@morojs/moro 1.8.12 → 1.8.14

package/dist/core/config/index.js

@@ -23,6 +23,23 @@ import { loadConfigFromAllSources, loadConfigFromAllSourcesAsync } from './confi
 import { initializeAndLockConfig, getGlobalConfig as getConfig, isConfigLocked, resetConfigForTesting, } from './config-manager.js';
 import { createFrameworkLogger } from '../logger/index.js';
 const logger = createFrameworkLogger('ConfigSystem');
+/**
+ * Configuration is one-per-process: the first createApp() locks it and every
+ * later createApp() in the same process (or worker thread) receives that
+ * same config. A second app that passes its OWN options (another port, TLS,
+ * ...) would otherwise silently boot with the first app's settings, so name
+ * the ignored keys at ERROR rather than a debug line nobody sees.
+ */
+function warnIgnoredOptions(options) {
+    const ignored = options ? Object.keys(options).filter(k => k !== 'logger') : [];
+    if (ignored.length === 0) {
+        logger.debug('Configuration already locked, returning existing config');
+        return;
+    }
+    logger.error(`createApp() called again after the configuration was locked; ignoring options [${ignored.join(', ')}]. ` +
+        'MoroJS keeps one configuration per process: the first createApp() wins and later apps share it. ' +
+        'Run a second differently-configured app in its own process.', 'ConfigLock');
+}
 /**
  * Initialize configuration system with createApp options
  * This is the main entry point called by createApp()
@@ -32,7 +49,7 @@ const logger = createFrameworkLogger('ConfigSystem');
  */
 export function initializeConfig(options) {
     if (isConfigLocked()) {
-        logger.debug('Configuration already locked, returning existing config');
+        warnIgnoredOptions(options);
         return getConfig();
     }
     logger.debug('Initializing configuration system');
@@ -53,7 +70,7 @@ export function initializeConfig(options) {
  */
 export async function initializeConfigAsync(options) {
     if (isConfigLocked()) {
-        logger.debug('Configuration already locked, returning existing config');
+        warnIgnoredOptions(options);
         return getConfig();
     }
     logger.debug('Initializing configuration system (async)');

package/dist/core/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,mCAAmC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AAGjC,mEAAmE;AACnE,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,8CAA8C;AAC9C,cAAc,YAAY,CAAC;AAI3B,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EACL,uBAAuB,EACvB,eAAe,IAAI,SAAS,EAC5B,cAAc,EACd,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAElD,6DAA6D;IAC7D,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAEjD,oDAAoD;IACpD,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CACT,gDAAgD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,6CAA6C,CACzJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB;IAC/D,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAE5D,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CACT,gDAAgD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,6CAA6C,CACzJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAoB;IACxD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,qBAAqB,EAAE,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Configuration System - Immutable Config with createApp Override Support\n *\n * This is the main entry point for the MoroJS configuration system.\n * It provides a clean, immutable configuration that is locked at createApp() time.\n *\n * Key Features:\n * - Immutable configuration after initialization\n * - Clear precedence: Env Vars > createApp Options > Config File > Defaults\n * - Type-safe validation\n * - Single source of truth\n */\n\n// Export types and core components\nexport * from './schema.js';\nexport * from './config-sources.js';\nexport * from './config-validator.js';\nexport * from './file-loader.js';\nexport type { OriginFunction } from '../../types/config.js';\n\n// Export specific functions from config-manager to avoid conflicts\nexport {\n  initializeAndLockConfig,\n  isConfigLocked,\n  resetConfigForTesting,\n} from './config-manager.js';\n\n// Export utilities for backward compatibility\nexport * from './utils.js';\n\nimport { MoroOptions } from '../../types/core.js';\nimport { AppConfig } from '../../types/config.js';\nimport { loadConfigFromAllSources, loadConfigFromAllSourcesAsync } from './config-sources.js';\nimport {\n  initializeAndLockConfig,\n  getGlobalConfig as getConfig,\n  isConfigLocked,\n  resetConfigForTesting,\n} from './config-manager.js';\nimport { createFrameworkLogger } from '../logger/index.js';\n\nconst logger = createFrameworkLogger('ConfigSystem');\n\n/**\n * Initialize configuration system with createApp options\n * This is the main entry point called by createApp()\n *\n * @param options - createApp options that can override config file and defaults\n * @returns Immutable, validated configuration object\n */\nexport function initializeConfig(options?: MoroOptions): Readonly<AppConfig> {\n  if (isConfigLocked()) {\n    logger.debug('Configuration already locked, returning existing config');\n    return getConfig();\n  }\n\n  logger.debug('Initializing configuration system');\n\n  // Load configuration from all sources with proper precedence\n  const config = loadConfigFromAllSources(options);\n\n  // Lock the configuration to prevent further changes\n  initializeAndLockConfig(config);\n\n  logger.info(\n    `Configuration system initialized and locked: ${process.env.NODE_ENV || 'development'}:${config.server.port} (sources: env + file + options + defaults)`\n  );\n\n  return config;\n}\n\n/**\n * Initialize configuration system asynchronously.\n * Uses dynamic import() for the config file — supports ESM config files in\n * projects with \"type\":\"module\". Called internally by the async createApp().\n *\n * @param options - createApp options that can override config file and defaults\n * @returns Immutable, validated configuration object\n */\nexport async function initializeConfigAsync(options?: MoroOptions): Promise<Readonly<AppConfig>> {\n  if (isConfigLocked()) {\n    logger.debug('Configuration already locked, returning existing config');\n    return getConfig();\n  }\n\n  logger.debug('Initializing configuration system (async)');\n\n  const config = await loadConfigFromAllSourcesAsync(options);\n\n  initializeAndLockConfig(config);\n\n  logger.info(\n    `Configuration system initialized and locked: ${process.env.NODE_ENV || 'development'}:${config.server.port} (sources: env + file + options + defaults)`\n  );\n\n  return config;\n}\n\n/**\n * Load configuration without locking (for testing and utilities)\n * This maintains backward compatibility with existing code\n */\nexport function loadConfig(): AppConfig {\n  return loadConfigFromAllSources();\n}\n\n/**\n * Load configuration with createApp options (for testing and utilities)\n * This maintains backward compatibility with existing code\n */\nexport function loadConfigWithOptions(options: MoroOptions): AppConfig {\n  return loadConfigFromAllSources(options);\n}\n\n/**\n * Get the current global configuration\n * Alias for getGlobalConfig() for backward compatibility\n */\nexport function getGlobalConfig(): Readonly<AppConfig> {\n  return getConfig();\n}\n\n/**\n * Check if configuration has been initialized and locked\n * Alias for isConfigLocked() for