@warlock.js/core 4.10.0 → 4.11.0

package/esm/http/response.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"response.mjs","names":["config"],"sources":["../../../../../../../core/src/http/response.ts"],"sourcesContent":["import type { CookieSerializeOptions } from \"@fastify/cookie\";\r\nimport config from \"@mongez/config\";\r\nimport type { EventSubscription } from \"@mongez/events\";\r\nimport events from \"@mongez/events\";\r\nimport { fileExistsAsync } from \"@warlock.js/fs\";\r\nimport { isIterable, isPlainObject, isScalar } from \"@mongez/supportive-is\";\r\nimport type { LogLevel } from \"@warlock.js/logger\";\r\nimport { log } from \"@warlock.js/logger\";\r\nimport type { ValidationResult } from \"@warlock.js/seal\";\r\nimport type { FastifyReply } from \"fastify\";\r\nimport fs from \"fs\";\r\nimport mime from \"mime\";\r\nimport path from \"path\";\r\nimport type React from \"react\";\r\nimport { type ReactNode } from \"react\";\r\nimport { Application } from \"../application/application\";\r\nimport type { Route } from \"../router\";\r\nimport { StorageFile } from \"../storage\";\r\nimport { renderReact } from \"./../react\";\r\nimport type { Request } from \"./request\";\r\nimport type { ResponseEvent, ResponseSSEController, ResponseStreamController } from \"./types\";\r\n\r\ntype CookieValue = string | number | boolean | Record<string, any> | Array<any>;\r\n\r\n/**\r\n * Cookie options accepted by `response.cookie()`.\r\n *\r\n * Extends Fastify's `CookieSerializeOptions` with `raw` — set to `true` to\r\n * skip the default `JSON.stringify` of the value and write it as-is. Use for\r\n * plain-string cookies (session tokens, opaque IDs) that shouldn't be JSON-quoted.\r\n *\r\n * When `raw: true`, non-string values are coerced via `String(value)`. The\r\n * read side (`request.cookie(name)`) tries `JSON.parse` first and falls back\r\n * to the raw string on parse failure, so round-tripping a raw string cookie\r\n * Just Works.\r\n */\r\nexport type CookieOptions = CookieSerializeOptions & {\r\n  /**\r\n   * Skip JSON.stringify and write the value as-is.\r\n   *\r\n   * @default false\r\n   */\r\n  raw?: boolean;\r\n};\r\n\r\nexport enum ResponseStatus {\r\n  OK = 200,\r\n  CREATED = 201,\r\n  ACCEPTED = 202,\r\n  MOVED_PERMANENTLY = 301,\r\n  FOUND = 302,\r\n  SEE_OTHER = 303,\r\n  NOT_MODIFIED = 304,\r\n  TEMPORARY_REDIRECT = 307,\r\n  PERMANENT_REDIRECT = 308,\r\n  NO_CONTENT = 204,\r\n  BAD_REQUEST = 400,\r\n  UNAUTHORIZED = 401,\r\n  FORBIDDEN = 403,\r\n  NOT_FOUND = 404,\r\n  METHOD_NOT_ALLOWED = 405,\r\n  CONFLICT = 409,\r\n  TOO_MANY_REQUESTS = 429,\r\n  INTERNAL_SERVER_ERROR = 500,\r\n  SERVICE_UNAVAILABLE = 503,\r\n}\r\n\r\n/**\r\n * Options for sending files\r\n */\r\nexport type SendFileOptions = {\r\n  cacheTime?: number;\r\n  immutable?: boolean;\r\n  inline?: boolean;\r\n  filename?: string;\r\n};\r\n\r\n/**\r\n * Options for sending buffers\r\n */\r\nexport type SendBufferOptions = SendFileOptions & {\r\n  contentType?: string;\r\n  etag?: string;\r\n};\r\n\r\n/**\r\n * The cookie flags every response cookie gets unless something overrides them.\r\n *\r\n * Computed per call rather than hoisted to a constant because `secure` depends\r\n * on the environment, which is not known at module-evaluation time.\r\n *\r\n * `secure` is relaxed in development only: a `Secure` cookie is dropped by the\r\n * browser over plain http, which would silently break every local login. It\r\n * stays on everywhere else, including test and staging.\r\n */\r\nfunction secureCookieDefaults(): CookieSerializeOptions {\r\n  return {\r\n    httpOnly: true,\r\n    sameSite: \"lax\",\r\n    secure: !Application.isDevelopment,\r\n  };\r\n}\r\n\r\nexport class Response {\r\n  /**\r\n   * Current route\r\n   */\r\n  protected route!: Route;\r\n\r\n  /**\r\n   * Underlying Fastify reply — a public escape hatch to capabilities the\r\n   * framework's high-level helpers don't yet cover.\r\n   *\r\n   * **Prefer framework methods first**: `response.send()`, `response.header()`,\r\n   * `response.cookie()`, `response.sendFile()`, `response.stream()`, etc.\r\n   * They wire status codes, content-type detection, the event lifecycle, and\r\n   * the cache-pattern replay path correctly.\r\n   *\r\n   * **Reach for `baseResponse` only** when the framework genuinely lacks a\r\n   * helper for what you need — and when you do, file an issue so we can add\r\n   * it. Streaming and SSE are the precedent here: they bypass `send()`\r\n   * deliberately because the framework didn't ship chunked-write support\r\n   * natively at the time. Reaching here for non-streaming work means a\r\n   * missing helper, not an answer.\r\n   */\r\n  public baseResponse!: FastifyReply;\r\n\r\n  /**\r\n   * Current status code\r\n   */\r\n  protected currentStatusCode = 200;\r\n\r\n  /**\r\n   * Current response body\r\n   */\r\n  protected currentBody: any;\r\n\r\n  /**\r\n   * Request object\r\n   */\r\n  public request!: Request;\r\n\r\n  /**\r\n   * Internal events related to this particular response object\r\n   */\r\n  protected events = new Map<string, any[]>();\r\n\r\n  /**\r\n   * Parsed body\r\n   * This will return the parsed body of the response\r\n   * Please note that if this property is called before the response is sent, it will return undefined\r\n   */\r\n  public parsedBody: any;\r\n\r\n  /**\r\n   * Get raw response\r\n   */\r\n  public get raw() {\r\n    return this.baseResponse.raw;\r\n  }\r\n\r\n  /**\r\n   * Get Current response body\r\n   */\r\n  public get body() {\r\n    return this.currentBody;\r\n  }\r\n\r\n  /**\r\n   * Set response body\r\n   */\r\n  public set body(body: any) {\r\n    this.currentBody = body;\r\n  }\r\n\r\n  /**\r\n   * Add event on sending response\r\n   */\r\n  public onSending(callback: any) {\r\n    this.events.set(\"sending\", [...(this.events.get(\"sending\") || []), callback]);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Add event on sent response\r\n   */\r\n  public onSent(callback: any) {\r\n    this.events.set(\"sent\", [...(this.events.get(\"sent\") || []), callback]);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the Fastify response object\r\n   */\r\n  public setResponse(response: FastifyReply) {\r\n    this.baseResponse = response;\r\n\r\n    // Listen to the 'finish' event to track when response is fully sent\r\n    // This works for all response types: JSON, streams, buffers, files, etc.\r\n    this.baseResponse.raw.once(\"finish\", () => {\r\n      this.request.endTime = Date.now();\r\n    });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Reset the response state\r\n   */\r\n  public reset() {\r\n    this.route = {} as Route;\r\n    this.currentBody = null;\r\n    this.currentStatusCode = 200;\r\n  }\r\n\r\n  /**\r\n   * Set current route\r\n   */\r\n  public setRoute(route: Route) {\r\n    this.route = route;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the content type\r\n   */\r\n  public get contentType() {\r\n    return this.baseResponse.getHeader(\"Content-Type\");\r\n  }\r\n\r\n  /**\r\n   * Set the content type\r\n   */\r\n  public setContentType(contentType: string) {\r\n    this.baseResponse.header(\"Content-Type\", contentType);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the status code\r\n   */\r\n  public get statusCode(): number {\r\n    return this.currentStatusCode ?? this.baseResponse.statusCode;\r\n  }\r\n\r\n  /**\r\n   * Check if response status is ok\r\n   */\r\n  public get isOk() {\r\n    return this.currentStatusCode >= 200 && this.currentStatusCode < 300;\r\n  }\r\n\r\n  /**\r\n   * Check if the response has been sent\r\n   */\r\n  public get sent() {\r\n    return this.baseResponse.sent;\r\n  }\r\n\r\n  /**\r\n   * Add a listener to the response event\r\n   */\r\n  public static on(\r\n    event: ResponseEvent,\r\n    listener: (response: Response) => void,\r\n  ): EventSubscription {\r\n    return events.subscribe(`response.${event}`, listener);\r\n  }\r\n\r\n  /**\r\n   * Trigger the response event\r\n   */\r\n  protected static async trigger(event: ResponseEvent, ...args: any[]) {\r\n    // make a timeout to make sure the request events is executed first\r\n    return new Promise((resolve) => {\r\n      setTimeout(async () => {\r\n        await events.triggerAllAsync(`response.${event}`, ...args);\r\n        resolve(true);\r\n      }, 0);\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Parse body\r\n   */\r\n  protected async parseBody() {\r\n    return await this.parse(this.currentBody);\r\n  }\r\n\r\n  /**\r\n   * Parse the given value\r\n   */\r\n  public async parse(value: any): Promise<any> {\r\n    // if it is a falsy value, return it\r\n    if (!value || isScalar(value)) return value;\r\n\r\n    // if it has a `toJSON` method, call it and await the result then return it\r\n    if (value.toJSON) {\r\n      value.request = this.request;\r\n      return await value.toJSON();\r\n    }\r\n\r\n    // if it is iterable, an array or array-like object then parse each item\r\n    if (isIterable(value)) {\r\n      const values = Array.from(value);\r\n\r\n      return Promise.all(\r\n        values.map(async (item: any) => {\r\n          return await this.parse(item);\r\n        }),\r\n      );\r\n    }\r\n\r\n    // if not plain object, then return it\r\n    if (!isPlainObject(value)) {\r\n      return value;\r\n    }\r\n\r\n    // loop over the object and check if the value and call `parse` on it\r\n    for (const key in value) {\r\n      const subValue = value[key];\r\n\r\n      value[key] = await this.parse(subValue);\r\n    }\r\n\r\n    return value;\r\n  }\r\n\r\n  /**\r\n   * Make a log message\r\n   */\r\n  public log(message: string, level: LogLevel = \"info\") {\r\n    if (!config.get(\"http.log\")) return;\r\n\r\n    log.log({\r\n      module: \"response\",\r\n      action: this.route.method + \" \" + this.route.path.replace(\"/*\", \"\") + `:${this.request.id}`,\r\n      message,\r\n      type: level,\r\n      context: {\r\n        request: this.request,\r\n        response: this,\r\n      },\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Check if returning response is json\r\n   */\r\n  public get isJson() {\r\n    return this.getHeader(\"Content-Type\") === \"application/json\";\r\n  }\r\n\r\n  /**\r\n   * Send the response\r\n   * @param data - Response data\r\n   * @param statusCode - HTTP status code\r\n   * @param triggerEvents - Whether to trigger response events (default: true)\r\n   */\r\n  public async send(data?: any, statusCode?: number, triggerEvents = true): Promise<Response> {\r\n    // Defensive guard against double-send. The underlying Fastify reply silently\r\n    // ignores subsequent sends once `sent === true`, which has historically hidden\r\n    // middleware bugs (cache-pattern replay paths that returned `baseResponse.send`\r\n    // ended up re-entering `Response.send` with the FastifyReply as the body).\r\n    // Surfacing the misuse via `error`-level log makes the bug loud without\r\n    // crashing production traffic.\r\n    if (this.baseResponse.sent) {\r\n      log.error(\r\n        \"response\",\r\n        \"send\",\r\n        `send() called on already-sent response (request:${this.request?.id ?? \"unknown\"}) — likely a middleware bug`,\r\n      );\r\n\r\n      return this;\r\n    }\r\n\r\n    if (statusCode) {\r\n      this.currentStatusCode = statusCode;\r\n    }\r\n\r\n    if (data === this) return this;\r\n\r\n    if (data) {\r\n      this.currentBody = data;\r\n    }\r\n\r\n    if (!this.currentStatusCode) {\r\n      this.currentStatusCode = 200;\r\n    }\r\n\r\n    this.log(\"Sending response\");\r\n    // Auto-pick `application/json` only when no content-type was set by the caller.\r\n    // This preserves explicit overrides (e.g. `application/vnd.api+json` from a\r\n    // cache replay, `application/problem+json` from an RFC 7807 error response)\r\n    // while keeping the convenience default for the common object-body path.\r\n    if (Array.isArray(this.currentBody) || isPlainObject(this.currentBody)) {\r\n      if (!this.baseResponse.getHeader(\"Content-Type\")) {\r\n        this.setContentType(\"application/json\");\r\n      }\r\n    }\r\n\r\n    if (triggerEvents) {\r\n      await Response.trigger(\"sending\", this);\r\n\r\n      for (const callback of this.events.get(\"sending\") || []) {\r\n        await callback(this);\r\n      }\r\n\r\n      if (this.isJson) {\r\n        await Response.trigger(\"sendingJson\", this);\r\n        for (const callback of this.events.get(\"sendingJson\") || []) {\r\n          await callback(this);\r\n        }\r\n\r\n        if (this.isOk) {\r\n          await Response.trigger(\"sendingSuccessJson\", this);\r\n          for (const callback of this.events.get(\"sendingSuccessJson\") || []) {\r\n            await callback(this);\r\n          }\r\n        }\r\n      }\r\n    }\r\n\r\n    // parse the body and make sure it is transformed to sync data instead of async data\r\n    if (typeof this.currentBody !== \"string\") {\r\n      this.parsedBody = await this.parseBody();\r\n    } else {\r\n      this.parsedBody = data;\r\n    }\r\n\r\n    // Set the status first\r\n    this.baseResponse.status(this.currentStatusCode);\r\n\r\n    // Then send the response with the parsed body\r\n    await this.baseResponse.send(this.parsedBody);\r\n\r\n    this.log(\"Response sent\");\r\n\r\n    if (triggerEvents) {\r\n      // trigger the sent event\r\n      Response.trigger(\"sent\", this);\r\n\r\n      for (const callback of this.events.get(\"sent\") || []) {\r\n        callback(this);\r\n      }\r\n\r\n      // trigger the success event if the status code is 2xx\r\n      if (this.currentStatusCode >= 200 && this.currentStatusCode < 300) {\r\n        Response.trigger(\"success\", this);\r\n      }\r\n\r\n      // trigger the successCreate event if the status code is 201\r\n      if (this.currentStatusCode === 201) {\r\n        Response.trigger(\"successCreate\", this);\r\n      }\r\n\r\n      // trigger the badRequest event if the status code is 400\r\n      if (this.currentStatusCode === 400) {\r\n        Response.trigger(\"badRequest\", this);\r\n      }\r\n\r\n      // trigger the unauthorized event if the status code is 401\r\n      if (this.currentStatusCode === 401) {\r\n        Response.trigger(\"unauthorized\", this);\r\n      }\r\n\r\n      // trigger the forbidden event if the status code is 403\r\n      if (this.currentStatusCode === 403) {\r\n        Response.trigger(\"forbidden\", this);\r\n      }\r\n\r\n      // trigger the notFound event if the status code is 404\r\n      if (this.currentStatusCode === 404) {\r\n        Response.trigger(\"notFound\", this);\r\n      }\r\n\r\n      // trigger the content too large event if the status code is 413\r\n      if (this.currentStatusCode === 413) {\r\n        Response.trigger(\"contentTooLarge\", this);\r\n      }\r\n\r\n      // trigger the throttled event if the status code is 429\r\n      if (this.currentStatusCode === 429) {\r\n        Response.trigger(\"throttled\", this);\r\n      }\r\n\r\n      // trigger the serverError event if the status code is 500\r\n      if (this.currentStatusCode === 500) {\r\n        Response.trigger(\"serverError\", this);\r\n      }\r\n\r\n      // trigger the error event if the status code is 4xx or 5xx\r\n      if (this.currentStatusCode >= 400) {\r\n        Response.trigger(\"error\", this);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Replay a previously-captured response shape — used by cache-pattern\r\n   * middlewares (idempotency, response cache) to send a cached response\r\n   * without re-running the controller.\r\n   *\r\n   * Preserves the cached status code, content-type, and any extra headers,\r\n   * then sends the body through the standard `send()` pipeline so the full\r\n   * event lifecycle still fires (`sent`, `success`, status-specific events).\r\n   * That keeps cross-cutting observers (logger, metrics, audit) consistent\r\n   * between fresh and replayed responses.\r\n   *\r\n   * @example\r\n   * // Inside a cache-pattern middleware on HIT:\r\n   * return response.header(\"X-Cache\", \"HIT\").replay({\r\n   *   status: cached.status,\r\n   *   body: cached.body,\r\n   *   contentType: cached.contentType,\r\n   * });\r\n   */\r\n  public replay(cached: {\r\n    status: number;\r\n    body: unknown;\r\n    contentType?: string;\r\n    headers?: Record<string, string>;\r\n  }): Promise<Response> {\r\n    this.setStatusCode(cached.status);\r\n\r\n    if (cached.contentType) {\r\n      this.setContentType(cached.contentType);\r\n    }\r\n\r\n    if (cached.headers) {\r\n      for (const [name, value] of Object.entries(cached.headers)) {\r\n        this.header(name, value);\r\n      }\r\n    }\r\n\r\n    return this.send(cached.body);\r\n  }\r\n\r\n  /**\r\n   * Send html response\r\n   */\r\n  public html(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/html\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Render the given react component\r\n   */\r\n  public render(element: React.ReactElement | React.ComponentType, status = 200) {\r\n    return this.setStatusCode(status).html(renderReact(element));\r\n  }\r\n\r\n  /**\r\n   * Send xml response\r\n   */\r\n  public xml(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/xml\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Send plain text response\r\n   */\r\n  public text(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/plain\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Create a streaming response for progressive/chunked data sending\r\n   *\r\n   * This method allows you to send data in chunks and control when the response ends.\r\n   * Perfect for Server-Sent Events (SSE), progressive rendering, or streaming large responses.\r\n   *\r\n   * @example\r\n   * ```ts\r\n   * const stream = response.stream(\"text/html\");\r\n   * stream.send(\"<html><body>\");\r\n   * stream.send(\"<h1>Hello</h1>\");\r\n   * stream.render(<MyComponent />);\r\n   * stream.send(\"</body></html>\");\r\n   * stream.end();\r\n   * ```\r\n   *\r\n   * @param contentType - The content type for the stream (default: \"text/plain\")\r\n   * @returns Stream controller with send(), render(), and end() methods\r\n   */\r\n  public stream(contentType = \"text/plain\"): ResponseStreamController {\r\n    // Set headers using the response API\r\n    this.setContentType(contentType);\r\n    this.header(\"Transfer-Encoding\", \"chunked\");\r\n    this.header(\"Cache-Control\", \"no-cache\");\r\n    this.header(\"Connection\", \"keep-alive\");\r\n    this.header(\"X-Content-Type-Options\", \"nosniff\");\r\n\r\n    // Trigger sending events\r\n    Response.trigger(\"sending\", this);\r\n    for (const callback of this.events.get(\"sending\") || []) {\r\n      callback(this);\r\n    }\r\n\r\n    this.log(\"Starting stream\");\r\n\r\n    // Track stream state\r\n    let isEnded = false;\r\n    const chunks: any[] = [];\r\n\r\n    // Write headers to start the stream\r\n    // Note: We use raw here because we need chunked encoding control\r\n    // This is the only valid use case for bypassing Fastify's abstraction\r\n    this.baseResponse.raw.writeHead(this.statusCode, this.getHeaders() as any);\r\n\r\n    return {\r\n      /**\r\n       * Send a chunk of data to the client\r\n       * @param data - Data to send (string, Buffer, or any serializable data)\r\n       */\r\n      send: (data: any) => {\r\n        if (isEnded) {\r\n          throw new Error(\"Cannot send data: stream has already ended\");\r\n        }\r\n\r\n        this.baseResponse.raw.write(data);\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * Render a React component and send it as a chunk\r\n       * @param element - React element or component to render\r\n       */\r\n      render: (element: ReactNode) => {\r\n        if (isEnded) {\r\n          throw new Error(\"Cannot render: stream has already ended\");\r\n        }\r\n\r\n        const html = renderReact(element);\r\n        chunks.push(html);\r\n        this.baseResponse.raw.write(html);\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * End the stream and trigger completion events\r\n       */\r\n      end: () => {\r\n        if (isEnded) {\r\n          return this;\r\n        }\r\n\r\n        isEnded = true;\r\n\r\n        // Store the streamed content for logging/debugging\r\n        this.currentBody = chunks;\r\n        this.parsedBody = chunks;\r\n\r\n        // End the response\r\n        this.baseResponse.raw.end();\r\n\r\n        this.log(\"Stream ended\");\r\n\r\n        // Trigger sent events\r\n        Response.trigger(\"sent\", this);\r\n        for (const callback of this.events.get(\"sent\") || []) {\r\n          callback(this);\r\n        }\r\n\r\n        // Trigger success event if status is 2xx\r\n        if (this.isOk) {\r\n          Response.trigger(\"success\", this);\r\n        }\r\n\r\n        // Trigger status-specific events\r\n        if (this.currentStatusCode === 201) {\r\n          Response.trigger(\"successCreate\", this);\r\n        }\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * Check if the stream has ended\r\n       */\r\n      get ended() {\r\n        return isEnded;\r\n      },\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Create a Server-Sent Events (SSE) stream\r\n   *\r\n   * SSE is a standard for pushing real-time updates from server to client.