@theokit/http 0.4.0

package/README.md

@@ -0,0 +1,172 @@
+# @theokit/http-decorators
+
+NestJS-style decorators (`@Controller`, `@Get`, `@Post`, `@Body`, `@UseGuards`) that bridge to TheoKit's `defineRoute` + `defineMiddleware`. Opt-in for teams migrating from NestJS.
+
+## Install
+
+```bash
+pnpm add @theokit/http-decorators reflect-metadata
+```
+
+Add to your `tsconfig.json`:
+
+```json
+{
+  "compilerOptions": {
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true
+  }
+}
+```
+
+## Quick start
+
+```typescript
+import { Controller, Get, Post, Body } from '@theokit/http-decorators'
+import { z } from 'zod'
+
+const zCreateCat = z.object({ name: z.string(), age: z.number() })
+
+class CreateCatDto {
+  static schema = zCreateCat
+}
+
+@Controller('cats')
+export class CatsController {
+  @Get()
+  findAll(): string {
+    return 'This action returns all cats'
+  }
+
+  @Post()
+  create(@Body() body: CreateCatDto) {
+    return `Added ${(body as z.infer<typeof zCreateCat>).name}`
+  }
+}
+```
+
+## DTO validation (Pattern D2 — Zod static schema)
+
+TheoKit uses Zod as the single source of truth for validation. Attach a `static schema` to your DTO class:
+
+```typescript
+const zCreateCat = z.object({
+  name: z.string().min(2).max(50),
+  age: z.number().min(0),
+  breed: z.string(),
+})
+
+class CreateCatDto {
+  static schema = zCreateCat
+}
+```
+
+The bridge reads `CreateCatDto.schema` at metadata-walk time and feeds it to `defineRoute({ body: zCreateCat })`. This preserves TheoKit's OpenAPI generation + type inference pipeline.
+
+## Guards and Interceptors
+
+```typescript
+import { Controller, Get, UseGuards } from '@theokit/http-decorators'
+
+class AuthGuard {
+  canActivate(request: Request): boolean {
+    return request.headers.get('authorization') !== null
+  }
+}
+
+@Controller('admin')
+export class AdminController {
+  @UseGuards(AuthGuard)
+  @Get()
+  dashboard() {
+    return { status: 'authenticated' }
+  }
+}
+```
+
+Guards that return `false` produce a 401 response. `@UseInterceptors` wraps the handler for post-processing (logging, caching).
+
+## CLI scaffold
+
+```bash
+theokit generate controller cats
+# Creates server/controllers/cats.controller.ts
+```
+
+## registerControllers (low-level API)
+
+For advanced use cases without the Vite plugin:
+
+```typescript
+import { registerControllers } from '@theokit/http-decorators'
+import { CatsController } from './controllers/cats.controller.js'
+
+const routes = registerControllers([CatsController])
+// Returns RouteRegistration[] with verb, fullPath, walkResult per method
+```
+
+## Decorators reference
+
+| Decorator | Kind | Purpose |
+|---|---|---|
+| `@Controller(prefix?, opts?)` | Class | Route prefix scope |
+| `@Get(path?)` | Method | GET endpoint |
+| `@Post(path?)` | Method | POST endpoint |
+| `@Put(path?)` | Method | PUT endpoint |
+| `@Patch(path?)` | Method | PATCH endpoint |
+| `@Delete(path?)` | Method | DELETE endpoint |
+| `@Options(path?)` | Method | OPTIONS endpoint |
+| `@Head(path?)` | Method | HEAD endpoint |
+| `@All(path?)` | Method | All HTTP methods |
+| `@Body(key?)` | Parameter | Request body (or body[key]) |
+| `@Param(key?)` | Parameter | Route params (or params[key]) |
+| `@Query(key?)` | Parameter | Query string (or query[key]) |
+| `@Headers(name?)` | Parameter | Request headers |
+| `@Req()` | Parameter | Full Request object |
+| `@Res(opts?)` | Parameter | Response object (`passthrough` option) |
+| `@Session()` | Parameter | Session object |
+| `@Ip()` | Parameter | Client IP |
+| `@HostParam(key?)` | Parameter | Host parameters |
+| `@HttpCode(status)` | Method | Override response status code |
+| `@Header(name, value)` | Method | Set response header |
+| `@Redirect(url, status?)` | Method | Redirect response |
+| `@UseGuards(...guards)` | Class/Method | Attach guard classes |
+| `@UseInterceptors(...interceptors)` | Class/Method | Attach interceptor classes |
+
+## Limitations
+
+### Singleton-scope controllers only (v0.1.0)
+
+Controllers are instantiated once per `registerControllers` call. NestJS request-scoped controllers (`@Injectable({ scope: Scope.REQUEST })`) are not supported. Migration path: v0.2.0+ via `@theokit/di` integration.
+
+### Interceptor wrap semantics simplified
+
+NestJS interceptors can skip calling `next()` (e.g., cache-hit short-circuit). v0.1.0 wraps always call `next()` then post-process. Consumers needing pre-handler short-circuit should use `defineMiddleware` directly.
+
+### Handler returning Response bypasses decorator-set status/headers
+
+If your handler returns a `Response` object directly, `@HttpCode` and `@Header` decorators are not applied. You own the full response. This matches NestJS behavior with `@Res({ passthrough: false })`.
+
+## Troubleshooting
+
+### `HttpDecoratorsConfigError: emitDecoratorMetadata not enabled`
+
+Your `tsconfig.json` is missing the `emitDecoratorMetadata: true` flag. Add both flags:
+
+```json
+{
+  "compilerOptions": {
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true
+  }
+}
+```
+
+### `HttpDecoratorsConfigError: missing @Controller() decorator`
+
+You have `@Get`/`@Post` methods on a class that lacks `@Controller()`. Add the decorator to the class.
