@warlock.js/core 5.29.0 → 5.31.0

package/esm/http/flush-pending-cookies.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"flush-pending-cookies.mjs","names":[],"sources":["../../../../../../../core/src/http/flush-pending-cookies.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport type { FastifyReply } from \"fastify\";\n\ntype ParkedCookie = { name: string; value: string; opts?: Record<string, unknown> };\n\n/** The installed `@fastify/cookie` version, or undefined when it can't be resolved. */\nfunction installedCookiePluginVersion(): string | undefined {\n  try {\n    const require = createRequire(path.join(process.cwd(), \"noop.js\"));\n\n    return (require(require.resolve(\"@fastify/cookie/package.json\")) as { version?: string })\n      .version;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * `@fastify/cookie` only parks cookies set via `reply.setCookie()` in a map\n * keyed by a private symbol; it serialises them in its own `onSend` hook.\n * Raw-path writers (`raw.writeHead`) bypass `onSend`, so they must call this\n * right before writing headers.\n *\n * Serialises the parked cookies, appends them to the `set-cookie` header\n * (skipping any value already present) and clears the map so a later `onSend`\n * cannot send them twice.\n *\n * Throws when the plugin is registered but its parked-cookie symbol cannot be\n * found: silently doing nothing would drop every cookie on raw paths. Does\n * nothing when the plugin is not registered.\n */\nexport function flushPendingCookies(reply: FastifyReply): void {\n  const parkedSymbol = Object.getOwnPropertySymbols(reply).find(\n    symbol => symbol.description === \"fastify.reply.setCookies\",\n  );\n\n  if (!parkedSymbol) {\n    if (typeof (reply as { setCookie?: unknown }).setCookie !== \"function\") return;\n\n    const version = installedCookiePluginVersion();\n\n    throw new Error(\n      `@fastify/cookie's internal cookie storage changed: reply.setCookie exists but the \"fastify.reply.setCookies\" symbol was not found${\n        version ? ` (installed @fastify/cookie@${version})` : \"\"\n      }. Cookies set before a raw-path response would be lost; update flushPendingCookies for this version.`,\n    );\n  }\n\n  const parked = (reply as unknown as Record<symbol, Map<string, ParkedCookie> | null>)[\n    parkedSymbol\n  ];\n\n  if (!parked || parked.size === 0) return;\n\n  const serializeCookie = (\n    reply.server as unknown as {\n      serializeCookie?: (name: string, value: string, opts?: unknown) => string;\n    }\n  ).serializeCookie;\n\n  if (!serializeCookie) return;\n\n  const existing = reply.getHeader(\"set-cookie\");\n  const cookies: string[] =\n    existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [String(existing)];\n\n  for (const cookie of parked.values()) {\n    const serialized = serializeCookie(cookie.name, cookie.value, cookie.opts);\n\n    if (!cookies.includes(serialized)) {\n      cookies.push(serialized);\n    }\n  }\n\n  reply.removeHeader(\"set-cookie\");\n  reply.header(\"set-cookie\", cookies);\n  parked.clear();\n}\n"],"mappings":";;;;;AAOA,SAAS,+BAAmD;CAC1D,IAAI;EACF,MAAM,UAAU,cAAc,KAAK,KAAK,QAAQ,IAAI,GAAG,SAAS,CAAC;EAEjE,OAAQ,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC,CAAC,CAC7D;CACL,QAAQ;EACN;CACF;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,oBAAoB,OAA2B;CAC7D,MAAM,eAAe,OAAO,sBAAsB,KAAK,CAAC,CAAC,MACvD,WAAU,OAAO,gBAAgB,0BACnC;CAEA,IAAI,CAAC,cAAc;EACjB,IAAI,OAAQ,MAAkC,cAAc,YAAY;EAExE,MAAM,UAAU,6BAA6B;EAE7C,MAAM,IAAI,MACR,oIACE,UAAU,+BAA+B,QAAQ,KAAK,GACvD,qGACH;CACF;CAEA,MAAM,SAAU,MACd;CAGF,IAAI,CAAC,UAAU,OAAO,SAAS,GAAG;CAElC,MAAM,kBACJ,MAAM,OAGN;CAEF,IAAI,CAAC,iBAAiB;CAEtB,MAAM,WAAW,MAAM,UAAU,YAAY;CAC7C,MAAM,UACJ,aAAa,SAAY,CAAC,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,CAAC;CAE3F,KAAK,MAAM,UAAU,OAAO,OAAO,GAAG;EACpC,MAAM,aAAa,gBAAgB,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI;EAEzE,IAAI,CAAC,QAAQ,SAAS,UAAU,GAC9B,QAAQ,KAAK,UAAU;CAE3B;CAEA,MAAM,aAAa,YAAY;CAC/B,MAAM,OAAO,cAAc,OAAO;CAClC,OAAO,MAAM;AACf"}