\r\n   * Perfect for live notifications, progress updates, or real-time data feeds.\r\n   *\r\n   * @example\r\n   * ```ts\r\n   * const sse = response.sse();\r\n   *\r\n   * // Send events\r\n   * sse.send(\"message\", { text: \"Hello!\" });\r\n   * sse.send(\"notification\", { type: \"info\", message: \"Update available\" }, \"msg-123\");\r\n   *\r\n   * // Keep connection alive\r\n   * const keepAlive = setInterval(() => sse.comment(\"ping\"), 30000);\r\n   *\r\n   * // Clean up when done\r\n   * clearInterval(keepAlive);\r\n   * sse.end();\r\n   * ```\r\n   *\r\n   * @returns SSE controller with send(), comment(), and end() methods\r\n   */\r\n  public sse(): ResponseSSEController {\r\n    // Set SSE-specific headers\r\n    this.setContentType(\"text/event-stream\");\r\n    this.header(\"Cache-Control\", \"no-cache, no-store, must-revalidate\");\r\n    this.header(\"Connection\", \"keep-alive\");\r\n    this.header(\"X-Accel-Buffering\", \"no\"); // Disable nginx buffering\r\n\r\n    // Trigger sending events\r\n    Response.trigger(\"sending\", this);\r\n    for (const callback of this.events.get(\"sending\") || []) {\r\n      callback(this);\r\n    }\r\n\r\n    this.log(\"Starting SSE stream\");\r\n\r\n    // Track stream state\r\n    let isEnded = false;\r\n    const events: any[] = [];\r\n    const disconnectHandlers: Array<() => void> = [];\r\n\r\n    // Write headers to start the stream\r\n    this.baseResponse.raw.writeHead(this.statusCode, this.getHeaders() as any);\r\n\r\n    // Detect client disconnect — set isEnded silently and invoke cleanup handlers.\r\n    // Without this, background jobs keep writing to a dead socket after the client drops.\r\n    this.baseResponse.raw.on(\"close\", () => {\r\n      if (!isEnded) {\r\n        isEnded = true;\r\n        this.log(\"SSE client disconnected\");\r\n        for (const handler of disconnectHandlers) {\r\n          handler();\r\n        }\r\n      }\r\n    });\r\n\r\n    const controller: ResponseSSEController = {\r\n      /**\r\n       * Send an SSE event\r\n       * @param event - Event name (e.g., \"message\", \"chunk\", \"done\")\r\n       * @param data - Event data (will be JSON stringified)\r\n       * @param id - Optional event ID for client-side Last-Event-ID tracking (reconnect support)\r\n       */\r\n      send: (event: string, data: any, id?: string): ResponseSSEController => {\r\n        // Silent no-op after disconnect — background jobs should not crash when\r\n        // the client drops mid-stream. The onDisconnect handler handles cleanup.\r\n        if (isEnded) return controller;\r\n\r\n        let message = \"\";\r\n        if (id) message += `id: ${id}\\n`;\r\n        message += `event: ${event}\\n`;\r\n        message += `data: ${JSON.stringify(data)}\\n\\n`;\r\n\r\n        events.push({ event, data, id });\r\n        this.baseResponse.raw.write(message);\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Send a comment (keeps connection alive, invisible to client)\r\n       * Useful for preventing timeout on long-lived connections\r\n       * @param text - Comment text\r\n       */\r\n      comment: (text: string): ResponseSSEController => {\r\n        // Silent no-op after disconnect\r\n        if (isEnded) return controller;\r\n\r\n        this.baseResponse.raw.write(`: ${text}\\n\\n`);\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * End the SSE stream and trigger completion events\r\n       */\r\n      end: (): ResponseSSEController => {\r\n        if (isEnded) return controller;\r\n\r\n        isEnded = true;\r\n\r\n        // Store the events for logging/debugging\r\n        this.currentBody = events;\r\n        this.parsedBody = events;\r\n\r\n        // End the response\r\n        this.baseResponse.raw.end();\r\n\r\n        this.log(\"SSE stream ended\");\r\n\r\n        // Trigger sent events\r\n        Response.trigger(\"sent\", this);\r\n        for (const callback of this.events.get(\"sent\") || []) {\r\n          callback(this);\r\n        }\r\n\r\n        // Trigger success event if status is 2xx\r\n        if (this.isOk) {\r\n          Response.trigger(\"success\", this);\r\n        }\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Register a handler to be called when the client disconnects.\r\n       * Use this to clean up EventEmitter listeners, cancel background jobs, etc.\r\n       *\r\n       * @example\r\n       * ```ts\r\n       * const sse = response.sse();\r\n       * const listener = (chunk) => sse.send(\"chunk\", { chunk });\r\n       * eventBus.on(aiMessageId, listener);\r\n       * sse.onDisconnect(() => eventBus.off(aiMessageId, listener));\r\n       * ```\r\n       */\r\n      onDisconnect: (handler: () => void): ResponseSSEController => {\r\n        disconnectHandlers.push(handler);\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Check if the stream has ended (either via end() or client disconnect)\r\n       */\r\n      get ended() {\r\n        return isEnded;\r\n      },\r\n    };\r\n\r\n    return controller;\r\n  }\r\n\r\n  /**\r\n   * Set the status code\r\n   */\r\n  public setStatusCode(statusCode: number) {\r\n    this.currentStatusCode = statusCode;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Redirect the user to another route\r\n   */\r\n  public redirect(url: string, statusCode = 302) {\r\n    this.baseResponse.redirect(url, statusCode);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Permanent redirect\r\n   */\r\n  public permanentRedirect(url: string) {\r\n    this.baseResponse.redirect(url, 301);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the response time\r\n   */\r\n  public getResponseTime() {\r\n    return this.baseResponse.elapsedTime;\r\n  }\r\n\r\n  /**\r\n   * Remove a specific header\r\n   */\r\n  public removeHeader(key: string) {\r\n    this.baseResponse.removeHeader(key);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get a specific header\r\n   */\r\n  public getHeader(key: string) {\r\n    return this.baseResponse.getHeader(key);\r\n  }\r\n\r\n  /**\r\n   * Get the response headers\r\n   */\r\n  public getHeaders() {\r\n    return this.baseResponse.getHeaders();\r\n  }\r\n\r\n  /**\r\n   * Set multiple headers\r\n   */\r\n  public headers(headers: Record<string, string>) {\r\n    this.baseResponse.headers(headers);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the response header\r\n   */\r\n  public header(key: string, value: any) {\r\n    this.baseResponse.header(key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set a cookie on the response.\r\n   *\r\n   * Values are JSON-stringified by default so structured cookies round-trip\r\n   * cleanly with `request.cookie(name)`. Pass `{ raw: true }` to skip the\r\n   * JSON wrapping for plain-string cookies (session tokens, opaque IDs).\r\n   *\r\n   * **Secure by default.** `httpOnly: true`, `sameSite: \"lax\"`, and — outside\r\n   * development — `secure: true` are applied unless you override them. These\r\n   * are the flags whose absence never fails a test and is fatal in production:\r\n   * without `httpOnly` any injected script can read the cookie, without\r\n   * `secure` it travels in cleartext, without `sameSite` it rides along on\r\n   * cross-site requests. Opting out is explicit, per call or via\r\n   * `http.cookies.options`.\r\n   *\r\n   * Precedence, lowest to highest: framework defaults → `http.cookies.options`\r\n   * → the per-call `options` argument.\r\n   *\r\n   * @example\r\n   * // JSON-wrapped (default) — round-trips with request.cookie()\r\n   * response.cookie(\"prefs\", { theme: \"dark\" }, { maxAge: 3600 });\r\n   *\r\n   * @example\r\n   * // Raw string — no JSON quoting; useful for tokens / opaque IDs\r\n   * response.cookie(\"session\", \"abc.def.ghi\", { raw: true });\r\n   *\r\n   * @example\r\n   * // Deliberately readable by client-side JS\r\n   * response.cookie(\"theme\", \"dark\", { httpOnly: false });\r\n   */\r\n  public cookie(name: string, value: CookieValue, options: CookieOptions = {}) {\r\n    const { raw, ...cookieOptions } = options;\r\n    const defaultOptions = config.get(\"http.cookies.options\", {});\r\n    const serializedValue = raw ? String(value) : JSON.stringify(value);\r\n\r\n    this.baseResponse.setCookie(name, serializedValue, {\r\n      ...secureCookieDefaults(),\r\n      ...defaultOptions,\r\n      ...cookieOptions,\r\n    });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Clear a cookie from the response\r\n   *\r\n   * @example\r\n   * response.clearCookie('token', { path: '/' });\r\n   */\r\n  public clearCookie(name: string, options?: CookieSerializeOptions) {\r\n    const defaultOptions = config.get(\"http.cookies.options\", {});\r\n    this.baseResponse.clearCookie(name, { ...defaultOptions, ...options });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Alias to header method\r\n   */\r\n  public setHeader(key: string, value: any) {\r\n    return this.header(key, value);\r\n  }\r\n\r\n  /**\r\n   * Send an error response with status code 500\r\n   */\r\n  public serverError(data: any) {\r\n    return this.send(data, 500);\r\n  }\r\n\r\n  /**\r\n   * Send a forbidden response with status code 403\r\n   */\r\n  public forbidden(\r\n    data: any = {\r\n      error: \"You are not allowed to access this resource, FORBIDDEN\",\r\n    },\r\n  ) {\r\n    return this.send(data, 403);\r\n  }\r\n\r\n  /**\r\n   * Send a service unavailable response with status code 503\r\n   */\r\n  public serviceUnavailable(data: any) {\r\n    return this.send(data, 503);\r\n  }\r\n\r\n  /**\r\n   * Send an unauthorized response with status code 401\r\n   */\r\n  public unauthorized(\r\n    data: any = {\r\n      error: \"unauthorized\",\r\n    },\r\n  ) {\r\n    return this.send(data, 401);\r\n  }\r\n\r\n  /**\r\n   * Send a not found response with status code 404\r\n   */\r\n  public notFound(\r\n    data: any = {\r\n      error: \"notFound\",\r\n    },\r\n  ) {\r\n    return this.send(data, 404);\r\n  }\r\n\r\n  /**\r\n   * Send a bad request response with status code 400\r\n   */\r\n  public badRequest(data: any) {\r\n    return this.send(data, 400);\r\n  }\r\n\r\n  /**\r\n   * Send a content too large response with status code 413\r\n   */\r\n  public contentTooLarge(data: any) {\r\n    return this.send(data, 413);\r\n  }\r\n\r\n  /**\r\n   * Send a success response with status code 201\r\n   */\r\n  public successCreate(data: any) {\r\n    return this.send(data, 201);\r\n  }\r\n\r\n  /**\r\n   * Send a success response\r\n   */\r\n  public success(data: any = { success: true }) {\r\n    return this.send(data);\r\n  }\r\n\r\n  /**\r\n   * Send a no content response with status code 204\r\n   */\r\n  public noContent() {\r\n    return this.baseResponse.status(204).send();\r\n  }\r\n\r\n  /**\r\n   * Send an accepted response with status code 202\r\n   * Used for async operations that have been accepted but not yet processed\r\n   */\r\n  public accepted(data: any = { message: \"Request accepted for processing\" }) {\r\n    return this.send(data, 202);\r\n  }\r\n\r\n  /**\r\n   * Send a conflict response with status code 409\r\n   */\r\n  public conflict(data: any = { error: \"Resource conflict\" }) {\r\n    return this.send(data, 409);\r\n  }\r\n\r\n  /**\r\n   * Send a too many requests response with status code 429\r\n   */\r\n  public tooManyRequests(data: any) {\r\n    return this.send(data, 429);\r\n  }\r\n\r\n  /**\r\n   * Send an unprocessable entity response with status code 422\r\n   * Used for semantic validation errors\r\n   */\r\n  public unprocessableEntity(data: any) {\r\n    return this.send(data, 422);\r\n  }\r\n\r\n  /**\r\n   * Apply response options (cache, disposition, etag)\r\n   * Shared helper for sendFile and sendBuffer\r\n   */\r\n  /**\r\n   * Build an RFC 6266–safe `Content-Disposition` value for a file name.\r\n   *\r\n   * HTTP header values must be ISO-8859-1; Node's `setHeader` throws\r\n   * `ERR_INVALID_CHAR` on any other byte, so a raw `filename=\"تقرير.pdf\"` would\r\n   * crash the response (a 500 the moment the name is non-ASCII). RFC 6266 solves\r\n   * this with two parameters emitted together:\r\n   *   - `filename=\"<ascii>\"`     — sanitised ASCII fallback for legacy clients\r\n   *   - `filename*=UTF-8''<pct>` — RFC 5987 ext-value; modern browsers restore\r\n   *                                the real (e.g. Arabic) name.\r\n   */\r\n  private contentDisposition(type: \"inline\" | \"attachment\", rawName: string): string {\r\n    // Strip CR/LF first so a crafted file name can never inject extra headers.\r\n    const name = (rawName || \"file\").replace(/[\\r\\n]/g, \"\");\r\n\r\n    // ASCII fallback: replace quote/backslash + every non-printable-ASCII byte\r\n    // (covers all multibyte characters) so the quoted-string is always legal.\r\n    const ascii =\r\n      name\r\n        .replace(/[\"\\\\]/g, \"_\")\r\n        .replace(/[^\\x20-\\x7E]/g, \"_\")\r\n        .trim() || \"file\";\r\n\r\n    // Pure-ASCII name → the quoted form is enough; no ext-value needed.\r\n    if (!/[^\\x20-\\x7E]/.test(name)) {\r\n      return `${type}; filename=\"${ascii}\"`;\r\n    }\r\n\r\n    // RFC 5987 ext-value. `encodeURIComponent` leaves ' ( ) * unescaped, but they\r\n    // are not valid `attr-char`, so percent-encode those too.\r\n    const encoded = encodeURIComponent(name).replace(\r\n      /['()*]/g,\r\n      (char) => \"%\" + char.charCodeAt(0).toString(16).toUpperCase(),\r\n    );\r\n\r\n    return `${type}; filename=\"${ascii}\"; filename*=UTF-8''${encoded}`;\r\n  }\r\n\r\n  private applyResponseOptions(options: SendBufferOptions, defaultFilename?: string): boolean {\r\n    // Set content type if provided\r\n    if (options.contentType) {\r\n      this.baseResponse.type(options.contentType);\r\n    }\r\n\r\n    // Set cache headers if specified\r\n    if (options.cacheTime) {\r\n      const cacheControl = options.immutable\r\n        ? `public, max-age=${options.cacheTime}, immutable`\r\n        : `public, max-age=${options.cacheTime}`;\r\n      this.header(\"Cache-Control\", cacheControl);\r\n      this.header(\"Expires\", new Date(Date.now() + options.cacheTime * 1000).toUTCString());\r\n    }\r\n\r\n    // Set ETag if provided (for conditional requests)\r\n    if (options.etag) {\r\n      this.header(\"ETag\", options.etag);\r\n\r\n      // Check If-None-Match for conditional request\r\n      const ifNoneMatch = this.request.header(\"if-none-match\");\r\n      if (ifNoneMatch && ifNoneMatch === options.etag) {\r\n        this.log(\"Content not modified (ETag match), sending 304\");\r\n        this.baseResponse.status(304).send();\r\n        return true; // Indicates 304 was sent\r\n      }\r\n    }\r\n\r\n    // Set Content-Disposition if inline or filename is specified\r\n    if (options.inline !== undefined || options.filename) {\r\n      const disposition = options.inline ? \"inline\" : \"attachment\";\r\n      const filename = options.filename || defaultFilename || \"file\";\r\n      this.header(\"Content-Disposition\", this.contentDisposition(disposition, filename));\r\n    }\r\n\r\n    return false; // No 304 sent\r\n  }\r\n\r\n  /**\r\n   * Send a file as a response\r\n   */\r\n  public async sendFile(filePath: string | StorageFile, options?: number | SendFileOptions) {\r\n    if (filePath instanceof StorageFile) {\r\n      filePath = filePath.absolutePath!;\r\n    }\r\n\r\n    this.log(`Sending file: ${filePath}`);\r\n\r\n    // Check if file exists first\r\n    if (!(await fileExistsAsync(filePath))) {\r\n      return this.notFound({\r\n        error: \"File Not Found\",\r\n      });\r\n    }\r\n\r\n    try {\r\n      // Normalize options to object format\r\n      const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n      // Get file stats for ETag and Last-Modified\r\n      const stats = await fs.promises.stat(filePath);\r\n      const lastModified = stats.mtime;\r\n\r\n      // Generate ETag based on file size and modification time\r\n      const etag = `\"${stats.size}-${stats.mtime.getTime()}\"`;\r\n\r\n      // Set Last-Modified header\r\n      this.header(\"Last-Modified\", lastModified.toUTCString());\r\n      this.header(\"ETag\", etag);\r\n\r\n      // Set content type\r\n      const contentType = this.getFileContentType(filePath);\r\n      this.baseResponse.type(contentType);\r\n\r\n      // Apply common response options (cache, disposition)\r\n      const defaultFilename = path.basename(filePath);\r\n      const sent304 = this.applyResponseOptions({ ...opts, etag, contentType }, defaultFilename);\r\n      if (sent304) return this.baseResponse;\r\n\r\n      // Check conditional request headers\r\n      const ifNoneMatch = this.request.header(\"if-none-match\");\r\n      const ifModifiedSince = this.request.header(\"if-modified-since\");\r\n\r\n      // Handle If-None-Match (ETag validation)\r\n      if (ifNoneMatch && ifNoneMatch === etag) {\r\n        this.log(\"File not modified (ETag match), sending 304\");\r\n        return this.baseResponse.status(304).send();\r\n      }\r\n\r\n      // Handle If-Modified-Since (Last-Modified validation)\r\n      if (ifModifiedSince) {\r\n        const modifiedSinceDate = new Date(ifModifiedSince);\r\n        if (lastModified.getTime() <= modifiedSinceDate.getTime()) {\r\n          this.log(\"File not modified (Last-Modified check), sending 304\");\r\n          return this.baseResponse.status(304).send();\r\n        }\r\n      }\r\n\r\n      // Use streaming for efficient file sending\r\n      const stream = fs.createReadStream(filePath);\r\n\r\n      // Handle stream errors\r\n      stream.on(\"error\", (error) => {\r\n        this.log(`Error reading file: ${error.message}`, \"error\");\r\n        if (!this.baseResponse.sent) {\r\n          this.serverError({\r\n            error: \"Error reading file\",\r\n            message: error.message,\r\n          });\r\n        }\r\n      });\r\n\r\n      // Send the stream (endTime will be set by finish event listener)\r\n      return this.baseResponse.send(stream);\r\n    } catch (error: any) {\r\n      this.log(`Error sending file: ${error.message}`, \"error\");\r\n      return this.serverError({\r\n        error: \"Error sending file\",\r\n        message: error.message,\r\n      });\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Send buffer as a response\r\n   * Useful for dynamically generated content (e.g., resized images, generated PDFs)\r\n   */\r\n  public sendBuffer(buffer: Buffer, options?: number | SendBufferOptions) {\r\n    this.log(\"Sending buffer\");\r\n\r\n    // Normalize options to object format\r\n    const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n    // Apply common response options (cache, disposition, etag)\r\n    const sent304 = this.applyResponseOptions(opts);\r\n    if (sent304) return this.baseResponse;\r\n\r\n    // Note: endTime is set in the main send() method for non-streaming responses\r\n    return this.baseResponse.send(buffer);\r\n  }\r\n\r\n  /**\r\n   * Send an Image instance as a response\r\n   * Automatically detects image format and sets content type\r\n   */\r\n  public async sendImage(\r\n    image: any, // Type as 'any' to avoid circular dependency with Image class\r\n    options?: number | (Omit<SendBufferOptions, \"contentType\"> & { contentType?: string }),\r\n  ) {\r\n    this.log(\"Sending image\");\r\n\r\n    // Normalize options to object format\r\n    const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n    // Get image metadata to determine format\r\n    const metadata = await image.metadata();\r\n    const format = metadata.format || \"jpeg\";\r\n\r\n    // Convert image to buffer\r\n    const buffer = await image.toBuffer();\r\n\r\n    // Auto-set content type if not provided\r\n    const contentType = opts.contentType || `image/${format}`;\r\n\r\n    // Auto-generate ETag if not provided\r\n    // Format: \"format-widthxheight-size\" (e.g., \"jpeg-800x600-45231\")\r\n    // This catches changes in dimensions, quality, filters, and format\r\n    if (!opts.etag) {\r\n      const width = metadata.width || 0;\r\n      const height = metadata.height || 0;\r\n      opts.etag = `\"${format}-${width}x${height}-${buffer.length}\"`;\r\n    }\r\n\r\n    // Apply common response options with auto-detected content type\r\n    const sent304 = this.applyResponseOptions({ ...opts, contentType });\r\n    if (sent304) return this.baseResponse;\r\n\r\n    // Note: endTime is set in the main send() method for non-streaming responses\r\n    return this.baseResponse.send(buffer);\r\n  }\r\n\r\n  /**\r\n   * Send file and cache it\r\n   * Cache time in seconds\r\n   * Cache time will be one year\r\n   */\r\n  public sendCachedFile(path: string | StorageFile, cacheTime = 31536000) {\r\n    return this.sendFile(path, cacheTime);\r\n  }\r\n\r\n  /**\r\n   * Download the given file path\r\n   */\r\n  public download(path: string, filename?: string) {\r\n    return this.downloadFile(path, filename);\r\n  }\r\n\r\n  /**\r\n   * Download the given file path\r\n   */\r\n  public async downloadFile(filePath: string, filename?: string) {\r\n    // Check if file exists first\r\n    if (!