@nestia/core 14.0.1 → 14.0.2

package/src/adaptors/WebSocketAdaptor.ts

@@ -21,20 +21,59 @@ import path from "path";
 import { Duplex } from "stream";
 import { WebSocketAcceptor } from "tgrid";
 import typia from "typia";
+import { fileURLToPath } from "url";
 import WebSocket from "ws";
 
 import { IWebSocketRouteReflect } from "../decorators/internal/IWebSocketRouteReflect";
+import { resolve_request_body } from "../decorators/internal/validate_request_body";
 import { ArrayUtil } from "../utils/ArrayUtil";
 import { VersioningStrategy } from "../utils/VersioningStrategy";
 import { RoutePathMatcher } from "./internal/RoutePathMatcher";
 
+/**
+ * Serves the `@WebSocketRoute()` methods of a NestJS application over
+ * WebSocket.
+ *
+ * Call {@link upgrade} after the application has been created. It finds the
+ * routes, checks them, and takes over the HTTP server's `upgrade` events. A
+ * handshake whose path matches no route is rejected with close code 1002.
+ *
+ * @evidence contracts/common.md#principled-implementation Routes are matched by paths built from the global prefix, the version, the module prefix, the controller path, and the method path, joined and normalized the same way for every combination; the adapter answers upgrade events itself through a `ws` server in no-server mode and removes its listeners when the HTTP server closes.
+ * @evidence contracts/common.md#clear-and-simple-design A class with one static factory, one `close` property, and the private handler; discovery, method checks, termination, and close reasons are module-private functions.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The global prefix, versioning options, and module graph are read from `app.config` and `app.container`, which NestJS keeps internal because `INestApplication` has no public accessor for them; this is the limitation of the adapter, not a fixture-specific branch.
+ * @evidence contracts/common.md#meaningful-documentation The comment states when to call it and what happens to an unmatched handshake.
+ * @evidence contracts/portability.md#os-neutral-implementation Diagnostic source URLs are converted by fileURLToPath before path.relative uses native paths; route matching uses HTTP path segments separately from filesystem paths. No filesystem case policy is inferred from the OS.
+ */
 export class WebSocketAdaptor {
+  /**
+   * Creates the adapter for the application: it visits every controller,
+   * validates the WebSocket routes, and starts listening for upgrade events.
+   *
+   * All route errors of the application are collected and thrown together, with
+   * the controller, method, source location, and reasons of each.
+   *
+   * @evidence contracts/common.md#principled-implementation Controller data-method descriptors are checked before any handshake is served, with child properties shadowing inherited methods and accessors never executed, and all defects are reported in one error, so a misconfigured route fails at start and not at the first client; source locations come from `get-function-location`, converted with `fileURLToPath` so a `file:` URL becomes the path on every platform.
+   * @evidence contracts/common.md#clear-and-simple-design One asynchronous factory that awaits the visitor and hands the operator list to the private constructor.
+   * @evidence contracts/common.md#prohibited-implementation-shortcuts The visitor reports through the same error path for every controller; no controller or route name is special-cased.
+   * @evidence contracts/common.md#meaningful-documentation The comment states the collected error report and the effect on the server.
+   * @evidence contracts/portability.md#os-neutral-implementation Diagnostic source URLs are converted by fileURLToPath before path.relative uses native paths; route matching uses HTTP path segments separately from filesystem paths. No filesystem case policy is inferred from the OS.
+   */
   public static async upgrade(
     app: INestApplication,
   ): Promise<WebSocketAdaptor> {
     return new this(app, await visitApplication(app));
   }
 
