@seifer-webapp-factory/kits 0.1.0

package/dist/backend/http/core/errors.d.ts

@@ -0,0 +1,41 @@
+import type { KernelResponse, ValidationIssue } from './ports.js';
+export type ErrorCategory = 'bad_request' | 'validation' | 'unauthorized' | 'forbidden' | 'not_found' | 'conflict' | 'unprocessable' | 'rate_limited' | 'internal';
+export interface HttpErrorOptions {
+    code?: string;
+    details?: unknown;
+    cause?: unknown;
+}
+/** Basisklasse van de kernel-fout-taxonomie. */
+export declare class HttpError extends Error {
+    readonly category: ErrorCategory;
+    readonly status: number;
+    readonly code: string;
+    readonly details: unknown;
+    constructor(category: ErrorCategory, message: string, options?: HttpErrorOptions);
+}
+/** Validatiefout met een gestructureerde lijst overtredingen (US-0203/US-0205). */
+export declare class ValidationError extends HttpError {
+    readonly issues: ValidationIssue[];
+    constructor(issues: ValidationIssue[], message?: string);
+}
+export declare const badRequest: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const unauthorized: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const forbidden: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const notFound: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const conflict: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const unprocessable: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare const internal: (message?: string, options?: HttpErrorOptions) => HttpError;
+export declare function isHttpError(value: unknown): value is HttpError;
+export interface ErrorResponseOptions {
+    correlationId?: string;
+    sensitiveKeys?: string[];
+    /** Interne fout-details tonen (alleen voor dev). Default false. */
+    exposeInternal?: boolean;
+}
+/**
+ * Mapt een willekeurige geworpen waarde naar een consistente {@link KernelResponse}. Bekende
+ * {@link HttpError}s behouden hun status; onbekende fouten worden 500 zonder stacktrace/interne
+ * details (US-0204 AC2). Gevoelige velden in details worden geredigeerd (AC3).
+ */
+export declare function toErrorResponse(error: unknown, options?: ErrorResponseOptions): KernelResponse;
+//# sourceMappingURL=errors.d.ts.map

package/dist/backend/http/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../backend/src/http/core/errors.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,YAAY,GACZ,cAAc,GACd,WAAW,GACX,WAAW,GACX,UAAU,GACV,eAAe,GACf,cAAc,GACd,UAAU,CAAC;AA0Bf,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,gDAAgD;AAChD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAEd,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB;CAUrF;AAED,mFAAmF;AACnF,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;gBAEvB,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,SAAsB;CAIrE;AAED,eAAO,MAAM,UAAU,GAAI,gBAAuB,EAAE,UAAU,gBAAgB,KAAG,SACjC,CAAC;AACjD,eAAO,MAAM,YAAY,GAAI,gBAAwB,EAAE,UAAU,gBAAgB,KAAG,SACnC,CAAC;AAClD,eAAO,MAAM,SAAS,GAAI,gBAAqB,EAAE,UAAU,gBAAgB,KAAG,SAChC,CAAC;AAC/C,eAAO,MAAM,QAAQ,GAAI,gBAAqB,EAAE,UAAU,gBAAgB,KAAG,SAC/B,CAAC;AAC/C,eAAO,MAAM,QAAQ,GAAI,gBAAoB,EAAE,UAAU,gBAAgB,KAAG,SAC/B,CAAC;AAC9C,eAAO,MAAM,aAAa,GAAI,gBAAgC,EAAE,UAAU,gBAAgB,KAAG,SAC3C,CAAC;AACnD,eAAO,MAAM,QAAQ,GAAI,gBAAiC,EAAE,UAAU,gBAAgB,KAAG,SAC5C,CAAC;AAE9C,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,oBAAyB,GAAG,cAAc,CA2BlG"}

