@warlock.js/core 4.1.14 → 4.2.0

package/esm/http/middleware/max-body-size.middleware.mjs

@@ -2,7 +2,7 @@ import { t } from "./inject-request-context.mjs";
 import { HttpErrorCodes } from "../error-codes.mjs";
 import { parseSize } from "./utils/parse-size.mjs";
 
-//#region ../../@warlock.js/core/src/http/middleware/max-body-size.middleware.ts
+//#region ../@warlock.js/core/src/http/middleware/max-body-size.middleware.ts
 /**
 * Reject requests whose `Content-Length` exceeds the configured cap.
 *

package/esm/http/middleware/max-body-size.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"max-body-size.middleware.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/middleware/max-body-size.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport { t } from \"./inject-request-context\";\nimport { parseSize } from \"./utils/parse-size\";\n\n/**\n * Reject requests whose `Content-Length` exceeds the configured cap.\n *\n * Runs before body parsing — the rejection lands as a 413 with the request\n * body still on the wire (the server reads it to completion regardless; this\n * just short-circuits the application stack). For genuine pre-read protection\n * you also want `http.bodyLimit` lowered at the Fastify level — middleware\n * is a per-route layer on top, not a replacement.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/comments\", createCommentController, {\n *   middleware: [middleware.maxBodySize(\"8kb\")],\n * });\n *\n * router.post(\"/uploads\", uploadController, {\n *   middleware: [middleware.maxBodySize(\"10mb\")],\n * });\n */\nexport function maxBodySizeMiddleware(limit: string | number): Middleware {\n  const limitBytes = parseSize(limit);\n\n  return (request, response) => {\n    const contentLengthHeader = request.header(\"content-length\");\n\n    if (!contentLengthHeader) return;\n\n    const contentLength = Number(contentLengthHeader);\n\n    if (!Number.isFinite(contentLength)) return;\n\n    if (contentLength <= limitBytes) return;\n\n    response.header(\"Connection\", \"close\");\n\n    return response.contentTooLarge({\n        error: t(\"http.bodyTooLarge\"),\n        errorCode: HttpErrorCodes.BodyTooLarge,\n        limit: limitBytes,\n        received: contentLength,\n      },\n    );\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,sBAAsB,OAAoC;CACxE,MAAM,aAAa,UAAU,KAAK;CAElC,QAAQ,SAAS,aAAa;EAC5B,MAAM,sBAAsB,QAAQ,OAAO,gBAAgB;EAE3D,IAAI,CAAC,qBAAqB;EAE1B,MAAM,gBAAgB,OAAO,mBAAmB;EAEhD,IAAI,CAAC,OAAO,SAAS,aAAa,GAAG;EAErC,IAAI,iBAAiB,YAAY;EAEjC,SAAS,OAAO,cAAc,OAAO;EAErC,OAAO,SAAS,gBAAgB;GAC5B,OAAO,EAAE,mBAAmB;GAC5B;GACA,OAAO;GACP,UAAU;EACZ,CACF;CACF;AACF"}
+{"version":3,"file":"max-body-size.middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/max-body-size.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport { t } from \"./inject-request-context\";\nimport { parseSize } from \"./utils/parse-size\";\n\n/**\n * Reject requests whose `Content-Length` exceeds the configured cap.\n *\n * Runs before body parsing — the rejection lands as a 413 with the request\n * body still on the wire (the server reads it to completion regardless; this\n * just short-circuits the application stack). For genuine pre-read protection\n * you also want `http.bodyLimit` lowered at the Fastify level — middleware\n * is a per-route layer on top, not a replacement.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/comments\", createCommentController, {\n *   middleware: [middleware.maxBodySize(\"8kb\")],\n * });\n *\n * router.post(\"/uploads\", uploadController, {\n *   middleware: [middleware.maxBodySize(\"10mb\")],\n * });\n */\nexport function maxBodySizeMiddleware(limit: string | number): Middleware {\n  const limitBytes = parseSize(limit);\n\n  return (request, response) => {\n    const contentLengthHeader = request.header(\"content-length\");\n\n    if (!contentLengthHeader) return;\n\n    const contentLength = Number(contentLengthHeader);\n\n    if (!Number.isFinite(contentLength)) return;\n\n    if (contentLength <= limitBytes) return;\n\n    response.header(\"Connection\", \"close\");\n\n    return response.contentTooLarge({\n        error: t(\"http.bodyTooLarge\"),\n        errorCode: HttpErrorCodes.BodyTooLarge,\n        limit: limitBytes,\n        received: contentLength,\n      },\n    );\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,sBAAsB,OAAoC;CACxE,MAAM,aAAa,UAAU,KAAK;CAElC,QAAQ,SAAS,aAAa;EAC5B,MAAM,sBAAsB,QAAQ,OAAO,gBAAgB;EAE3D,IAAI,CAAC,qBAAqB;EAE1B,MAAM,gBAAgB,OAAO,mBAAmB;EAEhD,IAAI,CAAC,OAAO,SAAS,aAAa,GAAG;EAErC,IAAI,iBAAiB,YAAY;EAEjC,SAAS,OAAO,cAAc,OAAO;EAErC,OAAO,SAAS,gBAAgB;GAC5B,OAAO,EAAE,mBAAmB;GAC5B;GACA,OAAO;GACP,UAAU;EACZ,CACF;CACF;AACF"}

package/esm/http/middleware/middleware-list.d.mts

@@ -6,7 +6,7 @@ import { maintenanceMiddleware } from "./maintenance.middleware.mjs";
 import { maxBodySizeMiddleware } from "./max-body-size.middleware.mjs";
 import { rateLimitMiddleware } from "./rate-limit.middleware.mjs";
 
-//#region ../../@warlock.js/core/src/http/middleware/middleware-list.d.ts
+//#region ../@warlock.js/core/src/http/middleware/middleware-list.d.ts
 /**
  * Built-in HTTP middleware factories.
  *

package/esm/http/middleware/middleware-list.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware-list.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/middleware/middleware-list.ts"],"mappings":";;;;;;;;;;;AA+BA;;;;;;;;;;;;;;;;;;;;;cAAa,UAAA;EAAA"}
+{"version":3,"file":"middleware-list.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/middleware-list.ts"],"mappings":";;;;;;;;;;;AA+BA;;;;;;;;;;;;;;;;;;;;;cAAa,UAAA;EAAA"}

package/esm/http/middleware/middleware-list.mjs

@@ -6,7 +6,7 @@ import { maintenanceMiddleware } from "./maintenance.middleware.mjs";
 import { maxBodySizeMiddleware } from "./max-body-size.middleware.mjs";
 import { rateLimitMiddleware } from "./rate-limit.middleware.mjs";
 
-//#region ../../@warlock.js/core/src/http/middleware/middleware-list.ts
+//#region ../@warlock.js/core/src/http/middleware/middleware-list.ts
 /**
 * Built-in HTTP middleware factories.
 *

package/esm/http/middleware/middleware-list.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"middleware-list.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/middleware/middleware-list.ts"],"sourcesContent":["import { cacheMiddleware } from \"./cache-response-middleware\";\nimport { concurrencyLimitMiddleware } from \"./concurrency-limit.middleware\";\nimport { idempotencyMiddleware } from \"./idempotency.middleware\";\nimport { ipFilterMiddleware } from \"./ip-filter.middleware\";\nimport { maintenanceMiddleware } from \"./maintenance.middleware\";\nimport { maxBodySizeMiddleware } from \"./max-body-size.middleware\";\nimport { rateLimitMiddleware } from \"./rate-limit.middleware\";\n\n/**\n * Built-in HTTP middleware factories.\n *\n * Single canonical entry point for the framework's middleware suite. Each\n * property is a factory that returns a `Middleware` ready to drop into a\n * route's `middleware` array.\n *\n * Bare names (`rateLimitMiddleware`, etc.) are not exported from the package —\n * always reach for them via this namespace. The internal `*Middleware` suffix\n * naming exists for in-package code organization only.\n *\n * @example\n * import { authMiddleware } from \"@warlock.js/auth\";\n * import { middleware, router } from \"@warlock.js/core\";\n *\n * router.post(\"/orders\", createOrderController, {\n *   middleware: [\n *     authMiddleware(\"client\"),\n *     middleware.rateLimit({ max: 5, duration: 60_000 }),\n *     middleware.idempotency(),\n *   ],\n * });\n */\nexport const middleware = {\n  cache: cacheMiddleware,\n  concurrencyLimit: concurrencyLimitMiddleware,\n  idempotency: idempotencyMiddleware,\n  ipFilter: ipFilterMiddleware,\n  maintenance: maintenanceMiddleware,\n  maxBodySize: maxBodySizeMiddleware,\n  rateLimit: rateLimitMiddleware,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAa,aAAa;CACxB,OAAO;CACP,kBAAkB;CAClB,aAAa;CACb,UAAU;CACV,aAAa;CACb,aAAa;CACb,WAAW;AACb"}
+{"version":3,"file":"middleware-list.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/middleware-list.ts"],"sourcesContent":["import { cacheMiddleware } from \"./cache-response-middleware\";\nimport { concurrencyLimitMiddleware } from \"./concurrency-limit.middleware\";\nimport { idempotencyMiddleware } from \"./idempotency.middleware\";\nimport { ipFilterMiddleware } from \"./ip-filter.middleware\";\nimport { maintenanceMiddleware } from \"./maintenance.middleware\";\nimport { maxBodySizeMiddleware } from \"./max-body-size.middleware\";\nimport { rateLimitMiddleware } from \"./rate-limit.middleware\";\n\n/**\n * Built-in HTTP middleware factories.\n *\n * Single canonical entry point for the framework's middleware suite. Each\n * property is a factory that returns a `Middleware` ready to drop into a\n * route's `middleware` array.\n *\n * Bare names (`rateLimitMiddleware`, etc.) are not exported from the package —\n * always reach for them via this namespace. The internal `*Middleware` suffix\n * naming exists for in-package code organization only.\n *\n * @example\n * import { authMiddleware } from \"@warlock.js/auth\";\n * import { middleware, router } from \"@warlock.js/core\";\n *\n * router.post(\"/orders\", createOrderController, {\n *   middleware: [\n *     authMiddleware(\"client\"),\n *     middleware.rateLimit({ max: 5, duration: 60_000 }),\n *     middleware.idempotency(),\n *   ],\n * });\n */\nexport const middleware = {\n  cache: cacheMiddleware,\n  concurrencyLimit: concurrencyLimitMiddleware,\n  idempotency: idempotencyMiddleware,\n  ipFilter: ipFilterMiddleware,\n  maintenance: maintenanceMiddleware,\n  maxBodySize: maxBodySizeMiddleware,\n  rateLimit: rateLimitMiddleware,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAa,aAAa;CACxB,OAAO;CACP,kBAAkB;CAClB,aAAa;CACb,UAAU;CACV,aAAa;CACb,aAAa;CACb,WAAW;AACb"}

package/esm/http/middleware/rate-limit.middleware.d.mts

@@ -1,6 +1,6 @@
 import { Request } from "../request.mjs";
 import { Middleware } from "../../router/types.mjs";
-//#region ../../@warlock.js/core/src/http/middleware/rate-limit.middleware.d.ts
+//#region ../@warlock.js/core/src/http/middleware/rate-limit.middleware.d.ts
 /**
  * Options for the per-route rate limit middleware.
  */

package/esm/http/middleware/rate-limit.middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.middleware.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts"],"mappings":";;;;;;KAQY,gBAAA;EAAgB;;;EAI1B,GAAA;EAIA;;;EAAA,QAAA;EAYA;;AAAY;AA6Cd;;;;EAjDE,YAAA,IAAgB,OAAA,EAAS,OAAO;EAiDE;;;EA7ClC,YAAA;AAAA;;;;;;;;;;;;;;;;;;;;iBA6Cc,mBAAA,CAAoB,OAAA,EAAS,gBAAA,GAAmB,UAAU"}
+{"version":3,"file":"rate-limit.middleware.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts"],"mappings":";;;;;;KAQY,gBAAA;EAAgB;;;EAI1B,GAAA;EAIA;;;EAAA,QAAA;EAYA;;AAAY;AA6Cd;;;;EAjDE,YAAA,IAAgB,OAAA,EAAS,OAAO;EAiDE;;;EA7ClC,YAAA;AAAA;;;;;;;;;;;;;;;;;;;;iBA6Cc,mBAAA,CAAoB,OAAA,EAAS,gBAAA,GAAmB,UAAU"}

package/esm/http/middleware/rate-limit.middleware.mjs

@@ -1,7 +1,7 @@
 import { t } from "./inject-request-context.mjs";
 import { HttpErrorCodes } from "../error-codes.mjs";
 
-//#region ../../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts
+//#region ../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts
 const buckets = /* @__PURE__ */ new Map();
 /**
 * Sweep expired buckets so the Map doesn't grow unbounded with one-shot keys

package/esm/http/middleware/rate-limit.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.middleware.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the per-route rate limit middleware.\n */\nexport type RateLimitOptions = {\n  /**\n   * Max requests allowed within the time window.\n   */\n  max: number;\n  /**\n   * Time window in milliseconds.\n   */\n  duration: number;\n  /**\n   * Group key generator. Defaults to the client IP. Override to scope per-user,\n   * per-organization, per-tenant, etc.\n   *\n   * @example\n   * keyGenerator: (request) => request.user?.id ?? request.ip,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\ntype Bucket = {\n  count: number;\n  resetAt: number;\n};\n\nconst buckets = new Map<string, Bucket>();\n\n/**\n * Sweep expired buckets so the Map doesn't grow unbounded with one-shot keys\n * (rare per-user keys, dynamic path parameters in `keyGenerator`, etc.).\n * Called opportunistically, at most once per minute, not on a timer — keeps\n * the module side-effect-free for testing.\n */\nlet lastPruneAt = 0;\n\nfunction pruneExpired(now: number) {\n  for (const [key, bucket] of buckets) {\n    if (bucket.resetAt <= now) {\n      buckets.delete(key);\n    }\n  }\n}\n\n/**\n * Per-route / per-group rate limit. Layers on top of `@fastify/rate-limit`'s\n * global cap (configured via `http.rateLimit`) — both run, and either can\n * 429. Use this for endpoints that need a tighter cap than the global default:\n * login, OTP request, password reset, expensive search, AI completions.\n *\n * The counter lives in-process. With `N` replicas the effective cap is\n * `N × max`. For genuinely shared limits, configure `@fastify/rate-limit`'s\n * Redis store via `http.rateLimit` instead.\n *\n * Sets `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` on\n * every response; adds `Retry-After` (seconds) on a 429.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n * router.post(\"/auth/login\", loginController, {\n *   middleware: [middleware.rateLimit({ max: 5, duration: 60_000 })],\n * });\n */\nexport function rateLimitMiddleware(options: RateLimitOptions): Middleware {\n  return (request, response) => {\n    const now = Date.now();\n\n    if (now - lastPruneAt > 60_000) {\n      pruneExpired(now);\n      lastPruneAt = now;\n    }\n\n    const groupKey = options.keyGenerator?.(request) || request.detectIp() || \"unknown\";\n    const cacheKey = `${request.route.path}:${groupKey}`;\n\n    let bucket = buckets.get(cacheKey);\n\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + options.duration };\n      buckets.set(cacheKey, bucket);\n    }\n\n    bucket.count++;\n\n    const remaining = Math.max(0, options.max - bucket.count);\n    const retryAfter = Math.max(1, Math.ceil((bucket.resetAt - now) / 1000));\n\n    response.header(\"X-RateLimit-Limit\", options.max);\n    response.header(\"X-RateLimit-Remaining\", remaining);\n    response.header(\"X-RateLimit-Reset\", Math.ceil(bucket.resetAt / 1000));\n\n    if (bucket.count > options.max) {\n      response.header(\"Retry-After\", retryAfter);\n\n      return response.tooManyRequests({\n          error: options.errorMessage || t(\"http.rateLimitExceeded\"),\n          errorCode: HttpErrorCodes.RateLimitExceeded,\n        },\n      );\n    }\n  };\n}\n"],"mappings":";;;;AAoCA,MAAM,0BAAU,IAAI,IAAoB;;;;;;;AAQxC,IAAI,cAAc;AAElB,SAAS,aAAa,KAAa;CACjC,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,OAAO,WAAW,KACpB,QAAQ,OAAO,GAAG;AAGxB;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,SAAuC;CACzE,QAAQ,SAAS,aAAa;EAC5B,MAAM,MAAM,KAAK,IAAI;EAErB,IAAI,MAAM,cAAc,KAAQ;GAC9B,aAAa,GAAG;GAChB,cAAc;EAChB;EAEA,MAAM,WAAW,QAAQ,eAAe,OAAO,KAAK,QAAQ,SAAS,KAAK;EAC1E,MAAM,WAAW,GAAG,QAAQ,MAAM,KAAK,GAAG;EAE1C,IAAI,SAAS,QAAQ,IAAI,QAAQ;EAEjC,IAAI,CAAC,UAAU,OAAO,WAAW,KAAK;GACpC,SAAS;IAAE,OAAO;IAAG,SAAS,MAAM,QAAQ;GAAS;GACrD,QAAQ,IAAI,UAAU,MAAM;EAC9B;EAEA,OAAO;EAEP,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,MAAM,OAAO,KAAK;EACxD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,UAAU,OAAO,GAAI,CAAC;EAEvE,SAAS,OAAO,qBAAqB,QAAQ,GAAG;EAChD,SAAS,OAAO,yBAAyB,SAAS;EAClD,SAAS,OAAO,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;EAErE,IAAI,OAAO,QAAQ,QAAQ,KAAK;GAC9B,SAAS,OAAO,eAAe,UAAU;GAEzC,OAAO,SAAS,gBAAgB;IAC5B,OAAO,QAAQ,gBAAgB,EAAE,wBAAwB;IACzD;GACF,CACF;EACF;CACF;AACF"}
+{"version":3,"file":"rate-limit.middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/rate-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the per-route rate limit middleware.\n */\nexport type RateLimitOptions = {\n  /**\n   * Max requests allowed within the time window.\n   */\n  max: number;\n  /**\n   * Time window in milliseconds.\n   */\n  duration: number;\n  /**\n   * Group key generator. Defaults to the client IP. Override to scope per-user,\n   * per-organization, per-tenant, etc.\n   *\n   * @example\n   * keyGenerator: (request) => request.user?.id ?? request.ip,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\ntype Bucket = {\n  count: number;\n  resetAt: number;\n};\n\nconst buckets = new Map<string, Bucket>();\n\n/**\n * Sweep expired buckets so the Map doesn't grow unbounded with one-shot keys\n * (rare per-user keys, dynamic path parameters in `keyGenerator`, etc.).\n * Called opportunistically, at most once per minute, not on a timer — keeps\n * the module side-effect-free for testing.\n */\nlet lastPruneAt = 0;\n\nfunction pruneExpired(now: number) {\n  for (const [key, bucket] of buckets) {\n    if (bucket.resetAt <= now) {\n      buckets.delete(key);\n    }\n  }\n}\n\n/**\n * Per-route / per-group rate limit. Layers on top of `@fastify/rate-limit`'s\n * global cap (configured via `http.rateLimit`) — both run, and either can\n * 429. Use this for endpoints that need a tighter cap than the global default:\n * login, OTP request, password reset, expensive search, AI completions.\n *\n * The counter lives in-process. With `N` replicas the effective cap is\n * `N × max`. For genuinely shared limits, configure `@fastify/rate-limit`'s\n * Redis store via `http.rateLimit` instead.\n *\n * Sets `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` on\n * every response; adds `Retry-After` (seconds) on a 429.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n * router.post(\"/auth/login\", loginController, {\n *   middleware: [middleware.rateLimit({ max: 5, duration: 60_000 })],\n * });\n */\nexport function rateLimitMiddleware(options: RateLimitOptions): Middleware {\n  return (request, response) => {\n    const now = Date.now();\n\n    if (now - lastPruneAt > 60_000) {\n      pruneExpired(now);\n      lastPruneAt = now;\n    }\n\n    const groupKey = options.keyGenerator?.(request) || request.detectIp() || \"unknown\";\n    const cacheKey = `${request.route.path}:${groupKey}`;\n\n    let bucket = buckets.get(cacheKey);\n\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + options.duration };\n      buckets.set(cacheKey, bucket);\n    }\n\n    bucket.count++;\n\n    const remaining = Math.max(0, options.max - bucket.count);\n    const retryAfter = Math.max(1, Math.ceil((bucket.resetAt - now) / 1000));\n\n    response.header(\"X-RateLimit-Limit\", options.max);\n    response.header(\"X-RateLimit-Remaining\", remaining);\n    response.header(\"X-RateLimit-Reset\", Math.ceil(bucket.resetAt / 1000));\n\n    if (bucket.count > options.max) {\n      response.header(\"Retry-After\", retryAfter);\n\n      return response.tooManyRequests({\n          error: options.errorMessage || t(\"http.rateLimitExceeded\"),\n          errorCode: HttpErrorCodes.RateLimitExceeded,\n        },\n      );\n    }\n  };\n}\n"],"mappings":";;;;AAoCA,MAAM,0BAAU,IAAI,IAAoB;;;;;;;AAQxC,IAAI,cAAc;AAElB,SAAS,aAAa,KAAa;CACjC,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,OAAO,WAAW,KACpB,QAAQ,OAAO,GAAG;AAGxB;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,SAAuC;CACzE,QAAQ,SAAS,aAAa;EAC5B,MAAM,MAAM,KAAK,IAAI;EAErB,IAAI,MAAM,cAAc,KAAQ;GAC9B,aAAa,GAAG;GAChB,cAAc;EAChB;EAEA,MAAM,WAAW,QAAQ,eAAe,OAAO,KAAK,QAAQ,SAAS,KAAK;EAC1E,MAAM,WAAW,GAAG,QAAQ,MAAM,KAAK,GAAG;EAE1C,IAAI,SAAS,QAAQ,IAAI,QAAQ;EAEjC,IAAI,CAAC,UAAU,OAAO,WAAW,KAAK;GACpC,SAAS;IAAE,OAAO;IAAG,SAAS,MAAM,QAAQ;GAAS;GACrD,QAAQ,IAAI,UAAU,MAAM;EAC9B;EAEA,OAAO;EAEP,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,MAAM,OAAO,KAAK;EACxD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,UAAU,OAAO,GAAI,CAAC;EAEvE,SAAS,OAAO,qBAAqB,QAAQ,GAAG;EAChD,SAAS,OAAO,yBAAyB,SAAS;EAClD,SAAS,OAAO,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;EAErE,IAAI,OAAO,QAAQ,QAAQ,KAAK;GAC9B,SAAS,OAAO,eAAe,UAAU;GAEzC,OAAO,SAAS,gBAAgB;IAC5B,OAAO,QAAQ,gBAAgB,EAAE,wBAAwB;IACzD;GACF,CACF;EACF;CACF;AACF"}

package/esm/http/middleware/utils/cidr-match.d.mts

@@ -1,4 +1,4 @@
-//#region ../../@warlock.js/core/src/http/middleware/utils/cidr-match.d.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/cidr-match.d.ts
 declare function ipMatches(ip: string, pattern: string): boolean;
 /**
  * Returns true if `ip` matches any pattern in the list.

