@warlock.js/core 4.4.0 → 4.5.0

package/esm/generations/add-command.action.mjs

@@ -1,7 +1,7 @@
 import { rootPath, srcPath } from "../utils/paths.mjs";
 import "../utils/index.mjs";
 import { getWarlockVersion } from "../utils/framework-vesion.mjs";
-import { accessConfigStub, accessResolverStub, accessRoleMigrationStub, accessRoleModelIndexStub, accessRoleModelStub, accessUserRoleMigrationStub, accessUserRoleModelIndexStub, accessUserRoleModelStub, communicatorsConfigStub, notificationControllersStub, notificationMigrationStub, notificationModelStub, notificationRoutesStub, notificationsConfigStub, socketConfigStub } from "./stubs.mjs";
+import { accessConfigStub, accessResolverStub, accessRoleMigrationStub, accessRoleModelIndexStub, accessRoleModelStub, accessUserRoleMigrationStub, accessUserRoleModelIndexStub, accessUserRoleModelStub, aiConfigStub, communicatorsConfigStub, notificationControllersStub, notificationMigrationStub, notificationModelStub, notificationRoutesStub, notificationsConfigStub, socketConfigStub } from "./stubs.mjs";
 import { colors } from "@mongez/copper";
 import { ensureDirectoryAsync, fileExistsAsync, getFileAsync, getJsonFileAsync, putFileAsync, putJsonFileAsync } from "@warlock.js/fs";
 import { execSync } from "node:child_process";
@@ -197,6 +197,33 @@ async function completeAccessInstallation(_options) {
 	await registerAccessLocale();
 	await scaffoldAccessFiles();
 }
+/**
+* Link a satellite AI package into src/config/ai.ts via a side-effect import.
+*
+* The satellites (@warlock.js/ai-tools, ai-panoptic, ai-workspace) augment the
+* `ai` object on import — they register their runtime surface (ai.tools / ai.mcp,
+* ai.workspace, panoptic's ai.config({ panoptic }) wiring) AND the matching TS
+* declaration-merging so ai.* members resolve. config-loader runs config/ai.ts at
+* boot, so dropping a bare `import "<specifier>";` at the top of that file is what
+* actually loads the augmentation before the ai connector applies the config.
+*
+* No-op if config/ai.ts is missing (the `ai` feature ejects it) or the import is
+* already present. Inserts right after the `warlock:ai-packages` marker when it
+* exists so the satellite imports stay grouped; otherwise prepends to the top.
+*/
+async function linkAiPackageImport(specifier) {
+	const aiConfigPath = srcPath("config/ai.ts");
+	if (!await fileExistsAsync(aiConfigPath)) return;
+	const current = await getFileAsync(aiConfigPath);
+	const importLine = `import "${specifier}";`;
+	if (current.includes(importLine)) return;
+	const marker = "// >>> warlock:ai-packages (auto-managed) >>>";
+	let next;
+	if (current.includes(marker)) next = current.replace(marker, `${marker}\n${importLine}`);
+	else next = `${importLine}\n${current}`;
+	await putFileAsync(aiConfigPath, next);
+	console.log(`${colors.green("✓")} Linked ${specifier} in src/config/ai.ts`);
+}
 const featuresMap = {
 	"react-email": {
 		description: "Installs react-email for building email templates with React and Tailwind",
@@ -323,32 +350,54 @@ const featuresMap = {
 	},
 	ai: {
 		description: "Installs @warlock.js/ai — the core AI toolkit (agents, tools, workflows)",
-		dependencies: { "@warlock.js/ai": "~4.0.0" }
+		dependencies: { "@warlock.js/ai": "~4.0.0" },
+		ejectConfig: {
+			content: aiConfigStub,
+			name: "ai"
+		}
 	},
-	openai: {
-		description: "Installs the OpenAI provider for @warlock.js/ai (pulls the core ai package)",
+	"ai-openai": {
+		description: "OpenAI provider for @warlock.js/ai (pulls the core ai package)",
 		requires: ["ai"],
 		dependencies: { "@warlock.js/ai-openai": "~4.0.0" }
 	},
-	google: {
-		description: "Installs the Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)",
+	"ai-google": {
+		description: "Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)",
 		requires: ["ai"],
 		dependencies: { "@warlock.js/ai-google": "~4.0.0" }
 	},
-	anthropic: {
-		description: "Installs the Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)",
+	"ai-anthropic": {
+		description: "Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)",
 		requires: ["ai"],
 		dependencies: { "@warlock.js/ai-anthropic": "~4.0.0" }
 	},
-	bedrock: {
-		description: "Installs the AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)",
+	"ai-bedrock": {
+		description: "AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)",
 		requires: ["ai"],
 		dependencies: { "@warlock.js/ai-bedrock": "~4.0.0" }
 	},
-	ollama: {
-		description: "Installs the Ollama provider for @warlock.js/ai (pulls the core ai package)",
+	"ai-ollama": {
+		description: "Ollama provider for @warlock.js/ai (pulls the core ai package)",
 		requires: ["ai"],
 		dependencies: { "@warlock.js/ai-ollama": "~4.0.0" }
+	},
+	"ai-tools": {
+		description: "Installs @warlock.js/ai-tools — ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + an MCP client/server, under ai.tools.* / ai.mcp (pulls the core ai package)",
+		requires: ["ai"],
+		dependencies: { "@warlock.js/ai-tools": "~4.0.0" },
+		onExecuting: () => linkAiPackageImport("@warlock.js/ai-tools")
+	},
+	"ai-panoptic": {
+		description: "Installs @warlock.js/ai-panoptic — observability for @warlock.js/ai (collector, exporters, zero-setup local dashboard) via ai.config({ panoptic }) (pulls the core ai package)",
+		requires: ["ai"],
+		dependencies: { "@warlock.js/ai-panoptic": "~4.0.0" },
+		onExecuting: () => linkAiPackageImport("@warlock.js/ai-panoptic")
+	},
+	"ai-workspace": {
+		description: "Installs @warlock.js/ai-workspace — a policy-jailed filesystem + shell workspace for coding agents, as ai.workspace (pulls the core ai package)",
+		requires: ["ai"],
+		dependencies: { "@warlock.js/ai-workspace": "~4.0.0" },
+		onExecuting: () => linkAiPackageImport("@warlock.js/ai-workspace")
 	}
 };
 const allowedFeatures = Object.keys(featuresMap);

