@warlock.js/core 5.29.0 → 5.30.0

package/esm/router/positional-handler-diagnostics.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"positional-handler-diagnostics.mjs","names":[],"sources":["../../../../../../../core/src/router/positional-handler-diagnostics.ts"],"sourcesContent":["/**\n * Early detection of route handlers still written against the **v4 positional\n * signature** — `(request, response)` — after v5 moved to a single context\n * object, `({ request, response })`.\n *\n * ## Why this exists\n *\n * A v4 handler is not rejected anywhere. It registers fine, and the router\n * calls it with one argument, so `response` is simply `undefined`. The app only\n * breaks on the first request that reaches it, with:\n *\n *     TypeError: Cannot read properties of undefined (reading 'success')\n *\n * That message names nothing the reader can act on — not the route, not the\n * handler, not the change to make. This module turns that late, opaque failure\n * into one explicit list printed at boot, and into a `warlock doctor` check.\n *\n * The break itself is intentional; nothing here restores the positional form.\n * Detection and diagnostics only.\n *\n * ## Why it warns and never throws\n *\n * The signal is a heuristic (see {@link looksLikePositionalHandler}), so a\n * false positive is possible in principle. Turning one into a boot failure\n * would take a working application down over a guess, which is strictly worse\n * than the problem being diagnosed. Everything on this path is therefore a\n * warning: nothing here throws, and nothing here changes how a handler is\n * called. A miss simply degrades to the old runtime `TypeError`.\n */\n\nimport { log } from \"@warlock.js/logger\";\nimport type { Route } from \"./types\";\n\n/**\n * One route whose handler looks like it was written for v4.\n */\nexport type PositionalHandlerSuspect = {\n  /** HTTP method the route was registered under. */\n  method: Route[\"method\"];\n\n  /** Full route path, prefixes already applied. */\n  path: string;\n\n  /** Handler function name, or `\"(anonymous)\"` when it has none. */\n  handlerName: string;\n\n  /** Route file the route came from, when the router knows it. */\n  sourceFile: string;\n};\n\n/**\n * Collected across the whole registration pass so the warning can be emitted\n * ONCE, as a single list, rather than one line per route (or — as before — one\n * mystery 500 per request).\n */\nconst suspects: PositionalHandlerSuspect[] = [];\n\n/**\n * Split the parameter list of a function's source into top-level parameters.\n *\n * Depth-aware and quote-aware, because a default value may itself contain\n * commas, parentheses, braces or strings — `(request, response = f(a, b))` is\n * two parameters, not three. Anything unbalanced returns `undefined`: refusing\n * to guess is what keeps a parse quirk from becoming a false warning.\n *\n * @param openIndex index of the `(` that opens the parameter list.\n */\nfunction splitTopLevelParameters(source: string, openIndex: number): string[] | undefined {\n  const parameters: string[] = [];\n\n  let depth = 0;\n  let current = \"\";\n  let quote = \"\";\n\n  for (let index = openIndex; index < source.length; index++) {\n    const char = source[index];\n\n    if (quote) {\n      if (char === \"\\\\\") {\n        current += char + (source[index + 1] ?? \"\");\n        index++;\n        continue;\n      }\n\n      if (char === quote) {\n        quote = \"\";\n      }\n\n      current += char;\n      continue;\n    }\n\n    if (char === '\"' || char === \"'\" || char === \"`\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n\n    if (char === \"(\" || char === \"[\" || char === \"{\") {\n      depth++;\n\n      // The paren that opens the list is punctuation, not part of a parameter.\n      if (depth === 1) continue;\n\n      current += char;\n      continue;\n    }\n\n    if (char === \")\" || char === \"]\" || char === \"}\") {\n      depth--;\n\n      if (depth === 0) {\n        if (current.trim()) {\n          parameters.push(current.trim());\n        }\n\n        return parameters;\n      }\n\n      current += char;\n      continue;\n    }\n\n    if (char === \",\" && depth === 1) {\n      parameters.push(current.trim());\n      current = \"\";\n      continue;\n    }\n\n    current += char;\n  }\n\n  // Never found the closing paren — treat the source as unreadable.\n  return undefined;\n}\n\n/**\n * Read a function's declared parameters from its own source.\n *\n * Returns `undefined` whenever the source cannot be trusted, which callers must\n * treat as \"no information\" rather than \"no parameters\":\n *\n * - `Function.prototype.bind` replaces the body with `[native code]`, so every\n *   `[Controller, \"method\"]` tuple handler lands here (the router binds them);\n * - native functions likewise;\n * - a class, whose first `(` belongs to a constructor or a method, not to a\n *   parameter list;\n * - anything that fails to parse.\n */\nfunction readParameterList(handler: Function): string[] | undefined {\n  let source: string;\n\n  try {\n    source = Function.prototype.toString.call(handler);\n  } catch {\n    return undefined;\n  }\n\n  if (source.includes(\"[native code]\")) return undefined;\n\n  if (/^\\s*class[\\s{]/.test(source)) return undefined;\n\n  // A single parameter needs no parentheses: `ctx => …`, `async ctx => …`.\n  const bareArrow = source.match(/^\\s*(?:async\\s+)?([A-Za-z_$][\\w$]*)\\s*=>/);\n\n  if (bareArrow) {\n    const parameter = bareArrow[1];\n\n    return parameter === undefined ? undefined : [parameter];\n  }\n\n  const openIndex = source.indexOf(\"(\");\n\n  if (openIndex === -1) return undefined;\n\n  return splitTopLevelParameters(source, openIndex);\n}\n\n/**\n * Whether a parameter is written as a destructuring pattern — `{ request }` or\n * `[a, b]` — as opposed to a plain name.\n */\nfunction isDestructured(parameter: string) {\n  const start = parameter.trimStart();\n\n  return start.startsWith(\"{\") || start.startsWith(\"[\");\n}\n\n/**\n * Does this handler look like it was written for the v4 positional signature?\n *\n * ## The signal, and what it misses\n *\n * `Function.length` alone is not enough, because it stops counting at the first\n * defaulted parameter:\n *\n * | handler                            | `.length` | actually |\n * | ---------------------------------- | --------- | -------- |\n * | `({ request, response }) => …`     | 1         | v5       |\n * | `(ctx) => …`                       | 1         | v5       |\n * | `(request, response) => …`         | 2         | v4       |\n * | `(request, response = x) => …`     | 1         | v4       |\n *\n * So the primary signal is the function's own source: a handler is suspect when\n * it declares **two or more** parameters and the first is **not** destructured.\n * Reading the source catches the defaulted row that arity cannot, and rules out\n * the `({ … }, extra)` shape that arity would wrongly flag.\n *\n * When the source is unreadable — a bound or native function — this falls back\n * to `handler.length >= 2`, which `bind` preserves. That is a weaker signal but\n * never a wrong one for the common cases; it only loses the defaulted row.\n *\n * ## What is still missed, by design\n *\n * A one-parameter v4 handler (`(request) => …`) is indistinguishable from a v5\n * `(ctx) => …` and is deliberately not flagged — guessing there would produce\n * false positives on correct code. False positives against the canonical\n * `({ … })` form are essentially nil, and every miss simply leaves today's\n * behaviour in place.\n */\nexport function looksLikePositionalHandler(handler: unknown): boolean {\n  if (typeof handler !== \"function\") return false;\n\n  const parameters = readParameterList(handler);\n\n  if (parameters) {\n    const firstParameter = parameters[0];\n\n    return parameters.length >= 2 && firstParameter !== undefined && !isDestructured(firstParameter);\n  }\n\n  return handler.length >= 2;\n}\n\n/**\n * The name to print for a handler.\n *\n * `Function.bind` prefixes the name with `\"bound \"`, and the router binds every\n * `[Controller, \"method\"]` tuple handler. The bare method name is what the user\n * actually wrote, so that is what gets printed.\n */\nfunction handlerDisplayName(handler: Function): string {\n  return handler.name?.replace(/^bound /, \"\").trim() || \"(anonymous)\";\n}\n\n/**\n * Inspect one route's handler as it registers, recording it when it looks like\n * the v4 positional form. Called from `Router.add`, so the cost is paid once per\n * route at registration and never per request.\n *\n * Deliberately total: any unexpected failure in the heuristic is swallowed, so a\n * diagnostic can never be the reason a route fails to register.\n */\nexport function inspectHandlerSignature(\n  handler: unknown,\n  route: { method: Route[\"method\"]; path: string; sourceFile: string },\n) {\n  try {\n    if (!looksLikePositionalHandler(handler)) return;\n\n    suspects.push({\n      method: route.method,\n      path: route.path,\n      handlerName: handlerDisplayName(handler as Function),\n      sourceFile: route.sourceFile,\n    });\n  } catch {\n    // A diagnostic must never break registration.\n  }\n}\n\n/**\n * Every suspect recorded so far, in registration order.\n */\nexport function listPositionalHandlerSuspects(): readonly PositionalHandlerSuspect[] {\n  return suspects;\n}\n\n/**\n * Drop the suspects belonging to a route file. Kept in step with\n * `Router.removeRoutesBySourceFile` so an HMR reload that fixes a handler does\n * not keep reporting the version it replaced.\n */\nexport function forgetPositionalHandlerSuspects(sourceFile: string) {\n  for (let index = suspects.length - 1; index >= 0; index--) {\n    const suspect = suspects[index];\n\n    if (suspect?.sourceFile === sourceFile) {\n      suspects.splice(index, 1);\n    }\n  }\n}\n\n/**\n * Drop every recorded suspect. Intended for tests, which share the router\n * singleton.\n */\nexport function clearPositionalHandlerSuspects() {\n  suspects.length = 0;\n}\n\n/**\n * The one-line diagnostic for a single route. Written for someone who has never\n * read Warlock's internals: it names the handler, the route, what is wrong, and\n * the exact edit that fixes it.\n */\nexport function describePositionalHandlerSuspect(suspect: PositionalHandlerSuspect): string {\n  return (\n    `Handler \"${suspect.handlerName}\" (${suspect.method} ${suspect.path}) looks like ` +\n    `the v4 positional signature (request, response). ` +\n    `v5 passes a single context object — change it to ({ request, response }).`\n  );\n}\n\n/**\n * The full boot-time warning: every suspect, once, in one entry.\n *\n * One boot, one list — not one warning per route, and emphatically not one 500\n * per request. Returns the reported suspects so callers can assert on them.\n */\nexport function reportPositionalHandlerSuspects(logger: Pick<typeof log, \"warn\"> = log) {\n  const reported = [...suspects];\n\n  if (reported.length === 0) return reported;\n\n  const headline =\n    reported.length === 1\n      ? \"1 route handler looks like the v4 positional signature.\"\n      : `${reported.length} route handlers look like the v4 positional signature.`;\n\n  logger.warn({\n    module: \"router\",\n    action: \"handlerSignature\",\n    message:\n      `${headline} Warlock v5 calls every route handler with a single context object, ` +\n      `so a second parameter is always undefined and the request fails as soon as it is used:\\n` +\n      reported.map((suspect) => `  - ${describePositionalHandlerSuspect(suspect)}`).join(\"\\n\"),\n    context: { handlers: reported },\n  });\n\n  return reported;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,MAAM,WAAuC,CAAC;;;;;;;;;;;AAY9C,SAAS,wBAAwB,QAAgB,WAAyC;CACxF,MAAM,aAAuB,CAAC;CAE9B,IAAI,QAAQ;CACZ,IAAI,UAAU;CACd,IAAI,QAAQ;CAEZ,KAAK,IAAI,QAAQ,WAAW,QAAQ,OAAO,QAAQ,SAAS;EAC1D,MAAM,OAAO,OAAO;EAEpB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM;IACjB,WAAW,QAAQ,OAAO,QAAQ,MAAM;IACxC;IACA;GACF;GAEA,IAAI,SAAS,OACX,QAAQ;GAGV,WAAW;GACX;EACF;EAEA,IAAI,SAAS,QAAO,SAAS,OAAO,SAAS,KAAK;GAChD,QAAQ;GACR,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GAChD;GAGA,IAAI,UAAU,GAAG;GAEjB,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GAChD;GAEA,IAAI,UAAU,GAAG;IACf,IAAI,QAAQ,KAAK,GACf,WAAW,KAAK,QAAQ,KAAK,CAAC;IAGhC,OAAO;GACT;GAEA,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,UAAU,GAAG;GAC/B,WAAW,KAAK,QAAQ,KAAK,CAAC;GAC9B,UAAU;GACV;EACF;EAEA,WAAW;CACb;AAIF;;;;;;;;;;;;;;AAeA,SAAS,kBAAkB,SAAyC;CAClE,IAAI;CAEJ,IAAI;EACF,SAAS,SAAS,UAAU,SAAS,KAAK,OAAO;CACnD,QAAQ;EACN;CACF;CAEA,IAAI,OAAO,SAAS,eAAe,GAAG,OAAO;CAE7C,IAAI,iBAAiB,KAAK,MAAM,GAAG,OAAO;CAG1C,MAAM,YAAY,OAAO,MAAM,0CAA0C;CAEzE,IAAI,WAAW;EACb,MAAM,YAAY,UAAU;EAE5B,OAAO,cAAc,SAAY,SAAY,CAAC,SAAS;CACzD;CAEA,MAAM,YAAY,OAAO,QAAQ,GAAG;CAEpC,IAAI,cAAc,IAAI,OAAO;CAE7B,OAAO,wBAAwB,QAAQ,SAAS;AAClD;;;;;AAMA,SAAS,eAAe,WAAmB;CACzC,MAAM,QAAQ,UAAU,UAAU;CAElC,OAAO,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,2BAA2B,SAA2B;CACpE,IAAI,OAAO,YAAY,YAAY,OAAO;CAE1C,MAAM,aAAa,kBAAkB,OAAO;CAE5C,IAAI,YAAY;EACd,MAAM,iBAAiB,WAAW;EAElC,OAAO,WAAW,UAAU,KAAK,mBAAmB,UAAa,CAAC,eAAe,cAAc;CACjG;CAEA,OAAO,QAAQ,UAAU;AAC3B;;;;;;;;AASA,SAAS,mBAAmB,SAA2B;CACrD,OAAO,QAAQ,MAAM,QAAQ,WAAW,EAAE,CAAC,CAAC,KAAK,KAAK;AACxD;;;;;;;;;AAUA,SAAgB,wBACd,SACA,OACA;CACA,IAAI;EACF,IAAI,CAAC,2BAA2B,OAAO,GAAG;EAE1C,SAAS,KAAK;GACZ,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ,aAAa,mBAAmB,OAAmB;GACnD,YAAY,MAAM;EACpB,CAAC;CACH,QAAQ,CAER;AACF;;;;AAKA,SAAgB,gCAAqE;CACnF,OAAO;AACT;;;;;;AAOA,SAAgB,gCAAgC,YAAoB;CAClE,KAAK,IAAI,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAGhD,IAFgB,SAAS,MAEd,EAAE,eAAe,YAC1B,SAAS,OAAO,OAAO,CAAC;AAG9B;;;;;AAMA,SAAgB,iCAAiC;CAC/C,SAAS,SAAS;AACpB;;;;;;AAOA,SAAgB,iCAAiC,SAA2C;CAC1F,OACE,YAAY,QAAQ,YAAY,KAAK,QAAQ,OAAO,GAAG,QAAQ,KAAK;AAIxE;;;;;;;AAQA,SAAgB,gCAAgC,SAAmC,KAAK;CACtF,MAAM,WAAW,CAAC,GAAG,QAAQ;CAE7B,IAAI,SAAS,WAAW,GAAG,OAAO;CAElC,MAAM,WACJ,SAAS,WAAW,IAChB,4DACA,GAAG,SAAS,OAAO;CAEzB,OAAO,KAAK;EACV,QAAQ;EACR,QAAQ;EACR,SACE,GAAG,SAAS,gKAEZ,SAAS,KAAK,YAAY,OAAO,iCAAiC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI;EACzF,SAAS,EAAE,UAAU,SAAS;CAChC,CAAC;CAED,OAAO;AACT"}
