@quilla-be-kit/http 0.6.0 → 0.8.0

package/dist/adapter/hono/hono.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hono.server.d.ts","sourceRoot":"","sources":["../../../src/adapter/hono/hono.server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAKvF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,CAAC;AAEvE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;CACxC,CAAC;AAEF,qBAAa,UAAW,YAAW,SAAS;IAQ9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAA8B;gBAEf,OAAO,EAAE,iBAAiB;IAWvD,SAAS,IAAI,IAAI;IAsCX,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAMvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,aAAa;CAUtB"}
+{"version":3,"file":"hono.server.d.ts","sourceRoot":"","sources":["../../../src/adapter/hono/hono.server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAKvF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,CAAC;AAEvE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;CACxC,CAAC;AAEF,qBAAa,UAAW,YAAW,SAAS;IAQ9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAA8B;gBAEf,OAAO,EAAE,iBAAiB;IAcvD,SAAS,IAAI,IAAI;IAsCX,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAMvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,aAAa;CAUtB"}

package/dist/adapter/hono/hono.server.js

@@ -1,6 +1,7 @@
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
 import { DefaultErrorResolver } from '../../error/default.resolver.js';
+import { DefaultRequestDeserializer } from '../../request/default.deserializer.js';
 import { DefaultResponseSerializer } from '../../request/default.serializer.js';
 import { HttpAttributes } from '../../request/http-attributes.js';
 import { getRequestAttributes } from './get-request-attributes.js';
@@ -18,7 +19,8 @@ export class HonoServer {
         this.options = options;
         this.errorResolver = options.conventions?.errorResolver ?? new DefaultErrorResolver();
         const responseSerializer = options.conventions?.responseSerializer ?? new DefaultResponseSerializer();
-        this.requestAdapter = new HonoRequestAdapter(options.router.getExecutionContextProvider(), responseSerializer);
+        const requestDeserializer = options.conventions?.requestDeserializer ?? new DefaultRequestDeserializer();
+        this.requestAdapter = new HonoRequestAdapter(options.router.getExecutionContextProvider(), responseSerializer, requestDeserializer);
         this.middlewareAdapter = new HonoMiddlewareAdapter(this.requestAdapter);
     }
     bootstrap() {

package/dist/adapter/hono/hono.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"hono.server.js","sourceRoot":"","sources":["../../../src/adapter/hono/hono.server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAMlE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAsB/D,MAAM,OAAO,UAAU;IAQQ;IAPZ,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACjB,cAAc,CAAqB;IACnC,iBAAiB,CAAwB;IACzC,aAAa,CAAgB;IACtC,YAAY,GAAG,KAAK,CAAC;IACrB,MAAM,CAA8B;IAE5C,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QACrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,aAAa,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACtF,MAAM,kBAAkB,GACtB,OAAO,CAAC,WAAW,EAAE,kBAAkB,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,IAAI,kBAAkB,CAC1C,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAC5C,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1E,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAiB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,GAAG,EACH,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;gBAC1E,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC;gBACnE,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,KAAK;aACd,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAClC,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;gBAC3C,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,IAAI,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;IAEO,aAAa,CAAC,KAAsB;QAC1C,MAAM,KAAK,GAAqD,EAAE,CAAC;QACnE,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,EAAiD,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAsD,CAAC;QACvF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;CACF"}
+{"version":3,"file":"hono.server.js","sourceRoot":"","sources":["../../../src/adapter/hono/hono.server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAMlE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAsB/D,MAAM,OAAO,UAAU;IAQQ;IAPZ,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACjB,cAAc,CAAqB;IACnC,iBAAiB,CAAwB;IACzC,aAAa,CAAgB;IACtC,YAAY,GAAG,KAAK,CAAC;IACrB,MAAM,CAA8B;IAE5C,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QACrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,aAAa,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACtF,MAAM,kBAAkB,GACtB,OAAO,CAAC,WAAW,EAAE,kBAAkB,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7E,MAAM,mBAAmB,GACvB,OAAO,CAAC,WAAW,EAAE,mBAAmB,IAAI,IAAI,0BAA0B,EAAE,CAAC;QAC/E,IAAI,CAAC,cAAc,GAAG,IAAI,kBAAkB,CAC1C,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAC5C,kBAAkB,EAClB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1E,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAiB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CACV,GAAG,EACH,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;gBAC1E,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC;gBACnE,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,KAAK;aACd,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAClC,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;gBAC3C,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC5D,MAAM,IAAI,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;IAEO,aAAa,CAAC,KAAsB;QAC1C,MAAM,KAAK,GAAqD,EAAE,CAAC;QACnE,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,EAAiD,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAsD,CAAC;QACvF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/decorator/authorize-scope.decorator.js