+
+## Bundle cost
+
+- Opt-in consumers: ~8-13KB gzipped (`reflect-metadata` ~3KB + this package ~5-10KB)
+- Non-opt-in consumers: 0KB

package/dist/app.d.ts

@@ -0,0 +1,67 @@
+import { S as ServerHandle } from './types-CGthbcon.js';
+
+/**
+ * TheoApp — NestJS/Spring Boot-style application bootstrap.
+ *
+ * Internally uses Web Standard Request/Response pipeline.
+ * Node adapter converts at the HTTP server boundary.
+ */
+/** Readiness check — async function returning health status. */
+type ReadinessCheck = () => Promise<{
+    name: string;
+    healthy: boolean;
+    message?: string;
+}>;
+interface TheoAppOptions {
+    /** Controller classes decorated with @Controller. */
+    controllers: Function[];
+    /** Agent classes decorated with @Agent — auto-wired with routes + SSE + tools. */
+    agents?: Function[];
+    /** @Module class for structured DI. */
+    module?: Function;
+    /** Provider/toolbox classes — instantiated and injected into controllers + agents. */
+    providers?: Function[];
+    /** LLM API key for agent execution (reads OPENROUTER_API_KEY env if not set). */
+    llmApiKey?: string;
+    /** LLM model override (default: from @Agent({ model }) metadata). */
+    llmModel?: string;
+    /** Agent stream factory override (for testing or custom SDK wiring). */
+    agentStreamFactory?: (walk: unknown, tools: unknown[], apiKey: string, model?: string) => (message: string, sessionId: string) => AsyncIterable<unknown>;
+    /** HTML string to serve at GET / (inline frontend). */
+    html?: string;
+    /** Readiness checks for GET /__theo/ready (K8s readiness probe). */
+    readinessChecks?: ReadinessCheck[];
+    /** Custom health endpoint path (default: '/__theo/health'). */
+    healthPath?: string;
+    /** Custom readiness endpoint path (default: '/__theo/ready'). */
+    readyPath?: string;
+}
+declare class TheoApp {
+    private serverHandle;
+    private readonly routes;
+    private frontendHtml?;
+    private readonly startTime;
+    private readonly healthPath;
+    private readonly readyPath;
+    private readonly readinessChecks;
+    private constructor();
+    /**
+     * Create a TheoKit application with Spring Boot-style DI.
+     *
+     * EC-7: async because Container may resolve async factories (Agent.create).
+     * EC-2: Registration order guaranteed: providers → controllers → agents.
+     */
+    static create(opts: TheoAppOptions): Promise<TheoApp>;
+    listen(port: number): Promise<void>;
+    getServerHandle(): ServerHandle;
+    close(): Promise<void>;
+    private agentRoutes;
+    private autoWireAgents;
+    private handleReadinessCheck;
+    private createFallbackStream;
+    private handleRequest;
+    private findRoute;
+    private buildArgs;
+}
+
+export { type ReadinessCheck, TheoApp, type TheoAppOptions };

package/dist/app.js

@@ -0,0 +1,11 @@
+import {
+  TheoApp
+} from "./chunk-TBMGRXH5.js";
+import "./chunk-SMWUPP2C.js";
+import "./chunk-HLW7YKZE.js";
+import "./chunk-3PGQVQWG.js";
+import "./chunk-7QVYU63E.js";
+export {
+  TheoApp
+};
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-34KOKJ5M.js

@@ -0,0 +1,71 @@
+import {
+  CATCH_EXCEPTIONS,
+  HttpException,
+  getMeta
+} from "./chunk-3PGQVQWG.js";
+import {
+  resolveOrNew
+} from "./chunk-LKNI6QEP.js";
+import {
+  __name
+} from "./chunk-7QVYU63E.js";
+
+// src/bridge/exception-filter-chain.ts
+async function runExceptionFilters(exception, filters, request, container) {
+  const host = {
+    getRequest: /* @__PURE__ */ __name(() => request, "getRequest")
+  };
+  for (const FilterCtor of filters) {
+    const catchTypes = getMeta(CATCH_EXCEPTIONS, FilterCtor) ?? [];
+    if (matchesException(exception, catchTypes)) {
+      const filter = resolveOrNew(FilterCtor, container);
+      try {
+        return await filter.catch(exception, host);
+      } catch (filterError) {
+        console.error("[@theokit/http] Exception filter threw:", filterError);
+        return globalFallback(exception);
+      }
+    }
+  }
+  return builtInResponse(exception);
+}
+__name(runExceptionFilters, "runExceptionFilters");
+function matchesException(exception, catchTypes) {
+  if (catchTypes.length === 0) return true;