package/esm/http/middleware/utils/cidr-match.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cidr-match.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/cidr-match.ts"],"mappings":";iBAkCgB,SAAA,CAAU,EAAA,UAAY,OAAe;AAArD;;;;AAAqD;AA0CrD;AA1CA,iBA0CgB,QAAA,CAAS,EAAA,UAAY,QAAkB"}
+{"version":3,"file":"cidr-match.d.mts","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/cidr-match.ts"],"mappings":";iBAkCgB,SAAA,CAAU,EAAA,UAAY,OAAe;AAArD;;;;AAAqD;AA0CrD;AA1CA,iBA0CgB,QAAA,CAAS,EAAA,UAAY,QAAkB"}

package/esm/http/middleware/utils/cidr-match.mjs

@@ -1,4 +1,4 @@
-//#region ../../@warlock.js/core/src/http/middleware/utils/cidr-match.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/cidr-match.ts
 /**
 * Match an IPv4 address against an exact IP or a CIDR block.
 *

package/esm/http/middleware/utils/cidr-match.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cidr-match.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/cidr-match.ts"],"sourcesContent":["/**\n * Match an IPv4 address against an exact IP or a CIDR block.\n *\n * IPv6 patterns are matched as exact-string only — full IPv6 CIDR support is\n * out of scope; ACLs in production almost always use IPv4 ranges. Add IPv6 CIDR\n * later if a real use-case appears.\n *\n * @example\n * ipMatches(\"10.0.0.5\", \"10.0.0.0/8\");      // true\n * ipMatches(\"10.0.0.5\", \"10.0.0.5\");        // true\n * ipMatches(\"192.168.1.1\", \"10.0.0.0/8\");   // false\n */\nfunction ipv4ToInt(ip: string): number | null {\n  const parts = ip.split(\".\");\n\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  let result = 0;\n\n  for (const part of parts) {\n    const num = Number(part);\n\n    if (!Number.isInteger(num) || num < 0 || num > 255) {\n      return null;\n    }\n\n    result = (result << 8) + num;\n  }\n\n  return result >>> 0;\n}\n\nexport function ipMatches(ip: string, pattern: string): boolean {\n  if (!ip || !pattern) {\n    return false;\n  }\n\n  if (pattern === ip) {\n    return true;\n  }\n\n  if (!pattern.includes(\"/\")) {\n    return false;\n  }\n\n  const [base, bitsRaw] = pattern.split(\"/\");\n  const bits = Number(bitsRaw);\n\n  if (!Number.isInteger(bits) || bits < 0 || bits > 32) {\n    return false;\n  }\n\n  const ipInt = ipv4ToInt(ip);\n  const baseInt = ipv4ToInt(base);\n\n  if (ipInt === null || baseInt === null) {\n    return false;\n  }\n\n  if (bits === 0) {\n    return true;\n  }\n\n  const mask = (~0 << (32 - bits)) >>> 0;\n\n  return (ipInt & mask) === (baseInt & mask);\n}\n\n/**\n * Returns true if `ip` matches any pattern in the list.\n *\n * @example\n * anyMatch(\"10.0.0.5\", [\"192.168.0.0/16\", \"10.0.0.0/8\"]); // true\n */\nexport function anyMatch(ip: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => ipMatches(ip, pattern));\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,UAAU,IAA2B;CAC5C,MAAM,QAAQ,GAAG,MAAM,GAAG;CAE1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAM,OAAO,IAAI;EAEvB,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,KAC7C,OAAO;EAGT,UAAU,UAAU,KAAK;CAC3B;CAEA,OAAO,WAAW;AACpB;AAEA,SAAgB,UAAU,IAAY,SAA0B;CAC9D,IAAI,CAAC,MAAM,CAAC,SACV,OAAO;CAGT,IAAI,YAAY,IACd,OAAO;CAGT,IAAI,CAAC,QAAQ,SAAS,GAAG,GACvB,OAAO;CAGT,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CACzC,MAAM,OAAO,OAAO,OAAO;CAE3B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,IAChD,OAAO;CAGT,MAAM,QAAQ,UAAU,EAAE;CAC1B,MAAM,UAAU,UAAU,IAAI;CAE9B,IAAI,UAAU,QAAQ,YAAY,MAChC,OAAO;CAGT,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAQ,MAAO,KAAK,SAAW;CAErC,QAAQ,QAAQ,WAAW,UAAU;AACvC;;;;;;;AAQA,SAAgB,SAAS,IAAY,UAA6B;CAChE,OAAO,SAAS,MAAM,YAAY,UAAU,IAAI,OAAO,CAAC;AAC1D"}
+{"version":3,"file":"cidr-match.mjs","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/cidr-match.ts"],"sourcesContent":["/**\n * Match an IPv4 address against an exact IP or a CIDR block.\n *\n * IPv6 patterns are matched as exact-string only — full IPv6 CIDR support is\n * out of scope; ACLs in production almost always use IPv4 ranges. Add IPv6 CIDR\n * later if a real use-case appears.\n *\n * @example\n * ipMatches(\"10.0.0.5\", \"10.0.0.0/8\");      // true\n * ipMatches(\"10.0.0.5\", \"10.0.0.5\");        // true\n * ipMatches(\"192.168.1.1\", \"10.0.0.0/8\");   // false\n */\nfunction ipv4ToInt(ip: string): number | null {\n  const parts = ip.split(\".\");\n\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  let result = 0;\n\n  for (const part of parts) {\n    const num = Number(part);\n\n    if (!Number.isInteger(num) || num < 0 || num > 255) {\n      return null;\n    }\n\n    result = (result << 8) + num;\n  }\n\n  return result >>> 0;\n}\n\nexport function ipMatches(ip: string, pattern: string): boolean {\n  if (!ip || !pattern) {\n    return false;\n  }\n\n  if (pattern === ip) {\n    return true;\n  }\n\n  if (!pattern.includes(\"/\")) {\n    return false;\n  }\n\n  const [base, bitsRaw] = pattern.split(\"/\");\n  const bits = Number(bitsRaw);\n\n  if (!Number.isInteger(bits) || bits < 0 || bits > 32) {\n    return false;\n  }\n\n  const ipInt = ipv4ToInt(ip);\n  const baseInt = ipv4ToInt(base);\n\n  if (ipInt === null || baseInt === null) {\n    return false;\n  }\n\n  if (bits === 0) {\n    return true;\n  }\n\n  const mask = (~0 << (32 - bits)) >>> 0;\n\n  return (ipInt & mask) === (baseInt & mask);\n}\n\n/**\n * Returns true if `ip` matches any pattern in the list.\n *\n * @example\n * anyMatch(\"10.0.0.5\", [\"192.168.0.0/16\", \"10.0.0.0/8\"]); // true\n */\nexport function anyMatch(ip: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => ipMatches(ip, pattern));\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,UAAU,IAA2B;CAC5C,MAAM,QAAQ,GAAG,MAAM,GAAG;CAE1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAM,OAAO,IAAI;EAEvB,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,KAC7C,OAAO;EAGT,UAAU,UAAU,KAAK;CAC3B;CAEA,OAAO,WAAW;AACpB;AAEA,SAAgB,UAAU,IAAY,SAA0B;CAC9D,IAAI,CAAC,MAAM,CAAC,SACV,OAAO;CAGT,IAAI,YAAY,IACd,OAAO;CAGT,IAAI,CAAC,QAAQ,SAAS,GAAG,GACvB,OAAO;CAGT,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CACzC,MAAM,OAAO,OAAO,OAAO;CAE3B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,IAChD,OAAO;CAGT,MAAM,QAAQ,UAAU,EAAE;CAC1B,MAAM,UAAU,UAAU,IAAI;CAE9B,IAAI,UAAU,QAAQ,YAAY,MAChC,OAAO;CAGT,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAQ,MAAO,KAAK,SAAW;CAErC,QAAQ,QAAQ,WAAW,UAAU;AACvC;;;;;;;AAQA,SAAgB,SAAS,IAAY,UAA6B;CAChE,OAAO,SAAS,MAAM,YAAY,UAAU,IAAI,OAAO,CAAC;AAC1D"}

package/esm/http/middleware/utils/idempotency-key.d.mts

@@ -1,6 +1,6 @@
 import { Request } from "../../request.mjs";
 
-//#region ../../@warlock.js/core/src/http/middleware/utils/idempotency-key.d.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/idempotency-key.d.ts
 declare function isValidIdempotencyKey(value: unknown): value is string;
 /**
  * Hash a request body to a stable hex digest.

package/esm/http/middleware/utils/idempotency-key.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency-key.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts"],"mappings":";;;iBAcgB,qBAAA,CAAsB,KAAA,YAAiB,KAAK;;AAA5D;;;;AAA4D;AAmB5D;;;;iBAAgB,QAAA,CAAS,IAAa;AAoBtC;;;;;;;;AAAiF;;;;;;AAAjF,iBAAgB,wBAAA,CAAyB,OAAA,EAAS,OAAO,EAAE,cAAA"}
+{"version":3,"file":"idempotency-key.d.mts","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts"],"mappings":";;;iBAcgB,qBAAA,CAAsB,KAAA,YAAiB,KAAK;;AAA5D;;;;AAA4D;AAmB5D;;;;iBAAgB,QAAA,CAAS,IAAa;AAoBtC;;;;;;;;AAAiF;;;;;;AAAjF,iBAAgB,wBAAA,CAAyB,OAAA,EAAS,OAAO,EAAE,cAAA"}

package/esm/http/middleware/utils/idempotency-key.mjs

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 
-//#region ../../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts
 /**
 * Idempotency-key validation rules.
 *

package/esm/http/middleware/utils/idempotency-key.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency-key.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Request } from \"../../request\";\n\n/**\n * Idempotency-key validation rules.\n *\n * RFC draft-ietf-httpapi-idempotency-key suggests UUIDs or ULIDs but doesn't\n * mandate a format. We accept any printable ASCII string up to 255 chars —\n * tight enough to reject log-injection (no control characters / newlines),\n * loose enough to accept whatever ID scheme the client picks.\n */\nconst MAX_KEY_LENGTH = 255;\nconst PRINTABLE_ASCII = /^[\\x21-\\x7e]+$/;\n\nexport function isValidIdempotencyKey(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= MAX_KEY_LENGTH &&\n    PRINTABLE_ASCII.test(value)\n  );\n}\n\n/**\n * Hash a request body to a stable hex digest.\n *\n * Used to detect \"same key, different body\" — that's a client bug, not a retry.\n * sha256 is overkill for collision resistance here, but it's the dependency-free\n * choice and avoids importing a faster hasher.\n *\n * @example\n * hashBody({ amount: 100, currency: \"USD\" }); // \"a1b2c3...\"\n */\nexport function hashBody(body: unknown): string {\n  const serialized = typeof body === \"string\" ? body : JSON.stringify(body ?? {});\n\n  return createHash(\"sha256\").update(serialized).digest(\"hex\");\n}\n\n/**\n * Build the cache key for an idempotency record.\n *\n * Scope is `userType:userId` when authenticated, falling back to the client IP\n * when anonymous. This prevents user A from replaying user B's key — even if\n * user B used a guessable value — while still letting the primitive work on\n * public endpoints.\n *\n * Idempotency middleware must run **after** `authMiddleware` so `request.user`\n * and `request.decodedAccessToken` are populated.\n *\n * @example\n * buildIdempotencyCacheKey(request, \"01J9XZQ-ABC\"); // \"idem:client:user_123:01J9XZQ-ABC\"\n */\nexport function buildIdempotencyCacheKey(request: Request, idempotencyKey: string): string {\n  const userType = request.decodedAccessToken?.userType || \"anonymous\";\n  const userId = request.user?.id || request.detectIp() || \"unknown\";\n\n  return `idem:${userType}:${userId}:${idempotencyKey}`;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAExB,SAAgB,sBAAsB,OAAiC;CACrE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,kBAChB,gBAAgB,KAAK,KAAK;AAE9B;;;;;;;;;;;AAYA,SAAgB,SAAS,MAAuB;CAC9C,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC;CAE9E,OAAO,WAAW,QAAQ,EAAE,OAAO,UAAU,EAAE,OAAO,KAAK;AAC7D;;;;;;;;;;;;;;;AAgBA,SAAgB,yBAAyB,SAAkB,gBAAgC;CAIzF,OAAO,QAHU,QAAQ,oBAAoB,YAAY,YAGjC,GAFT,QAAQ,MAAM,MAAM,QAAQ,SAAS,KAAK,UAEvB,GAAG;AACvC"}
+{"version":3,"file":"idempotency-key.mjs","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/idempotency-key.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Request } from \"../../request\";\n\n/**\n * Idempotency-key validation rules.\n *\n * RFC draft-ietf-httpapi-idempotency-key suggests UUIDs or ULIDs but doesn't\n * mandate a format. We accept any printable ASCII string up to 255 chars —\n * tight enough to reject log-injection (no control characters / newlines),\n * loose enough to accept whatever ID scheme the client picks.\n */\nconst MAX_KEY_LENGTH = 255;\nconst PRINTABLE_ASCII = /^[\\x21-\\x7e]+$/;\n\nexport function isValidIdempotencyKey(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= MAX_KEY_LENGTH &&\n    PRINTABLE_ASCII.test(value)\n  );\n}\n\n/**\n * Hash a request body to a stable hex digest.\n *\n * Used to detect \"same key, different body\" — that's a client bug, not a retry.\n * sha256 is overkill for collision resistance here, but it's the dependency-free\n * choice and avoids importing a faster hasher.\n *\n * @example\n * hashBody({ amount: 100, currency: \"USD\" }); // \"a1b2c3...\"\n */\nexport function hashBody(body: unknown): string {\n  const serialized = typeof body === \"string\" ? body : JSON.stringify(body ?? {});\n\n  return createHash(\"sha256\").update(serialized).digest(\"hex\");\n}\n\n/**\n * Build the cache key for an idempotency record.\n *\n * Scope is `userType:userId` when authenticated, falling back to the client IP\n * when anonymous. This prevents user A from replaying user B's key — even if\n * user B used a guessable value — while still letting the primitive work on\n * public endpoints.\n *\n * Idempotency middleware must run **after** `authMiddleware` so `request.user`\n * and `request.decodedAccessToken` are populated.\n *\n * @example\n * buildIdempotencyCacheKey(request, \"01J9XZQ-ABC\"); // \"idem:client:user_123:01J9XZQ-ABC\"\n */\nexport function buildIdempotencyCacheKey(request: Request, idempotencyKey: string): string {\n  const userType = request.decodedAccessToken?.userType || \"anonymous\";\n  const userId = request.user?.id || request.detectIp() || \"unknown\";\n\n  return `idem:${userType}:${userId}:${idempotencyKey}`;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAExB,SAAgB,sBAAsB,OAAiC;CACrE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,kBAChB,gBAAgB,KAAK,KAAK;AAE9B;;;;;;;;;;;AAYA,SAAgB,SAAS,MAAuB;CAC9C,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC;CAE9E,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,OAAO,KAAK;AAC7D;;;;;;;;;;;;;;;AAgBA,SAAgB,yBAAyB,SAAkB,gBAAgC;CAIzF,OAAO,QAHU,QAAQ,oBAAoB,YAAY,YAGjC,GAFT,QAAQ,MAAM,MAAM,QAAQ,SAAS,KAAK,UAEvB,GAAG;AACvC"}

package/esm/http/middleware/utils/parse-size.d.mts

@@ -1,4 +1,4 @@
-//#region ../../@warlock.js/core/src/http/middleware/utils/parse-size.d.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/parse-size.d.ts
 declare function parseSize(value: string | number): number;
 //#endregion
 export { parseSize };

package/esm/http/middleware/utils/parse-size.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-size.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/parse-size.ts"],"mappings":";iBAkBgB,SAAA,CAAU,KAAsB"}
+{"version":3,"file":"parse-size.d.mts","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/parse-size.ts"],"mappings":";iBAkBgB,SAAA,CAAU,KAAsB"}

package/esm/http/middleware/utils/parse-size.mjs

@@ -1,4 +1,4 @@
-//#region ../../@warlock.js/core/src/http/middleware/utils/parse-size.ts
+//#region ../@warlock.js/core/src/http/middleware/utils/parse-size.ts
 /**
 * Parse a human-readable size string into bytes.
 *

package/esm/http/middleware/utils/parse-size.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI,OAAO;CACX,IAAI,OAAO,OAAO;AACpB;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}
+{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../../@warlock.js/core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI,OAAO;CACX,IAAI,OAAO,OAAO;AACpB;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}

package/esm/http/plugins.d.mts

@@ -1,6 +1,6 @@
 import { FastifyInstance } from "./server.mjs";
 
-//#region ../../@warlock.js/core/src/http/plugins.d.ts
+//#region ../@warlock.js/core/src/http/plugins.d.ts
 declare function registerHttpPlugins(server: FastifyInstance): Promise<void>;
 //#endregion
 export { registerHttpPlugins };

package/esm/http/plugins.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../@warlock.js/core/src/http/plugins.ts"],"mappings":";;;iBAWsB,mBAAA,CAAoB,MAAA,EAAQ,eAAA,GAAe,OAAA"}
+{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/plugins.ts"],"mappings":";;;iBAWsB,mBAAA,CAAoB,MAAA,EAAQ,eAAA,GAAe,OAAA"}

package/esm/http/plugins.mjs

@@ -3,7 +3,7 @@ import "../utils/index.mjs";
 import config from "@mongez/config";
 import fastifyMultipart from "@fastify/multipart";
 