package/dist/backend/http/core/errors.js

@@ -0,0 +1,99 @@
+/**
+ * US-0204 — Uniforme error-taxonomie met deterministische mapping naar HTTP-statuscodes en een
+ * consistent response-body-formaat. Onbekende fouten mappen veilig naar 500 zonder interne details
+ * of PII te lekken. Domein-loos: concrete domeinfouten worden hierop afgebeeld.
+ */
+import { redactSensitive } from './redaction.js';
+const STATUS_BY_CATEGORY = {
+    bad_request: 400,
+    validation: 400,
+    unauthorized: 401,
+    forbidden: 403,
+    not_found: 404,
+    conflict: 409,
+    unprocessable: 422,
+    rate_limited: 429,
+    internal: 500,
+};
+const DEFAULT_CODE = {
+    bad_request: 'BAD_REQUEST',
+    validation: 'VALIDATION_ERROR',
+    unauthorized: 'UNAUTHORIZED',
+    forbidden: 'FORBIDDEN',
+    not_found: 'NOT_FOUND',
+    conflict: 'CONFLICT',
+    unprocessable: 'UNPROCESSABLE_ENTITY',
+    rate_limited: 'RATE_LIMITED',
+    internal: 'INTERNAL_ERROR',
+};
+/** Basisklasse van de kernel-fout-taxonomie. */
+export class HttpError extends Error {
+    category;
+    status;
+    code;
+    details;
+    constructor(category, message, options = {}) {
+        super(message);
+        this.name = new.target.name;
+        this.category = category;
+        this.status = STATUS_BY_CATEGORY[category];
+        this.code = options.code ?? DEFAULT_CODE[category];
+        this.details = options.details;
+        if (options.cause !== undefined)
+            this.cause = options.cause;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/** Validatiefout met een gestructureerde lijst overtredingen (US-0203/US-0205). */
+export class ValidationError extends HttpError {
+    issues;
+    constructor(issues, message = 'Validatie mislukt') {
+        super('validation', message, { code: 'VALIDATION_ERROR', details: { issues } });
+        this.issues = issues;
+    }
+}
+export const badRequest = (message = 'Bad request', options) => new HttpError('bad_request', message, options);
+export const unauthorized = (message = 'Unauthorized', options) => new HttpError('unauthorized', message, options);
+export const forbidden = (message = 'Forbidden', options) => new HttpError('forbidden', message, options);
+export const notFound = (message = 'Not found', options) => new HttpError('not_found', message, options);
+export const conflict = (message = 'Conflict', options) => new HttpError('conflict', message, options);
+export const unprocessable = (message = 'Unprocessable entity', options) => new HttpError('unprocessable', message, options);
+export const internal = (message = 'Internal server error', options) => new HttpError('internal', message, options);
+export function isHttpError(value) {
+    return value instanceof HttpError;
+}
+/**
+ * Mapt een willekeurige geworpen waarde naar een consistente {@link KernelResponse}. Bekende
+ * {@link HttpError}s behouden hun status; onbekende fouten worden 500 zonder stacktrace/interne
+ * details (US-0204 AC2). Gevoelige velden in details worden geredigeerd (AC3).
+ */
+export function toErrorResponse(error, options = {}) {
+    const correlationId = options.correlationId;
+    if (isHttpError(error)) {
+        const body = {
+            code: error.code,
+            message: error.message,
+        };
+        if (correlationId)
+            body['correlationId'] = correlationId;
+        if (error instanceof ValidationError) {
+            body['issues'] = error.issues;
+        }
+        else if (error.details !== undefined) {
+            body['details'] = redactSensitive(error.details, options.sensitiveKeys);
+        }
+        return { status: error.status, headers: {}, body: { error: body } };
+    }
+    // Onbekende fout -> veilig 500, geen interne details/PII.
+    const body = {
+        code: DEFAULT_CODE.internal,
+        message: 'Internal server error',
+    };
+    if (correlationId)
+        body['correlationId'] = correlationId;
+    if (options.exposeInternal && error instanceof Error) {
+        body['details'] = { name: error.name, message: error.message };
+    }
+    return { status: 500, headers: {}, body: { error: body } };
+}
+//# sourceMappingURL=errors.js.map

