@open-core/framework 1.0.4-beta.1 → 1.0.5-beta.2

package/dist/server/decorators/onFiveMEvent.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnFiveMEvent = OnFiveMEvent;
-const metadata_server_keys_1 = require("../system/metadata-server.keys");
-/**
- * Listen to FiveM events server-side, check the list below
- *
- * https://docs.fivem.net/docs/scripting-reference/events/server-events/
- */
-function OnFiveMEvent(event) {
-    return (target, propertyKey) => {
-        Reflect.defineMetadata(metadata_server_keys_1.METADATA_KEYS.FIVEM_EVENT, { event }, target, propertyKey);
-    };
-}

package/dist/server/decorators/onFrameworkEvent.d.ts

@@ -1,22 +0,0 @@
-import type { CoreEventMap } from '../types/core-events';
-/**
- * Method decorator used to register a method as a listener for an internal OpenCore framework event.
- *
- * When the specified framework event is emitted, this method will be automatically triggered
- * with the arguments provided by the event payload.
- *
- * @param event - The name of the core event to listen for (typed strictly to `CoreEventMap`).
- *
- *
- * ```ts
- * @Server.Controller()
- * export class SystemController {
- *
- *   @OnFrameworkEvent('server:ready')
- *   public onServerStart() {
- *     console.log('OpenCore Framework is ready!')
- *   }
- * }
- * ```
- */
-export declare function OnFrameworkEvent<K extends keyof CoreEventMap>(event: K): (target: any, propertyKey: string) => void;

package/dist/server/decorators/onFrameworkEvent.js

@@ -1,29 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnFrameworkEvent = OnFrameworkEvent;
-const metadata_server_keys_1 = require("../system/metadata-server.keys");
-/**
- * Method decorator used to register a method as a listener for an internal OpenCore framework event.
- *
- * When the specified framework event is emitted, this method will be automatically triggered
- * with the arguments provided by the event payload.
- *
- * @param event - The name of the core event to listen for (typed strictly to `CoreEventMap`).
- *
- *
- * ```ts
- * @Server.Controller()
- * export class SystemController {
- *
- *   @OnFrameworkEvent('server:ready')
- *   public onServerStart() {
- *     console.log('OpenCore Framework is ready!')
- *   }
- * }
- * ```
- */
-function OnFrameworkEvent(event) {
-    return (target, propertyKey) => {
-        Reflect.defineMetadata(metadata_server_keys_1.METADATA_KEYS.CORE_EVENT, { event }, target, propertyKey);
-    };
-}

package/dist/server/decorators/onNet.d.ts

@@ -1,58 +0,0 @@
-import type { z } from 'zod';
-import type { Player } from '../entities/player';
-export interface NetEventOptions {
-    eventName: string;
-    schema?: z.ZodType;
-    paramTypes?: any;
-}
-type ServerNetHandler<TArgs extends any[] = any[]> = (player: Player, ...args: TArgs) => any;
-/**
- * Registers a server-side network event handler.
- *
- * The decorated method is invoked when the client triggers
- * `emitNet(eventName, ...)`.
- *
- * ## Player Injection
- * The first argument of the handler **must be `Player`** and is automatically
- * replaced with a `Server.Player` instance representing the client that
- * fired the event. You do NOT need to read `source` manually.
- *
- * ## Auto-Validation
- * Arguments after `Player` are automatically validated based on their TypeScript types:
- * - `string` → `z.string()`
- * - `number` → `z.number()`
- * - `boolean` → `z.boolean()`
- * - `any[]` → `z.array(z.any())` (array content not validated)
- *
- * ## Explicit Schema (Advanced)
- * For stricter validation (ranges, formats, nested objects), provide a Zod schema:
- *
- * @example Auto-validation (simple)
- * ```ts
- * @OnNet("auth:login")
- * handleLogin(player: Player, username: string, password: string) {
- *   // username and password are validated as strings automatically
- * }
- * ```
- *
- * @example Explicit schema (strict validation)
- * ```ts
- * const transferSchema = z.object({
- *   targetId: z.number().positive(),
- *   amount: z.number().min(1).max(1000000),
- * })
- *
- * @OnNet("bank:transfer", { schema: transferSchema })
- * handleTransfer(player: Player, data: z.infer<typeof transferSchema>) {
- *   // data.amount is guaranteed to be between 1 and 1,000,000
- * }
- * ```
- *
- * @param eventName - The network event name to listen for.
- * @param options - Optional configuration object.
- * @param options.schema - Zod schema for strict payload validation.
- */
-export declare function OnNet<TArgs extends any[]>(eventName: string, options?: {
-    schema?: z.ZodType;
-}): <H extends ServerNetHandler<TArgs>>(target: any, propertyKey: string, descriptor: TypedPropertyDescriptor<H>) => void;
-export {};