-//#region ../../@warlock.js/core/src/http/plugins.ts
+//#region ../@warlock.js/core/src/http/plugins.ts
 const defaultCorsOptions = {
 	origin: "*",
 	methods: "*"

package/esm/http/plugins.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.mjs","names":[],"sources":["../../../../../../@warlock.js/core/src/http/plugins.ts"],"sourcesContent":["import type { FastifyCorsOptions } from \"@fastify/cors\";\nimport fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport { rootPath } from \"../utils\";\nimport type { FastifyInstance } from \"./server\";\n\nconst defaultCorsOptions: FastifyCorsOptions = {\n  origin: \"*\",\n  methods: \"*\",\n};\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  server.register(import(\"@fastify/rate-limit\"), {\n    // max requests per time window\n    max: config.get(\"http.rateLimit.max\", 60),\n    // maximum time that is will allow max requests\n    timeWindow: config.get(\"http.rateLimit.duration\", 60 * 1000),\n  });\n\n  // 👇🏻 register cors plugin\n  const corsOptions: FastifyCorsOptions | undefined = {\n    ...config.get(\"http.cors\", {}),\n    ...defaultCorsOptions,\n  };\n\n  server.register(import(\"@fastify/cors\"), corsOptions);\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n    },\n  });\n\n  server.register(import(\"@fastify/static\"), {\n    root: config.get(\"storage.publicRoot\", rootPath(\"public\")),\n    prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n  });\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n}\n"],"mappings":";;;;;;AAMA,MAAM,qBAAyC;CAC7C,QAAQ;CACR,SAAS;AACX;AAEA,eAAsB,oBAAoB,QAAyB;CAEjE,OAAO,SAAS,OAAO,wBAAwB;EAE7C,KAAK,OAAO,IAAI,sBAAsB,EAAE;EAExC,YAAY,OAAO,IAAI,2BAA2B,KAAK,GAAI;CAC7D,CAAC;CAGD,MAAM,cAA8C;EAClD,GAAG,OAAO,IAAI,aAAa,CAAC,CAAC;EAC7B,GAAG;CACL;CAEA,OAAO,SAAS,OAAO,kBAAkB,WAAW;CAGpD,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ,EAEN,UAAU,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI,EAC/D;CACF,CAAC;CAED,OAAO,SAAS,OAAO,oBAAoB;EACzC,MAAM,OAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC;EACzD,QAAQ,OAAO,IAAI,wBAAwB,UAAU;CACvD,CAAC;CAGD,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQ,OAAO,IAAI,qBAAqB;EACxC,cAAc,OAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;AACH"}
+{"version":3,"file":"plugins.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/plugins.ts"],"sourcesContent":["import type { FastifyCorsOptions } from \"@fastify/cors\";\nimport fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport { rootPath } from \"../utils\";\nimport type { FastifyInstance } from \"./server\";\n\nconst defaultCorsOptions: FastifyCorsOptions = {\n  origin: \"*\",\n  methods: \"*\",\n};\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  server.register(import(\"@fastify/rate-limit\"), {\n    // max requests per time window\n    max: config.get(\"http.rateLimit.max\", 60),\n    // maximum time that is will allow max requests\n    timeWindow: config.get(\"http.rateLimit.duration\", 60 * 1000),\n  });\n\n  // 👇🏻 register cors plugin\n  const corsOptions: FastifyCorsOptions | undefined = {\n    ...config.get(\"http.cors\", {}),\n    ...defaultCorsOptions,\n  };\n\n  server.register(import(\"@fastify/cors\"), corsOptions);\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n    },\n  });\n\n  server.register(import(\"@fastify/static\"), {\n    root: config.get(\"storage.publicRoot\", rootPath(\"public\")),\n    prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n  });\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n}\n"],"mappings":";;;;;;AAMA,MAAM,qBAAyC;CAC7C,QAAQ;CACR,SAAS;AACX;AAEA,eAAsB,oBAAoB,QAAyB;CAEjE,OAAO,SAAS,OAAO,wBAAwB;EAE7C,KAAK,OAAO,IAAI,sBAAsB,EAAE;EAExC,YAAY,OAAO,IAAI,2BAA2B,KAAK,GAAI;CAC7D,CAAC;CAGD,MAAM,cAA8C;EAClD,GAAG,OAAO,IAAI,aAAa,CAAC,CAAC;EAC7B,GAAG;CACL;CAEA,OAAO,SAAS,OAAO,kBAAkB,WAAW;CAGpD,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ,EAEN,UAAU,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI,EAC/D;CACF,CAAC;CAED,OAAO,SAAS,OAAO,oBAAoB;EACzC,MAAM,OAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC;EACzD,QAAQ,OAAO,IAAI,wBAAwB,UAAU;CACvD,CAAC;CAGD,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQ,OAAO,IAAI,qBAAqB;EACxC,cAAc,OAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;AACH"}

package/esm/http/request-controller.d.mts

@@ -3,7 +3,7 @@ import { Response } from "./response.mjs";
 import { ReturnedResponse } from "./types.mjs";
 import { RequestControllerContract } from "../router/types.mjs";
 
-//#region ../../@warlock.js/core/src/http/request-controller.d.ts
+//#region ../@warlock.js/core/src/http/request-controller.d.ts
 declare abstract class RequestController implements RequestControllerContract {
   readonly request: Request;
   readonly response: Response;

package/esm/http/request-controller.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request-controller.d.mts","names":[],"sources":["../../../../../../@warlock.js/core/src/http/request-controller.ts"],"mappings":";;;;;;uBAKsB,iBAAA,YAA6B,yBAAA;EAAA,SAE/B,OAAA,EAAS,OAAA;EAAA,SACT,QAAA,EAAU,QAAA;cADV,OAAA,EAAS,OAAA,EACT,QAAA,EAAU,QAAA;EAAA,SAKZ,OAAA,CAAA,GAAW,OAAA,CAAQ,gBAAA;AAAA"}
+{"version":3,"file":"request-controller.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/request-controller.ts"],"mappings":";;;;;;uBAKsB,iBAAA,YAA6B,yBAAA;EAAA,SAE/B,OAAA,EAAS,OAAA;EAAA,SACT,QAAA,EAAU,QAAA;cADV,OAAA,EAAS,OAAA,EACT,QAAA,EAAU,QAAA;EAAA,SAKZ,OAAA,IAAW,OAAA,CAAQ,gBAAA;AAAA"}

package/esm/http/request-controller.mjs

@@ -1,4 +1,4 @@
-//#region ../../@warlock.js/core/src/http/request-controller.ts
+//#region ../@warlock.js/core/src/http/request-controller.ts
 var RequestController = class {
 	constructor(request, response) {
 		this.request = request;

package/esm/http/request-controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"request-controller.mjs","names":[],"sources":["../../../../../../@warlock.js/core/src/http/request-controller.ts"],"sourcesContent":["import type { RequestControllerContract } from \"./../router/types\";\nimport type { Request } from \"./request\";\nimport type { Response } from \"./response\";\nimport type { ReturnedResponse } from \"./types\";\n\nexport abstract class RequestController implements RequestControllerContract {\n  public constructor(\n    public readonly request: Request,\n    public readonly response: Response,\n  ) {\n    //\n  }\n\n  public abstract execute(): Promise<ReturnedResponse>;\n}\n"],"mappings":";AAKA,IAAsB,oBAAtB,MAA6E;CAC3E,AAAO,YACL,AAAgB,SAChB,AAAgB,UAChB;EAFgB;EACA;CAGlB;AAGF"}
+{"version":3,"file":"request-controller.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/request-controller.ts"],"sourcesContent":["import type { RequestControllerContract } from \"./../router/types\";\nimport type { Request } from \"./request\";\nimport type { Response } from \"./response\";\nimport type { ReturnedResponse } from \"./types\";\n\nexport abstract class RequestController implements RequestControllerContract {\n  public constructor(\n    public readonly request: Request,\n    public readonly response: Response,\n  ) {\n    //\n  }\n\n  public abstract execute(): Promise<ReturnedResponse>;\n}\n"],"mappings":";AAKA,IAAsB,oBAAtB,MAA6E;CAC3E,AAAO,YACL,AAAgB,SAChB,AAAgB,UAChB;EAFgB;EACA;CAGlB;AAGF"}

package/esm/http/request.d.mts

@@ -8,7 +8,7 @@ import { LogLevel } from "@warlock.js/logger";
 import { FastifyRequest } from "fastify";
 import { IncomingHttpHeaders } from "node:http2";
 
-//#region ../../@warlock.js/core/src/http/request.d.ts
+//#region ../@warlock.js/core/src/http/request.d.ts
 type StandardHeaders = { [K in keyof IncomingHttpHeaders as string extends K ? never : number extends K ? never : K]: IncomingHttpHeaders[K] };
 type HeaderKeys = keyof StandardHeaders;
 declare class Request<RequestValidation = any> {

package/esm/http/request.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request.d.mts","names":[],"sources":["../../../../../../@warlock.js/core/src/http/request.ts"],"mappings":";;;;;;;;;;;KAkBK,eAAA,iBAGS,mBAAA,mBAAsC,CAAA,0BAE/B,CAAA,WAEb,CAAA,GAAI,mBAAA,CAAoB,CAAA;AAAA,KAG3B,UAAA,SAAmB,eAAe;AAAA,cAE1B,OAAA;;;;;;;;;;;;;;;;EAgBJ,WAAA,EAAc,cAAA;EArBU;AAAA;AAAA;EA0BxB,QAAA,EAAW,QAAA;;;AAvBmB;EA4B9B,KAAA,EAAQ,KAAA;EA1BG;;;EAAA,UA+BR,OAAA;EALK;;;EAUR,kBAAA;EAgBqB;;;EAAA,OAXd,OAAA,EAAS,OAAA;EA6KW;;;;EAvK3B,KAAA,EAAO,UAAA,QAAkB,KAAA;EA+LV;;;EA1Lf,CAAA,EAAG,UAAA,QAAkB,KAAA;EAicI;;;;;;;;;;;;;;;;EAAA,CA/a/B,GAAA;EA2lB+B;;;EAAA,UAtlBtB,OAAA;EA28BsB;;;EAAA,UAt8BtB,aAAA,GAAgB,iBAAA;EAhEL;;;EAqEd,EAAA;EA3DQ;;;EAgER,SAAA;EAjDgB;;;EAsDhB,OAAA;EA3CA;;;EAgDA,UAAA,CAAW,OAAA,EAAS,cAAA;EAzBjB;;;;;;;;;EAAA,UAgDA,gBAAA,CAAA;EAwBO;;;;;EAAA,iBAAA,gBAAA,CAAiB,KAAA,YAAiB,KAAA;EAYG;;;EAA/C,SAAA,CAAU,UAAA,UAAoB,OAAA,UAAiB,YAAA;EAuB3C;;;EAAA,IAhBA,MAAA,CAAA;EAkCU;;;EAAA,IAzBV,MAAA,CAAO,UAAA;EAuCI;;;EAAA,IAhCX,SAAA,CAAA;EA8CJ;;;EArCA,aAAA,CAAc,UAAA;EAsCG;;;EA7BjB,aAAA,CAAc,iBAAA;EAsCC;;;EAAA,IA/BX,QAAA,CAAA;EAmDJ;;;EA5CM,QAAA,CAAS,UAAA,EAAY,aAAA,EAAe,cAAA,cAAyB,OAAA;EAiE/D;;;EA1DJ,gBAAA,CAAA;EA8GI;;;EAvGJ,MAAA,gCAAsC,UAAA,CAAA,CAC3C,IAAA,EAAM,aAAA,GAAgB,UAAA,EACtB,YAAA;EAkIkB;;;EAAA,IA1HT,OAAA,CAAA,GAAW,MAAA;EA6OC;;;EAtOhB,MAAA,CAAO,IAAA,UAAc,YAAA;EAkPb;;;EArOR,SAAA,CAAU,IAAA;EA4OP;;;EAAA,IArOC,MAAA,CAAA;EA4OqB;;;EAAA,IArOrB,QAAA,CAAA;EAoQA;;;EAAA,IA7PA,MAAA,CAAA;EAyQe;;;EAAA,IAlQf,YAAA,CAAA;EAqSJ;;;EAAA,IAxRI,kBAAA,CAAA;EAwRkC;;;;;EAAA,IAvQlC,WAAA,CAAA;EA2RmB;;;EAAA,IA5QnB,aAAA,CAAA;EAuRS;;;EAAA,IAhRT,MAAA,CAAA;EAoSsB;;;EAAA,UA7RvB,YAAA,CAAA;EAsVH;;;EAAA,UAvUG,SAAA,CAAU,IAAA;EA8UP;;;EAAA,UAjPH,UAAA,CAAW,IAAA;EAwPG;;;EAlOjB,QAAA,CAAS,KAAA,EAAO,KAAA;EAgPZ;;;EApOJ,OAAA,CAAQ,SAAA,EAAW,YAAA,KAAiB,IAAA;EA6OZ;;;EAtOxB,EAAA,CAAG,SAAA,EAAW,YAAA,EAAc,QAAA;EAiQ5B;;;EA1PA,GAAA,CAAI,OAAA,OAAc,KAAA,GAAO,QAAA;EAsRzB;;;EAAA,IArQI,IAAA,CAAA;EA+QE;;;EAAA,IAxQF,GAAA,CAAA;EAsRK;;;EAAA,IA/QL,OAAA,CAAA;EA+RK;;;;;;;;EAnRH,aAAA,CAAA,GAAa,OAAA,SAAA,MAAA,gBAAA,QAAA;EA0Vb;;;;;EA/TN,UAAA,CAAA,GAAU,cAAA,CAAA,OAAA;EAsWV;;;;EA9VA,SAAA,UAAmB,iBAAA,CAAA,CAAmB,MAAA,UAAgB,MAAA,sBAA4B,MAAA;EAgX3E;;;EAnWP,eAAA,CAAA,GAAmB,MAAA,aAAmB,iBAAA;EA4WnB;;;EArWnB,gBAAA,CAAiB,IAAA,EAAM,iBAAA;EA6XnB;;;;;;;EAlXE,OAAA,CAAA,GAAO,OAAA,SAAA,MAAA,gBAAA,QAAA;EA6a0B;;;;;;EAAA,UAzZ9B,iBAAA,CAAA,GAAiB,OAAA,SAAA,MAAA,gBAAA,QAAA;;;;;;;YA2CvB,kBAAA,CAAA,GAAsB,UAAA;;;;EAczB,KAAA,CAAM,GAAA,UAAa,YAAA;;;;EAOnB,KAAA,CAAM,GAAA,WAAuB,YAAA;;;;EAO7B,GAAA,CAAI,GAAA,UAAa,YAAA;;;;EAOjB,GAAA,CAAI,GAAA;;;;EAOJ,GAAA,CAAI,GAAA,UAAa,KAAA;;;;EASjB,UAAA,CAAW,GAAA,UAAa,KAAA;;;;EAWxB,KAAA,CAAA,GAAS,IAAA;;;;MASL,IAAA,CAAA;;;;EAOJ,OAAA,CAAQ,GAAA,UAAa,KAAA;;;;MASjB,UAAA,CAAA;;;;EAmBJ,IAAA,CAAK,GAAA,WAAc,YAAA;;;;;EAUnB,KAAA,CAAM,IAAA,WAAe,YAAA;;;;MAOjB,MAAA,CAAA;;;;EAOJ,QAAA,CAAS,GAAA,UAAa,KAAA;;;;MASlB,KAAA,CAAA;;;;EAOJ,QAAA,CAAS,GAAA,UAAa,KAAA;;;;EAStB,GAAA,CAAA;;;;EAOA,eAAA,CAAA;;;;EAUA,iBAAA,CAAA;;;;EAmBA,KAAA,CAAA;;;;EAmBA,IAAA,CAAK,IAAA;;;;EAOL,KAAA,CAAM,IAAA;;;;EAWN,MAAA,CAAO,IAAA;;;;EAOP,IAAA,CAAK,GAAA,UAAa,YAAA;;;;EAqBlB,GAAA,CAAI,GAAA,UAAa,YAAA;;;;MAWb,OAAA,CAAA;;;;EAOJ,MAAA,CAAO,GAAA,UAAa,YAAA;;;;EASpB,KAAA,CAAM,GAAA,UAAa,YAAA;;;;EASnB,MAAA,CAAO,GAAA,UAAa,YAAA;;;;;;;;;;MAehB,EAAA,CAAA;;;;;;;;;;;EAcJ,QAAA,CAAA;;;;MAiBI,MAAA,CAAA;;;;MAOA,GAAA,CAAA;;;;MAOA,OAAA,CAAA;;;;MAOA,SAAA,CAAA;;;;MAOA,OAAA,CAAA,eAAuB,WAAA,CAAY,OAAA;;;;EAOvC,SAAA,CAAU,GAAA,EAAK,UAAA,EAAY,KAAA;AAAA"}
+{"version":3,"file":"request.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/request.ts"],"mappings":";;;;;;;;;;;KAkBK,eAAA,iBAGS,mBAAA,mBAAsC,CAAA,0BAE/B,CAAA,WAEb,CAAA,GAAI,mBAAA,CAAoB,CAAA;AAAA,KAG3B,UAAA,SAAmB,eAAe;AAAA,cAE1B,OAAA;;;;;;;;;;;;;;;;EAgBJ,WAAA,EAAc,cAAA;EArBU;AAAA;AAAA;EA0BxB,QAAA,EAAW,QAAA;;;AAvBmB;EA4B9B,KAAA,EAAQ,KAAA;EA1BG;;;EAAA,UA+BR,OAAA;EALK;;;EAUR,kBAAA;EAgBqB;;;EAAA,OAXd,OAAA,EAAS,OAAA;EA6KW;;;;EAvK3B,KAAA,EAAO,UAAA,QAAkB,KAAA;EA+LV;;;EA1Lf,CAAA,EAAG,UAAA,QAAkB,KAAA;EAicI;;;;;;;;;;;;;;;;EAAA,CA/a/B,GAAA;EA2lB+B;;;EAAA,UAtlBtB,OAAA;EA28BsB;;;EAAA,UAt8BtB,aAAA,GAAgB,iBAAA;EAhEL;;;EAqEd,EAAA;EA3DQ;;;EAgER,SAAA;EAjDgB;;;EAsDhB,OAAA;EA3CA;;;EAgDA,UAAA,CAAW,OAAA,EAAS,cAAA;EAzBjB;;;;;;;;;EAAA,UAgDA,gBAAA;EAwBO;;;;;EAAA,iBAAA,gBAAA,CAAiB,KAAA,YAAiB,KAAA;EAYG;;;EAA/C,SAAA,CAAU,UAAA,UAAoB,OAAA,UAAiB,YAAA;EAuB3C;;;EAAA,IAhBA,MAAA;EAkCU;;;EAAA,IAzBV,MAAA,CAAO,UAAA;EAuCI;;;EAAA,IAhCX,SAAA;EA8CJ;;;EArCA,aAAA,CAAc,UAAA;EAsCG;;;EA7BjB,aAAA,CAAc,iBAAA;EAsCC;;;EAAA,IA/BX,QAAA;EAmDJ;;;EA5CM,QAAA,CAAS,UAAA,EAAY,aAAA,EAAe,cAAA,cAAyB,OAAA;EAiE/D;;;EA1DJ,gBAAA;EA8GI;;;EAvGJ,MAAA,gCAAsC,UAAA,EAC3C,IAAA,EAAM,aAAA,GAAgB,UAAA,EACtB,YAAA;EAkIkB;;;EAAA,IA1HT,OAAA,IAAW,MAAA;EA6OC;;;EAtOhB,MAAA,CAAO,IAAA,UAAc,YAAA;EAkPb;;;EArOR,SAAA,CAAU,IAAA;EA4OP;;;EAAA,IArOC,MAAA;EA4OqB;;;EAAA,IArOrB,QAAA;EAoQA;;;EAAA,IA7PA,MAAA;EAyQe;;;EAAA,IAlQf,YAAA;EAqSJ;;;EAAA,IAxRI,kBAAA;EAwRkC;;;;;EAAA,IAvQlC,WAAA;EA2RmB;;;EAAA,IA5QnB,aAAA;EAuRS;;;EAAA,IAhRT,MAAA;EAoSsB;;;EAAA,UA7RvB,YAAA;EAsVH;;;EAAA,UAvUG,SAAA,CAAU,IAAA;EA8UP;;;EAAA,UAjPH,UAAA,CAAW,IAAA;EAwPG;;;EAlOjB,QAAA,CAAS,KAAA,EAAO,KAAA;EAgPZ;;;EApOJ,OAAA,CAAQ,SAAA,EAAW,YAAA,KAAiB,IAAA;EA6OZ;;;EAtOxB,EAAA,CAAG,SAAA,EAAW,YAAA,EAAc,QAAA;EAiQ5B;;;EA1PA,GAAA,CAAI,OAAA,OAAc,KAAA,GAAO,QAAA;EAsRzB;;;EAAA,IArQI,IAAA;EA+QE;;;EAAA,IAxQF,GAAA;EAsRK;;;EAAA,IA/QL,OAAA;EA+RK;;;;;;;;EAnRH,aAAA,IAAa,OAAA,SAAA,MAAA,gBAAA,QAAA;EA0Vb;;;;;EA/TN,UAAA,IAAU,cAAA,CAAA,OAAA;EAsWV;;;;EA9VA,SAAA,UAAmB,iBAAA,EAAmB,MAAA,UAAgB,MAAA,sBAA4B,MAAA;EAgX3E;;;EAnWP,eAAA,IAAmB,MAAA,aAAmB,iBAAA;EA4WnB;;;EArWnB,gBAAA,CAAiB,IAAA,EAAM,iBAAA;EA6XnB;;;;;;;EAlXE,OAAA,IAAO,OAAA,SAAA,MAAA,gBAAA,QAAA;EA6a0B;;;;;;EAAA,UAzZ9B,iBAAA,IAAiB,OAAA,SAAA,MAAA,gBAAA,QAAA;;;;;;;YA2CvB,kBAAA,IAAsB,UAAA;;;;EAczB,KAAA,CAAM,GAAA,UAAa,YAAA;;;;EAOnB,KAAA,CAAM,GAAA,WAAuB,YAAA;;;;EAO7B,GAAA,CAAI,GAAA,UAAa,YAAA;;;;EAOjB,GAAA,CAAI,GAAA;;;;EAOJ,GAAA,CAAI,GAAA,UAAa,KAAA;;;;EASjB,UAAA,CAAW,GAAA,UAAa,KAAA;;;;EAWxB,KAAA,IAAS,IAAA;;;;MASL,IAAA;;;;EAOJ,OAAA,CAAQ,GAAA,UAAa,KAAA;;;;MASjB,UAAA;;;;EAmBJ,IAAA,CAAK,GAAA,WAAc,YAAA;;;;;EAUnB,KAAA,CAAM,IAAA,WAAe,YAAA;;;;MAOjB,MAAA;;;;EAOJ,QAAA,CAAS,GAAA,UAAa,KAAA;;;;MASlB,KAAA;;;;EAOJ,QAAA,CAAS,GAAA,UAAa,KAAA;;;;EAStB,GAAA;;;;EAOA,eAAA;;;;EAUA,iBAAA;;;;EAmBA,KAAA;;;;EAmBA,IAAA,CAAK,IAAA;;;;EAOL,KAAA,CAAM,IAAA;;;;EAWN,MAAA,CAAO,IAAA;;;;EAOP,IAAA,CAAK,GAAA,UAAa,YAAA;;;;EAqBlB,GAAA,CAAI,GAAA,UAAa,YAAA;;;;MAWb,OAAA;;;;EAOJ,MAAA,CAAO,GAAA,UAAa,YAAA;;;;EASpB,KAAA,CAAM,GAAA,UAAa,YAAA;;;;EASnB,MAAA,CAAO,GAAA,UAAa,YAAA;;;;;;;;;;MAehB,EAAA;;;;;;;;;;;EAcJ,QAAA;;;;MAiBI,MAAA;;;;MAOA,GAAA;;;;MAOA,OAAA;;;;MAOA,SAAA;;;;MAOA,OAAA,gBAAuB,WAAA,CAAY,OAAA;;;;EAOvC,SAAA,CAAU,GAAA,EAAK,UAAA,EAAY,KAAA;AAAA"}