package/dist/backend/http/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../backend/src/http/core/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAcjD,MAAM,kBAAkB,GAAkC;IACxD,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,GAAG;IACf,YAAY,EAAE,GAAG;IACjB,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,GAAG;IAClB,YAAY,EAAE,GAAG;IACjB,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,MAAM,YAAY,GAAkC;IAClD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,kBAAkB;IAC9B,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,sBAAsB;IACrC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAQF,gDAAgD;AAChD,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,QAAQ,CAAgB;IACxB,MAAM,CAAS;IACf,IAAI,CAAS;IACb,OAAO,CAAU;IAE1B,YAAY,QAAuB,EAAE,OAAe,EAAE,UAA4B,EAAE;QAClF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAG,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACrF,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,eAAgB,SAAQ,SAAS;IACnC,MAAM,CAAoB;IAEnC,YAAY,MAAyB,EAAE,OAAO,GAAG,mBAAmB;QAClE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,GAAG,aAAa,EAAE,OAA0B,EAAa,EAAE,CAC3F,IAAI,SAAS,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,GAAG,cAAc,EAAE,OAA0B,EAAa,EAAE,CAC9F,IAAI,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,GAAG,WAAW,EAAE,OAA0B,EAAa,EAAE,CACxF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,WAAW,EAAE,OAA0B,EAAa,EAAE,CACvF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,OAA0B,EAAa,EAAE,CACtF,IAAI,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,GAAG,sBAAsB,EAAE,OAA0B,EAAa,EAAE,CACvG,IAAI,SAAS,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,uBAAuB,EAAE,OAA0B,EAAa,EAAE,CACnG,IAAI,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE9C,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,SAAS,CAAC;AACpC,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,UAAgC,EAAE;IAChF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAE5C,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAA4B;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,IAAI,aAAa;YAAE,IAAI,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QACzD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,0DAA0D;IAC1D,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,YAAY,CAAC,QAAQ;QAC3B,OAAO,EAAE,uBAAuB;KACjC,CAAC;IACF,IAAI,aAAa;QAAE,IAAI,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;IACzD,IAAI,OAAO,CAAC,cAAc,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC"}

package/dist/backend/http/core/kernel.d.ts

@@ -0,0 +1,54 @@
+/**
+ * De framework-agnostische http-kernel: bootstrap + request-dispatch. Bindt US-0201 t/m US-0207:
+ * route-modules mounten, request-context, input-validatie, error-taxonomie, paginatie, OpenAPI en
+ * CORS/security-headers. Adapters (Node http, NestJS) vertalen hun request/response naar
+ * {@link KernelRequest}/{@link KernelResponse} en roepen {@link Kernel.handle} aan.
+ */
+import { type ContextConfig } from './context.js';
+import { type OpenApiDocument, type OpenApiInfo } from './openapi.js';
+import type { KernelRequest, KernelResponse, RouteModule } from './ports.js';
+import { type CompiledRoute } from './router.js';
+import { type CorsConfig, type SecurityHeadersConfig } from './security.js';
+export interface KernelConfig {
+    /** Base-path waaronder alle routes gemount worden, bv. `/api`. */
+    basePath?: string;
+    context?: ContextConfig;
+    cors?: CorsConfig;
+    security?: SecurityHeadersConfig;
+    /** OpenAPI-metadata + spec-endpoint. Zonder `info` wordt geen spec-endpoint aangeboden. */
+    openapi?: {
+        info: OpenApiInfo;
+        servers?: {
+            url: string;
+            description?: string;
+        }[];
+        path?: string;
+    };
+    /** Extra gevoelige key-namen voor redactie in foutresponses. */
+    sensitiveKeys?: string[];
+    /** Interne fout-details tonen (alleen dev). Default false. */
+    exposeInternalErrors?: boolean;
+}
+export type KernelLogEvent = {
+    type: 'invalid-correlation';
+    requestId: string;
+} | {
+    type: 'unhandled-error';
+    requestId: string;
+    error: unknown;
+};
+export interface CreateKernelOptions {
+    config?: KernelConfig;
+    /** Geïnjecteerde route-modules (US-0201). */
+    routeModules: RouteModule[];
+    /** Optionele log-hook (bv. voor US-0202 AC3). */
+    onLog?: (event: KernelLogEvent) => void;
+}
+export interface Kernel {
+    handle(req: KernelRequest): Promise<KernelResponse>;
+    openapi(): OpenApiDocument;
+    readonly routes: ReadonlyArray<CompiledRoute>;
+}
+/** Bootstrap: valideert de route-modules (fail-fast) en levert een dispatch-klare kernel. */
+export declare function createKernel(options: CreateKernelOptions): Kernel;
+//# sourceMappingURL=kernel.d.ts.map