+  /**
+   * Stops the adapter: removes its listeners from the HTTP server and closes
+   * the WebSocket server.
+   *
+   * @evidence contracts/common.md#principled-implementation The listeners are removed before the `ws` server closes, so no upgrade event reaches a closing server, and the returned promise resolves when the server has closed.
+   * @evidence contracts/common.md#clear-and-simple-design An arrow property so the same function value can be registered and unregistered as the HTTP server's close listener.
+   * @evidence contracts/common.md#prohibited-implementation-shortcuts It releases exactly what the adapter registered.
+   * @evidence contracts/common.md#meaningful-documentation The comment states what is released.
+   * @evidence contracts/portability.md#os-neutral-implementation Diagnostic source URLs are converted by fileURLToPath before path.relative uses native paths; route matching uses HTTP path segments separately from filesystem paths. No filesystem case policy is inferred from the OS.
+   */
   public readonly close = async (): Promise<void> =>
     new Promise((resolve) => {
       this.http.off("close", this.close);
@@ -207,8 +246,7 @@ const visitController = async (props: {
     modulePrefix: props.modulePrefix,
   };
   for (const mk of getOwnPropertyNames(controller.prototype).filter(
-    (key) =>
-      key !== "constructor" && typeof controller.prototype[key] === "function",
+    (key) => key !== "constructor",
   )) {
     const errorMessages: string[] = [];
     visitMethod({
@@ -229,7 +267,9 @@ const visitController = async (props: {
         ...file,
         source: path.relative(
           process.cwd(),
-          file.source.replace("file:///", ""),
+          file.source.startsWith("file:")
+            ? fileURLToPath(file.source)
+            : file.source,
         ),
       });
     }
@@ -342,9 +382,12 @@ const visitMethod = (props: {
                 else if (p.category === "driver")
                   args.push(input.acceptor.getDriver());
                 else if (p.category === "header") {
-                  const error: Error | null = p.validate(input.acceptor.header);
-                  if (error !== null) throw error;
-                  args.push(input.acceptor.header);
+                  const result = resolve_request_body(
+                    p.validate,
+                    input.acceptor.header,
+                  );
+                  if (!result.success) throw result.error;
+                  args.push(result.data);
                 } else if (p.category === "param")
                   args.push(p.assert(input.params[p.field]!));
                 else if (p.category === "query") {
@@ -475,14 +518,23 @@ const MAX_CLOSE_REASON_BYTES: number = 123;
 
 const wrapPaths = (value: string[]) => (value.length === 0 ? [""] : value);
 const getOwnPropertyNames = (prototype: any): string[] => {
-  const result: Set<string> = new Set();
-  const iterate = (m: any) => {
-    if (m === null) return;
-    for (const k of Object.getOwnPropertyNames(m)) result.add(k);
-    iterate(Object.getPrototypeOf(m));
-  };
-  iterate(prototype);
-  return Array.from(result);
+  const visited: Set<string> = new Set();
+  const result: string[] = [];
+  for (
+    let current = prototype;
+    current !== null;
+    current = Object.getPrototypeOf(current)
+  )
+    for (const key of Object.getOwnPropertyNames(current)) {
+      if (visited.has(key)) continue;
+      visited.add(key);
+      if (
+        typeof Object.getOwnPropertyDescriptor(current, key)?.value ===
+        "function"
+      )
+        result.push(key);
+    }
+  return result;
 };
 
 interface Entry<T> {

package/src/adaptors/internal/external_context.ts

@@ -1,5 +1,12 @@
 import { ContextId, ContextIdFactory, NestContainer } from "@nestjs/core";
+import { ExternalExceptionFilterContext } from "@nestjs/core/exceptions/external-exception-filter-context";
+import { GuardsConsumer, GuardsContextCreator } from "@nestjs/core/guards";
 import { ExternalContextCreator } from "@nestjs/core/helpers/external-context-creator";
+import {
+  InterceptorsConsumer,
+  InterceptorsContextCreator,
+} from "@nestjs/core/interceptors";
+import { PipesConsumer, PipesContextCreator } from "@nestjs/core/pipes";
 import { REQUEST_CONTEXT_ID } from "@nestjs/core/router/request/request-constants";
 