package/esm/http/request.mjs

@@ -11,7 +11,7 @@ import { Random, except, get, only, rtrim, set, unset } from "@mongez/reinforcem
 import { colors } from "@mongez/copper";
 import events from "@mongez/events";
 
-//#region ../../@warlock.js/core/src/http/request.ts
+//#region ../@warlock.js/core/src/http/request.ts
 var Request = class Request {
 	constructor() {
 		this.payload = {};

package/esm/http/request.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"request.mjs","names":[],"sources":["../../../../../../@warlock.js/core/src/http/request.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport events from \"@mongez/events\";\r\nimport { trans, transFrom } from \"@mongez/localization\";\r\nimport { Random, except, get, only, rtrim, set, unset } from \"@mongez/reinforcements\";\r\nimport { isEmpty } from \"@mongez/supportive-is\";\r\nimport type { LogLevel } from \"@warlock.js/logger\";\r\nimport { log } from \"@warlock.js/logger\";\r\nimport { BaseValidator, v } from \"@warlock.js/seal\";\r\nimport type { FastifyRequest } from \"fastify\";\r\nimport { type IncomingHttpHeaders } from \"node:http2\";\r\nimport { config } from \"../config/config-getter\";\r\nimport type { Middleware, Route } from \"../router\";\r\nimport { validateAll } from \"../validation/validateAll\";\r\nimport { createRequestStore } from \"./middleware/inject-request-context\";\r\nimport { Response } from \"./response\";\r\nimport type { RequestEvent } from \"./types\";\r\nimport { UploadedFile } from \"./uploaded-file\";\r\n\r\ntype StandardHeaders = {\r\n  // copy every declared property from http.IncomingHttpHeaders\r\n  // but remove index signatures\r\n  [K in keyof IncomingHttpHeaders as string extends K\r\n    ? never\r\n    : number extends K\r\n      ? never\r\n      : K]: IncomingHttpHeaders[K];\r\n};\r\n\r\ntype HeaderKeys = keyof StandardHeaders;\r\n\r\nexport class Request<RequestValidation = any> {\r\n  /**\r\n   * Underlying Fastify request — a public escape hatch to capabilities the\r\n   * framework's high-level helpers don't yet cover.\r\n   *\r\n   * **Prefer framework methods first**: `request.input()`, `request.header()`,\r\n   * `request.body`, `request.query`, `request.params`, `request.file()`,\r\n   * `request.user`, `request.detectIp()`, etc. They handle locale, parsing,\r\n   * trust-proxy, and validation pipeline integration correctly.\r\n   *\r\n   * **Reach for `baseRequest` only** when the framework genuinely lacks a\r\n   * helper for what you need — and when you do, file an issue so we can add\r\n   * it. The escape hatch is the release valve that lets consumers move\r\n   * faster than the framework, but every long-term reach here is a missing\r\n   * helper waiting to be added.\r\n   */\r\n  public baseRequest!: FastifyRequest;\r\n\r\n  /**\r\n   * Response Object\r\n   */\r\n  public response!: Response;\r\n\r\n  /**\r\n   * Route Object\r\n   */\r\n  public route!: Route;\r\n\r\n  /**\r\n   * Parsed Request Payload\r\n   */\r\n  protected payload: any = {};\r\n\r\n  /**\r\n   * Decoded access token payload (set by auth middleware)\r\n   */\r\n  public decodedAccessToken?: any;\r\n\r\n  /**\r\n   * Current request instance\r\n   */\r\n  public static current: Request;\r\n\r\n  /**\r\n   * Translation method\r\n   * Type of it is the same as the type of trans function\r\n   */\r\n  public trans: ReturnType<typeof trans> = trans;\r\n\r\n  /**\r\n   * Alias to trans method\r\n   */\r\n  public t: ReturnType<typeof trans> = trans;\r\n\r\n  /**\r\n   * Dynamic properties index signature\r\n   *\r\n   * This allows attaching custom properties to the request instance,\r\n   * commonly used during validation middleware to attach fetched models.\r\n   *\r\n   * @example\r\n   * // In validation middleware:\r\n   * const post = await Post.find(request.int(\"id\"));\r\n   * if (!post) return response.notFound();\r\n   * request.post = post; // Attach the model to the request\r\n   *\r\n   * // In route handler:\r\n   * const post = request.post;\r\n   * // Work with the pre-fetched model\r\n   */\r\n  [key: string]: any;\r\n\r\n  /**\r\n   * Locale code\r\n   */\r\n  protected _locale = \"\";\r\n\r\n  /**\r\n   * Validated data\r\n   */\r\n  protected validatedData?: RequestValidation;\r\n\r\n  /**\r\n   * Request id\r\n   */\r\n  public id = Random.string(32);\r\n\r\n  /**\r\n   * Start Time\r\n   */\r\n  public startTime = Date.now();\r\n\r\n  /**\r\n   * End Time\r\n   */\r\n  public endTime?: undefined | number;\r\n\r\n  /**\r\n   * Set request handler\r\n   */\r\n  public setRequest(request: FastifyRequest) {\r\n    this.baseRequest = request;\r\n\r\n    this.resolveRequestId();\r\n\r\n    this.parsePayload();\r\n\r\n    const localeCode = this.getLocaleCode();\r\n\r\n    this.trans = this.t = transFrom.bind(null, localeCode);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Inherit `X-Request-Id` from the incoming request, fall back to a custom\r\n   * generator, then to the field-init default (`Random.string(32)`).\r\n   *\r\n   * Inherited values are validated (length cap + printable-ASCII) to prevent\r\n   * log-injection from a malicious client. Disable the whole behavior by\r\n   * setting `http.requestId.enabled = false` — in which case the field-init\r\n   * default is used regardless of any incoming header.\r\n   */\r\n  protected resolveRequestId() {\r\n    const requestIdConfig = config.key(\"http.requestId\") || {};\r\n\r\n    if (requestIdConfig.enabled === false) return;\r\n\r\n    const headerName = (requestIdConfig.header || \"x-request-id\").toLowerCase();\r\n    const incoming = this.baseRequest.headers[headerName];\r\n\r\n    if (Request.isValidRequestId(incoming)) {\r\n      this.id = incoming;\r\n\r\n      return;\r\n    }\r\n\r\n    if (typeof requestIdConfig.generator === \"function\") {\r\n      this.id = requestIdConfig.generator();\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Validate a candidate request-id value. Accepts non-empty printable ASCII\r\n   * up to 128 characters — tight enough to reject newline / control-character\r\n   * log-injection, loose enough to accept UUIDs, ULIDs, snowflakes, etc.\r\n   */\r\n  protected static isValidRequestId(value: unknown): value is string {\r\n    return (\r\n      typeof value === \"string\" &&\r\n      value.length > 0 &&\r\n      value.length <= 128 &&\r\n      /^[\\x21-\\x7e]+$/.test(value)\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Translate from the given locale code\r\n   */\r\n  public transFrom(localeCode: string, keyword: string, placeholders?: any) {\r\n    return transFrom(localeCode, keyword, placeholders);\r\n  }\r\n\r\n  /**\r\n   * Get current locale code\r\n   */\r\n  public get locale() {\r\n    if (this._locale) return this._locale;\r\n\r\n    return this.header(\"translation-locale-code\") || this.localized;\r\n  }\r\n\r\n  /**\r\n   * Set locale code\r\n   */\r\n  public set locale(localeCode: string) {\r\n    this._locale = localeCode;\r\n  }\r\n\r\n  /**\r\n   * Get locale code that will be used for translation\r\n   */\r\n  public get localized() {\r\n    if (this._locale) return this._locale;\r\n\r\n    return (this._locale = this.header(\"locale\") || this.query[\"locale\"]);\r\n  }\r\n\r\n  /**\r\n   * Set locale code\r\n   */\r\n  public setLocaleCode(localeCode: string) {\r\n    this._locale = localeCode;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get current locale code or return default locale code\r\n   */\r\n  public getLocaleCode(defaultLocaleCode: string = config.key(\"app.localeCode\") || \"en\") {\r\n    return this.locale || defaultLocaleCode;\r\n  }\r\n\r\n  /**\r\n   * Get http protocol\r\n   */\r\n  public get protocol() {\r\n    return this.baseRequest.protocol;\r\n  }\r\n\r\n  /**\r\n   * Validate the given validation schema\r\n   */\r\n  public async validate(validation: BaseValidator, selectedInputs?: string[]) {\r\n    return await v.validate(validation, selectedInputs ? this.only(selectedInputs) : this.all());\r\n  }\r\n\r\n  /**\r\n   * Clear current user\r\n   */\r\n  public clearCurrentUser() {\r\n    this.user = undefined;\r\n  }\r\n\r\n  /**\r\n   * Get value of the given header\r\n   */\r\n  public header<TCustomHeader extends string = HeaderKeys>(\r\n    name: TCustomHeader | HeaderKeys,\r\n    defaultValue: any = null,\r\n  ) {\r\n    return this.baseRequest.headers[name.toLocaleLowerCase()] ?? defaultValue;\r\n  }\r\n\r\n  /**\r\n   * Get all cookies from the current request\r\n   */\r\n  public get cookies(): Record<string, string | undefined> {\r\n    return this.baseRequest.cookies || {};\r\n  }\r\n\r\n  /**\r\n   * Get a particular cookie value or fallback to default\r\n   */\r\n  public cookie(name: string, defaultValue?: any): string | any {\r\n    const value = this.cookies[name] ?? defaultValue;\r\n\r\n    try {\r\n      return JSON.parse(value);\r\n    } catch (error) {\r\n      return value;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Determine if the request has the specified cookie\r\n   */\r\n  public hasCookie(name: string): boolean {\r\n    return this.cookies[name] !== undefined;\r\n  }\r\n\r\n  /**\r\n   * Get the current request domain\r\n   */\r\n  public get domain() {\r\n    return this.baseRequest.hostname.replace(/^www\\./, \"\");\r\n  }\r\n\r\n  /**\r\n   * Get hostname\r\n   */\r\n  public get hostname() {\r\n    return this.domain;\r\n  }\r\n\r\n  /**\r\n   * Get request origin\r\n   */\r\n  public get origin() {\r\n    return this.baseRequest.headers.origin as string;\r\n  }\r\n\r\n  /**\r\n   * Get the domain of the origin\r\n   */\r\n  public get originDomain() {\r\n    const domain = this.origin ? new URL(this.origin).hostname : null;\r\n\r\n    if (domain?.startsWith(\"www.\")) {\r\n      return domain.replace(/^www\\./, \"\");\r\n    }\r\n\r\n    return domain;\r\n  }\r\n\r\n  /**\r\n   * Get authorization header value\r\n   */\r\n  public get authorizationValue(): string {\r\n    const authorization = this.header(\"authorization\");\r\n\r\n    if (!authorization) return \"\";\r\n\r\n    const [type, value] = authorization.split(\" \");\r\n\r\n    if (![\"bearer\", \"key\"].includes(type.toLowerCase())) return \"\";\r\n\r\n    return value || \"\";\r\n  }\r\n\r\n  /**\r\n   * Get access token from Authorization header\r\n   *\r\n   * If the Authorization header does not start with `Bearer` value then return null\r\n   */\r\n  public get accessToken(): string | undefined {\r\n    const authorization = this.header(\"authorization\");\r\n\r\n    if (!authorization) return;\r\n\r\n    const [type, value] = authorization.split(\" \");\r\n\r\n    if (type.toLowerCase() !== \"bearer\") return;\r\n\r\n    return value;\r\n  }\r\n\r\n  /**\r\n   * Get the authorization header\r\n   */\r\n  public get authorization() {\r\n    return this.header(\"authorization\");\r\n  }\r\n\r\n  /**\r\n   * Get current request method\r\n   */\r\n  public get method(): string {\r\n    return this.baseRequest.method;\r\n  }\r\n\r\n  /**\r\n   * Parse the payload and merge it from the request body, params and query string\r\n   */\r\n  protected parsePayload() {\r\n    this.payload.body = this.parseBody(this.baseRequest.body);\r\n\r\n    this.payload.query = this.parseBody(this.baseRequest.query);\r\n    this.payload.params = { ...(this.baseRequest.params || {}) };\r\n    this.payload.all = {\r\n      ...this.payload.body,\r\n      ...this.payload.query,\r\n      ...this.payload.params,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Parse body payload\r\n   */\r\n  protected parseBody(data: any) {\r\n    try {\r\n      if (!data) return {};\r\n\r\n      const body: any = {};\r\n\r\n      const arrayOfObjectValues: any = {};\r\n\r\n      for (let key in data) {\r\n        const value = data[key];\r\n\r\n        let isArrayKey = false;\r\n\r\n        if (key.endsWith(\"[]\")) {\r\n          isArrayKey = true;\r\n        }\r\n\r\n        key = rtrim(key, \"[]\");\r\n\r\n        // check if the key is has a square brackets, then convert it into object\r\n        // i.e user[email] => user: {email: \"value\"}\r\n        // also check if its an array of objects\r\n\r\n        if (key.includes(\"[\")) {\r\n          // check if its an array of objects\r\n          if (key.includes(\"][\")) {\r\n            const keyParts = key.split(\"[\");\r\n\r\n            const keyName = keyParts[0];\r\n            if (!arrayOfObjectValues[keyName]) {\r\n              arrayOfObjectValues[keyName] = [];\r\n            }\r\n\r\n            const keyNameParts = keyParts[1].split(\"]\");\r\n\r\n            const index = Number(keyNameParts[0]);\r\n\r\n            if (!arrayOfObjectValues[keyName][index]) {\r\n              arrayOfObjectValues[keyName][index] = {};\r\n            }\r\n\r\n            // now get the key after the index\r\n            const keyNameParts2 = keyParts[2].split(\"]\");\r\n            const keyName2 = keyNameParts2[0];\r\n\r\n            arrayOfObjectValues[keyName][index][keyName2] = this.parseValue(value);\r\n\r\n            continue;\r\n          }\r\n\r\n          const keyParts = key.split(\"[\");\r\n          const keyName = keyParts[0];\r\n          const keyNameParts = keyParts[1].split(\"]\");\r\n\r\n          set(\r\n            body,\r\n            keyName + \".\" + keyNameParts[0],\r\n            Array.isArray(value) ? value.map(this.parseValue.bind(this)) : this.parseValue(value),\r\n          );\r\n\r\n          continue;\r\n        }\r\n\r\n        if (Array.isArray(value)) {\r\n          set(body, key, value.map(this.parseValue.bind(this)));\r\n        } else if (isArrayKey) {\r\n          if (body[key]) {\r\n            body[key].push(this.parseValue(value));\r\n          } else {\r\n            body[key] = [this.parseValue(value)];\r\n\r\n            continue;\r\n          }\r\n        } else {\r\n          set(body, key, this.parseValue(value));\r\n        }\r\n      }\r\n\r\n      // now merge the array of objects into the body\r\n      for (const key in arrayOfObjectValues) {\r\n        body[key] = arrayOfObjectValues[key];\r\n      }\r\n\r\n      return body;\r\n    } catch (error) {\r\n      console.log(error);\r\n      this.log(error, \"error\");\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Parse the given data\r\n   */\r\n  protected parseValue(data: any) {\r\n    // data.value appears only in the multipart form data\r\n    // if it json, then just return the data\r\n    if (data?.file) return new UploadedFile(data);\r\n    if (data?.value !== undefined && data?.fields && data?.type) {\r\n      data = data.value;\r\n    }\r\n\r\n    if (data === \"false\") return false;\r\n\r\n    if (data === \"true\") return true;\r\n\r\n    if (data === \"null\") return null;\r\n\r\n    if (typeof data === \"string\") return data.trim();\r\n\r\n    return data;\r\n  }\r\n\r\n  /**\r\n   * Set route handler\r\n   */\r\n  public setRoute(route: Route) {\r\n    this.route = route;\r\n\r\n    // pass the route to the response object\r\n    this.response.setRoute(route);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Trigger an http event\r\n   */\r\n  public trigger(eventName: RequestEvent, ...args: any[]) {\r\n    return events.trigger(`request.${eventName}`, ...args, this);\r\n  }\r\n\r\n  /**\r\n   * Listen to the given event\r\n   */\r\n  public on(eventName: RequestEvent, callback: any) {\r\n    return this.subscribe(eventName, callback);\r\n  }\r\n\r\n  /**\r\n   * Make a log message\r\n   */\r\n  public log(message: any, level: LogLevel = \"info\") {\r\n    if (!config.key(\"http.log\")) return;\r\n\r\n    log.log({\r\n      module: \"request\",\r\n      action: this.route.method + \" \" + this.route.path.replace(\"/*\", \"\") + `:${this.id}`,\r\n      message,\r\n      type: level,\r\n      context: {\r\n        request: this,\r\n      },\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Get current request path\r\n   */\r\n  public get path() {\r\n    return this.baseRequest.url;\r\n  }\r\n\r\n  /**\r\n   * {@alias}\r\n   */\r\n  public get url() {\r\n    return this.baseRequest.url;\r\n  }\r\n\r\n  /**\r\n   * Get full url\r\n   */\r\n  public get fullUrl() {\r\n    return this.protocol + \"://\" + this.hostname + this.path;\r\n  }\r\n\r\n  /**\r\n   * Drive the middleware chain for the current route, then defer to the\r\n   * controller. Returns the first response value any middleware short-circuits\r\n   * with, or `undefined` to continue into validation + handler.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code. Will move\r\n   * to a dedicated controller dispatcher in a future refactor.\r\n   */\r\n  public async runMiddleware() {\r\n    // measure request time\r\n    // check for middleware first\r\n    const middlewareOutput = await this.executeMiddleware();\r\n\r\n    if (middlewareOutput !== undefined) {\r\n      // 👇🏻 make sure first its not a response instance\r\n      if (middlewareOutput instanceof Response) return middlewareOutput;\r\n      // 👇🏻 send the response\r\n      return this.response.send(middlewareOutput);\r\n    }\r\n\r\n    const handler = this.route.handler;\r\n\r\n    if (!handler.validation) return;\r\n\r\n    // 👇🏻 check for validation using validateAll helper function\r\n    const validationOutput = await validateAll(handler.validation, this, this.response);\r\n\r\n    return validationOutput;\r\n  }\r\n\r\n  /**\r\n   * Return the request handler attached to the current route.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  public getHandler() {\r\n    return this.route.handler;\r\n  }\r\n\r\n  /**\r\n   * Get inputs that has been validated only\r\n   * You can also pass an array of inputs to get only the validated inputs\r\n   */\r\n  public validated<Output = RequestValidation>(inputs?: (keyof Output | (string & {}))[]): Output {\r\n    if (this.validatedData) {\r\n      return inputs\r\n        ? only(this.validatedData as Output, inputs as string[])\r\n        : (this.validatedData as Output);\r\n    }\r\n\r\n    return {} as Output;\r\n  }\r\n\r\n  /**\r\n   * Get inputs that has been validated except the given inputs\r\n   */\r\n  public validatedExcept(...inputs: string[]): RequestValidation {\r\n    return except(this.validated(), inputs);\r\n  }\r\n\r\n  /**\r\n   * Set validated data\r\n   */\r\n  public setValidatedData(data: RequestValidation) {\r\n    this.validatedData = data;\r\n  }\r\n\r\n  /**\r\n   * Top-level entry into the request lifecycle — opens the context store,\r\n   * runs middleware, drives the handler, handles errors.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code. Wired\r\n   * from the Fastify route handler in `router.scan()`.\r\n   */\r\n  public async execute() {\r\n    try {\r\n      // call executingAction event\r\n\r\n      this.log(\"Executing the request\");\r\n\r\n      return await createRequestStore(this, this.response);\r\n    } catch (error) {\r\n      this.log(error, \"error\");\r\n\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Iterate the collected middlewares in order; return the first short-circuit\r\n   * value or `undefined` when every middleware passes through.