package/dist/backend/http/core/kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../../../backend/src/http/core/kernel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAmB,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEvF,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EAGd,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAgC,KAAK,UAAU,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAG1G,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,2FAA2F;IAC3F,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClG,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,6CAA6C;IAC7C,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,iDAAiD;IACjD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpD,OAAO,IAAI,eAAe,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CAC/C;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAsFjE"}

package/dist/backend/http/core/kernel.js

@@ -0,0 +1,122 @@
+/**
+ * De framework-agnostische http-kernel: bootstrap + request-dispatch. Bindt US-0201 t/m US-0207:
+ * route-modules mounten, request-context, input-validatie, error-taxonomie, paginatie, OpenAPI en
+ * CORS/security-headers. Adapters (Node http, NestJS) vertalen hun request/response naar
+ * {@link KernelRequest}/{@link KernelResponse} en roepen {@link Kernel.handle} aan.
+ */
+import { buildRequestContext, contextHeaders, runWithContext, } from './context.js';
+import { notFound, toErrorResponse } from './errors.js';
+import { generateOpenApi } from './openapi.js';
+import { paginate, parseListQuery } from './pagination.js';
+import { compileRoutes, matchRoute } from './router.js';
+import { resolveCors, securityHeaders } from './security.js';
+import { validateRequest } from './validation.js';
+/** Bootstrap: valideert de route-modules (fail-fast) en levert een dispatch-klare kernel. */
+export function createKernel(options) {
+    const config = options.config ?? {};
+    const routes = compileRoutes(options.routeModules, config.basePath ?? '');
+    const openapiPath = config.openapi ? config.openapi.path ?? '/openapi.json' : undefined;
+    const buildDoc = () => {
+        if (!config.openapi) {
+            throw new Error('OpenAPI is niet geconfigureerd (config.openapi ontbreekt).');
+        }
+        const opts = { info: config.openapi.info };
+        if (config.openapi.servers)
+            opts.servers = config.openapi.servers;
+        return generateOpenApi(routes, opts);
+    };
+    async function handle(req) {
+        const baseHeaders = securityHeaders(config.security);
+        const origin = header(req.headers, 'origin');
+        const cors = resolveCors(origin, req.method, config.cors ?? {}, header(req.headers, 'access-control-request-method') !== undefined);
+        Object.assign(baseHeaders, cors.headers);
+        // CORS-preflight kort-sluiten zonder de handler (US-0207 AC2).
+        if (cors.isPreflight) {
+            return { status: 204, headers: baseHeaders, body: null };
+        }
+        const built = buildRequestContext(req.headers, config.context);
+        if (built.invalidCorrelation) {
+            options.onLog?.({ type: 'invalid-correlation', requestId: built.context.requestId });
+        }
+        Object.assign(baseHeaders, contextHeaders(built.context, config.context));
+        return runWithContext(built.context, async () => {
+            try {
+                // OpenAPI-spec-endpoint (US-0206).
+                if (openapiPath && req.method.toUpperCase() === 'GET' && req.path === openapiPath) {
+                    return withHeaders({ status: 200, headers: {}, body: buildDoc() }, baseHeaders);
+                }
+                const match = matchRoute(routes, req.method, req.path);
+                if (!match) {
+                    throw notFound(`Geen route voor ${req.method} ${req.path}`);
+                }
+                const reqWithParams = { ...req, params: match.params };
+                const validated = validateRequest(reqWithParams, match.route.definition.schemas);
+                const input = {
+                    body: validated.body,
+                    query: validated.query,
+                    params: validated.params,
+                    raw: reqWithParams,
+                    context: built.context,
+                };
+                const listConfig = listConfigOf(match.route);
+                if (listConfig) {
+                    input.list = parseListQuery(req.query ?? {}, listConfig);
+                }
+                const result = await match.route.definition.handler(input);
+                return withHeaders(buildSuccess(match.route, result, input.list), baseHeaders);
+            }
+            catch (error) {
+                const response = toErrorResponse(error, {
+                    correlationId: built.context.correlationId,
+                    sensitiveKeys: config.sensitiveKeys,
+                    exposeInternal: config.exposeInternalErrors ?? false,
+                });
+                if (response.status >= 500) {
+                    options.onLog?.({ type: 'unhandled-error', requestId: built.context.requestId, error });
+                }
+                return withHeaders(response, baseHeaders);
+            }
+        });
+    }
+    return {
+        handle,
+        openapi: buildDoc,
+        routes,
+    };
+}
+function buildSuccess(route, result, list) {
+    const explicitStatus = route.definition.status;
+    if (list && isListResult(result)) {
+        return {
+            status: explicitStatus ?? 200,
+            headers: {},
+            body: paginate(result.items, result.total, list),
+        };
+    }
+    if (result === undefined || result === null) {
+        return { status: explicitStatus ?? 204, headers: {}, body: null };
+    }
+    return { status: explicitStatus ?? 200, headers: {}, body: result };
+}
+function isListResult(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        Array.isArray(value.items) &&
+        typeof value.total === 'number');
+}
+function listConfigOf(route) {
+    const list = route.definition.list;
+    if (!list)
+        return undefined;
+    return list === true ? {} : list;
+}
+function withHeaders(response, base) {
+    return { ...response, headers: { ...base, ...response.headers } };
+}
+function header(headers, name) {
+    const value = headers[name] ?? headers[name.toLowerCase()];
+    if (value === undefined)
+        return undefined;
+    return Array.isArray(value) ? value[0] : value;
+}
+//# sourceMappingURL=kernel.js.map

