@warlock.js/core 4.8.2 → 4.9.1

package/esm/generations/add-command.action.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"add-command.action.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/add-command.action.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport {\r\n  ensureDirectoryAsync,\r\n  fileExistsAsync,\r\n  getFileAsync,\r\n  getJsonFileAsync,\r\n  putFileAsync,\r\n  putJsonFileAsync,\r\n} from \"@warlock.js/fs\";\r\nimport { execSync } from \"node:child_process\";\r\nimport { CommandActionData } from \"../cli/types\";\r\nimport { rootPath, srcPath } from \"../utils\";\r\nimport { getWarlockVersion } from \"../utils/framework-vesion\";\r\nimport {\r\n  accessConfigStub,\r\n  aiConfigStub,\r\n  accessResolverStub,\r\n  accessRoleMigrationStub,\r\n  accessRoleModelIndexStub,\r\n  accessRoleModelStub,\r\n  accessUserRoleMigrationStub,\r\n  accessUserRoleModelIndexStub,\r\n  accessUserRoleModelStub,\r\n  communicatorsConfigStub,\r\n  notificationControllersStub,\r\n  notificationMigrationStub,\r\n  notificationModelStub,\r\n  notificationRoutesStub,\r\n  notificationsConfigStub,\r\n  socketConfigStub,\r\n} from \"./stubs\";\r\n\r\n/**\r\n * Build a migration filename timestamp prefix in the framework's\r\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\r\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\r\n * stamp sibling migrations created in the same scaffold a second apart so they\r\n * never collide and keep a stable relative order.\r\n */\r\nfunction migrationTimestamp(offsetSeconds = 0): string {\r\n  const now = new Date(Date.now() + offsetSeconds * 1000);\r\n  const pad = (value: number) => String(value).padStart(2, \"0\");\r\n\r\n  return (\r\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\r\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\r\n  );\r\n}\r\n\r\nasync function completeTestInstallation(options: CommandActionData) {\r\n  // Create test-global-setup.ts (runs once before all tests)\r\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\r\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\r\n\r\n  if (!testGlobalSetupExists) {\r\n    await putFileAsync(\r\n      testGlobalSetupPath,\r\n      `/**\r\n * Global Test Setup\r\n *\r\n * Runs ONCE before all test workers.\r\n * Starts the HTTP server for integration tests.\r\n */\r\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core\";\r\n\r\nexport async function setup() {\r\n  await startHttpTestServer();\r\n}\r\n\r\nexport async function teardown() {\r\n  await stopHttpTestServer();\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\r\n  }\r\n\r\n  // Create test-setup.ts (runs per worker thread)\r\n  const testSetupPath = srcPath(\"test-setup.ts\");\r\n  const testSetupExists = await fileExistsAsync(testSetupPath);\r\n\r\n  if (!testSetupExists) {\r\n    await putFileAsync(\r\n      testSetupPath,\r\n      `/**\r\n * Per-Worker Test Setup\r\n *\r\n * Runs in EACH Vitest worker thread before tests execute.\r\n * Sets up per-worker database and cache connections.\r\n */\r\nimport { setupTest } from \"@warlock.js/core\";\r\n\r\nawait setupTest({ connectors: true });\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\r\n  }\r\n\r\n  // Create vite.config.ts\r\n  const viteConfigPath = rootPath(\"vite.config.ts\");\r\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\r\n\r\n  if (!viteConfigExists) {\r\n    await putFileAsync(\r\n      viteConfigPath,\r\n      `import { lowerStage3Decorators } from \"@warlock.js/core\";\r\nimport mongezVite from \"@mongez/vite\";\r\nimport { defineConfig } from \"vitest/config\";\r\n\r\nexport default defineConfig({\r\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\r\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\r\n  // decorated Cascade models load under Vitest.\r\n  plugins: [lowerStage3Decorators(), mongezVite()],\r\n  test: {\r\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\r\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per worker\r\n    environment: \"node\",\r\n    globals: false,\r\n    include: [\"src/app/**/*.test.ts\"],\r\n  },\r\n});\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\r\n  }\r\n}\r\n\r\nasync function completeReactEmailInstallation(_options: CommandActionData) {\r\n  // 1. Create emails/ folder with a sample component\r\n  const emailsFolderPath = rootPath(\"emails\");\r\n  const sampleEmailPath = rootPath(\"emails/welcome-email.tsx\");\r\n\r\n  if (!(await fileExistsAsync(sampleEmailPath))) {\r\n    await ensureDirectoryAsync(emailsFolderPath);\r\n    await putFileAsync(\r\n      sampleEmailPath,\r\n      `import { Body, Container, Head, Html, Text } from \"@react-email/components\";\r\nimport { Tailwind } from \"@react-email/tailwind\";\r\n\r\ninterface WelcomeEmailProps {\r\n  name: string;\r\n}\r\n\r\n/**\r\n * Sample welcome email component.\r\n * Preview with: yarn email:preview\r\n */\r\nexport default function WelcomeEmail({ name }: WelcomeEmailProps) {\r\n  return (\r\n    <Html>\r\n      <Head />\r\n      <Tailwind>\r\n        <Body className=\"bg-gray-100 font-sans\">\r\n          <Container className=\"mx-auto max-w-xl py-8 px-4\">\r\n            <Text className=\"text-2xl font-bold text-gray-900\">\r\n              Welcome, {name}!\r\n            </Text>\r\n            <Text className=\"text-gray-600 mt-2\">\r\n              You're all set. We're glad to have you on board.\r\n            </Text>\r\n          </Container>\r\n        </Body>\r\n      </Tailwind>\r\n    </Html>\r\n  );\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created emails/welcome-email.tsx`);\r\n  }\r\n\r\n  // 2. Patch tsconfig.json — add \"emails\" to include if missing\r\n  const tsconfigPath = rootPath(\"tsconfig.json\");\r\n  const tsconfig = await getJsonFileAsync(tsconfigPath);\r\n\r\n  if (!tsconfig.include) {\r\n    tsconfig.include = [];\r\n  }\r\n\r\n  if (!tsconfig.include.includes(\"emails\")) {\r\n    tsconfig.include.push(\"emails\");\r\n    await putJsonFileAsync(tsconfigPath, tsconfig);\r\n    console.log(`${colors.green(\"✓\")} Added \"emails\" to tsconfig.json include`);\r\n  }\r\n}\r\n\r\nasync function completeNotificationsInstallation(_options: CommandActionData) {\r\n  const modelPath = srcPath(\"app/notifications/notification.model.ts\");\r\n\r\n  // The model file is the sentinel for \"notifications already scaffolded\" —\r\n  // its presence means the migration was created too (timestamped, so we must\r\n  // not re-emit a duplicate on a second run).\r\n  if (await fileExistsAsync(modelPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/notifications\")} already scaffolded, skipping model + migration...`,\r\n    );\r\n    return;\r\n  }\r\n\r\n  // 1. Notification model — extends the package's DatabaseNotification base.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications\"));\r\n  await putFileAsync(modelPath, notificationModelStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/notification.model.ts`);\r\n\r\n  // 2. Migration — timestamped MM-DD-YYYY_HH-MM-SS prefix so cascade infers its\r\n  //    createdAt and orders it deterministically (migrate-action discovers\r\n  //    src/app/*/migrations/*).\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/migrations\"));\r\n\r\n  const migrationFile = `${migrationTimestamp()}-notification.migration.ts`;\r\n\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/migrations\", migrationFile),\r\n    notificationMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/notifications/migrations/${migrationFile}`,\r\n  );\r\n\r\n  // 3. HTTP surface — the in-app read/dismiss endpoints (routes + controllers),\r\n  //    gated by authMiddleware. Delete if the app exposes notifications another way.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/controllers\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/controllers/notifications.controller.ts\"),\r\n    notificationControllersStub,\r\n  );\r\n  await putFileAsync(srcPath(\"app/notifications/routes.ts\"), notificationRoutesStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/routes.ts + controllers`);\r\n}\r\n\r\nasync function registerAccessLocale() {\r\n  // Register the access locale in the project's shared translations file so a\r\n  // denied check returns a real sentence, not the raw \"access.errors.forbidden\"\r\n  // key. Append when the file exists, create it otherwise; skip if already there.\r\n  const localesPath = srcPath(\"app/shared/utils/locales.ts\");\r\n\r\n  const accessLocale = `groupedTranslations(\"access\", {\r\n  errors: {\r\n    forbidden: {\r\n      en: \"You do not have permission to perform this action.\",\r\n      ar: \"ليس لديك صلاحية لتنفيذ هذا الإجراء.\",\r\n    },\r\n  },\r\n});\r\n`;\r\n\r\n  if (await fileExistsAsync(localesPath)) {\r\n    const current = await getFileAsync(localesPath);\r\n\r\n    if (current.includes(`groupedTranslations(\"access\"`)) {\r\n      console.log(`${colors.yellowBright(\"access\")} locale already registered, skipping...`);\r\n\r\n      return;\r\n    }\r\n\r\n    // The file uses groupedTranslations already iff it calls it — only inject the\r\n    // import when no call is present yet.\r\n    const importLine = `import { groupedTranslations } from \"@warlock.js/core\";`;\r\n    const prefix = current.includes(\"groupedTranslations(\") ? \"\" : `${importLine}\\n\\n`;\r\n\r\n    await putFileAsync(localesPath, `${prefix}${current.trimEnd()}\\n\\n${accessLocale}`);\r\n\r\n    console.log(\r\n      `${colors.green(\"✓\")} Registered the access locale in src/app/shared/utils/locales.ts`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/shared/utils\"));\r\n\r\n  await putFileAsync(\r\n    localesPath,\r\n    `import { groupedTranslations } from \"@warlock.js/core\";\\n\\n${accessLocale}`,\r\n  );\r\n\r\n  console.log(`${colors.green(\"✓\")} Created src/app/shared/utils/locales.ts with the access locale`);\r\n}\r\n\r\nasync function scaffoldAccessFiles() {\r\n  // The resolver file is the sentinel for \"access already scaffolded\" — its\r\n  // presence means the role/user-role model folders and their timestamped\r\n  // migrations were created too, so we must not re-emit duplicate migrations on\r\n  // a second run.\r\n  const resolverPath = srcPath(\"app/access/services/access-resolver.ts\");\r\n\r\n  if (await fileExistsAsync(resolverPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/access\")} already scaffolded, skipping resolver + role tables...`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  // 1. Role catalog model folder (model + barrel + migration). The catalog row\r\n  //    is role name → granted permissions; managed at runtime in the DB.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role\"));\r\n  await putFileAsync(srcPath(\"app/access/models/role/role.model.ts\"), accessRoleModelStub);\r\n  await putFileAsync(srcPath(\"app/access/models/role/index.ts\"), accessRoleModelIndexStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role/migrations\"));\r\n\r\n  // Migration filenames carry a MM-DD-YYYY_HH-MM-SS prefix so cascade infers\r\n  // their createdAt and orders them deterministically (the migrate action\r\n  // discovers src/app/*/models/*/migrations/*). The two tables are independent\r\n  // (no FK between them), but the user-role migration is stamped a second later\r\n  // so the relative order is stable.\r\n  const roleMigrationFile = `${migrationTimestamp()}-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/role/migrations\", roleMigrationFile),\r\n    accessRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/role/migrations/${roleMigrationFile}`,\r\n  );\r\n\r\n  // 2. UserRole assignment model folder (model + barrel + migration). The model\r\n  //    statics scope an unresolved tenant to GLOBAL rows only (security\r\n  //    invariant) — see the stub for the reasoning.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/user-role.model.ts\"),\r\n    accessUserRoleModelStub,\r\n  );\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/index.ts\"),\r\n    accessUserRoleModelIndexStub,\r\n  );\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/user-role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role/migrations\"));\r\n\r\n  const userRoleMigrationFile = `${migrationTimestamp(1)}-user-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/migrations\", userRoleMigrationFile),\r\n    accessUserRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/user-role/migrations/${userRoleMigrationFile}`,\r\n  );\r\n\r\n  // 3. The DatabaseAccessResolver — the one required config seam, wired into\r\n  //    config/access.ts by the ejected stub.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/services\"));\r\n  await putFileAsync(resolverPath, accessResolverStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/services/access-resolver.ts`);\r\n}\r\n\r\nasync function completeAccessInstallation(_options: CommandActionData) {\r\n  await registerAccessLocale();\r\n  await scaffoldAccessFiles();\r\n}\r\n\r\n/**\r\n * Link a satellite AI package into src/config/ai.ts via a side-effect import.\r\n *\r\n * The satellites (@warlock.js/ai-tools, ai-panoptic, ai-workspace) augment the\r\n * `ai` object on import — they register their runtime surface (ai.tools / ai.mcp,\r\n * ai.workspace, panoptic's ai.config({ panoptic }) wiring) AND the matching TS\r\n * declaration-merging so ai.* members resolve. config-loader runs config/ai.ts at\r\n * boot, so dropping a bare `import \"<specifier>\";` at the top of that file is what\r\n * actually loads the augmentation before the ai connector applies the config.\r\n *\r\n * No-op if config/ai.ts is missing (the `ai` feature ejects it) or the import is\r\n * already present. Inserts right after the `warlock:ai-packages` marker when it\r\n * exists so the satellite imports stay grouped; otherwise prepends to the top.\r\n */\r\nasync function linkAiPackageImport(specifier: string): Promise<void> {\r\n  const aiConfigPath = srcPath(\"config/ai.ts\");\r\n\r\n  if (!(await fileExistsAsync(aiConfigPath))) {\r\n    return;\r\n  }\r\n\r\n  const current = await getFileAsync(aiConfigPath);\r\n  const importLine = `import \"${specifier}\";`;\r\n\r\n  if (current.includes(importLine)) {\r\n    return;\r\n  }\r\n\r\n  const marker = \"// >>> warlock:ai-packages (auto-managed) >>>\";\r\n  let next: string;\r\n\r\n  if (current.includes(marker)) {\r\n    next = current.replace(marker, `${marker}\\n${importLine}`);\r\n  } else {\r\n    next = `${importLine}\\n${current}`;\r\n  }\r\n\r\n  await putFileAsync(aiConfigPath, next);\r\n\r\n  console.log(`${colors.green(\"✓\")} Linked ${specifier} in src/config/ai.ts`);\r\n}\r\n\r\nexport const featuresMap: Record<\r\n  string,\r\n  {\r\n    dependencies?: Record<string, string>;\r\n    devDependencies?: Record<string, string>;\r\n    description: string;\r\n    requires?: string[];\r\n    script?: Record<string, string>;\r\n    onExecuting?: (options: CommandActionData) => Promise<any>;\r\n    ejectConfig?: {\r\n      content: string;\r\n      name: string;\r\n    };\r\n  }\r\n> = {\r\n  \"react-email\": {\r\n    description: \"Installs react-email for building email templates with React and Tailwind\",\r\n    requires: [\"mail\", \"react\"],\r\n    dependencies: {\r\n      \"react-email\": \"^5.2.10\",\r\n      \"@react-email/components\": \"^1.0.11\",\r\n      \"@react-email/render\": \"^2.0.5\",\r\n      \"@react-email/tailwind\": \"^2.0.7\",\r\n    },\r\n    devDependencies: {\r\n      \"@react-email/preview-server\": \"5.2.10\",\r\n    },\r\n    script: {\r\n      \"email:preview\": \"npx react-email dev\",\r\n    },\r\n    onExecuting: completeReactEmailInstallation,\r\n  },\r\n  react: {\r\n    description:\r\n      \"Installs React and React dom for rendering React components (non-interactive), useful for sending mails and generating HTML\",\r\n    dependencies: {\r\n      react: \"^19.2.3\",\r\n      \"react-dom\": \"^19.2.3\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/react\": \"^19.2.7\",\r\n      \"@types/react-dom\": \"^19.2.3\",\r\n    },\r\n  },\r\n  image: {\r\n    description: \"Installs sharp for image processing\",\r\n    dependencies: {\r\n      sharp: \"^0.34.5\",\r\n    },\r\n  },\r\n  mail: {\r\n    description: \"Installs nodemailer for sending emails\",\r\n    dependencies: {\r\n      nodemailer: \"^8.0.5\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/nodemailer\": \"^8.0.0\",\r\n    },\r\n  },\r\n  ses: {\r\n    description: \"Installs AWS SES SDK for sending emails via Amazon SES\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-sesv2\": \"^3.1025.0\",\r\n    },\r\n  },\r\n  mongodb: {\r\n    description: \"Installs mongodb driver for database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mongodb: \"^7.0.0\",\r\n    },\r\n  },\r\n  scheduler: {\r\n    description: \"Installs warlock scheduler for scheduling tasks\",\r\n    dependencies: {\r\n      \"@warlock.js/scheduler\": \"~4.0.0\",\r\n    },\r\n  },\r\n  // swagger / postman intentionally omitted — those packages do not exist yet;\r\n  // they will ship together in the unified @warlock.js/api-docs package.\r\n  postgres: {\r\n    description: \"Installs pg for Postgres database (Cascade Package)\",\r\n    dependencies: {\r\n      pg: \"^8.11.0\",\r\n    },\r\n  },\r\n  mysql: {\r\n    description: \"Installs mysql2 for MySQL database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mysql2: \"^3.5.0\",\r\n    },\r\n  },\r\n  redis: {\r\n    description: \"Installs redis for Redis cache driver (Cache Package)\",\r\n    dependencies: {\r\n      redis: \"^4.6.13\",\r\n    },\r\n  },\r\n  s3: {\r\n    description: \"Installs AWS SDK for Cloud storage (Storage Package)\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-s3\": \"^3.955.0\",\r\n      \"@aws-sdk/lib-storage\": \"^3.955.0\",\r\n      \"@aws-sdk/s3-request-presigner\": \"^3.955.0\",\r\n    },\r\n  },\r\n  test: {\r\n    description: \"Installs warlock test for testing\",\r\n    onExecuting: completeTestInstallation,\r\n    script: {\r\n      test: \"vitest run\",\r\n      \"test:coverage\": \"vitest run --coverage\",\r\n      \"test:ui\": \"vitest --ui\",\r\n      \"test:watch\": \"vitest --watch\",\r\n    },\r\n    devDependencies: {\r\n      \"@mongez/vite\": \"^2.0.4\",\r\n      vite: \"^8.0.16\",\r\n      vitest: \"^4.1.8\",\r\n      \"@vitest/coverage-v8\": \"^4.1.8\",\r\n    },\r\n  },\r\n  herald: {\r\n    description: \"Installs herald for message broker (Herald Package)\",\r\n    dependencies: {\r\n      \"@warlock.js/herald\": \"~4.0.0\",\r\n      amqplib: \"^0.10.0\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/amqplib\": \"^0.10.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: communicatorsConfigStub,\r\n      name: \"herald\",\r\n    },\r\n  },\r\n  socket: {\r\n    description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\r\n    dependencies: {\r\n      \"socket.io\": \"^4.8.3\",\r\n    },\r\n    ejectConfig: {\r\n      content: socketConfigStub,\r\n      name: \"socket\",\r\n    },\r\n  },\r\n  notifications: {\r\n    description:\r\n      \"Installs @warlock.js/notifications — multi-channel notifications (mail + in-app database). Pulls the mail feature, ejects config/notifications.ts, and scaffolds the Notification model + migration plus the recipient-scoped read/dismiss routes + controllers into src/app/notifications\",\r\n    // The ejected config wires a `mail` channel by default (needs nodemailer,\r\n    // via the `mail` feature); the scaffolded routes are gated by\r\n    // `authMiddleware`, so `@warlock.js/auth` is pulled in too.