@warlock.js/core 5.29.0 → 5.30.0

package/esm/http/database/RequestLog.d.mts

@@ -1,7 +1,7 @@
 import { Infer } from "@warlock.js/seal";
 import { Model } from "@warlock.js/cascade";
 
-//#region ../core/src/http/database/RequestLog.d.ts
+//#region ../../packages/core/src/http/database/RequestLog.d.ts
 declare const schema: import("@warlock.js/seal").ObjectValidator<{
   statusCode: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
   responseTime: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
@@ -29,61 +29,37 @@ declare const schema: import("@warlock.js/seal").ObjectValidator<{
   requestQuery: import("@warlock.js/seal").RecordValidator & {
     valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
   } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-}> & import("@warlock.js/seal").StandardSchemaV1<import("@warlock.js/seal").InferInputObjectShape<{
-  statusCode: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseTime: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseSize: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseBody: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  responseHeaders: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  ip: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  method: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  route: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  requestHeaders: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  userAgent: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  referer: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  requestBody: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  requestParams: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  requestQuery: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-}>, import("@warlock.js/seal").InferInputObjectShape<{
-  statusCode: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseTime: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseSize: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-  responseBody: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  responseHeaders: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  ip: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  method: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  route: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  requestHeaders: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  userAgent: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  referer: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-  requestBody: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  requestParams: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  requestQuery: import("@warlock.js/seal").RecordValidator & {
-    valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-  } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-}>>;
+}> & import("@warlock.js/seal").StandardSchemaV1<{
+  statusCode: number;
+  responseTime: number;
+  responseSize: number;
+  responseBody: Record<string, any>;
+  responseHeaders: Record<string, any>;
+  ip: string;
+  method: string;
+  route: string;
+  requestHeaders: Record<string, any>;
+  userAgent: string;
+  referer: string;
+  requestBody: Record<string, any>;
+  requestParams: Record<string, any>;
+  requestQuery: Record<string, any>;
+}, {
+  statusCode: number;
+  responseTime: number;
+  responseSize: number;
+  responseBody: Record<string, any>;
+  responseHeaders: Record<string, any>;
+  ip: string;
+  method: string;
+  route: string;
+  requestHeaders: Record<string, any>;
+  userAgent: string;
+  referer: string;
+  requestBody: Record<string, any>;
+  requestParams: Record<string, any>;
+  requestQuery: Record<string, any>;
+}>;
 type RequestLogSchema = Infer.Output<typeof schema>;
 declare class RequestLog extends Model<RequestLogSchema> {
   /**
@@ -120,61 +96,37 @@ declare class RequestLog extends Model<RequestLogSchema> {
     requestQuery: import("@warlock.js/seal").RecordValidator & {
       valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
     } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  }> & import("@warlock.js/seal").StandardSchemaV1<import("@warlock.js/seal").InferInputObjectShape<{
-    statusCode: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseTime: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseSize: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseBody: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    responseHeaders: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    ip: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    method: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    route: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    requestHeaders: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    userAgent: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    referer: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    requestBody: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    requestParams: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    requestQuery: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  }>, import("@warlock.js/seal").InferInputObjectShape<{
-    statusCode: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseTime: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseSize: import("@warlock.js/seal").NumberValidator & import("@warlock.js/seal").StandardSchemaV1<number, number>;
-    responseBody: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    responseHeaders: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    ip: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    method: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    route: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    requestHeaders: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    userAgent: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    referer: import("@warlock.js/seal").StringValidator & import("@warlock.js/seal").StandardSchemaV1<string, string>;
-    requestBody: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    requestParams: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-    requestQuery: import("@warlock.js/seal").RecordValidator & {
-      valueValidator: import("@warlock.js/seal").AnyValidator & import("@warlock.js/seal").StandardSchemaV1<any, any>;
-    } & import("@warlock.js/seal").StandardSchemaV1<Record<string, any>, Record<string, any>>;
-  }>>;
+  }> & import("@warlock.js/seal").StandardSchemaV1<{
+    statusCode: number;
+    responseTime: number;
+    responseSize: number;
+    responseBody: Record<string, any>;
+    responseHeaders: Record<string, any>;
+    ip: string;
+    method: string;
+    route: string;
+    requestHeaders: Record<string, any>;
+    userAgent: string;
+    referer: string;
+    requestBody: Record<string, any>;
+    requestParams: Record<string, any>;
+    requestQuery: Record<string, any>;
+  }, {
+    statusCode: number;
+    responseTime: number;
+    responseSize: number;
+    responseBody: Record<string, any>;
+    responseHeaders: Record<string, any>;
+    ip: string;
+    method: string;
+    route: string;
+    requestHeaders: Record<string, any>;
+    userAgent: string;
+    referer: string;
+    requestBody: Record<string, any>;
+    requestParams: Record<string, any>;
+    requestQuery: Record<string, any>;
+  }>;
 }
 //#endregion
 export { RequestLog };

package/esm/http/database/RequestLog.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestLog.d.mts","names":[],"sources":["../../../../../../../../core/src/http/database/RequestLog.ts"],"mappings":";;;;cAGM,MAAA,6BAAM,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAiBP,gBAAA,GAAmB,KAAA,CAAM,MAAM,QAAQ,MAAA;AAAA,cAE/B,UAAA,SAAmB,KAAA,CAAM,gBAAA;;;;SAItB,KAAA;;;;SAKA,MAAA,6BAAM,eAAA"}
+{"version":3,"file":"RequestLog.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/database/RequestLog.ts"],"mappings":";;;;cAGM,MAAA,6BAAM,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAiBP,gBAAA,GAAmB,KAAA,CAAM,MAAM,QAAQ,MAAA;AAAA,cAE/B,UAAA,SAAmB,KAAA,CAAM,gBAAA;;;;SAItB,KAAA;;;;SAKA,MAAA,6BAAM,eAAA"}

package/esm/http/database/RequestLog.mjs

@@ -1,7 +1,7 @@
 import { v } from "@warlock.js/seal";
 import { Model } from "@warlock.js/cascade";
 
-//#region ../core/src/http/database/RequestLog.ts
+//#region ../../packages/core/src/http/database/RequestLog.ts
 const schema = v.object({
 	statusCode: v.number(),
 	responseTime: v.number(),

package/esm/http/database/RequestLog.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"RequestLog.mjs","names":[],"sources":["../../../../../../../../core/src/http/database/RequestLog.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\nimport { type Infer, v } from \"@warlock.js/seal\";\n\nconst schema = v.object({\n  statusCode: v.number(),\n  responseTime: v.number(),\n  responseSize: v.number(),\n  responseBody: v.record(v.any()),\n  responseHeaders: v.record(v.any()),\n  ip: v.string(),\n  method: v.string(),\n  route: v.string(),\n  requestHeaders: v.record(v.any()),\n  userAgent: v.string(),\n  referer: v.string(),\n  requestBody: v.record(v.any()),\n  requestParams: v.record(v.any()),\n  requestQuery: v.record(v.any()),\n});\n\ntype RequestLogSchema = Infer.Output<typeof schema>;\n\nexport class RequestLog extends Model<RequestLogSchema> {\n  /**\n   * {@inheritdoc}\n   */\n  public static table = \"request_logs\";\n\n  /**\n   * {@inheritdoc}\n   */\n  public static schema = schema;\n}\n"],"mappings":";;;;AAGA,MAAM,SAAS,EAAE,OAAO;CACtB,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;CAC9B,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC;CACjC,IAAI,EAAE,OAAO;CACb,QAAQ,EAAE,OAAO;CACjB,OAAO,EAAE,OAAO;CAChB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;CAChC,WAAW,EAAE,OAAO;CACpB,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;CAC7B,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;CAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAChC,CAAC;AAID,IAAa,aAAb,cAAgC,MAAwB;;eAIhC;;;gBAKC;;AACzB"}
+{"version":3,"file":"RequestLog.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/database/RequestLog.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\nimport { type Infer, v } from \"@warlock.js/seal\";\n\nconst schema = v.object({\n  statusCode: v.number(),\n  responseTime: v.number(),\n  responseSize: v.number(),\n  responseBody: v.record(v.any()),\n  responseHeaders: v.record(v.any()),\n  ip: v.string(),\n  method: v.string(),\n  route: v.string(),\n  requestHeaders: v.record(v.any()),\n  userAgent: v.string(),\n  referer: v.string(),\n  requestBody: v.record(v.any()),\n  requestParams: v.record(v.any()),\n  requestQuery: v.record(v.any()),\n});\n\ntype RequestLogSchema = Infer.Output<typeof schema>;\n\nexport class RequestLog extends Model<RequestLogSchema> {\n  /**\n   * {@inheritdoc}\n   */\n  public static table = \"request_logs\";\n\n  /**\n   * {@inheritdoc}\n   */\n  public static schema = schema;\n}\n"],"mappings":";;;;AAGA,MAAM,SAAS,EAAE,OAAO;CACtB,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;CAC9B,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC;CACjC,IAAI,EAAE,OAAO;CACb,QAAQ,EAAE,OAAO;CACjB,OAAO,EAAE,OAAO;CAChB,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;CAChC,WAAW,EAAE,OAAO;CACpB,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;CAC7B,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC;CAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAChC,CAAC;AAID,IAAa,aAAb,cAAgC,MAAwB;;eAIhC;;;gBAKC;;AACzB"}