package/dist/backend/http/core/kernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../../../backend/src/http/core/kernel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,cAAc,GAEf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAA0C,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQ3D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,eAAe,EAA+C,MAAM,eAAe,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAkClD,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IAExF,MAAM,QAAQ,GAAG,GAAoB,EAAE;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAA0C,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAClE,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,KAAK,UAAU,MAAM,CAAC,GAAkB;QACtC,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,WAAW,CACtB,MAAM,EACN,GAAG,CAAC,MAAM,EACV,MAAM,CAAC,IAAI,IAAI,EAAE,EACjB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,+BAA+B,CAAC,KAAK,SAAS,CACnE,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,+DAA+D;QAC/D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAE1E,OAAO,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC9C,IAAI,CAAC;gBACH,mCAAmC;gBACnC,IAAI,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClF,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;gBAClF,CAAC;gBAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,QAAQ,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,aAAa,GAAkB,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtE,MAAM,SAAS,GAAG,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAEjF,MAAM,KAAK,GAAG;oBACZ,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,GAAG,EAAE,aAAa;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACiC,CAAC;gBAE1D,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,UAAU,EAAE,CAAC;oBACf,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE;oBACtC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;oBAC1C,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,cAAc,EAAE,MAAM,CAAC,oBAAoB,IAAI,KAAK;iBACrD,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC3B,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBACD,OAAO,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO,EAAE,QAAQ;QACjB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAoB,EACpB,MAAe,EACf,IAAmD;IAEnD,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IAE/C,IAAI,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,cAAc,IAAI,GAAG;YAC7B,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,cAAc,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,cAAc,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAE,KAA6B,CAAC,KAAK,CAAC;QACnD,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,QAAwB,EAAE,IAA4B;IACzE,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,MAAM,CAAC,OAAiC,EAAE,IAAY;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC"}