 /**
@@ -15,12 +22,36 @@ import { REQUEST_CONTEXT_ID } from "@nestjs/core/router/request/request-constant
 export const create_external_context_creator = (
   container: NestContainer,
   moduleKey: string,
-): ExternalContextCreator => {
-  const creator: ExternalContextCreator =
-    ExternalContextCreator.fromContainer(container);
-  creator.getContextModuleKey = () => moduleKey;
-  return creator;
-};
+): ExternalContextCreator => new ControllerContextCreator(container, moduleKey);
+
+class ControllerContextCreator extends ExternalContextCreator {
+  public constructor(
+    private readonly owner: NestContainer,
+    private readonly moduleKey: string,
+  ) {
+    super(
+      new GuardsContextCreator(owner, owner.applicationConfig),
+      new GuardsConsumer(),
+      new InterceptorsContextCreator(owner, owner.applicationConfig),
+      new InterceptorsConsumer(),
+      owner.getModules(),
+      new PipesContextCreator(owner, owner.applicationConfig),
+      new PipesConsumer(),
+      new ExternalExceptionFilterContext(owner, owner.applicationConfig),
+    );
+  }
+
+  public override getContextModuleKey(): string {
+    return this.moduleKey;
+  }
+
+  public override registerRequestProvider<T = any>(
+    request: T,
+    contextId: ContextId,
+  ): void {
+    this.owner.registerRequestProvider(request, contextId);
+  }
+}
 
 /**
  * The context a request-scoped provider is built in for this request, the one

package/src/decorators/DynamicModule.ts

@@ -11,6 +11,11 @@ import { load_controllers } from "./internal/load_controller";
  * controller classes dynamically just by specifying their directory path.
  *
  * @author Jeongho Nam - https://github.com/samchon
+ * @evidence contracts/common.md#principled-implementation The namespace builds a Nest module whose controllers are found on disk at startup instead of listed in code, using the shared loader.
+ * @evidence contracts/common.md#clear-and-simple-design One function that delegates discovery to `load_controllers` and decorates a class with the result.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Paths are caller input, and no controller name is assumed.
+ * @evidence contracts/common.md#meaningful-documentation The comment describes the purpose and the path forms.
+ * @evidence contracts/portability.md#os-neutral-implementation Controller discovery delegates native path handling to SourceFinder and conversion of import paths to file URLs to load_controllers; module metadata contains controller constructors rather than filesystem identities.
  */
 export namespace DynamicModule {
   /**
@@ -23,7 +28,14 @@ export namespace DynamicModule {
    *
    * @param path Path of controllers
    * @param metadata Additional metadata except controllers
+   * @param isTsNode Select TypeScript source files explicitly; otherwise
+   *   compiled JavaScript is tried first, with a source fallback under `ttsx`.
    * @returns Module instance
+   * @evidence contracts/common.md#principled-implementation Controllers are loaded from the paths, given as a path, a list, or include and exclude lists, and then a class decorated with `@Module` and those controllers is returned, so Nest treats the result as an ordinary module.
+   * @evidence contracts/common.md#clear-and-simple-design A short function whose discovery details live in `load_controllers`.
+   * @evidence contracts/common.md#prohibited-implementation-shortcuts It calls Nest's public `Module` decorator with the metadata; nothing is patched.
+   * @evidence contracts/common.md#meaningful-documentation The comment documents the path forms and the `isTsNode` option.
+   * @evidence contracts/portability.md#os-neutral-implementation Controller discovery delegates native path handling to SourceFinder and conversion of import paths to file URLs to load_controllers; module metadata contains controller constructors rather than filesystem identities.
    */
   export async function mount(
     path: string | string[] | { include: string[]; exclude?: string[] },