package/esm/http/error-codes.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/error-codes.d.ts
+//#region ../../packages/core/src/http/error-codes.d.ts
 /**
  * HTTP middleware error codes.
  *

package/esm/http/error-codes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.d.mts","names":[],"sources":["../../../../../../../core/src/http/error-codes.ts"],"mappings":";;AASA;;;;;;;;aAAY,cAAA;EA8BV;;;;EAzBA,sBAAA;;;;EAKA,qBAAA;;;;EAKA,iBAAA;;;;EAKA,uBAAA;;;;EAKA,YAAA;;;;EAKA,WAAA;;;;EAKA,WAAA;;;;;;;;;;;;;EAcA,kBAAA;AAAA"}
+{"version":3,"file":"error-codes.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/error-codes.ts"],"mappings":";;AASA;;;;;;;;aAAY,cAAA;EA8BV;;;;EAzBA,sBAAA;;;;EAKA,qBAAA;;;;EAKA,iBAAA;;;;EAKA,uBAAA;;;;EAKA,YAAA;;;;EAKA,WAAA;;;;EAKA,WAAA;;;;;;;;;;;;;EAcA,kBAAA;AAAA"}

package/esm/http/error-codes.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/error-codes.ts
+//#region ../../packages/core/src/http/error-codes.ts
 /**
 * HTTP middleware error codes.
 *

package/esm/http/error-codes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../../../../../core/src/http/error-codes.ts"],"sourcesContent":["/**\n * HTTP middleware error codes.\n *\n * Mirrors the convention used by `@warlock.js/auth`'s `AuthErrorCodes` —\n * stable string identifiers clients can branch on without parsing message text.\n *\n * Range `EC100..EC199` is reserved for `@warlock.js/core` HTTP middleware.\n * `EC001..EC099` belongs to `@warlock.js/auth`.\n */\nexport enum HttpErrorCodes {\n  /**\n   * Same idempotency key reused with a different request body.\n   * Client likely has a bug — same intent must reuse the same body.\n   */\n  IdempotencyKeyConflict = \"EC100\",\n\n  /**\n   * Idempotency key header is malformed (wrong length / non-printable chars).\n   */\n  IdempotencyKeyInvalid = \"EC101\",\n\n  /**\n   * Per-route rate limit exceeded. Different from the global `@fastify/rate-limit` 429.\n   */\n  RateLimitExceeded = \"EC102\",\n\n  /**\n   * Per-route concurrency cap reached — too many in-flight requests against this endpoint.\n   */\n  ConcurrencyLimitReached = \"EC103\",\n\n  /**\n   * Request `Content-Length` exceeds the per-route body cap.\n   */\n  BodyTooLarge = \"EC104\",\n\n  /**\n   * Client IP failed the `ipFilter()` allow/deny check.\n   */\n  IpForbidden = \"EC105\",\n\n  /**\n   * Application is in maintenance mode and the request did not match the allowlist.\n   */\n  Maintenance = \"EC106\",\n\n  /**\n   * Default core CSRF-Origin guard (SECURITY, card 8a752ab2, `./csrf-default-guard.ts`)\n   * refused an unsafe-method, cookie-carrying request whose `Origin`/`Referer`\n   * did not name the request's own origin or an entry in\n   * `auth.csrf.allowedOrigins`.\n   *\n   * Deliberately reuses `@warlock.js/auth`'s `AuthErrorCodes.CsrfOriginMismatch`\n   * value (`EC006`), NOT a fresh `EC1xx` core code: this is the exact same\n   * failure class `authMiddleware(\"cookie:*\")`'s own CSRF-Origin check\n   * reports — one client-visible identifier for \"CSRF Origin check failed\",\n   * regardless of which seam caught it.\n   */\n  CsrfOriginMismatch = \"EC006\",\n}\n"],"mappings":";;;;;;;;;;AASA,IAAY,iBAAL;;;;;CAKL;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;;;;;;;;;;CAcA;;AACF"}
+{"version":3,"file":"error-codes.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/error-codes.ts"],"sourcesContent":["/**\n * HTTP middleware error codes.\n *\n * Mirrors the convention used by `@warlock.js/auth`'s `AuthErrorCodes` —\n * stable string identifiers clients can branch on without parsing message text.\n *\n * Range `EC100..EC199` is reserved for `@warlock.js/core` HTTP middleware.\n * `EC001..EC099` belongs to `@warlock.js/auth`.\n */\nexport enum HttpErrorCodes {\n  /**\n   * Same idempotency key reused with a different request body.\n   * Client likely has a bug — same intent must reuse the same body.\n   */\n  IdempotencyKeyConflict = \"EC100\",\n\n  /**\n   * Idempotency key header is malformed (wrong length / non-printable chars).\n   */\n  IdempotencyKeyInvalid = \"EC101\",\n\n  /**\n   * Per-route rate limit exceeded. Different from the global `@fastify/rate-limit` 429.\n   */\n  RateLimitExceeded = \"EC102\",\n\n  /**\n   * Per-route concurrency cap reached — too many in-flight requests against this endpoint.\n   */\n  ConcurrencyLimitReached = \"EC103\",\n\n  /**\n   * Request `Content-Length` exceeds the per-route body cap.\n   */\n  BodyTooLarge = \"EC104\",\n\n  /**\n   * Client IP failed the `ipFilter()` allow/deny check.\n   */\n  IpForbidden = \"EC105\",\n\n  /**\n   * Application is in maintenance mode and the request did not match the allowlist.\n   */\n  Maintenance = \"EC106\",\n\n  /**\n   * Default core CSRF-Origin guard (SECURITY, card 8a752ab2, `./csrf-default-guard.ts`)\n   * refused an unsafe-method, cookie-carrying request whose `Origin`/`Referer`\n   * did not name the request's own origin or an entry in\n   * `auth.csrf.allowedOrigins`.\n   *\n   * Deliberately reuses `@warlock.js/auth`'s `AuthErrorCodes.CsrfOriginMismatch`\n   * value (`EC006`), NOT a fresh `EC1xx` core code: this is the exact same\n   * failure class `authMiddleware(\"cookie:*\")`'s own CSRF-Origin check\n   * reports — one client-visible identifier for \"CSRF Origin check failed\",\n   * regardless of which seam caught it.\n   */\n  CsrfOriginMismatch = \"EC006\",\n}\n"],"mappings":";;;;;;;;;;AASA,IAAY,iBAAL;;;;;CAKL;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;CAKA;;;;;;;;;;;;;CAcA;;AACF"}

package/esm/http/error-mapper.d.mts

@@ -0,0 +1,48 @@
+import { HttpError } from "./errors/errors.mjs";
+import { Request } from "./request.mjs";
+
+//#region ../../packages/core/src/http/error-mapper.d.ts
+/**
+ * What an {@link HttpErrorMapper} answers for an error it recognises.
+ */
+type HttpErrorMapping = {
+  /**
+   * The HTTP status to answer with.
+   */
+  status: number;
+  /**
+   * The message sent as `{ error }`. Defaults to the original error's message
+   * for a 4xx and to the opaque `"Internal server error."` for a 5xx, so a
+   * mapped server fault never echoes an internal message to the client.
+   */
+  message?: string;
+  /**
+   * Sent as `{ payload }`, like `HttpError.payload`.
+   */
+  payload?: unknown;
+};
+/**
+ * `http.errorMapper`: turns an error thrown by middleware or a handler into an
+ * HTTP answer. Lets domain errors that must also exist outside an HTTP process
+ * (a worker, a CLI, a standalone helper) carry a status without extending
+ * Core's `HttpError`.
+ *
+ * Called only for errors that are not already an `HttpError`. Return a
+ * mapping (or an `HttpError`) to answer with it, or `undefined` to keep the
+ * default handling (a model validation error keeps its configured status,
+ * anything else is an opaque 500).
+ *
+ * @example
+ * ```ts
+ * errorMapper(error) {
+ *   if (error instanceof DomainNotFoundError) return { status: 404 };
+ *   if (error instanceof Error && typeof (error as any).status === "number") {
+ *     return { status: (error as any).status };
+ *   }
+ * }
+ * ```
+ */
+type HttpErrorMapper = (error: unknown, request: Request<any>) => HttpErrorMapping | HttpError | null | undefined;
+//#endregion
+export { HttpErrorMapper, HttpErrorMapping };
+//# sourceMappingURL=error-mapper.d.mts.map