package/dist/backend/http/core/openapi.d.ts

@@ -0,0 +1,37 @@
+/**
+ * US-0206 — OpenAPI-generatie.
+ *
+ * Genereert een OpenAPI 3.1-document uit de gecompileerde routes: paden, methodes, request-/response-
+ * schema's (uit de DTO-validatie) en foutresponses (uit de error-taxonomie). Routes zonder expliciet
+ * schema krijgen een veilige generieke fallback (AC2). Conflicterende registraties worden al bij het
+ * compileren (router) fail-fast afgevangen (AC3). Document-metadata is configureerbaar (AC4).
+ */
+import type { CompiledRoute } from './router.js';
+import type { JsonSchema } from './ports.js';
+export interface OpenApiInfo {
+    title: string;
+    version: string;
+    description?: string;
+}
+export interface OpenApiOptions {
+    info: OpenApiInfo;
+    servers?: {
+        url: string;
+        description?: string;
+    }[];
+}
+export interface OpenApiDocument {
+    openapi: string;
+    info: OpenApiInfo;
+    servers?: {
+        url: string;
+        description?: string;
+    }[];
+    paths: Record<string, Record<string, unknown>>;
+    components: {
+        schemas: Record<string, JsonSchema>;
+    };
+}
+/** Bouwt het OpenAPI-document. */
+export declare function generateOpenApi(routes: CompiledRoute[], options: OpenApiOptions): OpenApiDocument;
+//# sourceMappingURL=openapi.d.ts.map

package/dist/backend/http/core/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../../../backend/src/http/core/openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAClD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;CACrD;AAoBD,kCAAkC;AAClC,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,cAAc,GAAG,eAAe,CAkBjG"}

package/dist/backend/http/core/openapi.js

@@ -0,0 +1,99 @@
+const GENERIC_OBJECT = { type: 'object', additionalProperties: true };
+const ERROR_SCHEMA = {
+    type: 'object',
+    properties: {
+        error: {
+            type: 'object',
+            properties: {
+                code: { type: 'string' },
+                message: { type: 'string' },
+                correlationId: { type: 'string' },
+            },
+            required: ['code', 'message'],
+        },
+    },
+    required: ['error'],
+};
+/** Bouwt het OpenAPI-document. */
+export function generateOpenApi(routes, options) {
+    const paths = {};
+    for (const route of routes) {
+        const openapiPath = toOpenApiPath(route.fullPath);
+        const operation = buildOperation(route);
+        paths[openapiPath] ??= {};
+        paths[openapiPath][route.method.toLowerCase()] = operation;
+    }
+    const doc = {
+        openapi: '3.1.0',
+        info: options.info,
+        paths,
+        components: { schemas: { Error: ERROR_SCHEMA } },
+    };
+    if (options.servers)
+        doc.servers = options.servers;
+    return doc;
+}
+function buildOperation(route) {
+    const def = route.definition;
+    const operation = {};
+    if (def.summary)
+        operation['summary'] = def.summary;
+    const parameters = buildParameters(route);
+    if (parameters.length > 0)
+        operation['parameters'] = parameters;
+    if (def.schemas?.body && def.method !== 'GET' && def.method !== 'HEAD') {
+        operation['requestBody'] = {
+            required: true,
+            content: { 'application/json': { schema: schemaOf(def.schemas.body) } },
+        };
+    }
+    const successStatus = String(def.status ?? 200);
+    const responses = {
+        [successStatus]: {
+            description: 'Success',
+            content: { 'application/json': { schema: schemaOf(def.schemas?.response) } },
+        },
+        '400': errorResponse('Bad request / validation error'),
+        '500': errorResponse('Internal server error'),
+    };
+    operation['responses'] = responses;
+    return operation;
+}
+function buildParameters(route) {
+    const params = [];
+    for (const seg of route.segments) {
+        if (seg.param) {
+            params.push({
+                name: seg.value,
+                in: 'path',
+                required: true,
+                schema: { type: 'string' },
+            });
+        }
+    }
+    if (route.definition.list) {
+        params.push({ name: 'page', in: 'query', required: false, schema: { type: 'integer', minimum: 1 } }, { name: 'pageSize', in: 'query', required: false, schema: { type: 'integer', minimum: 1 } }, { name: 'sort', in: 'query', required: false, schema: { type: 'string' } });
+    }
+    return params;
+}
+function schemaOf(schema) {
+    if (schema?.jsonSchema) {
+        try {
+            return schema.jsonSchema();
+        }
+        catch {
+            return GENERIC_OBJECT;
+        }
+    }
+    return GENERIC_OBJECT;
+}
+function errorResponse(description) {
+    return {
+        description,
+        content: { 'application/json': { schema: { $ref: '#/components/schemas/Error' } } },
+    };
+}
+function toOpenApiPath(path) {
+    return path.replace(/:([A-Za-z0-9_]+)/g, '{$1}');
+}
+//# sourceMappingURL=openapi.js.map