package/esm/generations/add-command.action.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"add-command.action.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/add-command.action.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport {\r\n  ensureDirectoryAsync,\r\n  fileExistsAsync,\r\n  getFileAsync,\r\n  getJsonFileAsync,\r\n  putFileAsync,\r\n  putJsonFileAsync,\r\n} from \"@warlock.js/fs\";\r\nimport { execSync } from \"node:child_process\";\r\nimport { CommandActionData } from \"../cli/types\";\r\nimport { rootPath, srcPath } from \"../utils\";\r\nimport { getWarlockVersion } from \"../utils/framework-vesion\";\r\nimport {\r\n  accessConfigStub,\r\n  accessResolverStub,\r\n  accessRoleMigrationStub,\r\n  accessRoleModelIndexStub,\r\n  accessRoleModelStub,\r\n  accessUserRoleMigrationStub,\r\n  accessUserRoleModelIndexStub,\r\n  accessUserRoleModelStub,\r\n  communicatorsConfigStub,\r\n  notificationControllersStub,\r\n  notificationMigrationStub,\r\n  notificationModelStub,\r\n  notificationRoutesStub,\r\n  notificationsConfigStub,\r\n  socketConfigStub,\r\n} from \"./stubs\";\r\n\r\n/**\r\n * Build a migration filename timestamp prefix in the framework's\r\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\r\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\r\n * stamp sibling migrations created in the same scaffold a second apart so they\r\n * never collide and keep a stable relative order.\r\n */\r\nfunction migrationTimestamp(offsetSeconds = 0): string {\r\n  const now = new Date(Date.now() + offsetSeconds * 1000);\r\n  const pad = (value: number) => String(value).padStart(2, \"0\");\r\n\r\n  return (\r\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\r\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\r\n  );\r\n}\r\n\r\nasync function completeTestInstallation(options: CommandActionData) {\r\n  // Create test-global-setup.ts (runs once before all tests)\r\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\r\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\r\n\r\n  if (!testGlobalSetupExists) {\r\n    await putFileAsync(\r\n      testGlobalSetupPath,\r\n      `/**\r\n * Global Test Setup\r\n *\r\n * Runs ONCE before all test workers.\r\n * Starts the HTTP server for integration tests.\r\n */\r\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core\";\r\n\r\nexport async function setup() {\r\n  await startHttpTestServer();\r\n}\r\n\r\nexport async function teardown() {\r\n  await stopHttpTestServer();\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\r\n  }\r\n\r\n  // Create test-setup.ts (runs per worker thread)\r\n  const testSetupPath = srcPath(\"test-setup.ts\");\r\n  const testSetupExists = await fileExistsAsync(testSetupPath);\r\n\r\n  if (!testSetupExists) {\r\n    await putFileAsync(\r\n      testSetupPath,\r\n      `/**\r\n * Per-Worker Test Setup\r\n *\r\n * Runs in EACH Vitest worker thread before tests execute.\r\n * Sets up per-worker database and cache connections.\r\n */\r\nimport { setupTest } from \"@warlock.js/core\";\r\n\r\nawait setupTest({ connectors: true });\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\r\n  }\r\n\r\n  // Create vite.config.ts\r\n  const viteConfigPath = rootPath(\"vite.config.ts\");\r\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\r\n\r\n  if (!viteConfigExists) {\r\n    await putFileAsync(\r\n      viteConfigPath,\r\n      `import { lowerStage3Decorators } from \"@warlock.js/core\";\r\nimport mongezVite from \"@mongez/vite\";\r\nimport { defineConfig } from \"vitest/config\";\r\n\r\nexport default defineConfig({\r\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\r\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\r\n  // decorated Cascade models load under Vitest.\r\n  plugins: [lowerStage3Decorators(), mongezVite()],\r\n  test: {\r\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\r\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per worker\r\n    environment: \"node\",\r\n    globals: false,\r\n    include: [\"src/app/**/*.test.ts\"],\r\n  },\r\n});\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\r\n  }\r\n}\r\n\r\nasync function completeReactEmailInstallation(_options: CommandActionData) {\r\n  // 1. Create emails/ folder with a sample component\r\n  const emailsFolderPath = rootPath(\"emails\");\r\n  const sampleEmailPath = rootPath(\"emails/welcome-email.tsx\");\r\n\r\n  if (!(await fileExistsAsync(sampleEmailPath))) {\r\n    await ensureDirectoryAsync(emailsFolderPath);\r\n    await putFileAsync(\r\n      sampleEmailPath,\r\n      `import { Body, Container, Head, Html, Text } from \"@react-email/components\";\r\nimport { Tailwind } from \"@react-email/tailwind\";\r\n\r\ninterface WelcomeEmailProps {\r\n  name: string;\r\n}\r\n\r\n/**\r\n * Sample welcome email component.\r\n * Preview with: yarn email:preview\r\n */\r\nexport default function WelcomeEmail({ name }: WelcomeEmailProps) {\r\n  return (\r\n    <Html>\r\n      <Head />\r\n      <Tailwind>\r\n        <Body className=\"bg-gray-100 font-sans\">\r\n          <Container className=\"mx-auto max-w-xl py-8 px-4\">\r\n            <Text className=\"text-2xl font-bold text-gray-900\">\r\n              Welcome, {name}!\r\n            </Text>\r\n            <Text className=\"text-gray-600 mt-2\">\r\n              You're all set. We're glad to have you on board.\r\n            </Text>\r\n          </Container>\r\n        </Body>\r\n      </Tailwind>\r\n    </Html>\r\n  );\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created emails/welcome-email.tsx`);\r\n  }\r\n\r\n  // 2. Patch tsconfig.json — add \"emails\" to include if missing\r\n  const tsconfigPath = rootPath(\"tsconfig.json\");\r\n  const tsconfig = await getJsonFileAsync(tsconfigPath);\r\n\r\n  if (!tsconfig.include) {\r\n    tsconfig.include = [];\r\n  }\r\n\r\n  if (!tsconfig.include.includes(\"emails\")) {\r\n    tsconfig.include.push(\"emails\");\r\n    await putJsonFileAsync(tsconfigPath, tsconfig);\r\n    console.log(`${colors.green(\"✓\")} Added \"emails\" to tsconfig.json include`);\r\n  }\r\n}\r\n\r\nasync function completeNotificationsInstallation(_options: CommandActionData) {\r\n  const modelPath = srcPath(\"app/notifications/notification.model.ts\");\r\n\r\n  // The model file is the sentinel for \"notifications already scaffolded\" —\r\n  // its presence means the migration was created too (timestamped, so we must\r\n  // not re-emit a duplicate on a second run).\r\n  if (await fileExistsAsync(modelPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/notifications\")} already scaffolded, skipping model + migration...`,\r\n    );\r\n    return;\r\n  }\r\n\r\n  // 1. Notification model — extends the package's DatabaseNotification base.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications\"));\r\n  await putFileAsync(modelPath, notificationModelStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/notification.model.ts`);\r\n\r\n  // 2. Migration — timestamped MM-DD-YYYY_HH-MM-SS prefix so cascade infers its\r\n  //    createdAt and orders it deterministically (migrate-action discovers\r\n  //    src/app/*/migrations/*).\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/migrations\"));\r\n\r\n  const migrationFile = `${migrationTimestamp()}-notification.migration.ts`;\r\n\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/migrations\", migrationFile),\r\n    notificationMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/notifications/migrations/${migrationFile}`,\r\n  );\r\n\r\n  // 3. HTTP surface — the in-app read/dismiss endpoints (routes + controllers),\r\n  //    gated by authMiddleware. Delete if the app exposes notifications another way.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/controllers\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/controllers/notifications.controller.ts\"),\r\n    notificationControllersStub,\r\n  );\r\n  await putFileAsync(srcPath(\"app/notifications/routes.ts\"), notificationRoutesStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/routes.ts + controllers`);\r\n}\r\n\r\nasync function registerAccessLocale() {\r\n  // Register the access locale in the project's shared translations file so a\r\n  // denied check returns a real sentence, not the raw \"access.errors.forbidden\"\r\n  // key. Append when the file exists, create it otherwise; skip if already there.\r\n  const localesPath = srcPath(\"app/shared/utils/locales.ts\");\r\n\r\n  const accessLocale = `groupedTranslations(\"access\", {\r\n  errors: {\r\n    forbidden: {\r\n      en: \"You do not have permission to perform this action.\",\r\n      ar: \"ليس لديك صلاحية لتنفيذ هذا الإجراء.\",\r\n    },\r\n  },\r\n});\r\n`;\r\n\r\n  if (await fileExistsAsync(localesPath)) {\r\n    const current = await getFileAsync(localesPath);\r\n\r\n    if (current.includes(`groupedTranslations(\"access\"`)) {\r\n      console.log(`${colors.yellowBright(\"access\")} locale already registered, skipping...`);\r\n\r\n      return;\r\n    }\r\n\r\n    // The file uses groupedTranslations already iff it calls it — only inject the\r\n    // import when no call is present yet.\r\n    const importLine = `import { groupedTranslations } from \"@warlock.js/core\";`;\r\n    const prefix = current.includes(\"groupedTranslations(\") ? \"\" : `${importLine}\\n\\n`;\r\n\r\n    await putFileAsync(localesPath, `${prefix}${current.trimEnd()}\\n\\n${accessLocale}`);\r\n\r\n    console.log(\r\n      `${colors.green(\"✓\")} Registered the access locale in src/app/shared/utils/locales.ts`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/shared/utils\"));\r\n\r\n  await putFileAsync(\r\n    localesPath,\r\n    `import { groupedTranslations } from \"@warlock.js/core\";\\n\\n${accessLocale}`,\r\n  );\r\n\r\n  console.log(`${colors.green(\"✓\")} Created src/app/shared/utils/locales.ts with the access locale`);\r\n}\r\n\r\nasync function scaffoldAccessFiles() {\r\n  // The resolver file is the sentinel for \"access already scaffolded\" — its\r\n  // presence means the role/user-role model folders and their timestamped\r\n  // migrations were created too, so we must not re-emit duplicate migrations on\r\n  // a second run.\r\n  const resolverPath = srcPath(\"app/access/services/access-resolver.ts\");\r\n\r\n  if (await fileExistsAsync(resolverPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/access\")} already scaffolded, skipping resolver + role tables...`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  // 1. Role catalog model folder (model + barrel + migration). The catalog row\r\n  //    is role name → granted permissions; managed at runtime in the DB.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role\"));\r\n  await putFileAsync(srcPath(\"app/access/models/role/role.model.ts\"), accessRoleModelStub);\r\n  await putFileAsync(srcPath(\"app/access/models/role/index.ts\"), accessRoleModelIndexStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role/migrations\"));\r\n\r\n  // Migration filenames carry a MM-DD-YYYY_HH-MM-SS prefix so cascade infers\r\n  // their createdAt and orders them deterministically (the migrate action\r\n  // discovers src/app/*/models/*/migrations/*). The two tables are independent\r\n  // (no FK between them), but the user-role migration is stamped a second later\r\n  // so the relative order is stable.\r\n  const roleMigrationFile = `${migrationTimestamp()}-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/role/migrations\", roleMigrationFile),\r\n    accessRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/role/migrations/${roleMigrationFile}`,\r\n  );\r\n\r\n  // 2. UserRole assignment model folder (model + barrel + migration). The model\r\n  //    statics scope an unresolved tenant to GLOBAL rows only (security\r\n  //    invariant) — see the stub for the reasoning.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/user-role.model.ts\"),\r\n    accessUserRoleModelStub,\r\n  );\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/index.ts\"),\r\n    accessUserRoleModelIndexStub,\r\n  );\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/user-role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role/migrations\"));\r\n\r\n  const userRoleMigrationFile = `${migrationTimestamp(1)}-user-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/migrations\", userRoleMigrationFile),\r\n    accessUserRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/user-role/migrations/${userRoleMigrationFile}`,\r\n  );\r\n\r\n  // 3. The DatabaseAccessResolver — the one required config seam, wired into\r\n  //    config/access.ts by the ejected stub.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/services\"));\r\n  await putFileAsync(resolverPath, accessResolverStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/services/access-resolver.ts`);\r\n}\r\n\r\nasync function completeAccessInstallation(_options: CommandActionData) {\r\n  await registerAccessLocale();\r\n  await scaffoldAccessFiles();\r\n}\r\n\r\nconst featuresMap: Record<\r\n  string,\r\n  {\r\n    dependencies?: Record<string, string>;\r\n    devDependencies?: Record<string, string>;\r\n    description: string;\r\n    requires?: string[];\r\n    script?: Record<string, string>;\r\n    onExecuting?: (options: CommandActionData) => Promise<any>;\r\n    ejectConfig?: {\r\n      content: string;\r\n      name: string;\r\n    };\r\n  }\r\n> = {\r\n  \"react-email\": {\r\n    description: \"Installs react-email for building email templates with React and Tailwind\",\r\n    requires: [\"mail\", \"react\"],\r\n    dependencies: {\r\n      \"react-email\": \"^5.2.10\",\r\n      \"@react-email/components\": \"^1.0.11\",\r\n      \"@react-email/render\": \"^2.0.5\",\r\n      \"@react-email/tailwind\": \"^2.0.7\",\r\n    },\r\n    devDependencies: {\r\n      \"@react-email/preview-server\": \"5.2.10\",\r\n    },\r\n    script: {\r\n      \"email:preview\": \"npx react-email dev\",\r\n    },\r\n    onExecuting: completeReactEmailInstallation,\r\n  },\r\n  react: {\r\n    description:\r\n      \"Installs React and React dom for rendering React components (non-interactive), useful for sending mails and generating HTML\",\r\n    dependencies: {\r\n      react: \"^19.2.3\",\r\n      \"react-dom\": \"^19.2.3\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/react\": \"^19.2.7\",\r\n      \"@types/react-dom\": \"^19.2.3\",\r\n    },\r\n  },\r\n  image: {\r\n    description: \"Installs sharp for image processing\",\r\n    dependencies: {\r\n      sharp: \"^0.34.5\",\r\n    },\r\n  },\r\n  mail: {\r\n    description: \"Installs nodemailer for sending emails\",\r\n    dependencies: {\r\n      nodemailer: \"^8.0.5\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/nodemailer\": \"^8.0.0\",\r\n    },\r\n  },\r\n  ses: {\r\n    description: \"Installs AWS SES SDK for sending emails via Amazon SES\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-sesv2\": \"^3.1025.0\",\r\n    },\r\n  },\r\n  mongodb: {\r\n    description: \"Installs mongodb driver for database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mongodb: \"^7.0.0\",\r\n    },\r\n  },\r\n  scheduler: {\r\n    description: \"Installs warlock scheduler for scheduling tasks\",\r\n    dependencies: {\r\n      \"@warlock.js/scheduler\": \"~4.0.0\",\r\n    },\r\n  },\r\n  // swagger / postman intentionally omitted — those packages do not exist yet;\r\n  // they will ship together in the unified @warlock.js/api-docs package.\r\n  postgres: {\r\n    description: \"Installs pg for Postgres database (Cascade Package)\",\r\n    dependencies: {\r\n      pg: \"^8.11.0\",\r\n    },\r\n  },\r\n  mysql: {\r\n    description: \"Installs mysql2 for MySQL database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mysql2: \"^3.5.0\",\r\n    },\r\n  },\r\n  redis: {\r\n    description: \"Installs redis for Redis cache driver (Cache Package)\",\r\n    dependencies: {\r\n      redis: \"^4.6.13\",\r\n    },\r\n  },\r\n  s3: {\r\n    description: \"Installs AWS SDK for Cloud storage (Storage Package)\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-s3\": \"^3.955.0\",\r\n      \"@aws-sdk/lib-storage\": \"^3.955.0\",\r\n      \"@aws-sdk/s3-request-presigner\": \"^3.955.0\",\r\n    },\r\n  },\r\n  test: {\r\n    description: \"Installs warlock test for testing\",\r\n    onExecuting: completeTestInstallation,\r\n    script: {\r\n      test: \"vitest run\",\r\n      \"test:coverage\": \"vitest run --coverage\",\r\n      \"test:ui\": \"vitest --ui\",\r\n      \"test:watch\": \"vitest --watch\",\r\n    },\r\n    devDependencies: {\r\n      \"@mongez/vite\": \"^2.0.4\",\r\n      vite: \"^8.0.16\",\r\n      vitest: \"^4.1.8\",\r\n      \"@vitest/coverage-v8\": \"^4.1.8\",\r\n    },\r\n  },\r\n  herald: {\r\n    description: \"Installs herald for message broker (Herald Package)\",\r\n    dependencies: {\r\n      \"@warlock.js/herald\": \"~4.0.0\",\r\n      amqplib: \"^0.10.0\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/amqplib\": \"^0.10.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: communicatorsConfigStub,\r\n      name: \"herald\",\r\n    },\r\n  },\r\n  socket: {\r\n    description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\r\n    dependencies: {\r\n      \"socket.io\": \"^4.8.3\",\r\n    },\r\n    ejectConfig: {\r\n      content: socketConfigStub,\r\n      name: \"socket\",\r\n    },\r\n  },\r\n  notifications: {\r\n    description:\r\n      \"Installs @warlock.js/notifications — multi-channel notifications (mail + in-app database). Pulls the mail feature, ejects config/notifications.ts, and scaffolds the Notification model + migration plus the recipient-scoped read/dismiss routes + controllers into src/app/notifications\",\r\n    // The ejected config wires a `mail` channel by default (needs nodemailer,\r\n    // via the `mail` feature); the scaffolded routes are gated by\r\n    // `authMiddleware`, so `@warlock.js/auth` is pulled in too.\r\n    requires: [\"mail\"],\r\n    dependencies: {\r\n      \"@warlock.js/notifications\": \"~4.0.0\",\r\n      \"@warlock.js/auth\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: notificationsConfigStub,\r\n      name: \"notifications\",\r\n    },\r\n    onExecuting: completeNotificationsInstallation,\r\n  },\r\n  access: {\r\n    description:\r\n      \"Installs @warlock.js/access — authorization (RBAC + ABAC): permission checks, ABAC policies, and roles. Ejects config/access.ts, the DatabaseAccessResolver + Role/UserRole models and migrations into src/app/access, and registers the access locale in src/app/shared/utils/locales.ts\",\r\n    dependencies: {\r\n      \"@warlock.js/access\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: accessConfigStub,\r\n      name: \"access\",\r\n    },\r\n    onExecuting: completeAccessInstallation,\r\n  },\r\n  ai: {\r\n    description: \"Installs @warlock.js/ai — the core AI toolkit (agents, tools, workflows)\",\r\n    dependencies: {\r\n      \"@warlock.js/ai\": \"~4.0.0\",\r\n    },\r\n  },\r\n  openai: {\r\n    description: \"Installs the OpenAI provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-openai\": \"~4.0.0\",\r\n    },\r\n  },\r\n  google: {\r\n    description: \"Installs the Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-google\": \"~4.0.0\",\r\n    },\r\n  },\r\n  anthropic: {\r\n    description: \"Installs the Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-anthropic\": \"~4.0.0\",\r\n    },\r\n  },\r\n  bedrock: {\r\n    description: \"Installs the AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-bedrock\": \"~4.0.0\",\r\n    },\r\n  },\r\n  ollama: {\r\n    description: \"Installs the Ollama provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-ollama\": \"~4.0.0\",\r\n    },\r\n  },\r\n};\r\n\r\nconst allowedFeatures = Object.keys(featuresMap);\r\n\r\ntype PackageManager = \"yarn\" | \"pnpm\" | \"npm\";\r\n\r\nfunction resolveFeatures(features: string[], visited = new Set<string>()): string[] {\r\n  const resolved: string[] = [];\r\n\r\n  for (const feature of features) {\r\n    if (visited.has(feature)) continue;\r\n    visited.add(feature);\r\n\r\n    const def = featuresMap[feature];\r\n\r\n    if (def.requires?.length) {\r\n      resolved.push(...resolveFeatures(def.requires, visited));\r\n    }\r\n\r\n    resolved.push(feature);\r\n  }\r\n\r\n  return resolved;\r\n}\r\n\r\nexport async function addCommandAction(options: CommandActionData) {\r\n  const features = options.args;\r\n  const { packageManager, list, noInstall } = options.options;\r\n\r\n  if (list) {\r\n    console.log(\"Available Features:\");\r\n\r\n    for (const feature of allowedFeatures) {\r\n      console.log(\r\n        `- ${colors.yellowBright(feature)}: ${colors.green(featuresMap[feature].description)}`,\r\n      );\r\n    }\r\n\r\n    process.exit(0);\r\n  }\r\n\r\n  validateFeatures(features);\r\n\r\n  const resolvedFeatures = resolveFeatures(features);\r\n\r\n  const dependencies: Record<string, string> = {};\r\n  const devDependencies: Record<string, string> = {};\r\n  const ejectConfigs: Record<string, { content: string; name: string }> = {};\r\n  const scripts: Record<string, string> = {};\r\n\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    Object.assign(dependencies, featurePackages.dependencies);\r\n    if (featurePackages.devDependencies) {\r\n      Object.assign(devDependencies, featurePackages.devDependencies);\r\n    }\r\n\r\n    if (featurePackages.ejectConfig) {\r\n      ejectConfigs[featurePackages.ejectConfig.name] = featurePackages.ejectConfig;\r\n    }\r\n\r\n    if (featurePackages.script) {\r\n      Object.assign(scripts, featurePackages.script);\r\n    }\r\n  }\r\n\r\n  // Pin every @warlock.js/* feature package to the INSTALLED framework version so\r\n  // a scaffolded project's features match its core version instead of drifting to\r\n  // the feature map's static range.\r\n  const frameworkVersion = await getWarlockVersion();\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (dependency.startsWith(\"@warlock.js/\")) {\r\n      dependencies[dependency] = frameworkVersion;\r\n    }\r\n  }\r\n\r\n  const currentPackageJson = await getJsonFileAsync(rootPath(\"package.json\"));\r\n\r\n  // Fresh templates may omit one of the maps — guard before reading.\r\n  currentPackageJson.dependencies = currentPackageJson.dependencies ?? {};\r\n  currentPackageJson.devDependencies = currentPackageJson.devDependencies ?? {};\r\n\r\n  // Skip anything already present so we never downgrade an existing pin.\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (currentPackageJson.dependencies[dependency]) {\r\n      console.log(`${colors.yellowBright(dependency)} is already installed, skipping...`);\r\n      delete dependencies[dependency];\r\n    }\r\n  }\r\n\r\n  for (const devDependency of Object.keys(devDependencies)) {\r\n    if (currentPackageJson.devDependencies[devDependency]) {\r\n      console.log(`${colors.yellowBright(devDependency)} is already installed, skipping...`);\r\n      delete devDependencies[devDependency];\r\n    }\r\n  }\r\n\r\n  if (noInstall) {\r\n    await recordDependencies(dependencies, devDependencies);\r\n  } else {\r\n    await installDependencies(packageManager as PackageManager, dependencies, devDependencies);\r\n  }\r\n\r\n  for (const [name, config] of Object.entries(ejectConfigs)) {\r\n    if (await fileExistsAsync(srcPath(`config/${name}.ts`))) {\r\n      console.log(`${colors.yellowBright(name)} config already exists, skipping...`);\r\n      continue;\r\n    }\r\n\r\n    console.log(`Creating ${colors.magenta(name)} config...`);\r\n\r\n    await putFileAsync(srcPath(`config/${name}.ts`), config.content);\r\n\r\n    console.log(`${colors.green(name)} config created successfully`);\r\n  }\r\n\r\n  // now loop again over features to execute onExecuting\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    if (featurePackages.onExecuting) {\r\n      await featurePackages.onExecuting(options);\r\n    }\r\n  }\r\n\r\n  if (Object.keys(scripts).length > 0) {\r\n    console.log(`Adding scripts ${colors.magenta(Object.keys(scripts).join(\", \"))}`);\r\n    const packageJsonPath = rootPath(\"package.json\");\r\n    const packageJson = await getJsonFileAsync(packageJsonPath);\r\n    packageJson.scripts = { ...(packageJson.scripts ?? {}), ...scripts };\r\n    await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n    console.log(`Scripts added successfully ${colors.green(Object.keys(scripts).join(\", \"))}`);\r\n  }\r\n}\r\n\r\n/**\r\n * Install the resolved dependency sets through the project's package manager.\r\n * Runs two passes (prod then dev) so each lands in the correct section.\r\n */\r\nasync function installDependencies(\r\n  packageManager: PackageManager,\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  const packageManagerCommand = await getPackageManagerCommand(packageManager);\r\n\r\n  if (Object.keys(dependencies).length > 0) {\r\n    console.log(`Installing dependencies ${colors.magenta(Object.keys(dependencies).join(\", \"))}`);\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(dependencies).join(\" \")}`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dependencies installed successfully ${colors.green(Object.keys(dependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n\r\n  if (Object.keys(devDependencies).length > 0) {\r\n    console.log(\r\n      `Installing dev dependencies ${colors.magenta(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(devDependencies).join(\" \")} -D`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dev dependencies installed successfully ${colors.green(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n}\r\n\r\n/**\r\n * Write the resolved dependency sets into package.json without installing.\r\n * Used by `--no-install` so a scaffolder can batch every feature into one\r\n * install pass after the command returns. Versions come from the feature map.