package/esm/http/error-mapper.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-mapper.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/error-mapper.ts"],"mappings":";;;;;;AAQA;KAAY,gBAAA;;;;EAIV,MAAA;EAUA;;AAAO;AAwBT;;EA5BE,OAAA;EA8BS;;;EA1BT,OAAA;AAAA;;;;;;;AA2B+B;;;;;;;;;;;;;;;KAHrB,eAAA,IACV,KAAA,WACA,OAAA,EAAS,OAAA,UACN,gBAAA,GAAmB,SAAA"}

package/esm/http/error-mapper.mjs

@@ -0,0 +1,48 @@
+import { HttpError } from "./errors/errors.mjs";
+import config from "@mongez/config";
+import { log } from "@warlock.js/logger";
+
+//#region ../../packages/core/src/http/error-mapper.ts
+const OPAQUE_SERVER_ERROR = "Internal server error.";
+/**
+* Run the configured `http.errorMapper` and normalise its answer to an
+* `HttpError`, or return the error unchanged when there is no mapper, the
+* error already is an `HttpError`, or the mapper declines it.
+*
+* The mapped `HttpError` keeps the original error's name and stack (for the
+* request log) and carries it as `cause`. A mapper that throws is a bug in the
+* app's mapper, not in the request: it is logged and the original error is
+* handled as if no mapper were configured.
+* @internal
+*/
+function mapRequestError(error, request) {
+	if (error instanceof HttpError) return error;
+	const mapper = config.get("http.errorMapper");
+	if (typeof mapper !== "function") return error;
+	let mapping;
+	try {
+		mapping = mapper(error, request);
+	} catch (mapperError) {
+		log.error("http", "error-mapper", mapperError, { requestId: request.id });
+		return error;
+	}
+	if (!mapping) return error;
+	if (mapping instanceof HttpError) return mapping;
+	if (!Number.isInteger(mapping.status) || mapping.status < 400 || mapping.status > 599) {
+		log.error("http", "error-mapper", /* @__PURE__ */ new Error(`http.errorMapper returned an invalid status: ${String(mapping.status)}`), { requestId: request.id });
+		return error;
+	}
+	const original = error instanceof Error ? error : void 0;
+	const message = mapping.message ?? (mapping.status < 500 && original ? original.message : OPAQUE_SERVER_ERROR);
+	const mapped = new HttpError(mapping.status, message, mapping.payload);
+	if (original) {
+		mapped.name = original.name;
+		mapped.stack = original.stack;
+		mapped.cause = original;
+	}
+	return mapped;
+}
+
+//#endregion
+export { mapRequestError };
+//# sourceMappingURL=error-mapper.mjs.map

package/esm/http/error-mapper.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-mapper.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/error-mapper.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { log } from \"@warlock.js/logger\";\nimport { HttpError } from \"./errors\";\nimport type { Request } from \"./request\";\n\n/**\n * What an {@link HttpErrorMapper} answers for an error it recognises.\n */\nexport type HttpErrorMapping = {\n  /**\n   * The HTTP status to answer with.\n   */\n  status: number;\n  /**\n   * The message sent as `{ error }`. Defaults to the original error's message\n   * for a 4xx and to the opaque `\"Internal server error.\"` for a 5xx, so a\n   * mapped server fault never echoes an internal message to the client.\n   */\n  message?: string;\n  /**\n   * Sent as `{ payload }`, like `HttpError.payload`.\n   */\n  payload?: unknown;\n};\n\n/**\n * `http.errorMapper`: turns an error thrown by middleware or a handler into an\n * HTTP answer. Lets domain errors that must also exist outside an HTTP process\n * (a worker, a CLI, a standalone helper) carry a status without extending\n * Core's `HttpError`.\n *\n * Called only for errors that are not already an `HttpError`. Return a\n * mapping (or an `HttpError`) to answer with it, or `undefined` to keep the\n * default handling (a model validation error keeps its configured status,\n * anything else is an opaque 500).\n *\n * @example\n * ```ts\n * errorMapper(error) {\n *   if (error instanceof DomainNotFoundError) return { status: 404 };\n *   if (error instanceof Error && typeof (error as any).status === \"number\") {\n *     return { status: (error as any).status };\n *   }\n * }\n * ```\n */\nexport type HttpErrorMapper = (\n  error: unknown,\n  request: Request<any>,\n) => HttpErrorMapping | HttpError | null | undefined;\n\nconst OPAQUE_SERVER_ERROR = \"Internal server error.\";\n\n/**\n * Run the configured `http.errorMapper` and normalise its answer to an\n * `HttpError`, or return the error unchanged when there is no mapper, the\n * error already is an `HttpError`, or the mapper declines it.\n *\n * The mapped `HttpError` keeps the original error's name and stack (for the\n * request log) and carries it as `cause`. A mapper that throws is a bug in the\n * app's mapper, not in the request: it is logged and the original error is\n * handled as if no mapper were configured.\n * @internal\n */\nexport function mapRequestError(error: unknown, request: Request<any>): unknown {\n  if (error instanceof HttpError) {\n    return error;\n  }\n\n  const mapper = config.get(\"http.errorMapper\") as HttpErrorMapper | undefined;\n\n  if (typeof mapper !== \"function\") {\n    return error;\n  }\n\n  let mapping: ReturnType<HttpErrorMapper>;\n\n  try {\n    mapping = mapper(error, request);\n  } catch (mapperError) {\n    log.error(\"http\", \"error-mapper\", mapperError, { requestId: request.id });\n\n    return error;\n  }\n\n  if (!mapping) {\n    return error;\n  }\n\n  if (mapping instanceof HttpError) {\n    return mapping;\n  }\n\n  if (!Number.isInteger(mapping.status) || mapping.status < 400 || mapping.status > 599) {\n    log.error(\n      \"http\",\n      \"error-mapper\",\n      new Error(`http.errorMapper returned an invalid status: ${String(mapping.status)}`),\n      { requestId: request.id },\n    );\n\n    return error;\n  }\n\n  const original = error instanceof Error ? error : undefined;\n  const message =\n    mapping.message ?? (mapping.status < 500 && original ? original.message : OPAQUE_SERVER_ERROR);\n\n  const mapped = new HttpError(mapping.status, message, mapping.payload);\n\n  if (original) {\n    mapped.name = original.name;\n    mapped.stack = original.stack;\n    mapped.cause = original;\n  }\n\n  return mapped;\n}\n"],"mappings":";;;;;AAmDA,MAAM,sBAAsB;;;;;;;;;;;;AAa5B,SAAgB,gBAAgB,OAAgB,SAAgC;CAC9E,IAAI,iBAAiB,WACnB,OAAO;CAGT,MAAM,SAAS,OAAO,IAAI,kBAAkB;CAE5C,IAAI,OAAO,WAAW,YACpB,OAAO;CAGT,IAAI;CAEJ,IAAI;EACF,UAAU,OAAO,OAAO,OAAO;CACjC,SAAS,aAAa;EACpB,IAAI,MAAM,QAAQ,gBAAgB,aAAa,EAAE,WAAW,QAAQ,GAAG,CAAC;EAExE,OAAO;CACT;CAEA,IAAI,CAAC,SACH,OAAO;CAGT,IAAI,mBAAmB,WACrB,OAAO;CAGT,IAAI,CAAC,OAAO,UAAU,QAAQ,MAAM,KAAK,QAAQ,SAAS,OAAO,QAAQ,SAAS,KAAK;EACrF,IAAI,MACF,QACA,gCACA,IAAI,MAAM,gDAAgD,OAAO,QAAQ,MAAM,GAAG,GAClF,EAAE,WAAW,QAAQ,GAAG,CAC1B;EAEA,OAAO;CACT;CAEA,MAAM,WAAW,iBAAiB,QAAQ,QAAQ;CAClD,MAAM,UACJ,QAAQ,YAAY,QAAQ,SAAS,OAAO,WAAW,SAAS,UAAU;CAE5E,MAAM,SAAS,IAAI,UAAU,QAAQ,QAAQ,SAAS,QAAQ,OAAO;CAErE,IAAI,UAAU;EACZ,OAAO,OAAO,SAAS;EACvB,OAAO,QAAQ,SAAS;EACxB,OAAO,QAAQ;CACjB;CAEA,OAAO;AACT"}