@@ -1,13 +1,13 @@
 import { ForbiddenError } from '@quilla-be-kit/errors';
 import { HttpAttributes } from '../request/http-attributes.js';
-import { updateLastRoute } from './route.metadata.js';
+import { addRoutePatch } from './route.metadata.js';
 export function AuthorizeScope(scopes, mode = 'any') {
     return (originalMethod, context) => {
         if (context.kind !== 'method') {
             throw new Error('@AuthorizeScope can only be applied to methods');
         }
         const required = Array.isArray(scopes) ? scopes : [scopes];
-        updateLastRoute(context.metadata, context.name, {
+        addRoutePatch(context.metadata, context.name, {
             scopes: required,
             scopeMode: mode,
         });

package/dist/decorator/authorize-scope.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorize-scope.decorator.js","sourceRoot":"","sources":["../../src/decorator/authorize-scope.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,MAAM,UAAU,cAAc,CAAC,MAAkC,EAAE,OAAsB,KAAK;IAC5F,OAAO,CACL,cAAgC,EAChC,OAAoC,EAClB,EAAE;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC;QAErE,eAAe,CAAC,OAAO,CAAC,QAA4C,EAAE,OAAO,CAAC,IAAc,EAAE;YAC5F,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO,UAAyB,OAAoB;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAqB,cAAc,CAAC,cAAc,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GACZ,IAAI,KAAK,KAAK;gBACZ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAC1F,CAAC;YAED,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"authorize-scope.decorator.js","sourceRoot":"","sources":["../../src/decorator/authorize-scope.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,MAAM,UAAU,cAAc,CAAC,MAAkC,EAAE,OAAsB,KAAK;IAC5F,OAAO,CACL,cAAgC,EAChC,OAAoC,EAClB,EAAE;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC;QAErE,aAAa,CAAC,OAAO,CAAC,QAA4C,EAAE,OAAO,CAAC,IAAc,EAAE;YAC1F,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO,UAAyB,OAAoB;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAqB,cAAc,CAAC,cAAc,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GACZ,IAAI,KAAK,KAAK;gBACZ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAC1F,CAAC;YAED,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/decorator/controller.decorator.d.ts

@@ -1,5 +1,6 @@
 export type ControllerOptions = {
     readonly version?: string;
+    readonly authStack?: string;
 };
 export declare function Controller(prefix: string, options?: ControllerOptions): (_target: unknown, context: ClassDecoratorContext) => void;
 //# sourceMappingURL=controller.decorator.d.ts.map

package/dist/decorator/controller.decorator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.decorator.d.ts","sourceRoot":"","sources":["../../src/decorator/controller.decorator.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GAAG;IAI9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,IAC5D,SAAS,OAAO,EAAE,SAAS,qBAAqB,KAAG,IAAI,CAKhE"}
+{"version":3,"file":"controller.decorator.d.ts","sourceRoot":"","sources":["../../src/decorator/controller.decorator.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,iBAAiB,GAAG;IAI9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAK1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,IAC5D,SAAS,OAAO,EAAE,SAAS,qBAAqB,KAAG,IAAI,CAMhE"}

package/dist/decorator/controller.decorator.js

@@ -1,9 +1,10 @@
-import { setControllerPrefix, setControllerVersion } from './route.metadata.js';
+import { setControllerAuthStack, setControllerPrefix, setControllerVersion, } from './route.metadata.js';
 export function Controller(prefix, options) {
     return (_target, context) => {
         const metadata = context.metadata;
         setControllerPrefix(metadata, prefix);
         setControllerVersion(metadata, options?.version);
+        setControllerAuthStack(metadata, options?.authStack);
     };
 }
 //# sourceMappingURL=controller.decorator.js.map

package/dist/decorator/controller.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.decorator.js","sourceRoot":"","sources":["../../src/decorator/controller.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAShF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAA2B;IACpE,OAAO,CAAC,OAAgB,EAAE,OAA8B,EAAQ,EAAE;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA4C,CAAC;QACtE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"controller.decorator.js","sourceRoot":"","sources":["../../src/decorator/controller.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAc7B,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAA2B;IACpE,OAAO,CAAC,OAAgB,EAAE,OAA8B,EAAQ,EAAE;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA4C,CAAC;QACtE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC"}

package/dist/decorator/method.decorators.d.ts

@@ -1,5 +1,6 @@
 export type RouteOptions = {
     readonly version?: string;
+    readonly authStack?: string;
 };
 export declare const Get: (path: string, options?: RouteOptions) => (_target: unknown, context: ClassMethodDecoratorContext) => void;
 export declare const Post: (path: string, options?: RouteOptions) => (_target: unknown, context: ClassMethodDecoratorContext) => void;