+  return catchTypes.some((Type) => exception instanceof Type);
+}
+__name(matchesException, "matchesException");
+function builtInResponse(exception) {
+  if (exception instanceof HttpException) {
+    return new Response(JSON.stringify(exception.toJSON()), {
+      status: exception.statusCode,
+      headers: {
+        "content-type": "application/json"
+      }
+    });
+  }
+  return globalFallback(exception);
+}
+__name(builtInResponse, "builtInResponse");
+function globalFallback(exception) {
+  const message = exception instanceof Error ? exception.message : "Internal server error";
+  console.error("[@theokit/http] Unhandled exception:", exception);
+  return new Response(JSON.stringify({
+    error: {
+      code: "INTERNAL_SERVER_ERROR",
+      message,
+      statusCode: 500
+    }
+  }), {
+    status: 500,
+    headers: {
+      "content-type": "application/json"
+    }
+  });
+}
+__name(globalFallback, "globalFallback");
+
+export {
+  runExceptionFilters
+};
+//# sourceMappingURL=chunk-34KOKJ5M.js.map

package/dist/chunk-34KOKJ5M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/exception-filter-chain.ts"],"sourcesContent":["/**\n * Exception filter pipeline — Web Standard Request/Response.\n *\n * Returns a Response instead of writing to ServerResponse.\n * EC-1: recursion guard — filter that throws → global fallback.\n */\nimport { HttpException } from '../exceptions/http-exception.js'\nimport { getMeta, CATCH_EXCEPTIONS } from '../metadata/index.js'\n\nimport { resolveOrNew, type DiContainer } from './di-resolve.js'\n\n/** Interface for exception filter classes (bound via @UseFilters). */\nexport interface ExceptionFilter {\n  catch(exception: unknown, host: ArgumentsHost): Response | Promise<Response>\n}\n\n/** ArgumentsHost — Web Standard. */\nexport interface ArgumentsHost {\n  getRequest(): Request\n}\n\n/**\n * Run exception filters and return an error Response.\n * Returns the filter's Response or a built-in fallback.\n */\nexport async function runExceptionFilters(\n  exception: unknown,\n  filters: Function[],\n  request: Request,\n  container?: DiContainer,\n): Promise<Response> {\n  const host: ArgumentsHost = {\n    getRequest: () => request,\n  }\n\n  for (const FilterCtor of filters) {\n    const catchTypes = getMeta<Function[]>(CATCH_EXCEPTIONS, FilterCtor) ?? []\n    if (matchesException(exception, catchTypes)) {\n      const filter = resolveOrNew(FilterCtor, container) as ExceptionFilter\n      try {\n        return await filter.catch(exception, host)\n      } catch (filterError) {\n        // EC-1: filter itself threw — fall to global fallback\n        console.error('[@theokit/http] Exception filter threw:', filterError)\n        return globalFallback(exception)\n      }\n    }\n  }\n\n  return builtInResponse(exception)\n}\n\nfunction matchesException(exception: unknown, catchTypes: Function[]): boolean {\n  if (catchTypes.length === 0) return true\n  return catchTypes.some((Type) => exception instanceof Type)\n}\n\nfunction builtInResponse(exception: unknown): Response {\n  if (exception instanceof HttpException) {\n    return new Response(JSON.stringify(exception.toJSON()), {\n      status: exception.statusCode,\n      headers: { 'content-type': 'application/json' },\n    })\n  }\n  return globalFallback(exception)\n}\n\nfunction globalFallback(exception: unknown): Response {\n  const message = exception instanceof Error ? exception.message : 'Internal server error'\n  console.error('[@theokit/http] Unhandled exception:', exception)\n  return new Response(\n    JSON.stringify({ error: { code: 'INTERNAL_SERVER_ERROR', message, statusCode: 500 } }),\n    { status: 500, headers: { 'content-type': 'application/json' } },\n  )\n}\n"],"mappings":";;;;;;;;;;;;;AAyBA,eAAsBA,oBACpBC,WACAC,SACAC,SACAC,WAAuB;AAEvB,QAAMC,OAAsB;IAC1BC,YAAY,6BAAMH,SAAN;EACd;AAEA,aAAWI,cAAcL,SAAS;AAChC,UAAMM,aAAaC,QAAoBC,kBAAkBH,UAAAA,KAAe,CAAA;AACxE,QAAII,iBAAiBV,WAAWO,UAAAA,GAAa;AAC3C,YAAMI,SAASC,aAAaN,YAAYH,SAAAA;AACxC,UAAI;AACF,eAAO,MAAMQ,OAAOE,MAAMb,WAAWI,IAAAA;MACvC,SAASU,aAAa;AAEpBC,gBAAQC,MAAM,2CAA2CF,WAAAA;AACzD,eAAOG,eAAejB,SAAAA;MACxB;IACF;EACF;AAEA,SAAOkB,gBAAgBlB,SAAAA;AACzB;AAzBsBD;AA2BtB,SAASW,iBAAiBV,WAAoBO,YAAsB;AAClE,MAAIA,WAAWY,WAAW,EAAG,QAAO;AACpC,SAAOZ,WAAWa,KAAK,CAACC,SAASrB,qBAAqBqB,IAAAA;AACxD;AAHSX;AAKT,SAASQ,gBAAgBlB,WAAkB;AACzC,MAAIA,qBAAqBsB,eAAe;AACtC,WAAO,IAAIC,SAASC,KAAKC,UAAUzB,UAAU0B,OAAM,CAAA,GAAK;MACtDC,QAAQ3B,UAAU4B;MAClBC,SAAS;QAAE,gBAAgB;MAAmB;IAChD,CAAA;EACF;AACA,SAAOZ,eAAejB,SAAAA;AACxB;AARSkB;AAUT,SAASD,eAAejB,WAAkB;AACxC,QAAM8B,UAAU9B,qBAAqB+B,QAAQ/B,UAAU8B,UAAU;AACjEf,UAAQC,MAAM,wCAAwChB,SAAAA;AACtD,SAAO,IAAIuB,SACTC,KAAKC,UAAU;IAAET,OAAO;MAAEgB,MAAM;MAAyBF;MAASF,YAAY;IAAI;EAAE,CAAA,GACpF;IAAED,QAAQ;IAAKE,SAAS;MAAE,gBAAgB;IAAmB;EAAE,CAAA;AAEnE;AAPSZ;","names":["runExceptionFilters","exception","filters","request","container","host","getRequest","FilterCtor","catchTypes","getMeta","CATCH_EXCEPTIONS","matchesException","filter","resolveOrNew","catch","filterError","console","error","globalFallback","builtInResponse","length","some","Type","HttpException","Response","JSON","stringify","toJSON","status","statusCode","headers","message","Error","code"]}

package/dist/chunk-3PGQVQWG.js

@@ -0,0 +1,276 @@
+import {
+  __name
+} from "./chunk-7QVYU63E.js";
+
+// src/metadata/keys.ts
+var CONTROLLER_PREFIX = /* @__PURE__ */ Symbol.for("theokit:http-decorators:controller-prefix");
+var ROUTE_METHODS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:route-methods");
+var ROUTE_PARAMS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:route-params");
+var ROUTE_STATUS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:route-status");
+var ROUTE_HEADERS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:route-headers");
+var ROUTE_REDIRECT = /* @__PURE__ */ Symbol.for("theokit:http-decorators:route-redirect");
+var USE_GUARDS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:use-guards");
+var USE_INTERCEPTORS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:use-interceptors");
+var USE_FILTERS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:use-filters");
+var CATCH_EXCEPTIONS = /* @__PURE__ */ Symbol.for("theokit:http-decorators:catch-exceptions");
+
+// src/metadata/storage.ts
+import "reflect-metadata";
+function setMeta(key, target, value, propertyKey) {
+  if (propertyKey !== void 0) {
+    Reflect.defineMetadata(key, value, target, propertyKey);
+  } else {
+    Reflect.defineMetadata(key, value, target);
+  }
+}
+__name(setMeta, "setMeta");
+function getMeta(key, target, propertyKey) {
+  if (propertyKey !== void 0) {
+    return Reflect.getMetadata(key, target, propertyKey);
+  }
+  return Reflect.getMetadata(key, target);
+}
+__name(getMeta, "getMeta");
+
+// src/exceptions/http-exception.ts
+var STATUS_CODES = {
+  400: "BAD_REQUEST",
+  401: "UNAUTHORIZED",
+  403: "FORBIDDEN",
+  404: "NOT_FOUND",
+  405: "METHOD_NOT_ALLOWED",
+  406: "NOT_ACCEPTABLE",
+  408: "REQUEST_TIMEOUT",
+  409: "CONFLICT",
+  410: "GONE",
+  412: "PRECONDITION_FAILED",
+  413: "PAYLOAD_TOO_LARGE",
+  415: "UNSUPPORTED_MEDIA_TYPE",
+  418: "IM_A_TEAPOT",
+  422: "UNPROCESSABLE_ENTITY",
+  429: "TOO_MANY_REQUESTS",
+  500: "INTERNAL_SERVER_ERROR",
+  501: "NOT_IMPLEMENTED",
+  502: "BAD_GATEWAY",
+  503: "SERVICE_UNAVAILABLE",
+  504: "GATEWAY_TIMEOUT",
+  505: "HTTP_VERSION_NOT_SUPPORTED"
+};
+var HttpException = class extends Error {
+  static {
+    __name(this, "HttpException");
+  }
+  statusCode;
+  code;
+  description;
+  constructor(message, statusCode, options) {
+    super(message, options?.cause ? {
+      cause: options.cause
+    } : void 0);
+    this.name = this.constructor.name;
+    this.statusCode = statusCode;
+    this.code = STATUS_CODES[statusCode] ?? "INTERNAL_SERVER_ERROR";
+    this.description = options?.description;
+  }
+  toJSON() {
+    return {
+      error: {
+        code: this.code,
+        message: this.message,
+        statusCode: this.statusCode,
+        ...this.description ? {
+          description: this.description
+        } : {}
+      }
+    };
+  }
+};
+function factory(status, defaultMsg) {
+  return class extends HttpException {
+    constructor(message = defaultMsg, options) {
+      super(message, status, options);
+      this.name = this.constructor.name;
+    }
+  };
+}
+__name(factory, "factory");
+var BadRequestException = class extends factory(400, "Bad Request") {
+  static {
+    __name(this, "BadRequestException");