\r\n */\r\nasync function recordDependencies(\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  if (Object.keys(dependencies).length === 0 && Object.keys(devDependencies).length === 0) {\r\n    return;\r\n  }\r\n\r\n  const packageJsonPath = rootPath(\"package.json\");\r\n  const packageJson = await getJsonFileAsync(packageJsonPath);\r\n\r\n  packageJson.dependencies = packageJson.dependencies ?? {};\r\n  packageJson.devDependencies = packageJson.devDependencies ?? {};\r\n\r\n  Object.assign(packageJson.dependencies, dependencies);\r\n  Object.assign(packageJson.devDependencies, devDependencies);\r\n\r\n  await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n  const recorded = [...Object.keys(dependencies), ...Object.keys(devDependencies)];\r\n\r\n  console.log(\r\n    `Recorded ${colors.green(recorded.join(\", \"))} in package.json (install skipped via --no-install)`,\r\n  );\r\n}\r\n\r\nfunction validateFeatures(features: string[]) {\r\n  for (const feature of features) {\r\n    if (!allowedFeatures.includes(feature)) {\r\n      console.log(\r\n        `Feature ${colors.redBright(feature)} is not allowed, allowed features are: ${colors.green(allowedFeatures.join(\", \"))}`,\r\n      );\r\n      process.exit(1);\r\n    }\r\n  }\r\n}\r\n\r\nasync function getPackageManagerCommand(packageManager?: PackageManager) {\r\n  if (!packageManager) {\r\n    // try to detect it through checking lock files\r\n    packageManager = await detectPackageManager();\r\n  }\r\n\r\n  if (packageManager === \"npm\") {\r\n    return \"npm install\";\r\n  }\r\n\r\n  if (packageManager === \"yarn\") {\r\n    return \"yarn add\";\r\n  }\r\n\r\n  if (packageManager === \"pnpm\") {\r\n    return \"pnpm add\";\r\n  }\r\n}\r\n\r\nasync function detectPackageManager() {\r\n  if (await fileExistsAsync(rootPath(\"package-lock.json\"))) {\r\n    return \"npm\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"yarn.lock\"))) {\r\n    return \"yarn\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"pnpm-lock.yaml\"))) {\r\n    return \"pnpm\";\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;AAsCA,SAAS,mBAAmB,gBAAgB,GAAW;CACrD,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E;AAEA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;CAUF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,2BAA2B;CAChE;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,wBAAwB;CAC7D;AACF;AAEA,eAAe,+BAA+B,UAA6B;CAEzE,MAAM,mBAAmB,SAAS,QAAQ;CAC1C,MAAM,kBAAkB,SAAS,0BAA0B;CAE3D,IAAI,CAAE,MAAM,gBAAgB,eAAe,GAAI;EAC7C,MAAM,qBAAqB,gBAAgB;EAC3C,MAAM,aACJ,iBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,eAAe,SAAS,eAAe;CAC7C,MAAM,WAAW,MAAM,iBAAiB,YAAY;CAEpD,IAAI,CAAC,SAAS,SACZ,SAAS,UAAU,CAAC;CAGtB,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,GAAG;EACxC,SAAS,QAAQ,KAAK,QAAQ;EAC9B,MAAM,iBAAiB,cAAc,QAAQ;EAC7C,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,yCAAyC;CAC9E;AACF;AAEA,eAAe,kCAAkC,UAA6B;CAC5E,MAAM,YAAY,QAAQ,yCAAyC;CAKnE,IAAI,MAAM,gBAAgB,SAAS,GAAG;EACpC,QAAQ,IACN,GAAG,OAAO,aAAa,uBAAuB,EAAE,mDAClD;EACA;CACF;CAGA,MAAM,qBAAqB,QAAQ,mBAAmB,CAAC;CACvD,MAAM,aAAa,WAAW,qBAAqB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,qDAAqD;CAKxF,MAAM,qBAAqB,QAAQ,8BAA8B,CAAC;CAElE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE;CAE9C,MAAM,aACJ,QAAQ,gCAAgC,aAAa,GACrD,yBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,KAAK,EAAE,4CAA4C,eACrE;CAIA,MAAM,qBAAqB,QAAQ,+BAA+B,CAAC;CACnE,MAAM,aACJ,QAAQ,2DAA2D,GACnE,2BACF;CACA,MAAM,aAAa,QAAQ,6BAA6B,GAAG,sBAAsB;CACjF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,uDAAuD;AAC1F;AAEA,eAAe,uBAAuB;CAIpC,MAAM,cAAc,QAAQ,6BAA6B;CAEzD,MAAM,eAAe;;;;;;;;;CAUrB,IAAI,MAAM,gBAAgB,WAAW,GAAG;EACtC,MAAM,UAAU,MAAM,aAAa,WAAW;EAE9C,IAAI,QAAQ,SAAS,8BAA8B,GAAG;GACpD,QAAQ,IAAI,GAAG,OAAO,aAAa,QAAQ,EAAE,wCAAwC;GAErF;EACF;EAOA,MAAM,aAAa,aAAa,GAFjB,QAAQ,SAAS,sBAAsB,IAAI,KAAK,gEAEnB,QAAQ,QAAQ,EAAE,MAAM,cAAc;EAElF,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iEACvB;EAEA;CACF;CAEA,MAAM,qBAAqB,QAAQ,kBAAkB,CAAC;CAEtD,MAAM,aACJ,aACA,8DAA8D,cAChE;CAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gEAAgE;AACnG;AAEA,eAAe,sBAAsB;CAKnC,MAAM,eAAe,QAAQ,wCAAwC;CAErE,IAAI,MAAM,gBAAgB,YAAY,GAAG;EACvC,QAAQ,IACN,GAAG,OAAO,aAAa,gBAAgB,EAAE,wDAC3C;EAEA;CACF;CAIA,MAAM,qBAAqB,QAAQ,wBAAwB,CAAC;CAC5D,MAAM,aAAa,QAAQ,sCAAsC,GAAG,mBAAmB;CACvF,MAAM,aAAa,QAAQ,iCAAiC,GAAG,wBAAwB;CACvF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oCAAoC;CAErE,MAAM,qBAAqB,QAAQ,mCAAmC,CAAC;CAOvE,MAAM,oBAAoB,GAAG,mBAAmB,EAAE;CAClD,MAAM,aACJ,QAAQ,qCAAqC,iBAAiB,GAC9D,uBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iDAAiD,mBACxE;CAKA,MAAM,qBAAqB,QAAQ,6BAA6B,CAAC;CACjE,MAAM,aACJ,QAAQ,gDAAgD,GACxD,uBACF;CACA,MAAM,aACJ,QAAQ,sCAAsC,GAC9C,4BACF;CACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAE1E,MAAM,qBAAqB,QAAQ,wCAAwC,CAAC;CAE5E,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,EAAE;CACvD,MAAM,aACJ,QAAQ,0CAA0C,qBAAqB,GACvE,2BACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sDAAsD,uBAC7E;CAIA,MAAM,qBAAqB,QAAQ,qBAAqB,CAAC;CACzD,MAAM,aAAa,cAAc,kBAAkB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oDAAoD;AACvF;AAEA,eAAe,2BAA2B,UAA6B;CACrE,MAAM,qBAAqB;CAC3B,MAAM,oBAAoB;AAC5B;AAEA,MAAM,cAcF;CACF,eAAe;EACb,aAAa;EACb,UAAU,CAAC,QAAQ,OAAO;EAC1B,cAAc;GACZ,eAAe;GACf,2BAA2B;GAC3B,uBAAuB;GACvB,yBAAyB;EAC3B;EACA,iBAAiB,EACf,+BAA+B,SACjC;EACA,QAAQ,EACN,iBAAiB,sBACnB;EACA,aAAa;CACf;CACA,OAAO;EACL,aACE;EACF,cAAc;GACZ,OAAO;GACP,aAAa;EACf;EACA,iBAAiB;GACf,gBAAgB;GAChB,oBAAoB;EACtB;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,MAAM;EACJ,aAAa;EACb,cAAc,EACZ,YAAY,SACd;EACA,iBAAiB,EACf,qBAAqB,SACvB;CACF;CACA,KAAK;EACH,aAAa;EACb,cAAc,EACZ,yBAAyB,YAC3B;CACF;CACA,SAAS;EACP,aAAa;EACb,cAAc,EACZ,SAAS,SACX;CACF;CACA,WAAW;EACT,aAAa;EACb,cAAc,EACZ,yBAAyB,SAC3B;CACF;CAGA,UAAU;EACR,aAAa;EACb,cAAc,EACZ,IAAI,UACN;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,QAAQ,SACV;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,IAAI;EACF,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,wBAAwB;GACxB,iCAAiC;EACnC;CACF;CACA,MAAM;EACJ,aAAa;EACb,aAAa;EACb,QAAQ;GACN,MAAM;GACN,iBAAiB;GACjB,WAAW;GACX,cAAc;EAChB;EACA,iBAAiB;GACf,gBAAgB;GAChB,MAAM;GACN,QAAQ;GACR,uBAAuB;EACzB;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,SAAS;EACX;EACA,iBAAiB,EACf,kBAAkB,UACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc,EACZ,aAAa,SACf;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,eAAe;EACb,aACE;EAIF,UAAU,CAAC,MAAM;EACjB,cAAc;GACZ,6BAA6B;GAC7B,oBAAoB;EACtB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,QAAQ;EACN,aACE;EACF,cAAc,EACZ,sBAAsB,SACxB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,IAAI;EACF,aAAa;EACb,cAAc,EACZ,kBAAkB,SACpB;CACF;CACA,QAAQ;EACN,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,QAAQ;EACN,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,WAAW;EACT,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;CACF;CACA,SAAS;EACP,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,0BAA0B,SAC5B;CACF;CACA,QAAQ;EACN,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;AACF;AAEA,MAAM,kBAAkB,OAAO,KAAK,WAAW;AAI/C,SAAS,gBAAgB,UAAoB,0BAAU,IAAI,IAAY,GAAa;CAClF,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,IAAI,OAAO,GAAG;EAC1B,QAAQ,IAAI,OAAO;EAEnB,MAAM,MAAM,YAAY;EAExB,IAAI,IAAI,UAAU,QAChB,SAAS,KAAK,GAAG,gBAAgB,IAAI,UAAU,OAAO,CAAC;EAGzD,SAAS,KAAK,OAAO;CACvB;CAEA,OAAO;AACT;AAEA,eAAsB,iBAAiB,SAA4B;CACjE,MAAM,WAAW,QAAQ;CACzB,MAAM,EAAE,gBAAgB,MAAM,cAAc,QAAQ;CAEpD,IAAI,MAAM;EACR,QAAQ,IAAI,qBAAqB;EAEjC,KAAK,MAAM,WAAW,iBACpB,QAAQ,IACN,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,WAAW,GACrF;EAGF,QAAQ,KAAK,CAAC;CAChB;CAEA,iBAAiB,QAAQ;CAEzB,MAAM,mBAAmB,gBAAgB,QAAQ;CAEjD,MAAM,eAAuC,CAAC;CAC9C,MAAM,kBAA0C,CAAC;CACjD,MAAM,eAAkE,CAAC;CACzE,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,OAAO,OAAO,cAAc,gBAAgB,YAAY;EACxD,IAAI,gBAAgB,iBAClB,OAAO,OAAO,iBAAiB,gBAAgB,eAAe;EAGhE,IAAI,gBAAgB,aAClB,aAAa,gBAAgB,YAAY,QAAQ,gBAAgB;EAGnE,IAAI,gBAAgB,QAClB,OAAO,OAAO,SAAS,gBAAgB,MAAM;CAEjD;CAKA,MAAM,mBAAmB,MAAM,kBAAkB;CACjD,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,WAAW,WAAW,cAAc,GACtC,aAAa,cAAc;CAI/B,MAAM,qBAAqB,MAAM,iBAAiB,SAAS,cAAc,CAAC;CAG1E,mBAAmB,eAAe,mBAAmB,gBAAgB,CAAC;CACtE,mBAAmB,kBAAkB,mBAAmB,mBAAmB,CAAC;CAG5E,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,mBAAmB,aAAa,aAAa;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,UAAU,EAAE,mCAAmC;EAClF,OAAO,aAAa;CACtB;CAGF,KAAK,MAAM,iBAAiB,OAAO,KAAK,eAAe,GACrD,IAAI,mBAAmB,gBAAgB,gBAAgB;EACrD,QAAQ,IAAI,GAAG,OAAO,aAAa,aAAa,EAAE,mCAAmC;EACrF,OAAO,gBAAgB;CACzB;CAGF,IAAI,WACF,MAAM,mBAAmB,cAAc,eAAe;MAEtD,MAAM,oBAAoB,gBAAkC,cAAc,eAAe;CAG3F,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,YAAY,GAAG;EACzD,IAAI,MAAM,gBAAgB,QAAQ,UAAU,KAAK,IAAI,CAAC,GAAG;GACvD,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,oCAAoC;GAC7E;EACF;EAEA,QAAQ,IAAI,YAAY,OAAO,QAAQ,IAAI,EAAE,WAAW;EAExD,MAAM,aAAa,QAAQ,UAAU,KAAK,IAAI,GAAG,OAAO,OAAO;EAE/D,QAAQ,IAAI,GAAG,OAAO,MAAM,IAAI,EAAE,6BAA6B;CACjE;CAGA,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,IAAI,gBAAgB,aAClB,MAAM,gBAAgB,YAAY,OAAO;CAE7C;CAEA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG;EACnC,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAC/E,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;EAC1D,YAAY,UAAU;GAAE,GAAI,YAAY,WAAW,CAAC;GAAI,GAAG;EAAQ;EACnE,MAAM,iBAAiB,iBAAiB,WAAW;EAEnD,QAAQ,IAAI,8BAA8B,OAAO,MAAM,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;CAC3F;AACF;;;;;AAMA,eAAe,oBACb,gBACA,cACA,iBACA;CACA,MAAM,wBAAwB,MAAM,yBAAyB,cAAc;CAE3E,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,SAAS,GAAG;EACxC,QAAQ,IAAI,2BAA2B,OAAO,QAAQ,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAE7F,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,GAAG,KAAK;GAC1E,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,uCAAuC,OAAO,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAC1F;CACF;CAEA,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,SAAS,GAAG;EAC3C,QAAQ,IACN,+BAA+B,OAAO,QAAQ,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACvF;EAEA,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM;GAChF,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,2CAA2C,OAAO,MAAM,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACjG;CACF;AACF;;;;;;AAOA,eAAe,mBACb,cACA,iBACA;CACA,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,eAAe,CAAC,CAAC,WAAW,GACpF;CAGF,MAAM,kBAAkB,SAAS,cAAc;CAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;CAE1D,YAAY,eAAe,YAAY,gBAAgB,CAAC;CACxD,YAAY,kBAAkB,YAAY,mBAAmB,CAAC;CAE9D,OAAO,OAAO,YAAY,cAAc,YAAY;CACpD,OAAO,OAAO,YAAY,iBAAiB,eAAe;CAE1D,MAAM,iBAAiB,iBAAiB,WAAW;CAEnD,MAAM,WAAW,CAAC,GAAG,OAAO,KAAK,YAAY,GAAG,GAAG,OAAO,KAAK,eAAe,CAAC;CAE/E,QAAQ,IACN,YAAY,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,oDAChD;AACF;AAEA,SAAS,iBAAiB,UAAoB;CAC5C,KAAK,MAAM,WAAW,UACpB,IAAI,CAAC,gBAAgB,SAAS,OAAO,GAAG;EACtC,QAAQ,IACN,WAAW,OAAO,UAAU,OAAO,EAAE,yCAAyC,OAAO,MAAM,gBAAgB,KAAK,IAAI,CAAC,GACvH;EACA,QAAQ,KAAK,CAAC;CAChB;AAEJ;AAEA,eAAe,yBAAyB,gBAAiC;CACvE,IAAI,CAAC,gBAEH,iBAAiB,MAAM,qBAAqB;CAG9C,IAAI,mBAAmB,OACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;AAEX;AAEA,eAAe,uBAAuB;CACpC,IAAI,MAAM,gBAAgB,SAAS,mBAAmB,CAAC,GACrD,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,WAAW,CAAC,GAC7C,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,gBAAgB,CAAC,GAClD,OAAO;AAEX"}
+{"version":3,"file":"add-command.action.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/add-command.action.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport {\r\n  ensureDirectoryAsync,\r\n  fileExistsAsync,\r\n  getFileAsync,\r\n  getJsonFileAsync,\r\n  putFileAsync,\r\n  putJsonFileAsync,\r\n} from \"@warlock.js/fs\";\r\nimport { execSync } from \"node:child_process\";\r\nimport { CommandActionData } from \"../cli/types\";\r\nimport { rootPath, srcPath } from \"../utils\";\r\nimport { getWarlockVersion } from \"../utils/framework-vesion\";\r\nimport {\r\n  accessConfigStub,\r\n  aiConfigStub,\r\n  accessResolverStub,\r\n  accessRoleMigrationStub,\r\n  accessRoleModelIndexStub,\r\n  accessRoleModelStub,\r\n  accessUserRoleMigrationStub,\r\n  accessUserRoleModelIndexStub,\r\n  accessUserRoleModelStub,\r\n  communicatorsConfigStub,\r\n  notificationControllersStub,\r\n  notificationMigrationStub,\r\n  notificationModelStub,\r\n  notificationRoutesStub,\r\n  notificationsConfigStub,\r\n  socketConfigStub,\r\n} from \"./stubs\";\r\n\r\n/**\r\n * Build a migration filename timestamp prefix in the framework's\r\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\r\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\r\n * stamp sibling migrations created in the same scaffold a second apart so they\r\n * never collide and keep a stable relative order.\r\n */\r\nfunction migrationTimestamp(offsetSeconds = 0): string {\r\n  const now = new Date(Date.now() + offsetSeconds * 1000);\r\n  const pad = (value: number) => String(value).padStart(2, \"0\");\r\n\r\n  return (\r\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\r\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\r\n  );\r\n}\r\n\r\nasync function completeTestInstallation(options: CommandActionData) {\r\n  // Create test-global-setup.ts (runs once before all tests)\r\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\r\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\r\n\r\n  if (!testGlobalSetupExists) {\r\n    await putFileAsync(\r\n      testGlobalSetupPath,\r\n      `/**\r\n * Global Test Setup\r\n *\r\n * Runs ONCE before all test workers.\r\n * Starts the HTTP server for integration tests.\r\n */\r\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core\";\r\n\r\nexport async function setup() {\r\n  await startHttpTestServer();\r\n}\r\n\r\nexport async function teardown() {\r\n  await stopHttpTestServer();\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\r\n  }\r\n\r\n  // Create test-setup.ts (runs per worker thread)\r\n  const testSetupPath = srcPath(\"test-setup.ts\");\r\n  const testSetupExists = await fileExistsAsync(testSetupPath);\r\n\r\n  if (!testSetupExists) {\r\n    await putFileAsync(\r\n      testSetupPath,\r\n      `/**\r\n * Per-Worker Test Setup\r\n *\r\n * Runs in EACH Vitest worker thread before tests execute.\r\n * Sets up per-worker database and cache connections.\r\n */\r\nimport { setupTest } from \"@warlock.js/core\";\r\n\r\nawait setupTest({ connectors: true });\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\r\n  }\r\n\r\n  // Create vite.config.ts\r\n  const viteConfigPath = rootPath(\"vite.config.ts\");\r\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\r\n\r\n  if (!viteConfigExists) {\r\n    await putFileAsync(\r\n      viteConfigPath,\r\n      `import { lowerStage3Decorators } from \"@warlock.js/core\";\r\nimport mongezVite from \"@mongez/vite\";\r\nimport { defineConfig } from \"vitest/config\";\r\n\r\nexport default defineConfig({\r\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\r\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\r\n  // decorated Cascade models load under Vitest.\r\n  plugins: [lowerStage3Decorators(), mongezVite()],\r\n  test: {\r\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\r\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per worker\r\n    environment: \"node\",\r\n    globals: false,\r\n    include: [\"src/app/**/*.test.ts\"],\r\n  },\r\n});\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\r\n  }\r\n}\r\n\r\nasync function completeReactEmailInstallation(_options: CommandActionData) {\r\n  // 1. Create emails/ folder with a sample component\r\n  const emailsFolderPath = rootPath(\"emails\");\r\n  const sampleEmailPath = rootPath(\"emails/welcome-email.tsx\");\r\n\r\n  if (!(await fileExistsAsync(sampleEmailPath))) {\r\n    await ensureDirectoryAsync(emailsFolderPath);\r\n    await putFileAsync(\r\n      sampleEmailPath,\r\n      `import { Body, Container, Head, Html, Text } from \"@react-email/components\";\r\nimport { Tailwind } from \"@react-email/tailwind\";\r\n\r\ninterface WelcomeEmailProps {\r\n  name: string;\r\n}\r\n\r\n/**\r\n * Sample welcome email component.\r\n * Preview with: yarn email:preview\r\n */\r\nexport default function WelcomeEmail({ name }: WelcomeEmailProps) {\r\n  return (\r\n    <Html>\r\n      <Head />\r\n      <Tailwind>\r\n        <Body className=\"bg-gray-100 font-sans\">\r\n          <Container className=\"mx-auto max-w-xl py-8 px-4\">\r\n            <Text className=\"text-2xl font-bold text-gray-900\">\r\n              Welcome, {name}!\r\n            </Text>\r\n            <Text className=\"text-gray-600 mt-2\">\r\n              You're all set. We're glad to have you on board.\r\n            </Text>\r\n          </Container>\r\n        </Body>\r\n      </Tailwind>\r\n    </Html>\r\n  );\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created emails/welcome-email.tsx`);\r\n  }\r\n\r\n  // 2. Patch tsconfig.json — add \"emails\" to include if missing\r\n  const tsconfigPath = rootPath(\"tsconfig.json\");\r\n  const tsconfig = await getJsonFileAsync(tsconfigPath);\r\n\r\n  if (!tsconfig.include) {\r\n    tsconfig.include = [];\r\n  }\r\n\r\n  if (!tsconfig.include.includes(\"emails\")) {\r\n    tsconfig.include.push(\"emails\");\r\n    await putJsonFileAsync(tsconfigPath, tsconfig);\r\n    console.log(`${colors.green(\"✓\")} Added \"emails\" to tsconfig.json include`);\r\n  }\r\n}\r\n\r\nasync function completeNotificationsInstallation(_options: CommandActionData) {\r\n  const modelPath = srcPath(\"app/notifications/notification.model.ts\");\r\n\r\n  // The model file is the sentinel for \"notifications already scaffolded\" —\r\n  // its presence means the migration was created too (timestamped, so we must\r\n  // not re-emit a duplicate on a second run).\r\n  if (await fileExistsAsync(modelPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/notifications\")} already scaffolded, skipping model + migration...`,\r\n    );\r\n    return;\r\n  }\r\n\r\n  // 1. Notification model — extends the package's DatabaseNotification base.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications\"));\r\n  await putFileAsync(modelPath, notificationModelStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/notification.model.ts`);\r\n\r\n  // 2. Migration — timestamped MM-DD-YYYY_HH-MM-SS prefix so cascade infers its\r\n  //    createdAt and orders it deterministically (migrate-action discovers\r\n  //    src/app/*/migrations/*).\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/migrations\"));\r\n\r\n  const migrationFile = `${migrationTimestamp()}-notification.migration.ts`;\r\n\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/migrations\", migrationFile),\r\n    notificationMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/notifications/migrations/${migrationFile}`,\r\n  );\r\n\r\n  // 3. HTTP surface — the in-app read/dismiss endpoints (routes + controllers),\r\n  //    gated by authMiddleware. Delete if the app exposes notifications another way.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/controllers\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/controllers/notifications.controller.ts\"),\r\n    notificationControllersStub,\r\n  );\r\n  await putFileAsync(srcPath(\"app/notifications/routes.ts\"), notificationRoutesStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/routes.ts + controllers`);\r\n}\r\n\r\nasync function registerAccessLocale() {\r\n  // Register the access locale in the project's shared translations file so a\r\n  // denied check returns a real sentence, not the raw \"access.errors.forbidden\"\r\n  // key. Append when the file exists, create it otherwise; skip if already there.\r\n  const localesPath = srcPath(\"app/shared/utils/locales.ts\");\r\n\r\n  const accessLocale = `groupedTranslations(\"access\", {\r\n  errors: {\r\n    forbidden: {\r\n      en: \"You do not have permission to perform this action.\",\r\n      ar: \"ليس لديك صلاحية لتنفيذ هذا الإجراء.\",\r\n    },\r\n  },\r\n});\r\n`;\r\n\r\n  if (await fileExistsAsync(localesPath)) {\r\n    const current = await getFileAsync(localesPath);\r\n\r\n    if (current.includes(`groupedTranslations(\"access\"`)) {\r\n      console.log(`${colors.yellowBright(\"access\")} locale already registered, skipping...`);\r\n\r\n      return;\r\n    }\r\n\r\n    // The file uses groupedTranslations already iff it calls it — only inject the\r\n    // import when no call is present yet.\r\n    const importLine = `import { groupedTranslations } from \"@warlock.js/core\";`;\r\n    const prefix = current.includes(\"groupedTranslations(\") ? \"\" : `${importLine}\\n\\n`;\r\n\r\n    await putFileAsync(localesPath, `${prefix}${current.trimEnd()}\\n\\n${accessLocale}`);\r\n\r\n    console.log(\r\n      `${colors.green(\"✓\")} Registered the access locale in src/app/shared/utils/locales.ts`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/shared/utils\"));\r\n\r\n  await putFileAsync(\r\n    localesPath,\r\n    `import { groupedTranslations } from \"@warlock.js/core\";\\n\\n${accessLocale}`,\r\n  );\r\n\r\n  console.log(`${colors.green(\"✓\")} Created src/app/shared/utils/locales.ts with the access locale`);\r\n}\r\n\r\nasync function scaffoldAccessFiles() {\r\n  // The resolver file is the sentinel for \"access already scaffolded\" — its\r\n  // presence means the role/user-role model folders and their timestamped\r\n  // migrations were created too, so we must not re-emit duplicate migrations on\r\n  // a second run.\r\n  const resolverPath = srcPath(\"app/access/services/access-resolver.ts\");\r\n\r\n  if (await fileExistsAsync(resolverPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/access\")} already scaffolded, skipping resolver + role tables...`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  // 1. Role catalog model folder (model + barrel + migration). The catalog row\r\n  //    is role name → granted permissions; managed at runtime in the DB.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role\"));\r\n  await putFileAsync(srcPath(\"app/access/models/role/role.model.ts\"), accessRoleModelStub);\r\n  await putFileAsync(srcPath(\"app/access/models/role/index.ts\"), accessRoleModelIndexStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role/migrations\"));\r\n\r\n  // Migration filenames carry a MM-DD-YYYY_HH-MM-SS prefix so cascade infers\r\n  // their createdAt and orders them deterministically (the migrate action\r\n  // discovers src/app/*/models/*/migrations/*). The two tables are independent\r\n  // (no FK between them), but the user-role migration is stamped a second later\r\n  // so the relative order is stable.\r\n  const roleMigrationFile = `${migrationTimestamp()}-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/role/migrations\", roleMigrationFile),\r\n    accessRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/role/migrations/${roleMigrationFile}`,\r\n  );\r\n\r\n  // 2. UserRole assignment model folder (model + barrel + migration). The model\r\n  //    statics scope an unresolved tenant to GLOBAL rows only (security\r\n  //    invariant) — see the stub for the reasoning.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/user-role.model.ts\"),\r\n    accessUserRoleModelStub,\r\n  );\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/index.ts\"),\r\n    accessUserRoleModelIndexStub,\r\n  );\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/user-role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role/migrations\"));\r\n\r\n  const userRoleMigrationFile = `${migrationTimestamp(1)}-user-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/migrations\", userRoleMigrationFile),\r\n    accessUserRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/user-role/migrations/${userRoleMigrationFile}`,\r\n  );\r\n\r\n  // 3. The DatabaseAccessResolver — the one required config seam, wired into\r\n  //    config/access.ts by the ejected stub.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/services\"));\r\n  await putFileAsync(resolverPath, accessResolverStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/services/access-resolver.ts`);\r\n}\r\n\r\nasync function completeAccessInstallation(_options: CommandActionData) {\r\n  await registerAccessLocale();\r\n  await scaffoldAccessFiles();\r\n}\r\n\r\n/**\r\n * Link a satellite AI package into src/config/ai.ts via a side-effect import.\r\n *\r\n * The satellites (@warlock.js/ai-tools, ai-panoptic, ai-workspace) augment the\r\n * `ai` object on import — they register their runtime surface (ai.tools / ai.mcp,\r\n * ai.workspace, panoptic's ai.config({ panoptic }) wiring) AND the matching TS\r\n * declaration-merging so ai.* members resolve. config-loader runs config/ai.ts at\r\n * boot, so dropping a bare `import \"<specifier>\";` at the top of that file is what\r\n * actually loads the augmentation before the ai connector applies the config.\r\n *\r\n * No-op if config/ai.ts is missing (the `ai` feature ejects it) or the import is\r\n * already present. Inserts right after the `warlock:ai-packages` marker when it\r\n * exists so the satellite imports stay grouped; otherwise prepends to the top.\r\n */\r\nasync function linkAiPackageImport(specifier: string): Promise<void> {\r\n  const aiConfigPath = srcPath(\"config/ai.ts\");\r\n\r\n  if (!