+{"version":3,"file":"positional-handler-diagnostics.mjs","names":[],"sources":["../../../../../../../../packages/core/src/router/positional-handler-diagnostics.ts"],"sourcesContent":["/**\n * Early detection of route handlers still written against the **v4 positional\n * signature** — `(request, response)` — after v5 moved to a single context\n * object, `({ request, response })`.\n *\n * ## Why this exists\n *\n * A v4 handler is not rejected anywhere. It registers fine, and the router\n * calls it with one argument, so `response` is simply `undefined`. The app only\n * breaks on the first request that reaches it, with:\n *\n *     TypeError: Cannot read properties of undefined (reading 'success')\n *\n * That message names nothing the reader can act on — not the route, not the\n * handler, not the change to make. This module turns that late, opaque failure\n * into one explicit list printed at boot, and into a `warlock doctor` check.\n *\n * The break itself is intentional; nothing here restores the positional form.\n * Detection and diagnostics only.\n *\n * ## Why it warns and never throws\n *\n * The signal is a heuristic (see {@link looksLikePositionalHandler}), so a\n * false positive is possible in principle. Turning one into a boot failure\n * would take a working application down over a guess, which is strictly worse\n * than the problem being diagnosed. Everything on this path is therefore a\n * warning: nothing here throws, and nothing here changes how a handler is\n * called. A miss simply degrades to the old runtime `TypeError`.\n */\n\nimport { log } from \"@warlock.js/logger\";\nimport type { Route } from \"./types\";\n\n/**\n * One route whose handler looks like it was written for v4.\n */\nexport type PositionalHandlerSuspect = {\n  /** HTTP method the route was registered under. */\n  method: Route[\"method\"];\n\n  /** Full route path, prefixes already applied. */\n  path: string;\n\n  /** Handler function name, or `\"(anonymous)\"` when it has none. */\n  handlerName: string;\n\n  /** Route file the route came from, when the router knows it. */\n  sourceFile: string;\n};\n\n/**\n * Collected across the whole registration pass so the warning can be emitted\n * ONCE, as a single list, rather than one line per route (or — as before — one\n * mystery 500 per request).\n */\nconst suspects: PositionalHandlerSuspect[] = [];\n\n/**\n * Split the parameter list of a function's source into top-level parameters.\n *\n * Depth-aware and quote-aware, because a default value may itself contain\n * commas, parentheses, braces or strings — `(request, response = f(a, b))` is\n * two parameters, not three. Anything unbalanced returns `undefined`: refusing\n * to guess is what keeps a parse quirk from becoming a false warning.\n *\n * @param openIndex index of the `(` that opens the parameter list.\n */\nfunction splitTopLevelParameters(source: string, openIndex: number): string[] | undefined {\n  const parameters: string[] = [];\n\n  let depth = 0;\n  let current = \"\";\n  let quote = \"\";\n\n  for (let index = openIndex; index < source.length; index++) {\n    const char = source[index];\n\n    if (quote) {\n      if (char === \"\\\\\") {\n        current += char + (source[index + 1] ?? \"\");\n        index++;\n        continue;\n      }\n\n      if (char === quote) {\n        quote = \"\";\n      }\n\n      current += char;\n      continue;\n    }\n\n    if (char === '\"' || char === \"'\" || char === \"`\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n\n    if (char === \"(\" || char === \"[\" || char === \"{\") {\n      depth++;\n\n      // The paren that opens the list is punctuation, not part of a parameter.\n      if (depth === 1) continue;\n\n      current += char;\n      continue;\n    }\n\n    if (char === \")\" || char === \"]\" || char === \"}\") {\n      depth--;\n\n      if (depth === 0) {\n        if (current.trim()) {\n          parameters.push(current.trim());\n        }\n\n        return parameters;\n      }\n\n      current += char;\n      continue;\n    }\n\n    if (char === \",\" && depth === 1) {\n      parameters.push(current.trim());\n      current = \"\";\n      continue;\n    }\n\n    current += char;\n  }\n\n  // Never found the closing paren — treat the source as unreadable.\n  return undefined;\n}\n\n/**\n * Read a function's declared parameters from its own source.\n *\n * Returns `undefined` whenever the source cannot be trusted, which callers must\n * treat as \"no information\" rather than \"no parameters\":\n *\n * - `Function.prototype.bind` replaces the body with `[native code]`, so every\n *   `[Controller, \"method\"]` tuple handler lands here (the router binds them);\n * - native functions likewise;\n * - a class, whose first `(` belongs to a constructor or a method, not to a\n *   parameter list;\n * - anything that fails to parse.\n */\nfunction readParameterList(handler: Function): string[] | undefined {\n  let source: string;\n\n  try {\n    source = Function.prototype.toString.call(handler);\n  } catch {\n    return undefined;\n  }\n\n  if (source.includes(\"[native code]\")) return undefined;\n\n  if (/^\\s*class[\\s{]/.test(source)) return undefined;\n\n  // A single parameter needs no parentheses: `ctx => …`, `async ctx => …`.\n  const bareArrow = source.match(/^\\s*(?:async\\s+)?([A-Za-z_$][\\w$]*)\\s*=>/);\n\n  if (bareArrow) {\n    const parameter = bareArrow[1];\n\n    return parameter === undefined ? undefined : [parameter];\n  }\n\n  const openIndex = source.indexOf(\"(\");\n\n  if (openIndex === -1) return undefined;\n\n  return splitTopLevelParameters(source, openIndex);\n}\n\n/**\n * Whether a parameter is written as a destructuring pattern — `{ request }` or\n * `[a, b]` — as opposed to a plain name.\n */\nfunction isDestructured(parameter: string) {\n  const start = parameter.trimStart();\n\n  return start.startsWith(\"{\") || start.startsWith(\"[\");\n}\n\n/**\n * Does this handler look like it was written for the v4 positional signature?\n *\n * ## The signal, and what it misses\n *\n * `Function.length` alone is not enough, because it stops counting at the first\n * defaulted parameter:\n *\n * | handler                            | `.length` | actually |\n * | ---------------------------------- | --------- | -------- |\n * | `({ request, response }) => …`     | 1         | v5       |\n * | `(ctx) => …`                       | 1         | v5       |\n * | `(request, response) => …`         | 2         | v4       |\n * | `(request, response = x) => …`     | 1         | v4       |\n *\n * So the primary signal is the function's own source: a handler is suspect when\n * it declares **two or more** parameters and the first is **not** destructured.\n * Reading the source catches the defaulted row that arity cannot, and rules out\n * the `({ … }, extra)` shape that arity would wrongly flag.\n *\n * When the source is unreadable — a bound or native function — this falls back\n * to `handler.length >= 2`, which `bind` preserves. That is a weaker signal but\n * never a wrong one for the common cases; it only loses the defaulted row.\n *\n * ## What is still missed, by design\n *\n * A one-parameter v4 handler (`(request) => …`) is indistinguishable from a v5\n * `(ctx) => …` and is deliberately not flagged — guessing there would produce\n * false positives on correct code. False positives against the canonical\n * `({ … })` form are essentially nil, and every miss simply leaves today's\n * behaviour in place.\n */\nexport function looksLikePositionalHandler(handler: unknown): boolean {\n  if (typeof handler !== \"function\") return false;\n\n  const parameters = readParameterList(handler);\n\n  if (parameters) {\n    const firstParameter = parameters[0];\n\n    return parameters.length >= 2 && firstParameter !== undefined && !isDestructured(firstParameter);\n  }\n\n  return handler.length >= 2;\n}\n\n/**\n * The name to print for a handler.\n *\n * `Function.bind` prefixes the name with `\"bound \"`, and the router binds every\n * `[Controller, \"method\"]` tuple handler. The bare method name is what the user\n * actually wrote, so that is what gets printed.\n */\nfunction handlerDisplayName(handler: Function): string {\n  return handler.name?.replace(/^bound /, \"\").trim() || \"(anonymous)\";\n}\n\n/**\n * Inspect one route's handler as it registers, recording it when it looks like\n * the v4 positional form. Called from `Router.add`, so the cost is paid once per\n * route at registration and never per request.\n *\n * Deliberately total: any unexpected failure in the heuristic is swallowed, so a\n * diagnostic can never be the reason a route fails to register.\n */\nexport function inspectHandlerSignature(\n  handler: unknown,\n  route: { method: Route[\"method\"]; path: string; sourceFile: string },\n) {\n  try {\n    if (!looksLikePositionalHandler(handler)) return;\n\n    suspects.push({\n      method: route.method,\n      path: route.path,\n      handlerName: handlerDisplayName(handler as Function),\n      sourceFile: route.sourceFile,\n    });\n  } catch {\n    // A diagnostic must never break registration.\n  }\n}\n\n/**\n * Every suspect recorded so far, in registration order.\n */\nexport function listPositionalHandlerSuspects(): readonly PositionalHandlerSuspect[] {\n  return suspects;\n}\n\n/**\n * Drop the suspects belonging to a route file. Kept in step with\n * `Router.removeRoutesBySourceFile` so an HMR reload that fixes a handler does\n * not keep reporting the version it replaced.\n */\nexport function forgetPositionalHandlerSuspects(sourceFile: string) {\n  for (let index = suspects.length - 1; index >= 0; index--) {\n    const suspect = suspects[index];\n\n    if (suspect?.sourceFile === sourceFile) {\n      suspects.splice(index, 1);\n    }\n  }\n}\n\n/**\n * Drop every recorded suspect. Intended for tests, which share the router\n * singleton.\n */\nexport function clearPositionalHandlerSuspects() {\n  suspects.length = 0;\n}\n\n/**\n * The one-line diagnostic for a single route. Written for someone who has never\n * read Warlock's internals: it names the handler, the route, what is wrong, and\n * the exact edit that fixes it.\n */\nexport function describePositionalHandlerSuspect(suspect: PositionalHandlerSuspect): string {\n  return (\n    `Handler \"${suspect.handlerName}\" (${suspect.method} ${suspect.path}) looks like ` +\n    `the v4 positional signature (request, response). ` +\n    `v5 passes a single context object — change it to ({ request, response }).`\n  );\n}\n\n/**\n * The full boot-time warning: every suspect, once, in one entry.\n *\n * One boot, one list — not one warning per route, and emphatically not one 500\n * per request. Returns the reported suspects so callers can assert on them.\n */\nexport function reportPositionalHandlerSuspects(logger: Pick<typeof log, \"warn\"> = log) {\n  const reported = [...suspects];\n\n  if (reported.length === 0) return reported;\n\n  const headline =\n    reported.length === 1\n      ? \"1 route handler looks like the v4 positional signature.\"\n      : `${reported.length} route handlers look like the v4 positional signature.`;\n\n  logger.warn({\n    module: \"router\",\n    action: \"handlerSignature\",\n    message:\n      `${headline} Warlock v5 calls every route handler with a single context object, ` +\n      `so a second parameter is always undefined and the request fails as soon as it is used:\\n` +\n      reported.map((suspect) => `  - ${describePositionalHandlerSuspect(suspect)}`).join(\"\\n\"),\n    context: { handlers: reported },\n  });\n\n  return reported;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,MAAM,WAAuC,CAAC;;;;;;;;;;;AAY9C,SAAS,wBAAwB,QAAgB,WAAyC;CACxF,MAAM,aAAuB,CAAC;CAE9B,IAAI,QAAQ;CACZ,IAAI,UAAU;CACd,IAAI,QAAQ;CAEZ,KAAK,IAAI,QAAQ,WAAW,QAAQ,OAAO,QAAQ,SAAS;EAC1D,MAAM,OAAO,OAAO;EAEpB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM;IACjB,WAAW,QAAQ,OAAO,QAAQ,MAAM;IACxC;IACA;GACF;GAEA,IAAI,SAAS,OACX,QAAQ;GAGV,WAAW;GACX;EACF;EAEA,IAAI,SAAS,QAAO,SAAS,OAAO,SAAS,KAAK;GAChD,QAAQ;GACR,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GAChD;GAGA,IAAI,UAAU,GAAG;GAEjB,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAAK;GAChD;GAEA,IAAI,UAAU,GAAG;IACf,IAAI,QAAQ,KAAK,GACf,WAAW,KAAK,QAAQ,KAAK,CAAC;IAGhC,OAAO;GACT;GAEA,WAAW;GACX;EACF;EAEA,IAAI,SAAS,OAAO,UAAU,GAAG;GAC/B,WAAW,KAAK,QAAQ,KAAK,CAAC;GAC9B,UAAU;GACV;EACF;EAEA,WAAW;CACb;AAIF;;;;;;;;;;;;;;AAeA,SAAS,kBAAkB,SAAyC;CAClE,IAAI;CAEJ,IAAI;EACF,SAAS,SAAS,UAAU,SAAS,KAAK,OAAO;CACnD,QAAQ;EACN;CACF;CAEA,IAAI,OAAO,SAAS,eAAe,GAAG,OAAO;CAE7C,IAAI,iBAAiB,KAAK,MAAM,GAAG,OAAO;CAG1C,MAAM,YAAY,OAAO,MAAM,0CAA0C;CAEzE,IAAI,WAAW;EACb,MAAM,YAAY,UAAU;EAE5B,OAAO,cAAc,SAAY,SAAY,CAAC,SAAS;CACzD;CAEA,MAAM,YAAY,OAAO,QAAQ,GAAG;CAEpC,IAAI,cAAc,IAAI,OAAO;CAE7B,OAAO,wBAAwB,QAAQ,SAAS;AAClD;;;;;AAMA,SAAS,eAAe,WAAmB;CACzC,MAAM,QAAQ,UAAU,UAAU;CAElC,OAAO,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,2BAA2B,SAA2B;CACpE,IAAI,OAAO,YAAY,YAAY,OAAO;CAE1C,MAAM,aAAa,kBAAkB,OAAO;CAE5C,IAAI,YAAY;EACd,MAAM,iBAAiB,WAAW;EAElC,OAAO,WAAW,UAAU,KAAK,mBAAmB,UAAa,CAAC,eAAe,cAAc;CACjG;CAEA,OAAO,QAAQ,UAAU;AAC3B;;;;;;;;AASA,SAAS,mBAAmB,SAA2B;CACrD,OAAO,QAAQ,MAAM,QAAQ,WAAW,EAAE,CAAC,CAAC,KAAK,KAAK;AACxD;;;;;;;;;AAUA,SAAgB,wBACd,SACA,OACA;CACA,IAAI;EACF,IAAI,CAAC,2BAA2B,OAAO,GAAG;EAE1C,SAAS,KAAK;GACZ,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ,aAAa,mBAAmB,OAAmB;GACnD,YAAY,MAAM;EACpB,CAAC;CACH,QAAQ,CAER;AACF;;;;AAKA,SAAgB,gCAAqE;CACnF,OAAO;AACT;;;;;;AAOA,SAAgB,gCAAgC,YAAoB;CAClE,KAAK,IAAI,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAGhD,IAFgB,SAAS,MAEd,EAAE,eAAe,YAC1B,SAAS,OAAO,OAAO,CAAC;AAG9B;;;;;AAMA,SAAgB,iCAAiC;CAC/C,SAAS,SAAS;AACpB;;;;;;AAOA,SAAgB,iCAAiC,SAA2C;CAC1F,OACE,YAAY,QAAQ,YAAY,KAAK,QAAQ,OAAO,GAAG,QAAQ,KAAK;AAIxE;;;;;;;AAQA,SAAgB,gCAAgC,SAAmC,KAAK;CACtF,MAAM,WAAW,CAAC,GAAG,QAAQ;CAE7B,IAAI,SAAS,WAAW,GAAG,OAAO;CAElC,MAAM,WACJ,SAAS,WAAW,IAChB,4DACA,GAAG,SAAS,OAAO;CAEzB,OAAO,KAAK;EACV,QAAQ;EACR,QAAQ;EACR,SACE,GAAG,SAAS,gKAEZ,SAAS,KAAK,YAAY,OAAO,iCAAiC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI;EACzF,SAAS,EAAE,UAAU,SAAS;CAChC,CAAC;CAED,OAAO;AACT"}