(await fileExistsAsync(filePath))) {\r\n      return this.notFound({\r\n        error: \"File Not Found\",\r\n      });\r\n    }\r\n\r\n    try {\r\n      if (!filename) {\r\n        filename = path.basename(filePath);\r\n      }\r\n\r\n      this.baseResponse.header(\r\n        \"Content-Disposition\",\r\n        this.contentDisposition(\"attachment\", filename),\r\n      );\r\n\r\n      // this.baseResponse.header(\"Content-Type\", this.getFileContentType(filePath));\r\n      this.baseResponse.header(\"Content-Type\", \"application/octet-stream\");\r\n\r\n      const stream = fs.createReadStream(filePath);\r\n\r\n      // Handle stream errors\r\n      stream.on(\"error\", (error) => {\r\n        this.log(`Error reading file for download: ${error.message}`, \"error\");\r\n        if (!this.baseResponse.sent) {\r\n          this.serverError({\r\n            error: \"Error reading file\",\r\n            message: error.message,\r\n          });\r\n        }\r\n      });\r\n\r\n      // Send the stream (endTime will be set by finish event listener)\r\n      return this.baseResponse.send(stream);\r\n    } catch (error: any) {\r\n      this.log(`Error downloading file: ${error.message}`, \"error\");\r\n      return this.serverError({\r\n        error: \"Error downloading file\",\r\n        message: error.message,\r\n      });\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get content type of the given path\r\n   */\r\n  public getFileContentType(filePath: string) {\r\n    const type = mime.getType(filePath) || \"application/octet-stream\";\r\n    return type;\r\n  }\r\n\r\n  /**\r\n   * Mark the response as failed\r\n   */\r\n  public failedSchema(result: ValidationResult) {\r\n    const { errors, inputKey, inputError, status } = config.get(\"validation.response\", {\r\n      errors: \"errors\",\r\n      inputKey: \"input\",\r\n      inputError: \"error\",\r\n      status: 400,\r\n    });\r\n\r\n    log.error(\"request\", \"validation\", `${this.request.id} - Validation failed`);\r\n\r\n    return this.send(\r\n      {\r\n        [errors]: result.errors.map((error) => ({\r\n          [inputKey]: error.input,\r\n          [inputError]: error.error,\r\n        })),\r\n      },\r\n      status,\r\n    );\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;AA6CA,IAAY,iBAAL;CACL;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;AACF;;;;;;;;;;;AA8BA,SAAS,uBAA+C;CACtD,OAAO;EACL,UAAU;EACV,UAAU;EACV,QAAQ,CAAC,YAAY;CACvB;AACF;AAEA,IAAa,WAAb,MAAa,SAAS;;2BA2BU;gCAeX,IAAI,IAAmB;;;;;CAY1C,IAAW,MAAM;EACf,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK;CACd;;;;CAKA,IAAW,KAAK,MAAW;EACzB,KAAK,cAAc;CACrB;;;;CAKA,AAAO,UAAU,UAAe;EAC9B,KAAK,OAAO,IAAI,WAAW,CAAC,GAAI,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GAAI,QAAQ,CAAC;EAE5E,OAAO;CACT;;;;CAKA,AAAO,OAAO,UAAe;EAC3B,KAAK,OAAO,IAAI,QAAQ,CAAC,GAAI,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GAAI,QAAQ,CAAC;EAEtE,OAAO;CACT;;;;CAKA,AAAO,YAAY,UAAwB;EACzC,KAAK,eAAe;EAIpB,KAAK,aAAa,IAAI,KAAK,gBAAgB;GACzC,KAAK,QAAQ,UAAU,KAAK,IAAI;EAClC,CAAC;EAED,OAAO;CACT;;;;CAKA,AAAO,QAAQ;EACb,KAAK,QAAQ,CAAC;EACd,KAAK,cAAc;EACnB,KAAK,oBAAoB;CAC3B;;;;CAKA,AAAO,SAAS,OAAc;EAC5B,KAAK,QAAQ;EAEb,OAAO;CACT;;;;CAKA,IAAW,cAAc;EACvB,OAAO,KAAK,aAAa,UAAU,cAAc;CACnD;;;;CAKA,AAAO,eAAe,aAAqB;EACzC,KAAK,aAAa,OAAO,gBAAgB,WAAW;EAEpD,OAAO;CACT;;;;CAKA,IAAW,aAAqB;EAC9B,OAAO,KAAK,qBAAqB,KAAK,aAAa;CACrD;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,qBAAqB,OAAO,KAAK,oBAAoB;CACnE;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,OAAc,GACZ,OACA,UACmB;EACnB,OAAO,OAAO,UAAU,YAAY,SAAS,QAAQ;CACvD;;;;CAKA,aAAuB,QAAQ,OAAsB,GAAG,MAAa;EAEnE,OAAO,IAAI,SAAS,YAAY;GAC9B,WAAW,YAAY;IACrB,MAAM,OAAO,gBAAgB,YAAY,SAAS,GAAG,IAAI;IACzD,QAAQ,IAAI;GACd,GAAG,CAAC;EACN,CAAC;CACH;;;;CAKA,MAAgB,YAAY;EAC1B,OAAO,MAAM,KAAK,MAAM,KAAK,WAAW;CAC1C;;;;CAKA,MAAa,MAAM,OAA0B;EAE3C,IAAI,CAAC,SAAS,SAAS,KAAK,GAAG,OAAO;EAGtC,IAAI,MAAM,QAAQ;GAChB,MAAM,UAAU,KAAK;GACrB,OAAO,MAAM,MAAM,OAAO;EAC5B;EAGA,IAAI,WAAW,KAAK,GAAG;GACrB,MAAM,SAAS,MAAM,KAAK,KAAK;GAE/B,OAAO,QAAQ,IACb,OAAO,IAAI,OAAO,SAAc;IAC9B,OAAO,MAAM,KAAK,MAAM,IAAI;GAC9B,CAAC,CACH;EACF;EAGA,IAAI,CAAC,cAAc,KAAK,GACtB,OAAO;EAIT,KAAK,MAAM,OAAO,OAAO;GACvB,MAAM,WAAW,MAAM;GAEvB,MAAM,OAAO,MAAM,KAAK,MAAM,QAAQ;EACxC;EAEA,OAAO;CACT;;;;CAKA,AAAO,IAAI,SAAiB,QAAkB,QAAQ;EACpD,IAAI,CAACA,WAAO,IAAI,UAAU,GAAG;EAE7B,IAAI,IAAI;GACN,QAAQ;GACR,QAAQ,KAAK,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK,QAAQ,MAAM,EAAE,IAAI,IAAI,KAAK,QAAQ;GACvF;GACA,MAAM;GACN,SAAS;IACP,SAAS,KAAK;IACd,UAAU;GACZ;EACF,CAAC;CACH;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,UAAU,cAAc,MAAM;CAC5C;;;;;;;CAQA,MAAa,KAAK,MAAY,YAAqB,gBAAgB,MAAyB;EAO1F,IAAI,KAAK,aAAa,MAAM;GAC1B,IAAI,MACF,YACA,QACA,mDAAmD,KAAK,SAAS,MAAM,UAAU,4BACnF;GAEA,OAAO;EACT;EAEA,IAAI,YACF,KAAK,oBAAoB;EAG3B,IAAI,SAAS,MAAM,OAAO;EAE1B,IAAI,MACF,KAAK,cAAc;EAGrB,IAAI,CAAC,KAAK,mBACR,KAAK,oBAAoB;EAG3B,KAAK,IAAI,kBAAkB;EAK3B,IAAI,MAAM,QAAQ,KAAK,WAAW,KAAK,cAAc,KAAK,WAAW,GACnE;OAAI,CAAC,KAAK,aAAa,UAAU,cAAc,GAC7C,KAAK,eAAe,kBAAkB;EACxC;EAGF,IAAI,eAAe;GACjB,MAAM,SAAS,QAAQ,WAAW,IAAI;GAEtC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,MAAM,SAAS,IAAI;GAGrB,IAAI,KAAK,QAAQ;IACf,MAAM,SAAS,QAAQ,eAAe,IAAI;IAC1C,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,aAAa,KAAK,CAAC,GACxD,MAAM,SAAS,IAAI;IAGrB,IAAI,KAAK,MAAM;KACb,MAAM,SAAS,QAAQ,sBAAsB,IAAI;KACjD,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,oBAAoB,KAAK,CAAC,GAC/D,MAAM,SAAS,IAAI;IAEvB;GACF;EACF;EAGA,IAAI,OAAO,KAAK,gBAAgB,UAC9B,KAAK,aAAa,MAAM,KAAK,UAAU;OAEvC,KAAK,aAAa;EAIpB,KAAK,aAAa,OAAO,KAAK,iBAAiB;EAG/C,MAAM,KAAK,aAAa,KAAK,KAAK,UAAU;EAE5C,KAAK,IAAI,eAAe;EAExB,IAAI,eAAe;GAEjB,SAAS,QAAQ,QAAQ,IAAI;GAE7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;GAIf,IAAI,KAAK,qBAAqB,OAAO,KAAK,oBAAoB,KAC5D,SAAS,QAAQ,WAAW,IAAI;GAIlC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,iBAAiB,IAAI;GAIxC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,cAAc,IAAI;GAIrC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,gBAAgB,IAAI;GAIvC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,aAAa,IAAI;GAIpC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,YAAY,IAAI;GAInC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,mBAAmB,IAAI;GAI1C,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,aAAa,IAAI;GAIpC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,eAAe,IAAI;GAItC,IAAI,KAAK,qBAAqB,KAC5B,SAAS,QAAQ,SAAS,IAAI;EAElC;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;;;;;CAqBA,AAAO,OAAO,QAKQ;EACpB,KAAK,cAAc,OAAO,MAAM;EAEhC,IAAI,OAAO,aACT,KAAK,eAAe,OAAO,WAAW;EAGxC,IAAI,OAAO,SACT,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,GACvD,KAAK,OAAO,MAAM,KAAK;EAI3B,OAAO,KAAK,KAAK,OAAO,IAAI;CAC9B;;;;CAKA,AAAO,KAAK,MAAc,YAAqB;EAC7C,OAAO,KAAK,eAAe,WAAW,CAAC,CAAC,KAAK,MAAM,UAAU;CAC/D;;;;CAKA,AAAO,OAAO,SAAmD,SAAS,KAAK;EAC7E,OAAO,KAAK,cAAc,MAAM,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC;CAC7D;;;;CAKA,AAAO,IAAI,MAAc,YAAqB;EAC5C,OAAO,KAAK,eAAe,UAAU,CAAC,CAAC,KAAK,MAAM,UAAU;CAC9D;;;;CAKA,AAAO,KAAK,MAAc,YAAqB;EAC7C,OAAO,KAAK,eAAe,YAAY,CAAC,CAAC,KAAK,MAAM,UAAU;CAChE;;;;;;;;;;;;;;;;;;;;CAqBA,AAAO,OAAO,cAAc,cAAwC;EAElE,KAAK,eAAe,WAAW;EAC/B,KAAK,OAAO,qBAAqB,SAAS;EAC1C,KAAK,OAAO,iBAAiB,UAAU;EACvC,KAAK,OAAO,cAAc,YAAY;EACtC,KAAK,OAAO,0BAA0B,SAAS;EAG/C,SAAS,QAAQ,WAAW,IAAI;EAChC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,SAAS,IAAI;EAGf,KAAK,IAAI,iBAAiB;EAG1B,IAAI,UAAU;EACd,MAAM,SAAgB,CAAC;EAKvB,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY,KAAK,WAAW,CAAQ;EAEzE,OAAO;;;;;GAKL,OAAO,SAAc;IACnB,IAAI,SACF,MAAM,IAAI,MAAM,4CAA4C;IAG9D,KAAK,aAAa,IAAI,MAAM,IAAI;IAEhC,OAAO;GACT;;;;;GAMA,SAAS,YAAuB;IAC9B,IAAI,SACF,MAAM,IAAI,MAAM,yCAAyC;IAG3D,MAAM,OAAO,YAAY,OAAO;IAChC,OAAO,KAAK,IAAI;IAChB,KAAK,aAAa,IAAI,MAAM,IAAI;IAEhC,OAAO;GACT;;;;GAKA,WAAW;IACT,IAAI,SACF,OAAO;IAGT,UAAU;IAGV,KAAK,cAAc;IACnB,KAAK,aAAa;IAGlB,KAAK,aAAa,IAAI,IAAI;IAE1B,KAAK,IAAI,cAAc;IAGvB,SAAS,QAAQ,QAAQ,IAAI;IAC7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;IAIf,IAAI,KAAK,MACP,SAAS,QAAQ,WAAW,IAAI;IAIlC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,iBAAiB,IAAI;IAGxC,OAAO;GACT;;;;GAKA,IAAI,QAAQ;IACV,OAAO;GACT;EACF;CACF;;;;;;;;;;;;;;;;;;;;;;;;;CA0BA,AAAO,MAA6B;EAElC,KAAK,eAAe,mBAAmB;EACvC,KAAK,OAAO,iBAAiB,qCAAqC;EAClE,KAAK,OAAO,cAAc,YAAY;EACtC,KAAK,OAAO,qBAAqB,IAAI;EAGrC,SAAS,QAAQ,WAAW,IAAI;EAChC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,SAAS,IAAI;EAGf,KAAK,IAAI,qBAAqB;EAG9B,IAAI,UAAU;EACd,MAAM,SAAgB,CAAC;EACvB,MAAM,qBAAwC,CAAC;EAG/C,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY,KAAK,WAAW,CAAQ;EAIzE,KAAK,aAAa,IAAI,GAAG,eAAe;GACtC,IAAI,CAAC,SAAS;IACZ,UAAU;IACV,KAAK,IAAI,yBAAyB;IAClC,KAAK,MAAM,WAAW,oBACpB,QAAQ;GAEZ;EACF,CAAC;EAED,MAAM,aAAoC;;;;;;;GAOxC,OAAO,OAAe,MAAW,OAAuC;IAGtE,IAAI,SAAS,OAAO;IAEpB,IAAI,UAAU;IACd,IAAI,IAAI,WAAW,OAAO,GAAG;IAC7B,WAAW,UAAU,MAAM;IAC3B,WAAW,SAAS,KAAK,UAAU,IAAI,EAAE;IAEzC,OAAO,KAAK;KAAE;KAAO;KAAM;IAAG,CAAC;IAC/B,KAAK,aAAa,IAAI,MAAM,OAAO;IAEnC,OAAO;GACT;;;;;;GAOA,UAAU,SAAwC;IAEhD,IAAI,SAAS,OAAO;IAEpB,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,KAAK;IAE3C,OAAO;GACT;;;;GAKA,WAAkC;IAChC,IAAI,SAAS,OAAO;IAEpB,UAAU;IAGV,KAAK,cAAc;IACnB,KAAK,aAAa;IAGlB,KAAK,aAAa,IAAI,IAAI;IAE1B,KAAK,IAAI,kBAAkB;IAG3B,SAAS,QAAQ,QAAQ,IAAI;IAC7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;IAIf,IAAI,KAAK,MACP,SAAS,QAAQ,WAAW,IAAI;IAGlC,OAAO;GACT;;;;;;;;;;;;;GAcA,eAAe,YAA+C;IAC5D,mBAAmB,KAAK,OAAO;IAC/B,OAAO;GACT;;;;GAKA,IAAI,QAAQ;IACV,OAAO;GACT;EACF;EAEA,OAAO;CACT;;;;CAKA,AAAO,cAAc,YAAoB;EACvC,KAAK,oBAAoB;EAEzB,OAAO;CACT;;;;CAKA,AAAO,SAAS,KAAa,aAAa,KAAK;EAC7C,KAAK,aAAa,SAAS,KAAK,UAAU;EAE1C,OAAO;CACT;;;;CAKA,AAAO,kBAAkB,KAAa;EACpC,KAAK,aAAa,SAAS,KAAK,GAAG;EAEnC,OAAO;CACT;;;;CAKA,AAAO,kBAAkB;EACvB,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,AAAO,aAAa,KAAa;EAC/B,KAAK,aAAa,aAAa,GAAG;EAElC,OAAO;CACT;;;;CAKA,AAAO,UAAU,KAAa;EAC5B,OAAO,KAAK,aAAa,UAAU,GAAG;CACxC;;;;CAKA,AAAO,aAAa;EAClB,OAAO,KAAK,aAAa,WAAW;CACtC;;;;CAKA,AAAO,QAAQ,SAAiC;EAC9C,KAAK,aAAa,QAAQ,OAAO;EAEjC,OAAO;CACT;;;;CAKA,AAAO,OAAO,KAAa,OAAY;EACrC,KAAK,aAAa,OAAO,KAAK,KAAK;EAEnC,OAAO;CACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCA,AAAO,OAAO,MAAc,OAAoB,UAAyB,CAAC,GAAG;EAC3E,MAAM,EAAE,KAAK,GAAG,kBAAkB;EAClC,MAAM,iBAAiBA,WAAO,IAAI,wBAAwB,CAAC,CAAC;EAC5D,MAAM,kBAAkB,MAAM,OAAO,KAAK,IAAI,KAAK,UAAU,KAAK;EAElE,KAAK,aAAa,UAAU,MAAM,iBAAiB;GACjD,GAAG,qBAAqB;GACxB,GAAG;GACH,GAAG;EACL,CAAC;EAED,OAAO;CACT;;;;;;;CAQA,AAAO,YAAY,MAAc,SAAkC;EACjE,MAAM,iBAAiBA,WAAO,IAAI,wBAAwB,CAAC,CAAC;EAC5D,KAAK,aAAa,YAAY,MAAM;GAAE,GAAG;GAAgB,GAAG;EAAQ,CAAC;EAErE,OAAO;CACT;;;;CAKA,AAAO,UAAU,KAAa,OAAY;EACxC,OAAO,KAAK,OAAO,KAAK,KAAK;CAC/B;;;;CAKA,AAAO,YAAY,MAAW;EAC5B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,UACL,OAAY,EACV,OAAO,yDACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,mBAAmB,MAAW;EACnC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,aACL,OAAY,EACV,OAAO,eACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,SACL,OAAY,EACV,OAAO,WACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,WAAW,MAAW;EAC3B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,gBAAgB,MAAW;EAChC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,cAAc,MAAW;EAC9B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,QAAQ,OAAY,EAAE,SAAS,KAAK,GAAG;EAC5C,OAAO,KAAK,KAAK,IAAI;CACvB;;;;CAKA,AAAO,YAAY;EACjB,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;CAC5C;;;;;CAMA,AAAO,SAAS,OAAY,EAAE,SAAS,kCAAkC,GAAG;EAC1E,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,SAAS,OAAY,EAAE,OAAO,oBAAoB,GAAG;EAC1D,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,gBAAgB,MAAW;EAChC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;;CAMA,AAAO,oBAAoB,MAAW;EACpC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;;;;;;;;;;;;;CAiBA,AAAQ,mBAAmB,MAA+B,SAAyB;EAEjF,MAAM,QAAQ,WAAW,OAAM,CAAE,QAAQ,WAAW,EAAE;EAItD,MAAM,QACJ,KACG,QAAQ,UAAU,GAAG,CAAC,CACtB,QAAQ,iBAAiB,GAAG,CAAC,CAC7B,KAAK,KAAK;EAGf,IAAI,CAAC,eAAe,KAAK,IAAI,GAC3B,OAAO,GAAG,KAAK,cAAc,MAAM;EAUrC,OAAO,GAAG,KAAK,cAAc,MAAM,sBALnB,mBAAmB,IAAI,CAAC,CAAC,QACvC,YACC,SAAS,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,CAGC;CACjE;CAEA,AAAQ,qBAAqB,SAA4B,iBAAmC;EAE1F,IAAI,QAAQ,aACV,KAAK,aAAa,KAAK,QAAQ,WAAW;EAI5C,IAAI,QAAQ,WAAW;GACrB,MAAM,eAAe,QAAQ,YACzB,mBAAmB,QAAQ,UAAU,eACrC,mBAAmB,QAAQ;GAC/B,KAAK,OAAO,iBAAiB,YAAY;GACzC,KAAK,OAAO,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,YAAY,GAAI,CAAC,CAAC,YAAY,CAAC;EACtF;EAGA,IAAI,QAAQ,MAAM;GAChB,KAAK,OAAO,QAAQ,QAAQ,IAAI;GAGhC,MAAM,cAAc,KAAK,QAAQ,OAAO,eAAe;GACvD,IAAI,eAAe,gBAAgB,QAAQ,MAAM;IAC/C,KAAK,IAAI,gDAAgD;IACzD,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;IACnC,OAAO;GACT;EACF;EAGA,IAAI,QAAQ,WAAW,UAAa,QAAQ,UAAU;GACpD,MAAM,cAAc,QAAQ,SAAS,WAAW;GAChD,MAAM,WAAW,QAAQ,YAAY,mBAAmB;GACxD,KAAK,OAAO,uBAAuB,KAAK,mBAAmB,aAAa,QAAQ,CAAC;EACnF;EAEA,OAAO;CACT;;;;CAKA,MAAa,SAAS,UAAgC,SAAoC;EACxF,IAAI,oBAAoB,aACtB,WAAW,SAAS;EAGtB,KAAK,IAAI,iBAAiB,UAAU;EAGpC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,OAAO,KAAK,SAAS,EACnB,OAAO,iBACT,CAAC;EAGH,IAAI;GAEF,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;GAGhF,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAK,QAAQ;GAC7C,MAAM,eAAe,MAAM;GAG3B,MAAM,OAAO,IAAI,MAAM,KAAK,GAAG,MAAM,MAAM,QAAQ,EAAE;GAGrD,KAAK,OAAO,iBAAiB,aAAa,YAAY,CAAC;GACvD,KAAK,OAAO,QAAQ,IAAI;GAGxB,MAAM,cAAc,KAAK,mBAAmB,QAAQ;GACpD,KAAK,aAAa,KAAK,WAAW;GAGlC,MAAM,kBAAkB,KAAK,SAAS,QAAQ;GAE9C,IADgB,KAAK,qBAAqB;IAAE,GAAG;IAAM;IAAM;GAAY,GAAG,eAChE,GAAG,OAAO,KAAK;GAGzB,MAAM,cAAc,KAAK,QAAQ,OAAO,eAAe;GACvD,MAAM,kBAAkB,KAAK,QAAQ,OAAO,mBAAmB;GAG/D,IAAI,eAAe,gBAAgB,MAAM;IACvC,KAAK,IAAI,6CAA6C;IACtD,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAC5C;GAGA,IAAI,iBAAiB;IACnB,MAAM,oBAAoB,IAAI,KAAK,eAAe;IAClD,IAAI,aAAa,QAAQ,KAAK,kBAAkB,QAAQ,GAAG;KACzD,KAAK,IAAI,sDAAsD;KAC/D,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;IAC5C;GACF;GAGA,MAAM,SAAS,GAAG,iBAAiB,QAAQ;GAG3C,OAAO,GAAG,UAAU,UAAU;IAC5B,KAAK,IAAI,uBAAuB,MAAM,WAAW,OAAO;IACxD,IAAI,CAAC,KAAK,aAAa,MACrB,KAAK,YAAY;KACf,OAAO;KACP,SAAS,MAAM;IACjB,CAAC;GAEL,CAAC;GAGD,OAAO,KAAK,aAAa,KAAK,MAAM;EACtC,SAAS,OAAY;GACnB,KAAK,IAAI,uBAAuB,MAAM,WAAW,OAAO;GACxD,OAAO,KAAK,YAAY;IACtB,OAAO;IACP,SAAS,MAAM;GACjB,CAAC;EACH;CACF;;;;;CAMA,AAAO,WAAW,QAAgB,SAAsC;EACtE,KAAK,IAAI,gBAAgB;EAGzB,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;EAIhF,IADgB,KAAK,qBAAqB,IAChC,GAAG,OAAO,KAAK;EAGzB,OAAO,KAAK,aAAa,KAAK,MAAM;CACtC;;;;;CAMA,MAAa,UACX,OACA,SACA;EACA,KAAK,IAAI,eAAe;EAGxB,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;EAGhF,MAAM,WAAW,MAAM,MAAM,SAAS;EACtC,MAAM,SAAS,SAAS,UAAU;EAGlC,MAAM,SAAS,MAAM,MAAM,SAAS;EAGpC,MAAM,cAAc,KAAK,eAAe,SAAS;EAKjD,IAAI,CAAC,KAAK,MAGR,KAAK,OAAO,IAAI,OAAO,GAFT,SAAS,SAAS,EAEA,GADjB,SAAS,UAAU,EACQ,GAAG,OAAO,OAAO;EAK7D,IADgB,KAAK,qBAAqB;GAAE,GAAG;GAAM;EAAY,CACvD,GAAG,OAAO,KAAK;EAGzB,OAAO,KAAK,aAAa,KAAK,MAAM;CACtC;;;;;;CAOA,AAAO,eAAe,MAA4B,YAAY,SAAU;EACtE,OAAO,KAAK,SAAS,MAAM,SAAS;CACtC;;;;CAKA,AAAO,SAAS,MAAc,UAAmB;EAC/C,OAAO,KAAK,aAAa,MAAM,QAAQ;CACzC;;;;CAKA,MAAa,aAAa,UAAkB,UAAmB;EAE7D,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,OAAO,KAAK,SAAS,EACnB,OAAO,iBACT,CAAC;EAGH,IAAI;GACF,IAAI,CAAC,UACH,WAAW,KAAK,SAAS,QAAQ;GAGnC,KAAK,aAAa,OAChB,uBACA,KAAK,mBAAmB,cAAc,QAAQ,CAChD;GAGA,KAAK,aAAa,OAAO,gBAAgB,0BAA0B;GAEnE,MAAM,SAAS,GAAG,iBAAiB,QAAQ;GAG3C,OAAO,GAAG,UAAU,UAAU;IAC5B,KAAK,IAAI,oCAAoC,MAAM,WAAW,OAAO;IACrE,IAAI,CAAC,KAAK,aAAa,MACrB,KAAK,YAAY;KACf,OAAO;KACP,SAAS,MAAM;IACjB,CAAC;GAEL,CAAC;GAGD,OAAO,KAAK,aAAa,KAAK,MAAM;EACtC,SAAS,OAAY;GACnB,KAAK,IAAI,2BAA2B,MAAM,WAAW,OAAO;GAC5D,OAAO,KAAK,YAAY;IACtB,OAAO;IACP,SAAS,MAAM;GACjB,CAAC;EACH;CACF;;;;CAKA,AAAO,mBAAmB,UAAkB;EAE1C,OADa,KAAK,QAAQ,QAAQ,KAAK;CAEzC;;;;CAKA,AAAO,aAAa,QAA0B;EAC5C,MAAM,EAAE,QAAQ,UAAU,YAAY,WAAWA,WAAO,IAAI,uBAAuB;GACjF,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,QAAQ;EACV,CAAC;EAED,IAAI,MAAM,WAAW,cAAc,GAAG,KAAK,QAAQ,GAAG,qBAAqB;EAE3E,OAAO,KAAK,KACV,GACG,SAAS,OAAO,OAAO,KAAK,WAAW;IACrC,WAAW,MAAM;IACjB,aAAa,MAAM;EACtB,EAAE,EACJ,GACA,MACF;CACF;AACF"}
+{"version":3,"file":"response.mjs","names":[],"sources":["../../../../../../../core/src/http/response.ts"],"sourcesContent":["import type { CookieSerializeOptions } from \"@fastify/cookie\";\r\nimport config from \"@mongez/config\";\r\nimport type { EventSubscription } from \"@mongez/events\";\r\nimport events from \"@mongez/events\";\r\nimport { fileExistsAsync } from \"@warlock.js/fs\";\r\nimport { isIterable, isPlainObject, isScalar } from \"@mongez/supportive-is\";\r\nimport type { LogLevel } from \"@warlock.js/logger\";\r\nimport { log } from \"@warlock.js/logger\";\r\nimport type { ValidationResult } from \"@warlock.js/seal\";\r\nimport type { FastifyReply } from \"fastify\";\r\nimport fs from \"fs\";\r\nimport mime from \"mime\";\r\nimport path from \"path\";\r\nimport type React from \"react\";\r\nimport { type ReactNode } from \"react\";\r\nimport { Application } from \"../application/application\";\r\nimport type { Route } from \"../router\";\r\nimport { StorageFile } from \"../storage\";\r\nimport { renderReact } from \"./../react\";\r\nimport type { Request } from \"./request\";\r\nimport type { ResponseEvent, ResponseSSEController, ResponseStreamController } from \"./types\";\r\n\r\ntype CookieValue = string | number | boolean | Record<string, any> | Array<any>;\r\n\r\n/**\r\n * Cookie options accepted by `response.cookie()`.\r\n *\r\n * Extends Fastify's `CookieSerializeOptions` with `raw` — set to `true` to\r\n * skip the default `JSON.stringify` of the value and write it as-is. Use for\r\n * plain-string cookies (session tokens, opaque IDs) that shouldn't be JSON-quoted.\r\n *\r\n * When `raw: true`, non-string values are coerced via `String(value)`. The\r\n * read side (`request.cookie(name)`) tries `JSON.parse` first and falls back\r\n * to the raw string on parse failure, so round-tripping a raw string cookie\r\n * Just Works.\r\n */\r\nexport type CookieOptions = CookieSerializeOptions & {\r\n  /**\r\n   * Skip JSON.stringify and write the value as-is.\r\n   *\r\n   * @default false\r\n   */\r\n  raw?: boolean;\r\n};\r\n\r\nexport enum ResponseStatus {\r\n  OK = 200,\r\n  CREATED = 201,\r\n  ACCEPTED = 202,\r\n  MOVED_PERMANENTLY = 301,\r\n  FOUND = 302,\r\n  SEE_OTHER = 303,\r\n  NOT_MODIFIED = 304,\r\n  TEMPORARY_REDIRECT = 307,\r\n  PERMANENT_REDIRECT = 308,\r\n  NO_CONTENT = 204,\r\n  BAD_REQUEST = 400,\r\n  UNAUTHORIZED = 401,\r\n  FORBIDDEN = 403,\r\n  NOT_FOUND = 404,\r\n  METHOD_NOT_ALLOWED = 405,\r\n  CONFLICT = 409,\r\n  TOO_MANY_REQUESTS = 429,\r\n  INTERNAL_SERVER_ERROR = 500,\r\n  SERVICE_UNAVAILABLE = 503,\r\n}\r\n\r\n/**\r\n * Options for sending files\r\n */\r\nexport type SendFileOptions = {\r\n  cacheTime?: number;\r\n  immutable?: boolean;\r\n  inline?: boolean;\r\n  filename?: string;\r\n};\r\n\r\n/**\r\n * Options for sending buffers\r\n */\r\nexport type SendBufferOptions = SendFileOptions & {\r\n  contentType?: string;\r\n  etag?: string;\r\n};\r\n\r\n/**\r\n * The cookie flags every response cookie gets unless something overrides them.\r\n *\r\n * Computed per call rather than hoisted to a constant because `secure` depends\r\n * on the environment, which is not known at module-evaluation time.\r\n *\r\n * `secure` is relaxed in development only: a `Secure` cookie is dropped by the\r\n * browser over plain http, which would silently break every local login. It\r\n * stays on everywhere else, including test and staging.