package/dist/decorator/method.decorators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method.decorators.d.ts","sourceRoot":"","sources":["../../src/decorator/method.decorators.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG;IAIzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAmBF,eAAO,MAAM,GAAG,SAhBA,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAef,CAAC;AACvD,eAAO,MAAM,IAAI,SAjBD,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAgBb,CAAC;AACzD,eAAO,MAAM,GAAG,SAlBA,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAiBf,CAAC;AACvD,eAAO,MAAM,KAAK,SAnBF,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAkBX,CAAC;AAC3D,eAAO,MAAM,MAAM,SApBH,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAmBT,CAAC;AAE7D,eAAO,MAAM,SAAS,SAtBN,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAqBV,CAAC;AAC5D,eAAO,MAAM,UAAU,SAvBP,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAsBR,CAAC;AAC9D,eAAO,MAAM,SAAS,SAxBN,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAuBV,CAAC;AAC5D,eAAO,MAAM,WAAW,SAzBR,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAwBN,CAAC;AAChE,eAAO,MAAM,YAAY,SA1BT,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAyBJ,CAAC"}
+{"version":3,"file":"method.decorators.d.ts","sourceRoot":"","sources":["../../src/decorator/method.decorators.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG;IAIzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAM1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAoBF,eAAO,MAAM,GAAG,SAjBA,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAgBf,CAAC;AACvD,eAAO,MAAM,IAAI,SAlBD,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAiBb,CAAC;AACzD,eAAO,MAAM,GAAG,SAnBA,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAkBf,CAAC;AACvD,eAAO,MAAM,KAAK,SApBF,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAmBX,CAAC;AAC3D,eAAO,MAAM,MAAM,SArBH,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAoBT,CAAC;AAE7D,eAAO,MAAM,SAAS,SAvBN,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAsBV,CAAC;AAC5D,eAAO,MAAM,UAAU,SAxBP,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAuBR,CAAC;AAC9D,eAAO,MAAM,SAAS,SAzBN,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAwBV,CAAC;AAC5D,eAAO,MAAM,WAAW,SA1BR,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IAyBN,CAAC;AAChE,eAAO,MAAM,YAAY,SA3BT,MAAM,YAAY,YAAY,MAClC,SAAS,OAAO,EAAE,SAAS,2BAA2B,KAAG,IA0BJ,CAAC"}

package/dist/decorator/method.decorators.js

@@ -11,6 +11,7 @@ function createMethodDecorator(httpMethod, isPublic) {
                 path,
                 public: isPublic,
                 ...(options?.version !== undefined ? { version: options.version } : {}),
+                ...(options?.authStack !== undefined ? { authStack: options.authStack } : {}),
             });
         };
     };

package/dist/decorator/method.decorators.js.map

@@ -1 +1 @@
-{"version":3,"file":"method.decorators.js","sourceRoot":"","sources":["../../src/decorator/method.decorators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAShE,SAAS,qBAAqB,CAAC,UAAsB,EAAE,QAAiB;IACtE,OAAO,CAAC,IAAY,EAAE,OAAsB,EAAE,EAAE;QAC9C,OAAO,CAAC,OAAgB,EAAE,OAAoC,EAAQ,EAAE;YACtE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,IAAI,UAAU,iCAAiC,CAAC,CAAC;YACnE,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,QAA4C,EAAE;gBAC7D,iBAAiB,EAAE,OAAO,CAAC,IAAc;gBACzC,UAAU;gBACV,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC"}
+{"version":3,"file":"method.decorators.js","sourceRoot":"","sources":["../../src/decorator/method.decorators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAehE,SAAS,qBAAqB,CAAC,UAAsB,EAAE,QAAiB;IACtE,OAAO,CAAC,IAAY,EAAE,OAAsB,EAAE,EAAE;QAC9C,OAAO,CAAC,OAAgB,EAAE,OAAoC,EAAQ,EAAE;YACtE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,IAAI,UAAU,iCAAiC,CAAC,CAAC;YACnE,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,QAA4C,EAAE;gBAC7D,iBAAiB,EAAE,OAAO,CAAC,IAAc;gBACzC,UAAU;gBACV,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC"}

package/dist/decorator/route.metadata.d.ts

@@ -6,6 +6,7 @@ export type RouteDefinition = {
     readonly path: string;
     readonly public: boolean;
     readonly version?: string;
+    readonly authStack?: string;
     readonly scopes?: readonly string[];
     readonly scopeMode?: 'any' | 'all';
     readonly validation?: {
@@ -13,13 +14,21 @@ export type RouteDefinition = {
         readonly sources: readonly RequestSource[];
     };
 };
+/**
+ * Fields a patch decorator (`@AuthorizeScope`, `@ValidateRequest`) may set.
+ * Narrowed deliberately: path, method, `public`, and `authStack` are decided by
+ * the method decorator and must not be rewritable from a patch.
+ */
+export type RoutePatch = Pick<RouteDefinition, 'scopes' | 'scopeMode' | 'validation'>;
 type MetadataBag = Record<string | symbol, unknown>;
 export declare function setControllerPrefix(metadata: MetadataBag, prefix: string): void;
 export declare function getControllerPrefix(controllerInstance: object): string;
 export declare function setControllerVersion(metadata: MetadataBag, version: string | undefined): void;
 export declare function getControllerVersion(controllerInstance: object): string | undefined;
+export declare function setControllerAuthStack(metadata: MetadataBag, authStack: string | undefined): void;
+export declare function getControllerAuthStack(controllerInstance: object): string | undefined;
 export declare function addRoute(metadata: MetadataBag, route: RouteDefinition): void;
-export declare function updateLastRoute(metadata: MetadataBag, methodName: string, patch: Partial<RouteDefinition>): void;
+export declare function addRoutePatch(metadata: MetadataBag, methodName: string, patch: RoutePatch): void;
 export declare function getControllerRoutes(controllerInstance: object): readonly RouteDefinition[];
 export {};
 //# sourceMappingURL=route.metadata.d.ts.map