package/esm/router/response-schema-types.mjs

@@ -1,7 +1,7 @@
 import { isNullableResource } from "../resource/nullable-resource.mjs";
 import { posix, relative, sep } from "node:path";
 
-//#region ../core/src/router/response-schema-types.ts
+//#region ../../packages/core/src/router/response-schema-types.ts
 const CORE_PACKAGE = "@warlock.js/core";
 function isIndexFile(file) {
 	return /(^|[\\/])index\.[cm]?[jt]sx?$/.test(file);

package/esm/router/response-schema-types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"response-schema-types.mjs","names":[],"sources":["../../../../../../../core/src/router/response-schema-types.ts"],"sourcesContent":["import { posix, relative, sep } from \"node:path\";\nimport { isNullableResource } from \"../resource/nullable-resource\";\n\n/**\n * Where a resource class lives: the module it is exported from and the export name.\n */\nexport type ResourceModuleExport = Readonly<{\n  file: string;\n  exportName: string;\n}>;\n\n/**\n * Import location of a resource as it is written in a generated declaration file.\n * `importPath` has no extension and starts with `./` or `../`.\n */\nexport type ResourceTypeReference = Readonly<{\n  importPath: string;\n  exportName: string;\n}>;\n\n/**\n * Maps a response-schema resource value back to where it is exported from.\n * Returns `undefined` when the value is not a known resource export.\n */\nexport type ResourceTypeResolver = (value: unknown) => ResourceTypeReference | undefined;\n\n/**\n * A loaded module namespace together with the file it was imported from.\n */\nexport type ResourceModuleNamespace = Readonly<{\n  file: string;\n  namespace: Record<string, unknown>;\n}>;\n\n/**\n * Called with the dotted path of every field that could not be mapped\n * (for example `200.body.user`).\n */\nexport type UnmappedResourceHandler = (fieldPath: string) => void;\n\nconst CORE_PACKAGE = \"@warlock.js/core\";\n\nfunction isIndexFile(file: string): boolean {\n  return /(^|[\\\\/])index\\.[cm]?[jt]sx?$/.test(file);\n}\n\n/**\n * Build an identity map from every function export (resource classes) to the module\n * export it came from.\n *\n * When the same value is exported more than once (a barrel re-export, or a default next\n * to a named export) the most specific location wins: a non-`index.*` file beats an\n * `index.*` file, then a named export beats `default`, then the first one seen.\n */\nexport function buildResourceMap(\n  namespaces: readonly ResourceModuleNamespace[],\n): Map<unknown, ResourceModuleExport> {\n  const map = new Map<unknown, ResourceModuleExport>();\n\n  const rank = (location: ResourceModuleExport): number =>\n    (isIndexFile(location.file) ? 2 : 0) + (location.exportName === \"default\" ? 1 : 0);\n\n  for (const { file, namespace } of namespaces) {\n    for (const [exportName, value] of Object.entries(namespace)) {\n      if (typeof value !== \"function\") continue;\n\n      const candidate: ResourceModuleExport = { file, exportName };\n      const existing = map.get(value);\n\n      if (!existing || rank(candidate) < rank(existing)) {\n        map.set(value, candidate);\n      }\n    }\n  }\n\n  return map;\n}\n\n/**\n * Turn a resource map into a resolver whose import paths are relative to\n * `<appRoot>/.warlock/typings/`, the folder the generated declarations live in.\n */\nexport function createResourceTypeResolver(\n  map: ReadonlyMap<unknown, ResourceModuleExport>,\n  appRoot: string,\n): ResourceTypeResolver {\n  const typingsDirectory = `${appRoot}${sep}.warlock${sep}typings`;\n\n  return (value) => {\n    const location = map.get(value);\n\n    if (!location) return undefined;\n\n    let importPath = relative(typingsDirectory, location.file)\n      .split(sep)\n      .join(posix.sep)\n      .replace(/\\.[cm]?[jt]sx?$/, \"\");\n\n    if (!importPath.startsWith(\".\")) {\n      importPath = `./${importPath}`;\n    }\n\n    return { importPath, exportName: location.exportName };\n  };\n}\n\nfunction describeCast(cast: string): string {\n  return `import(${JSON.stringify(CORE_PACKAGE)}).CastOutput<${JSON.stringify(cast)}>`;\n}\n\nfunction describeResource(reference: ResourceTypeReference): string {\n  return (\n    `import(${JSON.stringify(CORE_PACKAGE)}).ResourceOutput<` +\n    `typeof import(${JSON.stringify(reference.importPath)})[${JSON.stringify(reference.exportName)}]>`\n  );\n}\n\nfunction describeBodyValue(\n  value: unknown,\n  path: string,\n  resolveResource: ResourceTypeResolver,\n  onUnmapped: UnmappedResourceHandler | undefined,\n): string {\n  if (typeof value === \"string\") {\n    return describeCast(value);\n  }\n\n  if (isNullableResource(value)) {\n    return `(${describeBodyValue(value.resource, path, resolveResource, onUnmapped)}) | null`;\n  }\n\n  if (typeof value === \"function\") {\n    const reference = resolveResource(value);\n\n    if (!reference) {\n      onUnmapped?.(path);\n      return \"unknown\";\n    }\n\n    return describeResource(reference);\n  }\n\n  if (Array.isArray(value)) {\n    return `(${describeBodyValue(value[0], path, resolveResource, onUnmapped)})[]`;\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    const members = Object.entries(value).map(\n      ([key, member]) =>\n        `${JSON.stringify(key)}: ${describeBodyValue(member, `${path}.${key}`, resolveResource, onUnmapped)}`,\n    );\n\n    return members.length === 0 ? \"{}\" : `{ ${members.join(\"; \")} }`;\n  }\n\n  return \"unknown\";\n}\n\n/**\n * Serialize a route's `responseSchema` into TypeScript type expressions, one per status code.\n *\n * The expressions are self-contained: they reference only `CastOutput` and `ResourceOutput`\n * from `@warlock.js/core`, `typeof import(...)` of resource modules, object literal types\n * and arrays. A resource that `resolveResource` cannot map becomes `unknown` and is\n * reported through `onUnmapped`.\n *\n * Both the typings child process and the dev server call this, so their output matches.\n *\n * @returns `undefined` when the schema declares no status code.\n *\n * @example\n * describeResponseSchemaTypes({ 400: { body: { error: \"string\" } } }, resolve);\n * // { \"400\": '{ \"error\": import(\"@warlock.js/core\").CastOutput<\"string\"> }' }\n */\nexport function describeResponseSchemaTypes(\n  schema: unknown,\n  resolveResource: ResourceTypeResolver,\n  onUnmapped?: UnmappedResourceHandler,\n): Record<string, string> | undefined {\n  if (typeof schema !== \"object\" || schema === null) return undefined;\n\n  const described: Record<string, string> = {};\n\n  for (const [status, entry] of Object.entries(schema)) {\n    if (typeof entry !== \"object\" || entry === null) continue;\n\n    const body = (entry as { body?: unknown }).body;\n\n    if (typeof body !== \"object\" || body === null) continue;\n\n    described[status] = describeBodyValue(body, `${status}.body`, resolveResource, onUnmapped);\n  }\n\n  return Object.keys(described).length === 0 ? undefined : described;\n}\n"],"mappings":";;;;AAwCA,MAAM,eAAe;AAErB,SAAS,YAAY,MAAuB;CAC1C,OAAO,gCAAgC,KAAK,IAAI;AAClD;;;;;;;;;AAUA,SAAgB,iBACd,YACoC;CACpC,MAAM,sBAAM,IAAI,IAAmC;CAEnD,MAAM,QAAQ,cACX,YAAY,SAAS,IAAI,IAAI,IAAI,MAAM,SAAS,eAAe,YAAY,IAAI;CAElF,KAAK,MAAM,EAAE,MAAM,eAAe,YAChC,KAAK,MAAM,CAAC,YAAY,UAAU,OAAO,QAAQ,SAAS,GAAG;EAC3D,IAAI,OAAO,UAAU,YAAY;EAEjC,MAAM,YAAkC;GAAE;GAAM;EAAW;EAC3D,MAAM,WAAW,IAAI,IAAI,KAAK;EAE9B,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,QAAQ,GAC9C,IAAI,IAAI,OAAO,SAAS;CAE5B;CAGF,OAAO;AACT;;;;;AAMA,SAAgB,2BACd,KACA,SACsB;CACtB,MAAM,mBAAmB,GAAG,UAAU,IAAI,UAAU,IAAI;CAExD,QAAQ,UAAU;EAChB,MAAM,WAAW,IAAI,IAAI,KAAK;EAE9B,IAAI,CAAC,UAAU,OAAO;EAEtB,IAAI,aAAa,SAAS,kBAAkB,SAAS,IAAI,CAAC,CACvD,MAAM,GAAG,CAAC,CACV,KAAK,MAAM,GAAG,CAAC,CACf,QAAQ,mBAAmB,EAAE;EAEhC,IAAI,CAAC,WAAW,WAAW,GAAG,GAC5B,aAAa,KAAK;EAGpB,OAAO;GAAE;GAAY,YAAY,SAAS;EAAW;CACvD;AACF;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,UAAU,KAAK,UAAU,YAAY,EAAE,eAAe,KAAK,UAAU,IAAI,EAAE;AACpF;AAEA,SAAS,iBAAiB,WAA0C;CAClE,OACE,UAAU,KAAK,UAAU,YAAY,EAAE,iCACtB,KAAK,UAAU,UAAU,UAAU,EAAE,IAAI,KAAK,UAAU,UAAU,UAAU,EAAE;AAEnG;AAEA,SAAS,kBACP,OACA,MACA,iBACA,YACQ;CACR,IAAI,OAAO,UAAU,UACnB,OAAO,aAAa,KAAK;CAG3B,IAAI,mBAAmB,KAAK,GAC1B,OAAO,IAAI,kBAAkB,MAAM,UAAU,MAAM,iBAAiB,UAAU,EAAE;CAGlF,IAAI,OAAO,UAAU,YAAY;EAC/B,MAAM,YAAY,gBAAgB,KAAK;EAEvC,IAAI,CAAC,WAAW;GACd,aAAa,IAAI;GACjB,OAAO;EACT;EAEA,OAAO,iBAAiB,SAAS;CACnC;CAEA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,kBAAkB,MAAM,IAAI,MAAM,iBAAiB,UAAU,EAAE;CAG5E,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAC/C,MAAM,UAAU,OAAO,QAAQ,KAAK,CAAC,CAAC,KACnC,CAAC,KAAK,YACL,GAAG,KAAK,UAAU,GAAG,EAAE,IAAI,kBAAkB,QAAQ,GAAG,KAAK,GAAG,OAAO,iBAAiB,UAAU,GACtG;EAEA,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAK,QAAQ,KAAK,IAAI,EAAE;CAC/D;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;AAkBA,SAAgB,4BACd,QACA,iBACA,YACoC;CACpC,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAE1D,MAAM,YAAoC,CAAC;CAE3C,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,MAAM,GAAG;EACpD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAEjD,MAAM,OAAQ,MAA6B;EAE3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;EAE/C,UAAU,UAAU,kBAAkB,MAAM,GAAG,OAAO,QAAQ,iBAAiB,UAAU;CAC3F;CAEA,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,WAAW,IAAI,SAAY;AAC3D"}
+{"version":3,"file":"response-schema-types.mjs","names":[],"sources":["../../../../../../../../packages/core/src/router/response-schema-types.ts"],"sourcesContent":["import { posix, relative, sep } from \"node:path\";\nimport { isNullableResource } from \"../resource/nullable-resource\";\n\n/**\n * Where a resource class lives: the module it is exported from and the export name.\n */\nexport type ResourceModuleExport = Readonly<{\n  file: string;\n  exportName: string;\n}>;\n\n/**\n * Import location of a resource as it is written in a generated declaration file.\n * `importPath` has no extension and starts with `./` or `../`.\n */\nexport type ResourceTypeReference = Readonly<{\n  importPath: string;\n  exportName: string;\n}>;\n\n/**\n * Maps a response-schema resource value back to where it is exported from.\n * Returns `undefined` when the value is not a known resource export.\n */\nexport type ResourceTypeResolver = (value: unknown) => ResourceTypeReference | undefined;\n\n/**\n * A loaded module namespace together with the file it was imported from.\n */\nexport type ResourceModuleNamespace = Readonly<{\n  file: string;\n  namespace: Record<string, unknown>;\n}>;\n\n/**\n * Called with the dotted path of every field that could not be mapped\n * (for example `200.body.user`).\n */\nexport type UnmappedResourceHandler = (fieldPath: string) => void;\n\nconst CORE_PACKAGE = \"@warlock.js/core\";\n\nfunction isIndexFile(file: string): boolean {\n  return /(^|[\\\\/])index\\.[cm]?[jt]sx?$/.test(file);\n}\n\n/**\n * Build an identity map from every function export (resource classes) to the module\n * export it came from.\n *\n * When the same value is exported more than once (a barrel re-export, or a default next\n * to a named export) the most specific location wins: a non-`index.*` file beats an\n * `index.*` file, then a named export beats `default`, then the first one seen.\n */\nexport function buildResourceMap(\n  namespaces: readonly ResourceModuleNamespace[],\n): Map<unknown, ResourceModuleExport> {\n  const map = new Map<unknown, ResourceModuleExport>();\n\n  const rank = (location: ResourceModuleExport): number =>\n    (isIndexFile(location.file) ? 2 : 0) + (location.exportName === \"default\" ? 1 : 0);\n\n  for (const { file, namespace } of namespaces) {\n    for (const [exportName, value] of Object.entries(namespace)) {\n      if (typeof value !== \"function\") continue;\n\n      const candidate: ResourceModuleExport = { file, exportName };\n      const existing = map.get(value);\n\n      if (!existing || rank(candidate) < rank(existing)) {\n        map.set(value, candidate);\n      }\n    }\n  }\n\n  return map;\n}\n\n/**\n * Turn a resource map into a resolver whose import paths are relative to\n * `<appRoot>/.warlock/typings/`, the folder the generated declarations live in.\n */\nexport function createResourceTypeResolver(\n  map: ReadonlyMap<unknown, ResourceModuleExport>,\n  appRoot: string,\n): ResourceTypeResolver {\n  const typingsDirectory = `${appRoot}${sep}.warlock${sep}typings`;\n\n  return (value) => {\n    const location = map.get(value);\n\n    if (!location) return undefined;\n\n    let importPath = relative(typingsDirectory, location.file)\n      .split(sep)\n      .join(posix.sep)\n      .replace(/\\.[cm]?[jt]sx?$/, \"\");\n\n    if (!importPath.startsWith(\".\")) {\n      importPath = `./${importPath}`;\n    }\n\n    return { importPath, exportName: location.exportName };\n  };\n}\n\nfunction describeCast(cast: string): string {\n  return `import(${JSON.stringify(CORE_PACKAGE)}).CastOutput<${JSON.stringify(cast)}>`;\n}\n\nfunction describeResource(reference: ResourceTypeReference): string {\n  return (\n    `import(${JSON.stringify(CORE_PACKAGE)}).ResourceOutput<` +\n    `typeof import(${JSON.stringify(reference.importPath)})[${JSON.stringify(reference.exportName)}]>`\n  );\n}\n\nfunction describeBodyValue(\n  value: unknown,\n  path: string,\n  resolveResource: ResourceTypeResolver,\n  onUnmapped: UnmappedResourceHandler | undefined,\n): string {\n  if (typeof value === \"string\") {\n    return describeCast(value);\n  }\n\n  if (isNullableResource(value)) {\n    return `(${describeBodyValue(value.resource, path, resolveResource, onUnmapped)}) | null`;\n  }\n\n  if (typeof value === \"function\") {\n    const reference = resolveResource(value);\n\n    if (!reference) {\n      onUnmapped?.(path);\n      return \"unknown\";\n    }\n\n    return describeResource(reference);\n  }\n\n  if (Array.isArray(value)) {\n    return `(${describeBodyValue(value[0], path, resolveResource, onUnmapped)})[]`;\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    const members = Object.entries(value).map(\n      ([key, member]) =>\n        `${JSON.stringify(key)}: ${describeBodyValue(member, `${path}.${key}`, resolveResource, onUnmapped)}`,\n    );\n\n    return members.length === 0 ? \"{}\" : `{ ${members.join(\"; \")} }`;\n  }\n\n  return \"unknown\";\n}\n\n/**\n * Serialize a route's `responseSchema` into TypeScript type expressions, one per status code.\n *\n * The expressions are self-contained: they reference only `CastOutput` and `ResourceOutput`\n * from `@warlock.js/core`, `typeof import(...)` of resource modules, object literal types\n * and arrays. A resource that `resolveResource` cannot map becomes `unknown` and is\n * reported through `onUnmapped`.\n *\n * Both the typings child process and the dev server call this, so their output matches.\n *\n * @returns `undefined` when the schema declares no status code.\n *\n * @example\n * describeResponseSchemaTypes({ 400: { body: { error: \"string\" } } }, resolve);\n * // { \"400\": '{ \"error\": import(\"@warlock.js/core\").CastOutput<\"string\"> }' }\n */\nexport function describeResponseSchemaTypes(\n  schema: unknown,\n  resolveResource: ResourceTypeResolver,\n  onUnmapped?: UnmappedResourceHandler,\n): Record<string, string> | undefined {\n  if (typeof schema !== \"object\" || schema === null) return undefined;\n\n  const described: Record<string, string> = {};\n\n  for (const [status, entry] of Object.entries(schema)) {\n    if (typeof entry !== \"object\" || entry === null) continue;\n\n    const body = (entry as { body?: unknown }).body;\n\n    if (typeof body !== \"object\" || body === null) continue;\n\n    described[status] = describeBodyValue(body, `${status}.body`, resolveResource, onUnmapped);\n  }\n\n  return Object.keys(described).length === 0 ? undefined : described;\n}\n"],"mappings":";;;;AAwCA,MAAM,eAAe;AAErB,SAAS,YAAY,MAAuB;CAC1C,OAAO,gCAAgC,KAAK,IAAI;AAClD;;;;;;;;;AAUA,SAAgB,iBACd,YACoC;CACpC,MAAM,sBAAM,IAAI,IAAmC;CAEnD,MAAM,QAAQ,cACX,YAAY,SAAS,IAAI,IAAI,IAAI,MAAM,SAAS,eAAe,YAAY,IAAI;CAElF,KAAK,MAAM,EAAE,MAAM,eAAe,YAChC,KAAK,MAAM,CAAC,YAAY,UAAU,OAAO,QAAQ,SAAS,GAAG;EAC3D,IAAI,OAAO,UAAU,YAAY;EAEjC,MAAM,YAAkC;GAAE;GAAM;EAAW;EAC3D,MAAM,WAAW,IAAI,IAAI,KAAK;EAE9B,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,QAAQ,GAC9C,IAAI,IAAI,OAAO,SAAS;CAE5B;CAGF,OAAO;AACT;;;;;AAMA,SAAgB,2BACd,KACA,SACsB;CACtB,MAAM,mBAAmB,GAAG,UAAU,IAAI,UAAU,IAAI;CAExD,QAAQ,UAAU;EAChB,MAAM,WAAW,IAAI,IAAI,KAAK;EAE9B,IAAI,CAAC,UAAU,OAAO;EAEtB,IAAI,aAAa,SAAS,kBAAkB,SAAS,IAAI,CAAC,CACvD,MAAM,GAAG,CAAC,CACV,KAAK,MAAM,GAAG,CAAC,CACf,QAAQ,mBAAmB,EAAE;EAEhC,IAAI,CAAC,WAAW,WAAW,GAAG,GAC5B,aAAa,KAAK;EAGpB,OAAO;GAAE;GAAY,YAAY,SAAS;EAAW;CACvD;AACF;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,UAAU,KAAK,UAAU,YAAY,EAAE,eAAe,KAAK,UAAU,IAAI,EAAE;AACpF;AAEA,SAAS,iBAAiB,WAA0C;CAClE,OACE,UAAU,KAAK,UAAU,YAAY,EAAE,iCACtB,KAAK,UAAU,UAAU,UAAU,EAAE,IAAI,KAAK,UAAU,UAAU,UAAU,EAAE;AAEnG;AAEA,SAAS,kBACP,OACA,MACA,iBACA,YACQ;CACR,IAAI,OAAO,UAAU,UACnB,OAAO,aAAa,KAAK;CAG3B,IAAI,mBAAmB,KAAK,GAC1B,OAAO,IAAI,kBAAkB,MAAM,UAAU,MAAM,iBAAiB,UAAU,EAAE;CAGlF,IAAI,OAAO,UAAU,YAAY;EAC/B,MAAM,YAAY,gBAAgB,KAAK;EAEvC,IAAI,CAAC,WAAW;GACd,aAAa,IAAI;GACjB,OAAO;EACT;EAEA,OAAO,iBAAiB,SAAS;CACnC;CAEA,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,kBAAkB,MAAM,IAAI,MAAM,iBAAiB,UAAU,EAAE;CAG5E,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAC/C,MAAM,UAAU,OAAO,QAAQ,KAAK,CAAC,CAAC,KACnC,CAAC,KAAK,YACL,GAAG,KAAK,UAAU,GAAG,EAAE,IAAI,kBAAkB,QAAQ,GAAG,KAAK,GAAG,OAAO,iBAAiB,UAAU,GACtG;EAEA,OAAO,QAAQ,WAAW,IAAI,OAAO,KAAK,QAAQ,KAAK,IAAI,EAAE;CAC/D;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;AAkBA,SAAgB,4BACd,QACA,iBACA,YACoC;CACpC,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAE1D,MAAM,YAAoC,CAAC;CAE3C,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,MAAM,GAAG;EACpD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAEjD,MAAM,OAAQ,MAA6B;EAE3C,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;EAE/C,UAAU,UAAU,kBAAkB,MAAM,GAAG,OAAO,QAAQ,iBAAiB,UAAU;CAC3F;CAEA,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,WAAW,IAAI,SAAY;AAC3D"}

package/esm/router/route-builder.d.mts

@@ -1,7 +1,7 @@
 import { RequestHandlerType, RouteOptions } from "./types.mjs";
 import { Router } from "./router.mjs";
 