+{"version":3,"file":"flush-pending-cookies.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/flush-pending-cookies.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport type { FastifyReply } from \"fastify\";\n\ntype ParkedCookie = { name: string; value: string; opts?: Record<string, unknown> };\n\n/** The installed `@fastify/cookie` version, or undefined when it can't be resolved. */\nfunction installedCookiePluginVersion(): string | undefined {\n  try {\n    const require = createRequire(path.join(process.cwd(), \"noop.js\"));\n\n    return (require(require.resolve(\"@fastify/cookie/package.json\")) as { version?: string })\n      .version;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * `@fastify/cookie` only parks cookies set via `reply.setCookie()` in a map\n * keyed by a private symbol; it serialises them in its own `onSend` hook.\n * Raw-path writers (`raw.writeHead`) bypass `onSend`, so they must call this\n * right before writing headers.\n *\n * Serialises the parked cookies, appends them to the `set-cookie` header\n * (skipping any value already present) and clears the map so a later `onSend`\n * cannot send them twice.\n *\n * Throws when the plugin is registered but its parked-cookie symbol cannot be\n * found: silently doing nothing would drop every cookie on raw paths. Does\n * nothing when the plugin is not registered.\n */\nexport function flushPendingCookies(reply: FastifyReply): void {\n  const parkedSymbol = Object.getOwnPropertySymbols(reply).find(\n    (symbol) => symbol.description === \"fastify.reply.setCookies\",\n  );\n\n  if (!parkedSymbol) {\n    if (typeof (reply as { setCookie?: unknown }).setCookie !== \"function\") return;\n\n    const version = installedCookiePluginVersion();\n\n    throw new Error(\n      `@fastify/cookie's internal cookie storage changed: reply.setCookie exists but the \"fastify.reply.setCookies\" symbol was not found${\n        version ? ` (installed @fastify/cookie@${version})` : \"\"\n      }. Cookies set before a raw-path response would be lost; update flushPendingCookies for this version.`,\n    );\n  }\n\n  const parked = (reply as unknown as Record<symbol, Map<string, ParkedCookie> | null>)[\n    parkedSymbol\n  ];\n\n  if (!parked || parked.size === 0) return;\n\n  const serializeCookie = (\n    reply.server as unknown as {\n      serializeCookie?: (name: string, value: string, opts?: unknown) => string;\n    }\n  ).serializeCookie;\n\n  if (!serializeCookie) return;\n\n  const existing = reply.getHeader(\"set-cookie\");\n  const cookies: string[] =\n    existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [String(existing)];\n\n  for (const cookie of parked.values()) {\n    const serialized = serializeCookie(cookie.name, cookie.value, cookie.opts);\n\n    if (!cookies.includes(serialized)) {\n      cookies.push(serialized);\n    }\n  }\n\n  reply.removeHeader(\"set-cookie\");\n  reply.header(\"set-cookie\", cookies);\n  