backward compatibility\n */\nexport function isConfigInitialized(): boolean {\n  return isConfigLocked();\n}\n\n/**\n * Reset configuration state (for testing only)\n * @internal\n */\nexport function resetConfig(): void {\n  resetConfigForTesting();\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,mCAAmC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AAGjC,mEAAmE;AACnE,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,8CAA8C;AAC9C,cAAc,YAAY,CAAC;AAI3B,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EACL,uBAAuB,EACvB,eAAe,IAAI,SAAS,EAC5B,cAAc,EACd,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;AAErD;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,OAAqB;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CACV,kFAAkF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QACvG,kGAAkG;QAClG,6DAA6D,EAC/D,YAAY,CACb,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAElD,6DAA6D;IAC7D,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAEjD,oDAAoD;IACpD,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CACT,gDAAgD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,6CAA6C,CACzJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB;IAC/D,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAE5D,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CACT,gDAAgD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,6CAA6C,CACzJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAoB;IACxD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,qBAAqB,EAAE,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Configuration System - Immutable Config with createApp Override Support\n *\n * This is the main entry point for the MoroJS configuration system.\n * It provides a clean, immutable configuration that is locked at createApp() time.\n *\n * Key Features:\n * - Immutable configuration after initialization\n * - Clear precedence: Env Vars > createApp Options > Config File > Defaults\n * - Type-safe validation\n * - Single source of truth\n */\n\n// Export types and core components\nexport * from './schema.js';\nexport * from './config-sources.js';\nexport * from './config-validator.js';\nexport * from './file-loader.js';\nexport type { OriginFunction } from '../../types/config.js';\n\n// Export specific functions from config-manager to avoid conflicts\nexport {\n  initializeAndLockConfig,\n  isConfigLocked,\n  resetConfigForTesting,\n} from './config-manager.js';\n\n// Export utilities for backward compatibility\nexport * from './utils.js';\n\nimport { MoroOptions } from '../../types/core.js';\nimport { AppConfig } from '../../types/config.js';\nimport { loadConfigFromAllSources, loadConfigFromAllSourcesAsync } from './config-sources.js';\nimport {\n  initializeAndLockConfig,\n  getGlobalConfig as getConfig,\n  isConfigLocked,\n  resetConfigForTesting,\n} from './config-manager.js';\nimport { createFrameworkLogger } from '../logger/index.js';\n\nconst logger = createFrameworkLogger('ConfigSystem');\n\n/**\n * Configuration is one-per-process: the first createApp() locks it and every\n * later createApp() in the same process (or worker thread) receives that\n * same config. A second app that passes its OWN options (another port, TLS,\n * ...) would otherwise silently boot with the first app's settings, so name\n * the ignored keys at ERROR rather than a debug line nobody sees.\n */\nfunction warnIgnoredOptions(options?: MoroOptions): void {\n  const ignored = options ? Object.keys(options).filter(k => k !== 'logger') : [];\n  if (ignored.length === 0) {\n    logger.debug('Configuration already locked, returning existing config');\n    return;\n  }\n  logger.error(\n    `createApp() called again after the configuration was locked; ignoring options [${ignored.join(', ')}]. ` +\n      'MoroJS keeps one configuration per process: the first createApp() wins and later apps share it. ' +\n      'Run a second differently-configured app in its own process.',\n    'ConfigLock'\n  );\n}\n\n/**\n * Initialize configuration system with createApp options\n * This is the main entry point called by createApp()\n *\n * @param options - createApp options that can override config file and defaults\n * @returns Immutable, validated configuration object\n */\nexport function initializeConfig(options?: MoroOptions): Readonly<AppConfig> {\n  if (isConfigLocked()) {\n    warnIgnoredOptions(options);\n    return getConfig();\n  }\n\n  logger.debug('Initializing configuration system');\n\n  // Load configuration from all sources with proper precedence\n  const config = loadConfigFromAllSources(options);\n\n  // Lock the configuration to prevent further changes\n  initializeAndLockConfig(config);\n\n  logger.info(\n    `Configuration system initialized and locked: ${process.env.NODE_ENV || 'development'}:${config.server.port} (sources: env + file + options + defaults)`\n  );\n\n  return config;\n}\n\n/**\n * Initialize configuration system asynchronously.\n * Uses dynamic import() for the config file — supports ESM config files in\n * projects with \"type\":\"module\". Called internally by the async createApp().\n *\n * @param options - createApp options that can override config file and defaults\n * @returns Immutable, validated configuration object\n */\nexport async function initializeConfigAsync(options?: MoroOptions): Promise<Readonly<AppConfig>> {\n  if (isConfigLocked()) {\n    warnIgnoredOptions(options);\n    return getConfig();\n  }\n\n  logger.debug('Initializing configuration system (async)');\n\n  const config = await loadConfigFromAllSourcesAsync(options);\n\n  initializeAndLockConfig(config);\n\n  logger.info(\n    `Configuration system initialized and locked: ${process.env.NODE_ENV || 'development'}:${config.server.port} (sources: env + file + options + defaults)`\n  );\n\n  return config;\n}\n\n/**\n * Load configuration without locking (for testing and utilities)\n * This maintains backward compatibility with existing code\n */\nexport function loadConfig(): AppConfig {\n  return loadConfigFromAllSources();\n}\n\n/**\n * Load configuration with createApp options (for testing and utilities)\n * This maintains backward compatibility with existing code\n */\nexport function loadConfigWithOptions(options: MoroOptions): AppConfig {\n  return loadConfigFromAllSources(options);\n}\n\n/**\n * Get the current global configuration\n * Alias for getGlobalConfig() for backward compatibility\n */\nexport function getGlobalConfig(): Readonly<AppConfig> {\n  return getConfig();\n}\n\n/**\n * Check if configuration has been initialized and locked\n * Alias for isConfigLocked() for backward compatibility\n */\nexport function isConfigInitialized(): boolean {\n  return isConfigLocked();\n}\n\n/**\n * Reset configuration state (for testing only)\n * @internal\n */\nexport function resetConfig(): void {\n  resetConfigForTesting();\n}\n"]}

package/dist/core/config/schema.js

@@ -212,6 +212,7 @@ export const DEFAULT_CONFIG = {
             enabled: false, // Opt-in to avoid overhead
             level: 6,
             threshold: 1024,
+            maxInlineBytes: 16384, // compressed on the calling thread up to here, on the pool above
         },
         circuitBreaker: {
             enabled: false, // Opt-in to avoid overhead