package/src/decorators/EncryptedBody.ts

@@ -20,22 +20,30 @@ import { validate_request_body } from "./internal/validate_request_body";
  * Encrypted body decorator.
  *
  * `EncryptedBody` is a decorator function getting `application/json` typed data
- * from request body which has been encrypted by AES-128/256 algorithm. Also,
- * `EncryptedBody` validates the request body data type through
- * [typia](https://github.com/samchon/typia) ad the validation speed is maximum
- * 15,000x times faster than `class-validator`.
+ * from request body which has been encrypted by AES-128/192/256 algorithm.
+ * Also, `EncryptedBody` validates the request body data type through
+ * [typia](https://github.com/samchon/typia) using the declared TypeScript
+ * type.
  *
  * For reference, when the request body data is not following the promised type
  * `T`, `BadRequestException` error (status code: 400) would be thrown. Also,
- * `EncryptedRoute` decrypts request body using those options.
+ * This decorator decrypts the request body using these options.
  *
- * - AES-128/256
+ * - AES-128/192/256
  * - CBC mode
  * - PKCS #5 Padding
  * - Base64 Encoding
  *
+ * Successful validator data becomes the decorated argument, including copies
+ * returned by clone validators after decryption and JSON parsing.
+ *
  * @author Jeongho Nam - https://github.com/samchon
  * @returns Parameter decorator
+ * @evidence contracts/common.md#principled-implementation The body must be `text/plain` ciphertext; it is decrypted with the password of the controller or module, the plain text is parsed as JSON and validated by the transformed validator, and a decryption or parse failure becomes a 400 with one fixed message that does not echo the ciphertext and does not tell the two failures apart; a key or initialization vector the cipher itself refuses is the server's configuration, independent of the request, and is thrown as it is.
+ * @evidence contracts/common.md#clear-and-simple-design One parameter decorator composes shared text reading, password lookup and validator resolution; the successfully resolved data becomes the argument without repeating validation or changing decryption error handling.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The algorithm comes from `AesPkcs5` of the fetcher, the same one the client uses, and no key is embedded; a missing password is an error rather than a plain pass-through.
+ * @evidence contracts/common.md#meaningful-documentation The comment describes the protocol and the requirement of a password on the controller or module, and the private decode helper documents why every decryption failure collapses into one response.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation Ciphertext parsing, AES decryption and request validation operate on HTTP values, with no native filesystem or subprocess boundary.
  */
 export function EncryptedBody<T>(
   validator?: IRequestBodyValidator<T>,
@@ -70,9 +78,9 @@ export function EncryptedBody<T>(
 
     // PARSE AND VALIDATE DATA
     const data: any = decode(body, password.key, password.iv);
-    const error: Error | null = checker(data);
-    if (error !== null) throw error;
-    return data;
+    const result = checker.resolve(data);
+    if (!result.success) throw result.error;
+    return result.data;
   })();
 }
 
@@ -89,9 +97,13 @@ export function EncryptedBody<T>(
  *
  * Both failure modes must therefore collapse into one indistinguishable
  * `BadRequestException` (identical status, message, and body). Only the
- * downstream type validation of an already-parsed body may report its own
- * distinct error, because reaching it requires plaintext the attacker cannot
- * forge without already knowing it.
+ * downstream type validation of an already-parsed body reports its own distinct
+ * error. AES-CBC provides no authentication; collapsing parse and padding
+ * errors does not establish ciphertext authenticity.
+ *
+ * A key or initialization vector the cipher refuses is thrown as it is. It says
+ * nothing about the body, so it opens no oracle, and it is a defect of the
+ * server's configuration that a 400 would blame on the client.
  *
  * @internal
  */
@@ -99,10 +111,22 @@ const decode = (body: string, key: string, iv: string): unknown => {
   try {
     return JSON.parse(AesPkcs5.decrypt(body, key, iv));
   } catch (exp) {
-    if (exp instanceof Error)
+    // A password the cipher itself refuses is the server's configuration, which
+    // no request body can influence, so it is no oracle and no client's fault.
+    if (exp instanceof Error && PASSWORD_ERRORS.has((exp as any).code))
+      throw exp;
+    else if (exp instanceof Error)
       throw new BadRequestException(
         "Failed to decrypt the request body. Check your body content or encryption password.",
       );
     else throw exp;
   }
 };
+
+/** The error codes of a key or an initialization vector the cipher refuses. */
+const PASSWORD_ERRORS: Set<unknown> = new Set([
+  "ERR_INVALID_ARG_TYPE",
+  "ERR_CRYPTO_INVALID_IV",
+  "ERR_CRYPTO_INVALID_KEYLEN",
+  "ERR_CRYPTO_UNKNOWN_CIPHER",
+]);