-//#region ../core/src/router/route-builder.d.ts
+//#region ../../packages/core/src/router/route-builder.d.ts
 declare class RouteBuilder {
   private readonly router;
   private readonly path;

package/esm/router/route-builder.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"route-builder.d.mts","names":[],"sources":["../../../../../../../core/src/router/route-builder.ts"],"mappings":";;;;cAIa,YAAA;EAAA,iBAYQ,MAAA;EAAA,iBACA,IAAA;EAAA,iBACA,WAAA;EAAA,UAbT,WAAA;;;;;;;;;cAWS,MAAA,EAAQ,MAAA,EACR,IAAA,UACA,WAAA,GAAa,YAAA;EA4CqB;;;EApC9C,GAAA,CAAI,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAyDM;;;;EA3ChD,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAwE7B;;;EAhEhB,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA0F7B;;;;EA5Ed,OAAA,CAAQ,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA4FH;;;EApF3C,GAAA,CAAI,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAoGI;;;EAvF9C,SAAA,CAAU,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA8H1C;;;EAtHN,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA0HvC;;;EA7GL,QAAA,CAAS,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA6HN;;;EArHzC,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA9FjC;;;EA2GZ,SAAA,CAAU,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;;;;;EAahD,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;;;;;EAQ3C,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAhIjC;;;;EAwIZ,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAhIV;;;;EAwIjC,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA1HT;;;;EAkIpC,OAAA,CAAQ,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA1HZ;;;;;;;;;;EA4IlC,IAAA,CAAK,IAAA,UAAc,OAAA,GAAS,YAAA,GAAoB,YAAA;EAzGhD;;;;;;;;;;;;EA2HA,IAAA,CACL,QAAA;IACE,IAAA,GAAO,kBAAA;IACP,MAAA,GAAS,kBAAA;IACT,IAAA,GAAO,kBAAA;IACP,MAAA,GAAS,kBAAA;IACT,OAAA,GAAU,kBAAA;IACV,KAAA,GAAQ,kBAAA;EAAA,GAEV,OAAA,GAAS,YAAA;EA1FJ;;;EAAA,UAwGG,WAAA,CAAY,OAAA,GAAS,YAAA,GAAiB,YAAA;AAAA"}
+{"version":3,"file":"route-builder.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/route-builder.ts"],"mappings":";;;;cAIa,YAAA;EAAA,iBAYQ,MAAA;EAAA,iBACA,IAAA;EAAA,iBACA,WAAA;EAAA,UAbT,WAAA;;;;;;;;;cAWS,MAAA,EAAQ,MAAA,EACR,IAAA,UACA,WAAA,GAAa,YAAA;EA4CqB;;;EApC9C,GAAA,CAAI,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAyDM;;;;EA3ChD,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAwE7B;;;EAhEhB,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA0F7B;;;;EA5Ed,OAAA,CAAQ,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA4FH;;;EApF3C,GAAA,CAAI,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAoGI;;;EAvF9C,SAAA,CAAU,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA8H1C;;;EAtHN,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA0HvC;;;EA7GL,QAAA,CAAS,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA6HN;;;EArHzC,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA9FjC;;;EA2GZ,SAAA,CAAU,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;;;;;EAahD,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;;;;;EAQ3C,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAhIjC;;;;EAwIZ,IAAA,CAAK,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAhIV;;;;EAwIjC,MAAA,CAAO,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA1HT;;;;EAkIpC,OAAA,CAAQ,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA1HZ;;;;;;;;;;EA4IlC,IAAA,CAAK,IAAA,UAAc,OAAA,GAAS,YAAA,GAAoB,YAAA;EAzGhD;;;;;;;;;;;;EA2HA,IAAA,CACL,QAAA;IACE,IAAA,GAAO,kBAAA;IACP,MAAA,GAAS,kBAAA;IACT,IAAA,GAAO,kBAAA;IACP,MAAA,GAAS,kBAAA;IACT,OAAA,GAAU,kBAAA;IACV,KAAA,GAAQ,kBAAA;EAAA,GAEV,OAAA,GAAS,YAAA;EA1FJ;;;EAAA,UAwGG,WAAA,CAAY,OAAA,GAAS,YAAA,GAAiB,YAAA;AAAA"}

package/esm/router/route-builder.mjs

@@ -1,6 +1,6 @@
 import { merge } from "@mongez/reinforcements";
 
-//#region ../core/src/router/route-builder.ts
+//#region ../../packages/core/src/router/route-builder.ts
 var RouteBuilder = class RouteBuilder {
 	constructor(router, path, moreOptions = {}) {
 		this.router = router;