package/dist/decorator/route.metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.metadata.d.ts","sourceRoot":"","sources":["../../src/decorator/route.metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAazE,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;KAC5C,CAAC;CACH,CAAC;AAMF,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAE/E;AAKD,wBAAgB,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAOtE;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG7F;AAID,wBAAgB,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOnF;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CAI5E;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAC9B,IAAI,CAUN;AAED,wBAAgB,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAO1F"}
+{"version":3,"file":"route.metadata.d.ts","sourceRoot":"","sources":["../../src/decorator/route.metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAazE,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;KAC5C,CAAC;CACH,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,WAAW,GAAG,YAAY,CAAC,CAAC;AAQtF,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAE/E;AAkBD,wBAAgB,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG7F;AAID,wBAAgB,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGjG;AAGD,wBAAgB,sBAAsB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErF;AAMD,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CAM5E;AAID,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAMhG;AAED,wBAAgB,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAuB1F"}

package/dist/decorator/route.metadata.js

@@ -10,20 +10,30 @@ if (Symbol.metadata === undefined) {
 }
 const CONTROLLER_PREFIX_KEY = Symbol.for('quilla-be-kit.http.controller-prefix');
 const CONTROLLER_VERSION_KEY = Symbol.for('quilla-be-kit.http.controller-version');
+const CONTROLLER_AUTH_STACK_KEY = Symbol.for('quilla-be-kit.http.controller-auth-stack');
 const ROUTES_KEY = Symbol.for('quilla-be-kit.http.routes');
+const ROUTE_PATCHES_KEY = Symbol.for('quilla-be-kit.http.route-patches');
 export function setControllerPrefix(metadata, prefix) {
     metadata[CONTROLLER_PREFIX_KEY] = prefix;
 }
+// Class-level settings OVERRIDE down the hierarchy: the nearest declaration
+// wins. Read WITHOUT `Object.hasOwn`, unlike the route bag below — a subclass's
+// metadata is prototype-linked to its parent's, so an undecorated subclass
+// resolves the parent's value on the first walk step, which is exactly the
+// child-wins-else-inherit precedence we want. Routes need the opposite
+// (own-property) semantics because they ACCUMULATE rather than override.
+function readInherited(controllerInstance, key) {
+    for (const metadata of walkMetadata(controllerInstance)) {
+        if (typeof metadata[key] === 'string')
+            return metadata[key];
+    }
+    return undefined;
+}
 // Returns `''` (not `undefined`) when unset: prefixes from every level are
 // concatenated, so an absent level just contributes nothing — unlike version
 // (see getControllerVersion), where one level wins by precedence.
 export function getControllerPrefix(controllerInstance) {
-    for (const metadata of walkMetadata(controllerInstance)) {
-        if (typeof metadata[CONTROLLER_PREFIX_KEY] === 'string') {
-            return metadata[CONTROLLER_PREFIX_KEY];
-        }
-    }
-    return '';
+    return readInherited(controllerInstance, CONTROLLER_PREFIX_KEY) ?? '';
 }
 export function setControllerVersion(metadata, version) {
     if (version === undefined)
@@ -33,46 +43,73 @@ export function setControllerVersion(metadata, version) {
 // Returns `undefined` (not `''`) when unset so the router's nullish-coalescing
 // precedence chain (route ?? controller ?? module) falls through correctly.
 export function getControllerVersion(controllerInstance) {
-    for (const metadata of walkMetadata(controllerInstance)) {
-        if (typeof metadata[CONTROLLER_VERSION_KEY] === 'string') {
-            return metadata[CONTROLLER_VERSION_KEY];
-        }
-    }
-    return undefined;
+    return readInherited(controllerInstance, CONTROLLER_VERSION_KEY);
+}
+export function setControllerAuthStack(metadata, authStack) {
+    if (authStack === undefined)
+        return;
+    metadata[CONTROLLER_AUTH_STACK_KEY] = authStack;
 }
+// Same precedence semantics as getControllerVersion.
+export function getControllerAuthStack(controllerInstance) {
+    return readInherited(controllerInstance, CONTROLLER_AUTH_STACK_KEY);
+}
+// `Object.hasOwn`, not `??`: a subclass's metadata bag is prototype-linked to
+// its parent's, so a bare read would resolve the parent's array and push the
+// subclass's routes into it — leaking child routes onto the parent and making
+// every inherited route collect twice.
 export function addRoute(metadata, route) {
-    const existing = metadata[ROUTES_KEY] ?? [];
+    const existing = Object.hasOwn(metadata, ROUTES_KEY)
+        ? metadata[ROUTES_KEY]
+        : [];
     existing.push(route);
     metadata[ROUTES_KEY] = existing;
 }
-export function updateLastRoute(metadata, methodName, patch) {
-    const routes = metadata[ROUTES_KEY];
-    if (!routes)
-        return;
-    for (let i = routes.length - 1; i >= 0; i--) {
-        const route = routes[i];
-        if (route && route.handlerMethodName === methodName) {
-            routes[i] = { ...route, ...patch };
-            return;
-        }
-    }
+// Patches are accumulated per class and merged at read time so decorator order
+// relative to the method decorator does not matter.
+export function addRoutePatch(metadata, methodName, patch) {
+    const bucket = Object.hasOwn(metadata, ROUTE_PATCHES_KEY)
+        ? metadata[ROUTE_PATCHES_KEY]
+        : new Map();
+    bucket.set(methodName, { ...bucket.get(methodName), ...patch });
+    metadata[ROUTE_PATCHES_KEY] = bucket;
 }
 export function getControllerRoutes(controllerInstance) {
     const collected = [];
+    const patches = new Map();
     for (const metadata of walkMetadata(controllerInstance)) {
-        const routes = metadata[ROUTES_KEY];
-        if (routes)
-            collected.unshift(...routes);
+        if (Object.hasOwn(metadata, ROUTES_KEY)) {
+            collected.unshift(...metadata[ROUTES_KEY]);
+        }
+        if (Object.hasOwn(metadata, ROUTE_PATCHES_KEY)) {
+            for (const [name, patch] of metadata[ROUTE_PATCHES_KEY]) {
+                // walkMetadata yields child-first, so anything already collected came
+                // from the subclass and must win field-by-field over this parent's.
+                const fromSubclass = patches.get(name);
+                patches.set(name, { ...patch, ...fromSubclass });
+            }
+        }
     }
-    return collected;
+    if (patches.size === 0)
+        return collected;
+    return collected.map((def) => {
+        const patch = patches.get(def.handlerMethodName);
+        return patch ? { ...def, ...patch } : def;
+    });
 }
+// Yields each class's OWN metadata bag, nearest class first.
+//
+// `Symbol.metadata` is inherited down the static constructor chain, so a class
+// with no decorators of its own exposes its parent's bag. Reading the own
+// property descriptor skips those classes entirely, which makes yielding the
+// same bag twice impossible by construction rather than by bookkeeping.
 function* walkMetadata(instance) {
     // biome-ignore lint/suspicious/noExplicitAny: prototype reflection is inherently untyped
     let ctor = instance.constructor;
     while (ctor && ctor !== Object) {
-        const metadata = ctor[Symbol.metadata];
-        if (metadata)
-            yield metadata;
+        const own = Object.getOwnPropertyDescriptor(ctor, Symbol.metadata);
+        if (own?.value)
+            yield own.value;
         const proto = ctor.prototype;
         ctor = proto ? Object.getPrototypeOf(proto)?.constructor : null;
     }