package/dist/server/decorators/onNet.js

@@ -1,57 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnNet = OnNet;
-const metadata_server_keys_1 = require("../system/metadata-server.keys");
-/**
- * Registers a server-side network event handler.
- *
- * The decorated method is invoked when the client triggers
- * `emitNet(eventName, ...)`.
- *
- * ## Player Injection
- * The first argument of the handler **must be `Player`** and is automatically
- * replaced with a `Server.Player` instance representing the client that
- * fired the event. You do NOT need to read `source` manually.
- *
- * ## Auto-Validation
- * Arguments after `Player` are automatically validated based on their TypeScript types:
- * - `string` → `z.string()`
- * - `number` → `z.number()`
- * - `boolean` → `z.boolean()`
- * - `any[]` → `z.array(z.any())` (array content not validated)
- *
- * ## Explicit Schema (Advanced)
- * For stricter validation (ranges, formats, nested objects), provide a Zod schema:
- *
- * @example Auto-validation (simple)
- * ```ts
- * @OnNet("auth:login")
- * handleLogin(player: Player, username: string, password: string) {
- *   // username and password are validated as strings automatically
- * }
- * ```
- *
- * @example Explicit schema (strict validation)
- * ```ts
- * const transferSchema = z.object({
- *   targetId: z.number().positive(),
- *   amount: z.number().min(1).max(1000000),
- * })
- *
- * @OnNet("bank:transfer", { schema: transferSchema })
- * handleTransfer(player: Player, data: z.infer<typeof transferSchema>) {
- *   // data.amount is guaranteed to be between 1 and 1,000,000
- * }
- * ```
- *
- * @param eventName - The network event name to listen for.
- * @param options - Optional configuration object.
- * @param options.schema - Zod schema for strict payload validation.
- */
-function OnNet(eventName, options) {
-    return (target, propertyKey, descriptor) => {
-        const paramTypes = Reflect.getMetadata('design:paramtypes', target, propertyKey);
-        const metadata = { eventName, schema: options === null || options === void 0 ? void 0 : options.schema, paramTypes };
-        Reflect.defineMetadata(metadata_server_keys_1.METADATA_KEYS.NET_EVENT, metadata, target, propertyKey);
-    };
-}

package/dist/server/decorators/onTick.d.ts

@@ -1,32 +0,0 @@
-/**
- * OnTick
- * ------------------------------------------------------------
- * Marks a method to be executed on every server tick.
- *
- * Methods decorated with `@OnTick()` are automatically
- * registered by the framework's scheduler and invoked on each
- * FXServer tick (~ every 0–10 ms depending on workload).
- *
- * This decorator should be used for lightweight recurring
- * logic: status updates, background checks, cleanup tasks,
- * or time-based processes relevant to gameplay.
- *
- * Heavy or blocking operations should be avoided inside tick
- * handlers, as they directly impact global server performance.
- *
- * ```ts
- * export class SyncController {
- *   @OnTick()
- *   updatePlayers() {
- *     // Runs every tick
- *     this.service.syncPositions()
- *   }
- * }
- *
- * ```
- *
- * Internally, the decorator only stores metadata. The
- * server bootstrap scans for this metadata and binds the
- * method to FiveM's tick cycle.
- */
-export declare function OnTick(): (target: any, propertyKey: string) => void;