parked.clear();\n}\n"],"mappings":";;;;;AAOA,SAAS,+BAAmD;CAC1D,IAAI;EACF,MAAM,UAAU,cAAc,KAAK,KAAK,QAAQ,IAAI,GAAG,SAAS,CAAC;EAEjE,OAAQ,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC,CAAC,CAC7D;CACL,QAAQ;EACN;CACF;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,oBAAoB,OAA2B;CAC7D,MAAM,eAAe,OAAO,sBAAsB,KAAK,CAAC,CAAC,MACtD,WAAW,OAAO,gBAAgB,0BACrC;CAEA,IAAI,CAAC,cAAc;EACjB,IAAI,OAAQ,MAAkC,cAAc,YAAY;EAExE,MAAM,UAAU,6BAA6B;EAE7C,MAAM,IAAI,MACR,oIACE,UAAU,+BAA+B,QAAQ,KAAK,GACvD,qGACH;CACF;CAEA,MAAM,SAAU,MACd;CAGF,IAAI,CAAC,UAAU,OAAO,SAAS,GAAG;CAElC,MAAM,kBACJ,MAAM,OAGN;CAEF,IAAI,CAAC,iBAAiB;CAEtB,MAAM,WAAW,MAAM,UAAU,YAAY;CAC7C,MAAM,UACJ,aAAa,SAAY,CAAC,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,CAAC;CAE3F,KAAK,MAAM,UAAU,OAAO,OAAO,GAAG;EACpC,MAAM,aAAa,gBAAgB,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI;EAEzE,IAAI,CAAC,QAAQ,SAAS,UAAU,GAC9B,QAAQ,KAAK,UAAU;CAE3B;CAEA,MAAM,aAAa,YAAY;CAC/B,MAAM,OAAO,cAAc,OAAO;CAClC,OAAO,MAAM;AACf"}

package/esm/http/health.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/health.d.ts
+//#region ../../packages/core/src/http/health.d.ts
 /**
  * A readiness probe registered via `health.addCheck(...)`. Returns whether its
  * dependency is currently usable; throwing is treated as a failed check.

package/esm/http/health.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.mts","names":[],"sources":["../../../../../../../core/src/http/health.ts"],"mappings":";;AAMA;;;KAAY,WAAA,mBAA8B,OAAO;AAAA;AAMjD;;;AANiD,KAMrC,YAAA;EACV,MAAA;EACA,MAAA,GAAS,MAAM;AAAA;;AAAA;AACf;;;;;cASI,cAAA;EAAA,iBACa,MAAA;EA6BgB;;;EAxB1B,QAAA,CAAS,IAAA,UAAc,KAAA,EAAO,WAAA;EAArB;;;EAOT,WAAA,CAAY,IAAA;EAAA;;;;EAQZ,QAAA,IAAY,YAAA;EASe;;;;;EAArB,SAAA,IAAa,OAAA,CAAQ,YAAA;EA2CZ;AAYxB;;;;AAA0C;;;;;;;;EAtBjC,wBAAA,CAAyB,aAAA,gBAA6B,IAAA;;;;;;;UAU/C,QAAA;AAAA;;;;cAYH,MAAA,EAAM,cAAuB"}
+{"version":3,"file":"health.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/health.ts"],"mappings":";;AAMA;;;KAAY,WAAA,mBAA8B,OAAO;AAAA;AAMjD;;;AANiD,KAMrC,YAAA;EACV,MAAA;EACA,MAAA,GAAS,MAAM;AAAA;;AAAA;AACf;;;;;cASI,cAAA;EAAA,iBACa,MAAA;EA6BgB;;;EAxB1B,QAAA,CAAS,IAAA,UAAc,KAAA,EAAO,WAAA;EAArB;;;EAOT,WAAA,CAAY,IAAA;EAAA;;;;EAQZ,QAAA,IAAY,YAAA;EASe;;;;;EAArB,SAAA,IAAa,OAAA,CAAQ,YAAA;EA2CZ;AAYxB;;;;AAA0C;;;;;;;;EAtBjC,wBAAA,CAAyB,aAAA,gBAA6B,IAAA;;;;;;;UAU/C,QAAA;AAAA;;;;cAYH,MAAA,EAAM,cAAuB"}

package/esm/http/health.mjs

@@ -1,7 +1,7 @@
 import { Application } from "../application/application.mjs";
 import "../application/index.mjs";
 
-//#region ../core/src/http/health.ts
+//#region ../../packages/core/src/http/health.ts
 /**
 * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)
 * endpoints. Liveness answers "is the process up?"; readiness answers "should

package/esm/http/health.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"health.mjs","names":[],"sources":["../../../../../../../core/src/http/health.ts"],"sourcesContent":["import { Application } from \"../application\";\n\n/**\n * A readiness probe registered via `health.addCheck(...)`. Returns whether its\n * dependency is currently usable; throwing is treated as a failed check.\n */\nexport type HealthCheck = () => boolean | Promise<boolean>;\n\n/**\n * Result of a liveness/readiness probe. `checks` is present on readiness only,\n * mapping each registered check name to its pass/fail.\n */\nexport type HealthStatus = {\n  status: \"ok\" | \"error\";\n  checks?: Record<string, boolean>;\n};\n\n/**\n * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)\n * endpoints. Liveness answers \"is the process up?\"; readiness answers \"should\n * traffic be routed here?