package/src/decorators/EncryptedController.ts

@@ -7,7 +7,7 @@ import { ENCRYPTION_CONTROLLER_METADATA_KEY } from "./internal/EncryptedConstant
  * Encrypted controller.
  *
  * `EncryptedController` is an extension of the {@link nest.Controller} class
- * decorator function who configures encryption password of the AES-128/256
+ * decorator function who configures encryption password of the AES-128/192/256
  * algorithm. The encryption algorithm and password would be used by
  * {@link EncryptedRoute} and {@link EncryptedBody} to encrypt the request and
  * response body of the HTTP protocol.
@@ -28,6 +28,11 @@ import { ENCRYPTION_CONTROLLER_METADATA_KEY } from "./internal/EncryptedConstant
  * @param path Path of the HTTP request
  * @param password Encryption password or its getter function
  * @returns Class decorator
+ * @evidence contracts/common.md#principled-implementation The decorator stores the password as metadata on the class and then applies Nest's `Controller(path)`, so the encrypted decorators can find the password by reading the class.
+ * @evidence contracts/common.md#clear-and-simple-design One decorator that composes a metadata write with the standard decorator.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts It uses Nest's public `Controller` decorator and the reflect metadata API.
+ * @evidence contracts/common.md#meaningful-documentation The comment states the password forms and the encrypted decorators it enables.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation Controller paths are HTTP routing metadata and passwords are in-memory values; neither is a native filesystem path.
  */
 export function EncryptedController(
   path: string,

package/src/decorators/EncryptedModule.ts

@@ -9,9 +9,9 @@ import { load_controllers } from "./internal/load_controller";
  * Encrypted module.
  *
  * `EncryptedModule` is an extension of the {@link Module} class decorator
- * function who configures encryption password of the AES-128/256 algorithm. The
- * encryption algorithm and password would be used by {@link EncryptedRoute} and
- * {@link EncryptedBody} to encrypt the request and response bod of the HTTP
+ * function who configures encryption password of the AES-128/192/256 algorithm.
+ * The encryption algorithm and password would be used by {@link EncryptedRoute}
+ * and {@link EncryptedBody} to encrypt the request and response bod of the HTTP
  * protocol.
  *
  * By using this `EncryptedModule` decorator function, all of the
@@ -38,6 +38,11 @@ import { load_controllers } from "./internal/load_controller";
  * @param metadata Module configuration metadata
  * @param password Encryption password or its getter function
  * @returns Class decorator
+ * @evidence contracts/common.md#principled-implementation A visited set breaks import cycles, the controllers of each visited module get the password as metadata, asynchronous modules are awaited through the same promise Nest awaits, and a forward reference is resolved once its class exists.
+ * @evidence contracts/common.md#clear-and-simple-design One decorator whose traversal is a private function; the dynamic-module helper is in the merged namespace.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The traversal uses the public metadata keys of Nest modules; no module name is special-cased.
+ * @evidence contracts/common.md#meaningful-documentation The comment states which module shapes are followed.
+ * @evidence contracts/portability.md#os-neutral-implementation The decorator traverses Nest module metadata in memory; its dynamic helper delegates native paths and file-URL imports to load_controllers instead of composing platform-specific import strings.
  */
 export function EncryptedModule(
   metadata: Parameters<typeof Module>[0],
@@ -49,6 +54,16 @@ export function EncryptedModule(
   };
 }
 
+/**
+ * Helpers of {@link EncryptedModule}, namely `dynamic`, which builds an
+ * encrypted module from controller paths.
+ *
+ * @evidence contracts/common.md#principled-implementation `dynamic` loads the controllers with the shared loader, wraps an object password into a closure, and returns a class decorated by `EncryptedModule`.
+ * @evidence contracts/common.md#clear-and-simple-design One function that reuses the loader and the decorator.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Paths and password are caller input.
+ * @evidence contracts/common.md#meaningful-documentation The comment documents the path forms and the password argument.
+ * @evidence contracts/portability.md#os-neutral-implementation The decorator traverses Nest module metadata in memory; its dynamic helper delegates native paths and file-URL imports to load_controllers instead of composing platform-specific import strings.
+ */
 export namespace EncryptedModule {
   /**
    * Dynamic encrypted module.