\r\n    requires: [\"mail\"],\r\n    dependencies: {\r\n      \"@warlock.js/notifications\": \"~4.0.0\",\r\n      \"@warlock.js/auth\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: notificationsConfigStub,\r\n      name: \"notifications\",\r\n    },\r\n    onExecuting: completeNotificationsInstallation,\r\n  },\r\n  access: {\r\n    description:\r\n      \"Installs @warlock.js/access — authorization (RBAC + ABAC): permission checks, ABAC policies, and roles. Ejects config/access.ts, the DatabaseAccessResolver + Role/UserRole models and migrations into src/app/access, and registers the access locale in src/app/shared/utils/locales.ts\",\r\n    dependencies: {\r\n      \"@warlock.js/access\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: accessConfigStub,\r\n      name: \"access\",\r\n    },\r\n    onExecuting: completeAccessInstallation,\r\n  },\r\n  ai: {\r\n    description: \"Installs @warlock.js/ai — the core AI toolkit (agents, tools, workflows)\",\r\n    dependencies: {\r\n      \"@warlock.js/ai\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: aiConfigStub,\r\n      name: \"ai\",\r\n    },\r\n  },\r\n  \"ai-openai\": {\r\n    description: \"OpenAI provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-openai\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-google\": {\r\n    description: \"Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-google\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-anthropic\": {\r\n    description: \"Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-anthropic\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-bedrock\": {\r\n    description: \"AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-bedrock\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-ollama\": {\r\n    description: \"Ollama provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-ollama\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-tools\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-tools — ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + an MCP client/server, under ai.tools.* / ai.mcp (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-tools\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-tools\"),\r\n  },\r\n  \"ai-panoptic\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-panoptic — observability for @warlock.js/ai (collector, exporters, zero-setup local dashboard) via ai.config({ panoptic }) (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-panoptic\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-panoptic\"),\r\n  },\r\n  \"ai-workspace\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-workspace — a policy-jailed filesystem + shell workspace for coding agents, as ai.workspace (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-workspace\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-workspace\"),\r\n  },\r\n};\r\n\r\nexport const allowedFeatures = Object.keys(featuresMap);\r\n\r\ntype PackageManager = \"yarn\" | \"pnpm\" | \"npm\";\r\n\r\nfunction resolveFeatures(features: string[], visited = new Set<string>()): string[] {\r\n  const resolved: string[] = [];\r\n\r\n  for (const feature of features) {\r\n    if (visited.has(feature)) continue;\r\n    visited.add(feature);\r\n\r\n    const def = featuresMap[feature];\r\n\r\n    if (def.requires?.length) {\r\n      resolved.push(...resolveFeatures(def.requires, visited));\r\n    }\r\n\r\n    resolved.push(feature);\r\n  }\r\n\r\n  return resolved;\r\n}\r\n\r\nexport async function addCommandAction(options: CommandActionData) {\r\n  const features = options.args;\r\n  const { packageManager, list, noInstall } = options.options;\r\n\r\n  if (list) {\r\n    console.log(\"Available Features:\");\r\n\r\n    for (const feature of allowedFeatures) {\r\n      console.log(\r\n        `- ${colors.yellowBright(feature)}: ${colors.green(featuresMap[feature].description)}`,\r\n      );\r\n    }\r\n\r\n    process.exit(0);\r\n  }\r\n\r\n  validateFeatures(features);\r\n\r\n  const resolvedFeatures = resolveFeatures(features);\r\n\r\n  const dependencies: Record<string, string> = {};\r\n  const devDependencies: Record<string, string> = {};\r\n  const ejectConfigs: Record<string, { content: string; name: string }> = {};\r\n  const scripts: Record<string, string> = {};\r\n\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    Object.assign(dependencies, featurePackages.dependencies);\r\n    if (featurePackages.devDependencies) {\r\n      Object.assign(devDependencies, featurePackages.devDependencies);\r\n    }\r\n\r\n    if (featurePackages.ejectConfig) {\r\n      ejectConfigs[featurePackages.ejectConfig.name] = featurePackages.ejectConfig;\r\n    }\r\n\r\n    if (featurePackages.script) {\r\n      Object.assign(scripts, featurePackages.script);\r\n    }\r\n  }\r\n\r\n  // Pin every @warlock.js/* feature package to the INSTALLED framework version so\r\n  // a scaffolded project's features match its core version instead of drifting to\r\n  // the feature map's static range.\r\n  const frameworkVersion = await getWarlockVersion();\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (dependency.startsWith(\"@warlock.js/\")) {\r\n      dependencies[dependency] = frameworkVersion;\r\n    }\r\n  }\r\n\r\n  const currentPackageJson = await getJsonFileAsync(rootPath(\"package.json\"));\r\n\r\n  // Fresh templates may omit one of the maps — guard before reading.\r\n  currentPackageJson.dependencies = currentPackageJson.dependencies ?? {};\r\n  currentPackageJson.devDependencies = currentPackageJson.devDependencies ?? {};\r\n\r\n  // Skip anything already present so we never downgrade an existing pin.\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (currentPackageJson.dependencies[dependency]) {\r\n      console.log(`${colors.yellowBright(dependency)} is already installed, skipping...`);\r\n      delete dependencies[dependency];\r\n    }\r\n  }\r\n\r\n  for (const devDependency of Object.keys(devDependencies)) {\r\n    if (currentPackageJson.devDependencies[devDependency]) {\r\n      console.log(`${colors.yellowBright(devDependency)} is already installed, skipping...`);\r\n      delete devDependencies[devDependency];\r\n    }\r\n  }\r\n\r\n  if (noInstall) {\r\n    await recordDependencies(dependencies, devDependencies);\r\n  } else {\r\n    await installDependencies(packageManager as PackageManager, dependencies, devDependencies);\r\n  }\r\n\r\n  for (const [name, config] of Object.entries(ejectConfigs)) {\r\n    if (await fileExistsAsync(srcPath(`config/${name}.ts`))) {\r\n      console.log(`${colors.yellowBright(name)} config already exists, skipping...`);\r\n      continue;\r\n    }\r\n\r\n    console.log(`Creating ${colors.magenta(name)} config...`);\r\n\r\n    await putFileAsync(srcPath(`config/${name}.ts`), config.content);\r\n\r\n    console.log(`${colors.green(name)} config created successfully`);\r\n  }\r\n\r\n  // now loop again over features to execute onExecuting\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    if (featurePackages.onExecuting) {\r\n      await featurePackages.onExecuting(options);\r\n    }\r\n  }\r\n\r\n  if (Object.keys(scripts).length > 0) {\r\n    console.log(`Adding scripts ${colors.magenta(Object.keys(scripts).join(\", \"))}`);\r\n    const packageJsonPath = rootPath(\"package.json\");\r\n    const packageJson = await getJsonFileAsync(packageJsonPath);\r\n    packageJson.scripts = { ...(packageJson.scripts ?? {}), ...scripts };\r\n    await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n    console.log(`Scripts added successfully ${colors.green(Object.keys(scripts).join(\", \"))}`);\r\n  }\r\n}\r\n\r\n/**\r\n * Install the resolved dependency sets through the project's package manager.\r\n * Runs two passes (prod then dev) so each lands in the correct section.\r\n */\r\nasync function installDependencies(\r\n  packageManager: PackageManager,\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  const packageManagerCommand = await getPackageManagerCommand(packageManager);\r\n\r\n  if (Object.keys(dependencies).length > 0) {\r\n    console.log(`Installing dependencies ${colors.magenta(Object.keys(dependencies).join(\", \"))}`);\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(dependencies).join(\" \")}`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dependencies installed successfully ${colors.green(Object.keys(dependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n\r\n  if (Object.keys(devDependencies).length > 0) {\r\n    console.log(\r\n      `Installing dev dependencies ${colors.magenta(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(devDependencies).join(\" \")} -D`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dev dependencies installed successfully ${colors.green(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n}\r\n\r\n/**\r\n * Write the resolved dependency sets into package.json without installing.\r\n * Used by `--no-install` so a scaffolder can batch every feature into one\r\n * install pass after the command returns. Versions come from the feature map.\r\n */\r\nasync function recordDependencies(\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  if (Object.keys(dependencies).length === 0 && Object.keys(devDependencies).length === 0) {\r\n    return;\r\n  }\r\n\r\n  const packageJsonPath = rootPath(\"package.json\");\r\n  const packageJson = await getJsonFileAsync(packageJsonPath);\r\n\r\n  packageJson.dependencies = packageJson.dependencies ?? {};\r\n  packageJson.devDependencies = packageJson.devDependencies ?? {};\r\n\r\n  Object.assign(packageJson.dependencies, dependencies);\r\n  Object.assign(packageJson.devDependencies, devDependencies);\r\n\r\n  await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n  const recorded = [...Object.keys(dependencies), ...Object.keys(devDependencies)];\r\n\r\n  console.log(\r\n    `Recorded ${colors.green(recorded.join(\", \"))} in package.json (install skipped via --no-install)`,\r\n  );\r\n}\r\n\r\nfunction validateFeatures(features: string[]) {\r\n  for (const feature of features) {\r\n    if (!allowedFeatures.includes(feature)) {\r\n      console.log(\r\n        `Feature ${colors.redBright(feature)} is not allowed, allowed features are: ${colors.green(allowedFeatures.join(\", \"))}`,\r\n      );\r\n      process.exit(1);\r\n    }\r\n  }\r\n}\r\n\r\nasync function getPackageManagerCommand(packageManager?: PackageManager) {\r\n  if (!packageManager) {\r\n    // try to detect it through checking lock files\r\n    packageManager = await detectPackageManager();\r\n  }\r\n\r\n  if (packageManager === \"npm\") {\r\n    return \"npm install\";\r\n  }\r\n\r\n  if (packageManager === \"yarn\") {\r\n    return \"yarn add\";\r\n  }\r\n\r\n  if (packageManager === \"pnpm\") {\r\n    return \"pnpm add\";\r\n  }\r\n}\r\n\r\nasync function detectPackageManager() {\r\n  if (await fileExistsAsync(rootPath(\"package-lock.json\"))) {\r\n    return \"npm\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"yarn.lock\"))) {\r\n    return \"yarn\";\r\n  }\r\n\r\n  if (await fileExistsAsync(rootPath(\"pnpm-lock.yaml\"))) {\r\n    return \"pnpm\";\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;AAuCA,SAAS,mBAAmB,gBAAgB,GAAW;CACrD,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E;AAEA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;CAUF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,2BAA2B;CAChE;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,wBAAwB;CAC7D;AACF;AAEA,eAAe,+BAA+B,UAA6B;CAEzE,MAAM,mBAAmB,SAAS,QAAQ;CAC1C,MAAM,kBAAkB,SAAS,0BAA0B;CAE3D,IAAI,CAAE,MAAM,gBAAgB,eAAe,GAAI;EAC7C,MAAM,qBAAqB,gBAAgB;EAC3C,MAAM,aACJ,iBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,eAAe,SAAS,eAAe;CAC7C,MAAM,WAAW,MAAM,iBAAiB,YAAY;CAEpD,IAAI,CAAC,SAAS,SACZ,SAAS,UAAU,CAAC;CAGtB,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,GAAG;EACxC,SAAS,QAAQ,KAAK,QAAQ;EAC9B,MAAM,iBAAiB,cAAc,QAAQ;EAC7C,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,yCAAyC;CAC9E;AACF;AAEA,eAAe,kCAAkC,UAA6B;CAC5E,MAAM,YAAY,QAAQ,yCAAyC;CAKnE,IAAI,MAAM,gBAAgB,SAAS,GAAG;EACpC,QAAQ,IACN,GAAG,OAAO,aAAa,uBAAuB,EAAE,mDAClD;EACA;CACF;CAGA,MAAM,qBAAqB,QAAQ,mBAAmB,CAAC;CACvD,MAAM,aAAa,WAAW,qBAAqB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,qDAAqD;CAKxF,MAAM,qBAAqB,QAAQ,8BAA8B,CAAC;CAElE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE;CAE9C,MAAM,aACJ,QAAQ,gCAAgC,aAAa,GACrD,yBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,KAAK,EAAE,4CAA4C,eACrE;CAIA,MAAM,qBAAqB,QAAQ,+BAA+B,CAAC;CACnE,MAAM,aACJ,QAAQ,2DAA2D,GACnE,2BACF;CACA,MAAM,aAAa,QAAQ,6BAA6B,GAAG,sBAAsB;CACjF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,uDAAuD;AAC1F;AAEA,eAAe,uBAAuB;CAIpC,MAAM,cAAc,QAAQ,6BAA6B;CAEzD,MAAM,eAAe;;;;;;;;;CAUrB,IAAI,MAAM,gBAAgB,WAAW,GAAG;EACtC,MAAM,UAAU,MAAM,aAAa,WAAW;EAE9C,IAAI,QAAQ,SAAS,8BAA8B,GAAG;GACpD,QAAQ,IAAI,GAAG,OAAO,aAAa,QAAQ,EAAE,wCAAwC;GAErF;EACF;EAOA,MAAM,aAAa,aAAa,GAFjB,QAAQ,SAAS,sBAAsB,IAAI,KAAK,gEAEnB,QAAQ,QAAQ,EAAE,MAAM,cAAc;EAElF,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iEACvB;EAEA;CACF;CAEA,MAAM,qBAAqB,QAAQ,kBAAkB,CAAC;CAEtD,MAAM,aACJ,aACA,8DAA8D,cAChE;CAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gEAAgE;AACnG;AAEA,eAAe,sBAAsB;CAKnC,MAAM,eAAe,QAAQ,wCAAwC;CAErE,IAAI,MAAM,gBAAgB,YAAY,GAAG;EACvC,QAAQ,IACN,GAAG,OAAO,aAAa,gBAAgB,EAAE,wDAC3C;EAEA;CACF;CAIA,MAAM,qBAAqB,QAAQ,wBAAwB,CAAC;CAC5D,MAAM,aAAa,QAAQ,sCAAsC,GAAG,mBAAmB;CACvF,MAAM,aAAa,QAAQ,iCAAiC,GAAG,wBAAwB;CACvF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oCAAoC;CAErE,MAAM,qBAAqB,QAAQ,mCAAmC,CAAC;CAOvE,MAAM,oBAAoB,GAAG,mBAAmB,EAAE;CAClD,MAAM,aACJ,QAAQ,qCAAqC,iBAAiB,GAC9D,uBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iDAAiD,mBACxE;CAKA,MAAM,qBAAqB,QAAQ,6BAA6B,CAAC;CACjE,MAAM,aACJ,QAAQ,gDAAgD,GACxD,uBACF;CACA,MAAM,aACJ,QAAQ,sCAAsC,GAC9C,4BACF;CACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAE1E,MAAM,qBAAqB,QAAQ,wCAAwC,CAAC;CAE5E,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,EAAE;CACvD,MAAM,aACJ,QAAQ,0CAA0C,qBAAqB,GACvE,2BACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sDAAsD,uBAC7E;CAIA,MAAM,qBAAqB,QAAQ,qBAAqB,CAAC;CACzD,MAAM,aAAa,cAAc,kBAAkB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oDAAoD;AACvF;AAEA,eAAe,2BAA2B,UAA6B;CACrE,MAAM,qBAAqB;CAC3B,MAAM,oBAAoB;AAC5B;;;;;;;;;;;;;;;AAgBA,eAAe,oBAAoB,WAAkC;CACnE,MAAM,eAAe,QAAQ,cAAc;CAE3C,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC;CAGF,MAAM,UAAU,MAAM,aAAa,YAAY;CAC/C,MAAM,aAAa,WAAW,UAAU;CAExC,IAAI,QAAQ,SAAS,UAAU,GAC7B;CAGF,MAAM,SAAS;CACf,IAAI;CAEJ,IAAI,QAAQ,SAAS,MAAM,GACzB,OAAO,QAAQ,QAAQ,QAAQ,GAAG,OAAO,IAAI,YAAY;MAEzD,OAAO,GAAG,WAAW,IAAI;CAG3B,MAAM,aAAa,cAAc,IAAI;CAErC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,UAAU,UAAU,qBAAqB;AAC5E;AAEA,MAAa,cAcT;CACF,eAAe;EACb,aAAa;EACb,UAAU,CAAC,QAAQ,OAAO;EAC1B,cAAc;GACZ,eAAe;GACf,2BAA2B;GAC3B,uBAAuB;GACvB,yBAAyB;EAC3B;EACA,iBAAiB,EACf,+BAA+B,SACjC;EACA,QAAQ,EACN,iBAAiB,sBACnB;EACA,aAAa;CACf;CACA,OAAO;EACL,aACE;EACF,cAAc;GACZ,OAAO;GACP,aAAa;EACf;EACA,iBAAiB;GACf,gBAAgB;GAChB,oBAAoB;EACtB;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,MAAM;EACJ,aAAa;EACb,cAAc,EACZ,YAAY,SACd;EACA,iBAAiB,EACf,qBAAqB,SACvB;CACF;CACA,KAAK;EACH,aAAa;EACb,cAAc,EACZ,yBAAyB,YAC3B;CACF;CACA,SAAS;EACP,aAAa;EACb,cAAc,EACZ,SAAS,SACX;CACF;CACA,WAAW;EACT,aAAa;EACb,cAAc,EACZ,yBAAyB,SAC3B;CACF;CAGA,UAAU;EACR,aAAa;EACb,cAAc,EACZ,IAAI,UACN;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,QAAQ,SACV;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,IAAI;EACF,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,wBAAwB;GACxB,iCAAiC;EACnC;CACF;CACA,MAAM;EACJ,aAAa;EACb,aAAa;EACb,QAAQ;GACN,MAAM;GACN,iBAAiB;GACjB,WAAW;GACX,cAAc;EAChB;EACA,iBAAiB;GACf,gBAAgB;GAChB,MAAM;GACN,QAAQ;GACR,uBAAuB;EACzB;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,SAAS;EACX;EACA,iBAAiB,EACf,kBAAkB,UACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc,EACZ,aAAa,SACf;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,eAAe;EACb,aACE;EAIF,UAAU,CAAC,MAAM;EACjB,cAAc;GACZ,6BAA6B;GAC7B,oBAAoB;EACtB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,QAAQ;EACN,aACE;EACF,cAAc,EACZ,sBAAsB,SACxB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,IAAI;EACF,aAAa;EACb,cAAc,EACZ,kBAAkB,SACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,gBAAgB;EACd,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;CACF;CACA,cAAc;EACZ,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,0BAA0B,SAC5B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,YAAY;EACV,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,wBAAwB,SAC1B;EACA,mBAAmB,oBAAoB,sBAAsB;CAC/D;CACA,eAAe;EACb,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,2BAA2B,SAC7B;EACA,mBAAmB,oBAAoB,yBAAyB;CAClE;CACA,gBAAgB;EACd,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;EACA,mBAAmB,oBAAoB,0BAA0B;CACnE;AACF;AAEA,MAAa,kBAAkB,OAAO,KAAK,WAAW;AAItD,SAAS,gBAAgB,UAAoB,0BAAU,IAAI,IAAY,GAAa;CAClF,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,IAAI,OAAO,GAAG;EAC1B,QAAQ,IAAI,OAAO;EAEnB,MAAM,MAAM,YAAY;EAExB,IAAI,IAAI,UAAU,QAChB,SAAS,KAAK,GAAG,gBAAgB,IAAI,UAAU,OAAO,CAAC;EAGzD,SAAS,KAAK,OAAO;CACvB;CAEA,OAAO;AACT;AAEA,eAAsB,iBAAiB,SAA4B;CACjE,MAAM,WAAW,QAAQ;CACzB,MAAM,EAAE,gBAAgB,MAAM,cAAc,QAAQ;CAEpD,IAAI,MAAM;EACR,QAAQ,IAAI,qBAAqB;EAEjC,KAAK,MAAM,WAAW,iBACpB,QAAQ,IACN,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,WAAW,GACrF;EAGF,QAAQ,KAAK,CAAC;CAChB;CAEA,iBAAiB,QAAQ;CAEzB,MAAM,mBAAmB,gBAAgB,QAAQ;CAEjD,MAAM,eAAuC,CAAC;CAC9C,MAAM,kBAA0C,CAAC;CACjD,MAAM,eAAkE,CAAC;CACzE,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,OAAO,OAAO,cAAc,gBAAgB,YAAY;EACxD,IAAI,gBAAgB,iBAClB,OAAO,OAAO,iBAAiB,gBAAgB,eAAe;EAGhE,IAAI,gBAAgB,aAClB,aAAa,gBAAgB,YAAY,QAAQ,gBAAgB;EAGnE,IAAI,gBAAgB,QAClB,OAAO,OAAO,SAAS,gBAAgB,MAAM;CAEjD;CAKA,MAAM,mBAAmB,MAAM,kBAAkB;CACjD,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,WAAW,WAAW,cAAc,GACtC,aAAa,cAAc;CAI/B,MAAM,qBAAqB,MAAM,iBAAiB,SAAS,cAAc,CAAC;CAG1E,mBAAmB,eAAe,mBAAmB,gBAAgB,CAAC;CACtE,mBAAmB,kBAAkB,mBAAmB,mBAAmB,CAAC;CAG5E,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,mBAAmB,aAAa,aAAa;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,UAAU,EAAE,mCAAmC;EAClF,OAAO,aAAa;CACtB;CAGF,KAAK,MAAM,iBAAiB,OAAO,KAAK,eAAe,GACrD,IAAI,mBAAmB,gBAAgB,gBAAgB;EACrD,QAAQ,IAAI,GAAG,OAAO,aAAa,aAAa,EAAE,mCAAmC;EACrF,OAAO,gBAAgB;CACzB;CAGF,IAAI,WACF,MAAM,mBAAmB,cAAc,eAAe;MAEtD,MAAM,oBAAoB,gBAAkC,cAAc,eAAe;CAG3F,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,YAAY,GAAG;EACzD,IAAI,MAAM,gBAAgB,QAAQ,UAAU,KAAK,IAAI,CAAC,GAAG;GACvD,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,oCAAoC;GAC7E;EACF;EAEA,QAAQ,IAAI,YAAY,OAAO,QAAQ,IAAI,EAAE,WAAW;EAExD,MAAM,aAAa,QAAQ,UAAU,KAAK,IAAI,GAAG,OAAO,OAAO;EAE/D,QAAQ,IAAI,GAAG,OAAO,MAAM,IAAI,EAAE,6BAA6B;CACjE;CAGA,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,IAAI,gBAAgB,aAClB,MAAM,gBAAgB,YAAY,OAAO;CAE7C;CAEA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG;EACnC,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAC/E,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;EAC1D,YAAY,UAAU;GAAE,GAAI,YAAY,WAAW,CAAC;GAAI,GAAG;EAAQ;EACnE,MAAM,iBAAiB,iBAAiB,WAAW;EAEnD,QAAQ,IAAI,8BAA8B,OAAO,MAAM,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;CAC3F;AACF;;;;;AAMA,eAAe,oBACb,gBACA,cACA,iBACA;CACA,MAAM,wBAAwB,MAAM,yBAAyB,cAAc;CAE3E,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,SAAS,GAAG;EACxC,QAAQ,IAAI,2BAA2B,OAAO,QAAQ,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAE7F,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,GAAG,KAAK;GAC1E,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,uCAAuC,OAAO,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAC1F;CACF;CAEA,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,SAAS,GAAG;EAC3C,QAAQ,IACN,+BAA+B,OAAO,QAAQ,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACvF;EAEA,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM;GAChF,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,2CAA2C,OAAO,MAAM,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACjG;CACF;AACF;;;;;;AAOA,eAAe,mBACb,cACA,iBACA;CACA,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,eAAe,CAAC,CAAC,WAAW,GACpF;CAGF,MAAM,kBAAkB,SAAS,cAAc;CAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;CAE1D,YAAY,eAAe,YAAY,gBAAgB,CAAC;CACxD,YAAY,kBAAkB,YAAY,mBAAmB,CAAC;CAE9D,OAAO,OAAO,YAAY,cAAc,YAAY;CACpD,OAAO,OAAO,YAAY,iBAAiB,eAAe;CAE1D,MAAM,iBAAiB,iBAAiB,WAAW;CAEnD,MAAM,WAAW,CAAC,GAAG,OAAO,KAAK,YAAY,GAAG,GAAG,OAAO,KAAK,eAAe,CAAC;CAE/E,QAAQ,IACN,YAAY,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,oDAChD;AACF;AAEA,SAAS,iBAAiB,UAAoB;CAC5C,KAAK,MAAM,WAAW,UACpB,IAAI,CAAC,gBAAgB,SAAS,OAAO,GAAG;EACtC,QAAQ,IACN,WAAW,OAAO,UAAU,OAAO,EAAE,yCAAyC,OAAO,MAAM,gBAAgB,KAAK,IAAI,CAAC,GACvH;EACA,QAAQ,KAAK,CAAC;CAChB;AAEJ;AAEA,eAAe,yBAAyB,gBAAiC;CACvE,IAAI,CAAC,gBAEH,iBAAiB,MAAM,qBAAqB;CAG9C,IAAI,mBAAmB,OACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;CAGT,IAAI,mBAAmB,QACrB,OAAO;AAEX;AAEA,eAAe,uBAAuB;CACpC,IAAI,MAAM,gBAAgB,SAAS,mBAAmB,CAAC,GACrD,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,WAAW,CAAC,GAC7C,OAAO;CAGT,IAAI,MAAM,gBAAgB,SAAS,gBAAgB,CAAC,GAClD,OAAO;AAEX"}