\r\n */\r\nfunction secureCookieDefaults(): CookieSerializeOptions {\r\n  return {\r\n    httpOnly: true,\r\n    sameSite: \"lax\",\r\n    secure: !Application.isDevelopment,\r\n  };\r\n}\r\n\r\nexport class Response {\r\n  /**\r\n   * Current route\r\n   */\r\n  protected route!: Route;\r\n\r\n  /**\r\n   * Underlying Fastify reply — a public escape hatch to capabilities the\r\n   * framework's high-level helpers don't yet cover.\r\n   *\r\n   * **Prefer framework methods first**: `response.send()`, `response.header()`,\r\n   * `response.cookie()`, `response.sendFile()`, `response.stream()`, etc.\r\n   * They wire status codes, content-type detection, the event lifecycle, and\r\n   * the cache-pattern replay path correctly.\r\n   *\r\n   * **Reach for `baseResponse` only** when the framework genuinely lacks a\r\n   * helper for what you need — and when you do, file an issue so we can add\r\n   * it. Streaming and SSE are the precedent here: they bypass `send()`\r\n   * deliberately because the framework didn't ship chunked-write support\r\n   * natively at the time. Reaching here for non-streaming work means a\r\n   * missing helper, not an answer.\r\n   */\r\n  public baseResponse!: FastifyReply;\r\n\r\n  /**\r\n   * Current status code\r\n   */\r\n  protected currentStatusCode = 200;\r\n\r\n  /**\r\n   * Current response body\r\n   */\r\n  protected currentBody: any;\r\n\r\n  /**\r\n   * Request object\r\n   */\r\n  public request!: Request;\r\n\r\n  /**\r\n   * Internal events related to this particular response object\r\n   */\r\n  protected events = new Map<string, any[]>();\r\n\r\n  /**\r\n   * Parsed body\r\n   * This will return the parsed body of the response\r\n   * Please note that if this property is called before the response is sent, it will return undefined\r\n   */\r\n  public parsedBody: any;\r\n\r\n  /**\r\n   * Get raw response\r\n   */\r\n  public get raw() {\r\n    return this.baseResponse.raw;\r\n  }\r\n\r\n  /**\r\n   * Get Current response body\r\n   */\r\n  public get body() {\r\n    return this.currentBody;\r\n  }\r\n\r\n  /**\r\n   * Set response body\r\n   */\r\n  public set body(body: any) {\r\n    this.currentBody = body;\r\n  }\r\n\r\n  /**\r\n   * Add event on sending response\r\n   */\r\n  public onSending(callback: any) {\r\n    this.events.set(\"sending\", [...(this.events.get(\"sending\") || []), callback]);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Add event on sent response\r\n   */\r\n  public onSent(callback: any) {\r\n    this.events.set(\"sent\", [...(this.events.get(\"sent\") || []), callback]);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the Fastify response object\r\n   */\r\n  public setResponse(response: FastifyReply) {\r\n    this.baseResponse = response;\r\n\r\n    // Listen to the 'finish' event to track when response is fully sent\r\n    // This works for all response types: JSON, streams, buffers, files, etc.\r\n    this.baseResponse.raw.once(\"finish\", () => {\r\n      this.request.endTime = Date.now();\r\n    });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Reset the response state\r\n   */\r\n  public reset() {\r\n    this.route = {} as Route;\r\n    this.currentBody = null;\r\n    this.currentStatusCode = 200;\r\n  }\r\n\r\n  /**\r\n   * Set current route\r\n   */\r\n  public setRoute(route: Route) {\r\n    this.route = route;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the content type\r\n   */\r\n  public get contentType() {\r\n    return this.baseResponse.getHeader(\"Content-Type\");\r\n  }\r\n\r\n  /**\r\n   * Set the content type\r\n   */\r\n  public setContentType(contentType: string) {\r\n    this.baseResponse.header(\"Content-Type\", contentType);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the status code\r\n   */\r\n  public get statusCode(): number {\r\n    return this.currentStatusCode ?? this.baseResponse.statusCode;\r\n  }\r\n\r\n  /**\r\n   * Check if response status is ok\r\n   */\r\n  public get isOk() {\r\n    return this.currentStatusCode >= 200 && this.currentStatusCode < 300;\r\n  }\r\n\r\n  /**\r\n   * Check if the response has been sent\r\n   */\r\n  public get sent() {\r\n    return this.baseResponse.sent;\r\n  }\r\n\r\n  /**\r\n   * Add a listener to the response event\r\n   */\r\n  public static on(\r\n    event: ResponseEvent,\r\n    listener: (response: Response) => void,\r\n  ): EventSubscription {\r\n    return events.subscribe(`response.${event}`, listener);\r\n  }\r\n\r\n  /**\r\n   * Trigger the response event\r\n   */\r\n  protected static async trigger(event: ResponseEvent, ...args: any[]) {\r\n    // make a timeout to make sure the request events is executed first\r\n    return new Promise((resolve) => {\r\n      setTimeout(async () => {\r\n        await events.triggerAllAsync(`response.${event}`, ...args);\r\n        resolve(true);\r\n      }, 0);\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Parse body\r\n   */\r\n  protected async parseBody() {\r\n    return await this.parse(this.currentBody);\r\n  }\r\n\r\n  /**\r\n   * Parse the given value\r\n   */\r\n  public async parse(value: any): Promise<any> {\r\n    // if it is a falsy value, return it\r\n    if (!value || isScalar(value)) return value;\r\n\r\n    // if it has a `toJSON` method, call it and await the result then return it\r\n    if (value.toJSON) {\r\n      value.request = this.request;\r\n      return await value.toJSON();\r\n    }\r\n\r\n    // if it is iterable, an array or array-like object then parse each item\r\n    if (isIterable(value)) {\r\n      const values = Array.from(value);\r\n\r\n      return Promise.all(\r\n        values.map(async (item: any) => {\r\n          return await this.parse(item);\r\n        }),\r\n      );\r\n    }\r\n\r\n    // if not plain object, then return it\r\n    if (!isPlainObject(value)) {\r\n      return value;\r\n    }\r\n\r\n    // loop over the object and check if the value and call `parse` on it\r\n    for (const key in value) {\r\n      const subValue = value[key];\r\n\r\n      value[key] = await this.parse(subValue);\r\n    }\r\n\r\n    return value;\r\n  }\r\n\r\n  /**\r\n   * Make a log message\r\n   */\r\n  public log(message: string, level: LogLevel = \"info\") {\r\n    if (!config.get(\"http.log\")) return;\r\n\r\n    log.log({\r\n      module: \"response\",\r\n      action: this.route.method + \" \" + this.route.path.replace(\"/*\", \"\") + `:${this.request.id}`,\r\n      message,\r\n      type: level,\r\n      context: {\r\n        request: this.request,\r\n        response: this,\r\n      },\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Check if returning response is json\r\n   */\r\n  public get isJson() {\r\n    return this.getHeader(\"Content-Type\") === \"application/json\";\r\n  }\r\n\r\n  /**\r\n   * Send the response\r\n   * @param data - Response data\r\n   * @param statusCode - HTTP status code\r\n   * @param triggerEvents - Whether to trigger response events (default: true)\r\n   */\r\n  public async send(data?: any, statusCode?: number, triggerEvents = true): Promise<Response> {\r\n    // Defensive guard against double-send. The underlying Fastify reply silently\r\n    // ignores subsequent sends once `sent === true`, which has historically hidden\r\n    // middleware bugs (cache-pattern replay paths that returned `baseResponse.send`\r\n    // ended up re-entering `Response.send` with the FastifyReply as the body).\r\n    // Surfacing the misuse via `error`-level log makes the bug loud without\r\n    // crashing production traffic.\r\n    if (this.baseResponse.sent) {\r\n      log.error(\r\n        \"response\",\r\n        \"send\",\r\n        `send() called on already-sent response (request:${this.request?.id ?? \"unknown\"}) — likely a middleware bug`,\r\n      );\r\n\r\n      return this;\r\n    }\r\n\r\n    if (statusCode) {\r\n      this.currentStatusCode = statusCode;\r\n    }\r\n\r\n    if (data === this) return this;\r\n\r\n    if (data) {\r\n      this.currentBody = data;\r\n    }\r\n\r\n    if (!this.currentStatusCode) {\r\n      this.currentStatusCode = 200;\r\n    }\r\n\r\n    this.log(\"Sending response\");\r\n    // Auto-pick `application/json` only when no content-type was set by the caller.\r\n    // This preserves explicit overrides (e.g. `application/vnd.api+json` from a\r\n    // cache replay, `application/problem+json` from an RFC 7807 error response)\r\n    // while keeping the convenience default for the common object-body path.\r\n    if (Array.isArray(this.currentBody) || isPlainObject(this.currentBody)) {\r\n      if (!this.baseResponse.getHeader(\"Content-Type\")) {\r\n        this.setContentType(\"application/json\");\r\n      }\r\n    }\r\n\r\n    if (triggerEvents) {\r\n      await Response.trigger(\"sending\", this);\r\n\r\n      for (const callback of this.events.get(\"sending\") || []) {\r\n        await callback(this);\r\n      }\r\n\r\n      if (this.isJson) {\r\n        await Response.trigger(\"sendingJson\", this);\r\n        for (const callback of this.events.get(\"sendingJson\") || []) {\r\n          await callback(this);\r\n        }\r\n\r\n        if (this.isOk) {\r\n          await Response.trigger(\"sendingSuccessJson\", this);\r\n          for (const callback of this.events.get(\"sendingSuccessJson\") || []) {\r\n            await callback(this);\r\n          }\r\n        }\r\n      }\r\n    }\r\n\r\n    // parse the body and make sure it is transformed to sync data instead of async data\r\n    if (typeof this.currentBody !== \"string\") {\r\n      this.parsedBody = await this.parseBody();\r\n    } else {\r\n      this.parsedBody = data;\r\n    }\r\n\r\n    // Set the status first\r\n    this.baseResponse.status(this.currentStatusCode);\r\n\r\n    // Then send the response with the parsed body\r\n    await this.baseResponse.send(this.parsedBody);\r\n\r\n    this.log(\"Response sent\");\r\n\r\n    if (triggerEvents) {\r\n      // trigger the sent event\r\n      Response.trigger(\"sent\", this);\r\n\r\n      for (const callback of this.events.get(\"sent\") || []) {\r\n        callback(this);\r\n      }\r\n\r\n      // trigger the success event if the status code is 2xx\r\n      if (this.currentStatusCode >= 200 && this.currentStatusCode < 300) {\r\n        Response.trigger(\"success\", this);\r\n      }\r\n\r\n      // trigger the successCreate event if the status code is 201\r\n      if (this.currentStatusCode === 201) {\r\n        Response.trigger(\"successCreate\", this);\r\n      }\r\n\r\n      // trigger the badRequest event if the status code is 400\r\n      if (this.currentStatusCode === 400) {\r\n        Response.trigger(\"badRequest\", this);\r\n      }\r\n\r\n      // trigger the unauthorized event if the status code is 401\r\n      if (this.currentStatusCode === 401) {\r\n        Response.trigger(\"unauthorized\", this);\r\n      }\r\n\r\n      // trigger the forbidden event if the status code is 403\r\n      if (this.currentStatusCode === 403) {\r\n        Response.trigger(\"forbidden\", this);\r\n      }\r\n\r\n      // trigger the notFound event if the status code is 404\r\n      if (this.currentStatusCode === 404) {\r\n        Response.trigger(\"notFound\", this);\r\n      }\r\n\r\n      // trigger the content too large event if the status code is 413\r\n      if (this.currentStatusCode === 413) {\r\n        Response.trigger(\"contentTooLarge\", this);\r\n      }\r\n\r\n      // trigger the throttled event if the status code is 429\r\n      if (this.currentStatusCode === 429) {\r\n        Response.trigger(\"throttled\", this);\r\n      }\r\n\r\n      // trigger the serverError event if the status code is 500\r\n      if (this.currentStatusCode === 500) {\r\n        Response.trigger(\"serverError\", this);\r\n      }\r\n\r\n      // trigger the error event if the status code is 4xx or 5xx\r\n      if (this.currentStatusCode >= 400) {\r\n        Response.trigger(\"error\", this);\r\n      }\r\n    }\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Replay a previously-captured response shape — used by cache-pattern\r\n   * middlewares (idempotency, response cache) to send a cached response\r\n   * without re-running the controller.\r\n   *\r\n   * Preserves the cached status code, content-type, and any extra headers,\r\n   * then sends the body through the standard `send()` pipeline so the full\r\n   * event lifecycle still fires (`sent`, `success`, status-specific events).\r\n   * That keeps cross-cutting observers (logger, metrics, audit) consistent\r\n   * between fresh and replayed responses.\r\n   *\r\n   * @example\r\n   * // Inside a cache-pattern middleware on HIT:\r\n   * return response.header(\"X-Cache\", \"HIT\").replay({\r\n   *   status: cached.status,\r\n   *   body: cached.body,\r\n   *   contentType: cached.contentType,\r\n   * });\r\n   */\r\n  public replay(cached: {\r\n    status: number;\r\n    body: unknown;\r\n    contentType?: string;\r\n    headers?: Record<string, string>;\r\n  }): Promise<Response> {\r\n    this.setStatusCode(cached.status);\r\n\r\n    if (cached.contentType) {\r\n      this.setContentType(cached.contentType);\r\n    }\r\n\r\n    if (cached.headers) {\r\n      for (const [name, value] of Object.entries(cached.headers)) {\r\n        this.header(name, value);\r\n      }\r\n    }\r\n\r\n    return this.send(cached.body);\r\n  }\r\n\r\n  /**\r\n   * Send html response\r\n   */\r\n  public html(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/html\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Render the given react component\r\n   */\r\n  public render(element: React.ReactElement | React.ComponentType, status = 200) {\r\n    return this.setStatusCode(status).html(renderReact(element));\r\n  }\r\n\r\n  /**\r\n   * Send xml response\r\n   */\r\n  public xml(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/xml\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Send plain text response\r\n   */\r\n  public text(data: string, statusCode?: number) {\r\n    return this.setContentType(\"text/plain\").send(data, statusCode);\r\n  }\r\n\r\n  /**\r\n   * Create a streaming response for progressive/chunked data sending\r\n   *\r\n   * This method allows you to send data in chunks and control when the response ends.\r\n   * Perfect for Server-Sent Events (SSE), progressive rendering, or streaming large responses.\r\n   *\r\n   * @example\r\n   * ```ts\r\n   * const stream = response.stream(\"text/html\");\r\n   * stream.send(\"<html><body>\");\r\n   * stream.send(\"<h1>Hello</h1>\");\r\n   * stream.render(<MyComponent />);\r\n   * stream.send(\"</body></html>\");\r\n   * stream.end();\r\n   * ```\r\n   *\r\n   * @param contentType - The content type for the stream (default: \"text/plain\")\r\n   * @returns Stream controller with send(), render(), and end() methods\r\n   */\r\n  public stream(contentType = \"text/plain\"): ResponseStreamController {\r\n    // Set headers using the response API\r\n    this.setContentType(contentType);\r\n    this.header(\"Transfer-Encoding\", \"chunked\");\r\n    this.header(\"Cache-Control\", \"no-cache\");\r\n    this.header(\"Connection\", \"keep-alive\");\r\n    this.header(\"X-Content-Type-Options\", \"nosniff\");\r\n\r\n    // Trigger sending events\r\n    Response.trigger(\"sending\", this);\r\n    for (const callback of this.events.get(\"sending\") || []) {\r\n      callback(this);\r\n    }\r\n\r\n    this.log(\"Starting stream\");\r\n\r\n    // Track stream state\r\n    let isEnded = false;\r\n    const chunks: any[] = [];\r\n\r\n    // Write headers to start the stream\r\n    // Note: We use raw here because we need chunked encoding control\r\n    // This is the only valid use case for bypassing Fastify's abstraction\r\n    this.baseResponse.raw.writeHead(this.statusCode, this.getHeaders() as any);\r\n\r\n    return {\r\n      /**\r\n       * Send a chunk of data to the client\r\n       * @param data - Data to send (string, Buffer, or any serializable data)\r\n       */\r\n      send: (data: any) => {\r\n        if (isEnded) {\r\n          throw new Error(\"Cannot send data: stream has already ended\");\r\n        }\r\n\r\n        this.baseResponse.raw.write(data);\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * Render a React component and send it as a chunk\r\n       * @param element - React element or component to render\r\n       */\r\n      render: (element: ReactNode) => {\r\n        if (isEnded) {\r\n          throw new Error(\"Cannot render: stream has already ended\");\r\n        }\r\n\r\n        const html = renderReact(element);\r\n        chunks.push(html);\r\n        this.baseResponse.raw.write(html);\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * End the stream and trigger completion events\r\n       */\r\n      end: () => {\r\n        if (isEnded) {\r\n          return this;\r\n        }\r\n\r\n        isEnded = true;\r\n\r\n        // Store the streamed content for logging/debugging\r\n        this.currentBody = chunks;\r\n        this.parsedBody = chunks;\r\n\r\n        // End the response\r\n        this.baseResponse.raw.end();\r\n\r\n        this.log(\"Stream ended\");\r\n\r\n        // Trigger sent events\r\n        Response.trigger(\"sent\", this);\r\n        for (const callback of this.events.get(\"sent\") || []) {\r\n          callback(this);\r\n        }\r\n\r\n        // Trigger success event if status is 2xx\r\n        if (this.isOk) {\r\n          Response.trigger(\"success\", this);\r\n        }\r\n\r\n        // Trigger status-specific events\r\n        if (this.currentStatusCode === 201) {\r\n          Response.trigger(\"successCreate\", this);\r\n        }\r\n\r\n        return this;\r\n      },\r\n\r\n      /**\r\n       * Check if the stream has ended\r\n       */\r\n      get ended() {\r\n        return isEnded;\r\n      },\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Create a Server-Sent Events (SSE) stream\r\n   *\r\n   * SSE is a standard for pushing real-time updates from server to client.\r\n   * Perfect for live notifications, progress updates, or real-time data feeds.\r\n   *\r\n   * @example\r\n   * ```ts\r\n   * const sse = response.sse();\r\n   *\r\n   * // Send events\r\n   * sse.send(\"message\", { text: \"Hello!\" });\r\n   * sse.send(\"notification\", { type: \"info\", message: \"Update available\" }, \"msg-123\");\r\n   *\r\n   * // Keep connection alive\r\n   * const keepAlive = setInterval(() => sse.comment(\"ping\"), 30000);\r\n   *\r\n   * // Clean up when done\r\n   * clearInterval(keepAlive);\r\n   * sse.end();\r\n   * ```\r\n   *\r\n   * @returns SSE controller with send(), comment(), and end() methods\r\n   */\r\n  public sse(): ResponseSSEController {\r\n    // Set SSE-specific headers\r\n    this.setContentType(\"text/event-stream\");\r\n    this.header(\"Cache-Control\", \"no-cache, no-store, must-revalidate\");\r\n    this.header(\"Connection\", \"keep-alive\");\r\n    this.header(\"X-Accel-Buffering\", \"no\"); // Disable nginx buffering\r\n\r\n    // Trigger sending events\r\n    Response.trigger(\"sending\", this);\r\n    for (const callback of this.events.get(\"sending\") || []) {\r\n      callback(this);\r\n    }\r\n\r\n    this.log(\"Starting SSE stream\");\r\n\r\n    // Track stream state\r\n    let isEnded = false;\r\n    const events: any[] = [];\r\n    const disconnectHandlers: Array<() => void> = [];\r\n\r\n    // Write headers to start the stream\r\n    this.baseResponse.raw.writeHead(this.statusCode, this.getHeaders() as any);\r\n\r\n    // Detect client disconnect — set isEnded silently and invoke cleanup handlers.\r\n    // Without this, background jobs keep writing to a dead socket after the client drops.\r\n    this.baseResponse.raw.on(\"close\", () => {\r\n      if (!isEnded) {\r\n        isEnded = true;\r\n        this.log(\"SSE client disconnected\");\r\n        for (const handler of disconnectHandlers) {\r\n          handler();\r\n        }\r\n      }\r\n    });\r\n\r\n    const controller: ResponseSSEController = {\r\n      /**\r\n       * Send an SSE event\r\n       * @param event - Event name (e.g., \"message\", \"chunk\", \"done\")\r\n       * @param data - Event data (will be JSON stringified)\r\n       * @param id - Optional event ID for client-side Last-Event-ID tracking (reconnect support)\r\n       */\r\n      send: (event: string, data: any, id?: string): ResponseSSEController => {\r\n        // Silent no-op after disconnect — background jobs should not crash when\r\n        // the client drops mid-stream. The onDisconnect handler handles cleanup.