+  }
+};
+var UnauthorizedException = class extends factory(401, "Unauthorized") {
+  static {
+    __name(this, "UnauthorizedException");
+  }
+};
+var ForbiddenException = class extends factory(403, "Forbidden") {
+  static {
+    __name(this, "ForbiddenException");
+  }
+};
+var NotFoundException = class extends factory(404, "Not Found") {
+  static {
+    __name(this, "NotFoundException");
+  }
+};
+var MethodNotAllowedException = class extends factory(405, "Method Not Allowed") {
+  static {
+    __name(this, "MethodNotAllowedException");
+  }
+};
+var NotAcceptableException = class extends factory(406, "Not Acceptable") {
+  static {
+    __name(this, "NotAcceptableException");
+  }
+};
+var RequestTimeoutException = class extends factory(408, "Request Timeout") {
+  static {
+    __name(this, "RequestTimeoutException");
+  }
+};
+var ConflictException = class extends factory(409, "Conflict") {
+  static {
+    __name(this, "ConflictException");
+  }
+};
+var GoneException = class extends factory(410, "Gone") {
+  static {
+    __name(this, "GoneException");
+  }
+};
+var PreconditionFailedException = class extends factory(412, "Precondition Failed") {
+  static {
+    __name(this, "PreconditionFailedException");
+  }
+};
+var PayloadTooLargeException = class extends factory(413, "Payload Too Large") {
+  static {
+    __name(this, "PayloadTooLargeException");
+  }
+};
+var UnsupportedMediaTypeException = class extends factory(415, "Unsupported Media Type") {
+  static {
+    __name(this, "UnsupportedMediaTypeException");
+  }
+};
+var ImATeapotException = class extends factory(418, "I'm a Teapot") {
+  static {
+    __name(this, "ImATeapotException");
+  }
+};
+var UnprocessableEntityException = class extends factory(422, "Unprocessable Entity") {
+  static {
+    __name(this, "UnprocessableEntityException");
+  }
+};
+var InternalServerErrorException = class extends factory(500, "Internal Server Error") {
+  static {
+    __name(this, "InternalServerErrorException");
+  }
+};
+var NotImplementedException = class extends factory(501, "Not Implemented") {
+  static {
+    __name(this, "NotImplementedException");
+  }
+};
+var BadGatewayException = class extends factory(502, "Bad Gateway") {
+  static {
+    __name(this, "BadGatewayException");
+  }
+};
+var ServiceUnavailableException = class extends factory(503, "Service Unavailable") {
+  static {
+    __name(this, "ServiceUnavailableException");
+  }
+};
+var GatewayTimeoutException = class extends factory(504, "Gateway Timeout") {
+  static {
+    __name(this, "GatewayTimeoutException");
+  }
+};
+var HttpVersionNotSupportedException = class extends factory(505, "HTTP Version Not Supported") {
+  static {
+    __name(this, "HttpVersionNotSupportedException");
+  }
+};
+var TooManyRequestsException = class extends factory(429, "Too Many Requests") {
+  static {
+    __name(this, "TooManyRequestsException");
+  }
+};
+var HttpStatus = {
+  // 2xx Success
+  OK: 200,
+  CREATED: 201,
+  ACCEPTED: 202,
+  NO_CONTENT: 204,
+  // 3xx Redirection
+  MOVED_PERMANENTLY: 301,
+  FOUND: 302,
+  NOT_MODIFIED: 304,
+  TEMPORARY_REDIRECT: 307,
+  PERMANENT_REDIRECT: 308,
+  // 4xx Client Error
+  BAD_REQUEST: 400,
+  UNAUTHORIZED: 401,
+  PAYMENT_REQUIRED: 402,
+  FORBIDDEN: 403,
+  NOT_FOUND: 404,
+  METHOD_NOT_ALLOWED: 405,
+  NOT_ACCEPTABLE: 406,
+  REQUEST_TIMEOUT: 408,
+  CONFLICT: 409,
+  GONE: 410,
+  PRECONDITION_FAILED: 412,
+  PAYLOAD_TOO_LARGE: 413,
+  UNSUPPORTED_MEDIA_TYPE: 415,
+  IM_A_TEAPOT: 418,
+  UNPROCESSABLE_ENTITY: 422,
+  TOO_MANY_REQUESTS: 429,
+  // 5xx Server Error
+  INTERNAL_SERVER_ERROR: 500,
+  NOT_IMPLEMENTED: 501,
+  BAD_GATEWAY: 502,
+  SERVICE_UNAVAILABLE: 503,
+  GATEWAY_TIMEOUT: 504
+};
+
+export {
+  CONTROLLER_PREFIX,
+  ROUTE_METHODS,
+  ROUTE_PARAMS,
+  ROUTE_STATUS,
+  ROUTE_HEADERS,
+  ROUTE_REDIRECT,
+  USE_GUARDS,
+  USE_INTERCEPTORS,
+  USE_FILTERS,
+  CATCH_EXCEPTIONS,
+  setMeta,
+  getMeta,
+  HttpException,
+  BadRequestException,
+  UnauthorizedException,
+  ForbiddenException,
+  NotFoundException,
+  MethodNotAllowedException,
+  NotAcceptableException,
+  RequestTimeoutException,
+  ConflictException,
+  GoneException,
+  PreconditionFailedException,