package/src/decorators/EncryptedRoute.ts

@@ -29,22 +29,26 @@ import { route_error } from "./internal/route_error";
  * Encrypted router decorator functions.
  *
  * `EncryptedRoute` is a module containing router decorator functions which
- * encrypts response body data through AES-128/256 encryption. Furthermore, they
- * can boost up JSON string conversion speed about 50x times faster than
- * `class-transformer`, even type safe through
- * [typia](https://github.com/samchon/typia).
+ * encrypts response body data through AES-128/192/256 encryption after
+ * serializing it with a [typia](https://github.com/samchon/typia) function
+ * generated from the declared return type.
  *
- * For reference, if you try to invalid data that is not following the promised
- * type `T`, 500 internal server error would be thrown. Also, as
- * `EncryptedRoute` composes JSON string through `typia.assertStringify<T>()`
- * function, it is not possible to modify response data through interceptors.
+ * The default assert serializer rejects a response outside the declared type
+ * with a 500 error. The configured stringify mode chooses the validation policy
+ * before encryption; `validate.log` logs failures and serializes the original
+ * value. Interceptors running afterwards receive ciphertext.
  *
- * - AES-128/256
+ * - AES-128/192/256
  * - CBC mode
  * - PKCS #5 Padding
  * - Base64 Encoding
  *
  * @author Jeongho Nam - https://github.com/samchon
+ * @evidence contracts/common.md#principled-implementation Each route method decorates Nest's router decorator with an interceptor that serializes the value as the transform chose, encrypts it with the password of the controller or module, and answers `text/plain` on success only, so an error keeps its own JSON type.
+ * @evidence contracts/common.md#clear-and-simple-design One generator function creates the five HTTP-method decorators, and the interceptor and the router table are module-private.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The password lookup and the serializer come from shared modules; the loop after the namespace copies the marker properties of typia's stringify functions onto the five decorators as the transform expects, which mutates only these exported functions.
+ * @evidence contracts/common.md#meaningful-documentation The comment documents the decorator family and its password requirement.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation Route paths and serialized ciphertext are HTTP protocol values; response interception does not access native files or launch a process.
  */
 export namespace EncryptedRoute {
   /**
@@ -56,7 +60,7 @@ export namespace EncryptedRoute {
   export const Get = Generator("Get");
 
   /**
-   * Encrypted router decorator function for the GET method.
+   * Encrypted router decorator function for the POST method.
    *
    * @param paths Path(s) of the HTTP request
    * @returns Method decorator
@@ -93,7 +97,7 @@ export namespace EncryptedRoute {
    * If you've configured the transformation option to `validate.log` in the
    * `tsconfig.json` file, then the error log information of the response
    * validation failure would be logged through this function instead of
-   * throwing the 400 bad request error.
+   * throwing the 500 internal server error.
    *
    * By the way, be careful. If you've configured the response transformation
    * option to be `validate.log`, client may get wrong response data. Therefore,
@@ -101,6 +105,11 @@ export namespace EncryptedRoute {
    *
    * @default console.log
    * @param func Logger function
+   * @evidence contracts/common.md#principled-implementation It stores the logger in `TypedRoute`, which owns the single logger both route families use.
+   * @evidence contracts/common.md#clear-and-simple-design A one-line delegation, so the logger has one owner.
+   * @evidence contracts/common.md#prohibited-implementation-shortcuts It changes only the logger variable.
+   * @evidence contracts/common.md#meaningful-documentation The comment states which validate mode uses the logger.
+   * @evidenceExclude contracts/portability.md#os-neutral-implementation Route paths and serialized ciphertext are HTTP protocol values; response interception does not access native files or launch a process.
    */
   export function setValidateErrorLogger(
     func: (log: IValidateErrorLog) => void,