\r\n        if (isEnded) return controller;\r\n\r\n        let message = \"\";\r\n        if (id) message += `id: ${id}\\n`;\r\n        message += `event: ${event}\\n`;\r\n        message += `data: ${JSON.stringify(data)}\\n\\n`;\r\n\r\n        events.push({ event, data, id });\r\n        this.baseResponse.raw.write(message);\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Send a comment (keeps connection alive, invisible to client)\r\n       * Useful for preventing timeout on long-lived connections\r\n       * @param text - Comment text\r\n       */\r\n      comment: (text: string): ResponseSSEController => {\r\n        // Silent no-op after disconnect\r\n        if (isEnded) return controller;\r\n\r\n        this.baseResponse.raw.write(`: ${text}\\n\\n`);\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * End the SSE stream and trigger completion events\r\n       */\r\n      end: (): ResponseSSEController => {\r\n        if (isEnded) return controller;\r\n\r\n        isEnded = true;\r\n\r\n        // Store the events for logging/debugging\r\n        this.currentBody = events;\r\n        this.parsedBody = events;\r\n\r\n        // End the response\r\n        this.baseResponse.raw.end();\r\n\r\n        this.log(\"SSE stream ended\");\r\n\r\n        // Trigger sent events\r\n        Response.trigger(\"sent\", this);\r\n        for (const callback of this.events.get(\"sent\") || []) {\r\n          callback(this);\r\n        }\r\n\r\n        // Trigger success event if status is 2xx\r\n        if (this.isOk) {\r\n          Response.trigger(\"success\", this);\r\n        }\r\n\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Register a handler to be called when the client disconnects.\r\n       * Use this to clean up EventEmitter listeners, cancel background jobs, etc.\r\n       *\r\n       * @example\r\n       * ```ts\r\n       * const sse = response.sse();\r\n       * const listener = (chunk) => sse.send(\"chunk\", { chunk });\r\n       * eventBus.on(aiMessageId, listener);\r\n       * sse.onDisconnect(() => eventBus.off(aiMessageId, listener));\r\n       * ```\r\n       */\r\n      onDisconnect: (handler: () => void): ResponseSSEController => {\r\n        disconnectHandlers.push(handler);\r\n        return controller;\r\n      },\r\n\r\n      /**\r\n       * Check if the stream has ended (either via end() or client disconnect)\r\n       */\r\n      get ended() {\r\n        return isEnded;\r\n      },\r\n    };\r\n\r\n    return controller;\r\n  }\r\n\r\n  /**\r\n   * Set the status code\r\n   */\r\n  public setStatusCode(statusCode: number) {\r\n    this.currentStatusCode = statusCode;\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Redirect the user to another route\r\n   */\r\n  public redirect(url: string, statusCode = 302) {\r\n    this.baseResponse.redirect(url, statusCode);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Permanent redirect\r\n   */\r\n  public permanentRedirect(url: string) {\r\n    this.baseResponse.redirect(url, 301);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get the response time\r\n   */\r\n  public getResponseTime() {\r\n    return this.baseResponse.elapsedTime;\r\n  }\r\n\r\n  /**\r\n   * Remove a specific header\r\n   */\r\n  public removeHeader(key: string) {\r\n    this.baseResponse.removeHeader(key);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Get a specific header\r\n   */\r\n  public getHeader(key: string) {\r\n    return this.baseResponse.getHeader(key);\r\n  }\r\n\r\n  /**\r\n   * Get the response headers\r\n   */\r\n  public getHeaders() {\r\n    return this.baseResponse.getHeaders();\r\n  }\r\n\r\n  /**\r\n   * Set multiple headers\r\n   */\r\n  public headers(headers: Record<string, string>) {\r\n    this.baseResponse.headers(headers);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set the response header\r\n   */\r\n  public header(key: string, value: any) {\r\n    this.baseResponse.header(key, value);\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set a cookie on the response.\r\n   *\r\n   * Values are JSON-stringified by default so structured cookies round-trip\r\n   * cleanly with `request.cookie(name)`. Pass `{ raw: true }` to skip the\r\n   * JSON wrapping for plain-string cookies (session tokens, opaque IDs).\r\n   *\r\n   * **Secure by default.** `httpOnly: true`, `sameSite: \"lax\"`, and — outside\r\n   * development — `secure: true` are applied unless you override them. These\r\n   * are the flags whose absence never fails a test and is fatal in production:\r\n   * without `httpOnly` any injected script can read the cookie, without\r\n   * `secure` it travels in cleartext, without `sameSite` it rides along on\r\n   * cross-site requests. Opting out is explicit, per call or via\r\n   * `http.cookies.options`.\r\n   *\r\n   * Precedence, lowest to highest: framework defaults → `http.cookies.options`\r\n   * → the per-call `options` argument.\r\n   *\r\n   * @example\r\n   * // JSON-wrapped (default) — round-trips with request.cookie()\r\n   * response.cookie(\"prefs\", { theme: \"dark\" }, { maxAge: 3600 });\r\n   *\r\n   * @example\r\n   * // Raw string — no JSON quoting; useful for tokens / opaque IDs\r\n   * response.cookie(\"session\", \"abc.def.ghi\", { raw: true });\r\n   *\r\n   * @example\r\n   * // Deliberately readable by client-side JS\r\n   * response.cookie(\"theme\", \"dark\", { httpOnly: false });\r\n   */\r\n  public cookie(name: string, value: CookieValue, options: CookieOptions = {}) {\r\n    const { raw, ...cookieOptions } = options;\r\n    const defaultOptions = config.get(\"http.cookies.options\", {});\r\n    const serializedValue = raw ? String(value) : JSON.stringify(value);\r\n\r\n    this.baseResponse.setCookie(name, serializedValue, {\r\n      ...secureCookieDefaults(),\r\n      ...defaultOptions,\r\n      ...cookieOptions,\r\n    });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Clear a cookie from the response\r\n   *\r\n   * @example\r\n   * response.clearCookie('token', { path: '/' });\r\n   */\r\n  public clearCookie(name: string, options?: CookieSerializeOptions) {\r\n    const defaultOptions = config.get(\"http.cookies.options\", {});\r\n    this.baseResponse.clearCookie(name, { ...defaultOptions, ...options });\r\n\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Alias to header method\r\n   */\r\n  public setHeader(key: string, value: any) {\r\n    return this.header(key, value);\r\n  }\r\n\r\n  /**\r\n   * Send an error response with status code 500\r\n   */\r\n  public serverError(data: any) {\r\n    return this.send(data, 500);\r\n  }\r\n\r\n  /**\r\n   * Send a forbidden response with status code 403\r\n   */\r\n  public forbidden(\r\n    data: any = {\r\n      error: \"You are not allowed to access this resource, FORBIDDEN\",\r\n    },\r\n  ) {\r\n    return this.send(data, 403);\r\n  }\r\n\r\n  /**\r\n   * Send a service unavailable response with status code 503\r\n   */\r\n  public serviceUnavailable(data: any) {\r\n    return this.send(data, 503);\r\n  }\r\n\r\n  /**\r\n   * Send an unauthorized response with status code 401\r\n   */\r\n  public unauthorized(\r\n    data: any = {\r\n      error: \"unauthorized\",\r\n    },\r\n  ) {\r\n    return this.send(data, 401);\r\n  }\r\n\r\n  /**\r\n   * Send a not found response with status code 404\r\n   */\r\n  public notFound(\r\n    data: any = {\r\n      error: \"notFound\",\r\n    },\r\n  ) {\r\n    return this.send(data, 404);\r\n  }\r\n\r\n  /**\r\n   * Send a bad request response with status code 400\r\n   */\r\n  public badRequest(data: any) {\r\n    return this.send(data, 400);\r\n  }\r\n\r\n  /**\r\n   * Send a content too large response with status code 413\r\n   */\r\n  public contentTooLarge(data: any) {\r\n    return this.send(data, 413);\r\n  }\r\n\r\n  /**\r\n   * Send a success response with status code 201\r\n   */\r\n  public successCreate(data: any) {\r\n    return this.send(data, 201);\r\n  }\r\n\r\n  /**\r\n   * Send a success response\r\n   */\r\n  public success(data: any = { success: true }) {\r\n    return this.send(data);\r\n  }\r\n\r\n  /**\r\n   * Send a no content response with status code 204\r\n   */\r\n  public noContent() {\r\n    return this.baseResponse.status(204).send();\r\n  }\r\n\r\n  /**\r\n   * Send an accepted response with status code 202\r\n   * Used for async operations that have been accepted but not yet processed\r\n   */\r\n  public accepted(data: any = { message: \"Request accepted for processing\" }) {\r\n    return this.send(data, 202);\r\n  }\r\n\r\n  /**\r\n   * Send a conflict response with status code 409\r\n   */\r\n  public conflict(data: any = { error: \"Resource conflict\" }) {\r\n    return this.send(data, 409);\r\n  }\r\n\r\n  /**\r\n   * Send a too many requests response with status code 429\r\n   */\r\n  public tooManyRequests(data: any) {\r\n    return this.send(data, 429);\r\n  }\r\n\r\n  /**\r\n   * Send an unprocessable entity response with status code 422\r\n   * Used for semantic validation errors\r\n   */\r\n  public unprocessableEntity(data: any) {\r\n    return this.send(data, 422);\r\n  }\r\n\r\n  /**\r\n   * Apply response options (cache, disposition, etag)\r\n   * Shared helper for sendFile and sendBuffer\r\n   */\r\n  /**\r\n   * Build an RFC 6266–safe `Content-Disposition` value for a file name.\r\n   *\r\n   * HTTP header values must be ISO-8859-1; Node's `setHeader` throws\r\n   * `ERR_INVALID_CHAR` on any other byte, so a raw `filename=\"تقرير.pdf\"` would\r\n   * crash the response (a 500 the moment the name is non-ASCII). RFC 6266 solves\r\n   * this with two parameters emitted together:\r\n   *   - `filename=\"<ascii>\"`     — sanitised ASCII fallback for legacy clients\r\n   *   - `filename*=UTF-8''<pct>` — RFC 5987 ext-value; modern browsers restore\r\n   *                                the real (e.g. Arabic) name.\r\n   */\r\n  private contentDisposition(type: \"inline\" | \"attachment\", rawName: string): string {\r\n    // Strip CR/LF first so a crafted file name can never inject extra headers.\r\n    const name = (rawName || \"file\").replace(/[\\r\\n]/g, \"\");\r\n\r\n    // ASCII fallback: replace quote/backslash + every non-printable-ASCII byte\r\n    // (covers all multibyte characters) so the quoted-string is always legal.\r\n    const ascii =\r\n      name\r\n        .replace(/[\"\\\\]/g, \"_\")\r\n        .replace(/[^\\x20-\\x7E]/g, \"_\")\r\n        .trim() || \"file\";\r\n\r\n    // Pure-ASCII name → the quoted form is enough; no ext-value needed.\r\n    if (!/[^\\x20-\\x7E]/.test(name)) {\r\n      return `${type}; filename=\"${ascii}\"`;\r\n    }\r\n\r\n    // RFC 5987 ext-value. `encodeURIComponent` leaves ' ( ) * unescaped, but they\r\n    // are not valid `attr-char`, so percent-encode those too.\r\n    const encoded = encodeURIComponent(name).replace(\r\n      /['()*]/g,\r\n      (char) => \"%\" + char.charCodeAt(0).toString(16).toUpperCase(),\r\n    );\r\n\r\n    return `${type}; filename=\"${ascii}\"; filename*=UTF-8''${encoded}`;\r\n  }\r\n\r\n  private applyResponseOptions(options: SendBufferOptions, defaultFilename?: string): boolean {\r\n    // Set content type if provided\r\n    if (options.contentType) {\r\n      this.baseResponse.type(options.contentType);\r\n    }\r\n\r\n    // Set cache headers if specified\r\n    if (options.cacheTime) {\r\n      const cacheControl = options.immutable\r\n        ? `public, max-age=${options.cacheTime}, immutable`\r\n        : `public, max-age=${options.cacheTime}`;\r\n      this.header(\"Cache-Control\", cacheControl);\r\n      this.header(\"Expires\", new Date(Date.now() + options.cacheTime * 1000).toUTCString());\r\n    }\r\n\r\n    // Set ETag if provided (for conditional requests)\r\n    if (options.etag) {\r\n      this.header(\"ETag\", options.etag);\r\n\r\n      // Check If-None-Match for conditional request\r\n      const ifNoneMatch = this.request.header(\"if-none-match\");\r\n      if (ifNoneMatch && ifNoneMatch === options.etag) {\r\n        this.log(\"Content not modified (ETag match), sending 304\");\r\n        this.baseResponse.status(304).send();\r\n        return true; // Indicates 304 was sent\r\n      }\r\n    }\r\n\r\n    // Set Content-Disposition if inline or filename is specified\r\n    if (options.inline !== undefined || options.filename) {\r\n      const disposition = options.inline ? \"inline\" : \"attachment\";\r\n      const filename = options.filename || defaultFilename || \"file\";\r\n      this.header(\"Content-Disposition\", this.contentDisposition(disposition, filename));\r\n    }\r\n\r\n    return false; // No 304 sent\r\n  }\r\n\r\n  /**\r\n   * Send a file as a response\r\n   */\r\n  public async sendFile(filePath: string | StorageFile, options?: number | SendFileOptions) {\r\n    if (filePath instanceof StorageFile) {\r\n      filePath = filePath.absolutePath!;\r\n    }\r\n\r\n    this.log(`Sending file: ${filePath}`);\r\n\r\n    // Check if file exists first\r\n    if (!(await fileExistsAsync(filePath))) {\r\n      return this.notFound({\r\n        error: \"File Not Found\",\r\n      });\r\n    }\r\n\r\n    try {\r\n      // Normalize options to object format\r\n      const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n      // Get file stats for ETag and Last-Modified\r\n      const stats = await fs.promises.stat(filePath);\r\n      const lastModified = stats.mtime;\r\n\r\n      // Generate ETag based on file size and modification time\r\n      const etag = `\"${stats.size}-${stats.mtime.getTime()}\"`;\r\n\r\n      // Set Last-Modified header\r\n      this.header(\"Last-Modified\", lastModified.toUTCString());\r\n      this.header(\"ETag\", etag);\r\n\r\n      // Set content type\r\n      const contentType = this.getFileContentType(filePath);\r\n      this.baseResponse.type(contentType);\r\n\r\n      // Apply common response options (cache, disposition)\r\n      const defaultFilename = path.basename(filePath);\r\n      const sent304 = this.applyResponseOptions({ ...opts, etag, contentType }, defaultFilename);\r\n      if (sent304) return this.baseResponse;\r\n\r\n      // Check conditional request headers\r\n      const ifNoneMatch = this.request.header(\"if-none-match\");\r\n      const ifModifiedSince = this.request.header(\"if-modified-since\");\r\n\r\n      // Handle If-None-Match (ETag validation)\r\n      if (ifNoneMatch && ifNoneMatch === etag) {\r\n        this.log(\"File not modified (ETag match), sending 304\");\r\n        return this.baseResponse.status(304).send();\r\n      }\r\n\r\n      // Handle If-Modified-Since (Last-Modified validation)\r\n      if (ifModifiedSince) {\r\n        const modifiedSinceDate = new Date(ifModifiedSince);\r\n        if (lastModified.getTime() <= modifiedSinceDate.getTime()) {\r\n          this.log(\"File not modified (Last-Modified check), sending 304\");\r\n          return this.baseResponse.status(304).send();\r\n        }\r\n      }\r\n\r\n      // Use streaming for efficient file sending\r\n      const stream = fs.createReadStream(filePath);\r\n\r\n      // Handle stream errors\r\n      stream.on(\"error\", (error) => {\r\n        this.log(`Error reading file: ${error.message}`, \"error\");\r\n        if (!this.baseResponse.sent) {\r\n          this.serverError({\r\n            error: \"Error reading file\",\r\n            message: error.message,\r\n          });\r\n        }\r\n      });\r\n\r\n      // Send the stream (endTime will be set by finish event listener)\r\n      return this.baseResponse.send(stream);\r\n    } catch (error: any) {\r\n      this.log(`Error sending file: ${error.message}`, \"error\");\r\n      return this.serverError({\r\n        error: \"Error sending file\",\r\n        message: error.message,\r\n      });\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Send buffer as a response\r\n   * Useful for dynamically generated content (e.g., resized images, generated PDFs)\r\n   */\r\n  public sendBuffer(buffer: Buffer, options?: number | SendBufferOptions) {\r\n    this.log(\"Sending buffer\");\r\n\r\n    // Normalize options to object format\r\n    const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n    // Apply common response options (cache, disposition, etag)\r\n    const sent304 = this.applyResponseOptions(opts);\r\n    if (sent304) return this.baseResponse;\r\n\r\n    // Note: endTime is set in the main send() method for non-streaming responses\r\n    return this.baseResponse.send(buffer);\r\n  }\r\n\r\n  /**\r\n   * Send an Image instance as a response\r\n   * Automatically detects image format and sets content type\r\n   */\r\n  public async sendImage(\r\n    image: any, // Type as 'any' to avoid circular dependency with Image class\r\n    options?: number | (Omit<SendBufferOptions, \"contentType\"> & { contentType?: string }),\r\n  ) {\r\n    this.log(\"Sending image\");\r\n\r\n    // Normalize options to object format\r\n    const opts = typeof options === \"number\" ? { cacheTime: options } : options || {};\r\n\r\n    // Get image metadata to determine format\r\n    const metadata = await image.metadata();\r\n    const format = metadata.format || \"jpeg\";\r\n\r\n    // Convert image to buffer\r\n    const buffer = await image.toBuffer();\r\n\r\n    // Auto-set content type if not provided\r\n    const contentType = opts.contentType || `image/${format}`;\r\n\r\n    // Auto-generate ETag if not provided\r\n    // Format: \"format-widthxheight-size\" (e.g., \"jpeg-800x600-45231\")\r\n    // This catches changes in dimensions, quality, filters, and format\r\n    if (!opts.etag) {\r\n      const width = metadata.width || 0;\r\n      const height = metadata.height || 0;\r\n      opts.etag = `\"${format}-${width}x${height}-${buffer.length}\"`;\r\n    }\r\n\r\n    // Apply common response options with auto-detected content type\r\n    const sent304 = this.applyResponseOptions({ ...opts, contentType });\r\n    if (sent304) return this.baseResponse;\r\n\r\n    // Note: endTime is set in the main send() method for non-streaming responses\r\n    return this.baseResponse.send(buffer);\r\n  }\r\n\r\n  /**\r\n   * Send file and cache it\r\n   * Cache time in seconds\r\n   * Cache time will be one year\r\n   */\r\n  public sendCachedFile(path: string | StorageFile, cacheTime = 31536000) {\r\n    return this.sendFile(path, cacheTime);\r\n  }\r\n\r\n  /**\r\n   * Download the given file path\r\n   */\r\n  public download(path: string, filename?: string) {\r\n    return this.downloadFile(path, filename);\r\n  }\r\n\r\n  /**\r\n   * Download the given file path\r\n   */\r\n  public async downloadFile(filePath: string, filename?: string) {\r\n    // Check if file exists first\r\n    if (!