+{"version":3,"file":"add-command.action.mjs","names":[],"sources":["../../../../../../../core/src/generations/add-command.action.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\r\nimport {\r\n  ensureDirectoryAsync,\r\n  fileExistsAsync,\r\n  getFileAsync,\r\n  getJsonFileAsync,\r\n  putFileAsync,\r\n  putJsonFileAsync,\r\n} from \"@warlock.js/fs\";\r\nimport { execSync } from \"node:child_process\";\r\nimport { CommandActionData } from \"../cli/types\";\r\nimport {\r\n  detectPackageManager,\r\n  getAddCommand,\r\n  type PackageManager,\r\n} from \"../updater/package-manager\";\r\nimport { rootPath, srcPath } from \"../utils\";\r\nimport { getWarlockVersion } from \"../utils/framework-vesion\";\r\nimport {\r\n  accessConfigStub,\r\n  aiConfigStub,\r\n  accessResolverStub,\r\n  accessRoleMigrationStub,\r\n  accessRoleModelIndexStub,\r\n  accessRoleModelStub,\r\n  accessUserRoleMigrationStub,\r\n  accessUserRoleModelIndexStub,\r\n  accessUserRoleModelStub,\r\n  communicatorsConfigStub,\r\n  notificationControllersStub,\r\n  notificationMigrationStub,\r\n  notificationModelStub,\r\n  notificationRoutesStub,\r\n  notificationsConfigStub,\r\n  socketConfigStub,\r\n} from \"./stubs\";\r\n\r\n/**\r\n * Build a migration filename timestamp prefix in the framework's\r\n * MM-DD-YYYY_HH-MM-SS form. Cascade infers a migration's createdAt from this\r\n * prefix and orders migrations deterministically by it. Pass `offsetSeconds` to\r\n * stamp sibling migrations created in the same scaffold a second apart so they\r\n * never collide and keep a stable relative order.\r\n */\r\nfunction migrationTimestamp(offsetSeconds = 0): string {\r\n  const now = new Date(Date.now() + offsetSeconds * 1000);\r\n  const pad = (value: number) => String(value).padStart(2, \"0\");\r\n\r\n  return (\r\n    `${pad(now.getMonth() + 1)}-${pad(now.getDate())}-${now.getFullYear()}_` +\r\n    `${pad(now.getHours())}-${pad(now.getMinutes())}-${pad(now.getSeconds())}`\r\n  );\r\n}\r\n\r\nasync function completeTestInstallation(options: CommandActionData) {\r\n  // Create test-global-setup.ts (runs once before all tests)\r\n  const testGlobalSetupPath = srcPath(\"test-global-setup.ts\");\r\n  const testGlobalSetupExists = await fileExistsAsync(testGlobalSetupPath);\r\n\r\n  if (!testGlobalSetupExists) {\r\n    await putFileAsync(\r\n      testGlobalSetupPath,\r\n      `/**\r\n * Global Test Setup\r\n *\r\n * Runs ONCE before all test workers.\r\n * Starts the HTTP server for integration tests.\r\n */\r\nimport { startHttpTestServer, stopHttpTestServer } from \"@warlock.js/core\";\r\n\r\nexport async function setup() {\r\n  await startHttpTestServer();\r\n}\r\n\r\nexport async function teardown() {\r\n  await stopHttpTestServer();\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-global-setup.ts`);\r\n  }\r\n\r\n  // Create test-setup.ts (runs per worker thread)\r\n  const testSetupPath = srcPath(\"test-setup.ts\");\r\n  const testSetupExists = await fileExistsAsync(testSetupPath);\r\n\r\n  if (!testSetupExists) {\r\n    await putFileAsync(\r\n      testSetupPath,\r\n      `/**\r\n * Per-Worker Test Setup\r\n *\r\n * Runs in EACH Vitest worker thread before tests execute.\r\n * Sets up per-worker database and cache connections.\r\n */\r\nimport { setupTest } from \"@warlock.js/core\";\r\n\r\nawait setupTest({ connectors: true });\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created src/test-setup.ts`);\r\n  }\r\n\r\n  // Create vite.config.ts\r\n  const viteConfigPath = rootPath(\"vite.config.ts\");\r\n  const viteConfigExists = await fileExistsAsync(viteConfigPath);\r\n\r\n  if (!viteConfigExists) {\r\n    await putFileAsync(\r\n      viteConfigPath,\r\n      `import { lowerStage3Decorators } from \"@warlock.js/core\";\r\nimport mongezVite from \"@mongez/vite\";\r\nimport { defineConfig } from \"vitest/config\";\r\n\r\nexport default defineConfig({\r\n  // lowerStage3Decorators MUST come first: it lowers native (@RegisterModel, …)\r\n  // decorators with esbuild before oxc / the SSR rewrite can mangle them, so\r\n  // decorated Cascade models load under Vitest.\r\n  plugins: [lowerStage3Decorators(), mongezVite()],\r\n  test: {\r\n    globalSetup: \"./src/test-global-setup.ts\", // HTTP server - runs once\r\n    setupFiles: [\"./src/test-setup.ts\"],       // DB/cache - runs per worker\r\n    environment: \"node\",\r\n    globals: false,\r\n    include: [\"src/app/**/*.test.ts\"],\r\n  },\r\n});\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created vite.config.ts`);\r\n  }\r\n}\r\n\r\nasync function completeReactEmailInstallation(_options: CommandActionData) {\r\n  // 1. Create emails/ folder with a sample component\r\n  const emailsFolderPath = rootPath(\"emails\");\r\n  const sampleEmailPath = rootPath(\"emails/welcome-email.tsx\");\r\n\r\n  if (!(await fileExistsAsync(sampleEmailPath))) {\r\n    await ensureDirectoryAsync(emailsFolderPath);\r\n    await putFileAsync(\r\n      sampleEmailPath,\r\n      `import { Body, Container, Head, Html, Text } from \"@react-email/components\";\r\nimport { Tailwind } from \"@react-email/tailwind\";\r\n\r\ninterface WelcomeEmailProps {\r\n  name: string;\r\n}\r\n\r\n/**\r\n * Sample welcome email component.\r\n * Preview with: yarn email:preview\r\n */\r\nexport default function WelcomeEmail({ name }: WelcomeEmailProps) {\r\n  return (\r\n    <Html>\r\n      <Head />\r\n      <Tailwind>\r\n        <Body className=\"bg-gray-100 font-sans\">\r\n          <Container className=\"mx-auto max-w-xl py-8 px-4\">\r\n            <Text className=\"text-2xl font-bold text-gray-900\">\r\n              Welcome, {name}!\r\n            </Text>\r\n            <Text className=\"text-gray-600 mt-2\">\r\n              You're all set. We're glad to have you on board.\r\n            </Text>\r\n          </Container>\r\n        </Body>\r\n      </Tailwind>\r\n    </Html>\r\n  );\r\n}\r\n`,\r\n    );\r\n    console.log(`${colors.green(\"✓\")} Created emails/welcome-email.tsx`);\r\n  }\r\n\r\n  // 2. Patch tsconfig.json — add \"emails\" to include if missing\r\n  const tsconfigPath = rootPath(\"tsconfig.json\");\r\n  const tsconfig = await getJsonFileAsync(tsconfigPath);\r\n\r\n  if (!tsconfig.include) {\r\n    tsconfig.include = [];\r\n  }\r\n\r\n  if (!tsconfig.include.includes(\"emails\")) {\r\n    tsconfig.include.push(\"emails\");\r\n    await putJsonFileAsync(tsconfigPath, tsconfig);\r\n    console.log(`${colors.green(\"✓\")} Added \"emails\" to tsconfig.json include`);\r\n  }\r\n}\r\n\r\nasync function completeNotificationsInstallation(_options: CommandActionData) {\r\n  const modelPath = srcPath(\"app/notifications/notification.model.ts\");\r\n\r\n  // The model file is the sentinel for \"notifications already scaffolded\" —\r\n  // its presence means the migration was created too (timestamped, so we must\r\n  // not re-emit a duplicate on a second run).\r\n  if (await fileExistsAsync(modelPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/notifications\")} already scaffolded, skipping model + migration...`,\r\n    );\r\n    return;\r\n  }\r\n\r\n  // 1. Notification model — extends the package's DatabaseNotification base.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications\"));\r\n  await putFileAsync(modelPath, notificationModelStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/notification.model.ts`);\r\n\r\n  // 2. Migration — timestamped MM-DD-YYYY_HH-MM-SS prefix so cascade infers its\r\n  //    createdAt and orders it deterministically (migrate-action discovers\r\n  //    src/app/*/migrations/*).\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/migrations\"));\r\n\r\n  const migrationFile = `${migrationTimestamp()}-notification.migration.ts`;\r\n\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/migrations\", migrationFile),\r\n    notificationMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/notifications/migrations/${migrationFile}`,\r\n  );\r\n\r\n  // 3. HTTP surface — the in-app read/dismiss endpoints (routes + controllers),\r\n  //    gated by authMiddleware. Delete if the app exposes notifications another way.\r\n  await ensureDirectoryAsync(srcPath(\"app/notifications/controllers\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/notifications/controllers/notifications.controller.ts\"),\r\n    notificationControllersStub,\r\n  );\r\n  await putFileAsync(srcPath(\"app/notifications/routes.ts\"), notificationRoutesStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/notifications/routes.ts + controllers`);\r\n}\r\n\r\nasync function registerAccessLocale() {\r\n  // Register the access locale in the project's shared translations file so a\r\n  // denied check returns a real sentence, not the raw \"access.errors.forbidden\"\r\n  // key. Append when the file exists, create it otherwise; skip if already there.\r\n  const localesPath = srcPath(\"app/shared/utils/locales.ts\");\r\n\r\n  const accessLocale = `groupedTranslations(\"access\", {\r\n  errors: {\r\n    forbidden: {\r\n      en: \"You do not have permission to perform this action.\",\r\n      ar: \"ليس لديك صلاحية لتنفيذ هذا الإجراء.\",\r\n    },\r\n  },\r\n});\r\n`;\r\n\r\n  if (await fileExistsAsync(localesPath)) {\r\n    const current = await getFileAsync(localesPath);\r\n\r\n    if (current.includes(`groupedTranslations(\"access\"`)) {\r\n      console.log(`${colors.yellowBright(\"access\")} locale already registered, skipping...`);\r\n\r\n      return;\r\n    }\r\n\r\n    // The file uses groupedTranslations already iff it calls it — only inject the\r\n    // import when no call is present yet.\r\n    const importLine = `import { groupedTranslations } from \"@warlock.js/core\";`;\r\n    const prefix = current.includes(\"groupedTranslations(\") ? \"\" : `${importLine}\\n\\n`;\r\n\r\n    await putFileAsync(localesPath, `${prefix}${current.trimEnd()}\\n\\n${accessLocale}`);\r\n\r\n    console.log(\r\n      `${colors.green(\"✓\")} Registered the access locale in src/app/shared/utils/locales.ts`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/shared/utils\"));\r\n\r\n  await putFileAsync(\r\n    localesPath,\r\n    `import { groupedTranslations } from \"@warlock.js/core\";\\n\\n${accessLocale}`,\r\n  );\r\n\r\n  console.log(`${colors.green(\"✓\")} Created src/app/shared/utils/locales.ts with the access locale`);\r\n}\r\n\r\nasync function scaffoldAccessFiles() {\r\n  // The resolver file is the sentinel for \"access already scaffolded\" — its\r\n  // presence means the role/user-role model folders and their timestamped\r\n  // migrations were created too, so we must not re-emit duplicate migrations on\r\n  // a second run.\r\n  const resolverPath = srcPath(\"app/access/services/access-resolver.ts\");\r\n\r\n  if (await fileExistsAsync(resolverPath)) {\r\n    console.log(\r\n      `${colors.yellowBright(\"src/app/access\")} already scaffolded, skipping resolver + role tables...`,\r\n    );\r\n\r\n    return;\r\n  }\r\n\r\n  // 1. Role catalog model folder (model + barrel + migration). The catalog row\r\n  //    is role name → granted permissions; managed at runtime in the DB.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role\"));\r\n  await putFileAsync(srcPath(\"app/access/models/role/role.model.ts\"), accessRoleModelStub);\r\n  await putFileAsync(srcPath(\"app/access/models/role/index.ts\"), accessRoleModelIndexStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/role/migrations\"));\r\n\r\n  // Migration filenames carry a MM-DD-YYYY_HH-MM-SS prefix so cascade infers\r\n  // their createdAt and orders them deterministically (the migrate action\r\n  // discovers src/app/*/models/*/migrations/*). The two tables are independent\r\n  // (no FK between them), but the user-role migration is stamped a second later\r\n  // so the relative order is stable.\r\n  const roleMigrationFile = `${migrationTimestamp()}-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/role/migrations\", roleMigrationFile),\r\n    accessRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/role/migrations/${roleMigrationFile}`,\r\n  );\r\n\r\n  // 2. UserRole assignment model folder (model + barrel + migration). The model\r\n  //    statics scope an unresolved tenant to GLOBAL rows only (security\r\n  //    invariant) — see the stub for the reasoning.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role\"));\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/user-role.model.ts\"),\r\n    accessUserRoleModelStub,\r\n  );\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/index.ts\"),\r\n    accessUserRoleModelIndexStub,\r\n  );\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/models/user-role`);\r\n\r\n  await ensureDirectoryAsync(srcPath(\"app/access/models/user-role/migrations\"));\r\n\r\n  const userRoleMigrationFile = `${migrationTimestamp(1)}-user-role.migration.ts`;\r\n  await putFileAsync(\r\n    srcPath(\"app/access/models/user-role/migrations\", userRoleMigrationFile),\r\n    accessUserRoleMigrationStub,\r\n  );\r\n  console.log(\r\n    `${colors.green(\"✓\")} Created src/app/access/models/user-role/migrations/${userRoleMigrationFile}`,\r\n  );\r\n\r\n  // 3. The DatabaseAccessResolver — the one required config seam, wired into\r\n  //    config/access.ts by the ejected stub.\r\n  await ensureDirectoryAsync(srcPath(\"app/access/services\"));\r\n  await putFileAsync(resolverPath, accessResolverStub);\r\n  console.log(`${colors.green(\"✓\")} Created src/app/access/services/access-resolver.ts`);\r\n}\r\n\r\nasync function completeAccessInstallation(_options: CommandActionData) {\r\n  await registerAccessLocale();\r\n  await scaffoldAccessFiles();\r\n}\r\n\r\n/**\r\n * Link a satellite AI package into src/config/ai.ts via a side-effect import.\r\n *\r\n * The satellites (@warlock.js/ai-tools, ai-panoptic, ai-workspace) augment the\r\n * `ai` object on import — they register their runtime surface (ai.tools / ai.mcp,\r\n * ai.workspace, panoptic's ai.config({ panoptic }) wiring) AND the matching TS\r\n * declaration-merging so ai.* members resolve. config-loader runs config/ai.ts at\r\n * boot, so dropping a bare `import \"<specifier>\";` at the top of that file is what\r\n * actually loads the augmentation before the ai connector applies the config.\r\n *\r\n * No-op if config/ai.ts is missing (the `ai` feature ejects it) or the import is\r\n * already present. Inserts right after the `warlock:ai-packages` marker when it\r\n * exists so the satellite imports stay grouped; otherwise prepends to the top.\r\n */\r\nasync function linkAiPackageImport(specifier: string): Promise<void> {\r\n  const aiConfigPath = srcPath(\"config/ai.ts\");\r\n\r\n  if (!(await fileExistsAsync(aiConfigPath))) {\r\n    return;\r\n  }\r\n\r\n  const current = await getFileAsync(aiConfigPath);\r\n  const importLine = `import \"${specifier}\";`;\r\n\r\n  if (current.includes(importLine)) {\r\n    return;\r\n  }\r\n\r\n  const marker = \"// >>> warlock:ai-packages (auto-managed) >>>\";\r\n  let next: string;\r\n\r\n  if (current.includes(marker)) {\r\n    next = current.replace(marker, `${marker}\\n${importLine}`);\r\n  } else {\r\n    next = `${importLine}\\n${current}`;\r\n  }\r\n\r\n  await putFileAsync(aiConfigPath, next);\r\n\r\n  console.log(`${colors.green(\"✓\")} Linked ${specifier} in src/config/ai.ts`);\r\n}\r\n\r\nexport const featuresMap: Record<\r\n  string,\r\n  {\r\n    dependencies?: Record<string, string>;\r\n    devDependencies?: Record<string, string>;\r\n    description: string;\r\n    requires?: string[];\r\n    script?: Record<string, string>;\r\n    onExecuting?: (options: CommandActionData) => Promise<any>;\r\n    ejectConfig?: {\r\n      content: string;\r\n      name: string;\r\n    };\r\n  }\r\n> = {\r\n  \"react-email\": {\r\n    description: \"Installs react-email for building email templates with React and Tailwind\",\r\n    requires: [\"mail\", \"react\"],\r\n    dependencies: {\r\n      \"react-email\": \"^5.2.10\",\r\n      \"@react-email/components\": \"^1.0.11\",\r\n      \"@react-email/render\": \"^2.0.5\",\r\n      \"@react-email/tailwind\": \"^2.0.7\",\r\n    },\r\n    devDependencies: {\r\n      \"@react-email/preview-server\": \"5.2.10\",\r\n    },\r\n    script: {\r\n      \"email:preview\": \"npx react-email dev\",\r\n    },\r\n    onExecuting: completeReactEmailInstallation,\r\n  },\r\n  react: {\r\n    description:\r\n      \"Installs React and React dom for rendering React components (non-interactive), useful for sending mails and generating HTML\",\r\n    dependencies: {\r\n      react: \"^19.2.3\",\r\n      \"react-dom\": \"^19.2.3\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/react\": \"^19.2.7\",\r\n      \"@types/react-dom\": \"^19.2.3\",\r\n    },\r\n  },\r\n  image: {\r\n    description: \"Installs sharp for image processing\",\r\n    dependencies: {\r\n      sharp: \"^0.34.5\",\r\n    },\r\n  },\r\n  mail: {\r\n    description: \"Installs nodemailer for sending emails\",\r\n    dependencies: {\r\n      nodemailer: \"^8.0.5\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/nodemailer\": \"^8.0.0\",\r\n    },\r\n  },\r\n  ses: {\r\n    description: \"Installs AWS SES SDK for sending emails via Amazon SES\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-sesv2\": \"^3.1025.0\",\r\n    },\r\n  },\r\n  mongodb: {\r\n    description: \"Installs mongodb driver for database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mongodb: \"^7.0.0\",\r\n    },\r\n  },\r\n  scheduler: {\r\n    description: \"Installs warlock scheduler for scheduling tasks\",\r\n    dependencies: {\r\n      \"@warlock.js/scheduler\": \"~4.0.0\",\r\n    },\r\n  },\r\n  // swagger / postman intentionally omitted — those packages do not exist yet;\r\n  // they will ship together in the unified @warlock.js/api-docs package.\r\n  postgres: {\r\n    description: \"Installs pg for Postgres database (Cascade Package)\",\r\n    dependencies: {\r\n      pg: \"^8.11.0\",\r\n    },\r\n  },\r\n  mysql: {\r\n    description: \"Installs mysql2 for MySQL database driver (Cascade Package)\",\r\n    dependencies: {\r\n      mysql2: \"^3.5.0\",\r\n    },\r\n  },\r\n  redis: {\r\n    description: \"Installs redis for Redis cache driver (Cache Package)\",\r\n    dependencies: {\r\n      redis: \"^4.6.13\",\r\n    },\r\n  },\r\n  s3: {\r\n    description: \"Installs AWS SDK for Cloud storage (Storage Package)\",\r\n    dependencies: {\r\n      \"@aws-sdk/client-s3\": \"^3.955.0\",\r\n      \"@aws-sdk/lib-storage\": \"^3.955.0\",\r\n      \"@aws-sdk/s3-request-presigner\": \"^3.955.0\",\r\n    },\r\n  },\r\n  test: {\r\n    description: \"Installs warlock test for testing\",\r\n    onExecuting: completeTestInstallation,\r\n    script: {\r\n      test: \"vitest run\",\r\n      \"test:coverage\": \"vitest run --coverage\",\r\n      \"test:ui\": \"vitest --ui\",\r\n      \"test:watch\": \"vitest --watch\",\r\n    },\r\n    devDependencies: {\r\n      \"@mongez/vite\": \"^2.0.4\",\r\n      vite: \"^8.0.16\",\r\n      vitest: \"^4.1.8\",\r\n      \"@vitest/coverage-v8\": \"^4.1.8\",\r\n    },\r\n  },\r\n  herald: {\r\n    description: \"Installs herald for message broker (Herald Package)\",\r\n    dependencies: {\r\n      \"@warlock.js/herald\": \"~4.0.0\",\r\n      amqplib: \"^0.10.0\",\r\n    },\r\n    devDependencies: {\r\n      \"@types/amqplib\": \"^0.10.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: communicatorsConfigStub,\r\n      name: \"herald\",\r\n    },\r\n  },\r\n  socket: {\r\n    description: \"Installs socket.io for the realtime socket server (Socket Connector)\",\r\n    dependencies: {\r\n      \"socket.io\": \"^4.8.3\",\r\n    },\r\n    ejectConfig: {\r\n      content: socketConfigStub,\r\n      name: \"socket\",\r\n    },\r\n  },\r\n  notifications: {\r\n    description:\r\n      \"Installs @warlock.js/notifications — multi-channel notifications (mail + in-app database). Pulls the mail feature, ejects config/notifications.ts, and scaffolds the Notification model + migration plus the recipient-scoped read/dismiss routes + controllers into src/app/notifications\",\r\n    // The ejected config wires a `mail` channel by default (needs nodemailer,\r\n    // via the `mail` feature); the scaffolded routes are gated by\r\n    // `authMiddleware`, so `@warlock.js/auth` is pulled in too.