package/esm/http/errors/errors.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/errors/errors.d.ts
+//#region ../../packages/core/src/http/errors/errors.d.ts
 declare class HttpError extends Error {
   status: number;
   message: string;

package/esm/http/errors/errors.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.mts","names":[],"sources":["../../../../../../../../core/src/http/errors/errors.ts"],"mappings":";cAAa,SAAA,SAAkB,KAAK;EAEzB,MAAA;EACA,OAAA;EACA,OAAA;cAFA,MAAA,UACA,OAAA,UACA,OAAA;AAAA;AAAA,cAOE,qBAAA,SAA8B,SAAS;EAGzC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,iBAAA,SAA0B,SAAS;EAGrC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,cAAA,SAAuB,SAAS;EAGlC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,WAAA,SAAoB,SAAS;EAG/B,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,aAAA,SAAsB,SAAS;EAGjC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,kBAAA,SAA2B,SAAS;EAGtC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;;;;;;;;;;AAlDa;AAOxB;;cA8Da,yBAAA,SAAkC,KAAK;cAC/B,UAAA;AAAA"}
+{"version":3,"file":"errors.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/errors/errors.ts"],"mappings":";cAAa,SAAA,SAAkB,KAAK;EAEzB,MAAA;EACA,OAAA;EACA,OAAA;cAFA,MAAA,UACA,OAAA,UACA,OAAA;AAAA;AAAA,cAOE,qBAAA,SAA8B,SAAS;EAGzC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,iBAAA,SAA0B,SAAS;EAGrC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,cAAA,SAAuB,SAAS;EAGlC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,WAAA,SAAoB,SAAS;EAG/B,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,aAAA,SAAsB,SAAS;EAGjC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,kBAAA,SAA2B,SAAS;EAGtC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;AAAA,cAOE,eAAA,SAAwB,SAAS;EAGnC,OAAA;cADP,OAAA,UACO,OAAA;AAAA;;;;;;;;;;AAlDa;AAOxB;;cA8Da,yBAAA,SAAkC,KAAK;cAC/B,UAAA;AAAA"}

package/esm/http/errors/errors.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/errors/errors.ts
+//#region ../../packages/core/src/http/errors/errors.ts
 var HttpError = class extends Error {
 	constructor(status, message, payload) {
 		super(message);

package/esm/http/errors/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","names":[],"sources":["../../../../../../../../core/src/http/errors/errors.ts"],"sourcesContent":["export class HttpError extends Error {\n  public constructor(\n    public status: number,\n    public message: string,\n    public payload?: any,\n  ) {\n    super(message);\n    this.name = \"HttpError\";\n  }\n}\n\nexport class ResourceNotFoundError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(404, message, payload);\n    this.name = \"ResourceNotFoundError\";\n  }\n}\n\nexport class UnAuthorizedError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(401, message, payload);\n    this.name = \"UnAuthorizedError\";\n  }\n}\n\nexport class ForbiddenError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(403, message, payload);\n    this.name = \"ForbiddenError\";\n  }\n}\n\nexport class BadRequestError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(400, message, payload);\n    this.name = \"BadRequestError\";\n  }\n}\n\nexport class ServerError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(500, message, payload);\n    this.name = \"ServerError\";\n  }\n}\n\nexport class ConflictError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(409, message, payload);\n    this.name = \"ConflictError\";\n  }\n}\n\nexport class NotAcceptableError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(406, message, payload);\n    this.name = \"NotAcceptableError\";\n  }\n}\n\nexport class NotAllowedError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(405, message, payload);\n    this.name = \"NotAllowedError\";\n  }\n}\n\n/**\n * Thrown by `Request.prototype.cookie` / `Request.prototype.hasCookie` when\n * `@fastify/cookie` was never registered on this Fastify instance, so\n * `baseRequest.cookies` is `undefined` rather than an (possibly empty) object.\n *\n * A by-name cookie read is a deliberate assertion by the caller — \"this\n * cookie should be readable here\" — so an unavailable jar is a configuration\n * fault, not an absent cookie, and must not be swallowed into a default\n * value or a silent `false`. Contrast `Request.prototype.cookies`, which\n * stays lenient because the framework's own opportunistic reads (e.g.\n * locale resolution) must not throw on a request that simply has no jar.\n */\nexport class CookieJarUnavailableError extends Error {\n  public constructor(cookieName: string) {\n    super(\n      `Cannot read cookie \"${cookieName}\": the cookie jar is unavailable because ` +\n        \"@fastify/cookie is not registered on this Fastify instance. \" +\n        \"Register the plugin (see core's http/plugins.ts) before reading cookies by name.\",\n    );\n\n    this.name = \"CookieJarUnavailableError\";\n  }\n}\n"],"mappings":";AAAA,IAAa,YAAb,cAA+B,MAAM;CACnC,AAAO,YACL,AAAO,QACP,AAAO,SACP,AAAO,SACP;EACA,MAAM,OAAO;EAJN;EACA;EACA;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,wBAAb,cAA2C,UAAU;CACnD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,oBAAb,cAAuC,UAAU;CAC/C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,iBAAb,cAAoC,UAAU;CAC5C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,cAAb,cAAiC,UAAU;CACzC,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,gBAAb,cAAmC,UAAU;CAC3C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,qBAAb,cAAwC,UAAU;CAChD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;AAcA,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAO,YAAY,YAAoB;EACrC,MACE,uBAAuB,WAAW,sLAGpC;EAEA,KAAK,OAAO;CACd;AACF"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/errors/errors.ts"],"sourcesContent":["export class HttpError extends Error {\n  public constructor(\n    public status: number,\n    public message: string,\n    public payload?: any,\n  ) {\n    super(message);\n    this.name = \"HttpError\";\n  }\n}\n\nexport class ResourceNotFoundError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(404, message, payload);\n    this.name = \"ResourceNotFoundError\";\n  }\n}\n\nexport class UnAuthorizedError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(401, message, payload);\n    this.name = \"UnAuthorizedError\";\n  }\n}\n\nexport class ForbiddenError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(403, message, payload);\n    this.name = \"ForbiddenError\";\n  }\n}\n\nexport class BadRequestError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(400, message, payload);\n    this.name = \"BadRequestError\";\n  }\n}\n\nexport class ServerError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(500, message, payload);\n    this.name = \"ServerError\";\n  }\n}\n\nexport class ConflictError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(409, message, payload);\n    this.name = \"ConflictError\";\n  }\n}\n\nexport class NotAcceptableError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(406, message, payload);\n    this.name = \"NotAcceptableError\";\n  }\n}\n\nexport class NotAllowedError extends HttpError {\n  public constructor(\n    message: string,\n    public payload?: any,\n  ) {\n    super(405, message, payload);\n    this.name = \"NotAllowedError\";\n  }\n}\n\n/**\n * Thrown by `Request.prototype.cookie` / `Request.prototype.hasCookie` when\n * `@fastify/cookie` was never registered on this Fastify instance, so\n * `baseRequest.cookies` is `undefined` rather than an (possibly empty) object.\n *\n * A by-name cookie read is a deliberate assertion by the caller — \"this\n * cookie should be readable here\" — so an unavailable jar is a configuration\n * fault, not an absent cookie, and must not be swallowed into a default\n * value or a silent `false`. Contrast `Request.prototype.cookies`, which\n * stays lenient because the framework's own opportunistic reads (e.g.\n * locale resolution) must not throw on a request that simply has no jar.\n */\nexport class CookieJarUnavailableError extends Error {\n  public constructor(cookieName: string) {\n    super(\n      `Cannot read cookie \"${cookieName}\": the cookie jar is unavailable because ` +\n        \"@fastify/cookie is not registered on this Fastify instance. \" +\n        \"Register the plugin (see core's http/plugins.ts) before reading cookies by name.\",\n    );\n\n    this.name = \"CookieJarUnavailableError\";\n  }\n}\n"],"mappings":";AAAA,IAAa,YAAb,cAA+B,MAAM;CACnC,AAAO,YACL,AAAO,QACP,AAAO,SACP,AAAO,SACP;EACA,MAAM,OAAO;EAJN;EACA;EACA;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,wBAAb,cAA2C,UAAU;CACnD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,oBAAb,cAAuC,UAAU;CAC/C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,iBAAb,cAAoC,UAAU;CAC5C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,cAAb,cAAiC,UAAU;CACzC,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,gBAAb,cAAmC,UAAU;CAC3C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,qBAAb,cAAwC,UAAU;CAChD,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;AAEA,IAAa,kBAAb,cAAqC,UAAU;CAC7C,AAAO,YACL,SACA,AAAO,SACP;EACA,MAAM,KAAK,SAAS,OAAO;EAFpB;EAGP,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;AAcA,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAO,YAAY,YAAoB;EACrC,MACE,uBAAuB,WAAW,sLAGpC;EAEA,KAAK,OAAO;CACd;AACF"}

package/esm/http/events.d.mts

@@ -1,6 +1,6 @@
 import { Response } from "./response.mjs";
 