package/dist/core/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/core/config/schema.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAI/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,MAAM,EAAE;QACN,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;QACjB,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,6DAA6D;QAC7D,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,sDAAsD;QAClE,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,OAAO,EAAE,wDAAwD;QAChF,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,yDAAyD;QACzD,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,CAAC;SACX;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,EAAE;YACN,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,MAAM;aAC3B;SACF;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,cAAc,EAAE,KAAK,EAAE,qCAAqC;QAC5D,eAAe,EAAE;YACf,OAAO,EAAE,IAAI,EAAE,kCAAkC;SAClD;QACD,cAAc,EAAE;YACd,qEAAqE;YACrE,sEAAsE;YACtE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;SAC/C;QACD,aAAa,EAAE;YACb,OAAO,EAAE,IAAI,EAAE,4BAA4B;SAC5C;KACF;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,uBAAuB;QAClC,mBAAmB,EAAE,SAAS;QAC9B,mBAAmB,EAAE,KAAK;QAC1B,aAAa,EAAE,CAAC;KACjB;IACD,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,EAAE,0DAA0D;QAC9E,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB;QACD,SAAS,EAAE;YACT,OAAO,EAAE,KAAK,EAAE,uCAAuC;YACvD,eAAe,EAAE,GAAG;YACpB,aAAa,EAAE,KAAK;YACpB,sBAAsB,EAAE,KAAK;YAC7B,kBAAkB,EAAE,KAAK;SAC1B;QACD,UAAU,EAAE;YACV,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,KAAK;SACpB;QACD,OAAO,EAAE;YACP,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,KAAK,EAAE,QAAQ;YACf,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;YACb,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE;gBACN,MAAM,EAAE,QAAQ,EAAE,iBAAiB;gBACnC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,GAAG;aACV;YACD,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,MAAM;SACd;QACD,aAAa,EAAE;YACb,OAAO,EAAE,IAAI,EAAE,kCAAkC;YACjD,KAAK,EACH,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACnC,CAAC,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,CAAC;gBACvD,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC;YACpC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC;YAC5E,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,KAAK,EAAE,yBAAyB;YACjD,cAAc,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC;YAChF,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,KAAK,EAAE,uBAAuB;YAC3C,QAAQ,EAAE,CAAC;SACZ;KACF;IACD,6EAA6E;IAC7E,gEAAgE;IAChE,OAAO,EAAE,IAAI;IACb,OAAO,EAAE;QACP,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,QAAQ;QAChB,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI;QACnB,oFAAoF;QACpF,cAAc,EAAE,KAAK;QACrB,2EAA2E;QAC3E,uDAAuD;QACvD,iBAAiB,EAAE,KAAK;QACxB,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,CAAC;aACZ;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;aACZ;SACF;KACF;IACD,QAAQ,EAAE;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACjD,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK,EAAE,WAAW;YAC1B,iBAAiB,EAAE,KAAK;SACzB;QACD,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,2CAA2C;YAC3C,qBAAqB,EAAE,IAAI;YAC3B,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,0DAA0D;YAC1D,aAAa,EAAE,MAAM;YACrB,mBAAmB,EAAE,IAAI;YACzB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,iCAAiC;YACjD,uBAAuB,EAAE;gBACvB,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;aACxB;YACD,gBAAgB,EAAE,IAAI;YACtB,6BAA6B,EAAE,IAAI;SACpC;QACD,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzC,QAAQ,EAAE,IAAI;SACf;QACD,GAAG,EAAE;YACH,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;gBACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;gBACrC,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,OAAO,EAAE,CAAC,QAAQ,CAAC;gBACnB,SAAS,EAAE,CAAC,QAAQ,CAAC;gBACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;YACD,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,KAAK;SACb;QACD,SAAS,EAAE;YACT,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;aACd;SACF;KACF;IACD,QAAQ,EAAE,EAAE;IACZ,WAAW,EAAE;QACX,WAAW,EAAE;YACX,OAAO,EAAE,KAAK,EAAE,2BAA2B;YAC3C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;SAChB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,KAAK,EAAE,2BAA2B;YAC3C,gBAAgB,EAAE,CAAC;YACnB,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,KAAK;SACxB;QACD,UAAU,EAAE;YACV,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,CAAC;YACV,iBAAiB,EAAE,SAAS;SAC7B;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE,KAAK,EAAE,kDAAkD;KACnE;CACF,CAAC;AAEF,0DAA0D;AAC1D,sDAAsD;AACtD,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,CAAC,IAAS,EAAa,EAAE;QAC9B,iDAAiD;QACjD,yDAAyD;QACzD,OAAO,IAAiB,CAAC;IAC3B,CAAC;CACF,CAAC;AAgBF,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC","sourcesContent":["// Core Configuration Schema for Moro Framework\n\nimport type { AppConfig } from '../../types/config.js';\n\n// Minimal default configuration - performance-focused, most things opt-in\nexport const DEFAULT_CONFIG: AppConfig = {\n  server: {\n    port: 3001,\n    host: 'localhost',\n    // 0 = unlimited. Historically defaulted to 1000/30000 but those values\n    // were VALIDATED-BUT-NEVER-APPLIED to any server, so the observed behavior\n    // has always been \"unlimited connections, no request timeout\". Now that\n    // both are actually wired through, keeping 0 preserves that behavior;\n    // enforcing the old numbers would silently break existing deployments.\n    // A user who sets either explicitly finally gets it applied.\n    maxConnections: 0,\n    timeout: 0, // deprecated alias for timeouts.request; 0 = disabled\n    bodySizeLimit: '10mb',\n    maxUploadSize: '100mb', // Separate limit for file uploads (multipart/form-data)\n    // Per-phase timeouts. keepAlive/headers were previously hardcoded in the\n    // Node server (5000/6000); they become documented, overridable defaults.\n    // idle/request default to 0 = the per-server default (engine: 120s idle /\n    // 300s request; Node: its built-in 5min requestTimeout).\n    timeouts: {\n      keepAlive: 5000,\n      headers: 6000,\n      idle: 0,\n      request: 0,\n    },\n    // Fine-grained limits. Only multipart carries defaults here (matching the\n    // parser's previous hardcodes); header/ws/high-water limits are left unset\n    // so each runtime uses its own documented default unless overridden.\n    limits: {\n      multipart: {\n        maxParts: 1000,\n        maxPartHeaderBytes: '16kb',\n      },\n    },\n    // engine: left unset so resolution can tell \"user chose it\" from \"default\".\n    // Unset resolves to 'moro' (Moro's native engine, Node.js fallback if it\n    // can't load); set 'node' to disable it or 'uws' to opt into uWebSockets.js.\n    useUWebSockets: false, // Deprecated alias for engine: 'uws'\n    requestTracking: {\n      enabled: true, // Enable by default for debugging\n    },\n    requestLogging: {\n      // Enabled in development; disabled in production where a per-request\n      // stdout write is a real throughput cost. Set explicitly to override.\n      enabled: process.env.NODE_ENV !