant error handling:
  *
  * ```typescript
  * import { safeVerifyJWT, extractJWTFromHeader, createAuthErrorResponse } from '@morojs/moro';
@@ -197,6 +200,7 @@ export function createAuthErrorResponse(error: JWTVerificationResult['error']) {
  *   const result = safeVerifyJWT(token, process.env.JWT_SECRET!);
  *
  *   if (!result.success) {
+ *     // This provides elegant, user-friendly error messages instead of stack traces
  *     const errorResponse = createAuthErrorResponse(result.error);
  *     return res.status(401).json(errorResponse);
  *   }
@@ -212,4 +216,28 @@ export function createAuthErrorResponse(error: JWTVerificationResult['error']) {
  *   next();
  * };
  * ```
+ *
+ * Benefits of using safeVerifyJWT vs raw jsonwebtoken.verify():
+ *
+ * ❌ Raw approach (shows ugly error messages to users):
+ * ```typescript
+ * try {
+ *   const decoded = jwt.verify(token, secret);
+ *   req.user = decoded;
+ * } catch (error) {
+ *   // This exposes technical details and stack traces to users:
+ *   // "Invalid token: TokenExpiredError: jwt expired at /node_modules/jsonwebtoken/verify.js:190:21..."
+ *   throw error; // BAD - exposes internal details
+ * }
+ * ```
+ *
+ * ✅ Safe approach (shows clean, user-friendly messages):
+ * ```typescript
+ * const result = safeVerifyJWT(token, secret);
+ * if (!result.success) {
+ *   // This returns clean messages like:
+ *   // { "error": "Token expired", "message": "Your session has expired. Please sign in again." }
+ *   return res.status(401).json(createAuthErrorResponse(result.error));
+ * }
+ * ```
  */

package/src/core/middleware/built-in/performance-monitor.ts

@@ -1,5 +1,5 @@
 // Performance monitoring middleware
-import { createFrameworkLogger } from '../../logger';
+import { createFrameworkLogger } from '../../logger/index.js';
 
 const logger = createFrameworkLogger('PerformanceMonitor');
 

package/src/core/middleware/built-in/rate-limit.ts

@@ -1,6 +1,6 @@
 // Rate Limiting Middleware
-import { MiddlewareInterface, HookContext } from '../../../types/hooks';
-import { createFrameworkLogger } from '../../logger';
+import { MiddlewareInterface, HookContext } from '../../../types/hooks.js';
+import { createFrameworkLogger } from '../../logger/index.js';
 
 const logger = createFrameworkLogger('RateLimitMiddleware');
 

package/src/core/middleware/built-in/request-logger.ts

@@ -1,5 +1,5 @@
 // Simple request logging middleware
-import { createFrameworkLogger } from '../../logger';
+import { createFrameworkLogger } from '../../logger/index.js';
 
 const logger = createFrameworkLogger('RequestLogger');
 

package/src/core/middleware/built-in/session.ts

@@ -1,10 +1,11 @@
 // Session Middleware
-import { MiddlewareInterface, HookContext } from '../../../types/hooks';
-import { createFrameworkLogger } from '../../logger';
-import { CacheAdapter } from '../../../types/cache';
-import { MemoryCacheAdapter } from './adapters/cache/memory';
-import { RedisCacheAdapter } from './adapters/cache/redis';
-import { FileCacheAdapter } from './adapters/cache/file';
+import crypto from 'crypto';
+import { MiddlewareInterface, HookContext } from '../../../types/hooks.js';
+import { createFrameworkLogger } from '../../logger/index.js';
+import { CacheAdapter } from '../../../types/cache.js';
+import { MemoryCacheAdapter } from './adapters/cache/memory.js';
+import { RedisCacheAdapter } from './adapters/cache/redis.js';
+import { FileCacheAdapter } from './adapters/cache/file.js';
 
 const logger = createFrameworkLogger('SessionMiddleware');
 
@@ -157,7 +158,6 @@ class Session {
       return this.options.genid();
     }
 
-    const crypto = require('crypto');
     return crypto.randomBytes(24).toString('hex');
   }
 
@@ -229,7 +229,6 @@ export const session = (options: SessionOptions = {}): MiddlewareInterface => ({
       if (config.genid) {
         return config.genid();
       }
-      const crypto = require('crypto');
       return crypto.randomBytes(24).toString('hex');
     };
 

package/src/core/middleware/built-in/sse.ts

@@ -1,6 +1,6 @@
 // Server-Sent Events Middleware
-import { MiddlewareInterface, HookContext } from '../../../types/hooks';
-import { createFrameworkLogger } from '../../logger';
+import { MiddlewareInterface, HookContext } from '../../../types/hooks.js';
+import { createFrameworkLogger } from '../../logger/index.js';
 
 const logger = createFrameworkLogger('SSEMiddleware');
 

package/src/core/middleware/built-in/validation.ts

@@ -1,6 +1,6 @@
 // Validation Middleware
-import { MiddlewareInterface, HookContext } from '../../../types/hooks';
-import { createFrameworkLogger } from '../../logger';
+import { MiddlewareInterface, HookContext } from '../../../types/hooks.js';
+import { createFrameworkLogger } from '../../logger/index.js';
 
 const logger = createFrameworkLogger('ValidationMiddleware');
 

package/src/core/middleware/index.ts

@@ -1,17 +1,17 @@
 // Middleware System for Moro
 import { EventEmitter } from 'events';
-import { HookManager } from '../utilities';
+import { HookManager } from '../utilities/index.js';
 import {
   MiddlewareMetadata,
   MiddlewareContext,
   MiddlewareInterface,
   SimpleMiddlewareFunction,
   MoroMiddleware,
-} from '../../types/hooks';
-import { createFrameworkLogger } from '../logger';
+} from '../../types/hooks.js';
+import { createFrameworkLogger } from '../logger/index.js';
 