-//#region ../core/src/http/events.d.ts
+//#region ../../packages/core/src/http/events.d.ts
 declare function logResponse(response: Response): void;
 declare function wrapResponseInDataKey(response: Response): void;
 //#endregion

package/esm/http/events.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.mts","names":[],"sources":["../../../../../../../core/src/http/events.ts"],"mappings":";;;iBAGgB,WAAA,CAAY,QAAkB,EAAR,QAAQ;AAAA,iBAoB9B,qBAAA,CAAsB,QAAkB,EAAR,QAAQ"}
+{"version":3,"file":"events.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/events.ts"],"mappings":";;;iBAGgB,WAAA,CAAY,QAAkB,EAAR,QAAQ;AAAA,iBAoB9B,qBAAA,CAAsB,QAAkB,EAAR,QAAQ"}

package/esm/http/events.mjs

@@ -1,6 +1,6 @@
 import { RequestLog } from "./database/RequestLog.mjs";
 
-//#region ../core/src/http/events.ts
+//#region ../../packages/core/src/http/events.ts
 function logResponse(response) {
 	const request = response.request;
 	RequestLog.create({

package/esm/http/events.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"events.mjs","names":[],"sources":["../../../../../../../core/src/http/events.ts"],"sourcesContent":["import { RequestLog } from \"./database/RequestLog\";\nimport type { Response } from \"./response\";\n\nexport function logResponse(response: Response) {\n  const request = response.request;\n  RequestLog.create({\n    statusCode: response.statusCode,\n    responseTime: response.getResponseTime(),\n    responseSize: response.getHeader(\"Content-Length\"),\n    responseBody: response.body,\n    responseHeaders: response.getHeaders(),\n    ip: request.ip,\n    method: request.route.method,\n    route: request.route.path,\n    requestHeaders: request.headers,\n    userAgent: request.userAgent,\n    referer: request.referer,\n    // requestBody: request.bodyInputs,\n    requestParams: request.params,\n    requestQuery: request.query,\n  });\n}\n\nexport function wrapResponseInDataKey(response: Response) {\n  if (typeof response.body === \"string\") return;\n\n  if (response.body) {\n    response.body = { data: response.body };\n  }\n}\n"],"mappings":";;;AAGA,SAAgB,YAAY,UAAoB;CAC9C,MAAM,UAAU,SAAS;CACzB,WAAW,OAAO;EAChB,YAAY,SAAS;EACrB,cAAc,SAAS,gBAAgB;EACvC,cAAc,SAAS,UAAU,gBAAgB;EACjD,cAAc,SAAS;EACvB,iBAAiB,SAAS,WAAW;EACrC,IAAI,QAAQ;EACZ,QAAQ,QAAQ,MAAM;EACtB,OAAO,QAAQ,MAAM;EACrB,gBAAgB,QAAQ;EACxB,WAAW,QAAQ;EACnB,SAAS,QAAQ;EAEjB,eAAe,QAAQ;EACvB,cAAc,QAAQ;CACxB,CAAC;AACH;AAEA,SAAgB,sBAAsB,UAAoB;CACxD,IAAI,OAAO,SAAS,SAAS,UAAU;CAEvC,IAAI,SAAS,MACX,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK;AAE1C"}
+{"version":3,"file":"events.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/events.ts"],"sourcesContent":["import { RequestLog } from \"./database/RequestLog\";\nimport type { Response } from \"./response\";\n\nexport function logResponse(response: Response) {\n  const request = response.request;\n  RequestLog.create({\n    statusCode: response.statusCode,\n    responseTime: response.getResponseTime(),\n    responseSize: response.getHeader(\"Content-Length\"),\n    responseBody: response.body,\n    responseHeaders: response.getHeaders(),\n    ip: request.ip,\n    method: request.route.method,\n    route: request.route.path,\n    requestHeaders: request.headers,\n    userAgent: request.userAgent,\n    referer: request.referer,\n    // requestBody: request.bodyInputs,\n    requestParams: request.params,\n    requestQuery: request.query,\n  });\n}\n\nexport function wrapResponseInDataKey(response: Response) {\n  if (typeof response.body === \"string\") return;\n\n  if (response.body) {\n    response.body = { data: response.body };\n  }\n}\n"],"mappings":";;;AAGA,SAAgB,YAAY,UAAoB;CAC9C,MAAM,UAAU,SAAS;CACzB,WAAW,OAAO;EAChB,YAAY,SAAS;EACrB,cAAc,SAAS,gBAAgB;EACvC,cAAc,SAAS,UAAU,gBAAgB;EACjD,cAAc,SAAS;EACvB,iBAAiB,SAAS,WAAW;EACrC,IAAI,QAAQ;EACZ,QAAQ,QAAQ,MAAM;EACtB,OAAO,QAAQ,MAAM;EACrB,gBAAgB,QAAQ;EACxB,WAAW,QAAQ;EACnB,SAAS,QAAQ;EAEjB,eAAe,QAAQ;EACvB,cAAc,QAAQ;CACxB,CAAC;AACH;AAEA,SAAgB,sBAAsB,UAAoB;CACxD,IAAI,OAAO,SAAS,SAAS,UAAU;CAEvC,IAAI,SAAS,MACX,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK;AAE1C"}

package/esm/http/flush-pending-cookies.mjs

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import path from "node:path";
 
-//#region ../core/src/http/flush-pending-cookies.ts
+//#region ../../packages/core/src/http/flush-pending-cookies.ts
 /** The installed `@fastify/cookie` version, or undefined when it can't be resolved. */
 function installedCookiePluginVersion() {
 	try {