package/esm/router/route-builder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-builder.mjs","names":[],"sources":["../../../../../../../core/src/router/route-builder.ts"],"sourcesContent":["import { merge } from \"@mongez/reinforcements\";\nimport { type Router } from \"./router\";\nimport type { RequestHandlerType, RouteOptions } from \"./types\";\n\nexport class RouteBuilder {\n  protected addedRoutes = {\n    get: false,\n    post: false,\n    put: false,\n    delete: false,\n    patch: false,\n    options: false,\n    head: false,\n  };\n\n  public constructor(\n    private readonly router: Router,\n    private readonly path: string,\n    private readonly moreOptions: RouteOptions = {},\n  ) {\n    //\n  }\n\n  /**\n   * Add a get method to the route\n   */\n  public get(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.get) {\n      throw new Error(`Route ${this.path} already has a GET method`);\n    }\n\n    this.addedRoutes.get = true;\n    this.router.get(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Get one resource, appends /:id to the path\n   * For example: /posts/:id\n   */\n  public getOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.get(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a post method to the route\n   */\n  public post(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.post) {\n      throw new Error(`Route ${this.path} already has a POST method`);\n    }\n\n    this.addedRoutes.post = true;\n    this.router.post(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Post one resource, appends /:id to the path\n   * For example: /posts/:id\n   */\n  public postOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.post(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a PUT request handler for current path\n   */\n  public put(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.put) {\n      throw new Error(`Route ${this.path} already has a PUT method`);\n    }\n\n    this.addedRoutes.put = true;\n    this.router.put(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Update one resource, appends /:id to the path\n   */\n  public updateOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.put(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a PATCH request handler for current path\n   */\n  public patch(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.patch) {\n      throw new Error(`Route ${this.path} already has a PATCH method`);\n    }\n\n    this.addedRoutes.patch = true;\n    this.router.patch(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Patch one resource, appends /:id to the path\n   */\n  public patchOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.patch(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a DELETE request handler for current path\n   */\n  public delete(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.delete) {\n      throw new Error(`Route ${this.path} already has a DELETE method`);\n    }\n\n    this.addedRoutes.delete = true;\n    this.router.delete(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Delete one resource, appends /:id to the path\n   */\n  public deleteOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.delete(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  // ============================================================================\n  // RESTful Semantic Aliases\n  // ============================================================================\n\n  /**\n   * List all resources (RESTful alias for GET collection)\n   * @example router.route(\"/posts\").list(listPosts)\n   */\n  public list(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.get(handler, options);\n  }\n\n  /**\n   * Create a new resource (RESTful alias for POST)\n   * @example router.route(\"/posts\").create(createPost)\n   */\n  public create(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.post(handler, options);\n  }\n\n  /**\n   * Show a single resource (RESTful alias for GET one)\n   * @example router.route(\"/posts\").show(showPost) // GET /posts/:id\n   */\n  public show(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.getOne(handler, options);\n  }\n\n  /**\n   * Update a resource (RESTful alias for PUT one)\n   * @example router.route(\"/posts\").update(updatePost) // PUT /posts/:id\n   */\n  public update(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.updateOne(handler, options);\n  }\n\n  /**\n   * Destroy a resource (RESTful alias for DELETE one)\n   * @example router.route(\"/posts\").destroy(deletePost) // DELETE /posts/:id\n   */\n  public destroy(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.deleteOne(handler, options);\n  }\n\n  // ============================================================================\n  // Route Nesting\n  // ============================================================================\n\n  /**\n   * Create a nested route builder\n   * Useful for building nested resources like /posts/:id/comments\n   * @example\n   * router.route(\"/posts/:id\")\n   *   .getOne(showPost)\n   *   .nest(\"/comments\")\n   *     .list(listComments)      // GET /posts/:id/comments\n   *     .create(createComment);  // POST /posts/:id/comments\n   */\n  public nest(path: string, options: RouteOptions = {}): RouteBuilder {\n    const nestedPath = `${this.path}${path}`;\n    const mergedOptions = this.withOptions(options);\n    return new RouteBuilder(this.router, nestedPath, mergedOptions);\n  }\n\n  /**\n   * Set up common RESTful CRUD routes in one call\n   * @example\n   * router.route(\"/posts\").crud({\n   *   list: listPosts,        // GET /posts\n   *   create: createPost,     // POST /posts\n   *   show: showPost,         // GET /posts/:id\n   *   update: updatePost,     // PUT /posts/:id\n   *   destroy: deletePost,    // DELETE /posts/:id\n   *   patch: patchPost,       // PATCH /posts/:id\n   * });\n   */\n  public crud(\n    handlers: {\n      list?: RequestHandlerType;\n      create?: RequestHandlerType;\n      show?: RequestHandlerType;\n      update?: RequestHandlerType;\n      destroy?: RequestHandlerType;\n      patch?: RequestHandlerType;\n    },\n    options: RouteOptions = {},\n  ) {\n    if (handlers.list) this.get(handlers.list, options);\n    if (handlers.create) this.post(handlers.create, options);\n    if (handlers.show) this.getOne(handlers.show, options);\n    if (handlers.update) this.updateOne(handlers.update, options);\n    if (handlers.destroy) this.deleteOne(handlers.destroy, options);\n    if (handlers.patch) this.patchOne(handlers.patch, options);\n    return this;\n  }\n\n  /**\n   * Merge options with moreOptions\n   */\n  protected withOptions(options: RouteOptions = {}) {\n    const merged = merge(this.moreOptions, options);\n\n    // builder middleware runs first, then the verb/nested ones (deduplicated by reference)\n    const middleware = [...(this.moreOptions.middleware || []), ...(options.middleware || [])];\n\n    if (middleware.length > 0) {\n      merged.middleware = [...new Set(middleware)];\n    }\n\n    return merged;\n  }\n}\n"],"mappings":";;;AAIA,IAAa,eAAb,MAAa,aAAa;CAWxB,AAAO,YACL,AAAiB,QACjB,AAAiB,MACjB,AAAiB,cAA4B,CAAC,GAC9C;EAHiB;EACA;EACA;qBAbK;GACtB,KAAK;GACL,MAAM;GACN,KAAK;GACL,QAAQ;GACR,OAAO;GACP,SAAS;GACT,MAAM;EACR;CAQA;;;;CAKA,AAAO,IAAI,SAA6B,UAAwB,CAAC,GAAG;EAClE,IAAI,KAAK,YAAY,KACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,0BAA0B;EAG/D,KAAK,YAAY,MAAM;EACvB,KAAK,OAAO,IAAI,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC7D,OAAO;CACT;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACtE,OAAO;CACT;;;;CAKA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,IAAI,KAAK,YAAY,MACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,2BAA2B;EAGhE,KAAK,YAAY,OAAO;EACxB,KAAK,OAAO,KAAK,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC9D,OAAO;CACT;;;;;CAMA,AAAO,QAAQ,SAA6B,UAAwB,CAAC,GAAG;EACtE,KAAK,OAAO,KAAK,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACvE,OAAO;CACT;;;;CAKA,AAAO,IAAI,SAA6B,UAAwB,CAAC,GAAG;EAClE,IAAI,KAAK,YAAY,KACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,0BAA0B;EAG/D,KAAK,YAAY,MAAM;EACvB,KAAK,OAAO,IAAI,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC7D,OAAO;CACT;;;;CAKA,AAAO,UAAU,SAA6B,UAAwB,CAAC,GAAG;EACxE,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACtE,OAAO;CACT;;;;CAKA,AAAO,MAAM,SAA6B,UAAwB,CAAC,GAAG;EACpE,IAAI,KAAK,YAAY,OACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,4BAA4B;EAGjE,KAAK,YAAY,QAAQ;EACzB,KAAK,OAAO,MAAM,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC/D,OAAO;CACT;;;;CAKA,AAAO,SAAS,SAA6B,UAAwB,CAAC,GAAG;EACvE,KAAK,OAAO,MAAM,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACxE,OAAO;CACT;;;;CAKA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,IAAI,KAAK,YAAY,QACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,6BAA6B;EAGlE,KAAK,YAAY,SAAS;EAC1B,KAAK,OAAO,OAAO,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAChE,OAAO;CACT;;;;CAKA,AAAO,UAAU,SAA6B,UAAwB,CAAC,GAAG;EACxE,KAAK,OAAO,OAAO,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACzE,OAAO;CACT;;;;;CAUA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,OAAO,KAAK,IAAI,SAAS,OAAO;CAClC;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,OAAO,KAAK,KAAK,SAAS,OAAO;CACnC;;;;;CAMA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,OAAO,KAAK,OAAO,SAAS,OAAO;CACrC;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,OAAO,KAAK,UAAU,SAAS,OAAO;CACxC;;;;;CAMA,AAAO,QAAQ,SAA6B,UAAwB,CAAC,GAAG;EACtE,OAAO,KAAK,UAAU,SAAS,OAAO;CACxC;;;;;;;;;;;CAgBA,AAAO,KAAK,MAAc,UAAwB,CAAC,GAAiB;EAClE,MAAM,aAAa,GAAG,KAAK,OAAO;EAClC,MAAM,gBAAgB,KAAK,YAAY,OAAO;EAC9C,OAAO,IAAI,aAAa,KAAK,QAAQ,YAAY,aAAa;CAChE;;;;;;;;;;;;;CAcA,AAAO,KACL,UAQA,UAAwB,CAAC,GACzB;EACA,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,MAAM,OAAO;EAClD,IAAI,SAAS,QAAQ,KAAK,KAAK,SAAS,QAAQ,OAAO;EACvD,IAAI,SAAS,MAAM,KAAK,OAAO,SAAS,MAAM,OAAO;EACrD,IAAI,SAAS,QAAQ,KAAK,UAAU,SAAS,QAAQ,OAAO;EAC5D,IAAI,SAAS,SAAS,KAAK,UAAU,SAAS,SAAS,OAAO;EAC9D,IAAI,SAAS,OAAO,KAAK,SAAS,SAAS,OAAO,OAAO;EACzD,OAAO;CACT;;;;CAKA,AAAU,YAAY,UAAwB,CAAC,GAAG;EAChD,MAAM,SAAS,MAAM,KAAK,aAAa,OAAO;EAG9C,MAAM,aAAa,CAAC,GAAI,KAAK,YAAY,cAAc,CAAC,GAAI,GAAI,QAAQ,cAAc,CAAC,CAAE;EAEzF,IAAI,WAAW,SAAS,GACtB,OAAO,aAAa,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC;EAG7C,OAAO;CACT;AACF"}