 // Export types needed by built-in middleware
-export type { MiddlewareInterface, MoroMiddleware } from '../../types/hooks';
+export type { MiddlewareInterface, MoroMiddleware } from '../../types/hooks.js';
 
 export class MiddlewareManager extends EventEmitter {
   private middleware = new Map<string, MiddlewareInterface>();
@@ -173,5 +173,5 @@ export class MiddlewareManager extends EventEmitter {
 }
 
 // Built-in middleware exports
-export { builtInMiddleware, simpleMiddleware } from './built-in';
-export * from './built-in';
+export { builtInMiddleware, simpleMiddleware } from './built-in/index.js';
+export * from './built-in/index.js';

package/src/core/modules/auto-discovery.ts

@@ -1,10 +1,10 @@
 // Auto-discovery system for Moro modules
 import { readdirSync, statSync } from 'fs';
 import { join, extname, relative, isAbsolute } from 'path';
-import { ModuleConfig } from '../../types/module';
-import { DiscoveryOptions } from '../../types/discovery';
-import { ModuleDefaultsConfig } from '../../types/config';
-import { createFrameworkLogger } from '../logger';
+import { ModuleConfig } from '../../types/module.js';
+import { DiscoveryOptions } from '../../types/discovery.js';
+import { ModuleDefaultsConfig } from '../../types/config.js';
+import { createFrameworkLogger } from '../logger/index.js';
 
 export class ModuleDiscovery {
   private baseDir: string;

package/src/core/modules/index.ts

@@ -1,3 +1,3 @@
 // Module System - Centralized Exports
-export { defineModule, ModuleLoader } from './modules';
-export { ModuleDiscovery, autoDiscoverModuleDirectories } from './auto-discovery';
+export { defineModule, ModuleLoader } from './modules.js';
+export { ModuleDiscovery, autoDiscoverModuleDirectories } from './auto-discovery.js';

package/src/core/modules/modules.ts

@@ -1,10 +1,10 @@
 // Module System - Definition and Loading
 import { promises as fs } from 'fs';
 import path from 'path';
-import { Container } from '../utilities';
-import { ModuleConfig } from '../../types/module';
-import { ModuleDefinition, ModuleRoute, ModuleSocket } from '../../types/module';
-import { createFrameworkLogger } from '../logger';
+import { Container } from '../utilities/index.js';
+import { ModuleConfig } from '../../types/module.js';
+import { ModuleDefinition, ModuleRoute, ModuleSocket } from '../../types/module.js';
+import { createFrameworkLogger } from '../logger/index.js';
 
 // Module Definition Function
 export function defineModule(definition: ModuleDefinition): ModuleConfig {

package/src/core/networking/adapters/index.ts

@@ -1,8 +1,9 @@
 // WebSocket Adapters for Moro Framework
 // Export all available adapters from this centralized location
 
-export { SocketIOAdapter } from './socketio-adapter';
-export { WSAdapter } from './ws-adapter';
+export { SocketIOAdapter } from './socketio-adapter.js';
+export { WSAdapter } from './ws-adapter.js';
+export { UWebSocketsAdapter } from './uws-adapter.js';
 
 // Re-export the adapter interface for convenience
 export type {
@@ -13,4 +14,4 @@ export type {
   WebSocketEmitter,
   WebSocketMiddleware,
   WebSocketEventHandler,
-} from '../websocket-adapter';
+} from '../websocket-adapter.js';

package/src/core/networking/adapters/socketio-adapter.ts

@@ -1,6 +1,7 @@
 // Socket.IO WebSocket Adapter for Moro Framework
 // Implements the WebSocket adapter interface using Socket.IO
 
+import { resolveUserPackage } from '../../utilities/package-utils.js';
 import {
   WebSocketAdapter,
   WebSocketAdapterOptions,
@@ -8,7 +9,7 @@ import {
   WebSocketConnection,
   WebSocketEmitter,
   WebSocketMiddleware,
-} from '../websocket-adapter';
+} from '../websocket-adapter.js';
 
 /**
  * Socket.IO adapter implementation
@@ -19,8 +20,9 @@ export class SocketIOAdapter implements WebSocketAdapter {
 
   async initialize(httpServer: any, options: WebSocketAdapterOptions = {}): Promise<void> {
     try {
-      // Dynamic import to avoid requiring socket.io as a hard dependency
-      const { Server } = await import('socket.io');
+      // Dynamic import from user's context to find their installed socket.io
+      const socketIOPath = resolveUserPackage('socket.io');
+      const { Server } = await import(socketIOPath);
 
       this.io = new Server(httpServer, {
         cors: options.cors || { origin: '*' },