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  protected async executeMiddleware() {\r\n    // collect all middlewares for current route\r\n    const middlewares = this.collectMiddlewares();\r\n\r\n    // check if there are no middlewares, then return\r\n    if (middlewares.length === 0) return;\r\n\r\n    this.log(\"About to execute request middlewares\");\r\n\r\n    // trigger the executingMiddleware event\r\n    this.trigger(\"executingMiddleware\", middlewares, this.route);\r\n\r\n    for (const middleware of middlewares) {\r\n      this.log(\"Executing middleware \" + colors.yellowBright(middleware.name));\r\n      const output = await middleware(this, this.response);\r\n      this.log(\"Executed middleware \" + colors.yellowBright(middleware.name), \"success\");\r\n\r\n      if (output !== undefined) {\r\n        this.log(\r\n          colors.yellow(\"request intercepted by middleware \") + colors.cyanBright(middleware.name),\r\n          \"warn\",\r\n        );\r\n\r\n        this.trigger(\"executedMiddleware\");\r\n\r\n        this.log(\"Request middlewares executed\", \"success\");\r\n\r\n        return output;\r\n      }\r\n    }\r\n\r\n    this.log(\"Request middlewares executed\", \"success\");\r\n\r\n    // trigger the executedMiddleware event\r\n    this.trigger(\"executedMiddleware\", middlewares, this.route);\r\n  }\r\n\r\n  /**\r\n   * Gather the middleware list for the current route — today just the\r\n   * route-level array; future extraction may merge group + app-wide layers.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  protected collectMiddlewares(): Middleware[] {\r\n    const middlewaresList: Middleware[] = [];\r\n\r\n    // collect route middlewares\r\n    if (this.route.middleware) {\r\n      middlewaresList.push(...this.route.middleware);\r\n    }\r\n\r\n    return middlewaresList;\r\n  }\r\n\r\n  /**\r\n   * Get request input value from query string, params or body\r\n   */\r\n  public input(key: string, defaultValue?: any) {\r\n    return get(this.payload.all, key, defaultValue);\r\n  }\r\n\r\n  /**\r\n   * Get email input value, this will lowercase the value\r\n   */\r\n  public email(key: string = \"email\", defaultValue: string = \"\"): string {\r\n    return this.input(key, defaultValue)?.toLowerCase() || defaultValue;\r\n  }\r\n\r\n  /**\r\n   * @alias input\r\n   */\r\n  public get(key: string, defaultValue?: any) {\r\n    return this.input(key, defaultValue);\r\n  }\r\n\r\n  /**\r\n   * Determine if request has input value\r\n   */\r\n  public has(key: string) {\r\n    return get(this.payload.all, key, undefined) !== undefined;\r\n  }\r\n\r\n  /**\r\n   * Set request input value\r\n   */\r\n  public set(key: string, value: any) {\r\n    set(this.payload.all, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the given value if the request does not have the input\r\n   */\r\n  public setDefault(key: string, value: any) {\r\n    if (this.has(key)) return this;\r\n\r\n    set(this.payload.all, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Unset request payload keys\r\n   */\r\n  public unset(...keys: string[]) {\r\n    this.payload.all = unset(this.payload.all, keys);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get request body\r\n   */\r\n  public get body() {\r\n    return this.payload.body;\r\n  }\r\n\r\n  /**\r\n   * Set request body value\r\n   */\r\n  public setBody(key: string, value: any) {\r\n    set(this.payload.body, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get body inputs except files\r\n   */\r\n  public get bodyInputs() {\r\n    const inputs = this.payload.body;\r\n\r\n    const bodyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (value.file && value.fieldname) continue;\r\n\r\n      bodyInputs[key] = value;\r\n    }\r\n\r\n    return bodyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get request file in UploadedFile instance\r\n   */\r\n  public file(key: string): UploadedFile | undefined {\r\n    const file = this.input(key);\r\n\r\n    return file;\r\n  }\r\n\r\n  /**\r\n   * Get uploaded files from the request for the given name\r\n   * If the given name is not present in the request, return an empty array\r\n   */\r\n  public files(name: string): UploadedFile[] {\r\n    return this.input(name) || [];\r\n  }\r\n\r\n  /**\r\n   * Get request params\r\n   */\r\n  public get params() {\r\n    return this.payload.params;\r\n  }\r\n\r\n  /**\r\n   * Set request params value\r\n   */\r\n  public setParam(key: string, value: any) {\r\n    set(this.payload.params, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get request query\r\n   */\r\n  public get query() {\r\n    return this.payload.query;\r\n  }\r\n\r\n  /**\r\n   * Set request query value\r\n   */\r\n  public setQuery(key: string, value: any) {\r\n    set(this.payload.query, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get all inputs\r\n   */\r\n  public all() {\r\n    return this.payload.all;\r\n  }\r\n\r\n  /**\r\n   * Get all inputs except params\r\n   */\r\n  public allExceptParams() {\r\n    return {\r\n      ...this.payload.query,\r\n      ...this.payload.body,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Get all heavy inputs except params\r\n   */\r\n  public heavyExceptParams() {\r\n    const inputs = this.allExceptParams();\r\n\r\n    const heavyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (isEmpty(value) && value !== null) continue;\r\n\r\n      heavyInputs[key] = value;\r\n    }\r\n\r\n    return heavyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get only heavy inputs, the input with a value\r\n   */\r\n  public heavy() {\r\n    const inputs = this.all();\r\n\r\n    const heavyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (isEmpty(value) && value !== null) continue;\r\n\r\n      heavyInputs[key] = value;\r\n    }\r\n\r\n    return heavyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get only the given keys from the request data\r\n   */\r\n  public only(keys: string[]) {\r\n    return only(this.all(), keys);\r\n  }\r\n\r\n  /**\r\n   * Pluck the given keys from the request data\r\n   */\r\n  public pluck(keys: string[]) {\r\n    const data = this.only(keys);\r\n\r\n    this.unset(...keys);\r\n\r\n    return data;\r\n  }\r\n\r\n  /**\r\n   * Get all request inputs except the given keys\r\n   */\r\n  public except(keys: string[]) {\r\n    return except(this.all(), keys);\r\n  }\r\n\r\n  /**\r\n   * Get boolean input value\r\n   */\r\n  public bool(key: string, defaultValue = false) {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    if (value === \"true\") {\r\n      return true;\r\n    }\r\n\r\n    if (value === \"false\") {\r\n      return false;\r\n    }\r\n\r\n    if (value === 0) {\r\n      return false;\r\n    }\r\n\r\n    return Boolean(value);\r\n  }\r\n\r\n  /**\r\n   * Get integer input value\r\n   */\r\n  public int(key: string, defaultValue: number = 0): number | undefined {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    if (!value && value !== 0) return undefined;\r\n\r\n    return parseInt(value);\r\n  }\r\n\r\n  /**\r\n   * Shorthand getter to get id param\r\n   */\r\n  public get idParam() {\r\n    return this.int(\"id\");\r\n  }\r\n\r\n  /**\r\n   * Get string input value\r\n   */\r\n  public string(key: string, defaultValue: string = \"\"): string {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    return String(value);\r\n  }\r\n\r\n  /**\r\n   * Get float input value\r\n   */\r\n  public float(key: string, defaultValue: number = 0): number {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    return parseFloat(value) || 0;\r\n  }\r\n\r\n  /**\r\n   * Get number input value\r\n   */\r\n  public number(key: string, defaultValue: number = 0): number {\r\n    const value = Number(this.input(key, defaultValue));\r\n\r\n    return isNaN(value) ? defaultValue : value;\r\n  }\r\n\r\n  /**\r\n   * Immediate-peer IP as Fastify reports it — the address that connected to\r\n   * the server socket, with `trustProxy` resolution applied. Use this when\r\n   * you specifically need the peer address (rate-limit-by-direct-connection,\r\n   * health-check origin verification).\r\n   *\r\n   * **For most use cases prefer `request.detectIp()`** — behind any proxy\r\n   * (load balancer, CDN, sidecar) `ip` reports the proxy, not the real client.\r\n   */\r\n  public get ip() {\r\n    return this.baseRequest.ip;\r\n  }\r\n\r\n  /**\r\n   * Best-effort real client IP — checks `X-Real-IP` and `X-Forwarded-For`\r\n   * headers first, falls back to `baseRequest.ip` when neither is present.\r\n   *\r\n   * **Prefer this over `request.ip` for any caller behind a proxy** (load\r\n   * balancer, CDN, reverse proxy, k8s ingress). Only trust the result as\r\n   * far as you trust the upstream proxy chain — `X-Forwarded-For` is\r\n   * client-settable; verify the request came through your trusted edge\r\n   * before treating the value as authoritative.\r\n   */\r\n  public detectIp() {\r\n    // as the server maybe used behind a proxy\r\n    // then we need to check first if there is a forwarded ip\r\n    // check for the real-ip header\r\n\r\n    const realIp = this.header(\"x-real-ip\");\r\n\r\n    if (realIp) return realIp;\r\n\r\n    const forwardedIp = this.header(\"x-forwarded-for\");\r\n\r\n    return forwardedIp || this.baseRequest.ip;\r\n  }\r\n\r\n  /**\r\n   * An alias to detectIp\r\n   */\r\n  public get realIp() {\r\n    return this.detectIp();\r\n  }\r\n\r\n  /**\r\n   * Get request ips\r\n   */\r\n  public get ips() {\r\n    return this.baseRequest.ips;\r\n  }\r\n\r\n  /**\r\n   * Get request referer\r\n   */\r\n  public get referer() {\r\n    return this.baseRequest.headers.referer;\r\n  }\r\n\r\n  /**\r\n   * Get user agent\r\n   */\r\n  public get userAgent() {\r\n    return this.baseRequest.headers[\"user-agent\"];\r\n  }\r\n\r\n  /**\r\n   * Get request headers\r\n   */\r\n  public get headers(): typeof this.baseRequest.headers {\r\n    return this.baseRequest.headers;\r\n  }\r\n\r\n  /**\r\n   * Set the given header\r\n   */\r\n  public setHeader(key: HeaderKeys, value: string) {\r\n    this.baseRequest.headers[key.toLowerCase()] = value;\r\n\r\n    return this;\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;AA8BA,IAAa,UAAb,MAAa,QAAiC;;iBA+BnB,CAAC;eAgBe;WAKJ;iBAuBjB;YAUR,OAAO,OAAO,EAAE;mBAKT,KAAK,IAAI;;;;;CAU5B,AAAO,WAAW,SAAyB;EACzC,KAAK,cAAc;EAEnB,KAAK,iBAAiB;EAEtB,KAAK,aAAa;EAElB,MAAM,aAAa,KAAK,cAAc;EAEtC,KAAK,QAAQ,KAAK,IAAI,UAAU,KAAK,MAAM,UAAU;EAErD,OAAO;CACT;;;;;;;;;;CAWA,AAAU,mBAAmB;EAC3B,MAAM,kBAAkB,OAAO,IAAI,gBAAgB,KAAK,CAAC;EAEzD,IAAI,gBAAgB,YAAY,OAAO;EAEvC,MAAM,cAAc,gBAAgB,UAAU,gBAAgB,YAAY;EAC1E,MAAM,WAAW,KAAK,YAAY,QAAQ;EAE1C,IAAI,QAAQ,iBAAiB,QAAQ,GAAG;GACtC,KAAK,KAAK;GAEV;EACF;EAEA,IAAI,OAAO,gBAAgB,cAAc,YACvC,KAAK,KAAK,gBAAgB,UAAU;CAExC;;;;;;CAOA,OAAiB,iBAAiB,OAAiC;EACjE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,OAChB,iBAAiB,KAAK,KAAK;CAE/B;;;;CAKA,AAAO,UAAU,YAAoB,SAAiB,cAAoB;EACxE,OAAO,UAAU,YAAY,SAAS,YAAY;CACpD;;;;CAKA,IAAW,SAAS;EAClB,IAAI,KAAK,SAAS,OAAO,KAAK;EAE9B,OAAO,KAAK,OAAO,yBAAyB,KAAK,KAAK;CACxD;;;;CAKA,IAAW,OAAO,YAAoB;EACpC,KAAK,UAAU;CACjB;;;;CAKA,IAAW,YAAY;EACrB,IAAI,KAAK,SAAS,OAAO,KAAK;EAE9B,OAAQ,KAAK,UAAU,KAAK,OAAO,QAAQ,KAAK,KAAK,MAAM;CAC7D;;;;CAKA,AAAO,cAAc,YAAoB;EACvC,KAAK,UAAU;EAEf,OAAO;CACT;;;;CAKA,AAAO,cAAc,oBAA4B,OAAO,IAAI,gBAAgB,KAAK,MAAM;EACrF,OAAO,KAAK,UAAU;CACxB;;;;CAKA,IAAW,WAAW;EACpB,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,MAAa,SAAS,YAA2B,gBAA2B;EAC1E,OAAO,MAAM,EAAE,SAAS,YAAY,iBAAiB,KAAK,KAAK,cAAc,IAAI,KAAK,IAAI,CAAC;CAC7F;;;;CAKA,AAAO,mBAAmB;EACxB,KAAK,OAAO;CACd;;;;CAKA,AAAO,OACL,MACA,eAAoB,MACpB;EACA,OAAO,KAAK,YAAY,QAAQ,KAAK,kBAAkB,MAAM;CAC/D;;;;CAKA,IAAW,UAA8C;EACvD,OAAO,KAAK,YAAY,WAAW,CAAC;CACtC;;;;CAKA,AAAO,OAAO,MAAc,cAAkC;EAC5D,MAAM,QAAQ,KAAK,QAAQ,SAAS;EAEpC,IAAI;GACF,OAAO,KAAK,MAAM,KAAK;EACzB,SAAS,OAAO;GACd,OAAO;EACT;CACF;;;;CAKA,AAAO,UAAU,MAAuB;EACtC,OAAO,KAAK,QAAQ,UAAU;CAChC;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,YAAY,SAAS,QAAQ,UAAU,EAAE;CACvD;;;;CAKA,IAAW,WAAW;EACpB,OAAO,KAAK;CACd;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,eAAe;EACxB,MAAM,SAAS,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,EAAE,WAAW;EAE7D,IAAI,QAAQ,WAAW,MAAM,GAC3B,OAAO,OAAO,QAAQ,UAAU,EAAE;EAGpC,OAAO;CACT;;;;CAKA,IAAW,qBAA6B;EACtC,MAAM,gBAAgB,KAAK,OAAO,eAAe;EAEjD,IAAI,CAAC,eAAe,OAAO;EAE3B,MAAM,CAAC,MAAM,SAAS,cAAc,MAAM,GAAG;EAE7C,IAAI,CAAC,CAAC,UAAU,KAAK,EAAE,SAAS,KAAK,YAAY,CAAC,GAAG,OAAO;EAE5D,OAAO,SAAS;CAClB;;;;;;CAOA,IAAW,cAAkC;EAC3C,MAAM,gBAAgB,KAAK,OAAO,eAAe;EAEjD,IAAI,CAAC,eAAe;EAEpB,MAAM,CAAC,MAAM,SAAS,cAAc,MAAM,GAAG;EAE7C,IAAI,KAAK,YAAY,MAAM,UAAU;EAErC,OAAO;CACT;;;;CAKA,IAAW,gBAAgB;EACzB,OAAO,KAAK,OAAO,eAAe;CACpC;;;;CAKA,IAAW,SAAiB;EAC1B,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,AAAU,eAAe;EACvB,KAAK,QAAQ,OAAO,KAAK,UAAU,KAAK,YAAY,IAAI;EAExD,KAAK,QAAQ,QAAQ,KAAK,UAAU,KAAK,YAAY,KAAK;EAC1D,KAAK,QAAQ,SAAS,EAAE,GAAI,KAAK,YAAY,UAAU,CAAC,EAAG;EAC3D,KAAK,QAAQ,MAAM;GACjB,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;EAClB;CACF;;;;CAKA,AAAU,UAAU,MAAW;EAC7B,IAAI;GACF,IAAI,CAAC,MAAM,OAAO,CAAC;GAEnB,MAAM,OAAY,CAAC;GAEnB,MAAM,sBAA2B,CAAC;GAElC,KAAK,IAAI,OAAO,MAAM;IACpB,MAAM,QAAQ,KAAK;IAEnB,IAAI,aAAa;IAEjB,IAAI,IAAI,SAAS,IAAI,GACnB,aAAa;IAGf,MAAM,MAAM,KAAK,IAAI;IAMrB,IAAI,IAAI,SAAS,GAAG,GAAG;KAErB,IAAI,IAAI,SAAS,IAAI,GAAG;MACtB,MAAM,WAAW,IAAI,MAAM,GAAG;MAE9B,MAAM,UAAU,SAAS;MACzB,IAAI,CAAC,oBAAoB,UACvB,oBAAoB,WAAW,CAAC;MAGlC,MAAM,eAAe,SAAS,GAAG,MAAM,GAAG;MAE1C,MAAM,QAAQ,OAAO,aAAa,EAAE;MAEpC,IAAI,CAAC,oBAAoB,SAAS,QAChC,oBAAoB,SAAS,SAAS,CAAC;MAKzC,MAAM,WADgB,SAAS,GAAG,MAAM,GACX,EAAE;MAE/B,oBAAoB,SAAS,OAAO,YAAY,KAAK,WAAW,KAAK;MAErE;KACF;KAEA,MAAM,WAAW,IAAI,MAAM,GAAG;KAC9B,MAAM,UAAU,SAAS;KACzB,MAAM,eAAe,SAAS,GAAG,MAAM,GAAG;KAE1C,IACE,MACA,UAAU,MAAM,aAAa,IAC7B,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,WAAW,KAAK,CACtF;KAEA;IACF;IAEA,IAAI,MAAM,QAAQ,KAAK,GACrB,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC,CAAC;SAC/C,IAAI,YACT,IAAI,KAAK,MACP,KAAK,KAAK,KAAK,KAAK,WAAW,KAAK,CAAC;SAChC;KACL,KAAK,OAAO,CAAC,KAAK,WAAW,KAAK,CAAC;KAEnC;IACF;SAEA,IAAI,MAAM,KAAK,KAAK,WAAW,KAAK,CAAC;GAEzC;GAGA,KAAK,MAAM,OAAO,qBAChB,KAAK,OAAO,oBAAoB;GAGlC,OAAO;EACT,SAAS,OAAO;GACd,QAAQ,IAAI,KAAK;GACjB,KAAK,IAAI,OAAO,OAAO;EACzB;CACF;;;;CAKA,AAAU,WAAW,MAAW;EAG9B,IAAI,MAAM,MAAM,OAAO,IAAI,aAAa,IAAI;EAC5C,IAAI,MAAM,UAAU,UAAa,MAAM,UAAU,MAAM,MACrD,OAAO,KAAK;EAGd,IAAI,SAAS,SAAS,OAAO;EAE7B,IAAI,SAAS,QAAQ,OAAO;EAE5B,IAAI,SAAS,QAAQ,OAAO;EAE5B,IAAI,OAAO,SAAS,UAAU,OAAO,KAAK,KAAK;EAE/C,OAAO;CACT;;;;CAKA,AAAO,SAAS,OAAc;EAC5B,KAAK,QAAQ;EAGb,KAAK,SAAS,SAAS,KAAK;EAE5B,OAAO;CACT;;;;CAKA,AAAO,QAAQ,WAAyB,GAAG,MAAa;EACtD,OAAO,OAAO,QAAQ,WAAW,aAAa,GAAG,MAAM,IAAI;CAC7D;;;;CAKA,AAAO,GAAG,WAAyB,UAAe;EAChD,OAAO,KAAK,UAAU,WAAW,QAAQ;CAC3C;;;;CAKA,AAAO,IAAI,SAAc,QAAkB,QAAQ;EACjD,IAAI,CAAC,OAAO,IAAI,UAAU,GAAG;EAE7B,IAAI,IAAI;GACN,QAAQ;GACR,QAAQ,KAAK,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK,QAAQ,MAAM,EAAE,IAAI,IAAI,KAAK;GAC/E;GACA,MAAM;GACN,SAAS,EACP,SAAS,KACX;EACF,CAAC;CACH;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,WAAW,QAAQ,KAAK,WAAW,KAAK;CACtD;;;;;;;;;CAUA,MAAa,gBAAgB;EAG3B,MAAM,mBAAmB,MAAM,KAAK,kBAAkB;EAEtD,IAAI,qBAAqB,QAAW;GAElC,IAAI,4BAA4B,UAAU,OAAO;GAEjD,OAAO,KAAK,SAAS,KAAK,gBAAgB;EAC5C;EAEA,MAAM,UAAU,KAAK,MAAM;EAE3B,IAAI,CAAC,QAAQ,YAAY;EAKzB,OAAO,MAFwB,YAAY,QAAQ,YAAY,MAAM,KAAK,QAAQ;CAGpF;;;;;;CAOA,AAAO,aAAa;EAClB,OAAO,KAAK,MAAM;CACpB;;;;;CAMA,AAAO,UAAsC,QAAmD;EAC9F,IAAI,KAAK,eACP,OAAO,SACH,KAAK,KAAK,eAAyB,MAAkB,IACpD,KAAK;EAGZ,OAAO,CAAC;CACV;;;;CAKA,AAAO,gBAAgB,GAAG,QAAqC;EAC7D,OAAO,OAAO,KAAK,UAAU,GAAG,MAAM;CACxC;;;;CAKA,AAAO,iBAAiB,MAAyB;EAC/C,KAAK,gBAAgB;CACvB;;;;;;;;CASA,MAAa,UAAU;EACrB,IAAI;GAGF,KAAK,IAAI,uBAAuB;GAEhC,OAAO,MAAM,mBAAmB,MAAM,KAAK,QAAQ;EACrD,SAAS,OAAO;GACd,KAAK,IAAI,OAAO,OAAO;GAEvB,MAAM;EACR;CACF;;;;;;;CAQA,MAAgB,oBAAoB;EAElC,MAAM,cAAc,KAAK,mBAAmB;EAG5C,IAAI,YAAY,WAAW,GAAG;EAE9B,KAAK,IAAI,sCAAsC;EAG/C,KAAK,QAAQ,uBAAuB,aAAa,KAAK,KAAK;EAE3D,KAAK,MAAM,cAAc,aAAa;GACpC,KAAK,IAAI,0BAA0B,OAAO,aAAa,WAAW,IAAI,CAAC;GACvE,MAAM,SAAS,MAAM,WAAW,MAAM,KAAK,QAAQ;GACnD,KAAK,IAAI,yBAAyB,OAAO,aAAa,WAAW,IAAI,GAAG,SAAS;GAEjF,IAAI,WAAW,QAAW;IACxB,KAAK,IACH,OAAO,OAAO,oCAAoC,IAAI,OAAO,WAAW,WAAW,IAAI,GACvF,MACF;IAEA,KAAK,QAAQ,oBAAoB;IAEjC,KAAK,IAAI,gCAAgC,SAAS;IAElD,OAAO;GACT;EACF;EAEA,KAAK,IAAI,gCAAgC,SAAS;EAGlD,KAAK,QAAQ,sBAAsB,aAAa,KAAK,KAAK;CAC5D;;;;;;;CAQA,AAAU,qBAAmC;EAC3C,MAAM,kBAAgC,CAAC;EAGvC,IAAI,KAAK,MAAM,YACb,gBAAgB,KAAK,GAAG,KAAK,MAAM,UAAU;EAG/C,OAAO;CACT;;;;CAKA,AAAO,MAAM,KAAa,cAAoB;EAC5C,OAAO,IAAI,KAAK,QAAQ,KAAK,KAAK,YAAY;CAChD;;;;CAKA,AAAO,MAAM,MAAc,SAAS,eAAuB,IAAY;EACrE,OAAO,KAAK,MAAM,KAAK,YAAY,GAAG,YAAY,KAAK;CACzD;;;;CAKA,AAAO,IAAI,KAAa,cAAoB;EAC1C,OAAO,KAAK,MAAM,KAAK,YAAY;CACrC;;;;CAKA,AAAO,IAAI,KAAa;EACtB,OAAO,IAAI,KAAK,QAAQ,KAAK,KAAK,MAAS,MAAM;CACnD;;;;CAKA,AAAO,IAAI,KAAa,OAAY;EAClC,IAAI,KAAK,QAAQ,KAAK,KAAK,KAAK;EAEhC,OAAO;CACT;;;;CAKA,AAAO,WAAW,KAAa,OAAY;EACzC,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;EAE1B,IAAI,KAAK,QAAQ,KAAK,KAAK,KAAK;EAEhC,OAAO;CACT;;;;CAKA,AAAO,MAAM,GAAG,MAAgB;EAC9B,KAAK,QAAQ,MAAM,MAAM,KAAK,QAAQ,KAAK,IAAI;EAE/C,OAAO;CACT;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,QAAQ,KAAa,OAAY;EACtC,IAAI,KAAK,QAAQ,MAAM,KAAK,KAAK;EAEjC,OAAO;CACT;;;;CAKA,IAAW,aAAa;EACtB,MAAM,SAAS,KAAK,QAAQ;EAE5B,MAAM,aAAkB,CAAC;EAEzB,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,MAAM,QAAQ,MAAM,WAAW;GAEnC,WAAW,OAAO;EACpB;EAEA,OAAO;CACT;;;;CAKA,AAAO,KAAK,KAAuC;EAGjD,OAFa,KAAK,MAAM,GAEd;CACZ;;;;;CAMA,AAAO,MAAM,MAA8B;EACzC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC;CAC9B;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,SAAS,KAAa,OAAY;EACvC,IAAI,KAAK,QAAQ,QAAQ,KAAK,KAAK;EAEnC,OAAO;CACT;;;;CAKA,IAAW,QAAQ;EACjB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,SAAS,KAAa,OAAY;EACvC,IAAI,KAAK,QAAQ,OAAO,KAAK,KAAK;EAElC,OAAO;CACT;;;;CAKA,AAAO,MAAM;EACX,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,kBAAkB;EACvB,OAAO;GACL,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;EAClB;CACF;;;;CAKA,AAAO,oBAAoB;EACzB,MAAM,SAAS,KAAK,gBAAgB;EAEpC,MAAM,cAAmB,CAAC;EAE1B,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,QAAQ,KAAK,KAAK,UAAU,MAAM;GAEtC,YAAY,OAAO;EACrB;EAEA,OAAO;CACT;;;;CAKA,AAAO,QAAQ;EACb,MAAM,SAAS,KAAK,IAAI;EAExB,MAAM,cAAmB,CAAC;EAE1B,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,QAAQ,KAAK,KAAK,UAAU,MAAM;GAEtC,YAAY,OAAO;EACrB;EAEA,OAAO;CACT;;;;CAKA,AAAO,KAAK,MAAgB;EAC1B,OAAO,KAAK,KAAK,IAAI,GAAG,IAAI;CAC9B;;;;CAKA,AAAO,MAAM,MAAgB;EAC3B,MAAM,OAAO,KAAK,KAAK,IAAI;EAE3B,KAAK,MAAM,GAAG,IAAI;EAElB,OAAO;CACT;;;;CAKA,AAAO,OAAO,MAAgB;EAC5B,OAAO,OAAO,KAAK,IAAI,GAAG,IAAI;CAChC;;;;CAKA,AAAO,KAAK,KAAa,eAAe,OAAO;EAC7C,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,IAAI,UAAU,QACZ,OAAO;EAGT,IAAI,UAAU,SACZ,OAAO;EAGT,IAAI,UAAU,GACZ,OAAO;EAGT,OAAO,QAAQ,KAAK;CACtB;;;;CAKA,AAAO,IAAI,KAAa,eAAuB,GAAuB;EACpE,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,IAAI,CAAC,SAAS,UAAU,GAAG,OAAO;EAElC,OAAO,SAAS,KAAK;CACvB;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,IAAI,IAAI;CACtB;;;;CAKA,AAAO,OAAO,KAAa,eAAuB,IAAY;EAC5D,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,OAAO,OAAO,KAAK;CACrB;;;;CAKA,AAAO,MAAM,KAAa,eAAuB,GAAW;EAC1D,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,OAAO,WAAW,KAAK,KAAK;CAC9B;;;;CAKA,AAAO,OAAO,KAAa,eAAuB,GAAW;EAC3D,MAAM,QAAQ,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;EAElD,OAAO,MAAM,KAAK,IAAI,eAAe;CACvC;;;;;;;;;;CAWA,IAAW,KAAK;EACd,OAAO,KAAK,YAAY;CAC1B;;;;;;;;;;;CAYA,AAAO,WAAW;EAKhB,MAAM,SAAS,KAAK,OAAO,WAAW;EAEtC,IAAI,QAAQ,OAAO;EAInB,OAFoB,KAAK,OAAO,iBAEf,KAAK,KAAK,YAAY;CACzC;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,SAAS;CACvB;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,YAAY;EACrB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,UAA2C;EACpD,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,AAAO,UAAU,KAAiB,OAAe;EAC/C,KAAK,YAAY,QAAQ,IAAI,YAAY,KAAK;EAE9C,OAAO;CACT;AACF"}