+  PayloadTooLargeException,
+  UnsupportedMediaTypeException,
+  ImATeapotException,
+  UnprocessableEntityException,
+  InternalServerErrorException,
+  NotImplementedException,
+  BadGatewayException,
+  ServiceUnavailableException,
+  GatewayTimeoutException,
+  HttpVersionNotSupportedException,
+  TooManyRequestsException,
+  HttpStatus
+};
+//# sourceMappingURL=chunk-3PGQVQWG.js.map

package/dist/chunk-3PGQVQWG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/metadata/keys.ts","../src/metadata/storage.ts","../src/exceptions/http-exception.ts"],"sourcesContent":["/**\n * Global Symbol-keyed metadata namespace constants for @theokit/http.\n *\n * Uses Symbol.for() (global Symbol registry) instead of Symbol() (local) because\n * the SWC loader imports controller files as separate module instances. With local\n * Symbols, the decorator-set metadata keys would be different Symbol instances from\n * the keys used by walkControllerMetadata — making metadata lookup silently fail.\n *\n * Symbol.for() ensures the SAME Symbol instance across module boundaries, which is\n * exactly how reflect-metadata keys should work in a multi-module decorator system.\n */\n\nexport const CONTROLLER_PREFIX = Symbol.for('theokit:http-decorators:controller-prefix')\nexport const ROUTE_METHODS = Symbol.for('theokit:http-decorators:route-methods')\nexport const ROUTE_PARAMS = Symbol.for('theokit:http-decorators:route-params')\nexport const ROUTE_STATUS = Symbol.for('theokit:http-decorators:route-status')\nexport const ROUTE_HEADERS = Symbol.for('theokit:http-decorators:route-headers')\nexport const ROUTE_REDIRECT = Symbol.for('theokit:http-decorators:route-redirect')\nexport const USE_GUARDS = Symbol.for('theokit:http-decorators:use-guards')\nexport const USE_INTERCEPTORS = Symbol.for('theokit:http-decorators:use-interceptors')\nexport const USE_FILTERS = Symbol.for('theokit:http-decorators:use-filters')\nexport const CATCH_EXCEPTIONS = Symbol.for('theokit:http-decorators:catch-exceptions')\n","import 'reflect-metadata'\n\n/**\n * Typed facade over Reflect.defineMetadata / Reflect.getMetadata.\n * Centralizes all reflect-metadata calls so decorators + bridge\n * never call Reflect.* directly (single import point for the polyfill).\n */\n\nexport function setMeta<T>(\n  key: symbol,\n  target: object,\n  value: T,\n  propertyKey?: string | symbol,\n): void {\n  if (propertyKey !== undefined) {\n    Reflect.defineMetadata(key, value, target, propertyKey)\n  } else {\n    Reflect.defineMetadata(key, value, target)\n  }\n}\n\nexport function getMeta<T>(\n  key: symbol,\n  target: object,\n  propertyKey?: string | symbol,\n): T | undefined {\n  if (propertyKey !== undefined) {\n    return Reflect.getMetadata(key, target, propertyKey) as T | undefined\n  }\n  return Reflect.getMetadata(key, target) as T | undefined\n}\n","/**\n * HttpException hierarchy for @theokit/http.\n *\n * Per ADR D2: response shape {error: {code, message, statusCode}} matches\n * existing guard (401) and validation (422) format.\n */\n\nconst STATUS_CODES: Record<number, string> = {\n  400: 'BAD_REQUEST',\n  401: 'UNAUTHORIZED',\n  403: 'FORBIDDEN',\n  404: 'NOT_FOUND',\n  405: 'METHOD_NOT_ALLOWED',\n  406: 'NOT_ACCEPTABLE',\n  408: 'REQUEST_TIMEOUT',\n  409: 'CONFLICT',\n  410: 'GONE',\n  412: 'PRECONDITION_FAILED',\n  413: 'PAYLOAD_TOO_LARGE',\n  415: 'UNSUPPORTED_MEDIA_TYPE',\n  418: 'IM_A_TEAPOT',\n  422: 'UNPROCESSABLE_ENTITY',\n  429: 'TOO_MANY_REQUESTS',\n  500: 'INTERNAL_SERVER_ERROR',\n  501: 'NOT_IMPLEMENTED',\n  502: 'BAD_GATEWAY',\n  503: 'SERVICE_UNAVAILABLE',\n  504: 'GATEWAY_TIMEOUT',\n  505: 'HTTP_VERSION_NOT_SUPPORTED',\n}\n\nexport interface HttpExceptionOptions {\n  cause?: Error\n  description?: string\n}\n\nexport class HttpException extends Error {\n  public readonly statusCode: number\n  public readonly code: string\n  public readonly description?: string\n\n  constructor(message: string, statusCode: number, options?: HttpExceptionOptions) {\n    super(message, options?.cause ? { cause: options.cause } : undefined)\n    this.name = this.constructor.name\n    this.statusCode = statusCode\n    this.code = STATUS_CODES[statusCode] ?? 