\" — booted, not shutting down, and every registered\n * dependency check passing. Connectors and app code register checks; the HTTP\n * connector exposes the endpoints.\n */\nclass HealthRegistry {\n  private readonly checks = new Map<string, HealthCheck>();\n\n  /**\n   * Register (or replace) a readiness check by name — e.g. a database ping.\n   */\n  public addCheck(name: string, check: HealthCheck): void {\n    this.checks.set(name, check);\n  }\n\n  /**\n   * Remove a previously-registered readiness check.\n   */\n  public removeCheck(name: string): void {\n    this.checks.delete(name);\n  }\n\n  /**\n   * Liveness — the process is up and not tearing down. Orchestrators use it to\n   * decide whether to RESTART the instance, so it ignores dependency checks.\n   */\n  public liveness(): HealthStatus {\n    return { status: Application.isShuttingDown ? \"error\" : \"ok\" };\n  }\n\n  /**\n   * Readiness — should this instance receive traffic? Requires a finished boot,\n   * no in-progress shutdown, and every registered check passing. Load balancers\n   * use it to decide whether to ROUTE to the instance.\n   */\n  public async readiness(): Promise<HealthStatus> {\n    if (!Application.isBooted || Application.isShuttingDown) {\n      return { status: \"error\" };\n    }\n\n    const checks: Record<string, boolean> = {};\n    let allPassed = true;\n\n    for (const [name, check] of this.checks) {\n      const passed = await this.runCheck(check);\n      checks[name] = passed;\n\n      if (!passed) {\n        allPassed = false;\n      }\n    }\n\n    return { status: allPassed ? \"ok\" : \"error\", checks };\n  }\n\n  /**\n   * Register a readiness check asserting the app has at least one route\n   * registered. A booted HTTP app that ends up with zero routes almost always\n   * means a route module failed to register silently, so the instance should\n   * report not-ready (503) rather than 404 every request.\n   *\n   * The route count is passed in as a getter so this registry stays decoupled\n   * from the router (no import cycle). The HTTP connector wires this in after\n   * scanning routes; apps with no HTTP surface simply never register it.\n   *\n   * @param getRouteCount Returns the number of currently-registered routes.\n   * @param name Override the check name (defaults to `\"routes\"`).\n   */\n  public addRoutesRegisteredCheck(getRouteCount: () => number, name = \"routes\"): void {\n    this.addCheck(name, () => getRouteCount() > 0);\n  }\n\n  /**\n   * Run one check. A thrown error counts as a failed check rather than crashing\n   * the probe. The failure is surfaced in the readiness `checks` map and the\n   * 503 status — not logged, since probes poll frequently and a failed check is\n   * a normal signal, not an error event.\n   */\n  private async runCheck(check: HealthCheck): Promise<boolean> {\n    try {\n      return await check();\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * The application's health registry singleton.\n */\nexport const health = new HealthRegistry();\n"],"mappings":";;;;;;;;;;;AAwBA,IAAM,iBAAN,MAAqB;;gCACO,IAAI,IAAyB;;;;;CAKvD,AAAO,SAAS,MAAc,OAA0B;EACtD,KAAK,OAAO,IAAI,MAAM,KAAK;CAC7B;;;;CAKA,AAAO,YAAY,MAAoB;EACrC,KAAK,OAAO,OAAO,IAAI;CACzB;;;;;CAMA,AAAO,WAAyB;EAC9B,OAAO,EAAE,QAAQ,YAAY,iBAAiB,UAAU,KAAK;CAC/D;;;;;;CAOA,MAAa,YAAmC;EAC9C,IAAI,CAAC,YAAY,YAAY,YAAY,gBACvC,OAAO,EAAE,QAAQ,QAAQ;EAG3B,MAAM,SAAkC,CAAC;EACzC,IAAI,YAAY;EAEhB,KAAK,MAAM,CAAC,MAAM,UAAU,KAAK,QAAQ;GACvC,MAAM,SAAS,MAAM,KAAK,SAAS,KAAK;GACxC,OAAO,QAAQ;GAEf,IAAI,CAAC,QACH,YAAY;EAEhB;EAEA,OAAO;GAAE,QAAQ,YAAY,OAAO;GAAS;EAAO;CACtD;;;;;;;;;;;;;;CAeA,AAAO,yBAAyB,eAA6B,OAAO,UAAgB;EAClF,KAAK,SAAS,YAAY,cAAc,IAAI,CAAC;CAC/C;;;;;;;CAQA,MAAc,SAAS,OAAsC;EAC3D,IAAI;GACF,OAAO,MAAM,MAAM;EACrB,QAAQ;GACN,OAAO;EACT;CACF;AACF;;;;AAKA,MAAa,SAAS,IAAI,eAAe"}