\r\n    requires: [\"mail\"],\r\n    dependencies: {\r\n      \"@warlock.js/notifications\": \"~4.0.0\",\r\n      \"@warlock.js/auth\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: notificationsConfigStub,\r\n      name: \"notifications\",\r\n    },\r\n    onExecuting: completeNotificationsInstallation,\r\n  },\r\n  access: {\r\n    description:\r\n      \"Installs @warlock.js/access — authorization (RBAC + ABAC): permission checks, ABAC policies, and roles. Ejects config/access.ts, the DatabaseAccessResolver + Role/UserRole models and migrations into src/app/access, and registers the access locale in src/app/shared/utils/locales.ts\",\r\n    dependencies: {\r\n      \"@warlock.js/access\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: accessConfigStub,\r\n      name: \"access\",\r\n    },\r\n    onExecuting: completeAccessInstallation,\r\n  },\r\n  ai: {\r\n    description: \"Installs @warlock.js/ai — the core AI toolkit (agents, tools, workflows)\",\r\n    dependencies: {\r\n      \"@warlock.js/ai\": \"~4.0.0\",\r\n    },\r\n    ejectConfig: {\r\n      content: aiConfigStub,\r\n      name: \"ai\",\r\n    },\r\n  },\r\n  \"ai-openai\": {\r\n    description: \"OpenAI provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-openai\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-google\": {\r\n    description: \"Google (Gemini) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-google\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-anthropic\": {\r\n    description: \"Anthropic (Claude) provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-anthropic\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-bedrock\": {\r\n    description: \"AWS Bedrock provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-bedrock\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-ollama\": {\r\n    description: \"Ollama provider for @warlock.js/ai (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-ollama\": \"~4.0.0\",\r\n    },\r\n  },\r\n  \"ai-tools\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-tools — ready-made agent tools (web search, fetch, HTTP, calculator, date-time) + an MCP client/server, under ai.tools.* / ai.mcp (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-tools\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-tools\"),\r\n  },\r\n  \"ai-panoptic\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-panoptic — observability for @warlock.js/ai (collector, exporters, zero-setup local dashboard) via ai.config({ panoptic }) (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-panoptic\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-panoptic\"),\r\n  },\r\n  \"ai-workspace\": {\r\n    description:\r\n      \"Installs @warlock.js/ai-workspace — a policy-jailed filesystem + shell workspace for coding agents, as ai.workspace (pulls the core ai package)\",\r\n    requires: [\"ai\"],\r\n    dependencies: {\r\n      \"@warlock.js/ai-workspace\": \"~4.0.0\",\r\n    },\r\n    onExecuting: () => linkAiPackageImport(\"@warlock.js/ai-workspace\"),\r\n  },\r\n};\r\n\r\nexport const allowedFeatures = Object.keys(featuresMap);\r\n\r\nfunction resolveFeatures(features: string[], visited = new Set<string>()): string[] {\r\n  const resolved: string[] = [];\r\n\r\n  for (const feature of features) {\r\n    if (visited.has(feature)) continue;\r\n    visited.add(feature);\r\n\r\n    const def = featuresMap[feature];\r\n\r\n    if (def.requires?.length) {\r\n      resolved.push(...resolveFeatures(def.requires, visited));\r\n    }\r\n\r\n    resolved.push(feature);\r\n  }\r\n\r\n  return resolved;\r\n}\r\n\r\nexport async function addCommandAction(options: CommandActionData) {\r\n  const features = options.args;\r\n  const { packageManager, list, noInstall } = options.options;\r\n\r\n  if (list) {\r\n    console.log(\"Available Features:\");\r\n\r\n    for (const feature of allowedFeatures) {\r\n      console.log(\r\n        `- ${colors.yellowBright(feature)}: ${colors.green(featuresMap[feature].description)}`,\r\n      );\r\n    }\r\n\r\n    process.exit(0);\r\n  }\r\n\r\n  validateFeatures(features);\r\n\r\n  const resolvedFeatures = resolveFeatures(features);\r\n\r\n  const dependencies: Record<string, string> = {};\r\n  const devDependencies: Record<string, string> = {};\r\n  const ejectConfigs: Record<string, { content: string; name: string }> = {};\r\n  const scripts: Record<string, string> = {};\r\n\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    Object.assign(dependencies, featurePackages.dependencies);\r\n    if (featurePackages.devDependencies) {\r\n      Object.assign(devDependencies, featurePackages.devDependencies);\r\n    }\r\n\r\n    if (featurePackages.ejectConfig) {\r\n      ejectConfigs[featurePackages.ejectConfig.name] = featurePackages.ejectConfig;\r\n    }\r\n\r\n    if (featurePackages.script) {\r\n      Object.assign(scripts, featurePackages.script);\r\n    }\r\n  }\r\n\r\n  // Pin every @warlock.js/* feature package to the INSTALLED framework version so\r\n  // a scaffolded project's features match its core version instead of drifting to\r\n  // the feature map's static range.\r\n  const frameworkVersion = await getWarlockVersion();\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (dependency.startsWith(\"@warlock.js/\")) {\r\n      dependencies[dependency] = frameworkVersion;\r\n    }\r\n  }\r\n\r\n  const currentPackageJson = await getJsonFileAsync(rootPath(\"package.json\"));\r\n\r\n  // Fresh templates may omit one of the maps — guard before reading.\r\n  currentPackageJson.dependencies = currentPackageJson.dependencies ?? {};\r\n  currentPackageJson.devDependencies = currentPackageJson.devDependencies ?? {};\r\n\r\n  // Skip anything already present so we never downgrade an existing pin.\r\n  for (const dependency of Object.keys(dependencies)) {\r\n    if (currentPackageJson.dependencies[dependency]) {\r\n      console.log(`${colors.yellowBright(dependency)} is already installed, skipping...`);\r\n      delete dependencies[dependency];\r\n    }\r\n  }\r\n\r\n  for (const devDependency of Object.keys(devDependencies)) {\r\n    if (currentPackageJson.devDependencies[devDependency]) {\r\n      console.log(`${colors.yellowBright(devDependency)} is already installed, skipping...`);\r\n      delete devDependencies[devDependency];\r\n    }\r\n  }\r\n\r\n  if (noInstall) {\r\n    await recordDependencies(dependencies, devDependencies);\r\n  } else {\r\n    await installDependencies(packageManager as PackageManager | undefined, dependencies, devDependencies);\r\n  }\r\n\r\n  for (const [name, config] of Object.entries(ejectConfigs)) {\r\n    if (await fileExistsAsync(srcPath(`config/${name}.ts`))) {\r\n      console.log(`${colors.yellowBright(name)} config already exists, skipping...`);\r\n      continue;\r\n    }\r\n\r\n    console.log(`Creating ${colors.magenta(name)} config...`);\r\n\r\n    await putFileAsync(srcPath(`config/${name}.ts`), config.content);\r\n\r\n    console.log(`${colors.green(name)} config created successfully`);\r\n  }\r\n\r\n  // now loop again over features to execute onExecuting\r\n  for (const feature of resolvedFeatures) {\r\n    const featurePackages = featuresMap[feature as keyof typeof featuresMap];\r\n    if (featurePackages.onExecuting) {\r\n      await featurePackages.onExecuting(options);\r\n    }\r\n  }\r\n\r\n  if (Object.keys(scripts).length > 0) {\r\n    console.log(`Adding scripts ${colors.magenta(Object.keys(scripts).join(\", \"))}`);\r\n    const packageJsonPath = rootPath(\"package.json\");\r\n    const packageJson = await getJsonFileAsync(packageJsonPath);\r\n    packageJson.scripts = { ...(packageJson.scripts ?? {}), ...scripts };\r\n    await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n    console.log(`Scripts added successfully ${colors.green(Object.keys(scripts).join(\", \"))}`);\r\n  }\r\n}\r\n\r\n/**\r\n * Install the resolved dependency sets through the project's package manager.\r\n * Runs two passes (prod then dev) so each lands in the correct section.\r\n */\r\nasync function installDependencies(\r\n  packageManager: PackageManager | undefined,\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  // `--package-manager` is optional; without it, fall back to the lockfile.\r\n  const packageManagerCommand = getAddCommand(packageManager ?? (await detectPackageManager()));\r\n\r\n  if (Object.keys(dependencies).length > 0) {\r\n    console.log(`Installing dependencies ${colors.magenta(Object.keys(dependencies).join(\", \"))}`);\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(dependencies).join(\" \")}`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dependencies installed successfully ${colors.green(Object.keys(dependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n\r\n  if (Object.keys(devDependencies).length > 0) {\r\n    console.log(\r\n      `Installing dev dependencies ${colors.magenta(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n\r\n    execSync(`${packageManagerCommand} ${Object.keys(devDependencies).join(\" \")} -D`, {\r\n      cwd: process.cwd(),\r\n      stdio: \"inherit\",\r\n    });\r\n\r\n    console.log(\r\n      `Dev dependencies installed successfully ${colors.green(Object.keys(devDependencies).join(\", \"))}`,\r\n    );\r\n  }\r\n}\r\n\r\n/**\r\n * Write the resolved dependency sets into package.json without installing.\r\n * Used by `--no-install` so a scaffolder can batch every feature into one\r\n * install pass after the command returns. Versions come from the feature map.\r\n */\r\nasync function recordDependencies(\r\n  dependencies: Record<string, string>,\r\n  devDependencies: Record<string, string>,\r\n) {\r\n  if (Object.keys(dependencies).length === 0 && Object.keys(devDependencies).length === 0) {\r\n    return;\r\n  }\r\n\r\n  const packageJsonPath = rootPath(\"package.json\");\r\n  const packageJson = await getJsonFileAsync(packageJsonPath);\r\n\r\n  packageJson.dependencies = packageJson.dependencies ?? {};\r\n  packageJson.devDependencies = packageJson.devDependencies ?? {};\r\n\r\n  Object.assign(packageJson.dependencies, dependencies);\r\n  Object.assign(packageJson.devDependencies, devDependencies);\r\n\r\n  await putJsonFileAsync(packageJsonPath, packageJson);\r\n\r\n  const recorded = [...Object.keys(dependencies), ...Object.keys(devDependencies)];\r\n\r\n  console.log(\r\n    `Recorded ${colors.green(recorded.join(\", \"))} in package.json (install skipped via --no-install)`,\r\n  );\r\n}\r\n\r\nfunction validateFeatures(features: string[]) {\r\n  for (const feature of features) {\r\n    if (!allowedFeatures.includes(feature)) {\r\n      console.log(\r\n        `Feature ${colors.redBright(feature)} is not allowed, allowed features are: ${colors.green(allowedFeatures.join(\", \"))}`,\r\n      );\r\n      process.exit(1);\r\n    }\r\n  }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;AA4CA,SAAS,mBAAmB,gBAAgB,GAAW;CACrD,MAAM,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,GAAI;CACtD,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAE5D,OACE,GAAG,IAAI,IAAI,SAAS,IAAI,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GACnE,IAAI,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,WAAW,CAAC;AAE3E;AAEA,eAAe,yBAAyB,SAA4B;CAElE,MAAM,sBAAsB,QAAQ,sBAAsB;CAG1D,IAAI,CAAC,MAF+B,gBAAgB,mBAAmB,GAE3C;EAC1B,MAAM,aACJ,qBACA;;;;;;;;;;;;;;;CAgBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,gBAAgB,QAAQ,eAAe;CAG7C,IAAI,CAAC,MAFyB,gBAAgB,aAAa,GAErC;EACpB,MAAM,aACJ,eACA;;;;;;;;;CAUF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,2BAA2B;CAChE;CAGA,MAAM,iBAAiB,SAAS,gBAAgB;CAGhD,IAAI,CAAC,MAF0B,gBAAgB,cAAc,GAEtC;EACrB,MAAM,aACJ,gBACA;;;;;;;;;;;;;;;;;CAkBF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,wBAAwB;CAC7D;AACF;AAEA,eAAe,+BAA+B,UAA6B;CAEzE,MAAM,mBAAmB,SAAS,QAAQ;CAC1C,MAAM,kBAAkB,SAAS,0BAA0B;CAE3D,IAAI,CAAE,MAAM,gBAAgB,eAAe,GAAI;EAC7C,MAAM,qBAAqB,gBAAgB;EAC3C,MAAM,aACJ,iBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BF;EACA,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,kCAAkC;CACvE;CAGA,MAAM,eAAe,SAAS,eAAe;CAC7C,MAAM,WAAW,MAAM,iBAAiB,YAAY;CAEpD,IAAI,CAAC,SAAS,SACZ,SAAS,UAAU,CAAC;CAGtB,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,GAAG;EACxC,SAAS,QAAQ,KAAK,QAAQ;EAC9B,MAAM,iBAAiB,cAAc,QAAQ;EAC7C,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,yCAAyC;CAC9E;AACF;AAEA,eAAe,kCAAkC,UAA6B;CAC5E,MAAM,YAAY,QAAQ,yCAAyC;CAKnE,IAAI,MAAM,gBAAgB,SAAS,GAAG;EACpC,QAAQ,IACN,GAAG,OAAO,aAAa,uBAAuB,EAAE,mDAClD;EACA;CACF;CAGA,MAAM,qBAAqB,QAAQ,mBAAmB,CAAC;CACvD,MAAM,aAAa,WAAW,qBAAqB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,KAAK,EAAE,qDAAqD;CAKxF,MAAM,qBAAqB,QAAQ,8BAA8B,CAAC;CAElE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE;CAE9C,MAAM,aACJ,QAAQ,gCAAgC,aAAa,GACrD,yBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,KAAK,EAAE,4CAA4C,eACrE;CAIA,MAAM,qBAAqB,QAAQ,+BAA+B,CAAC;CACnE,MAAM,aACJ,QAAQ,2DAA2D,GACnE,2BACF;CACA,MAAM,aAAa,QAAQ,6BAA6B,GAAG,sBAAsB;CACjF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,uDAAuD;AAC1F;AAEA,eAAe,uBAAuB;CAIpC,MAAM,cAAc,QAAQ,6BAA6B;CAEzD,MAAM,eAAe;;;;;;;;;CAUrB,IAAI,MAAM,gBAAgB,WAAW,GAAG;EACtC,MAAM,UAAU,MAAM,aAAa,WAAW;EAE9C,IAAI,QAAQ,SAAS,8BAA8B,GAAG;GACpD,QAAQ,IAAI,GAAG,OAAO,aAAa,QAAQ,EAAE,wCAAwC;GAErF;EACF;EAOA,MAAM,aAAa,aAAa,GAFjB,QAAQ,SAAS,sBAAsB,IAAI,KAAK,gEAEnB,QAAQ,QAAQ,EAAE,MAAM,cAAc;EAElF,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iEACvB;EAEA;CACF;CAEA,MAAM,qBAAqB,QAAQ,kBAAkB,CAAC;CAEtD,MAAM,aACJ,aACA,8DAA8D,cAChE;CAEA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,gEAAgE;AACnG;AAEA,eAAe,sBAAsB;CAKnC,MAAM,eAAe,QAAQ,wCAAwC;CAErE,IAAI,MAAM,gBAAgB,YAAY,GAAG;EACvC,QAAQ,IACN,GAAG,OAAO,aAAa,gBAAgB,EAAE,wDAC3C;EAEA;CACF;CAIA,MAAM,qBAAqB,QAAQ,wBAAwB,CAAC;CAC5D,MAAM,aAAa,QAAQ,sCAAsC,GAAG,mBAAmB;CACvF,MAAM,aAAa,QAAQ,iCAAiC,GAAG,wBAAwB;CACvF,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oCAAoC;CAErE,MAAM,qBAAqB,QAAQ,mCAAmC,CAAC;CAOvE,MAAM,oBAAoB,GAAG,mBAAmB,EAAE;CAClD,MAAM,aACJ,QAAQ,qCAAqC,iBAAiB,GAC9D,uBACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,iDAAiD,mBACxE;CAKA,MAAM,qBAAqB,QAAQ,6BAA6B,CAAC;CACjE,MAAM,aACJ,QAAQ,gDAAgD,GACxD,uBACF;CACA,MAAM,aACJ,QAAQ,sCAAsC,GAC9C,4BACF;CACA,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,yCAAyC;CAE1E,MAAM,qBAAqB,QAAQ,wCAAwC,CAAC;CAE5E,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,EAAE;CACvD,MAAM,aACJ,QAAQ,0CAA0C,qBAAqB,GACvE,2BACF;CACA,QAAQ,IACN,GAAG,OAAO,MAAM,GAAG,EAAE,sDAAsD,uBAC7E;CAIA,MAAM,qBAAqB,QAAQ,qBAAqB,CAAC;CACzD,MAAM,aAAa,cAAc,kBAAkB;CACnD,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,oDAAoD;AACvF;AAEA,eAAe,2BAA2B,UAA6B;CACrE,MAAM,qBAAqB;CAC3B,MAAM,oBAAoB;AAC5B;;;;;;;;;;;;;;;AAgBA,eAAe,oBAAoB,WAAkC;CACnE,MAAM,eAAe,QAAQ,cAAc;CAE3C,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC;CAGF,MAAM,UAAU,MAAM,aAAa,YAAY;CAC/C,MAAM,aAAa,WAAW,UAAU;CAExC,IAAI,QAAQ,SAAS,UAAU,GAC7B;CAGF,MAAM,SAAS;CACf,IAAI;CAEJ,IAAI,QAAQ,SAAS,MAAM,GACzB,OAAO,QAAQ,QAAQ,QAAQ,GAAG,OAAO,IAAI,YAAY;MAEzD,OAAO,GAAG,WAAW,IAAI;CAG3B,MAAM,aAAa,cAAc,IAAI;CAErC,QAAQ,IAAI,GAAG,OAAO,MAAM,GAAG,EAAE,UAAU,UAAU,qBAAqB;AAC5E;AAEA,MAAa,cAcT;CACF,eAAe;EACb,aAAa;EACb,UAAU,CAAC,QAAQ,OAAO;EAC1B,cAAc;GACZ,eAAe;GACf,2BAA2B;GAC3B,uBAAuB;GACvB,yBAAyB;EAC3B;EACA,iBAAiB,EACf,+BAA+B,SACjC;EACA,QAAQ,EACN,iBAAiB,sBACnB;EACA,aAAa;CACf;CACA,OAAO;EACL,aACE;EACF,cAAc;GACZ,OAAO;GACP,aAAa;EACf;EACA,iBAAiB;GACf,gBAAgB;GAChB,oBAAoB;EACtB;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,MAAM;EACJ,aAAa;EACb,cAAc,EACZ,YAAY,SACd;EACA,iBAAiB,EACf,qBAAqB,SACvB;CACF;CACA,KAAK;EACH,aAAa;EACb,cAAc,EACZ,yBAAyB,YAC3B;CACF;CACA,SAAS;EACP,aAAa;EACb,cAAc,EACZ,SAAS,SACX;CACF;CACA,WAAW;EACT,aAAa;EACb,cAAc,EACZ,yBAAyB,SAC3B;CACF;CAGA,UAAU;EACR,aAAa;EACb,cAAc,EACZ,IAAI,UACN;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,QAAQ,SACV;CACF;CACA,OAAO;EACL,aAAa;EACb,cAAc,EACZ,OAAO,UACT;CACF;CACA,IAAI;EACF,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,wBAAwB;GACxB,iCAAiC;EACnC;CACF;CACA,MAAM;EACJ,aAAa;EACb,aAAa;EACb,QAAQ;GACN,MAAM;GACN,iBAAiB;GACjB,WAAW;GACX,cAAc;EAChB;EACA,iBAAiB;GACf,gBAAgB;GAChB,MAAM;GACN,QAAQ;GACR,uBAAuB;EACzB;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc;GACZ,sBAAsB;GACtB,SAAS;EACX;EACA,iBAAiB,EACf,kBAAkB,UACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,QAAQ;EACN,aAAa;EACb,cAAc,EACZ,aAAa,SACf;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,eAAe;EACb,aACE;EAIF,UAAU,CAAC,MAAM;EACjB,cAAc;GACZ,6BAA6B;GAC7B,oBAAoB;EACtB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,QAAQ;EACN,aACE;EACF,cAAc,EACZ,sBAAsB,SACxB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;EACA,aAAa;CACf;CACA,IAAI;EACF,aAAa;EACb,cAAc,EACZ,kBAAkB,SACpB;EACA,aAAa;GACX,SAAS;GACT,MAAM;EACR;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,gBAAgB;EACd,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;CACF;CACA,cAAc;EACZ,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,0BAA0B,SAC5B;CACF;CACA,aAAa;EACX,aAAa;EACb,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,yBAAyB,SAC3B;CACF;CACA,YAAY;EACV,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,wBAAwB,SAC1B;EACA,mBAAmB,oBAAoB,sBAAsB;CAC/D;CACA,eAAe;EACb,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,2BAA2B,SAC7B;EACA,mBAAmB,oBAAoB,yBAAyB;CAClE;CACA,gBAAgB;EACd,aACE;EACF,UAAU,CAAC,IAAI;EACf,cAAc,EACZ,4BAA4B,SAC9B;EACA,mBAAmB,oBAAoB,0BAA0B;CACnE;AACF;AAEA,MAAa,kBAAkB,OAAO,KAAK,WAAW;AAEtD,SAAS,gBAAgB,UAAoB,0BAAU,IAAI,IAAY,GAAa;CAClF,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,IAAI,OAAO,GAAG;EAC1B,QAAQ,IAAI,OAAO;EAEnB,MAAM,MAAM,YAAY;EAExB,IAAI,IAAI,UAAU,QAChB,SAAS,KAAK,GAAG,gBAAgB,IAAI,UAAU,OAAO,CAAC;EAGzD,SAAS,KAAK,OAAO;CACvB;CAEA,OAAO;AACT;AAEA,eAAsB,iBAAiB,SAA4B;CACjE,MAAM,WAAW,QAAQ;CACzB,MAAM,EAAE,gBAAgB,MAAM,cAAc,QAAQ;CAEpD,IAAI,MAAM;EACR,QAAQ,IAAI,qBAAqB;EAEjC,KAAK,MAAM,WAAW,iBACpB,QAAQ,IACN,KAAK,OAAO,aAAa,OAAO,EAAE,IAAI,OAAO,MAAM,YAAY,QAAQ,CAAC,WAAW,GACrF;EAGF,QAAQ,KAAK,CAAC;CAChB;CAEA,iBAAiB,QAAQ;CAEzB,MAAM,mBAAmB,gBAAgB,QAAQ;CAEjD,MAAM,eAAuC,CAAC;CAC9C,MAAM,kBAA0C,CAAC;CACjD,MAAM,eAAkE,CAAC;CACzE,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,OAAO,OAAO,cAAc,gBAAgB,YAAY;EACxD,IAAI,gBAAgB,iBAClB,OAAO,OAAO,iBAAiB,gBAAgB,eAAe;EAGhE,IAAI,gBAAgB,aAClB,aAAa,gBAAgB,YAAY,QAAQ,gBAAgB;EAGnE,IAAI,gBAAgB,QAClB,OAAO,OAAO,SAAS,gBAAgB,MAAM;CAEjD;CAKA,MAAM,mBAAmB,MAAM,kBAAkB;CACjD,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,WAAW,WAAW,cAAc,GACtC,aAAa,cAAc;CAI/B,MAAM,qBAAqB,MAAM,iBAAiB,SAAS,cAAc,CAAC;CAG1E,mBAAmB,eAAe,mBAAmB,gBAAgB,CAAC;CACtE,mBAAmB,kBAAkB,mBAAmB,mBAAmB,CAAC;CAG5E,KAAK,MAAM,cAAc,OAAO,KAAK,YAAY,GAC/C,IAAI,mBAAmB,aAAa,aAAa;EAC/C,QAAQ,IAAI,GAAG,OAAO,aAAa,UAAU,EAAE,mCAAmC;EAClF,OAAO,aAAa;CACtB;CAGF,KAAK,MAAM,iBAAiB,OAAO,KAAK,eAAe,GACrD,IAAI,mBAAmB,gBAAgB,gBAAgB;EACrD,QAAQ,IAAI,GAAG,OAAO,aAAa,aAAa,EAAE,mCAAmC;EACrF,OAAO,gBAAgB;CACzB;CAGF,IAAI,WACF,MAAM,mBAAmB,cAAc,eAAe;MAEtD,MAAM,oBAAoB,gBAA8C,cAAc,eAAe;CAGvG,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,YAAY,GAAG;EACzD,IAAI,MAAM,gBAAgB,QAAQ,UAAU,KAAK,IAAI,CAAC,GAAG;GACvD,QAAQ,IAAI,GAAG,OAAO,aAAa,IAAI,EAAE,oCAAoC;GAC7E;EACF;EAEA,QAAQ,IAAI,YAAY,OAAO,QAAQ,IAAI,EAAE,WAAW;EAExD,MAAM,aAAa,QAAQ,UAAU,KAAK,IAAI,GAAG,OAAO,OAAO;EAE/D,QAAQ,IAAI,GAAG,OAAO,MAAM,IAAI,EAAE,6BAA6B;CACjE;CAGA,KAAK,MAAM,WAAW,kBAAkB;EACtC,MAAM,kBAAkB,YAAY;EACpC,IAAI,gBAAgB,aAClB,MAAM,gBAAgB,YAAY,OAAO;CAE7C;CAEA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG;EACnC,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAC/E,MAAM,kBAAkB,SAAS,cAAc;EAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;EAC1D,YAAY,UAAU;GAAE,GAAI,YAAY,WAAW,CAAC;GAAI,GAAG;EAAQ;EACnE,MAAM,iBAAiB,iBAAiB,WAAW;EAEnD,QAAQ,IAAI,8BAA8B,OAAO,MAAM,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;CAC3F;AACF;;;;;AAMA,eAAe,oBACb,gBACA,cACA,iBACA;CAEA,MAAM,wBAAwB,cAAc,kBAAmB,MAAM,qBAAqB,CAAE;CAE5F,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,SAAS,GAAG;EACxC,QAAQ,IAAI,2BAA2B,OAAO,QAAQ,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG;EAE7F,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,GAAG,KAAK;GAC1E,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,uCAAuC,OAAO,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,GAC1F;CACF;CAEA,IAAI,OAAO,KAAK,eAAe,CAAC,CAAC,SAAS,GAAG;EAC3C,QAAQ,IACN,+BAA+B,OAAO,QAAQ,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACvF;EAEA,SAAS,GAAG,sBAAsB,GAAG,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM;GAChF,KAAK,QAAQ,IAAI;GACjB,OAAO;EACT,CAAC;EAED,QAAQ,IACN,2CAA2C,OAAO,MAAM,OAAO,KAAK,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,GACjG;CACF;AACF;;;;;;AAOA,eAAe,mBACb,cACA,iBACA;CACA,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,eAAe,CAAC,CAAC,WAAW,GACpF;CAGF,MAAM,kBAAkB,SAAS,cAAc;CAC/C,MAAM,cAAc,MAAM,iBAAiB,eAAe;CAE1D,YAAY,eAAe,YAAY,gBAAgB,CAAC;CACxD,YAAY,kBAAkB,YAAY,mBAAmB,CAAC;CAE9D,OAAO,OAAO,YAAY,cAAc,YAAY;CACpD,OAAO,OAAO,YAAY,iBAAiB,eAAe;CAE1D,MAAM,iBAAiB,iBAAiB,WAAW;CAEnD,MAAM,WAAW,CAAC,GAAG,OAAO,KAAK,YAAY,GAAG,GAAG,OAAO,KAAK,eAAe,CAAC;CAE/E,QAAQ,IACN,YAAY,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,oDAChD;AACF;AAEA,SAAS,iBAAiB,UAAoB;CAC5C,KAAK,MAAM,WAAW,UACpB,IAAI,CAAC,gBAAgB,SAAS,OAAO,GAAG;EACtC,QAAQ,IACN,WAAW,OAAO,UAAU,OAAO,EAAE,yCAAyC,OAAO,MAAM,gBAAgB,KAAK,IAAI,CAAC,GACvH;EACA,QAAQ,KAAK,CAAC;CAChB;AAEJ"}