+{"version":3,"file":"request.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/request.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport events from \"@mongez/events\";\r\nimport { trans, transFrom } from \"@mongez/localization\";\r\nimport { Random, except, get, only, rtrim, set, unset } from \"@mongez/reinforcements\";\r\nimport { isEmpty } from \"@mongez/supportive-is\";\r\nimport type { LogLevel } from \"@warlock.js/logger\";\r\nimport { log } from \"@warlock.js/logger\";\r\nimport { BaseValidator, v } from \"@warlock.js/seal\";\r\nimport type { FastifyRequest } from \"fastify\";\r\nimport { type IncomingHttpHeaders } from \"node:http2\";\r\nimport { config } from \"../config/config-getter\";\r\nimport type { Middleware, Route } from \"../router\";\r\nimport { validateAll } from \"../validation/validateAll\";\r\nimport { createRequestStore } from \"./middleware/inject-request-context\";\r\nimport { Response } from \"./response\";\r\nimport type { RequestEvent } from \"./types\";\r\nimport { UploadedFile } from \"./uploaded-file\";\r\n\r\ntype StandardHeaders = {\r\n  // copy every declared property from http.IncomingHttpHeaders\r\n  // but remove index signatures\r\n  [K in keyof IncomingHttpHeaders as string extends K\r\n    ? never\r\n    : number extends K\r\n      ? never\r\n      : K]: IncomingHttpHeaders[K];\r\n};\r\n\r\ntype HeaderKeys = keyof StandardHeaders;\r\n\r\nexport class Request<RequestValidation = any> {\r\n  /**\r\n   * Underlying Fastify request — a public escape hatch to capabilities the\r\n   * framework's high-level helpers don't yet cover.\r\n   *\r\n   * **Prefer framework methods first**: `request.input()`, `request.header()`,\r\n   * `request.body`, `request.query`, `request.params`, `request.file()`,\r\n   * `request.user`, `request.detectIp()`, etc. They handle locale, parsing,\r\n   * trust-proxy, and validation pipeline integration correctly.\r\n   *\r\n   * **Reach for `baseRequest` only** when the framework genuinely lacks a\r\n   * helper for what you need — and when you do, file an issue so we can add\r\n   * it. The escape hatch is the release valve that lets consumers move\r\n   * faster than the framework, but every long-term reach here is a missing\r\n   * helper waiting to be added.\r\n   */\r\n  public baseRequest!: FastifyRequest;\r\n\r\n  /**\r\n   * Response Object\r\n   */\r\n  public response!: Response;\r\n\r\n  /**\r\n   * Route Object\r\n   */\r\n  public route!: Route;\r\n\r\n  /**\r\n   * Parsed Request Payload\r\n   */\r\n  protected payload: any = {};\r\n\r\n  /**\r\n   * Decoded access token payload (set by auth middleware)\r\n   */\r\n  public decodedAccessToken?: any;\r\n\r\n  /**\r\n   * Current request instance\r\n   */\r\n  public static current: Request;\r\n\r\n  /**\r\n   * Translation method\r\n   * Type of it is the same as the type of trans function\r\n   */\r\n  public trans: ReturnType<typeof trans> = trans;\r\n\r\n  /**\r\n   * Alias to trans method\r\n   */\r\n  public t: ReturnType<typeof trans> = trans;\r\n\r\n  /**\r\n   * Dynamic properties index signature\r\n   *\r\n   * This allows attaching custom properties to the request instance,\r\n   * commonly used during validation middleware to attach fetched models.\r\n   *\r\n   * @example\r\n   * // In validation middleware:\r\n   * const post = await Post.find(request.int(\"id\"));\r\n   * if (!post) return response.notFound();\r\n   * request.post = post; // Attach the model to the request\r\n   *\r\n   * // In route handler:\r\n   * const post = request.post;\r\n   * // Work with the pre-fetched model\r\n   */\r\n  [key: string]: any;\r\n\r\n  /**\r\n   * Locale code\r\n   */\r\n  protected _locale = \"\";\r\n\r\n  /**\r\n   * Validated data\r\n   */\r\n  protected validatedData?: RequestValidation;\r\n\r\n  /**\r\n   * Request id\r\n   */\r\n  public id = Random.string(32);\r\n\r\n  /**\r\n   * Start Time\r\n   */\r\n  public startTime = Date.now();\r\n\r\n  /**\r\n   * End Time\r\n   */\r\n  public endTime?: undefined | number;\r\n\r\n  /**\r\n   * Set request handler\r\n   */\r\n  public setRequest(request: FastifyRequest) {\r\n    this.baseRequest = request;\r\n\r\n    this.resolveRequestId();\r\n\r\n    this.parsePayload();\r\n\r\n    const localeCode = this.getLocaleCode();\r\n\r\n    this.trans = this.t = transFrom.bind(null, localeCode);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Inherit `X-Request-Id` from the incoming request, fall back to a custom\r\n   * generator, then to the field-init default (`Random.string(32)`).\r\n   *\r\n   * Inherited values are validated (length cap + printable-ASCII) to prevent\r\n   * log-injection from a malicious client. Disable the whole behavior by\r\n   * setting `http.requestId.enabled = false` — in which case the field-init\r\n   * default is used regardless of any incoming header.\r\n   */\r\n  protected resolveRequestId() {\r\n    const requestIdConfig = config.key(\"http.requestId\") || {};\r\n\r\n    if (requestIdConfig.enabled === false) return;\r\n\r\n    const headerName = (requestIdConfig.header || \"x-request-id\").toLowerCase();\r\n    const incoming = this.baseRequest.headers[headerName];\r\n\r\n    if (Request.isValidRequestId(incoming)) {\r\n      this.id = incoming;\r\n\r\n      return;\r\n    }\r\n\r\n    if (typeof requestIdConfig.generator === \"function\") {\r\n      this.id = requestIdConfig.generator();\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Validate a candidate request-id value. Accepts non-empty printable ASCII\r\n   * up to 128 characters — tight enough to reject newline / control-character\r\n   * log-injection, loose enough to accept UUIDs, ULIDs, snowflakes, etc.\r\n   */\r\n  protected static isValidRequestId(value: unknown): value is string {\r\n    return (\r\n      typeof value === \"string\" &&\r\n      value.length > 0 &&\r\n      value.length <= 128 &&\r\n      /^[\\x21-\\x7e]+$/.test(value)\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Translate from the given locale code\r\n   */\r\n  public transFrom(localeCode: string, keyword: string, placeholders?: any) {\r\n    return transFrom(localeCode, keyword, placeholders);\r\n  }\r\n\r\n  /**\r\n   * Get current locale code\r\n   */\r\n  public get locale() {\r\n    if (this._locale) return this._locale;\r\n\r\n    return this.header(\"translation-locale-code\") || this.localized;\r\n  }\r\n\r\n  /**\r\n   * Set locale code\r\n   */\r\n  public set locale(localeCode: string) {\r\n    this._locale = localeCode;\r\n  }\r\n\r\n  /**\r\n   * Get locale code that will be used for translation\r\n   */\r\n  public get localized() {\r\n    if (this._locale) return this._locale;\r\n\r\n    return (this._locale = this.header(\"locale\") || this.query[\"locale\"]);\r\n  }\r\n\r\n  /**\r\n   * Set locale code\r\n   */\r\n  public setLocaleCode(localeCode: string) {\r\n    this._locale = localeCode;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get current locale code or return default locale code\r\n   */\r\n  public getLocaleCode(defaultLocaleCode: string = config.key(\"app.localeCode\") || \"en\") {\r\n    return this.locale || defaultLocaleCode;\r\n  }\r\n\r\n  /**\r\n   * Get http protocol\r\n   */\r\n  public get protocol() {\r\n    return this.baseRequest.protocol;\r\n  }\r\n\r\n  /**\r\n   * Validate the given validation schema\r\n   */\r\n  public async validate(validation: BaseValidator, selectedInputs?: string[]) {\r\n    return await v.validate(validation, selectedInputs ? this.only(selectedInputs) : this.all());\r\n  }\r\n\r\n  /**\r\n   * Clear current user\r\n   */\r\n  public clearCurrentUser() {\r\n    this.user = undefined;\r\n  }\r\n\r\n  /**\r\n   * Get value of the given header\r\n   */\r\n  public header<TCustomHeader extends string = HeaderKeys>(\r\n    name: TCustomHeader | HeaderKeys,\r\n    defaultValue: any = null,\r\n  ) {\r\n    return this.baseRequest.headers[name.toLocaleLowerCase()] ?? defaultValue;\r\n  }\r\n\r\n  /**\r\n   * Get all cookies from the current request\r\n   */\r\n  public get cookies(): Record<string, string | undefined> {\r\n    return this.baseRequest.cookies || {};\r\n  }\r\n\r\n  /**\r\n   * Get a particular cookie value or fallback to default\r\n   */\r\n  public cookie(name: string, defaultValue?: any): string | any {\r\n    const value = this.cookies[name] ?? defaultValue;\r\n\r\n    try {\r\n      return JSON.parse(value);\r\n    } catch (error) {\r\n      return value;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Determine if the request has the specified cookie\r\n   */\r\n  public hasCookie(name: string): boolean {\r\n    return this.cookies[name] !== undefined;\r\n  }\r\n\r\n  /**\r\n   * Get the current request domain\r\n   */\r\n  public get domain() {\r\n    return this.baseRequest.hostname.replace(/^www\\./, \"\");\r\n  }\r\n\r\n  /**\r\n   * Get hostname\r\n   */\r\n  public get hostname() {\r\n    return this.domain;\r\n  }\r\n\r\n  /**\r\n   * Get request origin\r\n   */\r\n  public get origin() {\r\n    return this.baseRequest.headers.origin as string;\r\n  }\r\n\r\n  /**\r\n   * Get the domain of the origin\r\n   */\r\n  public get originDomain() {\r\n    const domain = this.origin ? new URL(this.origin).hostname : null;\r\n\r\n    if (domain?.startsWith(\"www.\")) {\r\n      return domain.replace(/^www\\./, \"\");\r\n    }\r\n\r\n    return domain;\r\n  }\r\n\r\n  /**\r\n   * Get authorization header value\r\n   */\r\n  public get authorizationValue(): string {\r\n    const authorization = this.header(\"authorization\");\r\n\r\n    if (!authorization) return \"\";\r\n\r\n    const [type, value] = authorization.split(\" \");\r\n\r\n    if (![\"bearer\", \"key\"].includes(type.toLowerCase())) return \"\";\r\n\r\n    return value || \"\";\r\n  }\r\n\r\n  /**\r\n   * Get access token from Authorization header\r\n   *\r\n   * If the Authorization header does not start with `Bearer` value then return null\r\n   */\r\n  public get accessToken(): string | undefined {\r\n    const authorization = this.header(\"authorization\");\r\n\r\n    if (!authorization) return;\r\n\r\n    const [type, value] = authorization.split(\" \");\r\n\r\n    if (type.toLowerCase() !== \"bearer\") return;\r\n\r\n    return value;\r\n  }\r\n\r\n  /**\r\n   * Get the authorization header\r\n   */\r\n  public get authorization() {\r\n    return this.header(\"authorization\");\r\n  }\r\n\r\n  /**\r\n   * Get current request method\r\n   */\r\n  public get method(): string {\r\n    return this.baseRequest.method;\r\n  }\r\n\r\n  /**\r\n   * Parse the payload and merge it from the request body, params and query string\r\n   */\r\n  protected parsePayload() {\r\n    this.payload.body = this.parseBody(this.baseRequest.body);\r\n\r\n    this.payload.query = this.parseBody(this.baseRequest.query);\r\n    this.payload.params = { ...(this.baseRequest.params || {}) };\r\n    this.payload.all = {\r\n      ...this.payload.body,\r\n      ...this.payload.query,\r\n      ...this.payload.params,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Parse body payload\r\n   */\r\n  protected parseBody(data: any) {\r\n    try {\r\n      if (!data) return {};\r\n\r\n      const body: any = {};\r\n\r\n      const arrayOfObjectValues: any = {};\r\n\r\n      for (let key in data) {\r\n        const value = data[key];\r\n\r\n        let isArrayKey = false;\r\n\r\n        if (key.endsWith(\"[]\")) {\r\n          isArrayKey = true;\r\n        }\r\n\r\n        key = rtrim(key, \"[]\");\r\n\r\n        // check if the key is has a square brackets, then convert it into object\r\n        // i.e user[email] => user: {email: \"value\"}\r\n        // also check if its an array of objects\r\n\r\n        if (key.includes(\"[\")) {\r\n          // check if its an array of objects\r\n          if (key.includes(\"][\")) {\r\n            const keyParts = key.split(\"[\");\r\n\r\n            const keyName = keyParts[0];\r\n            if (!arrayOfObjectValues[keyName]) {\r\n              arrayOfObjectValues[keyName] = [];\r\n            }\r\n\r\n            const keyNameParts = keyParts[1].split(\"]\");\r\n\r\n            const index = Number(keyNameParts[0]);\r\n\r\n            if (!arrayOfObjectValues[keyName][index]) {\r\n              arrayOfObjectValues[keyName][index] = {};\r\n            }\r\n\r\n            // now get the key after the index\r\n            const keyNameParts2 = keyParts[2].split(\"]\");\r\n            const keyName2 = keyNameParts2[0];\r\n\r\n            arrayOfObjectValues[keyName][index][keyName2] = this.parseValue(value);\r\n\r\n            continue;\r\n          }\r\n\r\n          const keyParts = key.split(\"[\");\r\n          const keyName = keyParts[0];\r\n          const keyNameParts = keyParts[1].split(\"]\");\r\n\r\n          set(\r\n            body,\r\n            keyName + \".\" + keyNameParts[0],\r\n            Array.isArray(value) ? value.map(this.parseValue.bind(this)) : this.parseValue(value),\r\n          );\r\n\r\n          continue;\r\n        }\r\n\r\n        if (Array.isArray(value)) {\r\n          set(body, key, value.map(this.parseValue.bind(this)));\r\n        } else if (isArrayKey) {\r\n          if (body[key]) {\r\n            body[key].push(this.parseValue(value));\r\n          } else {\r\n            body[key] = [this.parseValue(value)];\r\n\r\n            continue;\r\n          }\r\n        } else {\r\n          set(body, key, this.parseValue(value));\r\n        }\r\n      }\r\n\r\n      // now merge the array of objects into the body\r\n      for (const key in arrayOfObjectValues) {\r\n        body[key] = arrayOfObjectValues[key];\r\n      }\r\n\r\n      return body;\r\n    } catch (error) {\r\n      console.log(error);\r\n      this.log(error, \"error\");\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Parse the given data\r\n   */\r\n  protected parseValue(data: any) {\r\n    // data.value appears only in the multipart form data\r\n    // if it json, then just return the data\r\n    if (data?.file) return new UploadedFile(data);\r\n    if (data?.value !== undefined && data?.fields && data?.type) {\r\n      data = data.value;\r\n    }\r\n\r\n    if (data === \"false\") return false;\r\n\r\n    if (data === \"true\") return true;\r\n\r\n    if (data === \"null\") return null;\r\n\r\n    if (typeof data === \"string\") return data.trim();\r\n\r\n    return data;\r\n  }\r\n\r\n  /**\r\n   * Set route handler\r\n   */\r\n  public setRoute(route: Route) {\r\n    this.route = route;\r\n\r\n    // pass the route to the response object\r\n    this.response.setRoute(route);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Trigger an http event\r\n   */\r\n  public trigger(eventName: RequestEvent, ...args: any[]) {\r\n    return events.trigger(`request.${eventName}`, ...args, this);\r\n  }\r\n\r\n  /**\r\n   * Listen to the given event\r\n   */\r\n  public on(eventName: RequestEvent, callback: any) {\r\n    return this.subscribe(eventName, callback);\r\n  }\r\n\r\n  /**\r\n   * Make a log message\r\n   */\r\n  public log(message: any, level: LogLevel = \"info\") {\r\n    if (!config.key(\"http.log\")) return;\r\n\r\n    log.log({\r\n      module: \"request\",\r\n      action: this.route.method + \" \" + this.route.path.replace(\"/*\", \"\") + `:${this.id}`,\r\n      message,\r\n      type: level,\r\n      context: {\r\n        request: this,\r\n      },\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Get current request path\r\n   */\r\n  public get path() {\r\n    return this.baseRequest.url;\r\n  }\r\n\r\n  /**\r\n   * {@alias}\r\n   */\r\n  public get url() {\r\n    return this.baseRequest.url;\r\n  }\r\n\r\n  /**\r\n   * Get full url\r\n   */\r\n  public get fullUrl() {\r\n    return this.protocol + \"://\" + this.hostname + this.path;\r\n  }\r\n\r\n  /**\r\n   * Drive the middleware chain for the current route, then defer to the\r\n   * controller. Returns the first response value any middleware short-circuits\r\n   * with, or `undefined` to continue into validation + handler.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code. Will move\r\n   * to a dedicated controller dispatcher in a future refactor.\r\n   */\r\n  public async runMiddleware() {\r\n    // measure request time\r\n    // check for middleware first\r\n    const middlewareOutput = await this.executeMiddleware();\r\n\r\n    if (middlewareOutput !== undefined) {\r\n      // 👇🏻 make sure first its not a response instance\r\n      if (middlewareOutput instanceof Response) return middlewareOutput;\r\n      // 👇🏻 send the response\r\n      return this.response.send(middlewareOutput);\r\n    }\r\n\r\n    const handler = this.route.handler;\r\n\r\n    if (!handler.validation) return;\r\n\r\n    // 👇🏻 check for validation using validateAll helper function\r\n    const validationOutput = await validateAll(handler.validation, this, this.response);\r\n\r\n    return validationOutput;\r\n  }\r\n\r\n  /**\r\n   * Return the request handler attached to the current route.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  public getHandler() {\r\n    return this.route.handler;\r\n  }\r\n\r\n  /**\r\n   * Get inputs that has been validated only\r\n   * You can also pass an array of inputs to get only the validated inputs\r\n   */\r\n  public validated<Output = RequestValidation>(inputs?: (keyof Output | (string & {}))[]): Output {\r\n    if (this.validatedData) {\r\n      return inputs\r\n        ? only(this.validatedData as Output, inputs as string[])\r\n        : (this.validatedData as Output);\r\n    }\r\n\r\n    return {} as Output;\r\n  }\r\n\r\n  /**\r\n   * Get inputs that has been validated except the given inputs\r\n   */\r\n  public validatedExcept(...inputs: string[]): RequestValidation {\r\n    return except(this.validated(), inputs);\r\n  }\r\n\r\n  /**\r\n   * Set validated data\r\n   */\r\n  public setValidatedData(data: RequestValidation) {\r\n    this.validatedData = data;\r\n  }\r\n\r\n  /**\r\n   * Top-level entry into the request lifecycle — opens the context store,\r\n   * runs middleware, drives the handler, handles errors.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code. Wired\r\n   * from the Fastify route handler in `router.scan()`.\r\n   */\r\n  public async execute() {\r\n    try {\r\n      // call executingAction event\r\n\r\n      this.log(\"Executing the request\");\r\n\r\n      return await createRequestStore(this, this.response);\r\n    } catch (error) {\r\n      this.log(error, \"error\");\r\n\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Iterate the collected middlewares in order; return the first short-circuit\r\n   * value or `undefined` when every middleware passes through.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  protected async executeMiddleware() {\r\n    // collect all middlewares for current route\r\n    const middlewares = this.collectMiddlewares();\r\n\r\n    // check if there are no middlewares, then return\r\n    if (middlewares.length === 0) return;\r\n\r\n    this.log(\"About to execute request middlewares\");\r\n\r\n    // trigger the executingMiddleware event\r\n    this.trigger(\"executingMiddleware\", middlewares, this.route);\r\n\r\n    for (const middleware of middlewares) {\r\n      this.log(\"Executing middleware \" + colors.yellowBright(middleware.name));\r\n      const output = await middleware(this, this.response);\r\n      this.log(\"Executed middleware \" + colors.yellowBright(middleware.name), \"success\");\r\n\r\n      if (output !