(await fileExistsAsync(aiConfigPath))) {\r\n    return;\r\n  }\r\n\r\n  const current = await getFileAsync(aiConfigPath);\r\n  const importLine = `import \"${specifier}\";`;\r\n\r\n  if (current.includes(importLine)) {\r\n    return;\r\n  }\r\n\r\n  const marker = \"// >>> warlock:ai-packages (auto-managed) >>>\";\r\n  let next: string;\r\n\r\n  if (current.includes(marker)) {\r\n    next = current.replace(marker, `${marker}\\n${importLine}`);\r\n  } else {\r\n    next = `${importLine}\\n${current}`;\r\n  }\r\n\r\n  await putFileAsync(aiConfigPath, next);\r\n\r\n  console.log(`${colors.green(\"✓\")} Linked ${specifier} in src/config/ai.ts`);\r\n}\r\n\r\nexport const featuresMap: Record<\r\n  string,\r\n  {\r\n    dependencies?: Record<string, string>;\r\n    devDependencies?: Record<string, string>;\r\n    description: string;\r\n    requires?: string[];\r\n    script?: Record<string, string>;\r\n    onExecuting?: (options: CommandActionData) => Promise<any>;\r\n    ejectConfig?: {\r\n      content: string;\r\n      name: string;\r\n    };\r\n  }\r\n> = {\r\n  \"react-email\": {\r\n    description: \"Installs react-email for building email templates with React and Tailwind\",\r\n    requires: [\"mail\", \"react\"],\r\n    dependencies: {\r\n      \"react-email\": \"^5.2.10\",\r\n      \"@react-email/components\": \"^1.0.11\",\r\n      \"@react-email/render\": \"^2.0.5\",\r\n      \"@react-email/tailwind\": \"^2.0.7\",\r\n    },\r\n    devDependencies: {\r\n      \"@react-email/preview-server\": \"5.2.10\",\r\n    },\r\n    script: {\r\n      \"email:preview\": \"npx react-email dev\",\r\n    },\r\n    onExecuting: completeReactEmailInstallation,\r\n  },\r\n  react: {\r\n    description:\r\n      \"Installs React and React dom for rendering React components (non-interactive), useful for sending mails and generating HTML\",\r\n    dependencies: {\r\n      react: \"^19.2.3\",\r\n      \"react-dom\": \"^19.2.3\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/react\": \"^19.2.7\",\r\n      \"@types/react-dom\": \"^19.2.3\",\r\n    },\r\n  },\r\n  image: {\r\n    description: \"Installs sharp for image processing\",\r\n    dependencies: {\r\n      sharp: \"^0.34.5\",\r\n    },\r\n  },\r\n  mail: {\r\n    description: \"Installs nodemailer for sending emails\",\r\n    dependencies: {\r\n      nodemailer: \"^8.0.5\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/nodemailer\": \"^8.0.0\",\r\n    },\r\n  },\r\n  ses: {\r\n    description: \"Installs AWS SES SDK for sending emails via Amazon SES\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-sesv2\": \"^3.1025.0\",\r\n    },\r\n  },\r\n  mongodb: {\r\n    description: \"Installs mongodb driver for database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mongodb: \"^7.0.0\",\r\n    },\r\n  },\r\n  scheduler: {\r\n    description: \"Installs warlock scheduler for scheduling tasks\",\r\n    dependencies: {\r\n      \"@warlock.js/scheduler\": \"~4.0.0\",\r\n    },\r\n  },\r\n  // swagger / postman intentionally omitted — those packages do not exist yet;\r\n  // they will ship together in the unified @warlock.js/api-docs package.\r\n  postgres: {\r\n    description: \"Installs pg for Postgres database (Cascade Package)\",\r\n    dependencies: {\r\n      pg: \"^8.11.0\",\r\n    },\r\n  },\r\n  mysql: {\r\n    description: \"Installs mysql2 for MySQL database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mysql2: \"^3.5.0\",\r\n    },\r\n  },\r\n  redis: {\r\n    description: \"Installs redis for Redis cache driver (Cache Package)\",\r\n    dependencies: {\r\n      redis: \"^4.6.13\",\r\n    },\r\n  },\r\n  s3: {\r\n    description: \"Installs AWS SDK for Cloud storage (Storage Package)\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-s3\": \"^3.955.0\",\r\n      \"@aws-sdk/lib-storage\": \"^3.955.0\",\r\n      \"@aws-sdk/s3-request-presigner\": \"^3.955.0\",\r\n    },\r\n  },\r\n  test: {\r\n    description: \"Installs warlock test for testing\",\r\n    onExecuting: completeTestInstallation,\r\n    script: {\r\n      test: \"vitest run\",\r\n      \"test:coverage\": \"vitest run --coverage\",\r\n      \"test:ui\": \"vitest --ui\",\r\n      \"test:watch\": \"vitest --watch\",\r\n    },\r\n    devDependencies: {\r\n      \"@mongez/vite\": \"^2.0.4\",\r\n      vite: \"^8.0.16\",\r\n      vitest: \"^4.1.8\",\r\n      \"@vitest/coverage-v8\": \"^4.1.8\",\r\n    },\r\n  },\r\n  herald: {\r\n    description: \"Installs herald for message broker (Herald Package)\",\r\n    dependencies: {\r\n      \"@warlock.js/herald\": \"~4.0.0\",\r\n      amqplib: \"^0.10.0\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/amqplib\": \"^0.10.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: communicatorsConfigStub,\r\n      name: \"herald\",\r\n    },\r\n  },\r\n  socket: {\r\n    description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\r\n    dependencies: {\r\n      \"socket.io\": \"^4.8.3\",\r\n    },\r\n    ejectConfig: {\r\n      content: socketConfigStub,\r\n      name: \"socket\",\r\n    },\r\n  },\r\n  notifications: {\r\n    description:\r\n      \"Installs @warlock.js/notifications — multi-channel notifications (mail + in-app database). Pulls the mail feature, ejects config/notifications.ts, and scaffolds the Notification model + migration plus the recipient-scoped read/dismiss routes + controllers into src/app/notifications\",\r\n    // The ejected config wires a `mail` channel by default (needs nodemailer,\r\n    // via the `mail` feature); the scaffolded routes are gated by\r\n    // `authMiddleware`, so `@warlock.js/auth` is pulled in too.\r\n    requires: [\"mail\"],\r\n    dependencies: {\r\n      \"@warlock.js/notifications\": \"~4.0.0\",\r\n      \"@warlock.js/auth\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: notificationsConfigStub,\r\n      name: \"notifications\",\r\n    },\r\n    onExecuting: completeNotificationsInstallation,\r\n  },\r\n  access: {\r\n    description:\r\n      \"Installs @warlock.js/access — authorization (RBAC + ABAC): permission checks, ABAC policies, and roles. Ejects config/access.ts, the DatabaseAccessResolver + Role/UserRole models and migrations into src/app/access, and registers the access locale in src/app/shared/utils/locales.ts\",\r\n    dependencies: {\r\n      \"@warlock.js/access\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: accessConfigStub,\r\n      name: \"access\",\r\n    },\r\n    onExecuting: completeAccessInstallation,\r\n  },\r\n  ai: {\r\n    description: \"Installs @warlock.js/ai — the core AI toolkit (agents, tools, workflows)\",\r\n    dependencies: {\r\n      \"@warlock.js/ai\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: aiConfigStub,\r\n      name: \"ai\",\r\n    },\r\n  },\r\n  \"ai-openai\": {\r\n    description: \"OpenAI provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-openai\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-google\": {\r\n    description: \"Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-google\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-anthropic\": {\r\n    description: \"Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-anthropic\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-bedrock\": {\r\n    description: \"AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-bedrock\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-ollama\": {\r\n    description: \"Ollama provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-ollama\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-tools\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-tools — ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + an MCP client/server, under ai.tools.* / ai.mcp (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-tools\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-tools\"),\r\n  },\r\n  \"ai-panoptic\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-panoptic — observability for @warlock.js/ai (collector, exporters, zero-setup local dashboard) via ai.config({ panoptic }) (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-panoptic\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-panoptic\"),\r\n  },\r\n  \"ai-workspace\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-workspace — a policy-jailed filesystem + shell workspace for coding agents, as ai.workspace (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-workspace\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-workspace\"),\r\n  },\r\n};\r\n\r\nexport const allowedFeatures = Object.keys(featuresMap);\r\n\r\ntype PackageManager = \"yarn\" | \"pnpm\" | \"npm\";\r\n\r\nfunction resolveFeatures(features: string[], visited = new Set<string>()): string[] {\r\n  const resolved: string[] = [];\r\n\r\n  for (const feature of features) {\r\n    if (visited.has(feature)) continue;\r\n    visited.add(feature);\r\n\r\n    const def = featuresMap[feature];\r\n\r\n    if (def.requires?.length) {\r\n      resolved.push(...resolveFeatures(def.requires, visited));\r\n    }\r\n\r\n    resolved.push(feature);\r\n  }\r\n\r\n  return resolved;\r\n}\r\n\r\nexport async function addCommandAction(options: CommandActionData) {\r\n  const features = options.args;\r\n  const { packageManager, list, noInstall } = options.options;\r\n\r\n  if (list) {\r\n    console.log(\"Available Features:\");\r\n\r\n    for (const feature of allowedFeatures) {\r\n      console.log(\r\n        `- ${colors.yellowBright(feature)}: ${colors.green(featuresMap[feature].description)}`,\r\n      );\r\n    }\r\n\r\n    process.exit(0);\r\n  }\r\n\r\n  validateFeatures(features);\r\n\r\n  const resolvedFeatures = resolveFeatures(features);\r\n\r\n  const dependencies: Record<string, string> = {};\r\n  const devDependencies: Record<string, string> = {};\r\n  const ejectConfigs: Record<string, { content: string; name: string }> = {};\r\n  const scripts: Record<string, string> = {};\r\n\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    Object.assign(dependencies, featurePackages.dependencies);\r\n    if (featurePackages.devDependencies) {\r\n      Object.assign(devDependencies, featurePackages.devDependencies);\r\n    }\r\n\r\n    if (featurePackages.ejectConfig) {\r\n      ejectConfigs[featurePackages.ejectConfig.name] = featurePackages.ejectConfig;\r\n    }\r\n\r\n    if (featurePackages.script) {\r\n      Object.assign(scripts, featurePackages.script);\r\n    }\r\n  }\r\n\r\n  // Pin every @warlock.js/* feature package to the INSTALLED framework version so\r\n  // a scaffolded project's features match its core version instead of drifting to\r\n  // the feature map's static range.\r\n  const frameworkVersion = await getWarlockVersion();\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (dependency.startsWith(\"@warlock.js/\")) {\r\n      dependencies[dependency] = frameworkVersion;\r\n    }\r\n  }\r\n\r\n  const currentPackageJson = await getJsonFileAsync(rootPath(\"package.json\"));\r\n\r\n  // Fresh templates may omit one of the maps — guard before reading.\r\n  currentPackageJson.dependencies = currentPackageJson.dependencies ?? {};\r\n  currentPackageJson.devDependencies = currentPackageJson.devDependencies ?? {};\r\n\r\n  // Skip anything already present so we never downgrade an existing pin.\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (currentPackageJson.dependencies[dependency]) {\r\n      console.log(`${colors.yellowBright(dependency)} is already installed, skipping...`);\r\n      delete dependencies[dependency];\r\n    }\r\n  }\r\n\r\n  for (const devDependency of Object.keys(devDependencies)) {\r\n    if (currentPackageJson.devDependencies[devDependency]) {\r\n      console.log(`${colors.yellowBright(devDependency)} is already installed, skipping...`);\r\n      delete devDependencies[devDependency];\r\n    }\r\n  }\r\n\r\n  if (noInstall) {\r\n    await recordDependencies(dependencies, devDependencies);\r\n  } else {\r\n    await installDependencies(packageManager as PackageManager, dependencies, devDependencies);\r\n  }\r\n\r\n  for (const [name, config] of Object.entries(ejectConfigs)) {\r\n    if (await fileExistsAsync(srcPath(`config/${name}.ts`))) {\r\n      console.log(`${colors.yellowBright(name)} config already exists, skipping...`);\r\n      continue;\r\n    }\r\n\r\n    console.log(`Creating ${colors.magenta(name)} config...`);\r\n\r\n    await putFileAsync(srcPath(`config/${name}.ts`), config.content);\r\n\r\n    console.log(`${colors.green(name)} config created successfully`);\r\n  }\r\n\r\n  // now loop again over features to execute onExecuting\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    if (featurePackages.onExecuting) {\r\n      await featurePackages.onExecuting(options);\r\n    }\r\n  }\r\n\r\n  if (Object.keys(scripts).length > 0) {\r\n    console.log(`Adding scripts ${colors.magenta(Object.keys(scripts).join(\", \"))}`);\r\n    const packageJsonPath = rootPath(\"package.json\");\r\n    const packageJson = await getJsonFileAsync(packageJsonPath);\r\n    packageJson.scripts = { ...(packageJson.scripts ?? {}), ...scripts };\r\n    await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n    console.log(`Scripts added successfully ${colors.green(Object.keys(scripts).join(\", \"))}`);\r\n  }\r\n}\r\n\r\n/**\r\n * Install the resolved dependency sets through the project's package manager.\r\n * Runs two passes (prod then dev) so each lands in the correct section.\r\n */\r\nasync function installDependencies(\r\n  packageManager: PackageManager,\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  const packageManagerCommand = await getPackageManagerCommand(packageManager);\r\n\r\n  if (Object.keys(dependencies).length > 0) {\r\n    console.log(`Installing dependencies ${colors.magenta(Object.keys(dependencies).join(\", \"))}`);\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(dependencies).join(\" \")}`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dependencies installed successfully ${colors.green(Object.keys(dependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n\r\n  if (Object.keys(devDependencies).length > 0) {\r\n    console.log(\r\n      `Installing dev dependencies ${colors.magenta(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(devDependencies).join(\" \")} -D`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dev dependencies installed successfully ${colors.green(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n}\r\n\r\n/**\r\n * Write the resolved dependency sets into package.json without installing.\r\n * Used by `--no-install` so a scaffolder can batch every feature into one\r\n * install pass after the command returns. Versions come from the feature map.\r\n */\r\nasync function recordDependencies(\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  if (Object.keys(dependencies).length === 0 && Object.keys(devDependencies).length === 0) {\r\n    return;\r\n  }\r\n\r\n  const packageJsonPath = rootPath(\"package.json\");\r\n  const packageJson = await getJsonFileAsync(packageJsonPath);\r\n\r\n  packageJson.dependencies = packageJson.dependencies ?? {};\r\n  packageJson.devDependencies = packageJson.devDependencies ?? {};\r\n\r\n  Object.assign(packageJson.dependencies, dependencies);\r\n  Object.assign(packageJson.devDependencies, devDependencies);\r\n\r\n  await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n  const recorded = [...Object.keys(dependencies), ...Object.keys(devDependencies)];\r\n\r\n  console.log(\r\n    `Recorded ${colors.green(recorded.join(\", \"))} in package.json (install skipped via --no-install)`,\r\n  );\r\n}\r\n\r\nfunction validateFeatures(features: string[]) {\r\n  for (const feature of features) {\r\n    if (!allowedFeatures.includes(feature)) {\r\n      console.log(\r\n        `Feature ${colors.redBright(feature)} is not allowed, allowed features are: ${colors.green(allowedFeatures.join(\", \"))}`,\r\n      );\r\n      process.exit(1);\r\n    }\r\n  }\r\n}\r\n\r\nasync function getPackageManagerCommand(packageManager?: PackageManager) {\r\n  if (!packageManager) {\r\n    // try to detect it through checking lock files\r\n    packageManager = await detectPackageManager();\r\n  }\r\n\r\n  if (packageManager === \"npm\") {\r\n    return \"npm install\";\r\n  }\r\n\r\n  if (packageManager === \"yarn\") {\r\n    return \"yarn add\";\r\n  }\r\n\r\n  if (packageManager === \"pnpm\") {\r\n    return \"pnpm add\";\r\n  }\r\n}\r\n\r\nasync function detectPackageManager() {\r\n  if (await fileExistsAsync(rootPath(\"package-lock.json\"))) {\r\n    return \"npm\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"yarn.lock\"))) {\r\n    return \"yarn\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"pnpm-lock.yaml\"))) {\r\n    return \"pnpm\";\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;AAuCA,SAAS,mBAAmB,gBAAgB,GAAW;CACrD,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E;AAEA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;CAUF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,2BAA2B;CAChE;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,wBAAwB;CAC7D;AACF;AAEA,eAAe,+BAA+B,UAA6B;CAEzE,MAAM,mBAAmB,SAAS,QAAQ;CAC1C,MAAM,kBAAkB,SAAS,0BAA0B;CAE3D,IAAI,CAAE,MAAM,gBAAgB,eAAe,GAAI;EAC7C,MAAM,qBAAqB,gBAAgB;EAC3C,MAAM,aACJ,iBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,eAAe,SAAS,eAAe;CAC7C,MAAM,WAAW,MAAM,iBAAiB,YAAY;CAEpD,IAAI,CAAC,SAAS,SACZ,SAAS,UAAU,CAAC;CAGtB,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,GAAG;EACxC,SAAS,QAAQ,KAAK,QAAQ;EAC9B,MAAM,iBAAiB,cAAc,QAAQ;EAC7C,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,yCAAyC;CAC9E;AACF;AAEA,eAAe,kCAAkC,UAA6B;CAC5E,MAAM,YAAY,QAAQ,yCAAyC;CAKnE,IAAI,MAAM,gBAAgB,SAAS,GAAG;EACpC,QAAQ,IACN,GAAG,OAAO,aAAa,uBAAuB,EAAE,mDAClD;EACA;CACF;CAGA,MAAM,qBAAqB,QAAQ,mBAAmB,CAAC;CACvD,MAAM,aAAa,WAAW,qBAAqB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,qDAAqD;CAKxF,MAAM,qBAAqB,QAAQ,8BAA8B,CAAC;CAElE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE;CAE9C,MAAM,aACJ,QAAQ,gCAAgC,aAAa,GACrD,yBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,KAAK,EAAE,4CAA4C,eACrE;CAIA,MAAM,qBAAqB,QAAQ,+BAA+B,CAAC;CACnE,MAAM,aACJ,QAAQ,2DAA2D,GACnE,2BACF;CACA,MAAM,aAAa,QAAQ,6BAA6B,GAAG,sBAAsB;CACjF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,uDAAuD;AAC1F;AAEA,eAAe,uBAAuB;CAIpC,MAAM,cAAc,QAAQ,6BAA6B;CAEzD,MAAM,eAAe;;;;;;;;;CAUrB,IAAI,MAAM,gBAAgB,WAAW,GAAG;EACtC,MAAM,UAAU,MAAM,aAAa,WAAW;EAE9C,IAAI,QAAQ,SAAS,8BAA8B,GAAG;GACpD,QAAQ,IAAI,GAAG,OAAO,aAAa,QAAQ,EAAE,wCAAwC;GAErF;EACF;EAOA,MAAM,aAAa,aAAa,GAFjB,QAAQ,SAAS,sBAAsB,IAAI,KAAK,gEAEnB,QAAQ,QAAQ,EAAE,MAAM,cAAc;EAElF,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iEACvB;EAEA;CACF;CAEA,MAAM,qBAAqB,QAAQ,kBAAkB,CAAC;CAEtD,MAAM,aACJ,aACA,8DAA8D,cAChE;CAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gEAAgE;AACnG;AAEA,eAAe,sBAAsB;CAKnC,MAAM,eAAe,QAAQ,wCAAwC;CAErE,IAAI,MAAM,gBAAgB,YAAY,GAAG;EACvC,QAAQ,IACN,GAAG,OAAO,aAAa,gBAAgB,EAAE,wDAC3C;EAEA;CACF;CAIA,MAAM,qBAAqB,QAAQ,wBAAwB,CAAC;CAC5D,MAAM,aAAa,QAAQ,sCAAsC,GAAG,mBAAmB;CACvF,MAAM,aAAa,QAAQ,iCAAiC,GAAG,wBAAwB;CACvF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oCAAoC;CAErE,MAAM,qBAAqB,QAAQ,mCAAmC,CAAC;CAOvE,MAAM,oBAAoB,GAAG,mBAAmB,EAAE;CAClD,MAAM,aACJ,QAAQ,qCAAqC,iBAAiB,GAC9D,uBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iDAAiD,mBACxE;CAKA,MAAM,qBAAqB,QAAQ,6BAA6B,CAAC;CACjE,MAAM,aACJ,QAAQ,gDAAgD,GACxD,uBACF;CACA,MAAM,aACJ,QAAQ,sCAAsC,GAC9C,4BACF;CACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAE1E,MAAM,qBAAqB,QAAQ,wCAAwC,CAAC;CAE5E,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,EAAE;CACvD,MAAM,aACJ,QAAQ,0CAA0C,qBAAqB,GACvE,2BACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sDAAsD,uBAC7E;CAIA,MAAM,qBAAqB,QAAQ,qBAAqB,CAAC;CACzD,MAAM,aAAa,cAAc,kBAAkB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oDAAoD;AACvF;AAEA,eAAe,2BAA2B,UAA6B;CACrE,MAAM,qBAAqB;CAC3B,MAAM,oBAAoB;AAC5B;;;;;;;;;;;;;;;AAgBA,eAAe,oBAAoB,WAAkC;CACnE,MAAM,eAAe,QAAQ,cAAc;CAE3C,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC;CAGF,MAAM,UAAU,MAAM,aAAa,YAAY;CAC/C,MAAM,aAAa,WAAW,UAAU;CAExC,IAAI,QAAQ,SAAS,UAAU,GAC7B;CAGF,MAAM,SAAS;CACf,IAAI;CAEJ,IAAI,QAAQ,SAAS,MAAM,GACzB,OAAO,QAAQ,QAAQ,QAAQ,GAAG,OAAO,IAAI,YAAY;MAEzD,OAAO,GAAG,WAAW,IAAI;CAG3B,MAAM,aAAa,cAAc,IAAI;CAErC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,UAAU,UAAU,qBAAqB;AAC5E;AAEA,MAAa,cAcT;CACF,eAAe;EACb,aAAa;EACb,UAAU,CAAC,QAAQ,OAAO;EAC1B,cAAc;GACZ,eAAe;GACf,2BAA2B;GAC3B,uBAAuB;GACvB,yBAAyB;EAC3B;EACA,iBAAiB,EACf,+BAA+B,SACjC;EACA,QAAQ,EACN,iBAAiB,sBACnB;EACA,aAAa;CACf;CACA,OAAO;EACL,aACE;EACF,cAAc;GACZ,OAAO;GACP,aAAa;EACf;EACA,iBAAiB;GACf,gBAAgB;GAChB,oBAAoB;EACtB;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,MAAM;EACJ,aAAa;EACb,cAAc,EACZ,YAAY,SACd;EACA,iBAAiB,EACf,qBAAqB,SACvB;CACF;CACA,KAAK;EACH,aAAa;EACb,cAAc,EACZ,yBAAyB,YAC3B;CACF;CACA,SAAS;EACP,aAAa;EACb,cAAc,EACZ,SAAS,SACX;CACF;CACA,WAAW;EACT,aAAa;EACb,cAAc,EACZ,yBAAyB,SAC3B;CACF;CAGA,UAAU;EACR,aAAa;EACb,cAAc,EACZ,IAAI,UACN;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,QAAQ,SACV;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,IAAI;EACF,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,wBAAwB;GACxB,iCAAiC;EACnC;CACF;CACA,MAAM;EACJ,aAAa;EACb,aAAa;EACb,QAAQ;GACN,MAAM;GACN,iBAAiB;GACjB,WAAW;GACX,cAAc;EAChB;EACA,iBAAiB;GACf,gBAAgB;GAChB,MAAM;GACN,QAAQ;GACR,uBAAuB;EACzB;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,SAAS;EACX;EACA,iBAAiB,EACf,kBAAkB,UACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc,EACZ,aAAa,SACf;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,eAAe;EACb,aACE;EAIF,UAAU,CAAC,MAAM;EACjB,cAAc;GACZ,6BAA6B;GAC7B,oBAAoB;EACtB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,QAAQ;EACN,aACE;EACF,cAAc,EACZ,sBAAsB,SACxB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,IAAI;EACF,aAAa;EACb,cAAc,EACZ,kBAAkB,SACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,gBAAgB;EACd,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;CACF;CACA,cAAc;EACZ,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,0BAA0B,SAC5B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,YAAY;EACV,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,wBAAwB,SAC1B;EACA,mBAAmB,oBAAoB,sBAAsB;CAC/D;CACA,eAAe;EACb,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,2BAA2B,SAC7B;EACA,mBAAmB,oBAAoB,yBAAyB;CAClE;CACA,gBAAgB;EACd,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;EACA,mBAAmB,oBAAoB,0BAA0B;CACnE;AACF;AAEA,MAAa,kBAAkB,OAAO,KAAK,WAAW;AAItD,SAAS,gBAAgB,UAAoB,0BAAU,IAAI,IAAY,GAAa;CAClF,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,IAAI,OAAO,GAAG;EAC1B,QAAQ,IAAI,OAAO;EAEnB,MAAM,MAAM,YAAY;EAExB,IAAI,IAAI,UAAU,QAChB,SAAS,KAAK,GAAG,gBAAgB,IAAI,UAAU,OAAO,CAAC;EAGzD,SAAS,KAAK,OAAO;CACvB;CAEA,OAAO;AACT;AAEA,eAAsB,iBAAiB,SAA4B;CACjE,MAAM,WAAW,QAAQ;CACzB,MAAM,EAAE,gBAAgB,MAAM,cAAc,QAAQ;CAEpD,IAAI,MAAM;EACR,QAAQ,IAAI,qBAAqB;EAEjC,KAAK,MAAM,WAAW,iBACpB,QAAQ,IACN,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,WAAW,GACrF;EAGF,QAAQ,KAAK,CAAC;CAChB;CAEA,iBAAiB,QAAQ;CAEzB,MAAM,mBAAmB,gBAAgB,QAAQ;CAEjD,MAAM,eAAuC,CAAC;CAC9C,MAAM,kBAA0C,CAAC;CACjD,MAAM,eAAkE,CAAC;CACzE,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,OAAO,OAAO,cAAc,gBAAgB,YAAY;EACxD,IAAI,gBAAgB,iBAClB,OAAO,OAAO,iBAAiB,gBAAgB,eAAe;EAGhE,IAAI,gBAAgB,aAClB,aAAa,gBAAgB,YAAY,QAAQ,gBAAgB;EAGnE,IAAI,gBAAgB,QAClB,OAAO,OAAO,SAAS,gBAAgB,MAAM;CAEjD;CAKA,MAAM,mBAAmB,MAAM,kBAAkB;CACjD,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,WAAW,WAAW,cAAc,GACtC,aAAa,cAAc;CAI/B,MAAM,qBAAqB,MAAM,iBAAiB,SAAS,cAAc,CAAC;CAG1E,mBAAmB,eAAe,mBAAmB,gBAAgB,CAAC;CACtE,mBAAmB,kBAAkB,mBAAmB,mBAAmB,CAAC;CAG5E,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,mBAAmB,aAAa,aAAa;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,UAAU,EAAE,mCAAmC;EAClF,OAAO,aAAa;CACtB;CAGF,KAAK,MAAM,iBAAiB,OAAO,KAAK,eAAe,GACrD,IAAI,mBAAmB,gBAAgB,gBAAgB;EACrD,QAAQ,IAAI,GAAG,OAAO,aAAa,aAAa,EAAE,mCAAmC;EACrF,OAAO,gBAAgB;CACzB;CAGF,IAAI,WACF,MAAM,mBAAmB,cAAc,eAAe;MAEtD,MAAM,oBAAoB,gBAAkC,cAAc,eAAe;CAG3F,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,YAAY,GAAG;EACzD,IAAI,MAAM,gBAAgB,QAAQ,UAAU,KAAK,IAAI,CAAC,GAAG;GACvD,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,oCAAoC;GAC7E;EACF;EAEA,QAAQ,IAAI,YAAY,OAAO,QAAQ,IAAI,EAAE,WAAW;EAExD,MAAM,aAAa,QAAQ,UAAU,KAAK,IAAI,GAAG,OAAO,OAAO;EAE/D,QAAQ,IAAI,GAAG,OAAO,MAAM,IAAI,EAAE,6BAA6B;CACjE;CAGA,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,IAAI,gBAAgB,aAClB,MAAM,gBAAgB,YAAY,OAAO;CAE7C;CAEA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG;EACnC,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAC/E,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;EAC1D,YAAY,UAAU;GAAE,GAAI,YAAY,WAAW,CAAC;GAAI,GAAG;EAAQ;EACnE,MAAM,iBAAiB,iBAAiB,WAAW;EAEnD,QAAQ,IAAI,8BAA8B,OAAO,MAAM,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;CAC3F;AACF;;;;;AAMA,eAAe,oBACb,gBACA,cACA,iBACA;CACA,MAAM,wBAAwB,MAAM,yBAAyB,cAAc;CAE3E,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,SAAS,GAAG;EACxC,QAAQ,IAAI,2BAA2B,OAAO,QAAQ,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAE7F,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,GAAG,KAAK;GAC1E,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,uCAAuC,OAAO,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAC1F;CACF;CAEA,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,SAAS,GAAG;EAC3C,QAAQ,IACN,+BAA+B,OAAO,QAAQ,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACvF;EAEA,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM;GAChF,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,2CAA2C,OAAO,MAAM,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACjG;CACF;AACF;;;;;;AAOA,eAAe,mBACb,cACA,iBACA;CACA,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,eAAe,CAAC,CAAC,WAAW,GACpF;CAGF,MAAM,kBAAkB,SAAS,cAAc;CAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;CAE1D,YAAY,eAAe,YAAY,gBAAgB,CAAC;CACxD,YAAY,kBAAkB,YAAY,mBAAmB,CAAC;CAE9D,OAAO,OAAO,YAAY,cAAc,YAAY;CACpD,OAAO,OAAO,YAAY,iBAAiB,eAAe;CAE1D,MAAM,iBAAiB,iBAAiB,WAAW;CAEnD,MAAM,WAAW,CAAC,GAAG,OAAO,KAAK,YAAY,GAAG,GAAG,OAAO,KAAK,eAAe,CAAC;CAE/E,QAAQ,IACN,YAAY,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,oDAChD;AACF;AAEA,SAAS,iBAAiB,UAAoB;CAC5C,KAAK,MAAM,WAAW,UACpB,IAAI,CAAC,gBAAgB,SAAS,OAAO,GAAG;EACtC,QAAQ,IACN,WAAW,OAAO,UAAU,OAAO,EAAE,yCAAyC,OAAO,MAAM,gBAAgB,KAAK,IAAI,CAAC,GACvH;EACA,QAAQ,KAAK,CAAC;CAChB;AAEJ;AAEA,eAAe,yBAAyB,gBAAiC;CACvE,IAAI,CAAC,gBAEH,iBAAiB,MAAM,qBAAqB;CAG9C,IAAI,mBAAmB,OACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;AAEX;AAEA,eAAe,uBAAuB;CACpC,IAAI,MAAM,gBAAgB,SAAS,mBAAmB,CAAC,GACrD,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,WAAW,CAAC,GAC7C,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,gBAAgB,CAAC,GAClD,OAAO;AAEX"}