package/esm/generations/stubs.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/generations/stubs.ts
+//#region ../core/src/generations/stubs.ts
 const accessConfigStub = `import { type AccessConfigurations } from "@warlock.js/access";
 import { DatabaseAccessResolver } from "app/access/services/access-resolver";
 

package/esm/generations/stubs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/generations/stubs.ts"],"sourcesContent":["export const accessConfigStub = `import { type AccessConfigurations } from \"@warlock.js/access\";\r\nimport { DatabaseAccessResolver } from \"app/access/services/access-resolver\";\r\n\r\n/**\r\n * Authorization configuration — read by @warlock.js/access on boot.\r\n *\r\n * The resolver is the one required piece: it tells the engine how to read a\r\n * user's roles + permissions. The ejected DatabaseAccessResolver reads roles\r\n * from the user_roles table and maps them through the roles catalog table (so\r\n * roles + their permissions are managed at runtime, in the DB).\r\n *\r\n * For a fixed, code-defined catalog with no tables, swap in DefaultAccessResolver:\r\n *   import { DefaultAccessResolver } from \"@warlock.js/access\";\r\n *   resolver: new DefaultAccessResolver({ admin: [\"*\"], editor: [\"orders.*\"] }),\r\n *\r\n * Multi-tenant? Add a \\`resolveTenant()\\` to the resolver to read the active\r\n * tenant from the request; checks then scope to it automatically.\r\n */\r\nconst access: AccessConfigurations = {\r\n  resolver: new DatabaseAccessResolver(),\r\n\r\n  // Cache resolved permission sets (default \"10m\").\r\n  // cache: { ttl: \"10m\" },\r\n};\r\n\r\nexport default access;\r\n`;\r\n\r\nexport const aiConfigStub = `import type { AIConfig } from \"@warlock.js/ai\";\r\n\r\n// >>> warlock:ai-packages (auto-managed) >>>\r\n// Satellite packages augment the \"ai\" object on import — e.g. ai.workspace,\r\n// ai.tools / ai.mcp, and panoptic's ai.config({ panoptic }) wiring. The command\r\n// \"warlock add ai-workspace | ai-tools | ai-panoptic\" adds the matching\r\n// side-effect import below; keep them so the augmentation + runtime registration\r\n// load before the ai connector applies this config.\r\n// <<< warlock:ai-packages <<<\r\n\r\n/**\r\n * AI configuration — applied on boot by the ai connector, which calls\r\n * ai.config(...) with the object below. Cross-cutting defaults live here\r\n * (shared cache / snapshot stores, observability); per-call options always win.\r\n *\r\n * Wire a default model from a provider you installed, e.g.:\r\n *   import { OpenAISDK } from \"@warlock.js/ai-openai\";\r\n *   const openai = OpenAISDK({ apiKey: env(\"OPENAI_API_KEY\") });\r\n *   // then pass openai.model({ name: \"gpt-4o-mini\" }) into your agents.\r\n */\r\nconst ai: Partial<AIConfig> = {\r\n  // Default cache driver for cache-backed AI features (semantic cache, rag / memory vector stores).\r\n  // defaultStore: cache.driver(\"redis\", { client }),\r\n\r\n  // Observability — requires \"warlock add ai-panoptic\". Exporters + the local dashboard.\r\n  // panoptic: { exporters: [], dashboard: false, observeAll: false },\r\n};\r\n\r\nexport default ai;\r\n`;\r\n\r\nexport const accessRoleModelStub = `import { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the roles catalog — mirrors the migration columns\r\n * (snake_case). Each row is a role name plus the permission strings it grants;\r\n * wildcards work (\"orders.*\", \"*\"). The DatabaseAccessResolver maps a user's\r\n * assigned role names through this table to their effective permissions.\r\n */\r\nexport const roleSchema = v.object({\r\n  name: v.string(),\r\n  permissions: v.array(v.string()).default([]),\r\n});\r\n\r\nexport type RoleSchema = Infer<typeof roleSchema>;\r\n\r\n/**\r\n * The roles catalog — role name → the permissions it grants. Managed at runtime\r\n * (admins add roles + edit their permissions), unlike a fixed code map. Read by\r\n * DatabaseAccessResolver.resolvePermissions to expand a user's roles to permissions.\r\n */\r\n@RegisterModel()\r\nexport class Role extends Model<RoleSchema> {\r\n  public static table = \"roles\";\r\n\r\n  public static schema = roleSchema;\r\n\r\n  /** The permission strings this role grants. */\r\n  public get permissions(): string[] {\r\n    return this.get<string[]>(\"permissions\", []);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessRoleModelIndexStub = `export * from \"./role.model\";\r\n`;\r\n\r\nexport const accessRoleMigrationStub = `import { arrayText, Migration, text } from \"@warlock.js/cascade\";\r\nimport { Role } from \"../role.model\";\r\n\r\n/**\r\n * Roles catalog table. \\`name\\` is unique (one row per role); \\`permissions\\` is a\r\n * text array of the permission strings the role grants.\r\n */\r\nexport default Migration.create(Role, {\r\n  name: text().notNullable().unique(),\r\n  permissions: arrayText().nullable(),\r\n});\r\n`;\r\n\r\nexport const accessUserRoleModelStub = `import { access } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for a role assignment — mirrors the migration columns\r\n * (snake_case). \\`tenant\\` is nullable: a null tenant is a GLOBAL assignment.\r\n */\r\nexport const userRoleSchema = v.object({\r\n  user_id: v.string(),\r\n  user_type: v.string(),\r\n  role: v.string(),\r\n  tenant: v.string().optional(),\r\n});\r\n\r\nexport type UserRoleSchema = Infer<typeof userRoleSchema>;\r\n\r\n/**\r\n * The role-assignment table — which roles a user holds, optionally per tenant.\r\n * Read by DatabaseAccessResolver.resolveRoles; mutated via the statics below.\r\n * \\`assign\\` / \\`revoke\\` flush the cached permission set automatically, so callers\r\n * never need to call \\`access.flush(user, tenant)\\` themselves.\r\n */\r\n@RegisterModel()\r\nexport class UserRole extends Model<UserRoleSchema> {\r\n  public static table = \"user_roles\";\r\n\r\n  public static schema = userRoleSchema;\r\n\r\n  /**\r\n   * Role names assigned to the user in the given tenant.\r\n   *\r\n   * An unresolved tenant (\\`undefined\\`) scopes to GLOBAL roles only — the rows\r\n   * stored with no tenant (\\`null\\`) — never the union across every tenant. The\r\n   * union would be a privilege-escalation: a user who is \\`owner\\` in one tenant\r\n   * must not be treated as \\`owner\\` everywhere just because a check didn't carry\r\n   * a tenant. This mirrors how \\`assign(user, role)\\` stores a global row.\r\n   */\r\n  public static async rolesFor(user: Auth, tenant?: string): Promise<string[]> {\r\n    const rows = await this.query()\r\n      .where({\r\n        user_id: user.id,\r\n        user_type: user.userType,\r\n        tenant: tenant ?? null,\r\n      })\r\n      .get();\r\n\r\n    // De-dupe so a duplicate row (a concurrent assign that slipped past the\r\n    // existence check) can't distort the resolved set.\r\n    return [...new Set(rows.map((row) => row.get(\"role\") as string))];\r\n  }\r\n\r\n  /**\r\n   * Assign a role to the user. No-op if the assignment already exists.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async assign(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    const existing = await this.first({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    if (existing) return;\r\n\r\n    await this.create({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n\r\n  /**\r\n   * Remove a role assignment from the user.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async revoke(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    await this.delete({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessUserRoleModelIndexStub = `export * from \"./user-role.model\";\r\n`;\r\n\r\nexport const accessUserRoleMigrationStub = `import { Migration, text, uuid } from \"@warlock.js/cascade\";\r\nimport { UserRole } from \"../user-role.model\";\r\n\r\n/**\r\n * Role-assignment table. \\`user_id\\` is a UUID — override this migration if your\r\n * user ids are integers. The composite index powers the per-user (per-tenant)\r\n * lookup the resolver runs on every check.\r\n */\r\nexport default Migration.create(\r\n  UserRole,\r\n  {\r\n    user_id: uuid().notNullable().index(),\r\n    user_type: text().notNullable(),\r\n    role: text().notNullable().index(),\r\n    tenant: text().nullable().index(),\r\n  },\r\n  {\r\n    index: [{ columns: [\"user_id\", \"user_type\", \"tenant\"] }],\r\n  },\r\n);\r\n`;\r\n\r\nexport const accessResolverStub = `import type { AccessResolver } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Role } from \"app/access/models/role\";\r\nimport { UserRole } from \"app/access/models/user-role\";\r\n\r\n/**\r\n * The app's access adapter — connects @warlock.js/access to the ejected role\r\n * tables. Roles come from the user_roles assignment table; permissions are\r\n * expanded by mapping those role names through the roles catalog table. Both\r\n * are managed at runtime (in the DB), so admins can add roles + edit their\r\n * permissions without a deploy.\r\n *\r\n * The engine owns the hard parts (wildcard matching, caching, fail-closed); this\r\n * resolver only fetches — keep it dumb, never cache inside it.\r\n */\r\nexport class DatabaseAccessResolver implements AccessResolver {\r\n  /** The role names this user holds (powers \\`hasRole\\` / \\`hasAnyRole\\`). */\r\n  public async resolveRoles(user: Auth, tenant?: string): Promise<string[]> {\r\n    return UserRole.rolesFor(user, tenant);\r\n  }\r\n\r\n  /** The effective permission strings this user has (powers \\`can\\` / \\`authorize\\`). */\r\n  public async resolvePermissions(user: Auth, tenant?: string): Promise<string[]> {\r\n    const names = await this.resolveRoles(user, tenant);\r\n\r\n    if (names.length === 0) return [];\r\n\r\n    const roles = await Role.query().whereIn(\"name\", names).get();\r\n\r\n    // Flatten + de-dupe so two roles granting the same permission yield one entry.\r\n    return [...new Set(roles.flatMap((role) => role.permissions))];\r\n  }\r\n\r\n  /**\r\n   * Optional. Resolve the ambient tenant when a check doesn't pass one\r\n   * explicitly — derive it from the authenticated user (safer than reading\r\n   * client request input, which a caller could spoof). Uncomment + adapt for a\r\n   * multi-tenant app (single-tenant apps leave this off and return undefined).\r\n   */\r\n  // public resolveTenant(user: Auth): string | undefined {\r\n  //   return user.get(\"organization_id\");\r\n  // }\r\n}\r\n`;\r\n\r\nexport const socketConfigStub = `import type { SocketOptions } from \"@warlock.js/core\";\r\n\r\n/**\r\n * Socket.IO configuration — read by the framework's socket connector\r\n * on boot. When the HTTP server is running the socket server attaches\r\n * to it; otherwise it listens on its own configured port.\r\n *\r\n * Remove this file to disable the socket server entirely.\r\n */\r\nexport default {\r\n  options: {\r\n    cors: {\r\n      origin: \"*\",\r\n    },\r\n  },\r\n} as SocketOptions;\r\n`;\r\n\r\nexport const communicatorsConfigStub = `import { env } from \"@mongez/dotenv\";\r\nimport type { BrokerConfigurations, RabbitMQClientOptions } from \"@warlock.js/herald\";\r\n\r\nconst heraldConfigurations: BrokerConfigurations<RabbitMQClientOptions> = {\r\n  driver: \"rabbitmq\",\r\n  name: \"default\",\r\n  isDefault: true,\r\n\r\n  // ============================================================================\r\n  // Connection Settings\r\n  // ============================================================================\r\n\r\n  host: env(\"RABBITMQ_HOST\", \"localhost\"),\r\n  port: env(\"RABBITMQ_PORT\", 5672),\r\n  username: env(\"RABBITMQ_USERNAME\", \"guest\"),\r\n  password: env(\"RABBITMQ_PASSWORD\", \"guest\"),\r\n  vhost: env(\"RABBITMQ_VHOST\", \"/\"),\r\n\r\n  // Or use connection URI (takes precedence over host/port)\r\n  // uri: env(\"RABBITMQ_URL\"),\r\n\r\n  // ============================================================================\r\n  // Connection Options\r\n  // ============================================================================\r\n\r\n  /** Heartbeat interval in seconds */\r\n  heartbeat: 60,\r\n\r\n  /** Connection timeout in milliseconds */\r\n  connectionTimeout: 10000,\r\n\r\n  /** Enable automatic reconnection on disconnect */\r\n  reconnect: true,\r\n\r\n  /** Delay between reconnection attempts in milliseconds */\r\n  reconnectDelay: 5_000,\r\n\r\n  // ============================================================================\r\n  // Consumer Options\r\n  // ============================================================================\r\n\r\n  /** Default prefetch count (number of unacknowledged messages per consumer) */\r\n  prefetch: 10,\r\n\r\n  // ============================================================================\r\n  // Client Options (Native amqplib options)\r\n  // ============================================================================\r\n  // These options are passed directly to amqplib.connect()\r\n  // for low-level configuration like frame size, TLS, socket options, etc.\r\n  // ============================================================================\r\n  clientOptions: {\r\n    // Frame max size in bytes (0 = no limit)\r\n    // frameMax: 0,\r\n\r\n    // Channel max (0 = unlimited)\r\n    // channelMax: 0,\r\n\r\n    // Socket options\r\n    socket: {\r\n      // Enable TCP keep-alive\r\n      keepAlive: true,\r\n\r\n      // Disable Nagle's algorithm for lower latency\r\n      noDelay: true,\r\n\r\n      // Socket timeout (in addition to heartbeat)\r\n      // timeout: 30000,\r\n    },\r\n\r\n    // TLS/SSL options (uncomment for secure connections)\r\n    // socket: {\r\n    //   ca: fs.readFileSync('/path/to/ca.pem'),\r\n    //   cert: fs.readFileSync('/path/to/cert.pem'),\r\n    //   key: fs.readFileSync('/path/to/key.pem'),\r\n    //   rejectUnauthorized: true,\r\n    // },\r\n  },\r\n};\r\n\r\nexport default heraldConfigurations;\r\n`;\r\n\r\nexport const notificationsConfigStub = `import { type NotificationConfig, inApp, mailChannel } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"app/notifications/notification.model\";\r\n\r\n/**\r\n * Notifications configuration. Auto-loaded from src/config on boot — the\r\n * framework's notifications connector reads this default export and hands it to\r\n * setNotificationConfig, so this file stays declarative (no side-effect call).\r\n *\r\n * Each channel is payload-typed, so notify.mail(...) / notify.database(...)\r\n * and defineNotification are type-checked against the registry.\r\n *\r\n * Channels enabled here:\r\n *   - mail     wraps @warlock.js/core sendMail; route is notifiable.email.\r\n *              The \"from\" address defaults to config/mail.ts; override per\r\n *              channel with mailChannel({ from: \"no-reply@yourapp.com\" }).\r\n *   - database in-app store backed by the Notification model. The \"inApp\"\r\n *              facade exposes the recipient-scoped read API: listUnread,\r\n *              countUnread, markAsRead, dismiss, ...\r\n *\r\n * Async delivery (.queue()) is OPTIONAL: run \"npx warlock add herald\",\r\n * import { heraldQueue } from \"@warlock.js/notifications\", and uncomment the\r\n * queue line below.\r\n */\r\nconst config: NotificationConfig = {\r\n  channels: {\r\n    mail: mailChannel(),\r\n    database: inApp.configure({ model: Notification }),\r\n  },\r\n\r\n  // Async queue — requires @warlock.js/herald (npx warlock add herald):\r\n  // queue: heraldQueue(),\r\n};\r\n\r\nexport default config;\r\n`;\r\n\r\nexport const notificationModelStub = `import { RegisterModel } from \"@warlock.js/cascade\";\r\nimport { DatabaseNotification, type NotificationColumnMap } from \"@warlock.js/notifications\";\r\nimport { v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the notifications table — mirrors the migration\r\n * columns (snake_case). Cascade validates + casts every write against it:\r\n * nullable columns use .nullish() (may be absent or null), and payload is\r\n * free-form JSON. Keep this in sync with the migration + columnMap when you\r\n * add or rename columns.\r\n */\r\nconst notificationSchema = v.object({\r\n  user_id: v.string(),\r\n  type: v.string(),\r\n  title: v.string(),\r\n  body: v.string().nullish(),\r\n  payload: v.record(v.any()).nullish(),\r\n  read_at: v.date().nullish(),\r\n  idempotency_key: v.string().nullish(),\r\n});\r\n\r\n/**\r\n * In-app notification model.\r\n *\r\n * Extends the package's DatabaseNotification base, which provides the stable\r\n * accessors (recipientId, tenantId, isRead, readAt, markRead) — all derived\r\n * from the columnMap below. The read/write API lives on the inApp facade\r\n * (configured in config/notifications.ts); you rarely touch this class directly.\r\n */\r\n@RegisterModel()\r\nexport class Notification extends DatabaseNotification {\r\n  public static table = \"notifications\";\r\n  public static schema = notificationSchema;\r\n\r\n  /**\r\n   * Maps the in-app store's roles to your columns. This default is\r\n   * single-tenant + read_at-only. Add tenant: \"organization_id\" for\r\n   * multi-tenant; use isRead: \"is_read\" (instead of, or alongside, readAt) to\r\n   * track a boolean read flag. The migration + accessors all follow this map.\r\n   */\r\n  public static columnMap: NotificationColumnMap = { readAt: \"read_at\" };\r\n}\r\n`;\r\n\r\nexport const notificationMigrationStub = `import { Migration } from \"@warlock.js/cascade\";\r\nimport { notificationColumns } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"../notification.model\";\r\n\r\n/**\r\n * Notifications table.\r\n *\r\n * Columns come from notificationColumns(Notification) — the recipient / tenant\r\n * / read-state names follow the model's columnMap; type / title / body /\r\n * payload / idempotency_key are fixed. Spread it to add your own columns\r\n * (remember to mirror them in the model schema):\r\n *\r\n *   import { uuid } from \"@warlock.js/cascade\";\r\n *\r\n *   export default Migration.create(Notification, {\r\n *     ...notificationColumns(Notification),\r\n *     // category_id: uuid().index().nullable(),\r\n *   });\r\n */\r\nexport default Migration.create(Notification, notificationColumns(Notification));\r\n`;\r\n\r\nexport const notificationControllersStub = `import { type Request, type RequestHandler, type Response } from \"@warlock.js/core\";\r\nimport { inApp } from \"@warlock.js/notifications\";\r\n\r\n/**\r\n * The authenticated user's notification HTTP surface — thin wrappers over the\r\n * recipient-scoped \\`inApp\\` facade (a foreign id can never touch another user's\r\n * rows). Notifications are produced by domain events, never over HTTP, so there\r\n * is no create. Trim or split these as your app grows.\r\n */\r\n\r\n/** GET /notifications — list, most recent first (page / limit / type / unread via query). */\r\nexport const listNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const { data, pagination } = await inApp.list(request.user!, request.all());\r\n\r\n  return response.success({ notifications: data, pagination });\r\n};\r\n\r\nlistNotificationsController.description = \"List notifications\";\r\n\r\n/** GET /notifications/unread-count — drives the bell badge. */\r\nexport const unreadNotificationsCountController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.countUnread(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nunreadNotificationsCountController.description = \"Unread notifications count\";\r\n\r\n/** PATCH /notifications/:id/read — mark one read, return the updated row. */\r\nexport const markNotificationReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const id = request.input(\"id\");\r\n\r\n  await inApp.markAsRead(request.user!, id);\r\n  const notification = await inApp.find(request.user!, id);\r\n\r\n  return response.success({ notification });\r\n};\r\n\r\nmarkNotificationReadController.description = \"Mark notification read\";\r\n\r\n/** PATCH /notifications/read-all — mark every unread one read. */\r\nexport const markAllNotificationsReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.markAsRead(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nmarkAllNotificationsReadController.description = \"Mark all notifications read\";\r\n\r\n/** DELETE /notifications — dismiss all for the user. */\r\nexport const clearNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!);\r\n\r\n  return response.noContent();\r\n};\r\n\r\nclearNotificationsController.description = \"Clear notifications\";\r\n\r\n/** DELETE /notifications/:id — dismiss one. */\r\nexport const deleteNotificationController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!, request.input(\"id\"));\r\n\r\n  return response.noContent();\r\n};\r\n\r\ndeleteNotificationController.description = \"Delete notification\";\r\n`;\r\n\r\nexport const notificationRoutesStub = `import { authMiddleware } from \"@warlock.js/auth\";\r\nimport { router } from \"@warlock.js/core\";\r\nimport {\r\n  clearNotificationsController,\r\n  deleteNotificationController,\r\n  listNotificationsController,\r\n  markAllNotificationsReadController,\r\n  markNotificationReadController,\r\n  unreadNotificationsCountController,\r\n} from \"./controllers/notifications.controller\";\r\n\r\n/**\r\n * Notification routes — the authenticated user's read + dismiss surface.\r\n *\r\n * Notifications are produced by domain events (never created over HTTP), so\r\n * there is no POST. Every route is gated by \\`authMiddleware\\` and recipient-\r\n * scoped by \\`inApp\\` (a foreign id touches zero rows). Delete any endpoint you\r\n * don't need; if your app reads notifications over sockets/GraphQL instead,\r\n * delete this file + the controllers entirely.\r\n */\r\nrouter.group({ prefix: \"/notifications\", middleware: [authMiddleware([])] }, () => {\r\n  router.get(\"/\", listNotificationsController);\r\n  router.get(\"/unread-count\", unreadNotificationsCountController);\r\n  router.patch(\"/read-all\", markAllNotificationsReadController);\r\n  router.patch(\"/:id/read\", markNotificationReadController);\r\n  router.delete(\"/\", clearNotificationsController);\r\n  router.delete(\"/:id\", deleteNotificationController);\r\n});\r\n`;\r\n"],"mappings":";AAAA,MAAa,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,MAAa,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+B5B,MAAa,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCnC,MAAa,2BAA2B;;AAGxC,MAAa,0BAA0B;;;;;;;;;;;;AAavC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FvC,MAAa,+BAA+B;;AAG5C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;AAsB3C,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ClC,MAAa,mBAAmB;;;;;;;;;;;;;;;;;AAkBhC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CrC,MAAa,4BAA4B;;;;;;;;;;;;;;;;;;;;;AAsBzC,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsF3C,MAAa,yBAAyB"}