package/dist/server/decorators/onTick.js

@@ -1,40 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnTick = OnTick;
-const metadata_server_keys_1 = require("../system/metadata-server.keys");
-/**
- * OnTick
- * ------------------------------------------------------------
- * Marks a method to be executed on every server tick.
- *
- * Methods decorated with `@OnTick()` are automatically
- * registered by the framework's scheduler and invoked on each
- * FXServer tick (~ every 0–10 ms depending on workload).
- *
- * This decorator should be used for lightweight recurring
- * logic: status updates, background checks, cleanup tasks,
- * or time-based processes relevant to gameplay.
- *
- * Heavy or blocking operations should be avoided inside tick
- * handlers, as they directly impact global server performance.
- *
- * ```ts
- * export class SyncController {
- *   @OnTick()
- *   updatePlayers() {
- *     // Runs every tick
- *     this.service.syncPositions()
- *   }
- * }
- *
- * ```
- *
- * Internally, the decorator only stores metadata. The
- * server bootstrap scans for this metadata and binds the
- * method to FiveM's tick cycle.
- */
-function OnTick() {
-    return (target, propertyKey) => {
-        Reflect.defineMetadata(metadata_server_keys_1.METADATA_KEYS.TICK, {}, target, propertyKey);
-    };
-}

package/dist/server/decorators/public.d.ts

@@ -1,27 +0,0 @@
-/**
- * Marks a server-side NetEvent handler as publicly accessible.
- *
- * This decorator disables authentication requirements for the
- * decorated method. It should only be applied to endpoints used for:
- * - Login
- * - Registration
- * - Public information retrieval
- *
- * ## Security Warning
- * This decorator must be used with caution. Public endpoints must NOT
- * modify sensitive game state unless necessary.
- *
- * ## Example
- * ```ts
- * class AuthServerController {
- *   @Public()
- *   @OnNet("auth:login")
- *   async login(player: Server.Player, credentials: AuthCredentials) {
- *     // no authentication required for this event
- *   }
- * }
- * ```
- *
- * @returns Method decorator that marks a handler as unauthenticated.
- */
-export declare function Public(): (target: any, propertyKey: string, descriptor: PropertyDescriptor) => PropertyDescriptor;

package/dist/server/decorators/public.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Public = Public;
-const metadata_server_keys_1 = require("../system/metadata-server.keys");
-/**
- * Marks a server-side NetEvent handler as publicly accessible.
- *
- * This decorator disables authentication requirements for the
- * decorated method. It should only be applied to endpoints used for:
- * - Login
- * - Registration
- * - Public information retrieval
- *
- * ## Security Warning
- * This decorator must be used with caution. Public endpoints must NOT
- * modify sensitive game state unless necessary.
- *
- * ## Example
- * ```ts
- * class AuthServerController {
- *   @Public()
- *   @OnNet("auth:login")
- *   async login(player: Server.Player, credentials: AuthCredentials) {
- *     // no authentication required for this event
- *   }
- * }
- * ```
- *
- * @returns Method decorator that marks a handler as unauthenticated.
- */
-function Public() {
-    return function (target, propertyKey, descriptor) {
-        Reflect.defineMetadata(metadata_server_keys_1.METADATA_KEYS.PUBLIC, true, target, propertyKey);
-        return descriptor;
-    };
-}