package/esm/generations/stubs.mjs

@@ -26,6 +26,36 @@ const access: AccessConfigurations = {
 
 export default access;
 `;
+const aiConfigStub = `import type { AIConfig } from "@warlock.js/ai";
+
+// >>> warlock:ai-packages (auto-managed) >>>
+// Satellite packages augment the "ai" object on import — e.g. ai.workspace,
+// ai.tools / ai.mcp, and panoptic's ai.config({ panoptic }) wiring. The command
+// "warlock add ai-workspace | ai-tools | ai-panoptic" adds the matching
+// side-effect import below; keep them so the augmentation + runtime registration
+// load before the ai connector applies this config.
+// <<< warlock:ai-packages <<<
+
+/**
+ * AI configuration — applied on boot by the ai connector, which calls
+ * ai.config(...) with the object below. Cross-cutting defaults live here
+ * (shared cache / snapshot stores, observability); per-call options always win.
+ *
+ * Wire a default model from a provider you installed, e.g.:
+ *   import { OpenAISDK } from "@warlock.js/ai-openai";
+ *   const openai = OpenAISDK({ apiKey: env("OPENAI_API_KEY") });
+ *   // then pass openai.model({ name: "gpt-4o-mini" }) into your agents.
+ */
+const ai: Partial<AIConfig> = {
+  // Default cache driver for cache-backed AI features (semantic cache, rag / memory vector stores).
+  // defaultStore: cache.driver("redis", { client }),
+
+  // Observability — requires "warlock add ai-panoptic". Exporters + the local dashboard.
+  // panoptic: { exporters: [], dashboard: false, observeAll: false },
+};
+
+export default ai;
+`;
 const accessRoleModelStub = `import { Model, RegisterModel } from "@warlock.js/cascade";
 import { type Infer, v } from "@warlock.js/seal";
 
@@ -546,5 +576,5 @@ router.group({ prefix: "/notifications", middleware: [authMiddleware([])] }, ()
 `;
 
 //#endregion
-export { accessConfigStub, accessResolverStub, accessRoleMigrationStub, accessRoleModelIndexStub, accessRoleModelStub, accessUserRoleMigrationStub, accessUserRoleModelIndexStub, accessUserRoleModelStub, communicatorsConfigStub, notificationControllersStub, notificationMigrationStub, notificationModelStub, notificationRoutesStub, notificationsConfigStub, socketConfigStub };
+export { accessConfigStub, accessResolverStub, accessRoleMigrationStub, accessRoleModelIndexStub, accessRoleModelStub, accessUserRoleMigrationStub, accessUserRoleModelIndexStub, accessUserRoleModelStub, aiConfigStub, communicatorsConfigStub, notificationControllersStub, notificationMigrationStub, notificationModelStub, notificationRoutesStub, notificationsConfigStub, socketConfigStub };
 //# sourceMappingURL=stubs.mjs.map