package/src/decorators/HumanRoute.ts

@@ -13,6 +13,11 @@ import { SwaggerCustomizer } from "./SwaggerCustomizer";
  *
  * @author Jeongho Nam - https://github.com/samchon
  * @returns Method decorator
+ * @evidence contracts/common.md#principled-implementation The decorator marks the operation with the `x-samchon-human` extension through `SwaggerCustomizer`, so the generated document carries the mark without another metadata path.
+ * @evidence contracts/common.md#clear-and-simple-design One call to the customizer.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The extension name is the documented contract of the generated document.
+ * @evidence contracts/common.md#meaningful-documentation The comment states that a marked API is left out of the LLM function calling schema.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation The OpenAPI extension is an in-memory document property and has no native path or process representation.
  */
 export function HumanRoute(): MethodDecorator {
   return SwaggerCustomizer((props) => {

package/src/decorators/McpRoute.ts

@@ -25,27 +25,28 @@ import { validate_request_body } from "./internal/validate_request_body";
  * the {@link INestApplication} instance at bootstrap. The decorator alone only
  * stores reflection metadata.
  *
- * @author wildduck - https://github.com/wildduck2
- * @example
- *   ```typescript
- *   import core from "@nestia/core";
+ * Example:
+ *
+ * ```typescript
+ * import core from "@nestia/core";
  *
- *   @Controller()
- *   export class WeatherController {
- *     /**
- *      * Return current weather for a city.
- *      *
- *      * @title Get weather
- *      *\/
- *     @core.McpRoute("get_weather")
- *     public async get(
- *       @core.McpRoute.Params() params: { city: string },
- *     ): Promise<{ temp: number }> {
- *       return { temp: 22 };
- *     }
+ * @Controller()
+ * export class WeatherController {
+ *   /**
+ *    * Return current weather for a city.
+ *    *
+ *    * @title Get weather
+ *    *\/
+ *   @core.McpRoute("get_weather")
+ *   public async get(
+ *     @core.McpRoute.Params() params: { city: string },
+ *   ): Promise<{ temp: number }> {
+ *     return { temp: 22 };
  *   }
- *   ```;
+ * }
+ * ```
  *
+ * @author wildduck - https://github.com/wildduck2
  * @param name Unique tool identifier exposed to MCP clients via `tools/list`.
  * @returns Method decorator.
  */
@@ -78,6 +79,16 @@ export function McpRoute(input: string | McpRoute.IConfig): MethodDecorator {
   };
 }
 
+/**
+ * Types and parameter decorator of {@link McpRoute}: the tool configuration and
+ * `McpRoute.Params`.
+ *
+ * @evidence contracts/common.md#principled-implementation Tool metadata retains its definition and default empty-object schema. Params records its argument position and shared checker; successful assert/validate data becomes the tool argument, while errors retain InvalidParams mapping and legacy error-only callbacks retain raw input. The adaptor reads the same metadata field names when registering tools.
+ * @evidence contracts/common.md#clear-and-simple-design Two decorators and one config type in one namespace, sharing one `emplace` helper for parameter metadata.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts It uses the reflect metadata API and no NestJS internals; the input schema is filled by the generator, not hardcoded here.
+ * @evidence contracts/common.md#meaningful-documentation The comment documents the two call forms, the configuration fields, and the parameter decorator.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation Tool schemas and parameter metadata are protocol data held on controller methods, without native filesystem access.
+ */
 export namespace McpRoute {
   /**
    * Configuration object emitted by the nestia transformer at compile time.
@@ -104,7 +115,8 @@ export namespace McpRoute {
    * `tools/call` request against the TypeScript type `T` using typia. A failed
    * validation surfaces to the client as a JSON-RPC `-32602` (`InvalidParams`)
    * error with structured diagnostics, giving the LLM precise feedback to
-   * self-correct.
+   * self-correct. Successful assert and validate data becomes the tool
+   * argument, so clone validators can supply a copy of the incoming arguments.
    *
    * MCP tools accept exactly one arguments object; applying this decorator more
    * than once on a single method is a compile-time error. The decorated type