+{"version":3,"file":"route-builder.mjs","names":[],"sources":["../../../../../../../../packages/core/src/router/route-builder.ts"],"sourcesContent":["import { merge } from \"@mongez/reinforcements\";\nimport { type Router } from \"./router\";\nimport type { RequestHandlerType, RouteOptions } from \"./types\";\n\nexport class RouteBuilder {\n  protected addedRoutes = {\n    get: false,\n    post: false,\n    put: false,\n    delete: false,\n    patch: false,\n    options: false,\n    head: false,\n  };\n\n  public constructor(\n    private readonly router: Router,\n    private readonly path: string,\n    private readonly moreOptions: RouteOptions = {},\n  ) {\n    //\n  }\n\n  /**\n   * Add a get method to the route\n   */\n  public get(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.get) {\n      throw new Error(`Route ${this.path} already has a GET method`);\n    }\n\n    this.addedRoutes.get = true;\n    this.router.get(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Get one resource, appends /:id to the path\n   * For example: /posts/:id\n   */\n  public getOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.get(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a post method to the route\n   */\n  public post(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.post) {\n      throw new Error(`Route ${this.path} already has a POST method`);\n    }\n\n    this.addedRoutes.post = true;\n    this.router.post(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Post one resource, appends /:id to the path\n   * For example: /posts/:id\n   */\n  public postOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.post(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a PUT request handler for current path\n   */\n  public put(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.put) {\n      throw new Error(`Route ${this.path} already has a PUT method`);\n    }\n\n    this.addedRoutes.put = true;\n    this.router.put(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Update one resource, appends /:id to the path\n   */\n  public updateOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.put(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a PATCH request handler for current path\n   */\n  public patch(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.patch) {\n      throw new Error(`Route ${this.path} already has a PATCH method`);\n    }\n\n    this.addedRoutes.patch = true;\n    this.router.patch(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Patch one resource, appends /:id to the path\n   */\n  public patchOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.patch(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Add a DELETE request handler for current path\n   */\n  public delete(handler: RequestHandlerType, options: RouteOptions = {}) {\n    if (this.addedRoutes.delete) {\n      throw new Error(`Route ${this.path} already has a DELETE method`);\n    }\n\n    this.addedRoutes.delete = true;\n    this.router.delete(this.path, handler, this.withOptions(options));\n    return this;\n  }\n\n  /**\n   * Delete one resource, appends /:id to the path\n   */\n  public deleteOne(handler: RequestHandlerType, options: RouteOptions = {}) {\n    this.router.delete(`${this.path}/:id`, handler, this.withOptions(options));\n    return this;\n  }\n\n  // ============================================================================\n  // RESTful Semantic Aliases\n  // ============================================================================\n\n  /**\n   * List all resources (RESTful alias for GET collection)\n   * @example router.route(\"/posts\").list(listPosts)\n   */\n  public list(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.get(handler, options);\n  }\n\n  /**\n   * Create a new resource (RESTful alias for POST)\n   * @example router.route(\"/posts\").create(createPost)\n   */\n  public create(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.post(handler, options);\n  }\n\n  /**\n   * Show a single resource (RESTful alias for GET one)\n   * @example router.route(\"/posts\").show(showPost) // GET /posts/:id\n   */\n  public show(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.getOne(handler, options);\n  }\n\n  /**\n   * Update a resource (RESTful alias for PUT one)\n   * @example router.route(\"/posts\").update(updatePost) // PUT /posts/:id\n   */\n  public update(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.updateOne(handler, options);\n  }\n\n  /**\n   * Destroy a resource (RESTful alias for DELETE one)\n   * @example router.route(\"/posts\").destroy(deletePost) // DELETE /posts/:id\n   */\n  public destroy(handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.deleteOne(handler, options);\n  }\n\n  // ============================================================================\n  // Route Nesting\n  // ============================================================================\n\n  /**\n   * Create a nested route builder\n   * Useful for building nested resources like /posts/:id/comments\n   * @example\n   * router.route(\"/posts/:id\")\n   *   .getOne(showPost)\n   *   .nest(\"/comments\")\n   *     .list(listComments)      // GET /posts/:id/comments\n   *     .create(createComment);  // POST /posts/:id/comments\n   */\n  public nest(path: string, options: RouteOptions = {}): RouteBuilder {\n    const nestedPath = `${this.path}${path}`;\n    const mergedOptions = this.withOptions(options);\n    return new RouteBuilder(this.router, nestedPath, mergedOptions);\n  }\n\n  /**\n   * Set up common RESTful CRUD routes in one call\n   * @example\n   * router.route(\"/posts\").crud({\n   *   list: listPosts,        // GET /posts\n   *   create: createPost,     // POST /posts\n   *   show: showPost,         // GET /posts/:id\n   *   update: updatePost,     // PUT /posts/:id\n   *   destroy: deletePost,    // DELETE /posts/:id\n   *   patch: patchPost,       // PATCH /posts/:id\n   * });\n   */\n  public crud(\n    handlers: {\n      list?: RequestHandlerType;\n      create?: RequestHandlerType;\n      show?: RequestHandlerType;\n      update?: RequestHandlerType;\n      destroy?: RequestHandlerType;\n      patch?: RequestHandlerType;\n    },\n    options: RouteOptions = {},\n  ) {\n    if (handlers.list) this.get(handlers.list, options);\n    if (handlers.create) this.post(handlers.create, options);\n    if (handlers.show) this.getOne(handlers.show, options);\n    if (handlers.update) this.updateOne(handlers.update, options);\n    if (handlers.destroy) this.deleteOne(handlers.destroy, options);\n    if (handlers.patch) this.patchOne(handlers.patch, options);\n    return this;\n  }\n\n  /**\n   * Merge options with moreOptions\n   */\n  protected withOptions(options: RouteOptions = {}) {\n    const merged = merge(this.moreOptions, options);\n\n    // builder middleware runs first, then the verb/nested ones (deduplicated by reference)\n    const middleware = [...(this.moreOptions.middleware || []), ...(options.middleware || [])];\n\n    if (middleware.length > 0) {\n      merged.middleware = [...new Set(middleware)];\n    }\n\n    return merged;\n  }\n}\n"],"mappings":";;;AAIA,IAAa,eAAb,MAAa,aAAa;CAWxB,AAAO,YACL,AAAiB,QACjB,AAAiB,MACjB,AAAiB,cAA4B,CAAC,GAC9C;EAHiB;EACA;EACA;qBAbK;GACtB,KAAK;GACL,MAAM;GACN,KAAK;GACL,QAAQ;GACR,OAAO;GACP,SAAS;GACT,MAAM;EACR;CAQA;;;;CAKA,AAAO,IAAI,SAA6B,UAAwB,CAAC,GAAG;EAClE,IAAI,KAAK,YAAY,KACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,0BAA0B;EAG/D,KAAK,YAAY,MAAM;EACvB,KAAK,OAAO,IAAI,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC7D,OAAO;CACT;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACtE,OAAO;CACT;;;;CAKA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,IAAI,KAAK,YAAY,MACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,2BAA2B;EAGhE,KAAK,YAAY,OAAO;EACxB,KAAK,OAAO,KAAK,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC9D,OAAO;CACT;;;;;CAMA,AAAO,QAAQ,SAA6B,UAAwB,CAAC,GAAG;EACtE,KAAK,OAAO,KAAK,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACvE,OAAO;CACT;;;;CAKA,AAAO,IAAI,SAA6B,UAAwB,CAAC,GAAG;EAClE,IAAI,KAAK,YAAY,KACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,0BAA0B;EAG/D,KAAK,YAAY,MAAM;EACvB,KAAK,OAAO,IAAI,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC7D,OAAO;CACT;;;;CAKA,AAAO,UAAU,SAA6B,UAAwB,CAAC,GAAG;EACxE,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACtE,OAAO;CACT;;;;CAKA,AAAO,MAAM,SAA6B,UAAwB,CAAC,GAAG;EACpE,IAAI,KAAK,YAAY,OACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,4BAA4B;EAGjE,KAAK,YAAY,QAAQ;EACzB,KAAK,OAAO,MAAM,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAC/D,OAAO;CACT;;;;CAKA,AAAO,SAAS,SAA6B,UAAwB,CAAC,GAAG;EACvE,KAAK,OAAO,MAAM,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACxE,OAAO;CACT;;;;CAKA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,IAAI,KAAK,YAAY,QACnB,MAAM,IAAI,MAAM,SAAS,KAAK,KAAK,6BAA6B;EAGlE,KAAK,YAAY,SAAS;EAC1B,KAAK,OAAO,OAAO,KAAK,MAAM,SAAS,KAAK,YAAY,OAAO,CAAC;EAChE,OAAO;CACT;;;;CAKA,AAAO,UAAU,SAA6B,UAAwB,CAAC,GAAG;EACxE,KAAK,OAAO,OAAO,GAAG,KAAK,KAAK,OAAO,SAAS,KAAK,YAAY,OAAO,CAAC;EACzE,OAAO;CACT;;;;;CAUA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,OAAO,KAAK,IAAI,SAAS,OAAO;CAClC;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,OAAO,KAAK,KAAK,SAAS,OAAO;CACnC;;;;;CAMA,AAAO,KAAK,SAA6B,UAAwB,CAAC,GAAG;EACnE,OAAO,KAAK,OAAO,SAAS,OAAO;CACrC;;;;;CAMA,AAAO,OAAO,SAA6B,UAAwB,CAAC,GAAG;EACrE,OAAO,KAAK,UAAU,SAAS,OAAO;CACxC;;;;;CAMA,AAAO,QAAQ,SAA6B,UAAwB,CAAC,GAAG;EACtE,OAAO,KAAK,UAAU,SAAS,OAAO;CACxC;;;;;;;;;;;CAgBA,AAAO,KAAK,MAAc,UAAwB,CAAC,GAAiB;EAClE,MAAM,aAAa,GAAG,KAAK,OAAO;EAClC,MAAM,gBAAgB,KAAK,YAAY,OAAO;EAC9C,OAAO,IAAI,aAAa,KAAK,QAAQ,YAAY,aAAa;CAChE;;;;;;;;;;;;;CAcA,AAAO,KACL,UAQA,UAAwB,CAAC,GACzB;EACA,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,MAAM,OAAO;EAClD,IAAI,SAAS,QAAQ,KAAK,KAAK,SAAS,QAAQ,OAAO;EACvD,IAAI,SAAS,MAAM,KAAK,OAAO,SAAS,MAAM,OAAO;EACrD,IAAI,SAAS,QAAQ,KAAK,UAAU,SAAS,QAAQ,OAAO;EAC5D,IAAI,SAAS,SAAS,KAAK,UAAU,SAAS,SAAS,OAAO;EAC9D,IAAI,SAAS,OAAO,KAAK,SAAS,SAAS,OAAO,OAAO;EACzD,OAAO;CACT;;;;CAKA,AAAU,YAAY,UAAwB,CAAC,GAAG;EAChD,MAAM,SAAS,MAAM,KAAK,aAAa,OAAO;EAG9C,MAAM,aAAa,CAAC,GAAI,KAAK,YAAY,cAAc,CAAC,GAAI,GAAI,QAAQ,cAAc,CAAC,CAAE;EAEzF,IAAI,WAAW,SAAS,GACtB,OAAO,aAAa,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC;EAG7C,OAAO;CACT;AACF"}

package/esm/router/route-name-method-suffix.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/router/route-name-method-suffix.d.ts
+//#region ../../packages/core/src/router/route-name-method-suffix.d.ts
 /**
  * The route-name suffix the router appends at REGISTRATION time, and its
  * inverse.

package/esm/router/route-name-method-suffix.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"route-name-method-suffix.d.mts","names":[],"sources":["../../../../../../../core/src/router/route-name-method-suffix.ts"],"mappings":";;AAmBA;;;;AAAoD;AAapD;;;;;;;;AAGgB;;;;AAAA,iBAhBA,qBAAA,CAAsB,MAAc;;;;;;;;;;iBAapC,uBAAA,CACd,WAAA,UACA,cAAA,UACA,MAAA"}
+{"version":3,"file":"route-name-method-suffix.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/route-name-method-suffix.ts"],"mappings":";;AAmBA;;;;AAAoD;AAapD;;;;;;;;AAGgB;;;;AAAA,iBAhBA,qBAAA,CAAsB,MAAc;;;;;;;;;;iBAapC,uBAAA,CACd,WAAA,UACA,cAAA,UACA,MAAA"}

package/esm/router/route-name-method-suffix.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/router/route-name-method-suffix.ts
+//#region ../../packages/core/src/router/route-name-method-suffix.ts
 /**
 * The route-name suffix the router appends at REGISTRATION time, and its
 * inverse.