package/esm/http/flush-pending-cookies.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"flush-pending-cookies.mjs","names":[],"sources":["../../../../../../../core/src/http/flush-pending-cookies.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport type { FastifyReply } from \"fastify\";\n\ntype ParkedCookie = { name: string; value: string; opts?: Record<string, unknown> };\n\n/** The installed `@fastify/cookie` version, or undefined when it can't be resolved. */\nfunction installedCookiePluginVersion(): string | undefined {\n  try {\n    const require = createRequire(path.join(process.cwd(), \"noop.js\"));\n\n    return (require(require.resolve(\"@fastify/cookie/package.json\")) as { version?: string })\n      .version;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * `@fastify/cookie` only parks cookies set via `reply.setCookie()` in a map\n * keyed by a private symbol; it serialises them in its own `onSend` hook.\n * Raw-path writers (`raw.writeHead`) bypass `onSend`, so they must call this\n * right before writing headers.\n *\n * Serialises the parked cookies, appends them to the `set-cookie` header\n * (skipping any value already present) and clears the map so a later `onSend`\n * cannot send them twice.\n *\n * Throws when the plugin is registered but its parked-cookie symbol cannot be\n * found: silently doing nothing would drop every cookie on raw paths. Does\n * nothing when the plugin is not registered.\n */\nexport function flushPendingCookies(reply: FastifyReply): void {\n  const parkedSymbol = Object.getOwnPropertySymbols(reply).find(\n    symbol => symbol.description === \"fastify.reply.setCookies\",\n  );\n\n  if (!parkedSymbol) {\n    if (typeof (reply as { setCookie?: unknown }).setCookie !== \"function\") return;\n\n    const version = installedCookiePluginVersion();\n\n    throw new Error(\n      `@fastify/cookie's internal cookie storage changed: reply.setCookie exists but the \"fastify.reply.setCookies\" symbol was not found${\n        version ? ` (installed @fastify/cookie@${version})` : \"\"\n      }. Cookies set before a raw-path response would be lost; update flushPendingCookies for this version.`,\n    );\n  }\n\n  const parked = (reply as unknown as Record<symbol, Map<string, ParkedCookie> | null>)[\n    parkedSymbol\n  ];\n\n  if (!parked || parked.size === 0) return;\n\n  const serializeCookie = (\n    reply.server as unknown as {\n      serializeCookie?: (name: string, value: string, opts?: unknown) => string;\n    }\n  ).serializeCookie;\n\n  if (!serializeCookie) return;\n\n  const existing = reply.getHeader(\"set-cookie\");\n  const cookies: string[] =\n    existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [String(existing)];\n\n  for (const cookie of parked.values()) {\n    const serialized = serializeCookie(cookie.name, cookie.value, cookie.opts);\n\n    if (!cookies.includes(serialized)) {\n      cookies.push(serialized);\n    }\n  }\n\n  reply.removeHeader(\"set-cookie\");\n  reply.header(\"set-cookie\", cookies);\n  parked.clear();\n}\n"],"mappings":";;;;;AAOA,SAAS,+BAAmD;CAC1D,IAAI;EACF,MAAM,UAAU,cAAc,KAAK,KAAK,QAAQ,IAAI,GAAG,SAAS,CAAC;EAEjE,OAAQ,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC,CAAC,CAC7D;CACL,QAAQ;EACN;CACF;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,oBAAoB,OAA2B;CAC7D,MAAM,eAAe,OAAO,sBAAsB,KAAK,CAAC,CAAC,MACvD,WAAU,OAAO,gBAAgB,0BACnC;CAEA,IAAI,CAAC,cAAc;EACjB,IAAI,OAAQ,MAAkC,cAAc,YAAY;EAExE,MAAM,UAAU,6BAA6B;EAE7C,MAAM,IAAI,MACR,oIACE,UAAU,+BAA+B,QAAQ,KAAK,GACvD,qGACH;CACF;CAEA,MAAM,SAAU,MACd;CAGF,IAAI,CAAC,UAAU,OAAO,SAAS,GAAG;CAElC,MAAM,kBACJ,MAAM,OAGN;CAEF,IAAI,CAAC,iBAAiB;CAEtB,MAAM,WAAW,MAAM,UAAU,YAAY;CAC7C,MAAM,UACJ,aAAa,SAAY,CAAC,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,CAAC;CAE3F,KAAK,MAAM,UAAU,OAAO,OAAO,GAAG;EACpC,MAAM,aAAa,gBAAgB,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI;EAEzE,IAAI,CAAC,QAAQ,SAAS,UAAU,GAC9B,QAAQ,KAAK,UAAU;CAE3B;CAEA,MAAM,aAAa,YAAY;CAC/B,MAAM,OAAO,cAAc,OAAO;CAClC,OAAO,MAAM;AACf"}
+{"version":3,"file":"flush-pending-cookies.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/flush-pending-cookies.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport type { FastifyReply } from \"fastify\";\n\ntype ParkedCookie = { name: string; value: string; opts?: Record<string, unknown> };\n\n/** The installed `@fastify/cookie` version, or undefined when it can't be resolved. */\nfunction installedCookiePluginVersion(): string | undefined {\n  try {\n    const require = createRequire(path.join(process.cwd(), \"noop.js\"));\n\n    return (require(require.resolve(\"@fastify/cookie/package.json\")) as { version?: string })\n      .version;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * `@fastify/cookie` only parks cookies set via `reply.setCookie()` in a map\n * keyed by a private symbol; it serialises them in its own `onSend` hook.\n * Raw-path writers (`raw.writeHead`) bypass `onSend`, so they must call this\n * right before writing headers.\n *\n * Serialises the parked cookies, appends them to the `set-cookie` header\n * (skipping any value already present) and clears the map so a later `onSend`\n * cannot send them twice.\n *\n * Throws when the plugin is registered but its parked-cookie symbol cannot be\n * found: silently doing nothing would drop every cookie on raw paths. Does\n * nothing when the plugin is not registered.\n */\nexport function flushPendingCookies(reply: FastifyReply): void {\n  const parkedSymbol = Object.getOwnPropertySymbols(reply).find(\n    symbol => symbol.description === \"fastify.reply.setCookies\",\n  );\n\n  if (!parkedSymbol) {\n    if (typeof (reply as { setCookie?: unknown }).setCookie !== \"function\") return;\n\n    const version = installedCookiePluginVersion();\n\n    throw new Error(\n      `@fastify/cookie's internal cookie storage changed: reply.setCookie exists but the \"fastify.reply.setCookies\" symbol was not found${\n        version ? ` (installed @fastify/cookie@${version})` : \"\"\n      }. Cookies set before a raw-path response would be lost; update flushPendingCookies for this version.`,\n    );\n  }\n\n  const parked = (reply as unknown as Record<symbol, Map<string, ParkedCookie> | null>)[\n    parkedSymbol\n  ];\n\n  if (!parked || parked.size === 0) return;\n\n  const serializeCookie = (\n    reply.server as unknown as {\n      serializeCookie?: (name: string, value: string, opts?: unknown) => string;\n    }\n  ).serializeCookie;\n\n  if (!serializeCookie) return;\n\n  const existing = reply.getHeader(\"set-cookie\");\n  const cookies: string[] =\n    existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [String(existing)];\n\n  for (const cookie of parked.values()) {\n    const serialized = serializeCookie(cookie.name, cookie.value, cookie.opts);\n\n    if (!cookies.includes(serialized)) {\n      cookies.push(serialized);\n    }\n  }\n\n  reply.removeHeader(\"set-cookie\");\n  reply.header(\"set-cookie\", cookies);\n  parked.clear();\n}\n"],"mappings":";;;;;AAOA,SAAS,+BAAmD;CAC1D,IAAI;EACF,MAAM,UAAU,cAAc,KAAK,KAAK,QAAQ,IAAI,GAAG,SAAS,CAAC;EAEjE,OAAQ,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC,CAAC,CAC7D;CACL,QAAQ;EACN;CACF;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,oBAAoB,OAA2B;CAC7D,MAAM,eAAe,OAAO,sBAAsB,KAAK,CAAC,CAAC,MACvD,WAAU,OAAO,gBAAgB,0BACnC;CAEA,IAAI,CAAC,cAAc;EACjB,IAAI,OAAQ,MAAkC,cAAc,YAAY;EAExE,MAAM,UAAU,6BAA6B;EAE7C,MAAM,IAAI,MACR,oIACE,UAAU,+BAA+B,QAAQ,KAAK,GACvD,qGACH;CACF;CAEA,MAAM,SAAU,MACd;CAGF,IAAI,CAAC,UAAU,OAAO,SAAS,GAAG;CAElC,MAAM,kBACJ,MAAM,OAGN;CAEF,IAAI,CAAC,iBAAiB;CAEtB,MAAM,WAAW,MAAM,UAAU,YAAY;CAC7C,MAAM,UACJ,aAAa,SAAY,CAAC,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,CAAC;CAE3F,KAAK,MAAM,UAAU,OAAO,OAAO,GAAG;EACpC,MAAM,aAAa,gBAAgB,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI;EAEzE,IAAI,CAAC,QAAQ,SAAS,UAAU,GAC9B,QAAQ,KAAK,UAAU;CAE3B;CAEA,MAAM,aAAa,YAAY;CAC/B,MAAM,OAAO,cAAc,OAAO;CAClC,OAAO,MAAM;AACf"}

package/esm/http/health.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/health.d.ts
+//#region ../../packages/core/src/http/health.d.ts
 /**
  * A readiness probe registered via `health.addCheck(...)`. Returns whether its
  * dependency is currently usable; throwing is treated as a failed check.

package/esm/http/health.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.mts","names":[],"sources":["../../../../../../../core/src/http/health.ts"],"mappings":";;AAMA;;;KAAY,WAAA,mBAA8B,OAAO;AAAA;AAMjD;;;AANiD,KAMrC,YAAA;EACV,MAAA;EACA,MAAA,GAAS,MAAM;AAAA;;AAAA;AACf;;;;;cASI,cAAA;EAAA,iBACa,MAAA;EA6BgB;;;EAxB1B,QAAA,CAAS,IAAA,UAAc,KAAA,EAAO,WAAA;EAArB;;;EAOT,WAAA,CAAY,IAAA;EAAA;;;;EAQZ,QAAA,IAAY,YAAA;EASe;;;;;EAArB,SAAA,IAAa,OAAA,CAAQ,YAAA;EA2CZ;AAYxB;;;;AAA0C;;;;;;;;EAtBjC,wBAAA,CAAyB,aAAA,gBAA6B,IAAA;;;;;;;UAU/C,QAAA;AAAA;;;;cAYH,MAAA,EAAM,cAAuB"}
+{"version":3,"file":"health.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/health.ts"],"mappings":";;AAMA;;;KAAY,WAAA,mBAA8B,OAAO;AAAA;AAMjD;;;AANiD,KAMrC,YAAA;EACV,MAAA;EACA,MAAA,GAAS,MAAM;AAAA;;AAAA;AACf;;;;;cASI,cAAA;EAAA,iBACa,MAAA;EA6BgB;;;EAxB1B,QAAA,CAAS,IAAA,UAAc,KAAA,EAAO,WAAA;EAArB;;;EAOT,WAAA,CAAY,IAAA;EAAA;;;;EAQZ,QAAA,IAAY,YAAA;EASe;;;;;EAArB,SAAA,IAAa,OAAA,CAAQ,YAAA;EA2CZ;AAYxB;;;;AAA0C;;;;;;;;EAtBjC,wBAAA,CAAyB,aAAA,gBAA6B,IAAA;;;;;;;UAU/C,QAAA;AAAA;;;;cAYH,MAAA,EAAM,cAAuB"}

package/esm/http/health.mjs

@@ -1,7 +1,7 @@
 import { Application } from "../application/application.mjs";
 import "../application/index.mjs";
 