package/dist/server/decorators/requiresState.d.ts

@@ -1,56 +0,0 @@
-/**
- * Configuration options for state validation requirements.
- * Defines the logical constraints (whitelist/blacklist) applied to the player's current state flags.
- */
-export interface StateRequirement {
-    /**
-     * **Whitelist:** The player **MUST** possess ALL of these states to proceed.
-     * If the player is missing any one of these, the execution is blocked.
-     * @example ['on_duty_police', 'in_vehicle']
-     */
-    has?: string[];
-    /**
-     * **Blacklist:** The player **MUST NOT** possess ANY of these states to proceed.
-     * If the player has any one of these, the execution is blocked.
-     * @example ['dead', 'cuffed', 'unconscious']
-     */
-    missing?: string[];
-    /**
-     * A custom message to display to the client if validation fails.
-     * If omitted, a default generic message will be generated based on the missing/conflicting state.
-     */
-    errorMessage?: string;
-}
-/**
- * Enforces gameplay state requirements before executing a method.
- *
- * The decorator intercepts the method call and verifies whether
- * the player satisfies required state flags (e.g. "dead", "cuffed",
- * "on_duty_police").
- *
- * ## Whitelist (`has`)
- * The player MUST have *all* required states. Missing any state blocks execution.
- *
- * ## Blacklist (`missing`)
- * The player MUST NOT have any of the forbidden states.
- *
- * ## Error Handling
- * - Throws a normal Error if the method is called without a valid Player.
- * - Throws an `AppError(GAME_STATE_ERROR)` if validation fails.
- *
- * ## Example
- * ```ts
- * @RequiresState({ missing: ["dead", "cuffed"] })
- * openInventory(player: Server.Player) { ... }
- *
- * @RequiresState({
- *   has: ["police_duty"],
- *   missing: ["dead"],
- *   errorMessage: "You must be on duty to access the armory."
- * })
- * openArmory(player: Server.Player) { ... }
- * ```
- *
- * @param req - State validation configuration.
- */
-export declare function RequiresState(req: StateRequirement): (target: any, propertyKey: string, descriptor: PropertyDescriptor) => PropertyDescriptor;

package/dist/server/decorators/requiresState.js

@@ -1,63 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RequiresState = RequiresState;
-const utils_1 = require("../../utils");
-/**
- * Enforces gameplay state requirements before executing a method.
- *
- * The decorator intercepts the method call and verifies whether
- * the player satisfies required state flags (e.g. "dead", "cuffed",
- * "on_duty_police").
- *
- * ## Whitelist (`has`)
- * The player MUST have *all* required states. Missing any state blocks execution.
- *
- * ## Blacklist (`missing`)
- * The player MUST NOT have any of the forbidden states.
- *
- * ## Error Handling
- * - Throws a normal Error if the method is called without a valid Player.
- * - Throws an `AppError(GAME_STATE_ERROR)` if validation fails.
- *
- * ## Example
- * ```ts
- * @RequiresState({ missing: ["dead", "cuffed"] })
- * openInventory(player: Server.Player) { ... }
- *
- * @RequiresState({
- *   has: ["police_duty"],
- *   missing: ["dead"],
- *   errorMessage: "You must be on duty to access the armory."
- * })
- * openArmory(player: Server.Player) { ... }
- * ```
- *
- * @param req - State validation configuration.
- */
-function RequiresState(req) {
-    return function (target, propertyKey, descriptor) {
-        const originalMethod = descriptor.value;
-        descriptor.value = async function (...args) {
-            const player = args[0];
-            if (!player) {
-                throw new Error(`@RequiresState used on ${propertyKey} without Player context`);
-            }
-            if (req.has) {
-                for (const state of req.has) {
-                    if (!player.hasState(state)) {
-                        throw new utils_1.AppError('GAME_STATE_ERROR', req.errorMessage || `You must be [${state}] to do this.`, 'client');
-                    }
-                }
-            }
-            if (req.missing) {
-                for (const state of req.missing) {
-                    if (player.hasState(state)) {
-                        throw new utils_1.AppError('GAME_STATE_ERROR', req.errorMessage || `You can't do this while you're [${state}].`, 'client');
-                    }
-                }
-            }
-            return originalMethod.apply(this, args);
-        };
-        return descriptor;
-    };
-}