== 'production',\n    },\n    errorBoundary: {\n      enabled: true, // Always enabled for safety\n    },\n  },\n  serviceDiscovery: {\n    enabled: false,\n    type: 'memory',\n    consulUrl: 'http://localhost:8500',\n    kubernetesNamespace: 'default',\n    healthCheckInterval: 30000,\n    retryAttempts: 3,\n  },\n  database: {},\n  modules: {\n    apiPrefix: '/api/', // Default prefix for module routes - set to '' to disable\n    cache: {\n      enabled: false, // Opt-in for better performance\n      defaultTtl: 300,\n      maxSize: 1000,\n      strategy: 'lru',\n    },\n    rateLimit: {\n      enabled: false, // Opt-in to avoid unnecessary overhead\n      defaultRequests: 100,\n      defaultWindow: 60000,\n      skipSuccessfulRequests: false,\n      skipFailedRequests: false,\n    },\n    validation: {\n      enabled: false,\n      stripUnknown: true,\n      abortEarly: false,\n      allowUnknown: false,\n    },\n    session: {\n      enabled: false, // Opt-in\n      store: 'memory',\n      // No hardcoded default: a shared shipped secret is insecure. Empty means\n      // \"configure one\" (mirrors csrf.secret below); the session layer should\n      // warn + generate a random secret when none is set, like auth/csrf do.\n      secret: '',\n      name: 'connect.sid',\n      rolling: false,\n      resave: false,\n      saveUninitialized: false,\n      cookie: {\n        maxAge: 86400000, // 24 hours in ms\n        httpOnly: true,\n        secure: false,\n        sameSite: 'lax',\n        path: '/',\n      },\n      proxy: false,\n      unset: 'keep',\n    },\n    autoDiscovery: {\n      enabled: true, // Enable by default for better DX\n      paths:\n        process.env.NODE_ENV === 'production'\n          ? ['./dist/modules', './dist/src/modules', './modules']\n          : ['./modules', './src/modules'],\n      patterns: ['**/*.module.{ts,js}', '**/index.{ts,js}', '**/*.config.{ts,js}'],\n      recursive: true,\n      loadingStrategy: 'eager',\n      watchForChanges: false, // Opt-in for development\n      ignorePatterns: ['**/*.test.{ts,js}', '**/*.spec.{ts,js}', '**/node_modules/**'],\n      loadOrder: 'dependency',\n      failOnError: false, // Graceful degradation\n      maxDepth: 5,\n    },\n  },\n  // File-based auto routing: import route files under ./src/routes on startup.\n  // Enabled by default; a no-op when the directory doesn't exist.\n  routing: true,\n  logging: {\n    level: 'info',\n    format: 'pretty',\n    enableColors: true,\n    enableTimestamp: true,\n    enableContext: true,\n    // Opt-in: appends JSON metadata tail in pretty logs. Off by default to avoid noise.\n    enableMetadata: false,\n    // Opt-in: includes (memory) perf info per log. Off by default to avoid the\n    // process.memoryUsage() call and the \"(210MB)\" suffix.\n    enablePerformance: false,\n    outputs: {\n      console: true,\n      file: {\n        enabled: false,\n        path: './logs/moro.log',\n        maxSize: '10MB',\n        maxFiles: 5,\n      },\n      webhook: {\n        enabled: false,\n        headers: {},\n      },\n    },\n  },\n  security: {\n    cors: {\n      enabled: false, // Opt-in for better performance\n      origin: '*',\n      methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n      allowedHeaders: ['Content-Type', 'Authorization'],\n      exposedHeaders: [],\n      credentials: false,\n      maxAge: 86400, // 24 hours\n      preflightContinue: false,\n    },\n    helmet: {\n      enabled: false, // Opt-in for better performance\n      // Simplified options (backward compatible)\n      contentSecurityPolicy: true,\n      hsts: true,\n      noSniff: true,\n      frameguard: true,\n      // Detailed options (use these for advanced configuration)\n      xFrameOptions: 'DENY',\n      xContentTypeOptions: true,\n      xXssProtection: true,\n      referrerPolicy: 'strict-origin-when-cross-origin',\n      strictTransportSecurity: {\n        maxAge: 31536000,\n        includeSubDomains: true,\n      },\n      xDownloadOptions: true,\n      xPermittedCrossDomainPolicies: true,\n    },\n    csrf: {\n      enabled: false, // Opt-in\n      secret: '',\n      tokenLength: 32,\n      cookieName: '_csrf',\n      headerName: 'x-csrf-token',\n      ignoreMethods: ['GET', 'HEAD', 'OPTIONS'],\n      sameSite: true,\n    },\n    csp: {\n      enabled: false, // Opt-in\n      directives: {\n        defaultSrc: [\"'self'\"],\n        scriptSrc: [\"'self'\"],\n        styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n        imgSrc: [\"'self'\", 'data:', 'https:'],\n        connectSrc: [\"'self'\"],\n        fontSrc: [\"'self'\"],\n        objectSrc: [\"'none'\"],\n        mediaSrc: [\"'self'\"],\n        frameSrc: [\"'none'\"],\n      },\n      reportOnly: false,\n      nonce: false,\n    },\n    rateLimit: {\n      global: {\n        enabled: false,\n        requests: 1000,\n        window: 60000,\n      },\n    },\n  },\n  external: {},\n  performance: {\n    compression: {\n      enabled: false, // Opt-in to avoid overhead\n      level: 6,\n      threshold: 1024,\n    },\n    circuitBreaker: {\n      enabled: false, // Opt-in to avoid overhead\n      failureThreshold: 5,\n      resetTimeout: 60000,\n      monitoringPeriod: 10000,\n    },\n    clustering: {\n      enabled: false,\n      workers: 1,\n      memoryPerWorkerGB: undefined,\n    },\n  },\n  websocket: {\n    enabled: false, // Opt-in - user must explicitly enable WebSockets\n  },\n};\n\n// Schema validation is now handled by config-validator.ts\n// This export is kept for backward compatibility only\n// Note: For actual validation, use validateConfig() from config-validator.ts directly\nexport const ConfigSchema = {\n  parse: (data: any): AppConfig => {\n    // Simple pass-through for backward compatibility\n    // Real validation happens in the config loading pipeline\n    return data as AppConfig;\n  },\n};\n\n// Re-export types for backward compatibility\nexport type {\n  AppConfig,\n  DeepPartial,\n  ServerConfig,\n  ServiceDiscoveryConfig,\n  DatabaseConfig,\n  ModuleDefaultsConfig,\n  LoggingConfig,\n  SecurityConfig,\n  ExternalServicesConfig,\n  PerformanceConfig,\n} from '../../types/config.js';\n\n// For backward compatibility with modules that expect schema objects\nexport const ServerConfigSchema = { parse: (data: any) => data };\nexport const ServiceDiscoveryConfigSchema = { parse: (data: any) => data };\nexport const DatabaseConfigSchema = { parse: (data: any) => data };\nexport const ModuleDefaultsConfigSchema = { parse: (data: any) => data };\nexport const LoggingConfigSchema = { parse: (data: any) => data };\nexport const SecurityConfigSchema = { parse: (data: any) => data };\nexport const ExternalServicesConfigSchema = { parse: (data: any) => data };\nexport const PerformanceConfigSchema = { parse: (data: any) => data };\n"]}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/core/config/schema.