+{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../../../../../core/src/generations/stubs.ts"],"sourcesContent":["export const accessConfigStub = `import { type AccessConfigurations } from \"@warlock.js/access\";\r\nimport { DatabaseAccessResolver } from \"app/access/services/access-resolver\";\r\n\r\n/**\r\n * Authorization configuration — read by @warlock.js/access on boot.\r\n *\r\n * The resolver is the one required piece: it tells the engine how to read a\r\n * user's roles + permissions. The ejected DatabaseAccessResolver reads roles\r\n * from the user_roles table and maps them through the roles catalog table (so\r\n * roles + their permissions are managed at runtime, in the DB).\r\n *\r\n * For a fixed, code-defined catalog with no tables, swap in DefaultAccessResolver:\r\n *   import { DefaultAccessResolver } from \"@warlock.js/access\";\r\n *   resolver: new DefaultAccessResolver({ admin: [\"*\"], editor: [\"orders.*\"] }),\r\n *\r\n * Multi-tenant? Add a \\`resolveTenant()\\` to the resolver to read the active\r\n * tenant from the request; checks then scope to it automatically.\r\n */\r\nconst access: AccessConfigurations = {\r\n  resolver: new DatabaseAccessResolver(),\r\n\r\n  // Cache resolved permission sets (default \"10m\").\r\n  // cache: { ttl: \"10m\" },\r\n};\r\n\r\nexport default access;\r\n`;\r\n\r\nexport const aiConfigStub = `import type { AIConfig } from \"@warlock.js/ai\";\r\n\r\n// >>> warlock:ai-packages (auto-managed) >>>\r\n// Satellite packages augment the \"ai\" object on import — e.g. ai.workspace,\r\n// ai.tools / ai.mcp, and panoptic's ai.config({ panoptic }) wiring. The command\r\n// \"warlock add ai-workspace | ai-tools | ai-panoptic\" adds the matching\r\n// side-effect import below; keep them so the augmentation + runtime registration\r\n// load before the ai connector applies this config.\r\n// <<< warlock:ai-packages <<<\r\n\r\n/**\r\n * AI configuration — applied on boot by the ai connector, which calls\r\n * ai.config(...) with the object below. Cross-cutting defaults live here\r\n * (shared cache / snapshot stores, observability); per-call options always win.\r\n *\r\n * Wire a default model from a provider you installed, e.g.:\r\n *   import { OpenAISDK } from \"@warlock.js/ai-openai\";\r\n *   const openai = OpenAISDK({ apiKey: env(\"OPENAI_API_KEY\") });\r\n *   // then pass openai.model({ name: \"gpt-4o-mini\" }) into your agents.\r\n */\r\nconst ai: Partial<AIConfig> = {\r\n  // Default cache driver for cache-backed AI features (semantic cache, rag / memory vector stores).\r\n  // defaultStore: cache.driver(\"redis\", { client }),\r\n\r\n  // Observability — requires \"warlock add ai-panoptic\". Exporters + the local dashboard.\r\n  // panoptic: { exporters: [], dashboard: false, observeAll: false },\r\n};\r\n\r\nexport default ai;\r\n`;\r\n\r\nexport const accessRoleModelStub = `import { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the roles catalog — mirrors the migration columns\r\n * (snake_case). Each row is a role name plus the permission strings it grants;\r\n * wildcards work (\"orders.*\", \"*\"). The DatabaseAccessResolver maps a user's\r\n * assigned role names through this table to their effective permissions.\r\n */\r\nexport const roleSchema = v.object({\r\n  name: v.string(),\r\n  permissions: v.array(v.string()).default([]),\r\n});\r\n\r\nexport type RoleSchema = Infer<typeof roleSchema>;\r\n\r\n/**\r\n * The roles catalog — role name → the permissions it grants. Managed at runtime\r\n * (admins add roles + edit their permissions), unlike a fixed code map. Read by\r\n * DatabaseAccessResolver.resolvePermissions to expand a user's roles to permissions.\r\n */\r\n@RegisterModel()\r\nexport class Role extends Model<RoleSchema> {\r\n  public static table = \"roles\";\r\n\r\n  public static schema = roleSchema;\r\n\r\n  /** The permission strings this role grants. */\r\n  public get permissions(): string[] {\r\n    return this.get<string[]>(\"permissions\", []);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessRoleModelIndexStub = `export * from \"./role.model\";\r\n`;\r\n\r\nexport const accessRoleMigrationStub = `import { arrayText, Migration, text } from \"@warlock.js/cascade\";\r\nimport { Role } from \"../role.model\";\r\n\r\n/**\r\n * Roles catalog table. \\`name\\` is unique (one row per role); \\`permissions\\` is a\r\n * text array of the permission strings the role grants.\r\n */\r\nexport default Migration.create(Role, {\r\n  name: text().notNullable().unique(),\r\n  permissions: arrayText().nullable(),\r\n});\r\n`;\r\n\r\nexport const accessUserRoleModelStub = `import { access } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Model, RegisterModel } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for a role assignment — mirrors the migration columns\r\n * (snake_case). \\`tenant\\` is nullable: a null tenant is a GLOBAL assignment.\r\n */\r\nexport const userRoleSchema = v.object({\r\n  user_id: v.string(),\r\n  user_type: v.string(),\r\n  role: v.string(),\r\n  tenant: v.string().optional(),\r\n});\r\n\r\nexport type UserRoleSchema = Infer<typeof userRoleSchema>;\r\n\r\n/**\r\n * The role-assignment table — which roles a user holds, optionally per tenant.\r\n * Read by DatabaseAccessResolver.resolveRoles; mutated via the statics below.\r\n * \\`assign\\` / \\`revoke\\` flush the cached permission set automatically, so callers\r\n * never need to call \\`access.flush(user, tenant)\\` themselves.\r\n */\r\n@RegisterModel()\r\nexport class UserRole extends Model<UserRoleSchema> {\r\n  public static table = \"user_roles\";\r\n\r\n  public static schema = userRoleSchema;\r\n\r\n  /**\r\n   * Role names assigned to the user in the given tenant.\r\n   *\r\n   * An unresolved tenant (\\`undefined\\`) scopes to GLOBAL roles only — the rows\r\n   * stored with no tenant (\\`null\\`) — never the union across every tenant. The\r\n   * union would be a privilege-escalation: a user who is \\`owner\\` in one tenant\r\n   * must not be treated as \\`owner\\` everywhere just because a check didn't carry\r\n   * a tenant. This mirrors how \\`assign(user, role)\\` stores a global row.\r\n   */\r\n  public static async rolesFor(user: Auth, tenant?: string): Promise<string[]> {\r\n    const rows = await this.query()\r\n      .where({\r\n        user_id: user.id,\r\n        user_type: user.userType,\r\n        tenant: tenant ?? null,\r\n      })\r\n      .get();\r\n\r\n    // De-dupe so a duplicate row (a concurrent assign that slipped past the\r\n    // existence check) can't distort the resolved set.\r\n    return [...new Set(rows.map((row) => row.get(\"role\") as string))];\r\n  }\r\n\r\n  /**\r\n   * Assign a role to the user. No-op if the assignment already exists.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async assign(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    const existing = await this.first({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    if (existing) return;\r\n\r\n    await this.create({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n\r\n  /**\r\n   * Remove a role assignment from the user.\r\n   * Flushes the user's cached permission set automatically.\r\n   */\r\n  public static async revoke(user: Auth, role: string, tenant?: string): Promise<void> {\r\n    await this.delete({\r\n      user_id: user.id,\r\n      user_type: user.userType,\r\n      role,\r\n      tenant: tenant ?? null,\r\n    });\r\n\r\n    await access.flush(user, tenant);\r\n  }\r\n}\r\n`;\r\n\r\nexport const accessUserRoleModelIndexStub = `export * from \"./user-role.model\";\r\n`;\r\n\r\nexport const accessUserRoleMigrationStub = `import { Migration, text, uuid } from \"@warlock.js/cascade\";\r\nimport { UserRole } from \"../user-role.model\";\r\n\r\n/**\r\n * Role-assignment table. \\`user_id\\` is a UUID — override this migration if your\r\n * user ids are integers. The composite index powers the per-user (per-tenant)\r\n * lookup the resolver runs on every check.\r\n */\r\nexport default Migration.create(\r\n  UserRole,\r\n  {\r\n    user_id: uuid().notNullable().index(),\r\n    user_type: text().notNullable(),\r\n    role: text().notNullable().index(),\r\n    tenant: text().nullable().index(),\r\n  },\r\n  {\r\n    index: [{ columns: [\"user_id\", \"user_type\", \"tenant\"] }],\r\n  },\r\n);\r\n`;\r\n\r\nexport const accessResolverStub = `import type { AccessResolver } from \"@warlock.js/access\";\r\nimport type { Auth } from \"@warlock.js/auth\";\r\nimport { Role } from \"app/access/models/role\";\r\nimport { UserRole } from \"app/access/models/user-role\";\r\n\r\n/**\r\n * The app's access adapter — connects @warlock.js/access to the ejected role\r\n * tables. Roles come from the user_roles assignment table; permissions are\r\n * expanded by mapping those role names through the roles catalog table. Both\r\n * are managed at runtime (in the DB), so admins can add roles + edit their\r\n * permissions without a deploy.\r\n *\r\n * The engine owns the hard parts (wildcard matching, caching, fail-closed); this\r\n * resolver only fetches — keep it dumb, never cache inside it.\r\n */\r\nexport class DatabaseAccessResolver implements AccessResolver {\r\n  /** The role names this user holds (powers \\`hasRole\\` / \\`hasAnyRole\\`). */\r\n  public async resolveRoles(user: Auth, tenant?: string): Promise<string[]> {\r\n    return UserRole.rolesFor(user, tenant);\r\n  }\r\n\r\n  /** The effective permission strings this user has (powers \\`can\\` / \\`authorize\\`). */\r\n  public async resolvePermissions(user: Auth, tenant?: string): Promise<string[]> {\r\n    const names = await this.resolveRoles(user, tenant);\r\n\r\n    if (names.length === 0) return [];\r\n\r\n    const roles = await Role.query().whereIn(\"name\", names).get();\r\n\r\n    // Flatten + de-dupe so two roles granting the same permission yield one entry.\r\n    return [...new Set(roles.flatMap((role) => role.permissions))];\r\n  }\r\n\r\n  /**\r\n   * Optional. Resolve the ambient tenant when a check doesn't pass one\r\n   * explicitly — derive it from the authenticated user (safer than reading\r\n   * client request input, which a caller could spoof). Uncomment + adapt for a\r\n   * multi-tenant app (single-tenant apps leave this off and return undefined).\r\n   */\r\n  // public resolveTenant(user: Auth): string | undefined {\r\n  //   return user.get(\"organization_id\");\r\n  // }\r\n}\r\n`;\r\n\r\nexport const socketConfigStub = `import type { SocketOptions } from \"@warlock.js/core\";\r\n\r\n/**\r\n * Socket.IO configuration — read by the framework's socket connector\r\n * on boot. When the HTTP server is running the socket server attaches\r\n * to it; otherwise it listens on its own configured port.\r\n *\r\n * Remove this file to disable the socket server entirely.\r\n */\r\nexport default {\r\n  options: {\r\n    cors: {\r\n      origin: \"*\",\r\n    },\r\n  },\r\n} as SocketOptions;\r\n`;\r\n\r\nexport const communicatorsConfigStub = `import { env } from \"@mongez/dotenv\";\r\nimport type { BrokerConfigurations, RabbitMQClientOptions } from \"@warlock.js/herald\";\r\n\r\nconst heraldConfigurations: BrokerConfigurations<RabbitMQClientOptions> = {\r\n  driver: \"rabbitmq\",\r\n  name: \"default\",\r\n  isDefault: true,\r\n\r\n  // ============================================================================\r\n  // Connection Settings\r\n  // ============================================================================\r\n\r\n  host: env(\"RABBITMQ_HOST\", \"localhost\"),\r\n  port: env(\"RABBITMQ_PORT\", 5672),\r\n  username: env(\"RABBITMQ_USERNAME\", \"guest\"),\r\n  password: env(\"RABBITMQ_PASSWORD\", \"guest\"),\r\n  vhost: env(\"RABBITMQ_VHOST\", \"/\"),\r\n\r\n  // Or use connection URI (takes precedence over host/port)\r\n  // uri: env(\"RABBITMQ_URL\"),\r\n\r\n  // ============================================================================\r\n  // Connection Options\r\n  // ============================================================================\r\n\r\n  /** Heartbeat interval in seconds */\r\n  heartbeat: 60,\r\n\r\n  /** Connection timeout in milliseconds */\r\n  connectionTimeout: 10000,\r\n\r\n  /** Enable automatic reconnection on disconnect */\r\n  reconnect: true,\r\n\r\n  /** Delay between reconnection attempts in milliseconds */\r\n  reconnectDelay: 5_000,\r\n\r\n  // ============================================================================\r\n  // Consumer Options\r\n  // ============================================================================\r\n\r\n  /** Default prefetch count (number of unacknowledged messages per consumer) */\r\n  prefetch: 10,\r\n\r\n  // ============================================================================\r\n  // Client Options (Native amqplib options)\r\n  // ============================================================================\r\n  // These options are passed directly to amqplib.connect()\r\n  // for low-level configuration like frame size, TLS, socket options, etc.\r\n  // ============================================================================\r\n  clientOptions: {\r\n    // Frame max size in bytes (0 = no limit)\r\n    // frameMax: 0,\r\n\r\n    // Channel max (0 = unlimited)\r\n    // channelMax: 0,\r\n\r\n    // Socket options\r\n    socket: {\r\n      // Enable TCP keep-alive\r\n      keepAlive: true,\r\n\r\n      // Disable Nagle's algorithm for lower latency\r\n      noDelay: true,\r\n\r\n      // Socket timeout (in addition to heartbeat)\r\n      // timeout: 30000,\r\n    },\r\n\r\n    // TLS/SSL options (uncomment for secure connections)\r\n    // socket: {\r\n    //   ca: fs.readFileSync('/path/to/ca.pem'),\r\n    //   cert: fs.readFileSync('/path/to/cert.pem'),\r\n    //   key: fs.readFileSync('/path/to/key.pem'),\r\n    //   rejectUnauthorized: true,\r\n    // },\r\n  },\r\n};\r\n\r\nexport default heraldConfigurations;\r\n`;\r\n\r\nexport const notificationsConfigStub = `import { type NotificationConfig, inApp, mailChannel } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"app/notifications/notification.model\";\r\n\r\n/**\r\n * Notifications configuration. Auto-loaded from src/config on boot — the\r\n * framework's notifications connector reads this default export and hands it to\r\n * setNotificationConfig, so this file stays declarative (no side-effect call).\r\n *\r\n * Each channel is payload-typed, so notify.mail(...) / notify.database(...)\r\n * and defineNotification are type-checked against the registry.\r\n *\r\n * Channels enabled here:\r\n *   - mail     wraps @warlock.js/core sendMail; route is notifiable.email.\r\n *              The \"from\" address defaults to config/mail.ts; override per\r\n *              channel with mailChannel({ from: \"no-reply@yourapp.com\" }).\r\n *   - database in-app store backed by the Notification model. The \"inApp\"\r\n *              facade exposes the recipient-scoped read API: listUnread,\r\n *              countUnread, markAsRead, dismiss, ...\r\n *\r\n * Async delivery (.queue()) is OPTIONAL: run \"npx warlock add herald\",\r\n * import { heraldQueue } from \"@warlock.js/notifications\", and uncomment the\r\n * queue line below.\r\n */\r\nconst config: NotificationConfig = {\r\n  channels: {\r\n    mail: mailChannel(),\r\n    database: inApp.configure({ model: Notification }),\r\n  },\r\n\r\n  // Async queue — requires @warlock.js/herald (npx warlock add herald):\r\n  // queue: heraldQueue(),\r\n};\r\n\r\nexport default config;\r\n`;\r\n\r\nexport const notificationModelStub = `import { RegisterModel } from \"@warlock.js/cascade\";\r\nimport { DatabaseNotification, type NotificationColumnMap } from \"@warlock.js/notifications\";\r\nimport { v } from \"@warlock.js/seal\";\r\n\r\n/**\r\n * Validation schema for the notifications table — mirrors the migration\r\n * columns (snake_case). Cascade validates + casts every write against it:\r\n * nullable columns use .nullish() (may be absent or null), and payload is\r\n * free-form JSON. Keep this in sync with the migration + columnMap when you\r\n * add or rename columns.\r\n */\r\nconst notificationSchema = v.object({\r\n  user_id: v.string(),\r\n  type: v.string(),\r\n  title: v.string(),\r\n  body: v.string().nullish(),\r\n  payload: v.record(v.any()).nullish(),\r\n  read_at: v.date().nullish(),\r\n  idempotency_key: v.string().nullish(),\r\n});\r\n\r\n/**\r\n * In-app notification model.\r\n *\r\n * Extends the package's DatabaseNotification base, which provides the stable\r\n * accessors (recipientId, tenantId, isRead, readAt, markRead) — all derived\r\n * from the columnMap below. The read/write API lives on the inApp facade\r\n * (configured in config/notifications.ts); you rarely touch this class directly.\r\n */\r\n@RegisterModel()\r\nexport class Notification extends DatabaseNotification {\r\n  public static table = \"notifications\";\r\n  public static schema = notificationSchema;\r\n\r\n  /**\r\n   * Maps the in-app store's roles to your columns. This default is\r\n   * single-tenant + read_at-only. Add tenant: \"organization_id\" for\r\n   * multi-tenant; use isRead: \"is_read\" (instead of, or alongside, readAt) to\r\n   * track a boolean read flag. The migration + accessors all follow this map.\r\n   */\r\n  public static columnMap: NotificationColumnMap = { readAt: \"read_at\" };\r\n}\r\n`;\r\n\r\nexport const notificationMigrationStub = `import { Migration } from \"@warlock.js/cascade\";\r\nimport { notificationColumns } from \"@warlock.js/notifications\";\r\nimport { Notification } from \"../notification.model\";\r\n\r\n/**\r\n * Notifications table.\r\n *\r\n * Columns come from notificationColumns(Notification) — the recipient / tenant\r\n * / read-state names follow the model's columnMap; type / title / body /\r\n * payload / idempotency_key are fixed. Spread it to add your own columns\r\n * (remember to mirror them in the model schema):\r\n *\r\n *   import { uuid } from \"@warlock.js/cascade\";\r\n *\r\n *   export default Migration.create(Notification, {\r\n *     ...notificationColumns(Notification),\r\n *     // category_id: uuid().index().nullable(),\r\n *   });\r\n */\r\nexport default Migration.create(Notification, notificationColumns(Notification));\r\n`;\r\n\r\nexport const notificationControllersStub = `import { type Request, type RequestHandler, type Response } from \"@warlock.js/core\";\r\nimport { inApp } from \"@warlock.js/notifications\";\r\n\r\n/**\r\n * The authenticated user's notification HTTP surface — thin wrappers over the\r\n * recipient-scoped \\`inApp\\` facade (a foreign id can never touch another user's\r\n * rows). Notifications are produced by domain events, never over HTTP, so there\r\n * is no create. Trim or split these as your app grows.\r\n */\r\n\r\n/** GET /notifications — list, most recent first (page / limit / type / unread via query). */\r\nexport const listNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const { data, pagination } = await inApp.list(request.user!, request.all());\r\n\r\n  return response.success({ notifications: data, pagination });\r\n};\r\n\r\nlistNotificationsController.description = \"List notifications\";\r\n\r\n/** GET /notifications/unread-count — drives the bell badge. */\r\nexport const unreadNotificationsCountController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.countUnread(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nunreadNotificationsCountController.description = \"Unread notifications count\";\r\n\r\n/** PATCH /notifications/:id/read — mark one read, return the updated row. */\r\nexport const markNotificationReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const id = request.input(\"id\");\r\n\r\n  await inApp.markAsRead(request.user!, id);\r\n  const notification = await inApp.find(request.user!, id);\r\n\r\n  return response.success({ notification });\r\n};\r\n\r\nmarkNotificationReadController.description = \"Mark notification read\";\r\n\r\n/** PATCH /notifications/read-all — mark every unread one read. */\r\nexport const markAllNotificationsReadController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  const count = await inApp.markAsRead(request.user!);\r\n\r\n  return response.success({ count });\r\n};\r\n\r\nmarkAllNotificationsReadController.description = \"Mark all notifications read\";\r\n\r\n/** DELETE /notifications — dismiss all for the user. */\r\nexport const clearNotificationsController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!);\r\n\r\n  return response.noContent();\r\n};\r\n\r\nclearNotificationsController.description = \"Clear notifications\";\r\n\r\n/** DELETE /notifications/:id — dismiss one. */\r\nexport const deleteNotificationController: RequestHandler = async (\r\n  request: Request,\r\n  response: Response,\r\n) => {\r\n  await inApp.dismiss(request.user!, request.input(\"id\"));\r\n\r\n  return response.noContent();\r\n};\r\n\r\ndeleteNotificationController.description = \"Delete notification\";\r\n`;\r\n\r\nexport const notificationRoutesStub = `import { authMiddleware } from \"@warlock.js/auth\";\r\nimport { router } from \"@warlock.js/core\";\r\nimport {\r\n  clearNotificationsController,\r\n  deleteNotificationController,\r\n  listNotificationsController,\r\n  markAllNotificationsReadController,\r\n  markNotificationReadController,\r\n  unreadNotificationsCountController,\r\n} from \"./controllers/notifications.controller\";\r\n\r\n/**\r\n * Notification routes — the authenticated user's read + dismiss surface.\r\n *\r\n * Notifications are produced by domain events (never created over HTTP), so\r\n * there is no POST. Every route is gated by \\`authMiddleware\\` and recipient-\r\n * scoped by \\`inApp\\` (a foreign id touches zero rows). Delete any endpoint you\r\n * don't need; if your app reads notifications over sockets/GraphQL instead,\r\n * delete this file + the controllers entirely.\r\n */\r\nrouter.group({ prefix: \"/notifications\", middleware: [authMiddleware([])] }, () => {\r\n  router.get(\"/\", listNotificationsController);\r\n  router.get(\"/unread-count\", unreadNotificationsCountController);\r\n  router.patch(\"/read-all\", markAllNotificationsReadController);\r\n  router.patch(\"/:id/read\", markNotificationReadController);\r\n  router.delete(\"/\", clearNotificationsController);\r\n  router.delete(\"/:id\", deleteNotificationController);\r\n});\r\n`;\r\n"],"mappings":";AAAA,MAAa,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,MAAa,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+B5B,MAAa,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCnC,MAAa,2BAA2B;;AAGxC,MAAa,0BAA0B;;;;;;;;;;;;AAavC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FvC,MAAa,+BAA+B;;AAG5C,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;AAsB3C,MAAa,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ClC,MAAa,mBAAmB;;;;;;;;;;;;;;;;;AAkBhC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFvC,MAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCvC,MAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CrC,MAAa,4BAA4B;;;;;;;;;;;;;;;;;;;;;AAsBzC,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsF3C,MAAa,yBAAyB"}