package/dist/decorator/route.metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"route.metadata.js","sourceRoot":"","sources":["../../src/decorator/route.metadata.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,8EAA8E;AAC9E,8CAA8C;AAC9C,IAAK,MAAgC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;IAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE;QACxC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACpC,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC;AAkBD,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AACjF,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AACnF,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAI3D,MAAM,UAAU,mBAAmB,CAAC,QAAqB,EAAE,MAAc;IACvE,QAAQ,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,kBAA0B;IAC5D,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,QAAQ,CAAC,qBAAqB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,qBAAqB,CAAW,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAqB,EAAE,OAA2B;IACrF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,kBAA0B;IAC7D,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,QAAQ,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,QAAQ,CAAC,sBAAsB,CAAW,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAqB,EAAE,KAAsB;IACpE,MAAM,QAAQ,GAAI,QAAQ,CAAC,UAAU,CAAmC,IAAI,EAAE,CAAC;IAC/E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAqB,EACrB,UAAkB,EAClB,KAA+B;IAE/B,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAkC,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,IAAI,KAAK,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACpD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,kBAA0B;IAC5D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAkC,CAAC;QACrE,IAAI,MAAM;YAAE,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,QAAQ,CAAC,CAAC,YAAY,CAAC,QAAgB;IACrC,yFAAyF;IACzF,IAAI,IAAI,GAAQ,QAAQ,CAAC,WAAW,CAAC;IACrC,OAAO,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAmC,CAAC;QACzE,IAAI,QAAQ;YAAE,MAAM,QAAQ,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;AACH,CAAC"}
+{"version":3,"file":"route.metadata.js","sourceRoot":"","sources":["../../src/decorator/route.metadata.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,8EAA8E;AAC9E,8CAA8C;AAC9C,IAAK,MAAgC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;IAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE;QACxC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACpC,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC;AA0BD,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AACjF,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AACnF,MAAM,yBAAyB,GAAG,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AACzF,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAC3D,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAIzE,MAAM,UAAU,mBAAmB,CAAC,QAAqB,EAAE,MAAc;IACvE,QAAQ,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC;AAC3C,CAAC;AAED,4EAA4E;AAC5E,gFAAgF;AAChF,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,SAAS,aAAa,CAAC,kBAA0B,EAAE,GAAW;IAC5D,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAW,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,kBAA0B;IAC5D,OAAO,aAAa,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAqB,EAAE,OAA2B;IACrF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,kBAA0B;IAC7D,OAAO,aAAa,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAqB,EAAE,SAA6B;IACzF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC;AAClD,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,sBAAsB,CAAC,kBAA0B;IAC/D,OAAO,aAAa,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,uCAAuC;AACvC,MAAM,UAAU,QAAQ,CAAC,QAAqB,EAAE,KAAsB;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;QAClD,CAAC,CAAE,QAAQ,CAAC,UAAU,CAAuB;QAC7C,CAAC,CAAC,EAAE,CAAC;IACP,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;AAClC,CAAC;AAED,+EAA+E;AAC/E,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,QAAqB,EAAE,UAAkB,EAAE,KAAiB;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACvD,CAAC,CAAE,QAAQ,CAAC,iBAAiB,CAA6B;QAC1D,CAAC,CAAC,IAAI,GAAG,EAAsB,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,kBAA0B;IAC5D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE9C,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,OAAO,CAAC,GAAI,QAAQ,CAAC,UAAU,CAAuB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,iBAAiB,CAA4B,EAAE,CAAC;gBACnF,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,QAAQ,CAAC,CAAC,YAAY,CAAC,QAAgB;IACrC,yFAAyF;IACzF,IAAI,IAAI,GAAQ,QAAQ,CAAC,WAAW,CAAC;IACrC,OAAO,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,GAAG,EAAE,KAAK;YAAE,MAAM,GAAG,CAAC,KAAoB,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/decorator/validate-request.decorator.js