-//#region ../core/src/http/health.ts
+//#region ../../packages/core/src/http/health.ts
 /**
 * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)
 * endpoints. Liveness answers "is the process up?"; readiness answers "should

package/esm/http/health.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"health.mjs","names":[],"sources":["../../../../../../../core/src/http/health.ts"],"sourcesContent":["import { Application } from \"../application\";\n\n/**\n * A readiness probe registered via `health.addCheck(...)`. Returns whether its\n * dependency is currently usable; throwing is treated as a failed check.\n */\nexport type HealthCheck = () => boolean | Promise<boolean>;\n\n/**\n * Result of a liveness/readiness probe. `checks` is present on readiness only,\n * mapping each registered check name to its pass/fail.\n */\nexport type HealthStatus = {\n  status: \"ok\" | \"error\";\n  checks?: Record<string, boolean>;\n};\n\n/**\n * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)\n * endpoints. Liveness answers \"is the process up?\"; readiness answers \"should\n * traffic be routed here?\" — booted, not shutting down, and every registered\n * dependency check passing. Connectors and app code register checks; the HTTP\n * connector exposes the endpoints.\n */\nclass HealthRegistry {\n  private readonly checks = new Map<string, HealthCheck>();\n\n  /**\n   * Register (or replace) a readiness check by name — e.g. a database ping.\n   */\n  public addCheck(name: string, check: HealthCheck): void {\n    this.checks.set(name, check);\n  }\n\n  /**\n   * Remove a previously-registered readiness check.\n   */\n  public removeCheck(name: string): void {\n    this.checks.delete(name);\n  }\n\n  /**\n   * Liveness — the process is up and not tearing down. Orchestrators use it to\n   * decide whether to RESTART the instance, so it ignores dependency checks.\n   */\n  public liveness(): HealthStatus {\n    return { status: Application.isShuttingDown ? \"error\" : \"ok\" };\n  }\n\n  /**\n   * Readiness — should this instance receive traffic? Requires a finished boot,\n   * no in-progress shutdown, and every registered check passing. Load balancers\n   * use it to decide whether to ROUTE to the instance.\n   */\n  public async readiness(): Promise<HealthStatus> {\n    if (!Application.isBooted || Application.isShuttingDown) {\n      return { status: \"error\" };\n    }\n\n    const checks: Record<string, boolean> = {};\n    let allPassed = true;\n\n    for (const [name, check] of this.checks) {\n      const passed = await this.runCheck(check);\n      checks[name] = passed;\n\n      if (!passed) {\n        allPassed = false;\n      }\n    }\n\n    return { status: allPassed ? \"ok\" : \"error\", checks };\n  }\n\n  /**\n   * Register a readiness check asserting the app has at least one route\n   * registered. A booted HTTP app that ends up with zero routes almost always\n   * means a route module failed to register silently, so the instance should\n   * report not-ready (503) rather than 404 every request.\n   *\n   * The route count is passed in as a getter so this registry stays decoupled\n   * from the router (no import cycle). The HTTP connector wires this in after\n   * scanning routes; apps with no HTTP surface simply never register it.\n   *\n   * @param getRouteCount Returns the number of currently-registered routes.\n   * @param name Override the check name (defaults to `\"routes\"`).\n   */\n  public addRoutesRegisteredCheck(getRouteCount: () => number, name = \"routes\"): void {\n    this.addCheck(name, () => getRouteCount() > 0);\n  }\n\n  /**\n   * Run one check. A thrown error counts as a failed check rather than crashing\n   * the probe. The failure is surfaced in the readiness `checks` map and the\n   * 503 status — not logged, since probes poll frequently and a failed check is\n   * a normal signal, not an error event.\n   */\n  private async runCheck(check: HealthCheck): Promise<boolean> {\n    try {\n      return await check();\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * The application's health registry singleton.\n */\nexport const health = new HealthRegistry();\n"],"mappings":";;;;;;;;;;;AAwBA,IAAM,iBAAN,MAAqB;;gCACO,IAAI,IAAyB;;;;;CAKvD,AAAO,SAAS,MAAc,OAA0B;EACtD,KAAK,OAAO,IAAI,MAAM,KAAK;CAC7B;;;;CAKA,AAAO,YAAY,MAAoB;EACrC,KAAK,OAAO,OAAO,IAAI;CACzB;;;;;CAMA,AAAO,WAAyB;EAC9B,OAAO,EAAE,QAAQ,YAAY,iBAAiB,UAAU,KAAK;CAC/D;;;;;;CAOA,MAAa,YAAmC;EAC9C,IAAI,CAAC,YAAY,YAAY,YAAY,gBACvC,OAAO,EAAE,QAAQ,QAAQ;EAG3B,MAAM,SAAkC,CAAC;EACzC,IAAI,YAAY;EAEhB,KAAK,MAAM,CAAC,MAAM,UAAU,KAAK,QAAQ;GACvC,MAAM,SAAS,MAAM,KAAK,SAAS,KAAK;GACxC,OAAO,QAAQ;GAEf,IAAI,CAAC,QACH,YAAY;EAEhB;EAEA,OAAO;GAAE,QAAQ,YAAY,OAAO;GAAS;EAAO;CACtD;;;;;;;;;;;;;;CAeA,AAAO,yBAAyB,eAA6B,OAAO,UAAgB;EAClF,KAAK,SAAS,YAAY,cAAc,IAAI,CAAC;CAC/C;;;;;;;CAQA,MAAc,SAAS,OAAsC;EAC3D,IAAI;GACF,OAAO,MAAM,MAAM;EACrB,QAAQ;GACN,OAAO;EACT;CACF;AACF;;;;AAKA,MAAa,SAAS,IAAI,eAAe"}
+{"version":3,"file":"health.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/health.ts"],"sourcesContent":["import { Application } from \"../application\";\n\n/**\n * A readiness probe registered via `health.addCheck(...)`. Returns whether its\n * dependency is currently usable; throwing is treated as a failed check.\n */\nexport type HealthCheck = () => boolean | Promise<boolean>;\n\n/**\n * Result of a liveness/readiness probe. `checks` is present on readiness only,\n * mapping each registered check name to its pass/fail.\n */\nexport type HealthStatus = {\n  status: \"ok\" | \"error\";\n  checks?: Record<string, boolean>;\n};\n\n/**\n * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)\n * endpoints. Liveness answers \"is the process up?\"; readiness answers \"should\n * traffic be routed here?\" — booted, not shutting down, and every registered\n * dependency check passing. Connectors and app code register checks; the HTTP\n * connector exposes the endpoints.\n */\nclass HealthRegistry {\n  private readonly checks = new Map<string, HealthCheck>();\n\n  /**\n   * Register (or replace) a readiness check by name — e.g. a database ping.\n   */\n  public addCheck(name: string, check: HealthCheck): void {\n    this.checks.set(name, check);\n  }\n\n  /**\n   * Remove a previously-registered readiness check.\n   */\n  public removeCheck(name: string): void {\n    this.checks.delete(name);\n  }\n\n  /**\n   * Liveness — the process is up and not tearing down. Orchestrators use it to\n   * decide whether to RESTART the instance, so it ignores dependency checks.\n   */\n  public liveness(): HealthStatus {\n    return { status: Application.isShuttingDown ? \"error\" : \"ok\" };\n  }\n\n  /**\n   * Readiness — should this instance receive traffic? Requires a finished boot,\n   * no in-progress shutdown, and every registered check passing. Load balancers\n   * use it to decide whether to ROUTE to the instance.\n   */\n  public async readiness(): Promise<HealthStatus> {\n    if (!Application.isBooted || Application.isShuttingDown) {\n      return { status: \"error\" };\n    }\n\n    const checks: Record<string, boolean> = {};\n    let allPassed = true;\n\n    for (const [name, check] of this.checks) {\n      const passed = await this.runCheck(check);\n      checks[name] = passed;\n\n      if (!passed) {\n        allPassed = false;\n      }\n    }\n\n    return { status: allPassed ? \"ok\" : \"error\", checks };\n  }\n\n  /**\n   * Register a readiness check asserting the app has at least one route\n   * registered. A booted HTTP app that ends up with zero routes almost always\n   * means a route module failed to register silently, so the instance should\n   * report not-ready (503) rather than 404 every request.\n   *\n   * The route count is passed in as a getter so this registry stays decoupled\n   * from the router (no import cycle). The HTTP connector wires this in after\n   * scanning routes; apps with no HTTP surface simply never register it.\n   *\n   * @param getRouteCount Returns the number of currently-registered routes.\n   * @param name Override the check name (defaults to `\"routes\"`).\n   */\n  public addRoutesRegisteredCheck(getRouteCount: () => number, name = \"routes\"): void {\n    this.addCheck(name, () => getRouteCount() > 0);\n  }\n\n  /**\n   * Run one check. A thrown error counts as a failed check rather than crashing\n   * the probe. The failure is surfaced in the readiness `checks` map and the\n   * 503 status — not logged, since probes poll frequently and a failed check is\n   * a normal signal, not an error event.\n   */\n  private async runCheck(check: HealthCheck): Promise<boolean> {\n    try {\n      return await check();\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * The application's health registry singleton.\n */\nexport const health = new HealthRegistry();\n"],"mappings":";;;;;;;;;;;AAwBA,IAAM,iBAAN,MAAqB;;gCACO,IAAI,IAAyB;;;;;CAKvD,AAAO,SAAS,MAAc,OAA0B;EACtD,KAAK,OAAO,IAAI,MAAM,KAAK;CAC7B;;;;CAKA,AAAO,YAAY,MAAoB;EACrC,KAAK,OAAO,OAAO,IAAI;CACzB;;;;;CAMA,AAAO,WAAyB;EAC9B,OAAO,EAAE,QAAQ,YAAY,iBAAiB,UAAU,KAAK;CAC/D;;;;;;CAOA,MAAa,YAAmC;EAC9C,IAAI,CAAC,YAAY,YAAY,YAAY,gBACvC,OAAO,EAAE,QAAQ,QAAQ;EAG3B,MAAM,SAAkC,CAAC;EACzC,IAAI,YAAY;EAEhB,KAAK,MAAM,CAAC,MAAM,UAAU,KAAK,QAAQ;GACvC,MAAM,SAAS,MAAM,KAAK,SAAS,KAAK;GACxC,OAAO,QAAQ;GAEf,IAAI,CAAC,QACH,YAAY;EAEhB;EAEA,OAAO;GAAE,QAAQ,YAAY,OAAO;GAAS;EAAO;CACtD;;;;;;;;;;;;;;CAeA,AAAO,yBAAyB,eAA6B,OAAO,UAAgB;EAClF,KAAK,SAAS,YAAY,cAAc,IAAI,CAAC;CAC/C;;;;;;;CAQA,MAAc,SAAS,OAAsC;EAC3D,IAAI;GACF,OAAO,MAAM,MAAM;EACrB,QAAQ;GACN,OAAO;EACT;CACF;AACF;;;;AAKA,MAAa,SAAS,IAAI,eAAe"}