package/esm/generations/stubs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/stubs.ts"],"sourcesContent":["export const accessConfigStub = `import { type AccessConfigurations } from \"@warlock.js/access\";\r\nimport { DatabaseAccessResolver } from \"app/access/services/access-resolver\";\r\n\r\n/**\r\n * Authorization configuration — read by @warlock.js/access on boot.\r\n *\r\n * The resolver is the one required piece: it tells the engine how to read a\r\n * user's roles + permissions. The ejected DatabaseAccessResolver reads roles\r\n * from the user_roles table and maps them through the roles catalog table (so\r\n * roles + their permissions are managed at runtime, in the DB).\r\n *\r\n * For a fixed, code-defined catalog with no tables, swap in DefaultAccessResolver:\r\n *   import { DefaultAccessResolver } from \"@warlock.js/access\";\r\n *   resolver: new DefaultAccessResolver({ admin: [\"*\"], editor: [\"orders.*\"] }),\r\n *\r\n * Multi-tenant? Add a \\`resolveTenant()\\` to the resolver to read the active\r\n * tenant from the request; checks then scope to it automatically.\r\n */\r\nconst access: AccessConfigurations = {\r\n  resolver: new DatabaseAccessResolver(),\r\n\r\n  // Cache resolved permission sets (default \"10m\").\r\n  // cache: { ttl: \"10m\" },\r\n};\r\n\r\nexport default access;\r\n`;\r\n\r\nexport const accessRoleModelStub = `import { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the roles catalog — mirrors the migration columns\r\n * (snake_case). Each row is a role name plus the permission strings it grants;\r\n * wildcards work (\"orders.*\", \"*\"). The DatabaseAccessResolver maps a user's\r\n * assigned role names through this table to their effective permissions.\r\n */\r\nexport const roleSchema = v.object({\r\n  name: v.string(),\r\n  permissions: v.array(v.string()).default([]),\r\n});\r\n\r\nexport type RoleSchema = Infer<typeof roleSchema>;\r\n\r\n/**\r\n * The roles catalog — role name → the permissions it grants. Managed at runtime\r\n * (admins add roles + edit their permissions), unlike a fixed code map. Read by\r\n * DatabaseAccessResolver.resolvePermissions to expand a user's roles to permissions.\r\n */\r\n@RegisterModel()\r\nexport class Role extends Model<RoleSchema> {\r\n  public static table = \"roles\";\r\n\r\n  public static schema = roleSchema;\r\n\r\n  /** The permission strings this role grants. */\r\n  public get permissions(): string[] {\r\n    return this.get<string[]>(\"permissions\", []);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessRoleModelIndexStub = `export * from \"./role.model\";\r\n`;\r\n\r\nexport const accessRoleMigrationStub = `import { arrayText, Migration, text } from \"@warlock.js/cascade\";\r\nimport { Role } from \"../role.model\";\r\n\r\n/**\r\n * Roles catalog table. \\`name\\` is unique (one row per role); \\`permissions\\` is a\r\n * text array of the permission strings the role grants.\r\n */\r\nexport default Migration.create(Role, {\r\n  name: text().notNullable().unique(),\r\n  permissions: arrayText().nullable(),\r\n});\r\n`;\r\n\r\nexport const accessUserRoleModelStub = `import { access } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for a role assignment — mirrors the migration columns\r\n * (snake_case). \\`tenant\\` is nullable: a null tenant is a GLOBAL assignment.\r\n */\r\nexport const userRoleSchema = v.object({\r\n  user_id: v.string(),\r\n  user_type: v.string(),\r\n  role: v.string(),\r\n  tenant: v.string().optional(),\r\n});\r\n\r\nexport type UserRoleSchema = Infer<typeof userRoleSchema>;\r\n\r\n/**\r\n * The role-assignment table — which roles a user holds, optionally per tenant.\r\n * Read by DatabaseAccessResolver.resolveRoles; mutated via the statics below.\r\n * \\`assign\\` / \\`revoke\\` flush the cached permission set automatically, so callers\r\n * never need to call \\`access.flush(user, tenant)\\` themselves.\r\n */\r\n@RegisterModel()\r\nexport class UserRole extends Model<UserRoleSchema> {\r\n  public static table = \"user_roles\";\r\n\r\n  public static schema = userRoleSchema;\r\n\r\n  /**\r\n   * Role names assigned to the user in the given tenant.\r\n   *\r\n   * An unresolved tenant (\\`undefined\\`) scopes to GLOBAL roles only — the rows\r\n   * stored with no tenant (\\`null\\`) — never the union across every tenant. The\r\n   * union would be a privilege-escalation: a user who is \\`owner\\` in one tenant\r\n   * must not be treated as \\`owner\\` everywhere just because a check didn't carry\r\n   * a tenant. This mirrors how \\`assign(user, role)\\` stores a global row.\r\n   */\r\n  public static async rolesFor(user: Auth, tenant?: string): Promise<string[]> {\r\n    const rows = await this.query()\r\n      .where({\r\n        user_id: user.id,\r\n        user_type: user.userType,\r\n        tenant: tenant ?? null,\r\n      })\r\n      .get();\r\n\r\n    // De-dupe so a duplicate row (a concurrent assign that slipped past the\r\n    // existence check) can't distort the resolved set.\r\n    return [...new Set(rows.map((row) => row.get(\"role\") as string))];\r\n  }\r\n\r\n  /**\r\n   * Assign a role to the user. No-op if the assignment already exists.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async assign(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    const existing = await this.first({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    if (existing) return;\r\n\r\n    await this.create({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n\r\n  /**\r\n   * Remove a role assignment from the user.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async revoke(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    await this.delete({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessUserRoleModelIndexStub = `export * from \"./user-role.model\";\r\n`;\r\n\r\nexport const accessUserRoleMigrationStub = `import { Migration, text, uuid } from \"@warlock.js/cascade\";\r\nimport { UserRole } from \"../user-role.model\";\r\n\r\n/**\r\n * Role-assignment table. \\`user_id\\` is a UUID — override this migration if your\r\n * user ids are integers. The composite index powers the per-user (per-tenant)\r\n * lookup the resolver runs on every check.\r\n */\r\nexport default Migration.create(\r\n  UserRole,\r\n  {\r\n    user_id: uuid().notNullable().index(),\r\n    user_type: text().notNullable(),\r\n    role: text().notNullable().index(),\r\n    tenant: text().nullable().index(),\r\n  },\r\n  {\r\n    index: [{ columns: [\"user_id\", \"user_type\", \"tenant\"] }],\r\n  },\r\n);\r\n`;\r\n\r\nexport const accessResolverStub = `import type { AccessResolver } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Role } from \"app/access/models/role\";\r\nimport { UserRole } from \"app/access/models/user-role\";\r\n\r\n/**\r\n * The app's access adapter — connects @warlock.js/access to the ejected role\r\n * tables. Roles come from the user_roles assignment table; permissions are\r\n * expanded by mapping those role names through the roles catalog table. Both\r\n * are managed at runtime (in the DB), so admins can add roles + edit their\r\n * permissions without a deploy.\r\n *\r\n * The engine owns the hard parts (wildcard matching, caching, fail-closed); this\r\n * resolver only fetches — keep it dumb, never cache inside it.\r\n */\r\nexport class DatabaseAccessResolver implements AccessResolver {\r\n  /** The role names this user holds (powers \\`hasRole\\` / \\`hasAnyRole\\`). */\r\n  public async resolveRoles(user: Auth, tenant?: string): Promise<string[]> {\r\n    return UserRole.rolesFor(user, tenant);\r\n  }\r\n\r\n  /** The effective permission strings this user has (powers \\`can\\` / \\`authorize\\`). */\r\n  public async resolvePermissions(user: Auth, tenant?: string): Promise<string[]> {\r\n    const names = await this.resolveRoles(user, tenant);\r\n\r\n    if (names.length === 0) return [];\r\n\r\n    const roles = await Role.query().whereIn(\"name\", names).get();\r\n\r\n    // Flatten + de-dupe so two roles granting the same permission yield one entry.\r\n    return [...new Set(roles.flatMap((role) => role.permissions))];\r\n  }\r\n\r\n  /**\r\n   * Optional. Resolve the ambient tenant when a check doesn't pass one\r\n   * explicitly — derive it from the authenticated user (safer than reading\r\n   * client request input, which a caller could spoof). Uncomment + adapt for a\r\n   * multi-tenant app (single-tenant apps leave this off and return undefined).\r\n   */\r\n  // public resolveTenant(user: Auth): string | undefined {\r\n  //   return user.get(\"organization_id\");\r\n  // }\r\n}\r\n`;\r\n\r\nexport const socketConfigStub = `import type { SocketOptions } from \"@warlock.js/core\";\r\n\r\n/**\r\n * Socket.IO configuration — read by the framework's socket connector\r\n * on boot. When the HTTP server is running the socket server attaches\r\n * to it; otherwise it listens on its own configured port.\r\n *\r\n * Remove this file to disable the socket server entirely.\r\n */\r\nexport default {\r\n  options: {\r\n    cors: {\r\n      origin: \"*\",\r\n    },\r\n  },\r\n} as SocketOptions;\r\n`;\r\n\r\nexport const communicatorsConfigStub = `import { env } from \"@mongez/dotenv\";\r\nimport type { BrokerConfigurations, RabbitMQClientOptions } from \"@warlock.js/herald\";\r\n\r\nconst heraldConfigurations: BrokerConfigurations<RabbitMQClientOptions> = {\r\n  driver: \"rabbitmq\",\r\n  name: \"default\",\r\n  isDefault: true,\r\n\r\n  // ============================================================================\r\n  // Connection Settings\r\n  // ============================================================================\r\n\r\n  host: env(\"RABBITMQ_HOST\", \"localhost\"),\r\n  port: env(\"RABBITMQ_PORT\", 5672),\r\n  username: env(\"RABBITMQ_USERNAME\", \"guest\"),\r\n  password: env(\"RABBITMQ_PASSWORD\", \"guest\"),\r\n  vhost: env(\"RABBITMQ_VHOST\", \"/\"),\r\n\r\n  // Or use connection URI (takes precedence over host/port)\r\n  // uri: env(\"RABBITMQ_URL\"),\r\n\r\n  // ============================================================================\r\n  // Connection Options\r\n  // ============================================================================\r\n\r\n  /** Heartbeat interval in seconds */\r\n  heartbeat: 60,\r\n\r\n  /** Connection timeout in milliseconds */\r\n  connectionTimeout: 10000,\r\n\r\n  /** Enable automatic reconnection on disconnect */\r\n  reconnect: true,\r\n\r\n  /** Delay between reconnection attempts in milliseconds */\r\n  reconnectDelay: 5_000,\r\n\r\n  // ============================================================================\r\n  // Consumer Options\r\n  // ============================================================================\r\n\r\n  /** Default prefetch count (number of unacknowledged messages per consumer) */\r\n  prefetch: 10,\r\n\r\n  // ============================================================================\r\n  // Client Options (Native amqplib options)\r\n  // ============================================================================\r\n  // These options are passed directly to amqplib.connect()\r\n  // for low-level configuration like frame size, TLS, socket options, etc.\r\n  // ============================================================================\r\n  clientOptions: {\r\n    // Frame max size in bytes (0 = no limit)\r\n    // frameMax: 0,\r\n\r\n    // Channel max (0 = unlimited)\r\n    // channelMax: 0,\r\n\r\n    // Socket options\r\n    socket: {\r\n      // Enable TCP keep-alive\r\n      keepAlive: true,\r\n\r\n      // Disable Nagle's algorithm for lower latency\r\n      noDelay: true,\r\n\r\n      // Socket timeout (in addition to heartbeat)\r\n      // timeout: 30000,\r\n    },\r\n\r\n    // TLS/SSL options (uncomment for secure connections)\r\n    // socket: {\r\n    //   ca: fs.readFileSync('/path/to/ca.pem'),\r\n    //   cert: fs.readFileSync('/path/to/cert.pem'),\r\n    //   key: fs.readFileSync('/path/to/key.pem'),\r\n    //   rejectUnauthorized: true,\r\n    // },\r\n  },\r\n};\r\n\r\nexport default heraldConfigurations;\r\n`;\r\n\r\nexport const notificationsConfigStub = `import { type NotificationConfig, inApp, mailChannel } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"app/notifications/notification.model\";\r\n\r\n/**\r\n * Notifications configuration. Auto-loaded from src/config on boot — the\r\n * framework's notifications connector reads this default export and hands it to\r\n * setNotificationConfig, so this file stays declarative (no side-effect call).\r\n *\r\n * Each channel is payload-typed, so notify.mail(...) / notify.database(...)\r\n * and defineNotification are type-checked against the registry.\r\n *\r\n * Channels enabled here:\r\n *   - mail     wraps @warlock.js/core sendMail; route is notifiable.email.\r\n *              The \"from\" address defaults to config/mail.ts; override per\r\n *              channel with mailChannel({ from: \"no-reply@yourapp.com\" }).\r\n *   - database in-app store backed by the Notification model. The \"inApp\"\r\n *              facade exposes the recipient-scoped read API: listUnread,\r\n *              countUnread, markAsRead, dismiss, ...\r\n *\r\n * Async delivery (.queue()) is OPTIONAL: run \"npx warlock add herald\",\r\n * import { heraldQueue } from \"@warlock.js/notifications\", and uncomment the\r\n * queue line below.\r\n */\r\nconst config: NotificationConfig = {\r\n  channels: {\r\n    mail: mailChannel(),\r\n    database: inApp.configure({ model: Notification }),\r\n  },\r\n\r\n  // Async queue — requires @warlock.js/herald (npx warlock add herald):\r\n  // queue: heraldQueue(),\r\n};\r\n\r\nexport default config;\r\n`;\r\n\r\nexport const notificationModelStub = `import { RegisterModel } from \"@warlock.js/cascade\";\r\nimport { DatabaseNotification, type NotificationColumnMap } from \"@warlock.js/notifications\";\r\nimport { v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the notifications table — mirrors the migration\r\n * columns (snake_case). Cascade validates + casts every write against it:\r\n * nullable columns use .nullish() (may be absent or null), and payload is\r\n * free-form JSON. Keep this in sync with the migration + columnMap when you\r\n * add or rename columns.\r\n */\r\nconst notificationSchema = v.object({\r\n  user_id: v.string(),\r\n  type: v.string(),\r\n  title: v.string(),\r\n  body: v.string().nullish(),\r\n  payload: v.record(v.any()).nullish(),\r\n  read_at: v.date().nullish(),\r\n  idempotency_key: v.string().nullish(),\r\n});\r\n\r\n/**\r\n * In-app notification model.\r\n *\r\n * Extends the package's DatabaseNotification base, which provides the stable\r\n * accessors (recipientId, tenantId, isRead, readAt, markRead) — all derived\r\n * from the columnMap below. The read/write API lives on the inApp facade\r\n * (configured in config/notifications.ts); you rarely touch this class directly.\r\n */\r\n@RegisterModel()\r\nexport class Notification extends DatabaseNotification {\r\n  public static table = \"notifications\";\r\n  public static schema = notificationSchema;\r\n\r\n  /**\r\n   * Maps the in-app store's roles to your columns. This default is\r\n   * single-tenant + read_at-only. Add tenant: \"organization_id\" for\r\n   * multi-tenant; use isRead: \"is_read\" (instead of, or alongside, readAt) to\r\n   * track a boolean read flag. The migration + accessors all follow this map.\r\n   */\r\n  public static columnMap: NotificationColumnMap = { readAt: \"read_at\" };\r\n}\r\n`;\r\n\r\nexport const notificationMigrationStub = `import { Migration } from \"@warlock.js/cascade\";\r\nimport { notificationColumns } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"../notification.model\";\r\n\r\n/**\r\n * Notifications table.\r\n *\r\n * Columns come from notificationColumns(Notification) — the recipient / tenant\r\n * / read-state names follow the model's columnMap; type / title / body /\r\n * payload / idempotency_key are fixed. Spread it to add your own columns\r\n * (remember to mirror them in the model schema):\r\n *\r\n *   import { uuid } from \"@warlock.js/cascade\";\r\n *\r\n *   export default Migration.create(Notification, {\r\n *     ...notificationColumns(Notification),\r\n *     // category_id: uuid().index().nullable(),\r\n *   });\r\n */\r\nexport default Migration.create(Notification, notificationColumns(Notification));\r\n`;\r\n\r\nexport const notificationControllersStub = `import { type Request, type RequestHandler, type Response } from \"@warlock.js/core\";\r\nimport { inApp } from \"@warlock.js/notifications\";\r\n\r\n/**\r\n * The authenticated user's notification HTTP surface — thin wrappers over the\r\n * recipient-scoped \\`inApp\\` facade (a foreign id can never touch another user's\r\n * rows). Notifications are produced by domain events, never over HTTP, so there\r\n * is no create. Trim or split these as your app grows.\r\n */\r\n\r\n/** GET /notifications — list, most recent first (page / limit / type / unread via query). */\r\nexport const listNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const { data, pagination } = await inApp.list(request.user!, request.all());\r\n\r\n  return response.success({ notifications: data, pagination });\r\n};\r\n\r\nlistNotificationsController.description = \"List notifications\";\r\n\r\n/** GET /notifications/unread-count — drives the bell badge. */\r\nexport const unreadNotificationsCountController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.countUnread(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nunreadNotificationsCountController.description = \"Unread notifications count\";\r\n\r\n/** PATCH /notifications/:id/read — mark one read, return the updated row. */\r\nexport const markNotificationReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const id = request.input(\"id\");\r\n\r\n  await inApp.markAsRead(request.user!, id);\r\n  const notification = await inApp.find(request.user!, id);\r\n\r\n  return response.success({ notification });\r\n};\r\n\r\nmarkNotificationReadController.description = \"Mark notification read\";\r\n\r\n/** PATCH /notifications/read-all — mark every unread one read. */\r\nexport const markAllNotificationsReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.markAsRead(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nmarkAllNotificationsReadController.description = \"Mark all notifications read\";\r\n\r\n/** DELETE /notifications — dismiss all for the user. */\r\nexport const clearNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!);\r\n\r\n  return response.noContent();\r\n};\r\n\r\nclearNotificationsController.description = \"Clear notifications\";\r\n\r\n/** DELETE /notifications/:id — dismiss one. */\r\nexport const deleteNotificationController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!, request.input(\"id\"));\r\n\r\n  return response.noContent();\r\n};\r\n\r\ndeleteNotificationController.description = \"Delete notification\";\r\n`;\r\n\r\nexport const notificationRoutesStub = `import { authMiddleware } from \"@warlock.js/auth\";\r\nimport { router } from \"@warlock.js/core\";\r\nimport {\r\n  clearNotificationsController,\r\n  deleteNotificationController,\r\n  listNotificationsController,\r\n  markAllNotificationsReadController,\r\n  markNotificationReadController,\r\n  unreadNotificationsCountController,\r\n} from \"./controllers/notifications.controller\";\r\n\r\n/**\r\n * Notification routes — the authenticated user's read + dismiss surface.\r\n *\r\n * Notifications are produced by domain events (never created over HTTP), so\r\n * there is no POST. Every route is gated by \\`authMiddleware\\` and recipient-\r\n * scoped by \\`inApp\\` (a foreign id touches zero rows). Delete any endpoint you\r\n * don't need; if your app reads notifications over sockets/GraphQL instead,\r\n * delete this file + the controllers entirely.\r\n */\r\nrouter.group({ prefix: \"/notifications\", middleware: [authMiddleware([])] }, () => {\r\n  router.get(\"/\", listNotificationsController);\r\n  router.get(\"/unread-count\", unreadNotificationsCountController);\r\n  router.patch(\"/read-all\", markAllNotificationsReadController);\r\n  router.patch(\"/:id/read\", markNotificationReadController);\r\n  router.delete(\"/\", clearNotificationsController);\r\n  router.delete(\"/:id\", deleteNotificationController);\r\n});\r\n`;\r\n"],"mappings":";AAAA,MAAa,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,MAAa,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCnC,MAAa,2BAA2B;;AAGxC,MAAa,0BAA0B;;;;;;;;;;;;AAavC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FvC,MAAa,+BAA+B;;AAG5C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;AAsB3C,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ClC,MAAa,mBAAmB;;;;;;;;;;;;;;;;;AAkBhC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CrC,MAAa,4BAA4B;;;;;;;;;;;;;;;;;;;;;AAsBzC,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsF3C,MAAa,yBAAyB"}
+{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/stubs.ts"],"sourcesContent":["export const accessConfigStub = `import { type AccessConfigurations } from \"@warlock.js/access\";\r\nimport { DatabaseAccessResolver } from \"app/access/services/access-resolver\";\r\n\r\n/**\r\n * Authorization configuration — read by @warlock.js/access on boot.\r\n *\r\n * The resolver is the one required piece: it tells the engine how to read a\r\n * user's roles + permissions. The ejected DatabaseAccessResolver reads roles\r\n * from the user_roles table and maps them through the roles catalog table (so\r\n * roles + their permissions are managed at runtime, in the DB).\r\n *\r\n * For a fixed, code-defined catalog with no tables, swap in DefaultAccessResolver:\r\n *   import { DefaultAccessResolver } from \"@warlock.js/access\";\r\n *   resolver: new DefaultAccessResolver({ admin: [\"*\"], editor: [\"orders.*\"] }),\r\n *\r\n * Multi-tenant? Add a \\`resolveTenant()\\` to the resolver to read the active\r\n * tenant from the request; checks then scope to it automatically.\r\n */\r\nconst access: AccessConfigurations = {\r\n  resolver: new DatabaseAccessResolver(),\r\n\r\n  // Cache resolved permission sets (default \"10m\").\r\n  // cache: { ttl: \"10m\" },\r\n};\r\n\r\nexport default access;\r\n`;\r\n\r\nexport const aiConfigStub = `import type { AIConfig } from \"@warlock.js/ai\";\r\n\r\n// >>> warlock:ai-packages (auto-managed) >>>\r\n// Satellite packages augment the \"ai\" object on import — e.g. ai.workspace,\r\n// ai.tools / ai.mcp, and panoptic's ai.config({ panoptic }) wiring. The command\r\n// \"warlock add ai-workspace | ai-tools | ai-panoptic\" adds the matching\r\n// side-effect import below; keep them so the augmentation + runtime registration\r\n// load before the ai connector applies this config.\r\n// <<< warlock:ai-packages <<<\r\n\r\n/**\r\n * AI configuration — applied on boot by the ai connector, which calls\r\n * ai.config(...) with the object below. Cross-cutting defaults live here\r\n * (shared cache / snapshot stores, observability); per-call options always win.\r\n *\r\n * Wire a default model from a provider you installed, e.g.:\r\n *   import { OpenAISDK } from \"@warlock.js/ai-openai\";\r\n *   const openai = OpenAISDK({ apiKey: env(\"OPENAI_API_KEY\") });\r\n *   // then pass openai.model({ name: \"gpt-4o-mini\" }) into your agents.\r\n */\r\nconst ai: Partial<AIConfig> = {\r\n  // Default cache driver for cache-backed AI features (semantic cache, rag / memory vector stores).\r\n  // defaultStore: cache.driver(\"redis\", { client }),\r\n\r\n  // Observability — requires \"warlock add ai-panoptic\". Exporters + the local dashboard.\r\n  // panoptic: { exporters: [], dashboard: false, observeAll: false },\r\n};\r\n\r\nexport default ai;\r\n`;\r\n\r\nexport const accessRoleModelStub = `import { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the roles catalog — mirrors the migration columns\r\n * (snake_case). Each row is a role name plus the permission strings it grants;\r\n * wildcards work (\"orders.*\", \"*\"). The DatabaseAccessResolver maps a user's\r\n * assigned role names through this table to their effective permissions.\r\n */\r\nexport const roleSchema = v.object({\r\n  name: v.string(),\r\n  permissions: v.array(v.string()).default([]),\r\n});\r\n\r\nexport type RoleSchema = Infer<typeof roleSchema>;\r\n\r\n/**\r\n * The roles catalog — role name → the permissions it grants. Managed at runtime\r\n * (admins add roles + edit their permissions), unlike a fixed code map. Read by\r\n * DatabaseAccessResolver.resolvePermissions to expand a user's roles to permissions.\r\n */\r\n@RegisterModel()\r\nexport class Role extends Model<RoleSchema> {\r\n  public static table = \"roles\";\r\n\r\n  public static schema = roleSchema;\r\n\r\n  /** The permission strings this role grants. */\r\n  public get permissions(): string[] {\r\n    return this.get<string[]>(\"permissions\", []);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessRoleModelIndexStub = `export * from \"./role.model\";\r\n`;\r\n\r\nexport const accessRoleMigrationStub = `import { arrayText, Migration, text } from \"@warlock.js/cascade\";\r\nimport { Role } from \"../role.model\";\r\n\r\n/**\r\n * Roles catalog table. \\`name\\` is unique (one row per role); \\`permissions\\` is a\r\n * text array of the permission strings the role grants.\r\n */\r\nexport default Migration.create(Role, {\r\n  name: text().notNullable().unique(),\r\n  permissions: arrayText().nullable(),\r\n});\r\n`;\r\n\r\nexport const accessUserRoleModelStub = `import { access } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for a role assignment — mirrors the migration columns\r\n * (snake_case). \\`tenant\\` is nullable: a null tenant is a GLOBAL assignment.\r\n */\r\nexport const userRoleSchema = v.object({\r\n  user_id: v.string(),\r\n  user_type: v.string(),\r\n  role: v.string(),\r\n  tenant: v.string().optional(),\r\n});\r\n\r\nexport type UserRoleSchema = Infer<typeof userRoleSchema>;\r\n\r\n/**\r\n * The role-assignment table — which roles a user holds, optionally per tenant.\r\n * Read by DatabaseAccessResolver.resolveRoles; mutated via the statics below.\r\n * \\`assign\\` / \\`revoke\\` flush the cached permission set automatically, so callers\r\n * never need to call \\`access.flush(user, tenant)\\` themselves.\r\n */\r\n@RegisterModel()\r\nexport class UserRole extends Model<UserRoleSchema> {\r\n  public static table = \"user_roles\";\r\n\r\n  public static schema = userRoleSchema;\r\n\r\n  /**\r\n   * Role names assigned to the user in the given tenant.\r\n   *\r\n   * An unresolved tenant (\\`undefined\\`) scopes to GLOBAL roles only — the rows\r\n   * stored with no tenant (\\`null\\`) — never the union across every tenant. The\r\n   * union would be a privilege-escalation: a user who is \\`owner\\` in one tenant\r\n   * must not be treated as \\`owner\\` everywhere just because a check didn't carry\r\n   * a tenant. This mirrors how \\`assign(user, role)\\` stores a global row.\r\n   */\r\n  public static async rolesFor(user: Auth, tenant?: string): Promise<string[]> {\r\n    const rows = await this.query()\r\n      .where({\r\n        user_id: user.id,\r\n        user_type: user.userType,\r\n        tenant: tenant ?? null,\r\n      })\r\n      .get();\r\n\r\n    // De-dupe so a duplicate row (a concurrent assign that slipped past the\r\n    // existence check) can't distort the resolved set.\r\n    return [...new Set(rows.map((row) => row.get(\"role\") as string))];\r\n  }\r\n\r\n  /**\r\n   * Assign a role to the user. No-op if the assignment already exists.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async assign(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    const existing = await this.first({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    if (existing) return;\r\n\r\n    await this.create({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n\r\n  /**\r\n   * Remove a role assignment from the user.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async revoke(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    await this.delete({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessUserRoleModelIndexStub = `export * from \"./user-role.model\";\r\n`;\r\n\r\nexport const accessUserRoleMigrationStub = `import { Migration, text, uuid } from \"@warlock.js/cascade\";\r\nimport { UserRole } from \"../user-role.model\";\r\n\r\n/**\r\n * Role-assignment table. \\`user_id\\` is a UUID — override this migration if your\r\n * user ids are integers. The composite index powers the per-user (per-tenant)\r\n * lookup the resolver runs on every check.\r\n */\r\nexport default Migration.create(\r\n  UserRole,\r\n  {\r\n    user_id: uuid().notNullable().index(),\r\n    user_type: text().notNullable(),\r\n    role: text().notNullable().index(),\r\n    tenant: text().nullable().index(),\r\n  },\r\n  {\r\n    index: [{ columns: [\"user_id\", \"user_type\", \"tenant\"] }],\r\n  },\r\n);\r\n`;\r\n\r\nexport const accessResolverStub = `import type { AccessResolver } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Role } from \"app/access/models/role\";\r\nimport { UserRole } from \"app/access/models/user-role\";\r\n\r\n/**\r\n * The app's access adapter — connects @warlock.js/access to the ejected role\r\n * tables. Roles come from the user_roles assignment table; permissions are\r\n * expanded by mapping those role names through the roles catalog table. Both\r\n * are managed at runtime (in the DB), so admins can add roles + edit their\r\n * permissions without a deploy.\r\n *\r\n * The engine owns the hard parts (wildcard matching, caching, fail-closed); this\r\n * resolver only fetches — keep it dumb, never cache inside it.\r\n */\r\nexport class DatabaseAccessResolver implements AccessResolver {\r\n  /** The role names this user holds (powers \\`hasRole\\` / \\`hasAnyRole\\`). */\r\n  public async resolveRoles(user: Auth, tenant?: string): Promise<string[]> {\r\n    return UserRole.rolesFor(user, tenant);\r\n  }\r\n\r\n  /** The effective permission strings this user has (powers \\`can\\` / \\`authorize\\`). */\r\n  public async resolvePermissions(user: Auth, tenant?: string): Promise<string[]> {\r\n    const names = await this.resolveRoles(user, tenant);\r\n\r\n    if (names.length === 0) return [];\r\n\r\n    const roles = await Role.query().whereIn(\"name\", names).get();\r\n\r\n    // Flatten + de-dupe so two roles granting the same permission yield one entry.\r\n    return [...new Set(roles.flatMap((role) => role.permissions))];\r\n  }\r\n\r\n  /**\r\n   * Optional. Resolve the ambient tenant when a check doesn't pass one\r\n   * explicitly — derive it from the authenticated user (safer than reading\r\n   * client request input, which a caller could spoof). Uncomment + adapt for a\r\n   * multi-tenant app (single-tenant apps leave this off and return undefined).\r\n   */\r\n  // public resolveTenant(user: Auth): string | undefined {\r\n  //   return user.get(\"organization_id\");\r\n  // }\r\n}\r\n`;\r\n\r\nexport const socketConfigStub = `import type { SocketOptions } from \"@warlock.js/core\";\r\n\r\n/**\r\n * Socket.IO configuration — read by the framework's socket connector\r\n * on boot. When the HTTP server is running the socket server attaches\r\n * to it; otherwise it listens on its own configured port.\r\n *\r\n * Remove this file to disable the socket server entirely.\r\n */\r\nexport default {\r\n  options: {\r\n    cors: {\r\n      origin: \"*\",\r\n    },\r\n  },\r\n} as SocketOptions;\r\n`;\r\n\r\nexport const communicatorsConfigStub = `import { env } from \"@mongez/dotenv\";\r\nimport type { BrokerConfigurations, RabbitMQClientOptions } from \"@warlock.js/herald\";\r\n\r\nconst heraldConfigurations: BrokerConfigurations<RabbitMQClientOptions> = {\r\n  driver: \"rabbitmq\",\r\n  name: \"default\",\r\n  isDefault: true,\r\n\r\n  // ============================================================================\r\n  // Connection Settings\r\n  // ============================================================================\r\n\r\n  host: env(\"RABBITMQ_HOST\", \"localhost\"),\r\n  port: env(\"RABBITMQ_PORT\", 5672),\r\n  username: env(\"RABBITMQ_USERNAME\", \"guest\"),\r\n  password: env(\"RABBITMQ_PASSWORD\", \"guest\"),\r\n  vhost: env(\"RABBITMQ_VHOST\", \"/\"),\r\n\r\n  // Or use connection URI (takes precedence over host/port)\r\n  // uri: env(\"RABBITMQ_URL\"),\r\n\r\n  // ============================================================================\r\n  // Connection Options\r\n  // ============================================================================\r\n\r\n  /** Heartbeat interval in seconds */\r\n  heartbeat: 60,\r\n\r\n  /** Connection timeout in milliseconds */\r\n  connectionTimeout: 10000,\r\n\r\n  /** Enable automatic reconnection on disconnect */\r\n  reconnect: true,\r\n\r\n  /** Delay between reconnection attempts in milliseconds */\r\n  reconnectDelay: 5_000,\r\n\r\n  // ============================================================================\r\n  // Consumer Options\r\n  // ============================================================================\r\n\r\n  /** Default prefetch count (number of unacknowledged messages per consumer) */\r\n  prefetch: 10,\r\n\r\n  // ============================================================================\r\n  // Client Options (Native amqplib options)\r\n  // ============================================================================\r\n  // These options are passed directly to amqplib.connect()\r\n  // for low-level configuration like frame size, TLS, socket options, etc.\r\n  // ============================================================================\r\n  clientOptions: {\r\n    // Frame max size in bytes (0 = no limit)\r\n    // frameMax: 0,\r\n\r\n    // Channel max (0 = unlimited)\r\n    // channelMax: 0,\r\n\r\n    // Socket options\r\n    socket: {\r\n      // Enable TCP keep-alive\r\n      keepAlive: true,\r\n\r\n      // Disable Nagle's algorithm for lower latency\r\n      noDelay: true,\r\n\r\n      // Socket timeout (in addition to heartbeat)\r\n      // timeout: 30000,\r\n    },\r\n\r\n    // TLS/SSL options (uncomment for secure connections)\r\n    // socket: {\r\n    //   ca: fs.readFileSync('/path/to/ca.pem'),\r\n    //   cert: fs.readFileSync('/path/to/cert.pem'),\r\n    //   key: fs.readFileSync('/path/to/key.pem'),\r\n    //   rejectUnauthorized: true,\r\n    // },\r\n  },\r\n};\r\n\r\nexport default heraldConfigurations;\r\n`;\r\n\r\nexport const notificationsConfigStub = `import { type NotificationConfig, inApp, mailChannel } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"app/notifications/notification.model\";\r\n\r\n/**\r\n * Notifications configuration. Auto-loaded from src/config on boot — the\r\n * framework's notifications connector reads this default export and hands it to\r\n * setNotificationConfig, so this file stays declarative (no side-effect call).\r\n *\r\n * Each channel is payload-typed, so notify.mail(...) / notify.database(...)\r\n * and defineNotification are type-checked against the registry.\r\n *\r\n * Channels enabled here:\r\n *   - mail     wraps @warlock.js/core sendMail; route is notifiable.email.\r\n *              The \"from\" address defaults to config/mail.ts; override per\r\n *              channel with mailChannel({ from: \"no-reply@yourapp.com\" }).\r\n *   - database in-app store backed by the Notification model. The \"inApp\"\r\n *              facade exposes the recipient-scoped read API: listUnread,\r\n *              countUnread, markAsRead, dismiss, ...\r\n *\r\n * Async delivery (.queue()) is OPTIONAL: run \"npx warlock add herald\",\r\n * import { heraldQueue } from \"@warlock.js/notifications\", and uncomment the\r\n * queue line below.\r\n */\r\nconst config: NotificationConfig = {\r\n  channels: {\r\n    mail: mailChannel(),\r\n    database: inApp.configure({ model: Notification }),\r\n  },\r\n\r\n  // Async queue — requires @warlock.js/herald (npx warlock add herald):\r\n  // queue: heraldQueue(),\r\n};\r\n\r\nexport default config;\r\n`;\r\n\r\nexport const notificationModelStub = `import { RegisterModel } from \"@warlock.js/cascade\";\r\nimport { DatabaseNotification, type NotificationColumnMap } from \"@warlock.js/notifications\";\r\nimport { v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the notifications table — mirrors the migration\r\n * columns (snake_case). Cascade validates + casts every write against it:\r\n * nullable columns use .nullish() (may be absent or null), and payload is\r\n * free-form JSON. Keep this in sync with the migration + columnMap when you\r\n * add or rename columns.\r\n */\r\nconst notificationSchema = v.object({\r\n  user_id: v.string(),\r\n  type: v.string(),\r\n  title: v.string(),\r\n  body: v.string().nullish(),\r\n  payload: v.record(v.any()).nullish(),\r\n  read_at: v.date().nullish(),\r\n  idempotency_key: v.string().nullish(),\r\n});\r\n\r\n/**\r\n * In-app notification model.\r\n *\r\n * Extends the package's DatabaseNotification base, which provides the stable\r\n * accessors (recipientId, tenantId, isRead, readAt, markRead) — all derived\r\n * from the columnMap below. The read/write API lives on the inApp facade\r\n * (configured in config/notifications.ts); you rarely touch this class directly.\r\n */\r\n@RegisterModel()\r\nexport class Notification extends DatabaseNotification {\r\n  public static table = \"notifications\";\r\n  public static schema = notificationSchema;\r\n\r\n  /**\r\n   * Maps the in-app store's roles to your columns. This default is\r\n   * single-tenant + read_at-only. Add tenant: \"organization_id\" for\r\n   * multi-tenant; use isRead: \"is_read\" (instead of, or alongside, readAt) to\r\n   * track a boolean read flag. The migration + accessors all follow this map.\r\n   */\r\n  public static columnMap: NotificationColumnMap = { readAt: \"read_at\" };\r\n}\r\n`;\r\n\r\nexport const notificationMigrationStub = `import { Migration } from \"@warlock.js/cascade\";\r\nimport { notificationColumns } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"../notification.model\";\r\n\r\n/**\r\n * Notifications table.\r\n *\r\n * Columns come from notificationColumns(Notification) — the recipient / tenant\r\n * / read-state names follow the model's columnMap; type / title / body /\r\n * payload / idempotency_key are fixed. Spread it to add your own columns\r\n * (remember to mirror them in the model schema):\r\n *\r\n *   import { uuid } from \"@warlock.js/cascade\";\r\n *\r\n *   export default Migration.create(Notification, {\r\n *     ...notificationColumns(Notification),\r\n *     // category_id: uuid().index().nullable(),\r\n *   });\r\n */\r\nexport default Migration.create(Notification, notificationColumns(Notification));\r\n`;\r\n\r\nexport const notificationControllersStub = `import { type Request, type RequestHandler, type Response } from \"@warlock.js/core\";\r\nimport { inApp } from \"@warlock.js/notifications\";\r\n\r\n/**\r\n * The authenticated user's notification HTTP surface — thin wrappers over the\r\n * recipient-scoped \\`inApp\\` facade (a foreign id can never touch another user's\r\n * rows). Notifications are produced by domain events, never over HTTP, so there\r\n * is no create. Trim or split these as your app grows.\r\n */\r\n\r\n/** GET /notifications — list, most recent first (page / limit / type / unread via query). */\r\nexport const listNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const { data, pagination } = await inApp.list(request.user!, request.all());\r\n\r\n  return response.success({ notifications: data, pagination });\r\n};\r\n\r\nlistNotificationsController.description = \"List notifications\";\r\n\r\n/** GET /notifications/unread-count — drives the bell badge. */\r\nexport const unreadNotificationsCountController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.countUnread(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nunreadNotificationsCountController.description = \"Unread notifications count\";\r\n\r\n/** PATCH /notifications/:id/read — mark one read, return the updated row. */\r\nexport const markNotificationReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const id = request.input(\"id\");\r\n\r\n  await inApp.markAsRead(request.user!, id);\r\n  const notification = await inApp.find(request.user!, id);\r\n\r\n  return response.success({ notification });\r\n};\r\n\r\nmarkNotificationReadController.description = \"Mark notification read\";\r\n\r\n/** PATCH /notifications/read-all — mark every unread one read. */\r\nexport const markAllNotificationsReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.markAsRead(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nmarkAllNotificationsReadController.description = \"Mark all notifications read\";\r\n\r\n/** DELETE /notifications — dismiss all for the user. */\r\nexport const clearNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!);\r\n\r\n  return response.noContent();\r\n};\r\n\r\nclearNotificationsController.description = \"Clear notifications\";\r\n\r\n/** DELETE /notifications/:id — dismiss one. */\r\nexport const deleteNotificationController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!, request.input(\"id\"));\r\n\r\n  return response.noContent();\r\n};\r\n\r\ndeleteNotificationController.description = \"Delete notification\";\r\n`;\r\n\r\nexport const notificationRoutesStub = `import { authMiddleware } from \"@warlock.js/auth\";\r\nimport { router } from \"@warlock.js/core\";\r\nimport {\r\n  clearNotificationsController,\r\n  deleteNotificationController,\r\n  listNotificationsController,\r\n  markAllNotificationsReadController,\r\n  markNotificationReadController,\r\n  unreadNotificationsCountController,\r\n} from \"./controllers/notifications.controller\";\r\n\r\n/**\r\n * Notification routes — the authenticated user's read + dismiss surface.\r\n *\r\n * Notifications are produced by domain events (never created over HTTP), so\r\n * there is no POST. Every route is gated by \\`authMiddleware\\` and recipient-\r\n * scoped by \\`inApp\\` (a foreign id touches zero rows). Delete any endpoint you\r\n * don't need; if your app reads notifications over sockets/GraphQL instead,\r\n * delete this file + the controllers entirely.\r\n */\r\nrouter.group({ prefix: \"/notifications\", middleware: [authMiddleware([])] }, () => {\r\n  router.get(\"/\", listNotificationsController);\r\n  router.get(\"/unread-count\", unreadNotificationsCountController);\r\n  router.patch(\"/read-all\", markAllNotificationsReadController);\r\n  router.patch(\"/:id/read\", markNotificationReadController);\r\n  router.delete(\"/\", clearNotificationsController);\r\n  router.delete(\"/:id\", deleteNotificationController);\r\n});\r\n`;\r\n"],"mappings":";AAAA,MAAa,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,MAAa,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+B5B,MAAa,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCnC,MAAa,2BAA2B;;AAGxC,MAAa,0BAA0B;;;;;;;;;;;;AAavC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FvC,MAAa,+BAA+B;;AAG5C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;AAsB3C,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ClC,MAAa,mBAAmB;;;;;;;;;;;;;;;;;AAkBhC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CrC,MAAa,4BAA4B;;;;;;;;;;;;;;;;;;;;;AAsBzC,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsF3C,MAAa,yBAAyB"}