package/esm/router/route-name-method-suffix.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-name-method-suffix.mjs","names":[],"sources":["../../../../../../../core/src/router/route-name-method-suffix.ts"],"sourcesContent":["/**\n * The route-name suffix the router appends at REGISTRATION time, and its\n * inverse.\n *\n * `Router.add` gives a route the name it was asked for — unless another route\n * already claimed that name under a DIFFERENT method, in which case it appends\n * `.<method>` so both can coexist. That decision depends on the whole\n * registration order across pages AND API routes, so it cannot be predicted by\n * anything that only looks at one route, or at only one kind of route.\n *\n * Both halves live here so the rule is written down once: `Router.add` builds\n * the suffix with {@link routeNameMethodSuffix}, and anything comparing a\n * DERIVED name against a REGISTERED one uses {@link matchesDerivedRouteName}.\n */\n\n/**\n * The suffix `Router.add` appends to a route name already claimed by another\n * method.\n */\nexport function routeNameMethodSuffix(method: string): string {\n  return `.${method.toLowerCase()}`;\n}\n\n/**\n * Whether `registeredName` is what the router would have registered for a\n * route whose name was DERIVED as `derivedName`.\n *\n * True for exactly two spellings: the derived name itself, and the derived\n * name plus the registration collision suffix for `method`. It is not a fuzzy\n * match — a `.get` suffix is accepted only where the router itself could have\n * added one, and any other difference is still a difference.\n */\nexport function matchesDerivedRouteName(\n  derivedName: string,\n  registeredName: string,\n  method: string,\n): boolean {\n  if (registeredName === derivedName) {\n    return true;\n  }\n\n  return registeredName === derivedName + routeNameMethodSuffix(method);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,IAAI,OAAO,YAAY;AAChC;;;;;;;;;;AAWA,SAAgB,wBACd,aACA,gBACA,QACS;CACT,IAAI,mBAAmB,aACrB,OAAO;CAGT,OAAO,mBAAmB,cAAc,sBAAsB,MAAM;AACtE"}
+{"version":3,"file":"route-name-method-suffix.mjs","names":[],"sources":["../../../../../../../../packages/core/src/router/route-name-method-suffix.ts"],"sourcesContent":["/**\n * The route-name suffix the router appends at REGISTRATION time, and its\n * inverse.\n *\n * `Router.add` gives a route the name it was asked for — unless another route\n * already claimed that name under a DIFFERENT method, in which case it appends\n * `.<method>` so both can coexist. That decision depends on the whole\n * registration order across pages AND API routes, so it cannot be predicted by\n * anything that only looks at one route, or at only one kind of route.\n *\n * Both halves live here so the rule is written down once: `Router.add` builds\n * the suffix with {@link routeNameMethodSuffix}, and anything comparing a\n * DERIVED name against a REGISTERED one uses {@link matchesDerivedRouteName}.\n */\n\n/**\n * The suffix `Router.add` appends to a route name already claimed by another\n * method.\n */\nexport function routeNameMethodSuffix(method: string): string {\n  return `.${method.toLowerCase()}`;\n}\n\n/**\n * Whether `registeredName` is what the router would have registered for a\n * route whose name was DERIVED as `derivedName`.\n *\n * True for exactly two spellings: the derived name itself, and the derived\n * name plus the registration collision suffix for `method`. It is not a fuzzy\n * match — a `.get` suffix is accepted only where the router itself could have\n * added one, and any other difference is still a difference.\n */\nexport function matchesDerivedRouteName(\n  derivedName: string,\n  registeredName: string,\n  method: string,\n): boolean {\n  if (registeredName === derivedName) {\n    return true;\n  }\n\n  return registeredName === derivedName + routeNameMethodSuffix(method);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,sBAAsB,QAAwB;CAC5D,OAAO,IAAI,OAAO,YAAY;AAChC;;;;;;;;;;AAWA,SAAgB,wBACd,aACA,gBACA,QACS;CACT,IAAI,mBAAmB,aACrB,OAAO;CAGT,OAAO,mBAAmB,cAAc,sBAAsB,MAAM;AACtE"}

package/esm/router/route-registry.d.mts

@@ -1,6 +1,6 @@
 import { Route } from "./types.mjs";
 
-//#region ../core/src/router/route-registry.d.ts
+//#region ../../packages/core/src/router/route-registry.d.ts
 /**
  * Route Registry
  * Manages dynamic route matching using find-my-way for HMR support

package/esm/router/route-registry.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"route-registry.d.mts","names":[],"sources":["../../../../../../../core/src/router/route-registry.ts"],"mappings":";;;;;AAuBA;;cAAa,aAAA;EAAA,QACH,MAAA;;EAgDI;;;EAjCL,QAAA,CAAS,MAAA,EAAQ,KAAA;EAfhB;;;EAkCD,aAAA,CAAc,KAAA,EAAO,KAAA;EAnBZ;;;;EA8BT,IAAA,CACL,MAAA,UACA,GAAA;IACG,KAAA,EAAO,KAAA;IAAO,MAAA,EAAQ,MAAA;EAAA;EAAf;;;EAqBL,aAAA;AAAA"}
+{"version":3,"file":"route-registry.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/route-registry.ts"],"mappings":";;;;;AAuBA;;cAAa,aAAA;EAAA,QACH,MAAA;;EAgDI;;;EAjCL,QAAA,CAAS,MAAA,EAAQ,KAAA;EAfhB;;;EAkCD,aAAA,CAAc,KAAA,EAAO,KAAA;EAnBZ;;;;EA8BT,IAAA,CACL,MAAA,UACA,GAAA;IACG,KAAA,EAAO,KAAA;IAAO,MAAA,EAAQ,MAAA;EAAA;EAAf;;;EAqBL,aAAA;AAAA"}

package/esm/router/route-registry.mjs

@@ -1,7 +1,7 @@
 import { normalizeRequestPath } from "./normalize-request-path.mjs";
 import FindMyWay from "find-my-way";
 
-//#region ../core/src/router/route-registry.ts
+//#region ../../packages/core/src/router/route-registry.ts
 /**
 * The concrete HTTP verbs an `all` route expands into.
 * Mirrors the set Fastify's `.all()` answers in production, so `router.any()`

package/esm/router/route-registry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-registry.mjs","names":[],"sources":["../../../../../../../core/src/router/route-registry.ts"],"sourcesContent":["import FindMyWay, { type HTTPMethod, type Instance } from \"find-my-way\";\nimport { normalizeRequestPath } from \"./normalize-request-path\";\nimport type { RequestMethod, Route } from \"./types\";\n\n/**\n * The concrete HTTP verbs an `all` route expands into.\n * Mirrors the set Fastify's `.all()` answers in production, so `router.any()`\n * routes behave identically under the dev server and prod Fastify.\n */\nconst ALL_METHODS: Exclude<RequestMethod, \"all\">[] = [\n  \"GET\",\n  \"POST\",\n  \"PUT\",\n  \"PATCH\",\n  \"DELETE\",\n  \"OPTIONS\",\n  \"HEAD\",\n];\n\n/**\n * Route Registry\n * Manages dynamic route matching using find-my-way for HMR support\n */\nexport class RouteRegistry {\n  private router: Instance<any>;\n\n  public constructor() {\n    this.router = FindMyWay({\n      // Request paths are normalized explicitly in `find`; leaving this off\n      // makes that shared normalizer, rather than a second router option, the\n      // reason development accepts a terminal slash.\n      ignoreTrailingSlash: false,\n      caseSensitive: true,\n    });\n  }\n\n  /**\n   * Register all routes from the router's internal list\n   */\n  public register(routes: Route[]): void {\n    // Register each route\n    for (const route of routes) {\n      if (route.method === \"all\") {\n        for (const method of ALL_METHODS) {\n          this.registerRoute({\n            ...route,\n            method,\n          });\n        }\n      } else {\n        this.registerRoute(route);\n      }\n    }\n  }\n\n  /**\n   * Register a single route\n   */\n  public registerRoute(route: Route): void {\n    this.router.on(route.method as HTTPMethod, route.path, (req, res, params) => {\n      // Store the route and params for later use\n      return { route, params };\n    });\n  }\n\n  /**\n   * Find a matching route for the given method and URL\n   * @returns Matched route with extracted params, or null if no match\n   */\n  public find(\n    method: string,\n    url: string,\n  ): { route: Route; params: Record<string, string> } | null {\n    // Strip query string from URL (find-my-way expects just the path)\n    const path = normalizeRequestPath(url.split(\"?\")[0] ?? \"/\");\n\n    // HEAD falls back to the GET route, as Fastify's implicit HEAD does in production.\n    const match =\n      this.router.find(method as HTTPMethod, path) ??\n      (method === \"HEAD\" ? this.router.find(\"GET\", path) : null);\n\n    if (!match) {\n      return null;\n    }\n\n    // find-my-way handler expects (req, res, params, store, searchParams)\n    // We only care about the return value which contains { route, params }\n    return match.handler(null as any, null as any, match.params, match.store, {});\n  }\n\n  /**\n   * Get all registered routes count (for debugging)\n   */\n  public getRouteCount(): number {\n    return this.router\n      .prettyPrint()\n      .split(\"\\n\")\n      .filter((line) => line.trim()).length;\n  }\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,cAA+C;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,IAAa,gBAAb,MAA2B;CAGzB,AAAO,cAAc;EACnB,KAAK,SAAS,UAAU;GAItB,qBAAqB;GACrB,eAAe;EACjB,CAAC;CACH;;;;CAKA,AAAO,SAAS,QAAuB;EAErC,KAAK,MAAM,SAAS,QAClB,IAAI,MAAM,WAAW,OACnB,KAAK,MAAM,UAAU,aACnB,KAAK,cAAc;GACjB,GAAG;GACH;EACF,CAAC;OAGH,KAAK,cAAc,KAAK;CAG9B;;;;CAKA,AAAO,cAAc,OAAoB;EACvC,KAAK,OAAO,GAAG,MAAM,QAAsB,MAAM,OAAO,KAAK,KAAK,WAAW;GAE3E,OAAO;IAAE;IAAO;GAAO;EACzB,CAAC;CACH;;;;;CAMA,AAAO,KACL,QACA,KACyD;EAEzD,MAAM,OAAO,qBAAqB,IAAI,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG;EAG1D,MAAM,QACJ,KAAK,OAAO,KAAK,QAAsB,IAAI,MAC1C,WAAW,SAAS,KAAK,OAAO,KAAK,OAAO,IAAI,IAAI;EAEvD,IAAI,CAAC,OACH,OAAO;EAKT,OAAO,MAAM,QAAQ,MAAa,MAAa,MAAM,QAAQ,MAAM,OAAO,CAAC,CAAC;CAC9E;;;;CAKA,AAAO,gBAAwB;EAC7B,OAAO,KAAK,OACT,YAAY,CAAC,CACb,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC;CACnC;AACF"}
+{"version":3,"file":"route-registry.mjs","names":[],"sources":["../../../../../../../../packages/core/src/router/route-registry.ts"],"sourcesContent":["import FindMyWay, { type HTTPMethod, type Instance } from \"find-my-way\";\nimport { normalizeRequestPath } from \"./normalize-request-path\";\nimport type { RequestMethod, Route } from \"./types\";\n\n/**\n * The concrete HTTP verbs an `all` route expands into.\n * Mirrors the set Fastify's `.all()` answers in production, so `router.any()`\n * routes behave identically under the dev server and prod Fastify.\n */\nconst ALL_METHODS: Exclude<RequestMethod, \"all\">[] = [\n  \"GET\",\n  \"POST\",\n  \"PUT\",\n  \"PATCH\",\n  \"DELETE\",\n  \"OPTIONS\",\n  \"HEAD\",\n];\n\n/**\n * Route Registry\n * Manages dynamic route matching using find-my-way for HMR support\n */\nexport class RouteRegistry {\n  private router: Instance<any>;\n\n  public constructor() {\n    this.router = FindMyWay({\n      // Request paths are normalized explicitly in `find`; leaving this off\n      // makes that shared normalizer, rather than a second router option, the\n      // reason development accepts a terminal slash.\n      ignoreTrailingSlash: false,\n      caseSensitive: true,\n    });\n  }\n\n  /**\n   * Register all routes from the router's internal list\n   */\n  public register(routes: Route[]): void {\n    // Register each route\n    for (const route of routes) {\n      if (route.method === \"all\") {\n        for (const method of ALL_METHODS) {\n          this.registerRoute({\n            ...route,\n            method,\n          });\n        }\n      } else {\n        this.registerRoute(route);\n      }\n    }\n  }\n\n  /**\n   * Register a single route\n   */\n  public registerRoute(route: Route): void {\n    this.router.on(route.method as HTTPMethod, route.path, (req, res, params) => {\n      // Store the route and params for later use\n      return { route, params };\n    });\n  }\n\n  /**\n   * Find a matching route for the given method and URL\n   * @returns Matched route with extracted params, or null if no match\n   */\n  public find(\n    method: string,\n    url: string,\n  ): { route: Route; params: Record<string, string> } | null {\n    // Strip query string from URL (find-my-way expects just the path)\n    const path = normalizeRequestPath(url.split(\"?\")[0] ?? \"/\");\n\n    // HEAD falls back to the GET route, as Fastify's implicit HEAD does in production.\n    const match =\n      this.router.find(method as HTTPMethod, path) ??\n      (method === \"HEAD\" ? this.router.find(\"GET\", path) : null);\n\n    if (!match) {\n      return null;\n    }\n\n    // find-my-way handler expects (req, res, params, store, searchParams)\n    // We only care about the return value which contains { route, params }\n    return match.handler(null as any, null as any, match.params, match.store, {});\n  }\n\n  /**\n   * Get all registered routes count (for debugging)\n   */\n  public getRouteCount(): number {\n    return this.router\n      .prettyPrint()\n      .split(\"\\n\")\n      .filter((line) => line.trim()).length;\n  }\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,cAA+C;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,IAAa,gBAAb,MAA2B;CAGzB,AAAO,cAAc;EACnB,KAAK,SAAS,UAAU;GAItB,qBAAqB;GACrB,eAAe;EACjB,CAAC;CACH;;;;CAKA,AAAO,SAAS,QAAuB;EAErC,KAAK,MAAM,SAAS,QAClB,IAAI,MAAM,WAAW,OACnB,KAAK,MAAM,UAAU,aACnB,KAAK,cAAc;GACjB,GAAG;GACH;EACF,CAAC;OAGH,KAAK,cAAc,KAAK;CAG9B;;;;CAKA,AAAO,cAAc,OAAoB;EACvC,KAAK,OAAO,GAAG,MAAM,QAAsB,MAAM,OAAO,KAAK,KAAK,WAAW;GAE3E,OAAO;IAAE;IAAO;GAAO;EACzB,CAAC;CACH;;;;;CAMA,AAAO,KACL,QACA,KACyD;EAEzD,MAAM,OAAO,qBAAqB,IAAI,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG;EAG1D,MAAM,QACJ,KAAK,OAAO,KAAK,QAAsB,IAAI,MAC1C,WAAW,SAAS,KAAK,OAAO,KAAK,OAAO,IAAI,IAAI;EAEvD,IAAI,CAAC,OACH,OAAO;EAKT,OAAO,MAAM,QAAQ,MAAa,MAAa,MAAM,QAAQ,MAAM,OAAO,CAAC,CAAC;CAC9E;;;;CAKA,AAAO,gBAAwB;EAC7B,OAAO,KAAK,OACT,YAAY,CAAC,CACb,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC;CACnC;AACF"}

package/esm/router/router.d.mts

@@ -4,7 +4,7 @@ import { RouteBuilder } from "./route-builder.mjs";
 import { FastifyHttpProxyOptions } from "@fastify/http-proxy";
 import { FastifyStaticOptions } from "@fastify/static";
 