package/esm/http/index.d.mts

@@ -1,12 +1,15 @@
+import { BadRequestError, ConflictError, CookieJarUnavailableError, ForbiddenError, HttpError, NotAcceptableError, NotAllowedError, ResourceNotFoundError, ServerError, UnAuthorizedError } from "./errors/errors.mjs";
+import { HttpLoggingConfig, RequestLogSnapshot, RequestLogSource, RequestLoggingOptions, URL_CREDENTIAL_PARAMS, buildRequestLogSnapshot, redactQueryCredentials, redactUrlCredentials, resolveRequestLoggingOptions } from "./request-log-snapshot.mjs";
 import { PipeableReactStream, StreamReactResponseOptions, streamReactResponse } from "./stream-react-response.mjs";
 import { XMLable } from "./xmlable.mjs";
-import { CookieOptions, Response, ResponseStatus, SendBufferOptions, SendFileOptions } from "./response.mjs";
+import { CookieOptions, Response, ResponseStatus, SendBufferOptions, SendFileOptions, toSingleLineSseField } from "./response.mjs";
 import { FileNamingStrategy, ImageTransformCallback, ImageTransformConfig, ImageVariantDefinition, ImageVariantFit, ImageVariantOutputFormat, PrefixConfig, PrefixOptions, SaveAsOptions, SaveOptions, UploadedFileImageOptions, UploadsConfigurations, UploadsImagesConfigurations } from "./uploads-types.mjs";
 import { FileValidationOptions, UploadedFile, UploadedFileJson } from "./uploaded-file.mjs";
 import { Request, RequestTranslator } from "./request.mjs";
 import { CspConfig, DEFAULT_CSP_DIRECTIVES, InvalidCspDirectiveError, applyCspHeader, buildCspHeaderValue, mergeCspDirectives, resolveCspConfig, serializeCspDirectives, validateCspConfigAtBoot, validateCspDirectives } from "./csp.mjs";
+import { HttpErrorMapper, HttpErrorMapping } from "./error-mapper.mjs";
 import { HttpTracingConfig, TracingContext, TracingHooks, TracingPhaseInfo, TracingRequestEndInfo } from "./tracing/tracing.type.mjs";
-import { DecodedAccessToken, HttpConfigurations, PartialMiddleware, RequestEvent, RequestLocals, ResponseEvent, ResponseSSEController, ResponseStreamController, ReturnedResponse } from "./types.mjs";
+import { DecodedAccessToken, HttpConfigurations, HttpServerOptions, PartialMiddleware, RequestEvent, RequestLocals, ResponseEvent, ResponseSSEController, ResponseSSEOptions, ResponseStreamController, ResponseStreamOptions, ReturnedResponse } from "./types.mjs";
 import { defaultHttpConfigurations, httpConfig } from "./config.mjs";
 import { createHttpApplication, stopHttpApplication } from "./createHttpApplication.mjs";
 import { requiresDefaultCsrfGuard, runDefaultCsrfGuard } from "./csrf-default-guard.mjs";
@@ -20,8 +23,9 @@ import { UPLOADS_DEFAULTS, uploadsConfig } from "./uploads-config.mjs";
 import { DetectedImageFormat, GeneratedImageDescriptor, GeneratedImageVariant, ResolvedImageVariantsConfig, UploadedFileQuery, VariantOutputFormat, VariantSourceFormat } from "./uploads/image-variant-types.mjs";
 import { GenerateImageVariantsOptions, generateImageVariants } from "./uploads/generate-image-variants.mjs";
 import { ImageVariantsConfigError } from "./uploads/image-variants-config-error.mjs";
-import { uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
-import { BadRequestError, ConflictError, CookieJarUnavailableError, ForbiddenError, HttpError, NotAcceptableError, NotAllowedError, ResourceNotFoundError, ServerError, UnAuthorizedError } from "./errors/errors.mjs";
+import { PurgeImageVariantsOptions, purgeImageVariants } from "./uploads/purge-image-variants.mjs";
+import { ResolveImageVariantInput, ResolvedImageVariant, resolveImageVariant } from "./uploads/resolve-image-variant.mjs";
+import { UploadedFileControllerOptions, createUploadedFileController, uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
 import { CacheMiddlewareOptions } from "./middleware/cache-response-middleware.mjs";
 import { ConcurrencyLimitOptions } from "./middleware/concurrency-limit.middleware.mjs";
 import { IdempotencyOptions } from "./middleware/idempotency.middleware.mjs";
@@ -33,8 +37,8 @@ import { createRequestStore, t } from "./middleware/inject-request-context.mjs";
 import { anyMatch, ipMatches } from "./middleware/utils/cidr-match.mjs";
 import { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from "./middleware/utils/idempotency-key.mjs";
 import { parseSize } from "./middleware/utils/parse-size.mjs";
-import { ClosableServer, FastifyInstance, closeServerWithTimeout, getHttpServer, startHttpServer } from "./server.mjs";
-import { registerHttpPlugins } from "./plugins.mjs";
+import { ClosableServer, FastifyInstance, beginHttpDrain, closeServerWithTimeout, getHttpServer, startHttpServer, trackConnectionsForDrain } from "./server.mjs";
+import { registerHttpPlugins, resolvePublicRoot } from "./plugins.mjs";
 import { assertConfiguredHttpPortIsFree, preflightConfiguredHttpPort, remedyLines, shouldPreflightHttpPort } from "./boot-port-preflight.mjs";
 import { PortInUseError, assertPortIsAvailable, isPortAvailable } from "./port-preflight.mjs";
 import { HttpReadyReport, getHttpReadyReport, resetHttpReadyReport, setHttpReadyReport } from "./ready-report.mjs";