@@ -1,6 +1,6 @@
 import { ValidationError } from '@quilla-be-kit/errors';
 import { HttpAttributes } from '../request/http-attributes.js';
-import { updateLastRoute } from './route.metadata.js';
+import { addRoutePatch } from './route.metadata.js';
 const SOURCE_READERS = {
     body: (req) => {
         const body = req.getBody();
@@ -14,7 +14,7 @@ export function ValidateRequest(schema, sources) {
         if (context.kind !== 'method') {
             throw new Error('@ValidateRequest can only be applied to methods');
         }
-        updateLastRoute(context.metadata, context.name, {
+        addRoutePatch(context.metadata, context.name, {
             validation: { schema, sources },
         });
         return function (request) {

package/dist/decorator/validate-request.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-request.decorator.js","sourceRoot":"","sources":["../../src/decorator/validate-request.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAK/D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,MAAM,cAAc,GAAwD;IAC1E,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE;IAChC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC/B,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,OAAiC;IAChF,OAAO,CACL,cAAgC,EAChC,OAAoC,EAClB,EAAE;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,eAAe,CAAC,OAAO,CAAC,QAA4C,EAAE,OAAO,CAAC,IAAc,EAAE;YAC5F,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;SAChC,CAAC,CAAC;QAEH,OAAO,UAAyB,OAAoB;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAmB,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,gBAAgB;YAChB,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC;gBACtD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;oBACxE,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,eAAe,CAAC;oBACxB,OAAO,EAAE,2BAA2B;oBACpC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAClE,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validate-request.decorator.js","sourceRoot":"","sources":["../../src/decorator/validate-request.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAK/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,MAAM,cAAc,GAAwD;IAC1E,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE;IAChC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC/B,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,OAAiC;IAChF,OAAO,CACL,cAAgC,EAChC,OAAoC,EAClB,EAAE;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,aAAa,CAAC,OAAO,CAAC,QAA4C,EAAE,OAAO,CAAC,IAAc,EAAE;YAC1F,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;SAChC,CAAC,CAAC;QAEH,OAAO,UAAyB,OAAoB;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAmB,cAAc,CAAC,iBAAiB,CAAC,CAAC;YAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,gBAAgB;YAChB,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC;gBACtD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;oBACxE,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,eAAe,CAAC;oBACxB,OAAO,EAAE,2BAA2B;oBACpC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAClE,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/request/default.deserializer.d.ts

@@ -0,0 +1,20 @@
+import type { RequestDeserializer } from './request-deserializer.interface.js';
+export type DefaultRequestDeserializerOptions = {
+    /**
+     * Rename the query keys a consumer's dialect uses onto the canonical
+     * `page` / `pageSize` that a list schema parses. Configured once on the
+     * server, so `?p=2&per_page=50` reaches every handler as `page` / `pageSize`
+     * without touching any DTO. `sort` is intentionally not remappable — the
+     * `sort` key already agrees across request and response ends.
+     */
+    readonly paginationKeys?: {
+        readonly page?: string;
+        readonly pageSize?: string;
+    };
+};
+export declare class DefaultRequestDeserializer implements RequestDeserializer {
+    private readonly renames;
+    constructor(options?: DefaultRequestDeserializerOptions);
+    deserializeQuery(query: Record<string, string | readonly string[]>): Record<string, string | readonly string[]>;
+}
+//# sourceMappingURL=default.deserializer.d.ts.map