package/esm/http/middleware/cache-response-middleware.d.mts

@@ -32,7 +32,7 @@ type CacheMiddlewareOptions = {
    */
   driver?: string;
 };
-declare function cacheMiddleware(responseCacheOptions: CacheMiddlewareOptions | string): (request: Request, response: Response) => Promise<undefined>;
+declare function cacheMiddleware(responseCacheOptions: CacheMiddlewareOptions | string): (request: Request, response: Response) => Promise<Response | undefined>;
 //#endregion
 export { CacheMiddlewareOptions, cacheMiddleware };
 //# sourceMappingURL=cache-response-middleware.d.mts.map

package/esm/http/middleware/cache-response-middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-response-middleware.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/cache-response-middleware.ts"],"mappings":";;;;KASY,sBAAA;;AAAZ;;EAIE,QAAA,aAEM,OAAA,EAAS,OAAA,iBACT,OAAA,EAAS,OAAA,KAAY,OAAA;EADZ;;;;;;EAQf,UAAA;EARM;;;;;EAcN,IAAA;EAIA;;;EAAA,GAAA;EAkDc;;;;;;EA3Cd,MAAA;AAAA;AAAA,iBA2Cc,eAAA,CACd,oBAAA,EAAsB,sBAAA,aAEC,OAAA,EAAS,OAAA,EAAS,QAAA,EAAU,QAAA,KAAQ,OAAA"}
+{"version":3,"file":"cache-response-middleware.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/cache-response-middleware.ts"],"mappings":";;;;KAqBY,sBAAA;;AAAZ;;EAIE,QAAA,aAEM,OAAA,EAAS,OAAA,iBACT,OAAA,EAAS,OAAA,KAAY,OAAA;EADZ;;;;;;EAQf,UAAA;EARM;;;;;EAcN,IAAA;EAIA;;;EAAA,GAAA;EAkDc;;;;;;EA3Cd,MAAA;AAAA;AAAA,iBA2Cc,eAAA,CACd,oBAAA,EAAsB,sBAAA,aAEC,OAAA,EAAS,OAAA,EAAS,QAAA,EAAU,QAAA,KAAQ,OAAA,CAAA,QAAA"}

package/esm/http/middleware/cache-response-middleware.mjs

@@ -1,3 +1,4 @@
+import { log } from "@warlock.js/logger";
 import { except } from "@mongez/reinforcements";
 import { cache } from "@warlock.js/cache";
 