'INTERNAL_SERVER_ERROR'\n    this.description = options?.description\n  }\n\n  toJSON() {\n    return {\n      error: {\n        code: this.code,\n        message: this.message,\n        statusCode: this.statusCode,\n        ...(this.description ? { description: this.description } : {}),\n      },\n    }\n  }\n}\n\nfunction factory(status: number, defaultMsg: string) {\n  return class extends HttpException {\n    constructor(message = defaultMsg, options?: HttpExceptionOptions) {\n      super(message, status, options)\n      this.name = this.constructor.name\n    }\n  }\n}\n\nexport class BadRequestException extends factory(400, 'Bad Request') {}\nexport class UnauthorizedException extends factory(401, 'Unauthorized') {}\nexport class ForbiddenException extends factory(403, 'Forbidden') {}\nexport class NotFoundException extends factory(404, 'Not Found') {}\nexport class MethodNotAllowedException extends factory(405, 'Method Not Allowed') {}\nexport class NotAcceptableException extends factory(406, 'Not Acceptable') {}\nexport class RequestTimeoutException extends factory(408, 'Request Timeout') {}\nexport class ConflictException extends factory(409, 'Conflict') {}\nexport class GoneException extends factory(410, 'Gone') {}\nexport class PreconditionFailedException extends factory(412, 'Precondition Failed') {}\nexport class PayloadTooLargeException extends factory(413, 'Payload Too Large') {}\nexport class UnsupportedMediaTypeException extends factory(415, 'Unsupported Media Type') {}\nexport class ImATeapotException extends factory(418, \"I'm a Teapot\") {}\nexport class UnprocessableEntityException extends factory(422, 'Unprocessable Entity') {}\nexport class InternalServerErrorException extends factory(500, 'Internal Server Error') {}\nexport class NotImplementedException extends factory(501, 'Not Implemented') {}\nexport class BadGatewayException extends factory(502, 'Bad Gateway') {}\nexport class ServiceUnavailableException extends factory(503, 'Service Unavailable') {}\nexport class GatewayTimeoutException extends factory(504, 'Gateway Timeout') {}\nexport class HttpVersionNotSupportedException extends factory(505, 'HTTP Version Not Supported') {}\nexport class TooManyRequestsException extends factory(429, 'Too Many Requests') {}\n\n/**\n * HttpStatus enum — all standard HTTP status codes as named constants.\n *\n * @example\n * ```ts\n * import { HttpStatus } from '@theokit/http'\n *\n * @HttpCode(HttpStatus.CREATED)\n * @Post()\n * create() { ... }\n *\n * if (res.status === HttpStatus.NOT_FOUND) { ... }\n * ```\n */\nexport const HttpStatus = {\n  // 2xx Success\n  OK: 200,\n  CREATED: 201,\n  ACCEPTED: 202,\n  NO_CONTENT: 204,\n\n  // 3xx Redirection\n  MOVED_PERMANENTLY: 301,\n  FOUND: 302,\n  NOT_MODIFIED: 304,\n  TEMPORARY_REDIRECT: 307,\n  PERMANENT_REDIRECT: 308,\n\n  // 4xx Client Error\n  BAD_REQUEST: 400,\n  UNAUTHORIZED: 401,\n  PAYMENT_REQUIRED: 402,\n  FORBIDDEN: 403,\n  NOT_FOUND: 404,\n  METHOD_NOT_ALLOWED: 405,\n  NOT_ACCEPTABLE: 406,\n  REQUEST_TIMEOUT: 408,\n  CONFLICT: 409,\n  GONE: 410,\n  PRECONDITION_FAILED: 412,\n  PAYLOAD_TOO_LARGE: 413,\n  UNSUPPORTED_MEDIA_TYPE: 415,\n  IM_A_TEAPOT: 418,\n  UNPROCESSABLE_ENTITY: 422,\n  TOO_MANY_REQUESTS: 429,\n\n  // 5xx Server Error\n  INTERNAL_SERVER_ERROR: 500,\n  NOT_IMPLEMENTED: 501,\n  BAD_GATEWAY: 502,\n  SERVICE_UNAVAILABLE: 503,\n  GATEWAY_TIMEOUT: 504,\n} as const\n\nexport type HttpStatusCode = (typeof HttpStatus)[keyof typeof HttpStatus]\n"],"mappings":";;;;;AAYO,IAAMA,oBAAoBC,uBAAOC,IAAI,2CAAA;AACrC,IAAMC,gBAAgBF,uBAAOC,IAAI,uCAAA;AACjC,IAAME,eAAeH,uBAAOC,IAAI,sCAAA;AAChC,IAAMG,eAAeJ,uBAAOC,IAAI,sCAAA;AAChC,IAAMI,gBAAgBL,uBAAOC,IAAI,uCAAA;AACjC,IAAMK,iBAAiBN,uBAAOC,IAAI,wCAAA;AAClC,IAAMM,aAAaP,uBAAOC,IAAI,oCAAA;AAC9B,IAAMO,mBAAmBR,uBAAOC,IAAI,0CAAA;AACpC,IAAMQ,cAAcT,uBAAOC,IAAI,qCAAA;AAC/B,IAAMS,mBAAmBV,uBAAOC,IAAI,0CAAA;;;ACrB3C,OAAO;AAQA,SAASU,QACdC,KACAC,QACAC,OACAC,aAA6B;AAE7B,MAAIA,gBAAgBC,QAAW;AAC7BC,YAAQC,eAAeN,KAAKE,OAAOD,QAAQE,WAAAA;EAC7C,OAAO;AACLE,YAAQC,eAAeN,KAAKE,OAAOD,MAAAA;EACrC;AACF;AAXgBF;AAaT,SAASQ,QACdP,KACAC,QACAE,aAA6B;AAE7B,MAAIA,gBAAgBC,QAAW;AAC7B,WAAOC,QAAQG,YAAYR,KAAKC,QAAQE,WAAAA;EAC1C;AACA,SAAOE,QAAQG,YAAYR,KAAKC,MAAAA;AAClC;AATgBM;;;ACdhB,IAAME,eAAuC;EAC3C,