== undefined) {\r\n        this.log(\r\n          colors.yellow(\"request intercepted by middleware \") + colors.cyanBright(middleware.name),\r\n          \"warn\",\r\n        );\r\n\r\n        this.trigger(\"executedMiddleware\");\r\n\r\n        this.log(\"Request middlewares executed\", \"success\");\r\n\r\n        return output;\r\n      }\r\n    }\r\n\r\n    this.log(\"Request middlewares executed\", \"success\");\r\n\r\n    // trigger the executedMiddleware event\r\n    this.trigger(\"executedMiddleware\", middlewares, this.route);\r\n  }\r\n\r\n  /**\r\n   * Gather the middleware list for the current route — today just the\r\n   * route-level array; future extraction may merge group + app-wide layers.\r\n   *\r\n   * @internal Framework orchestration — do not call from app code.\r\n   */\r\n  protected collectMiddlewares(): Middleware[] {\r\n    const middlewaresList: Middleware[] = [];\r\n\r\n    // collect route middlewares\r\n    if (this.route.middleware) {\r\n      middlewaresList.push(...this.route.middleware);\r\n    }\r\n\r\n    return middlewaresList;\r\n  }\r\n\r\n  /**\r\n   * Get request input value from query string, params or body\r\n   */\r\n  public input(key: string, defaultValue?: any) {\r\n    return get(this.payload.all, key, defaultValue);\r\n  }\r\n\r\n  /**\r\n   * Get email input value, this will lowercase the value\r\n   */\r\n  public email(key: string = \"email\", defaultValue: string = \"\"): string {\r\n    return this.input(key, defaultValue)?.toLowerCase() || defaultValue;\r\n  }\r\n\r\n  /**\r\n   * @alias input\r\n   */\r\n  public get(key: string, defaultValue?: any) {\r\n    return this.input(key, defaultValue);\r\n  }\r\n\r\n  /**\r\n   * Determine if request has input value\r\n   */\r\n  public has(key: string) {\r\n    return get(this.payload.all, key, undefined) !== undefined;\r\n  }\r\n\r\n  /**\r\n   * Set request input value\r\n   */\r\n  public set(key: string, value: any) {\r\n    set(this.payload.all, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the given value if the request does not have the input\r\n   */\r\n  public setDefault(key: string, value: any) {\r\n    if (this.has(key)) return this;\r\n\r\n    set(this.payload.all, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Unset request payload keys\r\n   */\r\n  public unset(...keys: string[]) {\r\n    this.payload.all = unset(this.payload.all, keys);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get request body\r\n   */\r\n  public get body() {\r\n    return this.payload.body;\r\n  }\r\n\r\n  /**\r\n   * Set request body value\r\n   */\r\n  public setBody(key: string, value: any) {\r\n    set(this.payload.body, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get body inputs except files\r\n   */\r\n  public get bodyInputs() {\r\n    const inputs = this.payload.body;\r\n\r\n    const bodyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (value.file && value.fieldname) continue;\r\n\r\n      bodyInputs[key] = value;\r\n    }\r\n\r\n    return bodyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get request file in UploadedFile instance\r\n   */\r\n  public file(key: string): UploadedFile | undefined {\r\n    const file = this.input(key);\r\n\r\n    return file;\r\n  }\r\n\r\n  /**\r\n   * Get uploaded files from the request for the given name\r\n   * If the given name is not present in the request, return an empty array\r\n   */\r\n  public files(name: string): UploadedFile[] {\r\n    return this.input(name) || [];\r\n  }\r\n\r\n  /**\r\n   * Get request params\r\n   */\r\n  public get params() {\r\n    return this.payload.params;\r\n  }\r\n\r\n  /**\r\n   * Set request params value\r\n   */\r\n  public setParam(key: string, value: any) {\r\n    set(this.payload.params, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get request query\r\n   */\r\n  public get query() {\r\n    return this.payload.query;\r\n  }\r\n\r\n  /**\r\n   * Set request query value\r\n   */\r\n  public setQuery(key: string, value: any) {\r\n    set(this.payload.query, key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get all inputs\r\n   */\r\n  public all() {\r\n    return this.payload.all;\r\n  }\r\n\r\n  /**\r\n   * Get all inputs except params\r\n   */\r\n  public allExceptParams() {\r\n    return {\r\n      ...this.payload.query,\r\n      ...this.payload.body,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Get all heavy inputs except params\r\n   */\r\n  public heavyExceptParams() {\r\n    const inputs = this.allExceptParams();\r\n\r\n    const heavyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (isEmpty(value) && value !== null) continue;\r\n\r\n      heavyInputs[key] = value;\r\n    }\r\n\r\n    return heavyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get only heavy inputs, the input with a value\r\n   */\r\n  public heavy() {\r\n    const inputs = this.all();\r\n\r\n    const heavyInputs: any = {};\r\n\r\n    for (const key in inputs) {\r\n      const value = inputs[key];\r\n\r\n      if (isEmpty(value) && value !== null) continue;\r\n\r\n      heavyInputs[key] = value;\r\n    }\r\n\r\n    return heavyInputs;\r\n  }\r\n\r\n  /**\r\n   * Get only the given keys from the request data\r\n   */\r\n  public only(keys: string[]) {\r\n    return only(this.all(), keys);\r\n  }\r\n\r\n  /**\r\n   * Pluck the given keys from the request data\r\n   */\r\n  public pluck(keys: string[]) {\r\n    const data = this.only(keys);\r\n\r\n    this.unset(...keys);\r\n\r\n    return data;\r\n  }\r\n\r\n  /**\r\n   * Get all request inputs except the given keys\r\n   */\r\n  public except(keys: string[]) {\r\n    return except(this.all(), keys);\r\n  }\r\n\r\n  /**\r\n   * Get boolean input value\r\n   */\r\n  public bool(key: string, defaultValue = false) {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    if (value === \"true\") {\r\n      return true;\r\n    }\r\n\r\n    if (value === \"false\") {\r\n      return false;\r\n    }\r\n\r\n    if (value === 0) {\r\n      return false;\r\n    }\r\n\r\n    return Boolean(value);\r\n  }\r\n\r\n  /**\r\n   * Get integer input value\r\n   */\r\n  public int(key: string, defaultValue: number = 0): number | undefined {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    if (!value && value !== 0) return undefined;\r\n\r\n    return parseInt(value);\r\n  }\r\n\r\n  /**\r\n   * Shorthand getter to get id param\r\n   */\r\n  public get idParam() {\r\n    return this.int(\"id\");\r\n  }\r\n\r\n  /**\r\n   * Get string input value\r\n   */\r\n  public string(key: string, defaultValue: string = \"\"): string {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    return String(value);\r\n  }\r\n\r\n  /**\r\n   * Get float input value\r\n   */\r\n  public float(key: string, defaultValue: number = 0): number {\r\n    const value = this.input(key, defaultValue);\r\n\r\n    return parseFloat(value) || 0;\r\n  }\r\n\r\n  /**\r\n   * Get number input value\r\n   */\r\n  public number(key: string, defaultValue: number = 0): number {\r\n    const value = Number(this.input(key, defaultValue));\r\n\r\n    return isNaN(value) ? defaultValue : value;\r\n  }\r\n\r\n  /**\r\n   * Immediate-peer IP as Fastify reports it — the address that connected to\r\n   * the server socket, with `trustProxy` resolution applied. Use this when\r\n   * you specifically need the peer address (rate-limit-by-direct-connection,\r\n   * health-check origin verification).\r\n   *\r\n   * **For most use cases prefer `request.detectIp()`** — behind any proxy\r\n   * (load balancer, CDN, sidecar) `ip` reports the proxy, not the real client.\r\n   */\r\n  public get ip() {\r\n    return this.baseRequest.ip;\r\n  }\r\n\r\n  /**\r\n   * Best-effort real client IP — checks `X-Real-IP` and `X-Forwarded-For`\r\n   * headers first, falls back to `baseRequest.ip` when neither is present.\r\n   *\r\n   * **Prefer this over `request.ip` for any caller behind a proxy** (load\r\n   * balancer, CDN, reverse proxy, k8s ingress). Only trust the result as\r\n   * far as you trust the upstream proxy chain — `X-Forwarded-For` is\r\n   * client-settable; verify the request came through your trusted edge\r\n   * before treating the value as authoritative.\r\n   */\r\n  public detectIp() {\r\n    // as the server maybe used behind a proxy\r\n    // then we need to check first if there is a forwarded ip\r\n    // check for the real-ip header\r\n\r\n    const realIp = this.header(\"x-real-ip\");\r\n\r\n    if (realIp) return realIp;\r\n\r\n    const forwardedIp = this.header(\"x-forwarded-for\");\r\n\r\n    return forwardedIp || this.baseRequest.ip;\r\n  }\r\n\r\n  /**\r\n   * An alias to detectIp\r\n   */\r\n  public get realIp() {\r\n    return this.detectIp();\r\n  }\r\n\r\n  /**\r\n   * Get request ips\r\n   */\r\n  public get ips() {\r\n    return this.baseRequest.ips;\r\n  }\r\n\r\n  /**\r\n   * Get request referer\r\n   */\r\n  public get referer() {\r\n    return this.baseRequest.headers.referer;\r\n  }\r\n\r\n  /**\r\n   * Get user agent\r\n   */\r\n  public get userAgent() {\r\n    return this.baseRequest.headers[\"user-agent\"];\r\n  }\r\n\r\n  /**\r\n   * Get request headers\r\n   */\r\n  public get headers(): typeof this.baseRequest.headers {\r\n    return this.baseRequest.headers;\r\n  }\r\n\r\n  /**\r\n   * Set the given header\r\n   */\r\n  public setHeader(key: HeaderKeys, value: string) {\r\n    this.baseRequest.headers[key.toLowerCase()] = value;\r\n\r\n    return this;\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;AA8BA,IAAa,UAAb,MAAa,QAAiC;;iBA+BnB,CAAC;eAgBe;WAKJ;iBAuBjB;YAUR,OAAO,OAAO,EAAE;mBAKT,KAAK,IAAI;;;;;CAU5B,AAAO,WAAW,SAAyB;EACzC,KAAK,cAAc;EAEnB,KAAK,iBAAiB;EAEtB,KAAK,aAAa;EAElB,MAAM,aAAa,KAAK,cAAc;EAEtC,KAAK,QAAQ,KAAK,IAAI,UAAU,KAAK,MAAM,UAAU;EAErD,OAAO;CACT;;;;;;;;;;CAWA,AAAU,mBAAmB;EAC3B,MAAM,kBAAkB,OAAO,IAAI,gBAAgB,KAAK,CAAC;EAEzD,IAAI,gBAAgB,YAAY,OAAO;EAEvC,MAAM,cAAc,gBAAgB,UAAU,eAAc,CAAE,YAAY;EAC1E,MAAM,WAAW,KAAK,YAAY,QAAQ;EAE1C,IAAI,QAAQ,iBAAiB,QAAQ,GAAG;GACtC,KAAK,KAAK;GAEV;EACF;EAEA,IAAI,OAAO,gBAAgB,cAAc,YACvC,KAAK,KAAK,gBAAgB,UAAU;CAExC;;;;;;CAOA,OAAiB,iBAAiB,OAAiC;EACjE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,OAChB,iBAAiB,KAAK,KAAK;CAE/B;;;;CAKA,AAAO,UAAU,YAAoB,SAAiB,cAAoB;EACxE,OAAO,UAAU,YAAY,SAAS,YAAY;CACpD;;;;CAKA,IAAW,SAAS;EAClB,IAAI,KAAK,SAAS,OAAO,KAAK;EAE9B,OAAO,KAAK,OAAO,yBAAyB,KAAK,KAAK;CACxD;;;;CAKA,IAAW,OAAO,YAAoB;EACpC,KAAK,UAAU;CACjB;;;;CAKA,IAAW,YAAY;EACrB,IAAI,KAAK,SAAS,OAAO,KAAK;EAE9B,OAAQ,KAAK,UAAU,KAAK,OAAO,QAAQ,KAAK,KAAK,MAAM;CAC7D;;;;CAKA,AAAO,cAAc,YAAoB;EACvC,KAAK,UAAU;EAEf,OAAO;CACT;;;;CAKA,AAAO,cAAc,oBAA4B,OAAO,IAAI,gBAAgB,KAAK,MAAM;EACrF,OAAO,KAAK,UAAU;CACxB;;;;CAKA,IAAW,WAAW;EACpB,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,MAAa,SAAS,YAA2B,gBAA2B;EAC1E,OAAO,MAAM,EAAE,SAAS,YAAY,iBAAiB,KAAK,KAAK,cAAc,IAAI,KAAK,IAAI,CAAC;CAC7F;;;;CAKA,AAAO,mBAAmB;EACxB,KAAK,OAAO;CACd;;;;CAKA,AAAO,OACL,MACA,eAAoB,MACpB;EACA,OAAO,KAAK,YAAY,QAAQ,KAAK,kBAAkB,MAAM;CAC/D;;;;CAKA,IAAW,UAA8C;EACvD,OAAO,KAAK,YAAY,WAAW,CAAC;CACtC;;;;CAKA,AAAO,OAAO,MAAc,cAAkC;EAC5D,MAAM,QAAQ,KAAK,QAAQ,SAAS;EAEpC,IAAI;GACF,OAAO,KAAK,MAAM,KAAK;EACzB,SAAS,OAAO;GACd,OAAO;EACT;CACF;;;;CAKA,AAAO,UAAU,MAAuB;EACtC,OAAO,KAAK,QAAQ,UAAU;CAChC;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,YAAY,SAAS,QAAQ,UAAU,EAAE;CACvD;;;;CAKA,IAAW,WAAW;EACpB,OAAO,KAAK;CACd;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,eAAe;EACxB,MAAM,SAAS,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,WAAW;EAE7D,IAAI,QAAQ,WAAW,MAAM,GAC3B,OAAO,OAAO,QAAQ,UAAU,EAAE;EAGpC,OAAO;CACT;;;;CAKA,IAAW,qBAA6B;EACtC,MAAM,gBAAgB,KAAK,OAAO,eAAe;EAEjD,IAAI,CAAC,eAAe,OAAO;EAE3B,MAAM,CAAC,MAAM,SAAS,cAAc,MAAM,GAAG;EAE7C,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,GAAG,OAAO;EAE5D,OAAO,SAAS;CAClB;;;;;;CAOA,IAAW,cAAkC;EAC3C,MAAM,gBAAgB,KAAK,OAAO,eAAe;EAEjD,IAAI,CAAC,eAAe;EAEpB,MAAM,CAAC,MAAM,SAAS,cAAc,MAAM,GAAG;EAE7C,IAAI,KAAK,YAAY,MAAM,UAAU;EAErC,OAAO;CACT;;;;CAKA,IAAW,gBAAgB;EACzB,OAAO,KAAK,OAAO,eAAe;CACpC;;;;CAKA,IAAW,SAAiB;EAC1B,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,AAAU,eAAe;EACvB,KAAK,QAAQ,OAAO,KAAK,UAAU,KAAK,YAAY,IAAI;EAExD,KAAK,QAAQ,QAAQ,KAAK,UAAU,KAAK,YAAY,KAAK;EAC1D,KAAK,QAAQ,SAAS,EAAE,GAAI,KAAK,YAAY,UAAU,CAAC,EAAG;EAC3D,KAAK,QAAQ,MAAM;GACjB,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;EAClB;CACF;;;;CAKA,AAAU,UAAU,MAAW;EAC7B,IAAI;GACF,IAAI,CAAC,MAAM,OAAO,CAAC;GAEnB,MAAM,OAAY,CAAC;GAEnB,MAAM,sBAA2B,CAAC;GAElC,KAAK,IAAI,OAAO,MAAM;IACpB,MAAM,QAAQ,KAAK;IAEnB,IAAI,aAAa;IAEjB,IAAI,IAAI,SAAS,IAAI,GACnB,aAAa;IAGf,MAAM,MAAM,KAAK,IAAI;IAMrB,IAAI,IAAI,SAAS,GAAG,GAAG;KAErB,IAAI,IAAI,SAAS,IAAI,GAAG;MACtB,MAAM,WAAW,IAAI,MAAM,GAAG;MAE9B,MAAM,UAAU,SAAS;MACzB,IAAI,CAAC,oBAAoB,UACvB,oBAAoB,WAAW,CAAC;MAGlC,MAAM,eAAe,SAAS,EAAE,CAAC,MAAM,GAAG;MAE1C,MAAM,QAAQ,OAAO,aAAa,EAAE;MAEpC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,QAChC,oBAAoB,QAAQ,CAAC,SAAS,CAAC;MAKzC,MAAM,WADgB,SAAS,EAAE,CAAC,MAAM,GACX,CAAC,CAAC;MAE/B,oBAAoB,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,WAAW,KAAK;MAErE;KACF;KAEA,MAAM,WAAW,IAAI,MAAM,GAAG;KAC9B,MAAM,UAAU,SAAS;KACzB,MAAM,eAAe,SAAS,EAAE,CAAC,MAAM,GAAG;KAE1C,IACE,MACA,UAAU,MAAM,aAAa,IAC7B,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,WAAW,KAAK,CACtF;KAEA;IACF;IAEA,IAAI,MAAM,QAAQ,KAAK,GACrB,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC,CAAC;SAC/C,IAAI,YACT,IAAI,KAAK,MACP,KAAK,IAAI,CAAC,KAAK,KAAK,WAAW,KAAK,CAAC;SAChC;KACL,KAAK,OAAO,CAAC,KAAK,WAAW,KAAK,CAAC;KAEnC;IACF;SAEA,IAAI,MAAM,KAAK,KAAK,WAAW,KAAK,CAAC;GAEzC;GAGA,KAAK,MAAM,OAAO,qBAChB,KAAK,OAAO,oBAAoB;GAGlC,OAAO;EACT,SAAS,OAAO;GACd,QAAQ,IAAI,KAAK;GACjB,KAAK,IAAI,OAAO,OAAO;EACzB;CACF;;;;CAKA,AAAU,WAAW,MAAW;EAG9B,IAAI,MAAM,MAAM,OAAO,IAAI,aAAa,IAAI;EAC5C,IAAI,MAAM,UAAU,UAAa,MAAM,UAAU,MAAM,MACrD,OAAO,KAAK;EAGd,IAAI,SAAS,SAAS,OAAO;EAE7B,IAAI,SAAS,QAAQ,OAAO;EAE5B,IAAI,SAAS,QAAQ,OAAO;EAE5B,IAAI,OAAO,SAAS,UAAU,OAAO,KAAK,KAAK;EAE/C,OAAO;CACT;;;;CAKA,AAAO,SAAS,OAAc;EAC5B,KAAK,QAAQ;EAGb,KAAK,SAAS,SAAS,KAAK;EAE5B,OAAO;CACT;;;;CAKA,AAAO,QAAQ,WAAyB,GAAG,MAAa;EACtD,OAAO,OAAO,QAAQ,WAAW,aAAa,GAAG,MAAM,IAAI;CAC7D;;;;CAKA,AAAO,GAAG,WAAyB,UAAe;EAChD,OAAO,KAAK,UAAU,WAAW,QAAQ;CAC3C;;;;CAKA,AAAO,IAAI,SAAc,QAAkB,QAAQ;EACjD,IAAI,CAAC,OAAO,IAAI,UAAU,GAAG;EAE7B,IAAI,IAAI;GACN,QAAQ;GACR,QAAQ,KAAK,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK,QAAQ,MAAM,EAAE,IAAI,IAAI,KAAK;GAC/E;GACA,MAAM;GACN,SAAS,EACP,SAAS,KACX;EACF,CAAC;CACH;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,WAAW,QAAQ,KAAK,WAAW,KAAK;CACtD;;;;;;;;;CAUA,MAAa,gBAAgB;EAG3B,MAAM,mBAAmB,MAAM,KAAK,kBAAkB;EAEtD,IAAI,qBAAqB,QAAW;GAElC,IAAI,4BAA4B,UAAU,OAAO;GAEjD,OAAO,KAAK,SAAS,KAAK,gBAAgB;EAC5C;EAEA,MAAM,UAAU,KAAK,MAAM;EAE3B,IAAI,CAAC,QAAQ,YAAY;EAKzB,OAAO,MAFwB,YAAY,QAAQ,YAAY,MAAM,KAAK,QAAQ;CAGpF;;;;;;CAOA,AAAO,aAAa;EAClB,OAAO,KAAK,MAAM;CACpB;;;;;CAMA,AAAO,UAAsC,QAAmD;EAC9F,IAAI,KAAK,eACP,OAAO,SACH,KAAK,KAAK,eAAyB,MAAkB,IACpD,KAAK;EAGZ,OAAO,CAAC;CACV;;;;CAKA,AAAO,gBAAgB,GAAG,QAAqC;EAC7D,OAAO,OAAO,KAAK,UAAU,GAAG,MAAM;CACxC;;;;CAKA,AAAO,iBAAiB,MAAyB;EAC/C,KAAK,gBAAgB;CACvB;;;;;;;;CASA,MAAa,UAAU;EACrB,IAAI;GAGF,KAAK,IAAI,uBAAuB;GAEhC,OAAO,MAAM,mBAAmB,MAAM,KAAK,QAAQ;EACrD,SAAS,OAAO;GACd,KAAK,IAAI,OAAO,OAAO;GAEvB,MAAM;EACR;CACF;;;;;;;CAQA,MAAgB,oBAAoB;EAElC,MAAM,cAAc,KAAK,mBAAmB;EAG5C,IAAI,YAAY,WAAW,GAAG;EAE9B,KAAK,IAAI,sCAAsC;EAG/C,KAAK,QAAQ,uBAAuB,aAAa,KAAK,KAAK;EAE3D,KAAK,MAAM,cAAc,aAAa;GACpC,KAAK,IAAI,0BAA0B,OAAO,aAAa,WAAW,IAAI,CAAC;GACvE,MAAM,SAAS,MAAM,WAAW,MAAM,KAAK,QAAQ;GACnD,KAAK,IAAI,yBAAyB,OAAO,aAAa,WAAW,IAAI,GAAG,SAAS;GAEjF,IAAI,WAAW,QAAW;IACxB,KAAK,IACH,OAAO,OAAO,oCAAoC,IAAI,OAAO,WAAW,WAAW,IAAI,GACvF,MACF;IAEA,KAAK,QAAQ,oBAAoB;IAEjC,KAAK,IAAI,gCAAgC,SAAS;IAElD,OAAO;GACT;EACF;EAEA,KAAK,IAAI,gCAAgC,SAAS;EAGlD,KAAK,QAAQ,sBAAsB,aAAa,KAAK,KAAK;CAC5D;;;;;;;CAQA,AAAU,qBAAmC;EAC3C,MAAM,kBAAgC,CAAC;EAGvC,IAAI,KAAK,MAAM,YACb,gBAAgB,KAAK,GAAG,KAAK,MAAM,UAAU;EAG/C,OAAO;CACT;;;;CAKA,AAAO,MAAM,KAAa,cAAoB;EAC5C,OAAO,IAAI,KAAK,QAAQ,KAAK,KAAK,YAAY;CAChD;;;;CAKA,AAAO,MAAM,MAAc,SAAS,eAAuB,IAAY;EACrE,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC,EAAE,YAAY,KAAK;CACzD;;;;CAKA,AAAO,IAAI,KAAa,cAAoB;EAC1C,OAAO,KAAK,MAAM,KAAK,YAAY;CACrC;;;;CAKA,AAAO,IAAI,KAAa;EACtB,OAAO,IAAI,KAAK,QAAQ,KAAK,KAAK,MAAS,MAAM;CACnD;;;;CAKA,AAAO,IAAI,KAAa,OAAY;EAClC,IAAI,KAAK,QAAQ,KAAK,KAAK,KAAK;EAEhC,OAAO;CACT;;;;CAKA,AAAO,WAAW,KAAa,OAAY;EACzC,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;EAE1B,IAAI,KAAK,QAAQ,KAAK,KAAK,KAAK;EAEhC,OAAO;CACT;;;;CAKA,AAAO,MAAM,GAAG,MAAgB;EAC9B,KAAK,QAAQ,MAAM,MAAM,KAAK,QAAQ,KAAK,IAAI;EAE/C,OAAO;CACT;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,QAAQ,KAAa,OAAY;EACtC,IAAI,KAAK,QAAQ,MAAM,KAAK,KAAK;EAEjC,OAAO;CACT;;;;CAKA,IAAW,aAAa;EACtB,MAAM,SAAS,KAAK,QAAQ;EAE5B,MAAM,aAAkB,CAAC;EAEzB,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,MAAM,QAAQ,MAAM,WAAW;GAEnC,WAAW,OAAO;EACpB;EAEA,OAAO;CACT;;;;CAKA,AAAO,KAAK,KAAuC;EAGjD,OAFa,KAAK,MAAM,GAEd;CACZ;;;;;CAMA,AAAO,MAAM,MAA8B;EACzC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC;CAC9B;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,SAAS,KAAa,OAAY;EACvC,IAAI,KAAK,QAAQ,QAAQ,KAAK,KAAK;EAEnC,OAAO;CACT;;;;CAKA,IAAW,QAAQ;EACjB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,SAAS,KAAa,OAAY;EACvC,IAAI,KAAK,QAAQ,OAAO,KAAK,KAAK;EAElC,OAAO;CACT;;;;CAKA,AAAO,MAAM;EACX,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,AAAO,kBAAkB;EACvB,OAAO;GACL,GAAG,KAAK,QAAQ;GAChB,GAAG,KAAK,QAAQ;EAClB;CACF;;;;CAKA,AAAO,oBAAoB;EACzB,MAAM,SAAS,KAAK,gBAAgB;EAEpC,MAAM,cAAmB,CAAC;EAE1B,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,QAAQ,KAAK,KAAK,UAAU,MAAM;GAEtC,YAAY,OAAO;EACrB;EAEA,OAAO;CACT;;;;CAKA,AAAO,QAAQ;EACb,MAAM,SAAS,KAAK,IAAI;EAExB,MAAM,cAAmB,CAAC;EAE1B,KAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,QAAQ,OAAO;GAErB,IAAI,QAAQ,KAAK,KAAK,UAAU,MAAM;GAEtC,YAAY,OAAO;EACrB;EAEA,OAAO;CACT;;;;CAKA,AAAO,KAAK,MAAgB;EAC1B,OAAO,KAAK,KAAK,IAAI,GAAG,IAAI;CAC9B;;;;CAKA,AAAO,MAAM,MAAgB;EAC3B,MAAM,OAAO,KAAK,KAAK,IAAI;EAE3B,KAAK,MAAM,GAAG,IAAI;EAElB,OAAO;CACT;;;;CAKA,AAAO,OAAO,MAAgB;EAC5B,OAAO,OAAO,KAAK,IAAI,GAAG,IAAI;CAChC;;;;CAKA,AAAO,KAAK,KAAa,eAAe,OAAO;EAC7C,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,IAAI,UAAU,QACZ,OAAO;EAGT,IAAI,UAAU,SACZ,OAAO;EAGT,IAAI,UAAU,GACZ,OAAO;EAGT,OAAO,QAAQ,KAAK;CACtB;;;;CAKA,AAAO,IAAI,KAAa,eAAuB,GAAuB;EACpE,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,IAAI,CAAC,SAAS,UAAU,GAAG,OAAO;EAElC,OAAO,SAAS,KAAK;CACvB;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,IAAI,IAAI;CACtB;;;;CAKA,AAAO,OAAO,KAAa,eAAuB,IAAY;EAC5D,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,OAAO,OAAO,KAAK;CACrB;;;;CAKA,AAAO,MAAM,KAAa,eAAuB,GAAW;EAC1D,MAAM,QAAQ,KAAK,MAAM,KAAK,YAAY;EAE1C,OAAO,WAAW,KAAK,KAAK;CAC9B;;;;CAKA,AAAO,OAAO,KAAa,eAAuB,GAAW;EAC3D,MAAM,QAAQ,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;EAElD,OAAO,MAAM,KAAK,IAAI,eAAe;CACvC;;;;;;;;;;CAWA,IAAW,KAAK;EACd,OAAO,KAAK,YAAY;CAC1B;;;;;;;;;;;CAYA,AAAO,WAAW;EAKhB,MAAM,SAAS,KAAK,OAAO,WAAW;EAEtC,IAAI,QAAQ,OAAO;EAInB,OAFoB,KAAK,OAAO,iBAEf,KAAK,KAAK,YAAY;CACzC;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,SAAS;CACvB;;;;CAKA,IAAW,MAAM;EACf,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,IAAW,UAAU;EACnB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,YAAY;EACrB,OAAO,KAAK,YAAY,QAAQ;CAClC;;;;CAKA,IAAW,UAA2C;EACpD,OAAO,KAAK,YAAY;CAC1B;;;;CAKA,AAAO,UAAU,KAAiB,OAAe;EAC/C,KAAK,YAAY,QAAQ,IAAI,YAAY,KAAK;EAE9C,OAAO;CACT;AACF"}