@@ -22,14 +23,22 @@ function cacheMiddleware(responseCacheOptions) {
 		const { ttl, omit, cacheKey, driver } = await parseCacheOptions(responseCacheOptions, request);
 		const cacheDriver = driver ? await cache.use(driver) : cache;
 		const content = await cacheDriver.get(cacheKey);
-		if (content) {
-			const output = content.data;
-			return response.baseResponse.send(output);
-		}
+		if (content) return response.replay({
+			status: content.status ?? 200,
+			body: content.data,
+			contentType: content.contentType
+		});
 		response.onSent((response) => {
 			if (!response.isOk || response.request.path !== request.path) return;
-			const content = { data: except(response.parsedBody, omit) };
-			cacheDriver.set(cacheKey, content, ttl);
+			const sentContentType = response.contentType;
+			const content = {
+				status: response.statusCode,
+				data: except(response.parsedBody, omit),
+				contentType: typeof sentContentType === "string" ? sentContentType : void 0
+			};
+			cacheDriver.set(cacheKey, content, ttl).catch((error) => {
+				log.error("cache-middleware", "set", error);
+			});
 		});
 	};
 }

package/esm/http/middleware/cache-response-middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cache-response-middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/cache-response-middleware.ts"],"sourcesContent":["import { except } from \"@mongez/reinforcements\";\nimport { cache } from \"@warlock.js/cache\";\nimport type { Request } from \"./../request\";\nimport type { Response } from \"./../response\";\n\n// TODO: Add option to determine whether to cache the response or not\n// TODO: add option to determine what to be cached from the response\n// TODO: add cache middleware config options for example to set the default driver, ttl, etc\n\nexport type CacheMiddlewareOptions = {\n  /**\n   * Cache key\n   */\n  cacheKey:\n    | string\n    | ((request: Request) => string)\n    | ((request: Request) => Promise<string>);\n  /**\n   * If true, then the response will be cached based on the current locale code\n   * This is useful when you have a multi-language website, and you want to cache the response based on the current locale\n   *\n   * @default true\n   */\n  withLocale?: boolean;\n  /**\n   * List of keys from the response object to omit from the cached response\n   *\n   * @default ['user']\n   */\n  omit?: string[];\n  /**\n   * Expires after number of seconds\n   */\n  ttl?: number;\n  /**\n   * Cache driver\n   *\n   * @see config/cache.ts: drivers object\n   * @default cache manager\n   */\n  driver?: string;\n};\n\nconst defaultCacheOptions: Partial<CacheMiddlewareOptions> = {\n  withLocale: true,\n};\n\ntype ParsedCacheOptions = Required<CacheMiddlewareOptions> & {\n  cacheKey: string;\n};\n\nasync function parseCacheOptions(\n  cacheOptions: CacheMiddlewareOptions | string,\n  request: Request,\n) {\n  if (typeof cacheOptions === \"string\") {\n    cacheOptions = {\n      cacheKey: cacheOptions,\n    };\n  }\n\n  if (typeof cacheOptions.cacheKey === \"function\") {\n    cacheOptions.cacheKey = await cacheOptions.cacheKey(request);\n  }\n\n  const finalCacheOptions = {\n    ...defaultCacheOptions,\n    ...cacheOptions,\n  } as ParsedCacheOptions;\n\n  if (finalCacheOptions.withLocale) {\n    const locale = request.getLocaleCode();\n\n    finalCacheOptions.cacheKey = `${finalCacheOptions.cacheKey}:${locale}`;\n  }\n\n  if (!finalCacheOptions.omit) {\n    finalCacheOptions.omit = [\"user\", \"settings\"];\n  }\n\n  return finalCacheOptions;\n}\n\nexport function cacheMiddleware(\n  responseCacheOptions: CacheMiddlewareOptions | string,\n) {\n  return async function (request: Request, response: Response) {\n    const { ttl, omit, cacheKey, driver } = await parseCacheOptions(\n      responseCacheOptions,\n      request,\n    );\n    const cacheDriver = driver ? await cache.use(driver) : cache;\n\n    const content = await cacheDriver.get(cacheKey);\n\n    if (content) {\n      const output = content.data;\n\n      return response.baseResponse.send(output);\n    }\n\n    response.onSent((response: Response) => {\n      if (!response.isOk || response.request.path !== request.path) {\n        return;\n      }\n\n      const content = {\n        data: except(response.parsedBody, omit),\n      };\n\n      cacheDriver.set(cacheKey, content, ttl);\n    });\n  };\n}\n"],"mappings":";;;;AA2CA,MAAM,sBAAuD,EAC3D,YAAY,KACd;AAMA,eAAe,kBACb,cACA,SACA;CACA,IAAI,OAAO,iBAAiB,UAC1B,eAAe,EACb,UAAU,aACZ;CAGF,IAAI,OAAO,aAAa,aAAa,YACnC,aAAa,WAAW,MAAM,aAAa,SAAS,OAAO;CAG7D,MAAM,oBAAoB;EACxB,GAAG;EACH,GAAG;CACL;CAEA,IAAI,kBAAkB,YAAY;EAChC,MAAM,SAAS,QAAQ,cAAc;EAErC,kBAAkB,WAAW,GAAG,kBAAkB,SAAS,GAAG;CAChE;CAEA,IAAI,CAAC,kBAAkB,MACrB,kBAAkB,OAAO,CAAC,QAAQ,UAAU;CAG9C,OAAO;AACT;AAEA,SAAgB,gBACd,sBACA;CACA,OAAO,eAAgB,SAAkB,UAAoB;EAC3D,MAAM,EAAE,KAAK,MAAM,UAAU,WAAW,MAAM,kBAC5C,sBACA,OACF;EACA,MAAM,cAAc,SAAS,MAAM,MAAM,IAAI,MAAM,IAAI;EAEvD,MAAM,UAAU,MAAM,YAAY,IAAI,QAAQ;EAE9C,IAAI,SAAS;GACX,MAAM,SAAS,QAAQ;GAEvB,OAAO,SAAS,aAAa,KAAK,MAAM;EAC1C;EAEA,SAAS,QAAQ,aAAuB;GACtC,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,MACtD;GAGF,MAAM,UAAU,EACd,MAAM,OAAO,SAAS,YAAY,IAAI,EACxC;GAEA,YAAY,IAAI,UAAU,SAAS,GAAG;EACxC,CAAC;CACH;AACF"}
+{"version":3,"file":"cache-response-middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/cache-response-middleware.ts"],"sourcesContent":["import { except } from \"@mongez/reinforcements\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport type { Request } from \"./../request\";\nimport type { Response } from \"./../response\";\n\n/**\n * Shape persisted to the cache for a cached response. Stores the status and\n * content-type alongside the body so the HIT path can replay the response\n * faithfully via {@link Response.replay} instead of re-entering `send()`.\n */\ntype CachedResponsePayload = {\n  status: number;\n  data: unknown;\n  contentType?: string;\n};\n\n// TODO: Add option to determine whether to cache the response or not\n// TODO: add option to determine what to be cached from the response\n// TODO: add cache middleware config options for example to set the default driver, ttl, etc\n\nexport type CacheMiddlewareOptions = {\n  /**\n   * Cache key\n   */\n  cacheKey:\n    | string\n    | ((request: Request) => string)\n    | ((request: Request) => Promise<string>);\n  /**\n   * If true, then the response will be cached based on the current locale code\n   * This is useful when you have a multi-language website, and you want to cache the response based on the current locale\n   *\n   * @default true\n   */\n  withLocale?: boolean;\n  /**\n   * List of keys from the response object to omit from the cached response\n   *\n   * @default ['user']\n   */\n  omit?: string[];\n  /**\n   * Expires after number of seconds\n   */\n  ttl?: number;\n  /**\n   * Cache driver\n   *\n   * @see config/cache.ts: drivers object\n   * @default cache manager\n   */\n  driver?: string;\n};\n\nconst defaultCacheOptions: Partial<CacheMiddlewareOptions> = {\n  withLocale: true,\n};\n\ntype ParsedCacheOptions = Required<CacheMiddlewareOptions> & {\n  cacheKey: string;\n};\n\nasync function parseCacheOptions(\n  cacheOptions: CacheMiddlewareOptions | string,\n  request: Request,\n) {\n  if (typeof cacheOptions === \"string\") {\n    cacheOptions = {\n      cacheKey: cacheOptions,\n    };\n  }\n\n  if (typeof cacheOptions.cacheKey === \"function\") {\n    cacheOptions.cacheKey = await cacheOptions.cacheKey(request);\n  }\n\n  const finalCacheOptions = {\n    ...defaultCacheOptions,\n    ...cacheOptions,\n  } as ParsedCacheOptions;\n\n  if (finalCacheOptions.withLocale) {\n    const locale = request.getLocaleCode();\n\n    finalCacheOptions.cacheKey = `${finalCacheOptions.cacheKey}:${locale}`;\n  }\n\n  if (!finalCacheOptions.omit) {\n    finalCacheOptions.omit = [\"user\", \"settings\"];\n  }\n\n  return finalCacheOptions;\n}\n\nexport function cacheMiddleware(\n  responseCacheOptions: CacheMiddlewareOptions | string,\n) {\n  return async function (request: Request, response: Response) {\n    const { ttl, omit, cacheKey, driver } = await parseCacheOptions(\n      responseCacheOptions,\n      request,\n    );\n    const cacheDriver = driver ? await cache.use(driver) : cache;\n\n    const content = (await cacheDriver.get(cacheKey)) as CachedResponsePayload | null;\n\n    if (content) {\n      // Replay through the standard pipeline (status + content-type preserved)\n      // instead of `baseResponse.send()`, which would re-enter Response.send()\n      // on an already-sent reply, trip the double-send guard, and drop the\n      // status / content-type.\n      return response.replay({\n        status: content.status ?? 200,\n        body: content.data,\n        contentType: content.contentType,\n      });\n    }\n\n    response.onSent((response: Response) => {\n      if (!response.isOk || response.request.path !== request.path) {\n        return;\n      }\n\n      const sentContentType = response.contentType;\n\n      const content: CachedResponsePayload = {\n        status: response.statusCode,\n        data: except(response.parsedBody, omit),\n        contentType: typeof sentContentType === \"string\" ? sentContentType : undefined,\n      };\n\n      // `set` is fire-and-forget inside `onSent`; without a `.catch` a rejected\n      // write (e.g. Redis down) would surface as an unhandledRejection.\n      cacheDriver.set(cacheKey, content, ttl).catch((error: unknown) => {\n        log.error(\"cache-middleware\", \"set\", error);\n      });\n    });\n  };\n}\n"],"mappings":";;;;;AAuDA,MAAM,sBAAuD,EAC3D,YAAY,KACd;AAMA,eAAe,kBACb,cACA,SACA;CACA,IAAI,OAAO,iBAAiB,UAC1B,eAAe,EACb,UAAU,aACZ;CAGF,IAAI,OAAO,aAAa,aAAa,YACnC,aAAa,WAAW,MAAM,aAAa,SAAS,OAAO;CAG7D,MAAM,oBAAoB;EACxB,GAAG;EACH,GAAG;CACL;CAEA,IAAI,kBAAkB,YAAY;EAChC,MAAM,SAAS,QAAQ,cAAc;EAErC,kBAAkB,WAAW,GAAG,kBAAkB,SAAS,GAAG;CAChE;CAEA,IAAI,CAAC,kBAAkB,MACrB,kBAAkB,OAAO,CAAC,QAAQ,UAAU;CAG9C,OAAO;AACT;AAEA,SAAgB,gBACd,sBACA;CACA,OAAO,eAAgB,SAAkB,UAAoB;EAC3D,MAAM,EAAE,KAAK,MAAM,UAAU,WAAW,MAAM,kBAC5C,sBACA,OACF;EACA,MAAM,cAAc,SAAS,MAAM,MAAM,IAAI,MAAM,IAAI;EAEvD,MAAM,UAAW,MAAM,YAAY,IAAI,QAAQ;EAE/C,IAAI,SAKF,OAAO,SAAS,OAAO;GACrB,QAAQ,QAAQ,UAAU;GAC1B,MAAM,QAAQ;GACd,aAAa,QAAQ;EACvB,CAAC;EAGH,SAAS,QAAQ,aAAuB;GACtC,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,MACtD;GAGF,MAAM,kBAAkB,SAAS;GAEjC,MAAM,UAAiC;IACrC,QAAQ,SAAS;IACjB,MAAM,OAAO,SAAS,YAAY,IAAI;IACtC,aAAa,OAAO,oBAAoB,WAAW,kBAAkB;GACvE;GAIA,YAAY,IAAI,UAAU,SAAS,GAAG,CAAC,CAAC,OAAO,UAAmB;IAChE,IAAI,MAAM,oBAAoB,OAAO,KAAK;GAC5C,CAAC;EACH,CAAC;CACH;AACF"}

package/esm/http/middleware/concurrency-limit.middleware.mjs

@@ -59,6 +59,8 @@ function concurrencyLimitMiddleware(max, options = {}) {
 			release(key);
 		};
 		response.onSent((_sentResponse) => releaseOnce());
+		response.baseResponse.raw.once("finish", releaseOnce);
+		response.baseResponse.raw.once("close", releaseOnce);
 	};
 }
 

package/esm/http/middleware/concurrency-limit.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"concurrency-limit.middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/concurrency-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the concurrency limit middleware.\n */\nexport type ConcurrencyLimitOptions = {\n  /**\n   * Group key generator. Defaults to `request.route.path` — i.e. the cap\n   * applies across all callers of that route. Override to scope per-user\n   * or per-tenant.\n   *\n   * @example\n   * keyGenerator: (request) => `${request.route.path}:${request.user?.id ?? request.ip}`,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\nconst counters = new Map<string, number>();\n\nfunction release(key: string) {\n  const after = (counters.get(key) || 1) - 1;\n\n  if (after <= 0) {\n    counters.delete(key);\n\n    return;\n  }\n\n  counters.set(key, after);\n}\n\n/**\n * Cap the number of in-flight requests against a route. Above the cap, new\n * requests get a fast 429 + `Retry-After: 1` — no queue, no timeout.\n *\n * Use for endpoints whose cost is unbounded per-request: report generation,\n * AI completions, image processing, expensive aggregations. Different from\n * `rateLimit()` — rate-limit caps requests-per-time, concurrency caps\n * in-flight requests at any instant.\n *\n * The counter is process-local. With `N` replicas the effective cap is\n * `N × max`. Document this in the route's behavior; if you need shared\n * concurrency across replicas, reach for a `@warlock.js/cache` lock instead.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/reports/generate\", reportController, {\n *   middleware: [middleware.concurrencyLimit(3)],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     middleware.concurrencyLimit(10, {\n *       keyGenerator: (request) => `ai:${request.user?.id ?? request.ip}`,\n *     }),\n *   ],\n * });\n */\nexport function concurrencyLimitMiddleware(\n  max: number,\n  options: ConcurrencyLimitOptions = {},\n): Middleware {\n  return (request, response) => {\n    const key = options.keyGenerator?.(request) || request.route.path;\n    const current = counters.get(key) || 0;\n\n    if (current >= max) {\n      response.header(\"Retry-After\", 1);\n\n      return response.tooManyRequests({\n          error: options.errorMessage || t(\"http.concurrencyLimitReached\"),\n          errorCode: HttpErrorCodes.ConcurrencyLimitReached,\n          limit: max,\n        },\n      );\n    }\n\n    counters.set(key, current + 1);\n\n    let released = false;\n\n    const releaseOnce = () => {\n      if (released) return;\n\n      released = true;\n      release(key);\n    };\n\n    response.onSent((_sentResponse: Response) => releaseOnce());\n  };\n}\n"],"mappings":";;;;AAyBA,MAAM,2BAAW,IAAI,IAAoB;AAEzC,SAAS,QAAQ,KAAa;CAC5B,MAAM,SAAS,SAAS,IAAI,GAAG,KAAK,KAAK;CAEzC,IAAI,SAAS,GAAG;EACd,SAAS,OAAO,GAAG;EAEnB;CACF;CAEA,SAAS,IAAI,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,2BACd,KACA,UAAmC,CAAC,GACxB;CACZ,QAAQ,SAAS,aAAa;EAC5B,MAAM,MAAM,QAAQ,eAAe,OAAO,KAAK,QAAQ,MAAM;EAC7D,MAAM,UAAU,SAAS,IAAI,GAAG,KAAK;EAErC,IAAI,WAAW,KAAK;GAClB,SAAS,OAAO,eAAe,CAAC;GAEhC,OAAO,SAAS,gBAAgB;IAC5B,OAAO,QAAQ,gBAAgB,EAAE,8BAA8B;IAC/D;IACA,OAAO;GACT,CACF;EACF;EAEA,SAAS,IAAI,KAAK,UAAU,CAAC;EAE7B,IAAI,WAAW;EAEf,MAAM,oBAAoB;GACxB,IAAI,UAAU;GAEd,WAAW;GACX,QAAQ,GAAG;EACb;EAEA,SAAS,QAAQ,kBAA4B,YAAY,CAAC;CAC5D;AACF"}
+{"version":3,"file":"concurrency-limit.middleware.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/concurrency-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the concurrency limit middleware.\n */\nexport type ConcurrencyLimitOptions = {\n  /**\n   * Group key generator. Defaults to `request.route.path` — i.e. the cap\n   * applies across all callers of that route. Override to scope per-user\n   * or per-tenant.\n   *\n   * @example\n   * keyGenerator: (request) => `${request.route.path}:${request.user?.id ?? request.ip}`,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\nconst counters = new Map<string, number>();\n\nfunction release(key: string) {\n  const after = (counters.get(key) || 1) - 1;\n\n  if (after <= 0) {\n    counters.delete(key);\n\n    return;\n  }\n\n  counters.set(key, after);\n}\n\n/**\n * Cap the number of in-flight requests against a route. Above the cap, new\n * requests get a fast 429 + `Retry-After: 1` — no queue, no timeout.\n *\n * Use for endpoints whose cost is unbounded per-request: report generation,\n * AI completions, image processing, expensive aggregations. Different from\n * `rateLimit()` — rate-limit caps requests-per-time, concurrency caps\n * in-flight requests at any instant.\n *\n * The counter is process-local. With `N` replicas the effective cap is\n * `N × max`. Document this in the route's behavior; if you need shared\n * concurrency across replicas, reach for a `@warlock.js/cache` lock instead.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/reports/generate\", reportController, {\n *   middleware: [middleware.concurrencyLimit(3)],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     middleware.concurrencyLimit(10, {\n *       keyGenerator: (request) => `ai:${request.user?.id ?? request.ip}`,\n *     }),\n *   ],\n * });\n */\nexport function concurrencyLimitMiddleware(\n  max: number,\n  options: ConcurrencyLimitOptions = {},\n): Middleware {\n  return (request, response) => {\n    const key = options.keyGenerator?.(request) || request.route.path;\n    const current = counters.get(key) || 0;\n\n    if (current >= max) {\n      response.header(\"Retry-After\", 1);\n\n      return response.tooManyRequests({\n          error: options.errorMessage || t(\"http.concurrencyLimitReached\"),\n          errorCode: HttpErrorCodes.ConcurrencyLimitReached,\n          limit: max,\n        },\n      );\n    }\n\n    counters.set(key, current + 1);\n\n    let released = false;\n\n    const releaseOnce = () => {\n      if (released) {\n        return;\n      }\n\n      released = true;\n      release(key);\n    };\n\n    // `onSent` only fires from Response.send()/stream().end()/sse().end().\n    // Bare-reply paths (noContent, redirect, sendFile, download, sendBuffer,\n    // raw send) never trigger it, so the slot would leak and the route would\n    // permanently 429 after `max` such requests. Bind to the raw socket\n    // lifecycle as well so the slot frees regardless of response path —\n    // `releaseOnce` is idempotent, so double-firing is harmless.\n    response.onSent((_sentResponse: Response) => releaseOnce());\n    response.baseResponse.raw.once(\"finish\", releaseOnce);\n    response.baseResponse.raw.once(\"close\", releaseOnce);\n  };\n}\n"],"mappings":";;;;AAyBA,MAAM,2BAAW,IAAI,IAAoB;AAEzC,SAAS,QAAQ,KAAa;CAC5B,MAAM,SAAS,SAAS,IAAI,GAAG,KAAK,KAAK;CAEzC,IAAI,SAAS,GAAG;EACd,SAAS,OAAO,GAAG;EAEnB;CACF;CAEA,SAAS,IAAI,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,2BACd,KACA,UAAmC,CAAC,GACxB;CACZ,QAAQ,SAAS,aAAa;EAC5B,MAAM,MAAM,QAAQ,eAAe,OAAO,KAAK,QAAQ,MAAM;EAC7D,MAAM,UAAU,SAAS,IAAI,GAAG,KAAK;EAErC,IAAI,WAAW,KAAK;GAClB,SAAS,OAAO,eAAe,CAAC;GAEhC,OAAO,SAAS,gBAAgB;IAC5B,OAAO,QAAQ,gBAAgB,EAAE,8BAA8B;IAC/D;IACA,OAAO;GACT,CACF;EACF;EAEA,SAAS,IAAI,KAAK,UAAU,CAAC;EAE7B,IAAI,WAAW;EAEf,MAAM,oBAAoB;GACxB,IAAI,UACF;GAGF,WAAW;GACX,QAAQ,GAAG;EACb;EAQA,SAAS,QAAQ,kBAA4B,YAAY,CAAC;EAC1D,SAAS,aAAa,IAAI,KAAK,UAAU,WAAW;EACpD,SAAS,aAAa,IAAI,KAAK,SAAS,WAAW;CACrD;AACF"}

package/esm/http/middleware/idempotency.middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.middleware.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/idempotency.middleware.ts"],"mappings":";;;;;KAeY,kBAAA;EAAkB;;;EAI5B,GAAA;EAKA;;;;EAAA,UAAA;EAqDc;;;;;EA/Cd,OAAA;EA+CuE;;AAAU;;EA1CjF,MAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0Cc,qBAAA,CAAsB,OAAA,GAAS,kBAAA,GAA0B,UAAU"}
+{"version":3,"file":"idempotency.middleware.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/middleware/idempotency.middleware.ts"],"mappings":";;;;;KAgBY,kBAAA;EAAkB;;;EAI5B,GAAA;EAKA;;;;EAAA,UAAA;EAqDc;;;;;EA/Cd,OAAA;EA+CuE;;AAAU;;EA1CjF,MAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0Cc,qBAAA,CAAsB,OAAA,GAAS,kBAAA,GAA0B,UAAU"}