package/esm/http/config.d.mts

@@ -1,6 +1,6 @@
 import { HttpConfigurations } from "./types.mjs";
 
-//#region ../@warlock.js/core/src/http/config.d.ts
+//#region ../core/src/http/config.d.ts
 /**
  * Default http configurations
  */

package/esm/http/config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/config.ts"],"mappings":";;;;;AAOA;cAAa,yBAAA,EAA2B,kBAYvC;;;AAAA;iBAKe,UAAA,CAAW,GAAW"}
+{"version":3,"file":"config.d.mts","names":[],"sources":["../../../../../../../core/src/http/config.ts"],"mappings":";;;;;AAOA;cAAa,yBAAA,EAA2B,kBAYvC;;;AAAA;iBAKe,UAAA,CAAW,GAAW"}

package/esm/http/config.mjs

@@ -1,7 +1,7 @@
 import config from "@mongez/config";
 import { get } from "@mongez/reinforcements";
 
-//#region ../@warlock.js/core/src/http/config.ts
+//#region ../core/src/http/config.ts
 /**
 * Default http configurations
 */

package/esm/http/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/config.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { get } from \"@mongez/reinforcements\";\nimport type { HttpConfigurations } from \"./types\";\n\n/**\n * Default http configurations\n */\nexport const defaultHttpConfigurations: HttpConfigurations = {\n  port: 3000,\n  host: \"0.0.0.0\",\n  middleware: {\n    all: [],\n    only: {\n      middleware: [],\n    },\n    except: {\n      middleware: [],\n    },\n  },\n};\n\n/**\n * Get http configurations for the given key\n */\nexport function httpConfig(key: string): any {\n  return config.get(`http.${key}`, get(defaultHttpConfigurations, key));\n}\n"],"mappings":";;;;;;;AAOA,MAAa,4BAAgD;CAC3D,MAAM;CACN,MAAM;CACN,YAAY;EACV,KAAK,CAAC;EACN,MAAM,EACJ,YAAY,CAAC,EACf;EACA,QAAQ,EACN,YAAY,CAAC,EACf;CACF;AACF;;;;AAKA,SAAgB,WAAW,KAAkB;CAC3C,OAAO,OAAO,IAAI,QAAQ,OAAO,IAAI,2BAA2B,GAAG,CAAC;AACtE"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../../../../../../../core/src/http/config.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { get } from \"@mongez/reinforcements\";\nimport type { HttpConfigurations } from \"./types\";\n\n/**\n * Default http configurations\n */\nexport const defaultHttpConfigurations: HttpConfigurations = {\n  port: 3000,\n  host: \"0.0.0.0\",\n  middleware: {\n    all: [],\n    only: {\n      middleware: [],\n    },\n    except: {\n      middleware: [],\n    },\n  },\n};\n\n/**\n * Get http configurations for the given key\n */\nexport function httpConfig(key: string): any {\n  return config.get(`http.${key}`, get(defaultHttpConfigurations, key));\n}\n"],"mappings":";;;;;;;AAOA,MAAa,4BAAgD;CAC3D,MAAM;CACN,MAAM;CACN,YAAY;EACV,KAAK,CAAC;EACN,MAAM,EACJ,YAAY,CAAC,EACf;EACA,QAAQ,EACN,YAAY,CAAC,EACf;CACF;AACF;;;;AAKA,SAAgB,WAAW,KAAkB;CAC3C,OAAO,OAAO,IAAI,QAAQ,OAAO,IAAI,2BAA2B,GAAG,CAAC;AACtE"}

package/esm/http/context/request-context.d.mts

@@ -3,7 +3,7 @@ import { Response } from "../response.mjs";
 import { Model } from "@warlock.js/cascade";
 import { Context } from "@warlock.js/context";
 
-//#region ../@warlock.js/core/src/http/context/request-context.d.ts
+//#region ../core/src/http/context/request-context.d.ts
 /**
  * Request Context Store
  */

package/esm/http/context/request-context.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/context/request-context.ts"],"mappings":";;;;;;;;AAQA;KAAY,mBAAA,cAAiC,KAAA,GAAQ,KAAA;EACnD,OAAA,EAAS,OAAA,CAAQ,IAAA;EACjB,QAAA,EAAU,QAAA;AAAA;;;;;;;cASN,cAAA,cAA4B,KAAA,GAAQ,KAAA,UAAe,OAAA,CAAQ,mBAAA,CAAoB,IAAA;EAXhC;;;EAe5C,UAAA,IAAc,OAAA,CAAQ,IAAA;EAb7B;;;EAoBO,WAAA,IAAe,QAAA;EAXlB;;;EAkBG,OAAA,IAAW,IAAA;EAlBsB;;;EAyBjC,UAAA,CAAW,OAAA,GAAU,MAAA,gBAAsB,mBAAA,CAAoB,IAAA;AAAA;;;;cAW3D,cAAA,EAAc,cAAA,CAAA,KAAA;;;;iBAOX,eAAA,kBAAiC,KAAA,GAAQ,KAAA,KACX,mBAAA,CAAoB,QAAA;AAAA,iBAGlD,UAAA,kBAA4B,KAAA,GAAQ,KAAA,KACZ,OAAA,CAAQ,QAAA;AAAA,iBAGhC,cAAA,kBAAgC,KAAA,GAAQ,KAAA,KACnB,QAAA"}
+{"version":3,"file":"request-context.d.mts","names":[],"sources":["../../../../../../../../core/src/http/context/request-context.ts"],"mappings":";;;;;;;;AAQA;KAAY,mBAAA,cAAiC,KAAA,GAAQ,KAAA;EACnD,OAAA,EAAS,OAAA,CAAQ,IAAA;EACjB,QAAA,EAAU,QAAA;AAAA;;;;;;;cASN,cAAA,cAA4B,KAAA,GAAQ,KAAA,UAAe,OAAA,CAAQ,mBAAA,CAAoB,IAAA;EAXhC;;;EAe5C,UAAA,IAAc,OAAA,CAAQ,IAAA;EAb7B;;;EAoBO,WAAA,IAAe,QAAA;EAXlB;;;EAkBG,OAAA,IAAW,IAAA;EAlBsB;;;EAyBjC,UAAA,CAAW,OAAA,GAAU,MAAA,gBAAsB,mBAAA,CAAoB,IAAA;AAAA;;;;cAW3D,cAAA,EAAc,cAAA,CAAA,KAAA;;;;iBAOX,eAAA,kBAAiC,KAAA,GAAQ,KAAA,KACX,mBAAA,CAAoB,QAAA;AAAA,iBAGlD,UAAA,kBAA4B,KAAA,GAAQ,KAAA,KACZ,OAAA,CAAQ,QAAA;AAAA,iBAGhC,cAAA,kBAAgC,KAAA,GAAQ,KAAA,KACnB,QAAA"}

package/esm/http/context/request-context.mjs

@@ -1,6 +1,6 @@
 import { Context, contextManager } from "@warlock.js/context";
 
-//#region ../@warlock.js/core/src/http/context/request-context.ts
+//#region ../core/src/http/context/request-context.ts
 /**
 * Request Context
 *

package/esm/http/context/request-context.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/context/request-context.ts"],"sourcesContent":["import type { Model } from \"@warlock.js/cascade\";\nimport { Context, contextManager } from \"@warlock.js/context\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\n\n/**\n * Request Context Store\n */\nexport type RequestContextStore<User extends Model = Model> = {\n  request: Request<User>;\n  response: Response;\n};\n\n/**\n * Request Context\n *\n * Manages request-scoped data (request, response, user) using AsyncLocalStorage.\n * Extends the base Context class for consistent API.\n */\nclass RequestContext<User extends Model = Model> extends Context<RequestContextStore<User>> {\n  /**\n   * Get the current request\n   */\n  public getRequest(): Request<User> | undefined {\n    return this.get(\"request\");\n  }\n\n  /**\n   * Get the current response\n   */\n  public getResponse(): Response | undefined {\n    return this.get(\"response\");\n  }\n\n  /**\n   * Get the current user\n   */\n  public getUser(): User | undefined {\n    return this.getRequest()?.user;\n  }\n\n  /**\n   * Build the initial request store from HTTP context\n   */\n  public buildStore(payload?: Record<string, any>): RequestContextStore<User> {\n    return {\n      request: payload?.request,\n      response: payload?.response,\n    };\n  }\n}\n\n/**\n * Global request context instance\n */\nexport const requestContext = new RequestContext();\n\ncontextManager.register(\"request\", requestContext);\n\n/**\n * Use request store (for backward compatibility)\n */\nexport function useRequestStore<UserType extends Model = Model>() {\n  return (requestContext.getStore() || {}) as RequestContextStore<UserType>;\n}\n\nexport function useRequest<UserType extends Model = Model>() {\n  return requestContext.getRequest() as Request<UserType>;\n}\n\nexport function useCurrentUser<UserType extends Model = Model>() {\n  return requestContext.getUser() as UserType;\n}\n"],"mappings":";;;;;;;;;AAmBA,IAAM,iBAAN,cAAyD,QAAmC;;;;CAI1F,AAAO,aAAwC;EAC7C,OAAO,KAAK,IAAI,SAAS;CAC3B;;;;CAKA,AAAO,cAAoC;EACzC,OAAO,KAAK,IAAI,UAAU;CAC5B;;;;CAKA,AAAO,UAA4B;EACjC,OAAO,KAAK,WAAW,CAAC,EAAE;CAC5B;;;;CAKA,AAAO,WAAW,SAA0D;EAC1E,OAAO;GACL,SAAS,SAAS;GAClB,UAAU,SAAS;EACrB;CACF;AACF;;;;AAKA,MAAa,iBAAiB,IAAI,eAAe;AAEjD,eAAe,SAAS,WAAW,cAAc;;;;AAKjD,SAAgB,kBAAkD;CAChE,OAAQ,eAAe,SAAS,KAAK,CAAC;AACxC;AAEA,SAAgB,aAA6C;CAC3D,OAAO,eAAe,WAAW;AACnC;AAEA,SAAgB,iBAAiD;CAC/D,OAAO,eAAe,QAAQ;AAChC"}
+{"version":3,"file":"request-context.mjs","names":[],"sources":["../../../../../../../../core/src/http/context/request-context.ts"],"sourcesContent":["import type { Model } from \"@warlock.js/cascade\";\nimport { Context, contextManager } from \"@warlock.js/context\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\n\n/**\n * Request Context Store\n */\nexport type RequestContextStore<User extends Model = Model> = {\n  request: Request<User>;\n  response: Response;\n};\n\n/**\n * Request Context\n *\n * Manages request-scoped data (request, response, user) using AsyncLocalStorage.\n * Extends the base Context class for consistent API.\n */\nclass RequestContext<User extends Model = Model> extends Context<RequestContextStore<User>> {\n  /**\n   * Get the current request\n   */\n  public getRequest(): Request<User> | undefined {\n    return this.get(\"request\");\n  }\n\n  /**\n   * Get the current response\n   */\n  public getResponse(): Response | undefined {\n    return this.get(\"response\");\n  }\n\n  /**\n   * Get the current user\n   */\n  public getUser(): User | undefined {\n    return this.getRequest()?.user;\n  }\n\n  /**\n   * Build the initial request store from HTTP context\n   */\n  public buildStore(payload?: Record<string, any>): RequestContextStore<User> {\n    return {\n      request: payload?.request,\n      response: payload?.response,\n    };\n  }\n}\n\n/**\n * Global request context instance\n */\nexport const requestContext = new RequestContext();\n\ncontextManager.register(\"request\", requestContext);\n\n/**\n * Use request store (for backward compatibility)\n */\nexport function useRequestStore<UserType extends Model = Model>() {\n  return (requestContext.getStore() || {}) as RequestContextStore<UserType>;\n}\n\nexport function useRequest<UserType extends Model = Model>() {\n  return requestContext.getRequest() as Request<UserType>;\n}\n\nexport function useCurrentUser<UserType extends Model = Model>() {\n  return requestContext.getUser() as UserType;\n}\n"],"mappings":";;;;;;;;;AAmBA,IAAM,iBAAN,cAAyD,QAAmC;;;;CAI1F,AAAO,aAAwC;EAC7C,OAAO,KAAK,IAAI,SAAS;CAC3B;;;;CAKA,AAAO,cAAoC;EACzC,OAAO,KAAK,IAAI,UAAU;CAC5B;;;;CAKA,AAAO,UAA4B;EACjC,OAAO,KAAK,WAAW,CAAC,EAAE;CAC5B;;;;CAKA,AAAO,WAAW,SAA0D;EAC1E,OAAO;GACL,SAAS,SAAS;GAClB,UAAU,SAAS;EACrB;CACF;AACF;;;;AAKA,MAAa,iBAAiB,IAAI,eAAe;AAEjD,eAAe,SAAS,WAAW,cAAc;;;;AAKjD,SAAgB,kBAAkD;CAChE,OAAQ,eAAe,SAAS,KAAK,CAAC;AACxC;AAEA,SAAgB,aAA6C;CAC3D,OAAO,eAAe,WAAW;AACnC;AAEA,SAAgB,iBAAiD;CAC/D,OAAO,eAAe,QAAQ;AAChC"}

package/esm/http/createHttpApplication.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/http/createHttpApplication.d.ts
+//#region ../core/src/http/createHttpApplication.d.ts
 declare function createHttpApplication(): Promise<void>;
 declare function stopHttpApplication(): Promise<void>;
 //#endregion

package/esm/http/createHttpApplication.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"createHttpApplication.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/createHttpApplication.ts"],"mappings":";iBAQsB,qBAAA,IAAqB,OAAA;AAAA,iBA8BrB,mBAAA,IAAmB,OAAA"}
+{"version":3,"file":"createHttpApplication.d.mts","names":[],"sources":["../../../../../../../core/src/http/createHttpApplication.ts"],"mappings":";iBAQsB,qBAAA,IAAqB,OAAA;AAAA,iBA8BrB,mBAAA,IAAmB,OAAA"}

package/esm/http/createHttpApplication.mjs

@@ -7,7 +7,7 @@ import { getHttpServer, startHttpServer } from "./server.mjs";
 import config from "@mongez/config";
 import { log } from "@warlock.js/logger";
 