package/dist/server/decorators/throttle.d.ts

@@ -1,48 +0,0 @@
-import type { SecurityAction } from '../types/security.types';
-interface ThrottleOptions {
-    /**
-     * limit of calls per windowMs
-     */
-    limit: number;
-    /**
-     * time window for numeric overload
-     */
-    windowMs: number;
-    /**
-     * action to perform on exceed limit
-     */
-    onExceed?: SecurityAction;
-    /**
-     * custom message to display on exceed limit (ERROR MESSAGE)
-     */
-    message?: string;
-}
-/**
- * Rate-limits how frequently a method can be called by a specific player.
- *
- * Uses `RateLimiterService` and a unique key composed of:
- * `playerID:ClassName:MethodName`.
- *
- * ## Overload
- * - `@Throttle(5, 1000)` → limit = 5 calls per 1000 ms
- * - `@Throttle({ limit, windowMs, onExceed, message })`
- *
- * ## Behavior
- * If the rate limit is exceeded:
- * - A `SecurityError` is thrown.
- * - Optional custom behavior (`onExceed`) may be executed.
- *
- * ## Example
- * ```ts
- * @Throttle(5, 2000)
- * async search(player: Server.Player, query: string) { ... }
- *
- * @Throttle({ limit: 1, windowMs: 5000, message: "Too fast!" })
- * async placeOrder(player: Server.Player) { ... }
- * ```
- *
- * @param optionsOrLimit - Number (simple mode) or full config object.
- * @param windowMs - Time window for numeric overload.
- */
-export declare function Throttle(optionsOrLimit: number | ThrottleOptions, windowMs?: number): (target: any, propertyKey: string, descriptor?: PropertyDescriptor) => PropertyDescriptor | undefined;
-export {};

package/dist/server/decorators/throttle.js

@@ -1,63 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Throttle = Throttle;
-const tsyringe_1 = require("tsyringe");
-const rate_limiter_service_1 = require("../services/rate-limiter.service");
-const utils_1 = require("../../utils");
-/**
- * Rate-limits how frequently a method can be called by a specific player.
- *
- * Uses `RateLimiterService` and a unique key composed of:
- * `playerID:ClassName:MethodName`.
- *
- * ## Overload
- * - `@Throttle(5, 1000)` → limit = 5 calls per 1000 ms
- * - `@Throttle({ limit, windowMs, onExceed, message })`
- *
- * ## Behavior
- * If the rate limit is exceeded:
- * - A `SecurityError` is thrown.
- * - Optional custom behavior (`onExceed`) may be executed.
- *
- * ## Example
- * ```ts
- * @Throttle(5, 2000)
- * async search(player: Server.Player, query: string) { ... }
- *
- * @Throttle({ limit: 1, windowMs: 5000, message: "Too fast!" })
- * async placeOrder(player: Server.Player) { ... }
- * ```
- *
- * @param optionsOrLimit - Number (simple mode) or full config object.
- * @param windowMs - Time window for numeric overload.
- */
-function Throttle(optionsOrLimit, windowMs) {
-    return function (target, propertyKey, descriptor) {
-        if (!descriptor) {
-            // In benchmarks or edge cases, skip method wrapping
-            // This should NOT happen in production code with proper TypeScript compilation
-            // Note: Throttle cannot work without descriptor, so we just skip it
-            return;
-        }
-        const originalMethod = descriptor.value;
-        let opts;
-        if (typeof optionsOrLimit === 'number') {
-            opts = { limit: optionsOrLimit, windowMs: windowMs || 1000, onExceed: 'LOG' };
-        }
-        else {
-            opts = Object.assign({ onExceed: 'LOG' }, optionsOrLimit);
-        }
-        descriptor.value = async function (...args) {
-            const player = args[0];
-            if (player === null || player === void 0 ? void 0 : player.clientID) {
-                const service = tsyringe_1.container.resolve(rate_limiter_service_1.RateLimiterService);
-                const key = `${player.clientID}:${target.constructor.name}:${propertyKey}`;
-                if (!service.checkLimit(key, opts.limit, opts.windowMs)) {
-                    throw new utils_1.SecurityError(opts.onExceed, opts.message || `Rate limit exceeded on ${propertyKey}`, { limit: opts.limit, key });
-                }
-            }
-            return originalMethod.apply(this, args);
-        };
-        return descriptor;
-    };
-}