-//#region ../core/src/router/router.d.ts
+//#region ../../packages/core/src/router/router.d.ts
 declare class Router {
   /**
    * Routes list
@@ -62,6 +62,13 @@ declare class Router {
    * Server static folder
    */
   directory(options: FastifyStaticOptions): this;
+  /**
+   * Register every `directory()` with `@fastify/static`. The plugin is
+   * imported only when at least one directory was declared: loading it is not
+   * free (its directory-listing module calls `os.cpus()` at load), and an app
+   * that serves no static folder should not pay for it (WR-027).
+   */
+  protected registerStaticDirectories(server: FastifyInstance): void;
   /**
    * Serve file
    */

package/esm/router/router.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.mts","names":[],"sources":["../../../../../../../core/src/router/router.ts"],"mappings":";;;;;;;cA6Ja,MAAA;;AAAb;;UAIU,MAAA;EA8BqB;;;;;;;;EAAA,QApBrB,aAAA;EAiEgD;;;;EAAA,QA3DhD,2BAAA;EAiII;;;EAAA,eAxHG,QAAA;EAkJJ;;;EAAA,UA7ID,iBAAA,EAAmB,oBAAA;EA0QkC;;;EAAA,UArQrD,cAAA,EAAgB,MAAA,WAAiB,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EAmRJ;;;;EAAA,UA5QrD,MAAA,EAAQ,YAAA;EAiSiB;;;EAAA,OAxRrB,WAAA,IAAW,MAAA;EAAA,QAQlB,WAAA;EA8R8C;;;EAvR9C,cAAA,CAAe,QAAA,GAAW,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EA0S5C;;;EAjSN,aAAA,CAAc,QAAA,GAAW,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EAkS1C;;;EAzRP,QAAA,CAAS,IAAA,UAAc,EAAA,UAAY,YAAA;EAgdxB;;;EAvcX,SAAA,CAAU,OAAA,EAAS,oBAAA;EAwcvB;;;EA/bI,IAAA,CAAK,IAAA,UAAc,QAAA,UAAkB,SAAA;EA4fvB;;;EAnfd,UAAA,CAAW,IAAA,UAAc,QAAA,UAAkB,SAAA;EAwnBhB;;;EA/mB3B,KAAA,CAAM,KAAA,EAAO,MAAA,kBAAwB,SAAA;EAw1BN;;;EA70B/B,WAAA,CAAY,KAAA,EAAO,MAAA,kBAAwB,SAAA;EAzH1C;;;EAoID,KAAA,CACL,IAAA,UACA,OAAA,UACA,OAAA,GAAU,IAAA,CAAK,uBAAA;EAEV,KAAA,CAAM,OAAA,EAAS,uBAAA;EAhHZ;;;EAoIH,GAAA,CACL,MAAA,EAAQ,KAAA,YACR,IAAA,qBACA,OAAA,EAAS,kBAAA,EACT,OAAA,GAAS,YAAA;EAxIwD;;;EA8P5D,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA9OjD;;;EAqPP,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAtOtB;;;EA6OlC,IAAA,CAAK,IAAA,qBAAyB,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA7OrD;;;EAoPf,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA3OP;;;EAkPjD,MAAA,CAAO,IAAA,qBAAyB,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAzO7D;;;EAgPT,KAAA,CAAM,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAvOvC;;;EA8OnB,IAAA,CAAK,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EArOtC;;;EA4OnB,OAAA,CAAQ,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAnOnC;;;EA0OzB,KAAA,CAAM,IAAA,UAAc,OAAA,GAAS,YAAA,GAAiB,YAAA;EAjOxC;;;;;;;;;;EA+ON,eAAA,CACL,IAAA,UACA,QAAA,EAAU,aAAA,EACV,OAAA,GAAS,YAAA;IACP,IAAA,GAAO,cAAA;IACP,MAAA,GAAS,cAAA;IACT,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,cAAA,EAAgB,cAAA;MACvC,UAAA,GAAa,cAAA;IAAA;EAAA;EAtMjB;;;EA4SK,KAAA,CAAM,OAAA,EAAS,oBAAA,EAAsB,QAAA,EAAU,mBAAA;EAzS3C;;;EA6VJ,MAAA,CAAO,MAAA,UAAgB,QAAA;EAvOI;;;;;;;;;;;;EAuP3B,OAAA,CAAQ,OAAA,mBAA0B,QAAA;EAzOJ;;;;;;EAmPxB,cAAA,UACX,UAAA,UACA,QAAA,QAAgB,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC3B,OAAA,CAAQ,CAAA;EA/OoD;;;;;EAgRxD,wBAAA,CAAyB,UAAA;EAzQ6C;;;;;;;;EAmShE,0BAAA,IACX,WAAA,EAAa,QAAA,UACb,OAAA,QAAe,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC1B,OAAA,CAAQ,CAAA;EAxRC;;;EAAA,QAsUJ,gBAAA;EAtU+C;;;EAkZhD,IAAA,IAAI,KAAA;EA3YkB;;;;;;EAqZtB,iBAAA,CAAkB,OAAA,GAAS,qBAAA,YAAsC,aAAA;EA9YnB;;;;;;;;EAua9C,UAAA;EApZM;;;EA2ZN,IAAA,CAAK,MAAA,EAAQ,eAAA;EA1ZS;;;;EAmdtB,aAAA,CAAc,MAAA,EAAQ,eAAA;EA5WtB;;;EA4fA,QAAA,CAAS,IAAA,UAAc,MAAA,GAAQ,MAAA;EA5fM;;;EAAA,QA8hBpC,WAAA;AAAA;AAAA,cA4EG,MAAA,EAAM,MAAuB"}
+{"version":3,"file":"router.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/router.ts"],"mappings":";;;;;;;cA8Ja,MAAA;;AAAb;;UAIU,MAAA;EA8BqB;;;;;;;;EAAA,QApBrB,aAAA;EAiEgD;;;;EAAA,QA3DhD,2BAAA;EAoJS;;;EAAA,eA3IF,QAAA;EAoKJ;;;EAAA,UA/JD,iBAAA,EAAmB,oBAAA;EA6RK;;;EAAA,UAxRxB,cAAA,EAAgB,MAAA,WAAiB,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EAsSjC;;;;EAAA,UA/RxB,MAAA,EAAQ,YAAA;EA6S+C;;;EAAA,OApSnD,WAAA,IAAW,MAAA;EAAA,QAQlB,WAAA;EAiT6B;;;EA1S7B,cAAA,CAAe,QAAA,GAAW,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EA4T9C;;;EAnTJ,aAAA,CAAc,QAAA,GAAW,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,eAAA;EAqTlC;;;EA5Sf,QAAA,CAAS,IAAA,UAAc,EAAA,UAAY,YAAA;EAmZY;;;EA1Y/C,SAAA,CAAU,OAAA,EAAS,oBAAA;EA2df;;;;;;EAAA,UA/cD,yBAAA,CAA0B,MAAA,EAAQ,eAAA;EA6gBzC;;;EA7fI,IAAA,CAAK,IAAA,UAAc,QAAA,UAAkB,SAAA;EAiqBxB;;;EAxpBb,UAAA,CAAW,IAAA,UAAc,QAAA,UAAkB,SAAA;EAs1BN;;;EA70BrC,KAAA,CAAM,KAAA,EAAO,MAAA,kBAAwB,SAAA;EAlH7B;;;EA6HR,WAAA,CAAY,KAAA,EAAO,MAAA,kBAAwB,SAAA;EAnHxB;;;EA8HnB,KAAA,CACL,IAAA,UACA,OAAA,UACA,OAAA,GAAU,IAAA,CAAK,uBAAA;EAEV,KAAA,CAAM,OAAA,EAAS,uBAAA;EA5HZ;;;EAgJH,GAAA,CACL,MAAA,EAAQ,KAAA,YACR,IAAA,qBACA,OAAA,EAAS,kBAAA,EACT,OAAA,GAAS,YAAA;EAnIJ;;;EAyPA,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAlPN;;;EAyPlD,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAhPvB;;;EAuPjC,IAAA,CAAK,IAAA,qBAAyB,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAvPtD;;;EA8Pd,GAAA,CAAI,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EArPrB;;;EA4PnC,MAAA,CAAO,IAAA,qBAAyB,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EAvOnE;;;EA8OH,KAAA,CAAM,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA9NrD;;;EAqOL,IAAA,CAAK,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA5N9C;;;EAmOX,OAAA,CAAQ,IAAA,UAAc,OAAA,EAAS,kBAAA,EAAoB,OAAA,GAAS,YAAA;EA1N/C;;;EAiOb,KAAA,CAAM,IAAA,UAAc,OAAA,GAAS,YAAA,GAAiB,YAAA;EAtN3B;;;;;;;;;;EAoOnB,eAAA,CACL,IAAA,UACA,QAAA,EAAU,aAAA,EACV,OAAA,GAAS,YAAA;IACP,IAAA,GAAO,cAAA;IACP,MAAA,GAAS,cAAA;IACT,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,cAAA,EAAgB,cAAA;MACvC,UAAA,GAAa,cAAA;IAAA;EAAA;EApMjB;;;EA0SK,KAAA,CAAM,OAAA,EAAS,oBAAA,EAAsB,QAAA,EAAU,mBAAA;EAnL3C;;;EAuOJ,MAAA,CAAO,MAAA,UAAgB,QAAA;EAvOwB;;;;;;;;;;;;EAuP/C,OAAA,CAAQ,OAAA,mBAA0B,QAAA;EAlOlC;;;;;;EA4OM,cAAA,UACX,UAAA,UACA,QAAA,QAAgB,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC3B,OAAA,CAAQ,CAAA;EAxOG;;;;;EAyQP,wBAAA,CAAyB,UAAA;EAlQnB;;;;;;;;EA4RA,0BAAA,IACX,WAAA,EAAa,QAAA,UACb,OAAA,QAAe,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC1B,OAAA,CAAQ,CAAA;EAxRqD;;;EAAA,QAsUxD,gBAAA;EA/T8B;;;EA2Y/B,IAAA,IAAI,KAAA;EApYJ;;;;;;EA8YA,iBAAA,CAAkB,OAAA,GAAS,qBAAA,YAAsC,aAAA;EA9X5D;;;;;;;;EAuZL,UAAA;EAnZe;;;EA0Zf,IAAA,CAAK,MAAA,EAAQ,eAAA;EAzZD;;;;EA6cZ,aAAA,CAAc,MAAA,EAAQ,eAAA;EAvWyB;;;EAif/C,QAAA,CAAS,IAAA,UAAc,MAAA,GAAQ,MAAA;EA7bR;;;EAAA,QA+dtB,WAAA;AAAA;AAAA,cA+EG,MAAA,EAAM,MAAuB"}

package/esm/router/router.mjs

@@ -7,6 +7,7 @@ import { RouteRegistry } from "./route-registry.mjs";
 import { container } from "../container/index.mjs";
 import { buildCorsOptions } from "../http/build-cors-options.mjs";
 import { Response } from "../http/response.mjs";
+import { redactUrlCredentials } from "../http/request-log-snapshot.mjs";
 import { Request } from "../http/request.mjs";
 import { describeRouteForLog } from "./describe-route-for-log.mjs";
 import { logRequestLifecycle } from "./log-request-lifecycle.mjs";
@@ -17,9 +18,8 @@ import { log } from "@warlock.js/logger";
 import { isEmpty } from "@mongez/supportive-is";
 import { ltrim, merge, toCamelCase, trim } from "@mongez/reinforcements";
 import proxy from "@fastify/http-proxy";
-import fastifyStatic from "@fastify/static";
 
-//#region ../core/src/router/router.ts
+//#region ../../packages/core/src/router/router.ts
 /**
 * The pre-handler phases the dev server forwards from a route's `serverOptions`.
 *
@@ -132,6 +132,20 @@ var Router = class Router {
 		return this;
 	}
 	/**
+	* Register every `directory()` with `@fastify/static`. The plugin is
+	* imported only when at least one directory was declared: loading it is not
+	* free (its directory-listing module calls `os.cpus()` at load), and an app
+	* that serves no static folder should not pay for it (WR-027).
+	*/
+	registerStaticDirectories(server) {
+		if (this.staticDirectories.length === 0) return;
+		const fastifyStatic = import("@fastify/static");
+		for (const directoryOptions of this.staticDirectories) server.register(fastifyStatic, {
+			...directoryOptions,
+			decorateReply: false
+		});
+	}
+	/**
 	* Serve file
 	*/
 	file(path, location, cacheTime) {
@@ -564,10 +578,7 @@ var Router = class Router {
 				return output || response.baseResponse;
 			});
 		});
-		for (const directoryOptions of this.staticDirectories) server.register(fastifyStatic, {
-			...directoryOptions,
-			decorateReply: false
-		});
+		this.registerStaticDirectories(server);
 		this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));
 	}
 	/**
@@ -611,7 +622,7 @@ var Router = class Router {
 			} catch (error) {
 				log.error("router", "dev-dispatch", error, {
 					method: fastifyRequest.method,
-					url: fastifyRequest.url
+					url: redactUrlCredentials(fastifyRequest.url)
 				});
 				throw error;
 			}
@@ -629,10 +640,7 @@ var Router = class Router {
 				handler: wildcardHandler
 			});
 		}
-		for (const directoryOptions of this.staticDirectories) server.register(fastifyStatic, {
-			...directoryOptions,
-			decorateReply: false
-		});
+		this.registerStaticDirectories(server);
 		this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));
 	}
 	/**
@@ -681,10 +689,7 @@ var Router = class Router {
 				module: "route",
 				action: describeRouteForLog(route.method, route.path),
 				requestId: request.id,
-				context: {
-					request,
-					response
-				},
+				context: { request: request.toLogSnapshot() },
 				request,
 				statusCode: () => fastifyResponse.statusCode
 			}, () => request.execute());