-//#region ../@warlock.js/core/src/http/createHttpApplication.ts
+//#region ../core/src/http/createHttpApplication.ts
 async function createHttpApplication() {
 	const server = startHttpServer();
 	await registerHttpPlugins(server);

package/esm/http/createHttpApplication.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"createHttpApplication.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/createHttpApplication.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { setBaseUrl } from \"../utils/urls\";\nimport { httpConfig } from \"./config\";\nimport { registerHttpPlugins } from \"./plugins\";\nimport { getHttpServer, startHttpServer } from \"./server\";\n\nexport async function createHttpApplication() {\n  const server = startHttpServer();\n\n  await registerHttpPlugins(server);\n\n  router.scan(server);\n\n  const port = httpConfig(\"port\");\n\n  try {\n    log.info(\"http\", \"server\", \"Connecting to the server\");\n    // 👇🏻 We can use the url of the server\n    await server.listen({\n      port,\n      host: httpConfig(\"host\"),\n    });\n\n    const baseUrl = config.get(\"app.baseUrl\");\n\n    // update base url\n    setBaseUrl(baseUrl);\n\n    log.success(\"http\", \"server\", `Server is listening on ${baseUrl}`);\n  } catch (error) {\n    log.error(\"http\", \"server\", error);\n\n    process.exit(1); // stop the process, exit with error\n  }\n}\n\nexport async function stopHttpApplication() {\n  log.info(\"http\", \"server\", \"Stopping the server\");\n  const server = getHttpServer();\n\n  await server?.close();\n\n  log.success(\"http\", \"server\", \"Server is stopped\");\n}\n"],"mappings":";;;;;;;;;;AAQA,eAAsB,wBAAwB;CAC5C,MAAM,SAAS,gBAAgB;CAE/B,MAAM,oBAAoB,MAAM;CAEhC,OAAO,KAAK,MAAM;CAElB,MAAM,OAAO,WAAW,MAAM;CAE9B,IAAI;EACF,IAAI,KAAK,QAAQ,UAAU,0BAA0B;EAErD,MAAM,OAAO,OAAO;GAClB;GACA,MAAM,WAAW,MAAM;EACzB,CAAC;EAED,MAAM,UAAU,OAAO,IAAI,aAAa;EAGxC,WAAW,OAAO;EAElB,IAAI,QAAQ,QAAQ,UAAU,0BAA0B,SAAS;CACnE,SAAS,OAAO;EACd,IAAI,MAAM,QAAQ,UAAU,KAAK;EAEjC,QAAQ,KAAK,CAAC;CAChB;AACF;AAEA,eAAsB,sBAAsB;CAC1C,IAAI,KAAK,QAAQ,UAAU,qBAAqB;CAGhD,MAFe,cAEJ,CAAC,EAAE,MAAM;CAEpB,IAAI,QAAQ,QAAQ,UAAU,mBAAmB;AACnD"}
+{"version":3,"file":"createHttpApplication.mjs","names":[],"sources":["../../../../../../../core/src/http/createHttpApplication.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { setBaseUrl } from \"../utils/urls\";\nimport { httpConfig } from \"./config\";\nimport { registerHttpPlugins } from \"./plugins\";\nimport { getHttpServer, startHttpServer } from \"./server\";\n\nexport async function createHttpApplication() {\n  const server = startHttpServer();\n\n  await registerHttpPlugins(server);\n\n  router.scan(server);\n\n  const port = httpConfig(\"port\");\n\n  try {\n    log.info(\"http\", \"server\", \"Connecting to the server\");\n    // 👇🏻 We can use the url of the server\n    await server.listen({\n      port,\n      host: httpConfig(\"host\"),\n    });\n\n    const baseUrl = config.get(\"app.baseUrl\");\n\n    // update base url\n    setBaseUrl(baseUrl);\n\n    log.success(\"http\", \"server\", `Server is listening on ${baseUrl}`);\n  } catch (error) {\n    log.error(\"http\", \"server\", error);\n\n    process.exit(1); // stop the process, exit with error\n  }\n}\n\nexport async function stopHttpApplication() {\n  log.info(\"http\", \"server\", \"Stopping the server\");\n  const server = getHttpServer();\n\n  await server?.close();\n\n  log.success(\"http\", \"server\", \"Server is stopped\");\n}\n"],"mappings":";;;;;;;;;;AAQA,eAAsB,wBAAwB;CAC5C,MAAM,SAAS,gBAAgB;CAE/B,MAAM,oBAAoB,MAAM;CAEhC,OAAO,KAAK,MAAM;CAElB,MAAM,OAAO,WAAW,MAAM;CAE9B,IAAI;EACF,IAAI,KAAK,QAAQ,UAAU,0BAA0B;EAErD,MAAM,OAAO,OAAO;GAClB;GACA,MAAM,WAAW,MAAM;EACzB,CAAC;EAED,MAAM,UAAU,OAAO,IAAI,aAAa;EAGxC,WAAW,OAAO;EAElB,IAAI,QAAQ,QAAQ,UAAU,0BAA0B,SAAS;CACnE,SAAS,OAAO;EACd,IAAI,MAAM,QAAQ,UAAU,KAAK;EAEjC,QAAQ,KAAK,CAAC;CAChB;AACF;AAEA,eAAsB,sBAAsB;CAC1C,IAAI,KAAK,QAAQ,UAAU,qBAAqB;CAGhD,MAFe,cAEJ,CAAC,EAAE,MAAM;CAEpB,IAAI,QAAQ,QAAQ,UAAU,mBAAmB;AACnD"}

package/esm/http/database/RequestLog.d.mts

@@ -1,7 +1,7 @@
 import { Infer } from "@warlock.js/seal";
 import { Model } from "@warlock.js/cascade";
 
-//#region ../@warlock.js/core/src/http/database/RequestLog.d.ts
+//#region ../core/src/http/database/RequestLog.d.ts
 declare const schema: any;
 type RequestLogSchema = Infer.Output<typeof schema>;
 declare class RequestLog extends Model<RequestLogSchema> {

package/esm/http/database/RequestLog.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestLog.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/database/RequestLog.ts"],"mappings":";;;;cAGM,MAAA;AAAA,KAiBD,gBAAA,GAAmB,KAAA,CAAM,MAAM,QAAQ,MAAA;AAAA,cAE/B,UAAA,SAAmB,KAAK,CAAC,gBAAA;EAJpC;;;EAAA,OAQc,KAAA;EANX;;;EAAA,OAWW,MAAA;AAAA"}
+{"version":3,"file":"RequestLog.d.mts","names":[],"sources":["../../../../../../../../core/src/http/database/RequestLog.ts"],"mappings":";;;;cAGM,MAAA;AAAA,KAiBD,gBAAA,GAAmB,KAAA,CAAM,MAAM,QAAQ,MAAA;AAAA,cAE/B,UAAA,SAAmB,KAAK,CAAC,gBAAA;EAJpC;;;EAAA,OAQc,KAAA;EANX;;;EAAA,OAWW,MAAA;AAAA"}

package/esm/http/database/RequestLog.mjs

@@ -1,7 +1,7 @@
 import { v } from "@warlock.js/seal";
 import { Model } from "@warlock.js/cascade";
 
-//#region ../@warlock.js/core/src/http/database/RequestLog.ts
+//#region ../core/src/http/database/RequestLog.ts
 const schema = v.object({
 	statusCode: v.number(),
 	responseTime: v.number(),

package/esm/http/database/RequestLog.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"RequestLog.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/database/RequestLog.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\nconst schema = v.object({\r\n  statusCode: v.number(),\r\n  responseTime: v.number(),\r\n  responseSize: v.number(),\r\n  responseBody: v.record(v.any()),\r\n  responseHeaders: v.record(v.any()),\r\n  ip: v.string(),\r\n  method: v.string(),\r\n  route: v.string(),\r\n  requestHeaders: v.record(v.any()),\r\n  userAgent: v.string(),\r\n  referer: v.string(),\r\n  requestBody: v.record(v.any()),\r\n  requestParams: v.record(v.any()),\r\n  requestQuery: v.record(v.any()),\r\n});\r\n\r\ntype RequestLogSchema = Infer.Output<typeof schema>;\r\n\r\nexport class RequestLog extends Model<RequestLogSchema> {\r\n  /**\r\n   * {@inheritdoc}\r\n   */\r\n  public static table = \"request_logs\";\r\n\r\n  /**\r\n   * {@inheritdoc}\r\n   */\r\n  public static schema = schema;\r\n}\r\n"],"mappings":";;;;AAGA,MAAM,SAAS,EAAE,OAAO;CACtB,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;CAC9B,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC;CACjC,IAAI,EAAE,OAAO;CACb,QAAQ,EAAE,OAAO;CACjB,OAAO,EAAE,OAAO;CAChB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;CAChC,WAAW,EAAE,OAAO;CACpB,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;CAC7B,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;CAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAChC,CAAC;AAID,IAAa,aAAb,cAAgC,MAAwB;;eAIhC;;;gBAKC;;AACzB"}
+{"version":3,"file":"RequestLog.mjs","names":[],"sources":["../../../../../../../../core/src/http/database/RequestLog.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\r\nimport { type Infer, v } from \"@warlock.js/seal\";\r\n\r\nconst schema = v.object({\r\n  statusCode: v.number(),\r\n  responseTime: v.number(),\r\n  responseSize: v.number(),\r\n  responseBody: v.record(v.any()),\r\n  responseHeaders: v.record(v.any()),\r\n  ip: v.string(),\r\n  method: v.string(),\r\n  route: v.string(),\r\n  requestHeaders: v.record(v.any()),\r\n  userAgent: v.string(),\r\n  referer: v.string(),\r\n  requestBody: v.record(v.any()),\r\n  requestParams: v.record(v.any()),\r\n  requestQuery: v.record(v.any()),\r\n});\r\n\r\ntype RequestLogSchema = Infer.Output<typeof schema>;\r\n\r\nexport class RequestLog extends Model<RequestLogSchema> {\r\n  /**\r\n   * {@inheritdoc}\r\n   */\r\n  public static table = \"request_logs\";\r\n\r\n  /**\r\n   * {@inheritdoc}\r\n   */\r\n  public static schema = schema;\r\n}\r\n"],"mappings":";;;;AAGA,MAAM,SAAS,EAAE,OAAO;CACtB,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;CAC9B,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC;CACjC,IAAI,EAAE,OAAO;CACb,QAAQ,EAAE,OAAO;CACjB,OAAO,EAAE,OAAO;CAChB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;CAChC,WAAW,EAAE,OAAO;CACpB,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;CAC7B,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;CAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAChC,CAAC;AAID,IAAa,aAAb,cAAgC,MAAwB;;eAIhC;;;gBAKC;;AACzB"}

package/esm/http/error-codes.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/http/error-codes.d.ts
+//#region ../core/src/http/error-codes.d.ts
 /**
  * HTTP middleware error codes.
  *

package/esm/http/error-codes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/error-codes.ts"],"mappings":";;AASA;;;;;;;;aAAY,cAAA;EA8BV;;;AAKW;EA9BX,sBAAA;;;;EAKA,qBAAA;;;;EAKA,iBAAA;;;;EAKA,uBAAA;;;;EAKA,YAAA;;;;EAKA,WAAA;;;;EAKA,WAAA;AAAA"}
+{"version":3,"file":"error-codes.d.mts","names":[],"sources":["../../../../../../../core/src/http/error-codes.ts"],"mappings":";;AASA;;;;;;;;aAAY,cAAA;EA8BV;;;AAKW;EA9BX,sBAAA;;;;EAKA,qBAAA;;;;EAKA,iBAAA;;;;EAKA,uBAAA;;;;EAKA,YAAA;;;;EAKA,WAAA;;;;EAKA,WAAA;AAAA"}

package/esm/http/error-codes.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/http/error-codes.ts
+//#region ../core/src/http/error-codes.ts
 /**
 * HTTP middleware error codes.
 *

package/esm/http/error-codes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../../../../../@warlock.js/core/src/http/error-codes.ts"],"sourcesContent":["/**\n * HTTP middleware error codes.\n *\n * Mirrors the convention used by `@warlock.js/auth`'s `AuthErrorCodes` —\n * stable string identifiers clients can branch on without parsing message text.\n *\n * Range `EC100..EC199` is reserved for `@warlock.js/core` HTTP middleware.\n * `EC001..EC099` belongs to `@warlock.js/auth`.\n */\nexport enum HttpErrorCodes {\n  /**\n   * Same idempotency key reused with a different request body.\n   * Client likely has a bug — same intent must reuse the same body.\n   */\n  IdempotencyKeyConflict = \"EC100\",\n\n  /**\n   * Idempotency key header is malformed (wrong length / non-printable chars).\n   */\n  IdempotencyKeyInvalid = \"EC101\",\n\n  /**\n   * Per-route rate limit exceeded. Different from the global `@fastify/rate-limit` 429.\n   */\n  RateLimitExceeded = \"EC102\",\n\n  /**\n   * Per-route concurrency cap reached — too many in-flight requests against this endpoint.\n   */\n  ConcurrencyLimitReached = \"EC103\",\n\n  /**\n   * Request `Content-Length` exceeds the per-route body cap.\n   */\n  BodyTooLarge = \"EC104\",\n\n  /**\n   * Client IP failed the `ipFilter()` allow/deny check.\n   */\n  IpForbidden = \"EC105\",\n\n  /**\n   * Application is in maintenance mode and the request did not match the allowlist.\n   */\n  Maintenance = \"EC106\",\n}\n"],"mappings":";;;;;;;;;;AASA,IAAY,iBAAL;;;;;CAKL;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;AACF"}
+{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../../../../../core/src/http/error-codes.ts"],"sourcesContent":["/**\n * HTTP middleware error codes.\n *\n * Mirrors the convention used by `@warlock.js/auth`'s `AuthErrorCodes` —\n * stable string identifiers clients can branch on without parsing message text.\n *\n * Range `EC100..EC199` is reserved for `@warlock.js/core` HTTP middleware.\n * `EC001..EC099` belongs to `@warlock.js/auth`.\n */\nexport enum HttpErrorCodes {\n  /**\n   * Same idempotency key reused with a different request body.\n   * Client likely has a bug — same intent must reuse the same body.\n   */\n  IdempotencyKeyConflict = \"EC100\",\n\n  /**\n   * Idempotency key header is malformed (wrong length / non-printable chars).\n   */\n  IdempotencyKeyInvalid = \"EC101\",\n\n  /**\n   * Per-route rate limit exceeded. Different from the global `@fastify/rate-limit` 429.\n   */\n  RateLimitExceeded = \"EC102\",\n\n  /**\n   * Per-route concurrency cap reached — too many in-flight requests against this endpoint.\n   */\n  ConcurrencyLimitReached = \"EC103\",\n\n  /**\n   * Request `Content-Length` exceeds the per-route body cap.\n   */\n  BodyTooLarge = \"EC104\",\n\n  /**\n   * Client IP failed the `ipFilter()` allow/deny check.\n   */\n  IpForbidden = \"EC105\",\n\n  /**\n   * Application is in maintenance mode and the request did not match the allowlist.\n   */\n  Maintenance = \"EC106\",\n}\n"],"mappings":";;;;;;;;;;AASA,IAAY,iBAAL;;;;;CAKL;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;AACF"}

package/esm/http/errors/errors.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/http/errors/errors.d.ts
+//#region ../core/src/http/errors/errors.d.ts
 declare class HttpError extends Error {
   status: number;
   message: string;

package/esm/http/errors/errors.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/errors/errors.ts"],"mappings":";cAAa,SAAA,SAAkB,KAAK;EAEzB,MAAA;EACA,OAAA;EACA,OAAA;cAFA,MAAA,UACA,OAAA,UACA,OAAA;AAAA;AAAA,cAOE,qBAAA,SAA8B,SAAS;EAGzC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,iBAAA,SAA0B,SAAS;EAGrC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,cAAA,SAAuB,SAAS;EAGlC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,WAAA,SAAoB,SAAS;EAG/B,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,aAAA,SAAsB,SAAS;EAGjC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,kBAAA,SAA2B,SAAS;EAGtC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA"}
+{"version":3,"file":"errors.d.mts","names":[],"sources":["../../../../../../../../core/src/http/errors/errors.ts"],"mappings":";cAAa,SAAA,SAAkB,KAAK;EAEzB,MAAA;EACA,OAAA;EACA,OAAA;cAFA,MAAA,UACA,OAAA,UACA,OAAA;AAAA;AAAA,cAOE,qBAAA,SAA8B,SAAS;EAGzC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,iBAAA,SAA0B,SAAS;EAGrC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,cAAA,SAAuB,SAAS;EAGlC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,WAAA,SAAoB,SAAS;EAG/B,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,aAAA,SAAsB,SAAS;EAGjC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,kBAAA,SAA2B,SAAS;EAGtC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA"}

package/esm/http/errors/errors.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/core/src/http/errors/errors.ts
+//#region ../core/src/http/errors/errors.ts
 var HttpError = class extends Error {
 	constructor(status, message, payload) {
 		super(message);

package/esm/http/errors/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/http/errors/errors.ts"],"sourcesContent":["export class HttpError extends Error {\r\n  public constructor(\r\n    public status: number,\r\n    public message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(message);\r\n    this.name = \"HttpError\";\r\n  }\r\n}\r\n\r\nexport class ResourceNotFoundError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(404, message, payload);\r\n    this.name = \"ResourceNotFoundError\";\r\n  }\r\n}\r\n\r\nexport class UnAuthorizedError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(401, message, payload);\r\n    this.name = \"UnAuthorizedError\";\r\n  }\r\n}\r\n\r\nexport class ForbiddenError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(403, message, payload);\r\n    this.name = \"ForbiddenError\";\r\n  }\r\n}\r\n\r\nexport class BadRequestError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(400, message, payload);\r\n    this.name = \"BadRequestError\";\r\n  }\r\n}\r\n\r\nexport class ServerError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(500, message, payload);\r\n    this.name = \"ServerError\";\r\n  }\r\n}\r\n\r\nexport class ConflictError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(409, message, payload);\r\n    this.name = \"ConflictError\";\r\n  }\r\n}\r\n\r\nexport class NotAcceptableError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(406, message, payload);\r\n    this.name = \"NotAcceptableError\";\r\n  }\r\n}\r\n\r\nexport class NotAllowedError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(405, message, payload);\r\n    this.name = \"NotAllowedError\";\r\n  }\r\n}\r\n"],"mappings":";AAAA,IAAa,YAAb,cAA+B,MAAM;CACnC,AAAO,YACL,AAAO,QACP,AAAO,SACP,AAAO,SACP;EACA,MAAM,OAAO;EAJN;EACA;EACA;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,wBAAb,cAA2C,UAAU;CACnD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,oBAAb,cAAuC,UAAU;CAC/C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,iBAAb,cAAoC,UAAU;CAC5C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,cAAb,cAAiC,UAAU;CACzC,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,gBAAb,cAAmC,UAAU;CAC3C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,qBAAb,cAAwC,UAAU;CAChD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../../../../../../core/src/http/errors/errors.ts"],"sourcesContent":["export class HttpError extends Error {\r\n  public constructor(\r\n    public status: number,\r\n    public message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(message);\r\n    this.name = \"HttpError\";\r\n  }\r\n}\r\n\r\nexport class ResourceNotFoundError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(404, message, payload);\r\n    this.name = \"ResourceNotFoundError\";\r\n  }\r\n}\r\n\r\nexport class UnAuthorizedError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(401, message, payload);\r\n    this.name = \"UnAuthorizedError\";\r\n  }\r\n}\r\n\r\nexport class ForbiddenError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(403, message, payload);\r\n    this.name = \"ForbiddenError\";\r\n  }\r\n}\r\n\r\nexport class BadRequestError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(400, message, payload);\r\n    this.name = \"BadRequestError\";\r\n  }\r\n}\r\n\r\nexport class ServerError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(500, message, payload);\r\n    this.name = \"ServerError\";\r\n  }\r\n}\r\n\r\nexport class ConflictError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(409, message, payload);\r\n    this.name = \"ConflictError\";\r\n  }\r\n}\r\n\r\nexport class NotAcceptableError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(406, message, payload);\r\n    this.name = \"NotAcceptableError\";\r\n  }\r\n}\r\n\r\nexport class NotAllowedError extends HttpError {\r\n  public constructor(\r\n    message: string,\r\n    public payload?: any,\r\n  ) {\r\n    super(405, message, payload);\r\n    this.name = \"NotAllowedError\";\r\n  }\r\n}\r\n"],"mappings":";AAAA,IAAa,YAAb,cAA+B,MAAM;CACnC,AAAO,YACL,AAAO,QACP,AAAO,SACP,AAAO,SACP;EACA,MAAM,OAAO;EAJN;EACA;EACA;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,wBAAb,cAA2C,UAAU;CACnD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,oBAAb,cAAuC,UAAU;CAC/C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,iBAAb,cAAoC,UAAU;CAC5C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,cAAb,cAAiC,UAAU;CACzC,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,gBAAb,cAAmC,UAAU;CAC3C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,qBAAb,cAAwC,UAAU;CAChD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF"}

package/esm/http/events.d.mts

@@ -1,6 +1,6 @@
 import { Response } from "./response.mjs";
 
-//#region ../@warlock.js/core/src/http/events.d.ts
+//#region ../core/src/http/events.d.ts
 declare function logResponse(response: Response): void;
 declare function wrapResponseInDataKey(response: Response): void;
 //#endregion