package/dist/server/decorators/utils.d.ts

@@ -1,57 +0,0 @@
-import type { BindingScope } from './bind';
-/**
- * Marks a class as a framework-managed Service.
- *
- * The decorator binds the class into the dependency injection
- * container using the provided scope (default: `singleton`).
- *
- * Services represent reusable, stateless or stateful logic such as:
- * - Business rules
- * - Utility layers
- * - Gameplay systems
- * - Internal modules
- *
- * This decorator is a convenience wrapper over `@Bind()`, allowing
- * future extension of service-specific behavior without changing
- * end-user code.
- *
- * ## Example
- * ```ts
- * @Service()
- * export class InventoryService {
- *   addItem() { ... }
- * }
- * ```
- *
- * @param options.scope - Optional binding scope (`singleton` | `transient`)
- */
-export declare function Service(options?: {
-    scope?: BindingScope;
-}): (target: any) => void;
-/**
- * Marks a class as a Repository within the framework.
- *
- * A Repository abstracts persistence operations (e.g., database,
- * API, in-memory, or hybrid storage). It is registered in the
- * dependency injection container using the provided scope
- * (default: `singleton`).
- *
- * `@Repo()` is intentionally separate from `@Service()` to clearly
- * distinguish persistence-oriented classes from business logic.
- * In the future, repository-specific behavior (caching layers,
- * transactional wrappers, profiling, etc.) can be attached here
- * without modifying user code.
- *
- * ## Example
- * ```ts
- * @Repo()
- * export class AccountRepository {
- *   async findById(id: string) { ... }
- * }
- * ```
- *
- * @param options.scope - Optional binding scope (`singleton` | `transient`)
- */
-export declare function Repo(options?: {
-    scope?: BindingScope;
-}): (target: any) => void;

package/dist/server/decorators/utils.js

@@ -1,63 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Service = Service;
-exports.Repo = Repo;
-const bind_1 = require("./bind");
-/**
- * Marks a class as a framework-managed Service.
- *
- * The decorator binds the class into the dependency injection
- * container using the provided scope (default: `singleton`).
- *
- * Services represent reusable, stateless or stateful logic such as:
- * - Business rules
- * - Utility layers
- * - Gameplay systems
- * - Internal modules
- *
- * This decorator is a convenience wrapper over `@Bind()`, allowing
- * future extension of service-specific behavior without changing
- * end-user code.
- *
- * ## Example
- * ```ts
- * @Service()
- * export class InventoryService {
- *   addItem() { ... }
- * }
- * ```
- *
- * @param options.scope - Optional binding scope (`singleton` | `transient`)
- */
-function Service(options) {
-    var _a;
-    return (0, bind_1.Bind)((_a = options === null || options === void 0 ? void 0 : options.scope) !== null && _a !== void 0 ? _a : 'singleton');
-}
-/**
- * Marks a class as a Repository within the framework.
- *
- * A Repository abstracts persistence operations (e.g., database,
- * API, in-memory, or hybrid storage). It is registered in the
- * dependency injection container using the provided scope
- * (default: `singleton`).
- *
- * `@Repo()` is intentionally separate from `@Service()` to clearly
- * distinguish persistence-oriented classes from business logic.
- * In the future, repository-specific behavior (caching layers,
- * transactional wrappers, profiling, etc.) can be attached here
- * without modifying user code.
- *
- * ## Example
- * ```ts
- * @Repo()
- * export class AccountRepository {
- *   async findById(id: string) { ... }
- * }
- * ```
- *
- * @param options.scope - Optional binding scope (`singleton` | `transient`)
- */
-function Repo(options) {
-    var _a;
-    return (0, bind_1.Bind)((_a = options === null || options === void 0 ? void 0 : options.scope) !== null && _a !== void 0 ? _a : 'singleton');
-}

package/dist/server/entities/index.d.ts

@@ -1 +0,0 @@
-export * from './player';