package/dist/request/default.deserializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.deserializer.d.ts","sourceRoot":"","sources":["../../src/request/default.deserializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE/E,MAAM,MAAM,iCAAiC,GAAG;IAC9C;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH,CAAC;AAEF,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;gBAE1C,OAAO,GAAE,iCAAsC;IAQ3D,gBAAgB,CACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,GAChD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;CAQ9C"}

package/dist/request/default.deserializer.js

@@ -0,0 +1,22 @@
+export class DefaultRequestDeserializer {
+    renames;
+    constructor(options = {}) {
+        const renames = new Map();
+        const { page, pageSize } = options.paginationKeys ?? {};
+        if (page && page !== 'page')
+            renames.set(page, 'page');
+        if (pageSize && pageSize !== 'pageSize')
+            renames.set(pageSize, 'pageSize');
+        this.renames = renames;
+    }
+    deserializeQuery(query) {
+        if (this.renames.size === 0)
+            return query;
+        const out = {};
+        for (const [key, value] of Object.entries(query)) {
+            out[this.renames.get(key) ?? key] = value;
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=default.deserializer.js.map

package/dist/request/default.deserializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.deserializer.js","sourceRoot":"","sources":["../../src/request/default.deserializer.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,0BAA0B;IACpB,OAAO,CAA8B;IAEtD,YAAY,UAA6C,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,QAAQ,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,gBAAgB,CACd,KAAiD;QAEjD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,GAAG,GAA+C,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/request/http-attributes.d.ts

@@ -1,5 +1,11 @@
 export declare const HttpAttributes: {
     readonly VERIFIED_TOKEN: "verifiedToken";
+    /**
+     * Name of the auth stack that authenticated the request. Set by Router before
+     * the stack runs, so guards can assert *which* stack authenticated the caller
+     * — `scopes` share one flat namespace across stacks and cannot carry that.
+     */
+    readonly AUTH_STACK: "authStack";
     readonly VALIDATED_INPUT: "__validated_input__";
     readonly REQUEST_VALIDATOR: "__request_validator__";
 };

package/dist/request/http-attributes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-attributes.d.ts","sourceRoot":"","sources":["../../src/request/http-attributes.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc;;;;CAIjB,CAAC"}
+{"version":3,"file":"http-attributes.d.ts","sourceRoot":"","sources":["../../src/request/http-attributes.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc;;IAEzB;;;;OAIG;;;;CAIK,CAAC"}

package/dist/request/http-attributes.js

@@ -1,5 +1,11 @@
 export const HttpAttributes = {
     VERIFIED_TOKEN: 'verifiedToken',
+    /**
+     * Name of the auth stack that authenticated the request. Set by Router before
+     * the stack runs, so guards can assert *which* stack authenticated the caller
+     * — `scopes` share one flat namespace across stacks and cannot carry that.
+     */
+    AUTH_STACK: 'authStack',
     VALIDATED_INPUT: '__validated_input__',
     REQUEST_VALIDATOR: '__request_validator__',
 };

package/dist/request/http-attributes.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-attributes.js","sourceRoot":"","sources":["../../src/request/http-attributes.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc,EAAE,eAAe;IAC/B,eAAe,EAAE,qBAAqB;IACtC,iBAAiB,EAAE,uBAAuB;CAClC,CAAC"}
+{"version":3,"file":"http-attributes.js","sourceRoot":"","sources":["../../src/request/http-attributes.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc,EAAE,eAAe;IAC/B;;;;OAIG;IACH,UAAU,EAAE,WAAW;IACvB,eAAe,EAAE,qBAAqB;IACtC,iBAAiB,EAAE,uBAAuB;CAClC,CAAC"}

package/dist/request/index.d.ts

@@ -5,4 +5,6 @@ export type { AuthenticatedToken } from './authenticated-token.interface.js';
 export { HttpAttributes } from './http-attributes.js';
 export type { ResponseSerializer } from './response-serializer.interface.js';
 export { DefaultResponseSerializer } from './default.serializer.js';
+export type { RequestDeserializer } from './request-deserializer.interface.js';
+export { DefaultRequestDeserializer, type DefaultRequestDeserializerOptions, } from './default.deserializer.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/request/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,2BAA2B,CAAC"}

package/dist/request/index.js

@@ -1,3 +1,4 @@
 export { HttpAttributes } from './http-attributes.js';
 export { DefaultResponseSerializer } from './default.serializer.js';
+export { DefaultRequestDeserializer, } from './default.deserializer.js';
 //# sourceMappingURL=index.js.map

package/dist/request/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EACL,0BAA0B,GAE3B,MAAM,2BAA2B,CAAC"}

package/dist/request/request-deserializer.interface.d.ts

@@ -0,0 +1,4 @@
+export interface RequestDeserializer {
+    deserializeQuery(query: Record<string, string | readonly string[]>): Record<string, string | readonly string[]>;
+}
+//# sourceMappingURL=request-deserializer.interface.d.ts.map