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAI/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,MAAM,EAAE;QACN,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;QACjB,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,6DAA6D;QAC7D,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,sDAAsD;QAClE,aAAa,EAAE,MAAM;QACrB,aAAa,EAAE,OAAO,EAAE,wDAAwD;QAChF,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,yDAAyD;QACzD,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,CAAC;SACX;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,EAAE;YACN,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,MAAM;aAC3B;SACF;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,cAAc,EAAE,KAAK,EAAE,qCAAqC;QAC5D,eAAe,EAAE;YACf,OAAO,EAAE,IAAI,EAAE,kCAAkC;SAClD;QACD,cAAc,EAAE;YACd,qEAAqE;YACrE,sEAAsE;YACtE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;SAC/C;QACD,aAAa,EAAE;YACb,OAAO,EAAE,IAAI,EAAE,4BAA4B;SAC5C;KACF;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,uBAAuB;QAClC,mBAAmB,EAAE,SAAS;QAC9B,mBAAmB,EAAE,KAAK;QAC1B,aAAa,EAAE,CAAC;KACjB;IACD,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,EAAE,0DAA0D;QAC9E,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB;QACD,SAAS,EAAE;YACT,OAAO,EAAE,KAAK,EAAE,uCAAuC;YACvD,eAAe,EAAE,GAAG;YACpB,aAAa,EAAE,KAAK;YACpB,sBAAsB,EAAE,KAAK;YAC7B,kBAAkB,EAAE,KAAK;SAC1B;QACD,UAAU,EAAE;YACV,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,KAAK;SACpB;QACD,OAAO,EAAE;YACP,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,KAAK,EAAE,QAAQ;YACf,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;YACb,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE;gBACN,MAAM,EAAE,QAAQ,EAAE,iBAAiB;gBACnC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,GAAG;aACV;YACD,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,MAAM;SACd;QACD,aAAa,EAAE;YACb,OAAO,EAAE,IAAI,EAAE,kCAAkC;YACjD,KAAK,EACH,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACnC,CAAC,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,CAAC;gBACvD,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC;YACpC,QAAQ,EAAE,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC;YAC5E,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,KAAK,EAAE,yBAAyB;YACjD,cAAc,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC;YAChF,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,KAAK,EAAE,uBAAuB;YAC3C,QAAQ,EAAE,CAAC;SACZ;KACF;IACD,6EAA6E;IAC7E,gEAAgE;IAChE,OAAO,EAAE,IAAI;IACb,OAAO,EAAE;QACP,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,QAAQ;QAChB,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,IAAI;QACnB,oFAAoF;QACpF,cAAc,EAAE,KAAK;QACrB,2EAA2E;QAC3E,uDAAuD;QACvD,iBAAiB,EAAE,KAAK;QACxB,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,CAAC;aACZ;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;aACZ;SACF;KACF;IACD,QAAQ,EAAE;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACjD,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK,EAAE,WAAW;YAC1B,iBAAiB,EAAE,KAAK;SACzB;QACD,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,EAAE,gCAAgC;YAChD,2CAA2C;YAC3C,qBAAqB,EAAE,IAAI;YAC3B,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,0DAA0D;YAC1D,aAAa,EAAE,MAAM;YACrB,mBAAmB,EAAE,IAAI;YACzB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,iCAAiC;YACjD,uBAAuB,EAAE;gBACvB,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;aACxB;YACD,gBAAgB,EAAE,IAAI;YACtB,6BAA6B,EAAE,IAAI;SACpC;QACD,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzC,QAAQ,EAAE,IAAI;SACf;QACD,GAAG,EAAE;YACH,OAAO,EAAE,KAAK,EAAE,SAAS;YACzB,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;gBACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;gBACrC,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,OAAO,EAAE,CAAC,QAAQ,CAAC;gBACnB,SAAS,EAAE,CAAC,QAAQ,CAAC;gBACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;YACD,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,KAAK;SACb;QACD,SAAS,EAAE;YACT,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;aACd;SACF;KACF;IACD,QAAQ,EAAE,EAAE;IACZ,WAAW,EAAE;QACX,WAAW,EAAE;YACX,OAAO,EAAE,KAAK,EAAE,2BAA2B;YAC3C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,KAAK,EAAE,iEAAiE;SACzF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,KAAK,EAAE,2BAA2B;YAC3C,gBAAgB,EAAE,CAAC;YACnB,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,KAAK;SACxB;QACD,UAAU,EAAE;YACV,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,CAAC;YACV,iBAAiB,EAAE,SAAS;SAC7B;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE,KAAK,EAAE,kDAAkD;KACnE;CACF,CAAC;AAEF,0DAA0D;AAC1D,sDAAsD;AACtD,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,CAAC,IAAS,EAAa,EAAE;QAC9B,iDAAiD;QACjD,yDAAyD;QACzD,OAAO,IAAiB,CAAC;IAC3B,CAAC;CACF,CAAC;AAgBF,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,KAAK,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC","sourcesContent":["// Core Configuration Schema for Moro Framework\n\nimport type { AppConfig } from '../../types/config.js';\n\n// Minimal default configuration - performance-focused, most things opt-in\nexport const DEFAULT_CONFIG: AppConfig = {\n  server: {\n    port: 3001,\n    host: 'localhost',\n    // 0 = unlimited. Historically defaulted to 1000/30000 but those values\n    // were VALIDATED-BUT-NEVER-APPLIED to any server, so the observed behavior\n    // has always been \"unlimited connections, no request timeout\". Now that\n    // both are actually wired through, keeping 0 preserves that behavior;\n    // enforcing the old numbers would silently break existing deployments.\n    // A user who sets either explicitly finally gets it applied.\n    maxConnections: 0,\n    timeout: 0, // deprecated alias for timeouts.request; 0 = disabled\n    bodySizeLimit: '10mb',\n    maxUploadSize: '100mb', // Separate limit for file uploads (multipart/form-data)\n    // Per-phase timeouts. keepAlive/headers were previously hardcoded in the\n    // Node server (5000/6000); they become documented, overridable defaults.\n    // idle/request default to 0 = the per-server default (engine: 120s idle /\n    // 300s request; Node: its built-in 5min requestTimeout).\n    timeouts: {\n      keepAlive: 5000,\n      headers: 6000,\n      idle: 0,\n      request: 0,\n    },\n    // Fine-grained limits. Only multipart carries defaults here (matching the\n    // parser's previous hardcodes); header/ws/high-water limits are left unset\n    // so each runtime uses its own documented default unless overridden.\n    limits: {\n      multipart: {\n        maxParts: 1000,\n        maxPartHeaderBytes: '16kb',\n      },\n    },\n    // engine: left unset so resolution can tell \"user chose it\" from \"default\".\n    // Unset resolves to 'moro' (Moro's native engine, Node.js fallback if it\n    // can't load); set 'node' to disable it or 'uws' to opt into uWebSockets.js.\n    useUWebSockets: false, // Deprecated alias for engine: 'uws'\n    requestTracking: {\n      enabled: true, // Enable by default for debugging\n    },\n    requestLogging: {\n      // Enabled in development; disabled in production where a per-request\n      // stdout write is a real throughput cost. Set explicitly to override.\n      enabled: process.env.NODE_ENV !== 'production',\n    },\n    errorBoundary: {\n      enabled: true, // Always enabled for safety\n    },\n  },\n  serviceDiscovery: {\n    enabled: false,\n    type: 'memory',\n    consulUrl: 'http://localhost:8500',\n    kubernetesNamespace: 'default',\n    healthCheckInterval: 30000,\n    retryAttempts: 3,\n  },\n  database: {},\n  modules: {\n    apiPrefix: '/api/', // Default prefix for module routes - set to '' to disable\n    cache: {\n      enabled: false, // Opt-in for better performance\n      defaultTtl: 300,\n      maxSize: 1000,\n      strategy: 'lru',\n    },\n    rateLimit: {\n      enabled: false, // Opt-in to avoid unnecessary overhead\n      defaultRequests: 100,\n      defaultWindow: 60000,\n      skipSuccessfulRequests: false,\n      skipFailedRequests: false,\n    },\n    validation: {\n      enabled: false,\n      stripUnknown: true,\n      abortEarly: false,\n      allowUnknown: false,\n    },\n    session: {\n      enabled: false, // Opt-in\n      store: 'memory',\n      // No hardcoded default: a shared shipped secret is insecure. Empty means\n      // \"configure one\" (mirrors csrf.secret below); the session layer should\n      // warn + generate a random secret when none is set, like auth/csrf do.