package/esm/http/response.d.mts

@@ -9,7 +9,7 @@ import { FastifyReply } from "fastify";
 import { CookieSerializeOptions } from "@fastify/cookie";
 import React from "react";
 
-//#region ../../@warlock.js/core/src/http/response.d.ts
+//#region ../@warlock.js/core/src/http/response.d.ts
 type CookieValue = string | number | boolean | Record<string, any> | Array<any>;
 /**
  * Cookie options accepted by `response.cookie()`.
@@ -115,7 +115,7 @@ declare class Response {
   /**
    * Get raw response
    */
-  get raw(): import("http").ServerResponse<import("http").IncomingMessage>;
+  get raw(): import("node:http").ServerResponse<import("node:http").IncomingMessage>;
   /**
    * Get Current response body
    */
@@ -383,7 +383,7 @@ declare class Response {
   /**
    * Send a no content response with status code 204
    */
-  noContent(): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+  noContent(): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
   /**
    * Send an accepted response with status code 202
    * Used for async operations that have been accepted but not yet processed
@@ -415,7 +415,7 @@ declare class Response {
    * Send buffer as a response
    * Useful for dynamically generated content (e.g., resized images, generated PDFs)
    */
-  sendBuffer(buffer: Buffer, options?: number | SendBufferOptions): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+  sendBuffer(buffer: Buffer, options?: number | SendBufferOptions): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
   /**
    * Send an Image instance as a response
    * Automatically detects image format and sets content type