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;AACP;AAOO,IAAMC,gBAAN,cAA4BC,MAAAA;EApCnC,OAoCmCA;;;EACjBC;EACAC;EACAC;EAEhB,YAAYC,SAAiBH,YAAoBI,SAAgC;AAC/E,UAAMD,SAASC,SAASC,QAAQ;MAAEA,OAAOD,QAAQC;IAAM,IAAIC,MAAAA;AAC3D,SAAKC,OAAO,KAAK,YAAYA;AAC7B,SAAKP,aAAaA;AAClB,SAAKC,OAAOJ,aAAaG,UAAAA,KAAe;AACxC,SAAKE,cAAcE,SAASF;EAC9B;EAEAM,SAAS;AACP,WAAO;MACLC,OAAO;QACLR,MAAM,KAAKA;QACXE,SAAS,KAAKA;QACdH,YAAY,KAAKA;QACjB,GAAI,KAAKE,cAAc;UAAEA,aAAa,KAAKA;QAAY,IAAI,CAAC;MAC9D;IACF;EACF;AACF;AAEA,SAASQ,QAAQC,QAAgBC,YAAkB;AACjD,SAAO,cAAcd,cAAAA;IACnB,YAAYK,UAAUS,YAAYR,SAAgC;AAChE,YAAMD,SAASQ,QAAQP,OAAAA;AACvB,WAAKG,OAAO,KAAK,YAAYA;IAC/B;EACF;AACF;AAPSG;AASF,IAAMG,sBAAN,cAAkCH,QAAQ,KAAK,aAAA,EAAA;EAtEtD,OAsEsD;;;AAAgB;AAC/D,IAAMI,wBAAN,cAAoCJ,QAAQ,KAAK,cAAA,EAAA;EAvExD,OAuEwD;;;AAAiB;AAClE,IAAMK,qBAAN,cAAiCL,QAAQ,KAAK,WAAA,EAAA;EAxErD,OAwEqD;;;AAAc;AAC5D,IAAMM,oBAAN,cAAgCN,QAAQ,KAAK,WAAA,EAAA;EAzEpD,OAyEoD;;;AAAc;AAC3D,IAAMO,4BAAN,cAAwCP,QAAQ,KAAK,oBAAA,EAAA;EA1E5D,OA0E4D;;;AAAuB;AAC5E,IAAMQ,yBAAN,cAAqCR,QAAQ,KAAK,gBAAA,EAAA;EA3EzD,OA2EyD;;;AAAmB;AACrE,IAAMS,0BAAN,cAAsCT,QAAQ,KAAK,iBAAA,EAAA;EA5E1D,OA4E0D;;;AAAoB;AACvE,IAAMU,oBAAN,cAAgCV,QAAQ,KAAK,UAAA,EAAA;EA7EpD,OA6EoD;;;AAAa;AAC1D,IAAMW,gBAAN,cAA4BX,QAAQ,KAAK,MAAA,EAAA;EA9EhD,OA8EgD;;;AAAS;AAClD,IAAMY,8BAAN,cAA0CZ,QAAQ,KAAK,qBAAA,EAAA;EA/E9D,OA+E8D;;;AAAwB;AAC/E,IAAMa,2BAAN,cAAuCb,QAAQ,KAAK,mBAAA,EAAA;EAhF3D,OAgF2D;;;AAAsB;AAC1E,IAAMc,gCAAN,cAA4Cd,QAAQ,KAAK,wBAAA,EAAA;EAjFhE,OAiFgE;;;AAA2B;AACpF,IAAMe,qBAAN,cAAiCf,QAAQ,KAAK,cAAA,EAAA;EAlFrD,OAkFqD;;;AAAiB;AAC/D,IAAMgB,+BAAN,cAA2ChB,QAAQ,KAAK,sBAAA,EAAA;EAnF/D,OAmF+D;;;AAAyB;AACjF,IAAMiB,+BAAN,cAA2CjB,QAAQ,KAAK,uBAAA,EAAA;EApF/D,OAoF+D;;;AAA0B;AAClF,IAAMkB,0BAAN,cAAsClB,QAAQ,KAAK,iBAAA,EAAA;EArF1D,OAqF0D;;;AAAoB;AACvE,IAAMmB,sBAAN,cAAkCnB,QAAQ,KAAK,aAAA,EAAA;EAtFtD,OAsFsD;;;AAAgB;AAC/D,IAAMoB,8BAAN,cAA0CpB,QAAQ,KAAK,qBAAA,EAAA;EAvF9D,OAuF8D;;;AAAwB;AAC/E,IAAMqB,0BAAN,cAAsCrB,QAAQ,KAAK,iBAAA,EAAA;EAxF1D,OAwF0D;;;AAAoB;AACvE,IAAMsB,mCAAN,cAA+CtB,QAAQ,KAAK,4BAAA,EAAA;EAzFnE,OAyFmE;;;AAA+B;AAC3F,IAAMuB,2BAAN,cAAuCvB,QAAQ,KAAK,mBAAA,EAAA;EA1F3D,OA0F2D;;;AAAsB;AAgB1E,IAAMwB,aAAa;;EAExBC,IAAI;EACJC,SAAS;EACTC,UAAU;EACVC,YAAY;;EAGZC,mBAAmB;EACnBC,OAAO;EACPC,cAAc;EACdC,oBAAoB;EACpBC,oBAAoB;;EAGpBC,aAAa;EACbC,cAAc;EACdC,kBAAkB;EAClBC,WAAW;EACXC,WAAW;EACXC,oBAAoB;EACpBC,gBAAgB;EAChBC,iBAAiB;EACjBC,UAAU;EACVC,MAAM;EACNC,qBAAqB;EACrBC,mBAAmB;EACnBC,wBAAwB;EACxBC,aAAa;EACbC,sBAAsB;EACtBC,mBAAmB;;EAGnBC,uBAAuB;EACvBC,iBAAiB;EACjBC,aAAa;EACbC,qBAAqB;EACrBC,iBAAiB;AACnB;","names":["CONTROLLER_PREFIX","Symbol","for","ROUTE_METHODS","ROUTE_PARAMS","ROUTE_STATUS","ROUTE_HEADERS","ROUTE_REDIRECT","USE_GUARDS","USE_INTERCEPTORS","USE_FILTERS","CATCH_EXCEPTIONS","setMeta","key","target","value","propertyKey","undefined","Reflect","defineMetadata","getMeta","getMetadata","STATUS_CODES","HttpException","Error","statusCode","code","description","message","options","cause","undefined","name","toJSON","error","factory","status","defaultMsg","BadRequestException","UnauthorizedException","ForbiddenException","NotFoundException","MethodNotAllowedException","NotAcceptableException","RequestTimeoutException","ConflictException","GoneException","PreconditionFailedException","PayloadTooLargeException","UnsupportedMediaTypeException","ImATeapotException","UnprocessableEntityException","InternalServerErrorException","NotImplementedException","BadGatewayException","ServiceUnavailableException","GatewayTimeoutException","HttpVersionNotSupportedException","TooManyRequestsException","HttpStatus","OK","CREATED","ACCEPTED","NO_CONTENT","MOVED_PERMANENTLY","FOUND","NOT_MODIFIED","TEMPORARY_REDIRECT","PERMANENT_REDIRECT","BAD_REQUEST","UNAUTHORIZED","PAYMENT_REQUIRED","FORBIDDEN","NOT_FOUND","METHOD_NOT_ALLOWED","NOT_ACCEPTABLE","REQUEST_TIMEOUT","CONFLICT","GONE","PRECONDITION_FAILED","PAYLOAD_TOO_LARGE","UNSUPPORTED_MEDIA_TYPE","IM_A_TEAPOT","UNPROCESSABLE_ENTITY","TOO_MANY_REQUESTS","INTERNAL_SERVER_ERROR","NOT_IMPLEMENTED","BAD_GATEWAY","SERVICE_UNAVAILABLE","GATEWAY_TIMEOUT"]}

package/dist/chunk-7QVYU63E.js

@@ -0,0 +1,7 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+export {
+  __name
+};
+//# sourceMappingURL=chunk-7QVYU63E.js.map

package/dist/chunk-7QVYU63E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}