(await fileExistsAsync(filePath))) {\r\n      return this.notFound({\r\n        error: \"File Not Found\",\r\n      });\r\n    }\r\n\r\n    try {\r\n      if (!filename) {\r\n        filename = path.basename(filePath);\r\n      }\r\n\r\n      this.baseResponse.header(\r\n        \"Content-Disposition\",\r\n        this.contentDisposition(\"attachment\", filename),\r\n      );\r\n\r\n      // this.baseResponse.header(\"Content-Type\", this.getFileContentType(filePath));\r\n      this.baseResponse.header(\"Content-Type\", \"application/octet-stream\");\r\n\r\n      const stream = fs.createReadStream(filePath);\r\n\r\n      // Handle stream errors\r\n      stream.on(\"error\", (error) => {\r\n        this.log(`Error reading file for download: ${error.message}`, \"error\");\r\n        if (!this.baseResponse.sent) {\r\n          this.serverError({\r\n            error: \"Error reading file\",\r\n            message: error.message,\r\n          });\r\n        }\r\n      });\r\n\r\n      // Send the stream (endTime will be set by finish event listener)\r\n      return this.baseResponse.send(stream);\r\n    } catch (error: any) {\r\n      this.log(`Error downloading file: ${error.message}`, \"error\");\r\n      return this.serverError({\r\n        error: \"Error downloading file\",\r\n        message: error.message,\r\n      });\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get content type of the given path\r\n   */\r\n  public getFileContentType(filePath: string) {\r\n    const type = mime.getType(filePath) || \"application/octet-stream\";\r\n    return type;\r\n  }\r\n\r\n  /**\r\n   * Mark the response as failed\r\n   */\r\n  public failedSchema(result: ValidationResult) {\r\n    const { errors, inputKey, inputError, status } = config.get(\"validation.response\", {\r\n      errors: \"errors\",\r\n      inputKey: \"input\",\r\n      inputError: \"error\",\r\n      status: 400,\r\n    });\r\n\r\n    log.error(\"request\", \"validation\", `${this.request.id} - Validation failed`);\r\n\r\n    return this.send(\r\n      {\r\n        [errors]: result.errors.map((error) => ({\r\n          [inputKey]: error.input,\r\n          [inputError]: error.error,\r\n        })),\r\n      },\r\n      status,\r\n    );\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;AA6CA,IAAY,iBAAL;CACL;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;AACF;;;;;;;;;;;AA8BA,SAAS,uBAA+C;CACtD,OAAO;EACL,UAAU;EACV,UAAU;EACV,QAAQ,CAAC,YAAY;CACvB;AACF;AAEA,IAAa,WAAb,MAAa,SAAS;;2BA2BU;gCAeX,IAAI,IAAmB;;;;;CAY1C,IAAW,MAAM;EACf,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK;CACd;;;;CAKA,IAAW,KAAK,MAAW;EACzB,KAAK,cAAc;CACrB;;;;CAKA,AAAO,UAAU,UAAe;EAC9B,KAAK,OAAO,IAAI,WAAW,CAAC,GAAI,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GAAI,QAAQ,CAAC;EAE5E,OAAO;CACT;;;;CAKA,AAAO,OAAO,UAAe;EAC3B,KAAK,OAAO,IAAI,QAAQ,CAAC,GAAI,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GAAI,QAAQ,CAAC;EAEtE,OAAO;CACT;;;;CAKA,AAAO,YAAY,UAAwB;EACzC,KAAK,eAAe;EAIpB,KAAK,aAAa,IAAI,KAAK,gBAAgB;GACzC,KAAK,QAAQ,UAAU,KAAK,IAAI;EAClC,CAAC;EAED,OAAO;CACT;;;;CAKA,AAAO,QAAQ;EACb,KAAK,QAAQ,CAAC;EACd,KAAK,cAAc;EACnB,KAAK,oBAAoB;CAC3B;;;;CAKA,AAAO,SAAS,OAAc;EAC5B,KAAK,QAAQ;EAEb,OAAO;CACT;;;;CAKA,IAAW,cAAc;EACvB,OAAO,KAAK,aAAa,UAAU,cAAc;CACnD;;;;CAKA,AAAO,eAAe,aAAqB;EACzC,KAAK,aAAa,OAAO,gBAAgB,WAAW;EAEpD,OAAO;CACT;;;;CAKA,IAAW,aAAqB;EAC9B,OAAO,KAAK,qBAAqB,KAAK,aAAa;CACrD;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,qBAAqB,OAAO,KAAK,oBAAoB;CACnE;;;;CAKA,IAAW,OAAO;EAChB,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,OAAc,GACZ,OACA,UACmB;EACnB,OAAO,OAAO,UAAU,YAAY,SAAS,QAAQ;CACvD;;;;CAKA,aAAuB,QAAQ,OAAsB,GAAG,MAAa;EAEnE,OAAO,IAAI,SAAS,YAAY;GAC9B,WAAW,YAAY;IACrB,MAAM,OAAO,gBAAgB,YAAY,SAAS,GAAG,IAAI;IACzD,QAAQ,IAAI;GACd,GAAG,CAAC;EACN,CAAC;CACH;;;;CAKA,MAAgB,YAAY;EAC1B,OAAO,MAAM,KAAK,MAAM,KAAK,WAAW;CAC1C;;;;CAKA,MAAa,MAAM,OAA0B;EAE3C,IAAI,CAAC,SAAS,SAAS,KAAK,GAAG,OAAO;EAGtC,IAAI,MAAM,QAAQ;GAChB,MAAM,UAAU,KAAK;GACrB,OAAO,MAAM,MAAM,OAAO;EAC5B;EAGA,IAAI,WAAW,KAAK,GAAG;GACrB,MAAM,SAAS,MAAM,KAAK,KAAK;GAE/B,OAAO,QAAQ,IACb,OAAO,IAAI,OAAO,SAAc;IAC9B,OAAO,MAAM,KAAK,MAAM,IAAI;GAC9B,CAAC,CACH;EACF;EAGA,IAAI,CAAC,cAAc,KAAK,GACtB,OAAO;EAIT,KAAK,MAAM,OAAO,OAAO;GACvB,MAAM,WAAW,MAAM;GAEvB,MAAM,OAAO,MAAM,KAAK,MAAM,QAAQ;EACxC;EAEA,OAAO;CACT;;;;CAKA,AAAO,IAAI,SAAiB,QAAkB,QAAQ;EACpD,IAAI,CAAC,OAAO,IAAI,UAAU,GAAG;EAE7B,IAAI,IAAI;GACN,QAAQ;GACR,QAAQ,KAAK,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK,QAAQ,MAAM,EAAE,IAAI,IAAI,KAAK,QAAQ;GACvF;GACA,MAAM;GACN,SAAS;IACP,SAAS,KAAK;IACd,UAAU;GACZ;EACF,CAAC;CACH;;;;CAKA,IAAW,SAAS;EAClB,OAAO,KAAK,UAAU,cAAc,MAAM;CAC5C;;;;;;;CAQA,MAAa,KAAK,MAAY,YAAqB,gBAAgB,MAAyB;EAO1F,IAAI,KAAK,aAAa,MAAM;GAC1B,IAAI,MACF,YACA,QACA,mDAAmD,KAAK,SAAS,MAAM,UAAU,4BACnF;GAEA,OAAO;EACT;EAEA,IAAI,YACF,KAAK,oBAAoB;EAG3B,IAAI,SAAS,MAAM,OAAO;EAE1B,IAAI,MACF,KAAK,cAAc;EAGrB,IAAI,CAAC,KAAK,mBACR,KAAK,oBAAoB;EAG3B,KAAK,IAAI,kBAAkB;EAK3B,IAAI,MAAM,QAAQ,KAAK,WAAW,KAAK,cAAc,KAAK,WAAW,GACnE;OAAI,CAAC,KAAK,aAAa,UAAU,cAAc,GAC7C,KAAK,eAAe,kBAAkB;EACxC;EAGF,IAAI,eAAe;GACjB,MAAM,SAAS,QAAQ,WAAW,IAAI;GAEtC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,MAAM,SAAS,IAAI;GAGrB,IAAI,KAAK,QAAQ;IACf,MAAM,SAAS,QAAQ,eAAe,IAAI;IAC1C,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,aAAa,KAAK,CAAC,GACxD,MAAM,SAAS,IAAI;IAGrB,IAAI,KAAK,MAAM;KACb,MAAM,SAAS,QAAQ,sBAAsB,IAAI;KACjD,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,oBAAoB,KAAK,CAAC,GAC/D,MAAM,SAAS,IAAI;IAEvB;GACF;EACF;EAGA,IAAI,OAAO,KAAK,gBAAgB,UAC9B,KAAK,aAAa,MAAM,KAAK,UAAU;OAEvC,KAAK,aAAa;EAIpB,KAAK,aAAa,OAAO,KAAK,iBAAiB;EAG/C,MAAM,KAAK,aAAa,KAAK,KAAK,UAAU;EAE5C,KAAK,IAAI,eAAe;EAExB,IAAI,eAAe;GAEjB,SAAS,QAAQ,QAAQ,IAAI;GAE7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;GAIf,IAAI,KAAK,qBAAqB,OAAO,KAAK,oBAAoB,KAC5D,SAAS,QAAQ,WAAW,IAAI;GAIlC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,iBAAiB,IAAI;GAIxC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,cAAc,IAAI;GAIrC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,gBAAgB,IAAI;GAIvC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,aAAa,IAAI;GAIpC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,YAAY,IAAI;GAInC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,mBAAmB,IAAI;GAI1C,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,aAAa,IAAI;GAIpC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,eAAe,IAAI;GAItC,IAAI,KAAK,qBAAqB,KAC5B,SAAS,QAAQ,SAAS,IAAI;EAElC;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;;;;;CAqBA,AAAO,OAAO,QAKQ;EACpB,KAAK,cAAc,OAAO,MAAM;EAEhC,IAAI,OAAO,aACT,KAAK,eAAe,OAAO,WAAW;EAGxC,IAAI,OAAO,SACT,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,GACvD,KAAK,OAAO,MAAM,KAAK;EAI3B,OAAO,KAAK,KAAK,OAAO,IAAI;CAC9B;;;;CAKA,AAAO,KAAK,MAAc,YAAqB;EAC7C,OAAO,KAAK,eAAe,WAAW,CAAC,CAAC,KAAK,MAAM,UAAU;CAC/D;;;;CAKA,AAAO,OAAO,SAAmD,SAAS,KAAK;EAC7E,OAAO,KAAK,cAAc,MAAM,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC;CAC7D;;;;CAKA,AAAO,IAAI,MAAc,YAAqB;EAC5C,OAAO,KAAK,eAAe,UAAU,CAAC,CAAC,KAAK,MAAM,UAAU;CAC9D;;;;CAKA,AAAO,KAAK,MAAc,YAAqB;EAC7C,OAAO,KAAK,eAAe,YAAY,CAAC,CAAC,KAAK,MAAM,UAAU;CAChE;;;;;;;;;;;;;;;;;;;;CAqBA,AAAO,OAAO,cAAc,cAAwC;EAElE,KAAK,eAAe,WAAW;EAC/B,KAAK,OAAO,qBAAqB,SAAS;EAC1C,KAAK,OAAO,iBAAiB,UAAU;EACvC,KAAK,OAAO,cAAc,YAAY;EACtC,KAAK,OAAO,0BAA0B,SAAS;EAG/C,SAAS,QAAQ,WAAW,IAAI;EAChC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,SAAS,IAAI;EAGf,KAAK,IAAI,iBAAiB;EAG1B,IAAI,UAAU;EACd,MAAM,SAAgB,CAAC;EAKvB,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY,KAAK,WAAW,CAAQ;EAEzE,OAAO;;;;;GAKL,OAAO,SAAc;IACnB,IAAI,SACF,MAAM,IAAI,MAAM,4CAA4C;IAG9D,KAAK,aAAa,IAAI,MAAM,IAAI;IAEhC,OAAO;GACT;;;;;GAMA,SAAS,YAAuB;IAC9B,IAAI,SACF,MAAM,IAAI,MAAM,yCAAyC;IAG3D,MAAM,OAAO,YAAY,OAAO;IAChC,OAAO,KAAK,IAAI;IAChB,KAAK,aAAa,IAAI,MAAM,IAAI;IAEhC,OAAO;GACT;;;;GAKA,WAAW;IACT,IAAI,SACF,OAAO;IAGT,UAAU;IAGV,KAAK,cAAc;IACnB,KAAK,aAAa;IAGlB,KAAK,aAAa,IAAI,IAAI;IAE1B,KAAK,IAAI,cAAc;IAGvB,SAAS,QAAQ,QAAQ,IAAI;IAC7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;IAIf,IAAI,KAAK,MACP,SAAS,QAAQ,WAAW,IAAI;IAIlC,IAAI,KAAK,sBAAsB,KAC7B,SAAS,QAAQ,iBAAiB,IAAI;IAGxC,OAAO;GACT;;;;GAKA,IAAI,QAAQ;IACV,OAAO;GACT;EACF;CACF;;;;;;;;;;;;;;;;;;;;;;;;;CA0BA,AAAO,MAA6B;EAElC,KAAK,eAAe,mBAAmB;EACvC,KAAK,OAAO,iBAAiB,qCAAqC;EAClE,KAAK,OAAO,cAAc,YAAY;EACtC,KAAK,OAAO,qBAAqB,IAAI;EAGrC,SAAS,QAAQ,WAAW,IAAI;EAChC,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,SAAS,KAAK,CAAC,GACpD,SAAS,IAAI;EAGf,KAAK,IAAI,qBAAqB;EAG9B,IAAI,UAAU;EACd,MAAM,SAAgB,CAAC;EACvB,MAAM,qBAAwC,CAAC;EAG/C,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY,KAAK,WAAW,CAAQ;EAIzE,KAAK,aAAa,IAAI,GAAG,eAAe;GACtC,IAAI,CAAC,SAAS;IACZ,UAAU;IACV,KAAK,IAAI,yBAAyB;IAClC,KAAK,MAAM,WAAW,oBACpB,QAAQ;GAEZ;EACF,CAAC;EAED,MAAM,aAAoC;;;;;;;GAOxC,OAAO,OAAe,MAAW,OAAuC;IAGtE,IAAI,SAAS,OAAO;IAEpB,IAAI,UAAU;IACd,IAAI,IAAI,WAAW,OAAO,GAAG;IAC7B,WAAW,UAAU,MAAM;IAC3B,WAAW,SAAS,KAAK,UAAU,IAAI,EAAE;IAEzC,OAAO,KAAK;KAAE;KAAO;KAAM;IAAG,CAAC;IAC/B,KAAK,aAAa,IAAI,MAAM,OAAO;IAEnC,OAAO;GACT;;;;;;GAOA,UAAU,SAAwC;IAEhD,IAAI,SAAS,OAAO;IAEpB,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,KAAK;IAE3C,OAAO;GACT;;;;GAKA,WAAkC;IAChC,IAAI,SAAS,OAAO;IAEpB,UAAU;IAGV,KAAK,cAAc;IACnB,KAAK,aAAa;IAGlB,KAAK,aAAa,IAAI,IAAI;IAE1B,KAAK,IAAI,kBAAkB;IAG3B,SAAS,QAAQ,QAAQ,IAAI;IAC7B,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI,MAAM,KAAK,CAAC,GACjD,SAAS,IAAI;IAIf,IAAI,KAAK,MACP,SAAS,QAAQ,WAAW,IAAI;IAGlC,OAAO;GACT;;;;;;;;;;;;;GAcA,eAAe,YAA+C;IAC5D,mBAAmB,KAAK,OAAO;IAC/B,OAAO;GACT;;;;GAKA,IAAI,QAAQ;IACV,OAAO;GACT;EACF;EAEA,OAAO;CACT;;;;CAKA,AAAO,cAAc,YAAoB;EACvC,KAAK,oBAAoB;EAEzB,OAAO;CACT;;;;CAKA,AAAO,SAAS,KAAa,aAAa,KAAK;EAC7C,KAAK,aAAa,SAAS,KAAK,UAAU;EAE1C,OAAO;CACT;;;;CAKA,AAAO,kBAAkB,KAAa;EACpC,KAAK,aAAa,SAAS,KAAK,GAAG;EAEnC,OAAO;CACT;;;;CAKA,AAAO,kBAAkB;EACvB,OAAO,KAAK,aAAa;CAC3B;;;;CAKA,AAAO,aAAa,KAAa;EAC/B,KAAK,aAAa,aAAa,GAAG;EAElC,OAAO;CACT;;;;CAKA,AAAO,UAAU,KAAa;EAC5B,OAAO,KAAK,aAAa,UAAU,GAAG;CACxC;;;;CAKA,AAAO,aAAa;EAClB,OAAO,KAAK,aAAa,WAAW;CACtC;;;;CAKA,AAAO,QAAQ,SAAiC;EAC9C,KAAK,aAAa,QAAQ,OAAO;EAEjC,OAAO;CACT;;;;CAKA,AAAO,OAAO,KAAa,OAAY;EACrC,KAAK,aAAa,OAAO,KAAK,KAAK;EAEnC,OAAO;CACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCA,AAAO,OAAO,MAAc,OAAoB,UAAyB,CAAC,GAAG;EAC3E,MAAM,EAAE,KAAK,GAAG,kBAAkB;EAClC,MAAM,iBAAiB,OAAO,IAAI,wBAAwB,CAAC,CAAC;EAC5D,MAAM,kBAAkB,MAAM,OAAO,KAAK,IAAI,KAAK,UAAU,KAAK;EAElE,KAAK,aAAa,UAAU,MAAM,iBAAiB;GACjD,GAAG,qBAAqB;GACxB,GAAG;GACH,GAAG;EACL,CAAC;EAED,OAAO;CACT;;;;;;;CAQA,AAAO,YAAY,MAAc,SAAkC;EACjE,MAAM,iBAAiB,OAAO,IAAI,wBAAwB,CAAC,CAAC;EAC5D,KAAK,aAAa,YAAY,MAAM;GAAE,GAAG;GAAgB,GAAG;EAAQ,CAAC;EAErE,OAAO;CACT;;;;CAKA,AAAO,UAAU,KAAa,OAAY;EACxC,OAAO,KAAK,OAAO,KAAK,KAAK;CAC/B;;;;CAKA,AAAO,YAAY,MAAW;EAC5B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,UACL,OAAY,EACV,OAAO,yDACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,mBAAmB,MAAW;EACnC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,aACL,OAAY,EACV,OAAO,eACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,SACL,OAAY,EACV,OAAO,WACT,GACA;EACA,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,WAAW,MAAW;EAC3B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,gBAAgB,MAAW;EAChC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,cAAc,MAAW;EAC9B,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,QAAQ,OAAY,EAAE,SAAS,KAAK,GAAG;EAC5C,OAAO,KAAK,KAAK,IAAI;CACvB;;;;CAKA,AAAO,YAAY;EACjB,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;CAC5C;;;;;CAMA,AAAO,SAAS,OAAY,EAAE,SAAS,kCAAkC,GAAG;EAC1E,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,SAAS,OAAY,EAAE,OAAO,oBAAoB,GAAG;EAC1D,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;CAKA,AAAO,gBAAgB,MAAW;EAChC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;;CAMA,AAAO,oBAAoB,MAAW;EACpC,OAAO,KAAK,KAAK,MAAM,GAAG;CAC5B;;;;;;;;;;;;;;;;CAiBA,AAAQ,mBAAmB,MAA+B,SAAyB;EAEjF,MAAM,QAAQ,WAAW,OAAM,CAAE,QAAQ,WAAW,EAAE;EAItD,MAAM,QACJ,KACG,QAAQ,UAAU,GAAG,CAAC,CACtB,QAAQ,iBAAiB,GAAG,CAAC,CAC7B,KAAK,KAAK;EAGf,IAAI,CAAC,eAAe,KAAK,IAAI,GAC3B,OAAO,GAAG,KAAK,cAAc,MAAM;EAUrC,OAAO,GAAG,KAAK,cAAc,MAAM,sBALnB,mBAAmB,IAAI,CAAC,CAAC,QACvC,YACC,SAAS,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,CAGC;CACjE;CAEA,AAAQ,qBAAqB,SAA4B,iBAAmC;EAE1F,IAAI,QAAQ,aACV,KAAK,aAAa,KAAK,QAAQ,WAAW;EAI5C,IAAI,QAAQ,WAAW;GACrB,MAAM,eAAe,QAAQ,YACzB,mBAAmB,QAAQ,UAAU,eACrC,mBAAmB,QAAQ;GAC/B,KAAK,OAAO,iBAAiB,YAAY;GACzC,KAAK,OAAO,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,YAAY,GAAI,CAAC,CAAC,YAAY,CAAC;EACtF;EAGA,IAAI,QAAQ,MAAM;GAChB,KAAK,OAAO,QAAQ,QAAQ,IAAI;GAGhC,MAAM,cAAc,KAAK,QAAQ,OAAO,eAAe;GACvD,IAAI,eAAe,gBAAgB,QAAQ,MAAM;IAC/C,KAAK,IAAI,gDAAgD;IACzD,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;IACnC,OAAO;GACT;EACF;EAGA,IAAI,QAAQ,WAAW,UAAa,QAAQ,UAAU;GACpD,MAAM,cAAc,QAAQ,SAAS,WAAW;GAChD,MAAM,WAAW,QAAQ,YAAY,mBAAmB;GACxD,KAAK,OAAO,uBAAuB,KAAK,mBAAmB,aAAa,QAAQ,CAAC;EACnF;EAEA,OAAO;CACT;;;;CAKA,MAAa,SAAS,UAAgC,SAAoC;EACxF,IAAI,oBAAoB,aACtB,WAAW,SAAS;EAGtB,KAAK,IAAI,iBAAiB,UAAU;EAGpC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,OAAO,KAAK,SAAS,EACnB,OAAO,iBACT,CAAC;EAGH,IAAI;GAEF,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;GAGhF,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAK,QAAQ;GAC7C,MAAM,eAAe,MAAM;GAG3B,MAAM,OAAO,IAAI,MAAM,KAAK,GAAG,MAAM,MAAM,QAAQ,EAAE;GAGrD,KAAK,OAAO,iBAAiB,aAAa,YAAY,CAAC;GACvD,KAAK,OAAO,QAAQ,IAAI;GAGxB,MAAM,cAAc,KAAK,mBAAmB,QAAQ;GACpD,KAAK,aAAa,KAAK,WAAW;GAGlC,MAAM,kBAAkB,KAAK,SAAS,QAAQ;GAE9C,IADgB,KAAK,qBAAqB;IAAE,GAAG;IAAM;IAAM;GAAY,GAAG,eAChE,GAAG,OAAO,KAAK;GAGzB,MAAM,cAAc,KAAK,QAAQ,OAAO,eAAe;GACvD,MAAM,kBAAkB,KAAK,QAAQ,OAAO,mBAAmB;GAG/D,IAAI,eAAe,gBAAgB,MAAM;IACvC,KAAK,IAAI,6CAA6C;IACtD,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAC5C;GAGA,IAAI,iBAAiB;IACnB,MAAM,oBAAoB,IAAI,KAAK,eAAe;IAClD,IAAI,aAAa,QAAQ,KAAK,kBAAkB,QAAQ,GAAG;KACzD,KAAK,IAAI,sDAAsD;KAC/D,OAAO,KAAK,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;IAC5C;GACF;GAGA,MAAM,SAAS,GAAG,iBAAiB,QAAQ;GAG3C,OAAO,GAAG,UAAU,UAAU;IAC5B,KAAK,IAAI,uBAAuB,MAAM,WAAW,OAAO;IACxD,IAAI,CAAC,KAAK,aAAa,MACrB,KAAK,YAAY;KACf,OAAO;KACP,SAAS,MAAM;IACjB,CAAC;GAEL,CAAC;GAGD,OAAO,KAAK,aAAa,KAAK,MAAM;EACtC,SAAS,OAAY;GACnB,KAAK,IAAI,uBAAuB,MAAM,WAAW,OAAO;GACxD,OAAO,KAAK,YAAY;IACtB,OAAO;IACP,SAAS,MAAM;GACjB,CAAC;EACH;CACF;;;;;CAMA,AAAO,WAAW,QAAgB,SAAsC;EACtE,KAAK,IAAI,gBAAgB;EAGzB,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;EAIhF,IADgB,KAAK,qBAAqB,IAChC,GAAG,OAAO,KAAK;EAGzB,OAAO,KAAK,aAAa,KAAK,MAAM;CACtC;;;;;CAMA,MAAa,UACX,OACA,SACA;EACA,KAAK,IAAI,eAAe;EAGxB,MAAM,OAAO,OAAO,YAAY,WAAW,EAAE,WAAW,QAAQ,IAAI,WAAW,CAAC;EAGhF,MAAM,WAAW,MAAM,MAAM,SAAS;EACtC,MAAM,SAAS,SAAS,UAAU;EAGlC,MAAM,SAAS,MAAM,MAAM,SAAS;EAGpC,MAAM,cAAc,KAAK,eAAe,SAAS;EAKjD,IAAI,CAAC,KAAK,MAGR,KAAK,OAAO,IAAI,OAAO,GAFT,SAAS,SAAS,EAEA,GADjB,SAAS,UAAU,EACQ,GAAG,OAAO,OAAO;EAK7D,IADgB,KAAK,qBAAqB;GAAE,GAAG;GAAM;EAAY,CACvD,GAAG,OAAO,KAAK;EAGzB,OAAO,KAAK,aAAa,KAAK,MAAM;CACtC;;;;;;CAOA,AAAO,eAAe,MAA4B,YAAY,SAAU;EACtE,OAAO,KAAK,SAAS,MAAM,SAAS;CACtC;;;;CAKA,AAAO,SAAS,MAAc,UAAmB;EAC/C,OAAO,KAAK,aAAa,MAAM,QAAQ;CACzC;;;;CAKA,MAAa,aAAa,UAAkB,UAAmB;EAE7D,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,OAAO,KAAK,SAAS,EACnB,OAAO,iBACT,CAAC;EAGH,IAAI;GACF,IAAI,CAAC,UACH,WAAW,KAAK,SAAS,QAAQ;GAGnC,KAAK,aAAa,OAChB,uBACA,KAAK,mBAAmB,cAAc,QAAQ,CAChD;GAGA,KAAK,aAAa,OAAO,gBAAgB,0BAA0B;GAEnE,MAAM,SAAS,GAAG,iBAAiB,QAAQ;GAG3C,OAAO,GAAG,UAAU,UAAU;IAC5B,KAAK,IAAI,oCAAoC,MAAM,WAAW,OAAO;IACrE,IAAI,CAAC,KAAK,aAAa,MACrB,KAAK,YAAY;KACf,OAAO;KACP,SAAS,MAAM;IACjB,CAAC;GAEL,CAAC;GAGD,OAAO,KAAK,aAAa,KAAK,MAAM;EACtC,SAAS,OAAY;GACnB,KAAK,IAAI,2BAA2B,MAAM,WAAW,OAAO;GAC5D,OAAO,KAAK,YAAY;IACtB,OAAO;IACP,SAAS,MAAM;GACjB,CAAC;EACH;CACF;;;;CAKA,AAAO,mBAAmB,UAAkB;EAE1C,OADa,KAAK,QAAQ,QAAQ,KAAK;CAEzC;;;;CAKA,AAAO,aAAa,QAA0B;EAC5C,MAAM,EAAE,QAAQ,UAAU,YAAY,WAAW,OAAO,IAAI,uBAAuB;GACjF,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,QAAQ;EACV,CAAC;EAED,IAAI,MAAM,WAAW,cAAc,GAAG,KAAK,QAAQ,GAAG,qBAAqB;EAE3E,OAAO,KAAK,KACV,GACG,SAAS,OAAO,OAAO,KAAK,WAAW;IACrC,WAAW,MAAM;IACjB,aAAa,MAAM;EACtB,EAAE,EACJ,GACA,MACF;CACF;AACF"}

package/esm/http/server.mjs

@@ -1,4 +1,4 @@
-import baseConfig from "@mongez/config";
+import config from "@mongez/config";
 import Fastify from "fastify";
 
 //#region ../core/src/http/server.ts
@@ -11,9 +11,9 @@ const DEFAULT_BODY_LIMIT = 200 * 1024 * 1024 * 1024;
 let server = void 0;
 function startHttpServer(options) {
 	return server = Fastify({
-		trustProxy: baseConfig.get("http.trustProxy", true),
-		bodyLimit: baseConfig.get("http.bodyLimit", DEFAULT_BODY_LIMIT),
-		forceCloseConnections: baseConfig.get("http.gracefulShutdown.forceCloseConnections", "idle"),
+		trustProxy: config.get("http.trustProxy", true),
+		bodyLimit: config.get("http.bodyLimit", DEFAULT_BODY_LIMIT),
+		forceCloseConnections: config.get("http.gracefulShutdown.forceCloseConnections", "idle"),
 		...options
 	});
 }

package/esm/http/server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.mjs","names":["config"],"sources":["../../../../../../../core/src/http/server.ts"],"sourcesContent":["import config from \"@mongez/config\";\r\nimport Fastify, { FastifyServerOptions } from \"fastify\";\r\n\r\nexport type FastifyInstance = ReturnType<typeof Fastify>;\r\n\r\n/**\r\n * Default Fastify body limit. Kept at the historical 200GB so existing apps\r\n * don't regress on upgrade. Override via `http.bodyLimit` in config; for\r\n * per-route caps use the `maxBodySize()` middleware.\r\n */\r\nconst DEFAULT_BODY_LIMIT = 200 * 1024 * 1024 * 1024;\r\n\r\n// Instantiate Fastify server\r\nlet server: FastifyInstance | undefined = undefined;\r\n\r\nexport function startHttpServer(options?: FastifyServerOptions): FastifyInstance {\r\n  return (server = Fastify({\r\n    // Configurable so deployments NOT behind a trusted proxy can disable\r\n    // `X-Forwarded-For` resolution (it's client-settable and spoofable).\r\n    // Defaults to `true` to preserve historical behavior for proxied apps.\r\n    trustProxy: config.get(\"http.trustProxy\", true),\r\n    bodyLimit: config.get(\"http.bodyLimit\", DEFAULT_BODY_LIMIT),\r\n    // Close idle keep-alive connections on shutdown while letting in-flight\r\n    // requests finish — the basis for graceful draining. Override via\r\n    // `http.gracefulShutdown.forceCloseConnections`.\r\n    forceCloseConnections: config.get(\"http.gracefulShutdown.forceCloseConnections\", \"idle\"),\r\n    ...options,\r\n  }));\r\n}\r\n\r\n/**\r\n * Expose the server to be publicly accessible\r\n */\r\nexport function getHttpServer(): FastifyInstance {\r\n  return server;\r\n}\r\n\r\n/**\r\n * Minimal shape needed to close a server — lets {@link closeServerWithTimeout}\r\n * be unit-tested with a fake instead of a real Fastify instance.\r\n */\r\nexport type ClosableServer = { close: () => Promise<unknown> };\r\n\r\n/**\r\n * Close a server, bounded by a timeout. Fastify's `close()` stops accepting new\r\n * requests (it answers 503 while closing) and drains the in-flight ones; this\r\n * wraps it so a single stuck request can't hang shutdown forever.\r\n *\r\n * @returns `true` if the server drained cleanly, `false` if the timeout fired first.\r\n */\r\nexport async function closeServerWithTimeout(\r\n  server: ClosableServer,\r\n  timeoutMs: number,\r\n): Promise<boolean> {\r\n  let timer: ReturnType<typeof setTimeout> | undefined;\r\n\r\n  const drained = server.close().then(() => true);\r\n\r\n  const timedOut = new Promise<boolean>((resolve) => {\r\n    timer = setTimeout(() => resolve(false), timeoutMs);\r\n  });\r\n\r\n  try {\r\n    return await Promise.race([drained, timedOut]);\r\n  } finally {\r\n    if (timer) {\r\n      clearTimeout(timer);\r\n    }\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;AAUA,MAAM,qBAAqB,MAAM,OAAO,OAAO;AAG/C,IAAI,SAAsC;AAE1C,SAAgB,gBAAgB,SAAiD;CAC/E,OAAQ,SAAS,QAAQ;EAIvB,YAAYA,WAAO,IAAI,mBAAmB,IAAI;EAC9C,WAAWA,WAAO,IAAI,kBAAkB,kBAAkB;EAI1D,uBAAuBA,WAAO,IAAI,+CAA+C,MAAM;EACvF,GAAG;CACL,CAAC;AACH;;;;AAKA,SAAgB,gBAAiC;CAC/C,OAAO;AACT;;;;;;;;AAeA,eAAsB,uBACpB,QACA,WACkB;CAClB,IAAI;CAEJ,MAAM,UAAU,OAAO,MAAM,CAAC,CAAC,WAAW,IAAI;CAE9C,MAAM,WAAW,IAAI,SAAkB,YAAY;EACjD,QAAQ,iBAAiB,QAAQ,KAAK,GAAG,SAAS;CACpD,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;CAC/C,UAAU;EACR,IAAI,OACF,aAAa,KAAK;CAEtB;AACF"}
+{"version":3,"file":"server.mjs","names":[],"sources":["../../../../../../../core/src/http/server.ts"],"sourcesContent":["import config from \"@mongez/config\";\r\nimport Fastify, { FastifyServerOptions } from \"fastify\";\r\n\r\nexport type FastifyInstance = ReturnType<typeof Fastify>;\r\n\r\n/**\r\n * Default Fastify body limit. Kept at the historical 200GB so existing apps\r\n * don't regress on upgrade. Override via `http.bodyLimit` in config; for\r\n * per-route caps use the `maxBodySize()` middleware.\r\n */\r\nconst DEFAULT_BODY_LIMIT = 200 * 1024 * 1024 * 1024;\r\n\r\n// Instantiate Fastify server\r\nlet server: FastifyInstance | undefined = undefined;\r\n\r\nexport function startHttpServer(options?: FastifyServerOptions): FastifyInstance {\r\n  return (server = Fastify({\r\n    // Configurable so deployments NOT behind a trusted proxy can disable\r\n    // `X-Forwarded-For` resolution (it's client-settable and spoofable).\r\n    // Defaults to `true` to preserve historical behavior for proxied apps.\r\n    trustProxy: config.get(\"http.trustProxy\", true),\r\n    bodyLimit: config.get(\"http.bodyLimit\", DEFAULT_BODY_LIMIT),\r\n    // Close idle keep-alive connections on shutdown while letting in-flight\r\n    // requests finish — the basis for graceful draining. Override via\r\n    // `http.gracefulShutdown.forceCloseConnections`.\r\n    forceCloseConnections: config.get(\"http.gracefulShutdown.forceCloseConnections\", \"idle\"),\r\n    ...options,\r\n  }));\r\n}\r\n\r\n/**\r\n * Expose the server to be publicly accessible\r\n */\r\nexport function getHttpServer(): FastifyInstance {\r\n  return server;\r\n}\r\n\r\n/**\r\n * Minimal shape needed to close a server — lets {@link closeServerWithTimeout}\r\n * be unit-tested with a fake instead of a real Fastify instance.\r\n */\r\nexport type ClosableServer = { close: () => Promise<unknown> };\r\n\r\n/**\r\n * Close a server, bounded by a timeout. Fastify's `close()` stops accepting new\r\n * requests (it answers 503 while closing) and drains the in-flight ones; this\r\n * wraps it so a single stuck request can't hang shutdown forever.\r\n *\r\n * @returns `true` if the server drained cleanly, `false` if the timeout fired first.\r\n */\r\nexport async function closeServerWithTimeout(\r\n  server: ClosableServer,\r\n  timeoutMs: number,\r\n): Promise<boolean> {\r\n  let timer: ReturnType<typeof setTimeout> | undefined;\r\n\r\n  const drained = server.close().then(() => true);\r\n\r\n  const timedOut = new Promise<boolean>((resolve) => {\r\n    timer = setTimeout(() => resolve(false), timeoutMs);\r\n  });\r\n\r\n  try {\r\n    return await Promise.race([drained, timedOut]);\r\n  } finally {\r\n    if (timer) {\r\n      clearTimeout(timer);\r\n    }\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;AAUA,MAAM,qBAAqB,MAAM,OAAO,OAAO;AAG/C,IAAI,SAAsC;AAE1C,SAAgB,gBAAgB,SAAiD;CAC/E,OAAQ,SAAS,QAAQ;EAIvB,YAAY,OAAO,IAAI,mBAAmB,IAAI;EAC9C,WAAW,OAAO,IAAI,kBAAkB,kBAAkB;EAI1D,uBAAuB,OAAO,IAAI,+CAA+C,MAAM;EACvF,GAAG;CACL,CAAC;AACH;;;;AAKA,SAAgB,gBAAiC;CAC/C,OAAO;AACT;;;;;;;;AAeA,eAAsB,uBACpB,QACA,WACkB;CAClB,IAAI;CAEJ,MAAM,UAAU,OAAO,MAAM,CAAC,CAAC,WAAW,IAAI;CAE9C,MAAM,WAAW,IAAI,SAAkB,YAAY;EACjD,QAAQ,iBAAiB,QAAQ,KAAK,GAAG,SAAS;CACpD,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;CAC/C,UAAU;EACR,IAAI,OACF,aAAa,KAAK;CAEtB;AACF"}