\n      secret: '',\n      name: 'connect.sid',\n      rolling: false,\n      resave: false,\n      saveUninitialized: false,\n      cookie: {\n        maxAge: 86400000, // 24 hours in ms\n        httpOnly: true,\n        secure: false,\n        sameSite: 'lax',\n        path: '/',\n      },\n      proxy: false,\n      unset: 'keep',\n    },\n    autoDiscovery: {\n      enabled: true, // Enable by default for better DX\n      paths:\n        process.env.NODE_ENV === 'production'\n          ? ['./dist/modules', './dist/src/modules', './modules']\n          : ['./modules', './src/modules'],\n      patterns: ['**/*.module.{ts,js}', '**/index.{ts,js}', '**/*.config.{ts,js}'],\n      recursive: true,\n      loadingStrategy: 'eager',\n      watchForChanges: false, // Opt-in for development\n      ignorePatterns: ['**/*.test.{ts,js}', '**/*.spec.{ts,js}', '**/node_modules/**'],\n      loadOrder: 'dependency',\n      failOnError: false, // Graceful degradation\n      maxDepth: 5,\n    },\n  },\n  // File-based auto routing: import route files under ./src/routes on startup.\n  // Enabled by default; a no-op when the directory doesn't exist.\n  routing: true,\n  logging: {\n    level: 'info',\n    format: 'pretty',\n    enableColors: true,\n    enableTimestamp: true,\n    enableContext: true,\n    // Opt-in: appends JSON metadata tail in pretty logs. Off by default to avoid noise.\n    enableMetadata: false,\n    // Opt-in: includes (memory) perf info per log. Off by default to avoid the\n    // process.memoryUsage() call and the \"(210MB)\" suffix.\n    enablePerformance: false,\n    outputs: {\n      console: true,\n      file: {\n        enabled: false,\n        path: './logs/moro.log',\n        maxSize: '10MB',\n        maxFiles: 5,\n      },\n      webhook: {\n        enabled: false,\n        headers: {},\n      },\n    },\n  },\n  security: {\n    cors: {\n      enabled: false, // Opt-in for better performance\n      origin: '*',\n      methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n      allowedHeaders: ['Content-Type', 'Authorization'],\n      exposedHeaders: [],\n      credentials: false,\n      maxAge: 86400, // 24 hours\n      preflightContinue: false,\n    },\n    helmet: {\n      enabled: false, // Opt-in for better performance\n      // Simplified options (backward compatible)\n      contentSecurityPolicy: true,\n      hsts: true,\n      noSniff: true,\n      frameguard: true,\n      // Detailed options (use these for advanced configuration)\n      xFrameOptions: 'DENY',\n      xContentTypeOptions: true,\n      xXssProtection: true,\n      referrerPolicy: 'strict-origin-when-cross-origin',\n      strictTransportSecurity: {\n        maxAge: 31536000,\n        includeSubDomains: true,\n      },\n      xDownloadOptions: true,\n      xPermittedCrossDomainPolicies: true,\n    },\n    csrf: {\n      enabled: false, // Opt-in\n      secret: '',\n      tokenLength: 32,\n      cookieName: '_csrf',\n      headerName: 'x-csrf-token',\n      ignoreMethods: ['GET', 'HEAD', 'OPTIONS'],\n      sameSite: true,\n    },\n    csp: {\n      enabled: false, // Opt-in\n      directives: {\n        defaultSrc: [\"'self'\"],\n        scriptSrc: [\"'self'\"],\n        styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n        imgSrc: [\"'self'\", 'data:', 'https:'],\n        connectSrc: [\"'self'\"],\n        fontSrc: [\"'self'\"],\n        objectSrc: [\"'none'\"],\n        mediaSrc: [\"'self'\"],\n        frameSrc: [\"'none'\"],\n      },\n      reportOnly: false,\n      nonce: false,\n    },\n    rateLimit: {\n      global: {\n        enabled: false,\n        requests: 1000,\n        window: 60000,\n      },\n    },\n  },\n  external: {},\n  performance: {\n    compression: {\n      enabled: false, // Opt-in to avoid overhead\n      level: 6,\n      threshold: 1024,\n      maxInlineBytes: 16384, // compressed on the calling thread up to here, on the pool above\n    },\n    circuitBreaker: {\n      enabled: false, // Opt-in to avoid overhead\n      failureThreshold: 5,\n      resetTimeout: 60000,\n      monitoringPeriod: 10000,\n    },\n    clustering: {\n      enabled: false,\n      workers: 1,\n      memoryPerWorkerGB: undefined,\n    },\n  },\n  websocket: {\n    enabled: false, // Opt-in - user must explicitly enable WebSockets\n  },\n};\n\n// Schema validation is now handled by config-validator.ts\n// This export is kept for backward compatibility only\n// Note: For actual validation, use validateConfig() from config-validator.ts directly\nexport const ConfigSchema = {\n  parse: (data: any): AppConfig => {\n    // Simple pass-through for backward compatibility\n    // Real validation happens in the config loading pipeline\n    return data as AppConfig;\n  },\n};\n\n// Re-export types for backward compatibility\nexport type {\n  AppConfig,\n  DeepPartial,\n  ServerConfig,\n  ServiceDiscoveryConfig,\n  DatabaseConfig,\n  ModuleDefaultsConfig,\n  LoggingConfig,\n  SecurityConfig,\n  ExternalServicesConfig,\n  PerformanceConfig,\n} from '../../types/config.js';\n\n// For backward compatibility with modules that expect schema objects\nexport const ServerConfigSchema = { parse: (data: any) => data };\nexport const ServiceDiscoveryConfigSchema = { parse: (data: any) => data };\nexport const DatabaseConfigSchema = { parse: (data: any) => data };\nexport const ModuleDefaultsConfigSchema = { parse: (data: any) => data };\nexport const LoggingConfigSchema = { parse: (data: any) => data };\nexport const SecurityConfigSchema = { parse: (data: any) => data };\nexport const ExternalServicesConfigSchema = { parse: (data: any) => data };\nexport const PerformanceConfigSchema = { parse: (data: any) => data };\n"]}

package/dist/core/framework.d.ts

@@ -5,6 +5,7 @@ import { MoroEngineServer } from './http/moro-engine-server.js';
 import { MoroHttp2Server, Http2ServerOptions } from './http/http2-server.js';
 import { Container } from './utilities/index.js';
 import { WebSocketManager } from './networking/websocket-manager.js';
+import { type SSLConfigInput } from './http/utils/ssl-config.js';
 import { ModuleConfig } from '../types/module.js';
 import { MoroOptions as CoreMoroOptions } from '../types/core.js';
 import { WebSocketAdapter, WebSocketAdapterOptions } from './networking/websocket-adapter.js';
@@ -56,6 +57,12 @@ export declare class Moro extends EventEmitter {
     private usingEngine;
     private usingHttp2;
     private engineInfo;
+    /** The normalized server.ssl in effect (updated by reloadTLS) */
+    private sslConfig;
+    private tlsWatchers;
+    private tlsWatchTimer;
+    /** Hash of the last key/cert/CA bytes loaded from disk (skips no-op reloads) */
+    private tlsMaterialHash;
     private websocketSetupPromise;
     constructor(options?: MoroOptions);
     use(middleware: any): this;
@@ -116,6 +123,25 @@ export declare class Moro extends EventEmitter {
     setupFinalModuleHandler(): void;
     private setupWebSocketHandlers;
     private checkRateLimit;
+    /**
+     * Rotate the TLS certificate/key on the running listener. The new material
+     * is validated (files readable, PEM parses, key matches cert) BEFORE the
+     * listener is touched, so a half-written file or a wrong pair rejects and
+     * the current certificate keeps serving; connections that already
+     * handshaked are never affected. Policy fields (minVersion, mTLS flags,
+     * passphrase) and the CA carry over unless the update sets them.