package/dist/request/request-deserializer.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-deserializer.interface.d.ts","sourceRoot":"","sources":["../../src/request/request-deserializer.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAKlC,gBAAgB,CACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,GAChD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC;CAC/C"}

package/dist/request/request-deserializer.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=request-deserializer.interface.js.map

package/dist/request/request-deserializer.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-deserializer.interface.js","sourceRoot":"","sources":["../../src/request/request-deserializer.interface.ts"],"names":[],"mappings":""}

package/dist/router/auth-middleware-stack.type.d.ts

@@ -1,13 +1,29 @@
 import type { HttpMiddleware } from '../request/http-middleware.type.js';
 /**
- * Router runs phases in fixed order regardless of key declaration —
- * `tokenVerification` first, then `sessionLoad` if present. Phase
- * misordering is a type error, not a runtime bug.
+ * One named authentication stack. Router runs phases in fixed order regardless
+ * of key declaration — `credentialVerification` first, then `sessionLoad` if
+ * present. Phase misordering is a type error, not a runtime bug.
+ *
+ * The phase is named for the credential rather than the token because a stack
+ * may verify a JWT, an opaque token, an API key, or a client certificate. The
+ * attribute it populates keeps the `VERIFIED_TOKEN` name, which is the
+ * long-standing contract with `@quilla-be-kit/security`'s `Token`.
  */
 export type AuthMiddlewareStack = {
     /** Must populate `HttpAttributes.VERIFIED_TOKEN` on success. */
-    readonly tokenVerification: HttpMiddleware;
-    /** Optional — omit for services that verify tokens but don't load sessions. */
+    readonly credentialVerification: HttpMiddleware;
+    /**
+     * Optional — omit for services that verify credentials but don't load
+     * sessions.
+     *
+     * When present it must populate `ExecutionContext.session` (`scopeId` +
+     * `userId`) and set `actorType`, via a nested `runWithContext`. Downstream
+     * toolkit surfaces treat session presence as the single source of truth for
+     * auth-derived identity: `@ValidateRequest` injects `scopeId`/`userId` into
+     * validated input only when `session` is set, so a stack that sets
+     * `actorType` but omits `session` fails open — the handler runs with an
+     * undefined scope instead of being rejected.
+     */
     readonly sessionLoad?: HttpMiddleware;
 };
 //# sourceMappingURL=auth-middleware-stack.type.d.ts.map

package/dist/router/auth-middleware-stack.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-middleware-stack.type.d.ts","sourceRoot":"","sources":["../../src/router/auth-middleware-stack.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,gEAAgE;IAChE,QAAQ,CAAC,iBAAiB,EAAE,cAAc,CAAC;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;CACvC,CAAC"}
+{"version":3,"file":"auth-middleware-stack.type.d.ts","sourceRoot":"","sources":["../../src/router/auth-middleware-stack.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,gEAAgE;IAChE,QAAQ,CAAC,sBAAsB,EAAE,cAAc,CAAC;IAChD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;CACvC,CAAC"}

package/dist/router/http-module-meta.type.d.ts

@@ -5,5 +5,10 @@ export type HttpModuleMeta = {
     readonly middlewares?: readonly HttpMiddleware[];
     readonly prefix?: string;
     readonly version?: string;
+    /**
+     * Module-level default auth stack, overridden by a controller- or route-level
+     * `authStack`. Must name a stack declared in `RouterOptions.authStacks`.
+     */
+    readonly authStack?: string;
 };
 //# sourceMappingURL=http-module-meta.type.d.ts.map

package/dist/router/http-module-meta.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-module-meta.type.d.ts","sourceRoot":"","sources":["../../src/router/http-module-meta.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAEhF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAC;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC"}
+{"version":3,"file":"http-module-meta.type.d.ts","sourceRoot":"","sources":["../../src/router/http-module-meta.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAEhF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAC;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC"}

package/dist/router/normalized-route.type.d.ts

@@ -6,9 +6,14 @@ export type NormalizedRoute = {
     readonly httpMethod: HttpMethod;
     readonly fullPath: string;
     readonly public: boolean;
+    /**
+     * Resolved auth stack name. `undefined` on public routes, and on every route
+     * when no `authStacks` are configured.
+     */
+    readonly authStack: string | undefined;
     /**
      * Complete ordered middleware chain for this route:
-     * `[system? → globalMiddlewares → (public ? [] : authMiddlewares) → moduleMiddlewares → registrationMiddlewares]`.
+     * `[system? → globalMiddlewares → (public ? [] : resolved auth stack) → moduleMiddlewares → registrationMiddlewares]`.
      * Adapters iterate and wrap each entry; they do not re-compose the chain.
      */
     readonly middlewareChain: readonly HttpMiddleware[];

package/dist/router/normalized-route.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalized-route.type.d.ts","sourceRoot":"","sources":["../../src/router/normalized-route.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC"}
+{"version":3,"file":"normalized-route.type.d.ts","sourceRoot":"","sources":["../../src/router/normalized-route.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC"}