package/dist/backend/http/core/openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../../../backend/src/http/core/openapi.ts"],"names":[],"mappings":"AA8BA,MAAM,cAAc,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;AAElF,MAAM,YAAY,GAAe;IAC/B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC9B;KACF;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;CACpB,CAAC;AAEF,kCAAkC;AAClC,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,OAAuB;IAC9E,MAAM,KAAK,GAA4C,EAAE,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,WAAW,CAA6B,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC;IAC1F,CAAC;IAED,MAAM,GAAG,GAAoB;QAC3B,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;KACjD,CAAC;IACF,IAAI,OAAO,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7B,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,GAAG,CAAC,OAAO;QAAE,SAAS,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IAEpD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;IAEhE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvE,SAAS,CAAC,aAAa,CAAC,GAAG;YACzB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IAChD,MAAM,SAAS,GAA4B;QACzC,CAAC,aAAa,CAAC,EAAE;YACf,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE;SAC7E;QACD,KAAK,EAAE,aAAa,CAAC,gCAAgC,CAAC;QACtD,KAAK,EAAE,aAAa,CAAC,uBAAuB,CAAC;KAC9C,CAAC;IACF,SAAS,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;IAEnC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,CAAC,KAAK;gBACf,EAAE,EAAE,MAAM;gBACV,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EACvF,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAC3F,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAiD;IACjE,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO;QACL,WAAW;QACX,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC"}

package/dist/backend/http/core/pagination.d.ts

@@ -0,0 +1,17 @@
+import type { ListConfig, ListParams } from './ports.js';
+/**
+ * Parset `page`, `pageSize`, `sort` en filters uit de query. `sort` heeft de vorm
+ * `veld:asc,ander:desc` of `veld,-ander`. Ongeldige/niet-toegestane velden -> {@link ValidationError}.
+ */
+export declare function parseListQuery(query?: Record<string, unknown>, config?: ListConfig): ListParams;
+/** Bouwt een consistente response-envelope met paginatie-metadata. */
+export declare function paginate<T>(items: T[], total: number, params: Pick<ListParams, 'page' | 'pageSize'>): {
+    data: T[];
+    meta: {
+        page: number;
+        pageSize: number;
+        total: number;
+        totalPages: number;
+    };
+};
+//# sourceMappingURL=pagination.d.ts.map

package/dist/backend/http/core/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../../backend/src/http/core/pagination.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAA8B,MAAM,YAAY,CAAC;AAKrF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,MAAM,GAAE,UAAe,GAAG,UAAU,CAwBvG;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CAAC,CAAC,EACxB,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC,GAC5C;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAU5F"}