+     */
+    reloadTLS(ssl?: SSLConfigInput): Promise<void>;
+    /**
+     * `server.ssl.watch`: reload the certificate when its files change on disk.
+     * The DIRECTORIES holding the files are watched (an ACME client or a
+     * Kubernetes secret mount replaces files by rename/symlink swap, which a
+     * per-file watcher misses), changes are debounced, unchanged bytes are
+     * ignored, and a failed reload is logged while the current certificate
+     * keeps serving. Watchers are non-persistent and closed by stopTlsWatch().
+     */
+    startTlsWatch(): void;
+    stopTlsWatch(): void;
     /**
      * Which HTTP server backs this app, which package provides it, and the
      * fallback reason when the native engine was requested but unavailable.

package/dist/core/framework.js

@@ -1,5 +1,8 @@
 import crypto from 'crypto';
+import * as fs from 'fs';
+import * as path from 'path';
 import { EventEmitter } from 'events';
+import { requireBuiltin } from './utilities/builtin.js';
 import { MoroHttpServer } from './http/index.js';
 import { UWebSocketsHttpServer } from './http/uws-http-server.js';
 import { MoroEngineServer } from './http/moro-engine-server.js';
@@ -11,7 +14,7 @@ import { WebSocketManager } from './networking/websocket-manager.js';
 import { CircuitBreaker } from './utilities/circuit-breaker.js';
 import { isPackageAvailable, loadNativeEngine, getNativeEngineLoadErrors, } from './utilities/package-utils.js';
 import { parseSizeToBytes } from './http/utils/size.js';
-import { normalizeSSLConfig, sslForNode, sslForUws, sslIsComplete, } from './http/utils/ssl-config.js';
+import { normalizeSSLConfig, sslForEngine, sslForNode, sslForUws, sslIsComplete, } from './http/utils/ssl-config.js';
 import { MoroEventBus } from './events/index.js';
 import { createFrameworkLogger, logger as globalLogger } from './logger/index.js';
 import { mergeWebSocketConfig, } from './networking/websocket-adapter.js';
@@ -38,6 +41,12 @@ export class Moro extends EventEmitter {
     usingHttp2 = false;
     // Which server actually booted (engine = native uWS-style engine)
     engineInfo = { server: 'node' };
+    /** The normalized server.ssl in effect (updated by reloadTLS) */
+    sslConfig = null;
+    tlsWatchers = [];
+    tlsWatchTimer;
+    /** Hash of the last key/cert/CA bytes loaded from disk (skips no-op reloads) */
+    tlsMaterialHash;
     // WebSocket initialization promise to handle async adapter detection
     websocketSetupPromise = null;
     constructor(options = {}) {
@@ -73,6 +82,7 @@ export class Moro extends EventEmitter {
         // projected per-runtime, so a single server.ssl / server.limits flows
         // everywhere regardless of which server boots.
         const ssl = normalizeSSLConfig(this.config.server?.ssl, options.https, this.logger);
+        this.sslConfig = ssl;
         const rt = this.buildRuntimeLimits();
         if (engineChoice.kind === 'engine') {
             try {
@@ -84,7 +94,10 @@ export class Moro extends EventEmitter {
                 if (typeof engineSurface?.serve === 'function' &&
                     typeof engineSurface?.respond === 'function') {
                     this.httpServer = new MoroEngineServer({
-                        ssl,
+                        // Project to the engine's own option names (key_file_name / key,
+                        // ...). The normalized shape's keyFile/certFile mean nothing to
+                        // serve(), which would throw and silently fall back to Node https.
+                        ...(ssl ? { ssl: sslForEngine(ssl) } : {}),
                         limits: rt,
                         maxBodySize: rt.maxBodySize,
                         maxUploadSize: rt.maxUploadSize,
@@ -124,7 +137,10 @@ export class Moro extends EventEmitter {
                 // Construction failed after a successful module load - unexpected, but
                 // never boot nothing: fall back to the Node.js http server.
                 const reason = error instanceof Error ? error.message : String(error);
-                this.logger.warn(`Native engine (${engineChoice.requested}) failed to initialize, falling back to Node.js http.Server. Error: ${reason}`, 'ServerInit');
+                // With TLS configured this is almost always a certificate/key problem,
+                // and a deployment tuned for the engine would otherwise run on a
+                // different server behind a warning buried among INFO lines.
+                this.logger[ssl ? 'error' : 'warn'](`Native engine (${engineChoice.requested}) failed to initialize, falling back to Node.js http.Server. Error: ${reason}`, 'ServerInit');
                 this.usingUWebSockets = false;
                 this.usingEngine = false;
                 this.engineInfo = { server: 'node', fallbackReason: reason };
@@ -987,6 +1003,162 @@ export class Moro extends EventEmitter {
         limit.count++;
         return true;
     }
+    /**
+     * Rotate the TLS certificate/key on the running listener. The new material
+     * is validated (files readable, PEM parses, key matches cert) BEFORE the
+     * listener is touched, so a half-written file or a wrong pair rejects and
+     * the current certificate keeps serving; connections that already
+     * handshaked are never affected. Policy fields (minVersion, mTLS flags,
+     * passphrase) and the CA carry over unless the update sets them.
+     */
+    async reloadTLS(ssl) {
+        const current = this.sslConfig;
+        if (!current) {
+            throw new Error('reloadTLS: this app was not started with TLS (server.ssl)');
+        }
+        if (this.usingUWebSockets) {
+            throw new Error('reloadTLS is not supported on the uWebSockets.js engine');
+        }
+        let next;
+        if (ssl) {
+            const update = normalizeSSLConfig(ssl, undefined, this.logger);
+            if (!update || !sslIsComplete(update)) {
+                throw new Error('reloadTLS: ssl must carry both a key and a certificate');
+            }
+            const hasCa = Boolean(update.ca || update.caFile);
+            next = {
+                // operator policy carries over...