package/esm/index.d.mts

@@ -41,6 +41,7 @@ import { anyMatch, ipMatches } from "./http/middleware/utils/cidr-match.mjs";
 import { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from "./http/middleware/utils/idempotency-key.mjs";
 import { parseSize } from "./http/middleware/utils/parse-size.mjs";
 import { registerHttpPlugins } from "./http/plugins.mjs";
+import { PortInUseError, assertPortIsAvailable, isPortAvailable } from "./http/port-preflight.mjs";
 import { RequestContextStore, requestContext, useCurrentUser, useRequest, useRequestStore } from "./http/context/request-context.mjs";
 import { LocalizedObject, getLocalized } from "./utils/get-localized.mjs";
 import { ResourceFieldBuilder } from "./resource/resource-field-builder.mjs";
@@ -51,6 +52,7 @@ import { Router, router } from "./router/router.mjs";
 import { app } from "./application/app.mjs";
 import { Environment, RuntimeStrategy, environment, setEnvironment } from "./utils/environment.mjs";
 import { Application, BootContext, BootListener, ShutdownListener } from "./application/application.mjs";
+import { BOOT_SIGNAL_ENV_KEY, BOOT_SIGNAL_VERSION, BootSignal, BootSignalType, isBootSignal, sendBootSignal } from "./application/boot-signal.mjs";
 import { AppConfigurations } from "./application/application-config-types.mjs";
 import { BenchmarkSnapshots } from "./benchmark/benchmark-snapshots.mjs";
 import { BenchmarkProfiler } from "./benchmark/profiler.mjs";
@@ -80,6 +82,7 @@ import { CLICommand, command } from "./cli/cli-command.mjs";
 import { ConfigKey, ConfigKeyRegistry, ConfigName, ConfigRegistry } from "./config/types.mjs";
 import { config } from "./config/config-getter.mjs";
 import { registerAppConfig } from "./config/config-handlers.mjs";
+import { setConfig } from "./config/config-setter.mjs";
 import { ConfigSpecialHandlers, configSpecialHandlers } from "./config/config-special-handlers.mjs";
 import { ContainerTypes, container } from "./container/index.mjs";
 import { DatabaseLogModel } from "./database/models/database-log/database-log.mjs";
@@ -117,8 +120,9 @@ import { RegisterResource } from "./resource/register-resource.mjs";
 import { Restful } from "./restful/restful.mjs";
 import { SocketOptions } from "./socket/types.mjs";
 import { getSocketServer } from "./socket/utils.mjs";
-import { isTestServerRunning, startHttpTestServer, stopHttpTestServer } from "./tests/start-http-development-server.mjs";
+import { StartHttpTestServerOptions, isTestServerRunning, startHttpTestServer, stopHttpTestServer } from "./tests/start-http-development-server.mjs";
 import { expectJson, getTestServerUrl, parseJsonResponse, testDelete, testGet, testPatch, testPost, testPut, testRequest } from "./tests/test-helpers.mjs";
+import { TEST_SERVER_PORT_ENV_KEY, publishTestServerPort, withdrawTestServerPort } from "./tests/test-server-port-channel.mjs";
 import { setupTest } from "./tests/vitest-setup.mjs";
 import { RegisteredUseCase, UseCase, UseCaseAfterMiddleware, UseCaseBeforeMiddleware, UseCaseBroadcastChannel, UseCaseBroadcastEvent, UseCaseBroadcastOption, UseCaseConfigurations, UseCaseContext, UseCaseErrorResult, UseCaseEventsCallbacksMap, UseCaseGuard, UseCaseHandler, UseCaseOnExecutingContext, UseCaseResult, UseCaseRuntimeOptions, UseCaseWithSchema } from "./use-cases/types.mjs";
 import { useCase } from "./use-cases/use-case.mjs";
@@ -153,7 +157,7 @@ import { WarlockConfigManager, isUnknownTsExtensionError, warlockConfigManager }
 import { env } from "@mongez/dotenv";
 import { colors } from "@mongez/copper";
 export * from "@mongez/localization";
-export { $registerUseCase, $unregisterUseCase, AccessConnector, AggregateExpressionInput, AggregateExpressions, AiConnector, AllRepositoryOptions, AppConfigurations, Application, BadRequestError, BadSchemaUseCaseError, BaseConnector, BaseHealthChecker, type BenchmarkChannel, type BenchmarkConfigurations, type BenchmarkErrorResult, type BenchmarkOptions, BenchmarkProfiler, type BenchmarkProfilerOptions, type BenchmarkResult, BenchmarkSnapshots, type BenchmarkSnapshotsOptions, type BenchmarkStats, type BenchmarkSuccessResult, BootContext, BootListener, CLICommand, CLICommandAction, CLICommandOption, CLICommandOptions, CLICommandPreload, CLICommandSource, CacheConnector, type CacheMiddlewareOptions, CachedRepositoryOptions, type CapturedMail, CascadeAdapter, CascadeQueryBuilder, ChunkCallback, ClosableServer, CloudDriver, CloudStorageDriverContract, CloudStorageDriverOptions, CloudStorageFileData, CommandActionData, type ConcurrencyLimitOptions, ConfigKey, ConfigKeyRegistry, ConfigName, ConfigRegistry, ConfigSpecialHandlers, ConflictError, Connector, ConnectorLifecyclePhase, ConnectorName, ConnectorPriority, ConnectorsManager, ConsoleChannel, ContainerTypes, CookieOptions, CursorPaginationOptions, CursorPaginationResult, DOSpacesDriver, DatabaseCacheDriver, type DatabaseCacheOptions, DatabaseConnector, DatabaseLog, DatabaseLogModel, DatabaseLogOptions, DecoratorLoweringPlugin, DefineResourceOptions, DeleteManyResult, EncryptionConfigurations, EncryptionPasswordConfigurations, Environment, EslintHealthChecker, EventSubscription, ExistsExceptCurrentIdRuleOptions, ExistsExceptCurrentUserRuleOptions, FastifyInstance, FileNamingStrategy, FileValidationOptions, FileValidator, FileVisibility, FilesOrchestrator, FilterFunction, FilterOperator, FilterOptions, FilterRule, FilterRules, ForbiddenError, GroupByFields, GroupedRoutesOptions, HealthCheck, HealthStatus, HeraldConnector, HttpConfigurations, HttpConnector, HttpError, HttpErrorCodes, type IdempotencyOptions, Image, ImageFormat, ImageInput, ImageTransformCallback, ImageTransformConfig, ImageTransformOptions, type IpFilterOptions, ListOptions, LocalDriver, LocalStorageDriverOptions, LocalizedObject, LogConfigurations, LoggerConnector, MAIL_EVENTS, Mail, type MailAddress, type MailAttachment, type MailConfigurations, MailError, type MailErrorCode, type MailEvents, type MailMode, type MailOptions, type MailPriority, type MailResult, MailerConnector, type MailersConfig, type MaintenanceOptions, Middleware, MiddlewareResponse, MimeTypes, NoopChannel, type NormalizedMail, NotAcceptableError, NotAllowedError, NotificationsConnector, PaginationMode, PaginationResult, PartialMiddleware, PartialPick, PipelineOptions, PrefixConfig, PrefixOptions, PresignedOptions, PresignedUploadOptions, PutDirectoryOptions, PutDirectoryResult, PutFromUrlOptions, PutOptions, QueryBuilderContract, Queue, R2Driver, R2StorageDriverOptions, type RateLimitOptions, RegisterResource, RegisteredUseCase, RepositoryAdapterContract, RepositoryConfigurations, RepositoryEvent, RepositoryManager, RepositoryOptions, RepositoryOptionsWithCursor, RepositoryOptionsWithPages, Request, RequestContextStore, RequestController, RequestControllerContract, RequestEvent, RequestHandler, RequestHandlerType, RequestHandlerValidation, RequestLog, RequestMethod, ResolvedCLICommandOption, Resource, ResourceArraySchema, ResourceCastType, ResourceConstructor, ResourceContract, ResourceFieldBuilder, ResourceFieldBuilderDateOutputOptions, ResourceFieldConfig, ResourceMethod, ResourceNotFoundError, ResourceOutputValueCastType, ResourceSchema, ResourceSelfReference, Response, ResponseBodyValue, ResponseEvent, ResponseSSEController, ResponseSchema, ResponseStatus, ResponseStreamController, Restful, RestfulMiddleware, ReturnedResponse, Route, RouteOptions, RouteResource, Router, RouterGroupCallback, RouterStacks, RuntimeStrategy, S3Driver, type SESConfigurations, type SMTPConfigurations, SafeFetchOptions, SafeFetchResult, SaveAsOptions, SaveMode, SaveOptions, ScopedStorage, ScopedStorageContract, SeedClock, SeedContext, SeedRecordRef, SeedResult, Seeder, SeederDependencyCycleError, SeederMetadata, SendBufferOptions, SendFileOptions, ServerError, ShutdownListener, SocketConnector, SocketOptions, Storage, StorageConfigurations, StorageConnector, StorageCopyEventPayload, StorageDriverConfig, StorageDriverContextStore, StorageDriverContract, StorageDriverName, StorageDriverRegistry, StorageDriverType, StorageError, StorageErrorOptions, StorageEventHandler, StorageEventPayload, StorageEventType, StorageFile, StorageFileData, StorageFileInfo, StorageManagerContract, StoragePutEventPayload, TemporaryTokenError, TemporaryTokenPayload, TemporaryTokenValidation, Track, TrackableModel, TypedAllRepositoryOptions, TypedRepositoryOptions, TypedRepositoryOptionsWithCursor, TypedRepositoryOptionsWithPages, TypescriptHealthChecker, UPLOADS_DEFAULTS, UnAuthorizedError, UniqueExceptCurrentIdRuleOptions, UniqueExceptCurrentUserRuleOptions, UnknownSeederDependencyError, UploadedFile, UploadedFileImageOptions, UploadsConfigurations, UseCase, UseCaseAfterMiddleware, UseCaseBeforeMiddleware, UseCaseBroadcastChannel, UseCaseBroadcastEvent, UseCaseBroadcastOption, UseCaseConfigurations, UseCaseContext, UseCaseErrorResult, UseCaseEventsCallbacksMap, UseCaseGuard, UseCaseHandler, UseCaseOnExecutingContext, UseCaseResult, UseCaseRuntimeOptions, UseCaseWithSchema, ValidationConfiguration, WarlockConfig, WarlockConfigManager, WatermarkConfig, WhereOperator, addUseCaseHistory, anyMatch, app, appLog, appPath, assertMailCount, assertMailSent, assetsUrl, bootstrap, broadcastUseCaseResult, buildIdempotencyCacheKey, cachePath, captureMail, clearTestMailbox, closeAllMailers, closeMailer, closeServerWithTimeout, colors, command, config, configPath, configSpecialHandlers, connectorsManager, container, createHttpApplication, createRequestStore, decrypt, defaultHttpConfigurations, defineConfig, defineResource, displayEnvironmentMode, encrypt, env, environment, existsExceptCurrentIdRule, existsExceptCurrentUserRule, expectJson, fetchLatestVersion, fileExtensionRule, fileRule, fileTypeRule, filesOrchestrator, findMailsBySubject, findMailsTo, fireLifecycleEvent, fromRequest, generateMailId, getDefaultMailConfig, getHttpServer, getLastMail, getLocalized, getMailEventName, getMailMode, getMailboxSize, getMailer, getMailerConfig, getMimeType, getPoolStats, getSocketServer, getTestMailbox, getTestServerUrl, getUseCase, getUseCaseHistory, getUseCases, globalEventsCallbacksMap, globalUseCasesEvents, hashBody, hashPassword, health, hmacHash, httpConfig, imageRule, increaseUseCaseFailedCalls, increaseUseCaseSuccessCalls, ipMatches, isDevelopmentMode, isNewerVersion, isPrivateOrReservedIp, isProductionMode, isTestMode, isTestServerRunning, isUnknownTsExtensionError, isValidIdempotencyKey, loadS3, logResponse, logsPath, lowerStage3Decorators, mailEvents, measure, middleware, onCleanup, parseJsonResponse, parseSize, paths, promiseAllObject, publicPath, publicUrl, registerAppConfig, registerHttpPlugins, renderReact, renderReactMail, requestContext, resetMailConfig, resolveMailConfig, resolveWithinRoot, rootPath, router, runPipeline, safeFetchToBuffer, sanitizePath, seeder, sendMail, setBaseUrl, setEnvironment, setLogConfigurations, setMailConfigurations, setMailMode, setupTest, sleep, sluggable, srcPath, startHttpServer, startHttpTestServer, stopHttpApplication, stopHttpTestServer, storage, storageConfig, storageConfigurations, storageDriverContext, storagePath, t, tempPath, testDelete, testGet, testPatch, testPost, testPut, testRequest, toJson, uniqueExceptCurrentIdRule, uniqueExceptCurrentUserRule, uploadedFileMetadataSchema, uploadsConfig, uploadsPath, uploadsUrl, url, useCase, useComputedModel, useComputedSlug, useCurrentUser, useHashedPassword, useRequest, useRequestStore, verifyMailer, verifyPassword, warlockConfigManager, warlockPath, wasMailSentTo, wasMailSentWithSubject, wrapResponseInDataKey };
+export { $registerUseCase, $unregisterUseCase, AccessConnector, AggregateExpressionInput, AggregateExpressions, AiConnector, AllRepositoryOptions, AppConfigurations, Application, BOOT_SIGNAL_ENV_KEY, BOOT_SIGNAL_VERSION, BadRequestError, BadSchemaUseCaseError, BaseConnector, BaseHealthChecker, type BenchmarkChannel, type BenchmarkConfigurations, type BenchmarkErrorResult, type BenchmarkOptions, BenchmarkProfiler, type BenchmarkProfilerOptions, type BenchmarkResult, BenchmarkSnapshots, type BenchmarkSnapshotsOptions, type BenchmarkStats, type BenchmarkSuccessResult, BootContext, BootListener, BootSignal, BootSignalType, CLICommand, CLICommandAction, CLICommandOption, CLICommandOptions, CLICommandPreload, CLICommandSource, CacheConnector, type CacheMiddlewareOptions, CachedRepositoryOptions, type CapturedMail, CascadeAdapter, CascadeQueryBuilder, ChunkCallback, ClosableServer, CloudDriver, CloudStorageDriverContract, CloudStorageDriverOptions, CloudStorageFileData, CommandActionData, type ConcurrencyLimitOptions, ConfigKey, ConfigKeyRegistry, ConfigName, ConfigRegistry, ConfigSpecialHandlers, ConflictError, Connector, ConnectorLifecyclePhase, ConnectorName, ConnectorPriority, ConnectorsManager, ConsoleChannel, ContainerTypes, CookieOptions, CursorPaginationOptions, CursorPaginationResult, DOSpacesDriver, DatabaseCacheDriver, type DatabaseCacheOptions, DatabaseConnector, DatabaseLog, DatabaseLogModel, DatabaseLogOptions, DecoratorLoweringPlugin, DefineResourceOptions, DeleteManyResult, EncryptionConfigurations, EncryptionPasswordConfigurations, Environment, EslintHealthChecker, EventSubscription, ExistsExceptCurrentIdRuleOptions, ExistsExceptCurrentUserRuleOptions, FastifyInstance, FileNamingStrategy, FileValidationOptions, FileValidator, FileVisibility, FilesOrchestrator, FilterFunction, FilterOperator, FilterOptions, FilterRule, FilterRules, ForbiddenError, GroupByFields, GroupedRoutesOptions, HealthCheck, HealthStatus, HeraldConnector, HttpConfigurations, HttpConnector, HttpError, HttpErrorCodes, type IdempotencyOptions, Image, ImageFormat, ImageInput, ImageTransformCallback, ImageTransformConfig, ImageTransformOptions, type IpFilterOptions, ListOptions, LocalDriver, LocalStorageDriverOptions, LocalizedObject, LogConfigurations, LoggerConnector, MAIL_EVENTS, Mail, type MailAddress, type MailAttachment, type MailConfigurations, MailError, type MailErrorCode, type MailEvents, type MailMode, type MailOptions, type MailPriority, type MailResult, MailerConnector, type MailersConfig, type MaintenanceOptions, Middleware, MiddlewareResponse, MimeTypes, NoopChannel, type NormalizedMail, NotAcceptableError, NotAllowedError, NotificationsConnector, PaginationMode, PaginationResult, PartialMiddleware, PartialPick, PipelineOptions, PortInUseError, PrefixConfig, PrefixOptions, PresignedOptions, PresignedUploadOptions, PutDirectoryOptions, PutDirectoryResult, PutFromUrlOptions, PutOptions, QueryBuilderContract, Queue, R2Driver, R2StorageDriverOptions, type RateLimitOptions, RegisterResource, RegisteredUseCase, RepositoryAdapterContract, RepositoryConfigurations, RepositoryEvent, RepositoryManager, RepositoryOptions, RepositoryOptionsWithCursor, RepositoryOptionsWithPages, Request, RequestContextStore, RequestController, RequestControllerContract, RequestEvent, RequestHandler, RequestHandlerType, RequestHandlerValidation, RequestLog, RequestMethod, ResolvedCLICommandOption, Resource, ResourceArraySchema, ResourceCastType, ResourceConstructor, ResourceContract, ResourceFieldBuilder, ResourceFieldBuilderDateOutputOptions, ResourceFieldConfig, ResourceMethod, ResourceNotFoundError, ResourceOutputValueCastType, ResourceSchema, ResourceSelfReference, Response, ResponseBodyValue, ResponseEvent, ResponseSSEController, ResponseSchema, ResponseStatus, ResponseStreamController, Restful, RestfulMiddleware, ReturnedResponse, Route, RouteOptions, RouteResource, Router, RouterGroupCallback, RouterStacks, RuntimeStrategy, S3Driver, type SESConfigurations, type SMTPConfigurations, SafeFetchOptions, SafeFetchResult, SaveAsOptions, SaveMode, SaveOptions, ScopedStorage, ScopedStorageContract, SeedClock, SeedContext, SeedRecordRef, SeedResult, Seeder, SeederDependencyCycleError, SeederMetadata, SendBufferOptions, SendFileOptions, ServerError, ShutdownListener, SocketConnector, SocketOptions, StartHttpTestServerOptions, Storage, StorageConfigurations, StorageConnector, StorageCopyEventPayload, StorageDriverConfig, StorageDriverContextStore, StorageDriverContract, StorageDriverName, StorageDriverRegistry, StorageDriverType, StorageError, StorageErrorOptions, StorageEventHandler, StorageEventPayload, StorageEventType, StorageFile, StorageFileData, StorageFileInfo, StorageManagerContract, StoragePutEventPayload, TEST_SERVER_PORT_ENV_KEY, TemporaryTokenError, TemporaryTokenPayload, TemporaryTokenValidation, Track, TrackableModel, TypedAllRepositoryOptions, TypedRepositoryOptions, TypedRepositoryOptionsWithCursor, TypedRepositoryOptionsWithPages, TypescriptHealthChecker, UPLOADS_DEFAULTS, UnAuthorizedError, UniqueExceptCurrentIdRuleOptions, UniqueExceptCurrentUserRuleOptions, UnknownSeederDependencyError, UploadedFile, UploadedFileImageOptions, UploadsConfigurations, UseCase, UseCaseAfterMiddleware, UseCaseBeforeMiddleware, UseCaseBroadcastChannel, UseCaseBroadcastEvent, UseCaseBroadcastOption, UseCaseConfigurations, UseCaseContext, UseCaseErrorResult, UseCaseEventsCallbacksMap, UseCaseGuard, UseCaseHandler, UseCaseOnExecutingContext, UseCaseResult, UseCaseRuntimeOptions, UseCaseWithSchema, ValidationConfiguration, WarlockConfig, WarlockConfigManager, WatermarkConfig, WhereOperator, addUseCaseHistory, anyMatch, app, appLog, appPath, assertMailCount, assertMailSent, assertPortIsAvailable, assetsUrl, bootstrap, broadcastUseCaseResult, buildIdempotencyCacheKey, cachePath, captureMail, clearTestMailbox, closeAllMailers, closeMailer, closeServerWithTimeout, colors, command, config, configPath, configSpecialHandlers, connectorsManager, container, createHttpApplication, createRequestStore, decrypt, defaultHttpConfigurations, defineConfig, defineResource, displayEnvironmentMode, encrypt, env, environment, existsExceptCurrentIdRule, existsExceptCurrentUserRule, expectJson, fetchLatestVersion, fileExtensionRule, fileRule, fileTypeRule, filesOrchestrator, findMailsBySubject, findMailsTo, fireLifecycleEvent, fromRequest, generateMailId, getDefaultMailConfig, getHttpServer, getLastMail, getLocalized, getMailEventName, getMailMode, getMailboxSize, getMailer, getMailerConfig, getMimeType, getPoolStats, getSocketServer, getTestMailbox, getTestServerUrl, getUseCase, getUseCaseHistory, getUseCases, globalEventsCallbacksMap, globalUseCasesEvents, hashBody, hashPassword, health, hmacHash, httpConfig, imageRule, increaseUseCaseFailedCalls, increaseUseCaseSuccessCalls, ipMatches, isBootSignal, isDevelopmentMode, isNewerVersion, isPortAvailable, isPrivateOrReservedIp, isProductionMode, isTestMode, isTestServerRunning, isUnknownTsExtensionError, isValidIdempotencyKey, loadS3, logResponse, logsPath, lowerStage3Decorators, mailEvents, measure, middleware, onCleanup, parseJsonResponse, parseSize, paths, promiseAllObject, publicPath, publicUrl, publishTestServerPort, registerAppConfig, registerHttpPlugins, renderReact, renderReactMail, requestContext, resetMailConfig, resolveMailConfig, resolveWithinRoot, rootPath, router, runPipeline, safeFetchToBuffer, sanitizePath, seeder, sendBootSignal, sendMail, setBaseUrl, setConfig, setEnvironment, setLogConfigurations, setMailConfigurations, setMailMode, setupTest, sleep, sluggable, srcPath, startHttpServer, startHttpTestServer, stopHttpApplication, stopHttpTestServer, storage, storageConfig, storageConfigurations, storageDriverContext, storagePath, t, tempPath, testDelete, testGet, testPatch, testPost, testPut, testRequest, toJson, uniqueExceptCurrentIdRule, uniqueExceptCurrentUserRule, uploadedFileMetadataSchema, uploadsConfig, uploadsPath, uploadsUrl, url, useCase, useComputedModel, useComputedSlug, useCurrentUser, useHashedPassword, useRequest, useRequestStore, verifyMailer, verifyPassword, warlockConfigManager, warlockPath, wasMailSentTo, wasMailSentWithSubject, withdrawTestServerPort, wrapResponseInDataKey };
 import "./config/types.mjs";
 import "./storage/types.mjs";
 import "./validation/types.mjs";

package/esm/index.mjs

@@ -1,6 +1,7 @@
 import { config } from "./config/config-getter.mjs";
 import { ConfigSpecialHandlers, configSpecialHandlers } from "./config/config-special-handlers.mjs";