package/src/decorators/PlainBody.ts

@@ -15,7 +15,8 @@ import { validate_request_body } from "./internal/validate_request_body";
  * Plain body decorator.
  *
  * `PlainBody` is a decorator function getting full body text from the HTTP
- * request.
+ * request. The transformed assertion's successful string is the decorated
+ * argument.
  *
  * If you adjust the regular {@link Body} decorator function to the body
  * parameter, you can't get the full body text because the {@link Body} tries to
@@ -32,10 +33,18 @@ import { validate_request_body } from "./internal/validate_request_body";
  *
  * @author Jeongho Nam - https://github.com/samchon
  * @returns Parameter decorator
+ * @evidence contracts/common.md#principled-implementation The decorator reads text only for text/plain requests; an installed assertion resolves the argument value through the shared body checker, while no assertion retains raw text. Absent input is accepted when its assertion accepts undefined and otherwise continues through the media-type error path.
+ * @evidence contracts/common.md#clear-and-simple-design One parameter decorator shares body absence, media recognition, text reading and successful-value resolution with the other request decorators.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Text comes from the request parser or shared raw-body reader, not a fabricated value; no runtime controller or body identity is special-cased.
+ * @evidence contracts/common.md#meaningful-documentation The comment distinguishes full body text from JSON parsing and states that the transformed assertion supplies the argument.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation HTTP text bodies and decoded string values carry no native filesystem or subprocess boundary.
  */
 export function PlainBody(): ParameterDecorator;
 
-/** @internal */
+/**
+ * Registers the transformed text assertion and binds its successful value. The
+ * public overload accepts no runtime assertion; the transform supplies it.
+ */
 export function PlainBody(
   assert?: (input: unknown) => string,
 ): ParameterDecorator {
@@ -52,17 +61,18 @@ export function PlainBody(
     const request: express.Request | FastifyRequest = context
       .switchToHttp()
       .getRequest();
-    if (
-      is_request_body_undefined(request) &&
-      (checker ?? (() => null))(undefined as any) === null
-    )
-      return undefined;
-    else if (!is_media_type(request.headers["content-type"], "text/plain"))
+    if (is_request_body_undefined(request)) {
+      if (checker === null) return undefined;
+      const result = checker.resolve(undefined);
+      if (result.success) return result.data;
+    }
+    if (!is_media_type(request.headers["content-type"], "text/plain"))
       throw new BadRequestException(`Request body type is not "text/plain".`);
     const value: string = await get_text_body(request);
     if (checker) {
-      const error: Error | null = checker(value);
-      if (error !== null) throw error;
+      const result = checker.resolve(value);
+      if (!result.success) throw result.error;
+      return result.data;
     }
     return value;
   })();

package/src/decorators/SwaggerCustomizer.ts

@@ -13,6 +13,11 @@ import { OpenApi } from "@typia/interface";
  * @author Jeongho Nam - https://github.com/samchon
  * @param closure Callback function which can customize the swagger data
  * @returns Method decorator
+ * @evidence contracts/common.md#principled-implementation Each use appends the closure to an array of metadata owned by the method, created on first use, so several customizers on one method run in order.
+ * @evidence contracts/common.md#clear-and-simple-design One decorator function with one metadata list per method.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts It uses the reflect metadata API; the closure is the caller's.
+ * @evidence contracts/common.md#meaningful-documentation The comment documents that the closure receives the document, the operation, and lookup helpers.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation The callback and endpoint accessors edit an OpenAPI document; their path fields are HTTP routes rather than native file identities.
  */
 export function SwaggerCustomizer(
   closure: (props: SwaggerCustomizer.IProps) => unknown,
@@ -44,6 +49,16 @@ export function SwaggerCustomizer(
     return descriptor;
   };
 }
+/**
+ * Types of {@link SwaggerCustomizer}: the properties the closure receives and
+ * the endpoint accessors.
+ *
+ * @evidence contracts/common.md#principled-implementation The types describe the document, the current operation, and lookups by function or by path and method, which is what a customization needs to edit the generated document.
+ * @evidence contracts/common.md#clear-and-simple-design Three types with no runtime members.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts It contains types only.
+ * @evidence contracts/common.md#meaningful-documentation Each type and member documents its meaning.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation The callback and endpoint accessors edit an OpenAPI document; their path fields are HTTP routes rather than native file identities.
+ */
 export namespace SwaggerCustomizer {
   /**
    * Properties for the `SwaggerCustomizer` decorator.