+                passphrase: current.passphrase,
+                minVersion: current.minVersion,
+                requestCert: current.requestCert,
+                rejectUnauthorized: current.rejectUnauthorized,
+                // ...as does the CA when the update names none
+                ...(hasCa ? {} : { ca: current.ca, caFile: current.caFile }),
+                // and the update's own fields win (undefined entries dropped so they
+                // do not shadow the carried-over values)
+                ...Object.fromEntries(Object.entries(update).filter(([, v]) => v !== undefined)),
+            };
+        }
+        else {
+            if (!current.keyFile || !current.certFile) {
+                throw new Error('reloadTLS() with no argument re-reads the server.ssl key/cert files, but this app was configured with inline PEM - pass the new material');
+            }
+            next = { ...current };
+        }
+        // One consistent snapshot of the material, validated on every backend the
+        // same way (node's own parser: bad PEM / key-cert mismatch throw here).
+        const nodeSsl = sslForNode(next);
+        const tls = requireBuiltin('tls');
+        tls.createSecureContext(nodeSsl);
+        if (this.usingEngine) {
+            // Hand the engine the validated bytes rather than the paths, so it
+            // cannot read a different (newer, half-written) file than we checked.
+            const engineSsl = sslForEngine({
+                ...next,
+                key: nodeSsl.key,
+                cert: nodeSsl.cert,
+                ca: nodeSsl.ca,
+                keyFile: undefined,
+                certFile: undefined,
+                caFile: undefined,
+            });
+            this.httpServer.updateSsl(engineSsl);
+        }
+        else if (this.usingHttp2) {
+            this.httpServer.updateSsl(nodeSsl);
+        }
+        else {
+            this.httpServer.updateSsl(nodeSsl);
+        }
+        this.sslConfig = next;
+        this.tlsMaterialHash = MoroCoreTls.hashMaterial(nodeSsl);
+        this.logger.info('TLS certificate reloaded', 'TLS');
+    }
+    /**
+     * `server.ssl.watch`: reload the certificate when its files change on disk.
+     * The DIRECTORIES holding the files are watched (an ACME client or a
+     * Kubernetes secret mount replaces files by rename/symlink swap, which a
+     * per-file watcher misses), changes are debounced, unchanged bytes are
+     * ignored, and a failed reload is logged while the current certificate
+     * keeps serving. Watchers are non-persistent and closed by stopTlsWatch().
+     */
+    startTlsWatch() {
+        const ssl = this.sslConfig;
+        const watch = this.config.server?.ssl?.watch;
+        if (!ssl || !watch || this.tlsWatchers.length > 0)
+            return;
+        if (!ssl.keyFile || !ssl.certFile) {
+            this.logger.warn('server.ssl.watch needs keyFile/certFile paths - inline PEM cannot be watched', 'TLS');
+            return;
+        }
+        if (this.usingUWebSockets) {
+            this.logger.warn('server.ssl.watch is not supported on the uWebSockets.js engine', 'TLS');
+            return;
+        }
+        const debounceMs = typeof watch === 'object' && typeof watch.debounceMs === 'number' && watch.debounceMs > 0
+            ? watch.debounceMs
+            : 1000;
+        try {
+            this.tlsMaterialHash = MoroCoreTls.hashMaterial(sslForNode(ssl));
+        }
+        catch {
+            // unreadable now; the first change event will report properly
+        }
+        const files = [ssl.keyFile, ssl.certFile, ...(ssl.caFile ?? [])].map(f => path.resolve(f));
+        const schedule = () => {
+            if (this.tlsWatchTimer)
+                clearTimeout(this.tlsWatchTimer);
+            this.tlsWatchTimer = setTimeout(() => {
+                this.tlsWatchTimer = undefined;
+                let hash;
+                try {
+                    hash = MoroCoreTls.hashMaterial(sslForNode(this.sslConfig ?? ssl));
+                }
+                catch (err) {
+                    // Mid-rotation (one file replaced, the other not yet): wait for the
+                    // next event rather than logging a scary error per half-write.
+                    this.logger.debug(`TLS files not readable yet: ${err instanceof Error ? err.message : String(err)}`, 'TLS');
+                    return;
+                }
+                if (hash === this.tlsMaterialHash)
+                    return; // touched, not changed
+                this.reloadTLS().catch(err => {
+                    this.logger.error(`TLS reload failed; the current certificate keeps serving: ${err instanceof Error ? err.message : String(err)}`, 'TLS');
+                });
+            }, debounceMs);
+            this.tlsWatchTimer.unref?.();
+        };
+        for (const dir of new Set(files.map(f => path.dirname(f)))) {
+            try {
+                const watcher = fs.watch(dir, { persistent: false }, () => schedule());
+                watcher.on('error', err => {
+                    this.logger.warn(`TLS file watcher error on ${dir}: ${err.message}`, 'TLS');
+                });
+                this.tlsWatchers.push(watcher);
+            }
+            catch (err) {
+                this.logger.warn(`Cannot watch ${dir} for certificate changes: ${err instanceof Error ? err.message : String(err)}`, 'TLS');
+            }
+        }
+        if (this.tlsWatchers.length > 0) {
+            this.logger.info(`Watching TLS certificate files for changes (${files.length} files)`, 'TLS');
+        }
+    }
+    stopTlsWatch() {
+        if (this.tlsWatchTimer) {
+            clearTimeout(this.tlsWatchTimer);
+            this.tlsWatchTimer = undefined;
+        }
+        for (const watcher of this.tlsWatchers) {
+            try {
+                watcher.close();
+            }
+            catch {
+                // already closed
+            }
+        }
+        this.tlsWatchers = [];
+    }
     /**
      * Which HTTP server backs this app, which package provides it, and the
      * fallback reason when the native engine was requested but unavailable.
@@ -1214,14 +1386,20 @@ export class Moro extends EventEmitter {
         return this.circuitBreakers.get(key);
     }
     listen(port, host, callback) {
+        // Certificate watching (server.ssl.watch) starts once the listener is up
+        const userCb = typeof host === 'function' ? host : callback;
+        const onListening = () => {
+            this.startTlsWatch();
+            userCb?.();
+        };
         if (typeof host === 'function') {
-            this.httpServer.listen(port, host);
+            this.httpServer.listen(port, onListening);
         }
         else if (host) {
-            this.httpServer.listen(port, host, callback);
+            this.httpServer.listen(port, host, onListening);
         }
         else {
-            this.httpServer.listen(port, callback);
+            this.httpServer.listen(port, onListening);
         }
     }
     // Compatibility method for existing controllers
@@ -1238,4 +1416,15 @@ export class Moro extends EventEmitter {
         return undefined;
     }
 }
+/** TLS helpers kept out of the class body (no per-instance state). */
+const MoroCoreTls = {
+    hashMaterial(ssl) {
+        const h = crypto.createHash('sha256');
+        h.update(ssl.key);
+        h.update(ssl.cert);
+        for (const ca of ssl.ca ?? [])
+            h.update(ca);
+        return h.digest('hex');
+    },
+};
 //# sourceMappingURL=framework.js.map