 import { registerAppConfig } from "./config/config-handlers.mjs";
+import { setConfig } from "./config/config-setter.mjs";
 import "./config/index.mjs";
 import { appLog } from "./utils/app-log.mjs";
 import { DatabaseLogModel } from "./database/models/database-log/database-log.mjs";
@@ -22,6 +23,7 @@ import { BadRequestError, ConflictError, ForbiddenError, HttpError, NotAcceptabl
 import { createRequestStore, fromRequest, t } from "./http/middleware/inject-request-context.mjs";
 import { defaultHttpConfigurations, httpConfig } from "./http/config.mjs";
 import { container } from "./container/index.mjs";
+import { BOOT_SIGNAL_ENV_KEY, BOOT_SIGNAL_VERSION, isBootSignal, sendBootSignal } from "./application/boot-signal.mjs";
 import { Application } from "./application/application.mjs";
 import { storageConfig, storageConfigurations } from "./storage/config.mjs";
 import { StorageFile } from "./storage/storage-file.mjs";
@@ -61,6 +63,7 @@ import { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from "./htt
 import { anyMatch, ipMatches } from "./http/middleware/utils/cidr-match.mjs";
 import { parseSize } from "./http/middleware/utils/parse-size.mjs";
 import { middleware } from "./http/middleware/middleware-list.mjs";
+import { PortInUseError, assertPortIsAvailable, isPortAvailable } from "./http/port-preflight.mjs";
 import "./http/index.mjs";
 import { existsExceptCurrentIdRule } from "./validation/database/exists-except-current-id.mjs";
 import { existsExceptCurrentUserRule } from "./validation/database/exists-except-current-user.mjs";
@@ -133,6 +136,7 @@ import { Restful } from "./restful/restful.mjs";
 import "./restful/index.mjs";
 import { getSocketServer } from "./socket/utils.mjs";
 import "./socket/index.mjs";
+import { TEST_SERVER_PORT_ENV_KEY, publishTestServerPort, withdrawTestServerPort } from "./tests/test-server-port-channel.mjs";
 import { isTestServerRunning, startHttpTestServer, stopHttpTestServer } from "./tests/start-http-development-server.mjs";
 import { expectJson, getTestServerUrl, parseJsonResponse, testDelete, testGet, testPatch, testPost, testPut, testRequest } from "./tests/test-helpers.mjs";
 import { setupTest } from "./tests/vitest-setup.mjs";
@@ -154,4 +158,4 @@ import { colors } from "@mongez/copper";
 
 export * from "@mongez/localization"
 
-export { $registerUseCase, $unregisterUseCase, AccessConnector, AiConnector, Application, BadRequestError, BadSchemaUseCaseError, BaseConnector, BaseHealthChecker, BenchmarkProfiler, BenchmarkSnapshots, CLICommand, CacheConnector, CascadeAdapter, CascadeQueryBuilder, CloudDriver, ConfigSpecialHandlers, ConflictError, ConnectorLifecyclePhase, ConnectorPriority, ConnectorsManager, ConsoleChannel, DOSpacesDriver, DatabaseCacheDriver, DatabaseConnector, DatabaseLog, DatabaseLogModel, EslintHealthChecker, FileValidator, FilesOrchestrator, ForbiddenError, HeraldConnector, HttpConnector, HttpError, HttpErrorCodes, Image, LocalDriver, LoggerConnector, MAIL_EVENTS, Mail, MailError, MailerConnector, MimeTypes, NoopChannel, NotAcceptableError, NotAllowedError, NotificationsConnector, Queue, R2Driver, RegisterResource, RepositoryManager, Request, RequestController, RequestLog, Resource, ResourceFieldBuilder, ResourceNotFoundError, Response, ResponseStatus, Restful, Router, S3Driver, ScopedStorage, SeederDependencyCycleError, ServerError, SocketConnector, Storage, StorageConnector, StorageError, StorageFile, TypescriptHealthChecker, UPLOADS_DEFAULTS, UnAuthorizedError, UnknownSeederDependencyError, UploadedFile, WarlockConfigManager, addUseCaseHistory, anyMatch, app, appLog, appPath, assertMailCount, assertMailSent, assetsUrl, bootstrap, broadcastUseCaseResult, buildIdempotencyCacheKey, cachePath, captureMail, clearTestMailbox, closeAllMailers, closeMailer, closeServerWithTimeout, colors, command, config, configPath, configSpecialHandlers, connectorsManager, container, createHttpApplication, createRequestStore, decrypt, defaultHttpConfigurations, defineConfig, defineResource, displayEnvironmentMode, encrypt, env, environment, existsExceptCurrentIdRule, existsExceptCurrentUserRule, expectJson, fetchLatestVersion, fileExtensionRule, fileRule, fileTypeRule, filesOrchestrator, findMailsBySubject, findMailsTo, fireLifecycleEvent, fromRequest, generateMailId, getDefaultMailConfig, getHttpServer, getLastMail, getLocalized, getMailEventName, getMailMode, getMailboxSize, getMailer, getMailerConfig, getMimeType, getPoolStats, getSocketServer, getTestMailbox, getTestServerUrl, getUseCase, getUseCaseHistory, getUseCases, globalEventsCallbacksMap, globalUseCasesEvents, hashBody, hashPassword, health, hmacHash, httpConfig, imageRule, increaseUseCaseFailedCalls, increaseUseCaseSuccessCalls, ipMatches, isDevelopmentMode, isNewerVersion, isPrivateOrReservedIp, isProductionMode, isTestMode, isTestServerRunning, isUnknownTsExtensionError, isValidIdempotencyKey, loadS3, logResponse, logsPath, lowerStage3Decorators, mailEvents, measure, middleware, onCleanup, parseJsonResponse, parseSize, paths, promiseAllObject, publicPath, publicUrl, registerAppConfig, registerHttpPlugins, renderReact, renderReactMail, requestContext, resetMailConfig, resolveMailConfig, resolveWithinRoot, rootPath, router, runPipeline, safeFetchToBuffer, sanitizePath, seeder, sendMail, setBaseUrl, setEnvironment, setLogConfigurations, setMailConfigurations, setMailMode, setupTest, sleep, sluggable, srcPath, startHttpServer, startHttpTestServer, stopHttpApplication, stopHttpTestServer, storage, storageConfig, storageConfigurations, storageDriverContext, storagePath, t, tempPath, testDelete, testGet, testPatch, testPost, testPut, testRequest, toJson, uniqueExceptCurrentIdRule, uniqueExceptCurrentUserRule, uploadedFileMetadataSchema, uploadsConfig, uploadsPath, uploadsUrl, url, useCase, useComputedModel, useComputedSlug, useCurrentUser, useHashedPassword, useRequest, useRequestStore, verifyMailer, verifyPassword, warlockConfigManager, warlockPath, wasMailSentTo, wasMailSentWithSubject, wrapResponseInDataKey };
+export { $registerUseCase, $unregisterUseCase, AccessConnector, AiConnector, Application, BOOT_SIGNAL_ENV_KEY, BOOT_SIGNAL_VERSION, BadRequestError, BadSchemaUseCaseError, BaseConnector, BaseHealthChecker, BenchmarkProfiler, BenchmarkSnapshots, CLICommand, CacheConnector, CascadeAdapter, CascadeQueryBuilder, CloudDriver, ConfigSpecialHandlers, ConflictError, ConnectorLifecyclePhase, ConnectorPriority, ConnectorsManager, ConsoleChannel, DOSpacesDriver, DatabaseCacheDriver, DatabaseConnector, DatabaseLog, DatabaseLogModel, EslintHealthChecker, FileValidator, FilesOrchestrator, ForbiddenError, HeraldConnector, HttpConnector, HttpError, HttpErrorCodes, Image, LocalDriver, LoggerConnector, MAIL_EVENTS, Mail, MailError, MailerConnector, MimeTypes, NoopChannel, NotAcceptableError, NotAllowedError, NotificationsConnector, PortInUseError, Queue, R2Driver, RegisterResource, RepositoryManager, Request, RequestController, RequestLog, Resource, ResourceFieldBuilder, ResourceNotFoundError, Response, ResponseStatus, Restful, Router, S3Driver, ScopedStorage, SeederDependencyCycleError, ServerError, SocketConnector, Storage, StorageConnector, StorageError, StorageFile, TEST_SERVER_PORT_ENV_KEY, TypescriptHealthChecker, UPLOADS_DEFAULTS, UnAuthorizedError, UnknownSeederDependencyError, UploadedFile, WarlockConfigManager, addUseCaseHistory, anyMatch, app, appLog, appPath, assertMailCount, assertMailSent, assertPortIsAvailable, assetsUrl, bootstrap, broadcastUseCaseResult, buildIdempotencyCacheKey, cachePath, captureMail, clearTestMailbox, closeAllMailers, closeMailer, closeServerWithTimeout, colors, command, config, configPath, configSpecialHandlers, connectorsManager, container, createHttpApplication, createRequestStore, decrypt, defaultHttpConfigurations, defineConfig, defineResource, displayEnvironmentMode, encrypt, env, environment, existsExceptCurrentIdRule, existsExceptCurrentUserRule, expectJson, fetchLatestVersion, fileExtensionRule, fileRule, fileTypeRule, filesOrchestrator, findMailsBySubject, findMailsTo, fireLifecycleEvent, fromRequest, generateMailId, getDefaultMailConfig, getHttpServer, getLastMail, getLocalized, getMailEventName, getMailMode, getMailboxSize, getMailer, getMailerConfig, getMimeType, getPoolStats, getSocketServer, getTestMailbox, getTestServerUrl, getUseCase, getUseCaseHistory, getUseCases, globalEventsCallbacksMap, globalUseCasesEvents, hashBody, hashPassword, health, hmacHash, httpConfig, imageRule, increaseUseCaseFailedCalls, increaseUseCaseSuccessCalls, ipMatches, isBootSignal, isDevelopmentMode, isNewerVersion, isPortAvailable, isPrivateOrReservedIp, isProductionMode, isTestMode, isTestServerRunning, isUnknownTsExtensionError, isValidIdempotencyKey, loadS3, logResponse, logsPath, lowerStage3Decorators, mailEvents, measure, middleware, onCleanup, parseJsonResponse, parseSize, paths, promiseAllObject, publicPath, publicUrl, publishTestServerPort, registerAppConfig, registerHttpPlugins, renderReact, renderReactMail, requestContext, resetMailConfig, resolveMailConfig, resolveWithinRoot, rootPath, router, runPipeline, safeFetchToBuffer, sanitizePath, seeder, sendBootSignal, sendMail, setBaseUrl, setConfig, setEnvironment, setLogConfigurations, setMailConfigurations, setMailMode, setupTest, sleep, sluggable, srcPath, startHttpServer, startHttpTestServer, stopHttpApplication, stopHttpTestServer, storage, storageConfig, storageConfigurations, storageDriverContext, storagePath, t, tempPath, testDelete, testGet, testPatch, testPost, testPut, testRequest, toJson, uniqueExceptCurrentIdRule, uniqueExceptCurrentUserRule, uploadedFileMetadataSchema, uploadsConfig, uploadsPath, uploadsUrl, url, useCase, useComputedModel, useComputedSlug, useCurrentUser, useHashedPassword, useRequest, useRequestStore, verifyMailer, verifyPassword, warlockConfigManager, warlockPath, wasMailSentTo, wasMailSentWithSubject, withdrawTestServerPort, wrapResponseInDataKey };

package/esm/production/assert-generated-imports.mjs

@@ -0,0 +1,94 @@
+import { builtinModules } from "node:module";
+
+//#region ../core/src/production/assert-generated-imports.ts
+/**
+* Raised when generated code would ship an import the app cannot resolve.
+*
+* Carries every violation rather than the first, so a build reports the whole
+* problem in one pass instead of one specifier per re-run.
+*/
+var UndeclaredGeneratedImportError = class extends Error {
+	constructor(violations) {
+		super([
+			`Generated code imports ${violations.length} package(s) the application does not declare:`,
+			"",
+			...violations.map(({ file, specifier, packageName }) => `  ${file} → "${specifier}" (requires "${packageName}" in the app's dependencies)`),
+			"",
+			"Generated code may only import packages the app itself declares. A framework-internal",
+			"dependency must be reached through a re-export from @warlock.js/core — a bare specifier",
+			"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout."
+		].join("\n"));
+		this.violations = violations;
+		this.name = "UndeclaredGeneratedImportError";
+	}
+};
+const IMPORT_PATTERN = /(?:import|export)\s+(?:[^"';]*?\sfrom\s*)?["']([^"']+)["']|import\s*\(\s*["']([^"']+)["']\s*\)/g;
+/**
+* Every module specifier a source file references — static, side-effect,
+* re-export and dynamic `import()` forms alike.
+*
+* Regex is sufficient and deliberate here: the input is code this builder wrote
+* itself, so it has no comments, no strings that look like imports, and no
+* syntax the pattern could misread. Parsing it with a full AST would buy
+* nothing and cost a dependency in the build path.
+*/
+function extractSpecifiers(content) {
+	const specifiers = [];
+	for (const match of content.matchAll(IMPORT_PATTERN)) {
+		const specifier = match[1] ?? match[2];
+		if (specifier) specifiers.push(specifier);
+	}
+	return specifiers;
+}
+/**
+* The package a specifier resolves to — `@scope/name` or `name`, ignoring any
+* deep path after it. Returns undefined for anything that is not a package:
+* relative paths, absolute paths, URLs, and Node builtins.
+*/
+function resolvePackageName(specifier) {
+	if (specifier.startsWith(".") || specifier.startsWith("/") || specifier.startsWith("node:") || specifier.includes("://")) return;
+	const segments = specifier.split("/");
+	const packageName = specifier.startsWith("@") ? segments.slice(0, 2).join("/") : segments[0];
+	if (builtinModules.includes(packageName)) return;
+	return packageName;
+}
+/**
+* Find every import in generated code that the app does not declare.
+*
+* `dependencies` only, deliberately: the artifact this checks is a production
+* bundle, so a package the app lists as a dev dependency is not guaranteed to
+* be installed where it runs.
+*/
+function findUndeclaredImports(files, declaredDependencies) {
+	const declared = new Set(declaredDependencies);
+	const violations = [];
+	for (const { file, content } of files) for (const specifier of extractSpecifiers(content)) {
+		const packageName = resolvePackageName(specifier);
+		if (!packageName || declared.has(packageName)) continue;
+		violations.push({
+			file,
+			specifier,
+			packageName
+		});
+	}
+	return violations;
+}
+/**
+* Fail the build when generated code would import something the app cannot
+* resolve.
+*
+* This is the part that stops the defect class from returning. Rewriting the
+* one bad specifier fixes today's bundle; only the assertion stops the next
+* change to the generator from reintroducing it — under npm or yarn the mistake
+* is invisible, because hoisting resolves it by accident.
+*
+* @throws {UndeclaredGeneratedImportError} listing every violation found.
+*/
+function assertGeneratedImportsAreDeclared(files, declaredDependencies) {
+	const violations = findUndeclaredImports(files, declaredDependencies);
+	if (violations.length > 0) throw new UndeclaredGeneratedImportError(violations);
+}
+
+//#endregion
+export { assertGeneratedImportsAreDeclared };
+//# sourceMappingURL=assert-generated-imports.mjs.map

package/esm/production/assert-generated-imports.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-generated-imports.mjs","names":[],"sources":["../../../../../../../core/src/production/assert-generated-imports.ts"],"sourcesContent":["import { builtinModules } from \"node:module\";\n\n/**\n * A specifier the builder wrote into generated code that the consuming app does\n * not declare.\n */\nexport type UndeclaredImport = {\n  /** File the import was written into, relative to the generation directory. */\n  file: string;\n  /** The specifier exactly as emitted. */\n  specifier: string;\n  /** The package the specifier resolves to — `@scope/name` for a deep import. */\n  packageName: string;\n};\n\nexport type GeneratedFile = {\n  file: string;\n  content: string;\n};\n\n/**\n * Raised when generated code would ship an import the app cannot resolve.\n *\n * Carries every violation rather than the first, so a build reports the whole\n * problem in one pass instead of one specifier per re-run.\n */\nexport class UndeclaredGeneratedImportError extends Error {\n  public constructor(public readonly violations: UndeclaredImport[]) {\n    super(\n      [\n        `Generated code imports ${violations.length} package(s) the application does not declare:`,\n        \"\",\n        ...violations.map(\n          ({ file, specifier, packageName }) =>\n            `  ${file} → \"${specifier}\" (requires \"${packageName}\" in the app's dependencies)`,\n        ),\n        \"\",\n        \"Generated code may only import packages the app itself declares. A framework-internal\",\n        \"dependency must be reached through a re-export from @warlock.js/core — a bare specifier\",\n        \"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"UndeclaredGeneratedImportError\";\n  }\n}\n\n// The clause between `import` and `from` excludes `;` and both quote\n// characters so the lazy match cannot run past the end of its own statement.\n// Allowing it to would let a side-effect import (`import \"./bootstrap\";`) bind\n// to the `from` of the NEXT statement and disappear from the results.\nconst IMPORT_PATTERN =\n  /(?:import|export)\\s+(?:[^\"';]*?\\sfrom\\s*)?[\"']([^\"']+)[\"']|import\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/g;\n\n/**\n * Every module specifier a source file references — static, side-effect,\n * re-export and dynamic `import()` forms alike.\n *\n * Regex is sufficient and deliberate here: the input is code this builder wrote\n * itself, so it has no comments, no strings that look like imports, and no\n * syntax the pattern could misread. Parsing it with a full AST would buy\n * nothing and cost a dependency in the build path.\n */\nexport function extractSpecifiers(content: string): string[] {\n  const specifiers: string[] = [];\n\n  for (const match of content.matchAll(IMPORT_PATTERN)) {\n    const specifier = match[1] ?? match[2];\n\n    if (specifier) {\n      specifiers.push(specifier);\n    }\n  }\n\n  return specifiers;\n}\n\n/**\n * The package a specifier resolves to — `@scope/name` or `name`, ignoring any\n * deep path after it. Returns undefined for anything that is not a package:\n * relative paths, absolute paths, URLs, and Node builtins.\n */\nexport function resolvePackageName(specifier: string): string | undefined {\n  if (\n    specifier.startsWith(\".\") ||\n    specifier.startsWith(\"/\") ||\n    specifier.startsWith(\"node:\") ||\n    specifier.includes(\"://\")\n  ) {\n    return undefined;\n  }\n\n  const segments = specifier.split(\"/\");\n  const packageName = specifier.startsWith(\"@\") ? segments.slice(0, 2).join(\"/\") : segments[0];\n\n  if (builtinModules.includes(packageName)) {\n    return undefined;\n  }\n\n  return packageName;\n}\n\n/**\n * Find every import in generated code that the app does not declare.\n *\n * `dependencies` only, deliberately: the artifact this checks is a production\n * bundle, so a package the app lists as a dev dependency is not guaranteed to\n * be installed where it runs.\n */\nexport function findUndeclaredImports(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): UndeclaredImport[] {\n  const declared = new Set(declaredDependencies);\n  const violations: UndeclaredImport[] = [];\n\n  for (const { file, content } of files) {\n    for (const specifier of extractSpecifiers(content)) {\n      const packageName = resolvePackageName(specifier);\n\n      if (!packageName || declared.has(packageName)) {\n        continue;\n      }\n\n      violations.push({ file, specifier, packageName });\n    }\n  }\n\n  return violations;\n}\n\n/**\n * Fail the build when generated code would import something the app cannot\n * resolve.\n *\n * This is the part that stops the defect class from returning. Rewriting the\n * one bad specifier fixes today's bundle; only the assertion stops the next\n * change to the generator from reintroducing it — under npm or yarn the mistake\n * is invisible, because hoisting resolves it by accident.\n *\n * @throws {UndeclaredGeneratedImportError} listing every violation found.\n */\nexport function assertGeneratedImportsAreDeclared(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): void {\n  const violations = findUndeclaredImports(files, declaredDependencies);\n\n  if (violations.length > 0) {\n    throw new UndeclaredGeneratedImportError(violations);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,iCAAb,cAAoD,MAAM;CACxD,AAAO,YAAY,AAAgB,YAAgC;EACjE,MACE;GACE,0BAA0B,WAAW,OAAO;GAC5C;GACA,GAAG,WAAW,KACX,EAAE,MAAM,WAAW,kBAClB,KAAK,KAAK,MAAM,UAAU,eAAe,YAAY,6BACzD;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAdiC;EAgBjC,KAAK,OAAO;CACd;AACF;AAMA,MAAM,iBACJ;;;;;;;;;;AAWF,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,aAAuB,CAAC;CAE9B,KAAK,MAAM,SAAS,QAAQ,SAAS,cAAc,GAAG;EACpD,MAAM,YAAY,MAAM,MAAM,MAAM;EAEpC,IAAI,WACF,WAAW,KAAK,SAAS;CAE7B;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,WAAuC;CACxE,IACE,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,OAAO,KAC5B,UAAU,SAAS,KAAK,GAExB;CAGF,MAAM,WAAW,UAAU,MAAM,GAAG;CACpC,MAAM,cAAc,UAAU,WAAW,GAAG,IAAI,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS;CAE1F,IAAI,eAAe,SAAS,WAAW,GACrC;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,OACA,sBACoB;CACpB,MAAM,WAAW,IAAI,IAAI,oBAAoB;CAC7C,MAAM,aAAiC,CAAC;CAExC,KAAK,MAAM,EAAE,MAAM,aAAa,OAC9B,KAAK,MAAM,aAAa,kBAAkB,OAAO,GAAG;EAClD,MAAM,cAAc,mBAAmB,SAAS;EAEhD,IAAI,CAAC,eAAe,SAAS,IAAI,WAAW,GAC1C;EAGF,WAAW,KAAK;GAAE;GAAM;GAAW;EAAY,CAAC;CAClD;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,kCACd,OACA,sBACM;CACN,MAAM,aAAa,sBAAsB,OAAO,oBAAoB;CAEpE,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,+BAA+B,UAAU;AAEvD"}