package/dist/backend/http/core/pagination.js

@@ -0,0 +1,108 @@
+/**
+ * US-0205 — Paginatie/filtering/sortering-conventies.
+ *
+ * Parset en valideert list-query-parameters tot genormaliseerde, getypte parameters en levert een
+ * consistente response-envelope met metadata. Toegestane sorteer-/filtervelden worden per route
+ * geïnjecteerd (whitelist); defaults en limieten zijn configureerbaar. De kern bevat geen
+ * domeinvelden.
+ */
+import { ValidationError } from './errors.js';
+const DEFAULT_PAGE_SIZE = 20;
+const DEFAULT_MAX_PAGE_SIZE = 100;
+/**
+ * Parset `page`, `pageSize`, `sort` en filters uit de query. `sort` heeft de vorm
+ * `veld:asc,ander:desc` of `veld,-ander`. Ongeldige/niet-toegestane velden -> {@link ValidationError}.
+ */
+export function parseListQuery(query = {}, config = {}) {
+    const issues = [];
+    const defaultPageSize = config.defaultPageSize ?? DEFAULT_PAGE_SIZE;
+    const maxPageSize = config.maxPageSize ?? DEFAULT_MAX_PAGE_SIZE;
+    const page = parsePositiveInt(query['page'], 1, 'page', issues);
+    let pageSize = parsePositiveInt(query['pageSize'], defaultPageSize, 'pageSize', issues);
+    // AC2: begrens boven het maximum tot het maximum.
+    if (pageSize > maxPageSize)
+        pageSize = maxPageSize;
+    const sort = parseSort(query['sort'], config, issues);
+    const filters = parseFilters(query, config, issues);
+    if (issues.length > 0) {
+        throw new ValidationError(issues, 'Ongeldige list-parameters');
+    }
+    return {
+        page,
+        pageSize,
+        offset: (page - 1) * pageSize,
+        sort: sort.length > 0 ? sort : (config.defaultSort ?? []),
+        filters,
+    };
+}
+/** Bouwt een consistente response-envelope met paginatie-metadata. */
+export function paginate(items, total, params) {
+    return {
+        data: items,
+        meta: {
+            page: params.page,
+            pageSize: params.pageSize,
+            total,
+            totalPages: params.pageSize > 0 ? Math.ceil(total / params.pageSize) : 0,
+        },
+    };
+}
+function parsePositiveInt(raw, fallback, field, issues) {
+    if (raw === undefined || raw === '')
+        return fallback;
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1) {
+        issues.push({ path: field, message: `moet een positief geheel getal zijn` });
+        return fallback;
+    }
+    return n;
+}
+function parseSort(raw, config, issues) {
+    if (raw === undefined || raw === '')
+        return [];
+    const allowed = config.allowedSortFields;
+    const tokens = String(raw)
+        .split(',')
+        .map((t) => t.trim())
+        .filter((t) => t.length > 0);
+    const result = [];
+    for (const token of tokens) {
+        let field = token;
+        let direction = 'asc';
+        if (token.includes(':')) {
+            const [f, d] = token.split(':');
+            field = (f ?? '').trim();
+            direction = (d ?? '').trim().toLowerCase() === 'desc' ? 'desc' : 'asc';
+        }
+        else if (token.startsWith('-')) {
+            field = token.slice(1);
+            direction = 'desc';
+        }
+        if (allowed && !allowed.includes(field)) {
+            issues.push({ path: 'sort', message: `sorteren op "${field}" is niet toegestaan` });
+            continue;
+        }
+        result.push({ field, direction });
+    }
+    return result;
+}
+const RESERVED = new Set(['page', 'pageSize', 'sort']);
+function parseFilters(query, config, issues) {
+    const allowed = config.allowedFilterFields;
+    const filters = {};
+    for (const [key, value] of Object.entries(query)) {
+        if (RESERVED.has(key))
+            continue;
+        if (value === undefined)
+            continue;
+        if (allowed === undefined)
+            continue; // geen filtering geconfigureerd -> negeer overige params
+        if (!allowed.includes(key)) {
+            issues.push({ path: key, message: `filteren op "${key}" is niet toegestaan` });
+            continue;
+        }
+        filters[key] = String(value);
+    }
+    return filters;
+}
+//# sourceMappingURL=pagination.js.map

package/dist/backend/http/core/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../../backend/src/http/core/pagination.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiC,EAAE,EAAE,SAAqB,EAAE;IACzF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,iBAAiB,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAEhE,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACxF,kDAAkD;IAClD,IAAI,QAAQ,GAAG,WAAW;QAAE,QAAQ,GAAG,WAAW,CAAC;IAEnD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ;QAC7B,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QACzD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CACtB,KAAU,EACV,KAAa,EACb,MAA6C;IAE7C,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK;YACL,UAAU,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;SACzE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAY,EACZ,QAAgB,EAChB,KAAa,EACb,MAAyB;IAEzB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,MAAkB,EAAE,MAAyB;IAC5E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/B,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,SAAS,GAAmB,KAAK,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,CAAC;aAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,KAAK,sBAAsB,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvD,SAAS,YAAY,CACnB,KAA8B,EAC9B,MAAkB,EAClB,MAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC3C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS,CAAC,yDAAyD;QAC9F,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,GAAG,sBAAsB,EAAE,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}