+{"version":3,"file":"health.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/health.ts"],"sourcesContent":["import { Application } from \"../application\";\n\n/**\n * A readiness probe registered via `health.addCheck(...)`. Returns whether its\n * dependency is currently usable; throwing is treated as a failed check.\n */\nexport type HealthCheck = () => boolean | Promise<boolean>;\n\n/**\n * Result of a liveness/readiness probe. `checks` is present on readiness only,\n * mapping each registered check name to its pass/fail.\n */\nexport type HealthStatus = {\n  status: \"ok\" | \"error\";\n  checks?: Record<string, boolean>;\n};\n\n/**\n * Registry behind the built-in `/health` (liveness) and `/ready` (readiness)\n * endpoints. Liveness answers \"is the process up?\"; readiness answers \"should\n * traffic be routed here?\" — booted, not shutting down, and every registered\n * dependency check passing. Connectors and app code register checks; the HTTP\n * connector exposes the endpoints.\n */\nclass HealthRegistry {\n  private readonly checks = new Map<string, HealthCheck>();\n\n  /**\n   * Register (or replace) a readiness check by name — e.g. a database ping.\n   */\n  public addCheck(name: string, check: HealthCheck): void {\n    this.checks.set(name, check);\n  }\n\n  /**\n   * Remove a previously-registered readiness check.\n   */\n  public removeCheck(name: string): void {\n    this.checks.delete(name);\n  }\n\n  /**\n   * Liveness — the process is up and not tearing down. Orchestrators use it to\n   * decide whether to RESTART the instance, so it ignores dependency checks.\n   */\n  public liveness(): HealthStatus {\n    return { status: Application.isShuttingDown ? \"error\" : \"ok\" };\n  }\n\n  /**\n   * Readiness — should this instance receive traffic? Requires a finished boot,\n   * no in-progress shutdown, and every registered check passing. Load balancers\n   * use it to decide whether to ROUTE to the instance.\n   */\n  public async readiness(): Promise<HealthStatus> {\n    if (!Application.isBooted || Application.isShuttingDown) {\n      return { status: \"error\" };\n    }\n\n    const checks: Record<string, boolean> = {};\n    let allPassed = true;\n\n    for (const [name, check] of this.checks) {\n      const passed = await this.runCheck(check);\n      checks[name] = passed;\n\n      if (!passed) {\n        allPassed = false;\n      }\n    }\n\n    return { status: allPassed ? \"ok\" : \"error\", checks };\n  }\n\n  /**\n   * Register a readiness check asserting the app has at least one route\n   * registered. A booted HTTP app that ends up with zero routes almost always\n   * means a route module failed to register silently, so the instance should\n   * report not-ready (503) rather than 404 every request.\n   *\n   * The route count is passed in as a getter so this registry stays decoupled\n   * from the router (no import cycle). The HTTP connector wires this in after\n   * scanning routes; apps with no HTTP surface simply never register it.\n   *\n   * @param getRouteCount Returns the number of currently-registered routes.\n   * @param name Override the check name (defaults to `\"routes\"`).\n   */\n  public addRoutesRegisteredCheck(getRouteCount: () => number, name = \"routes\"): void {\n    this.addCheck(name, () => getRouteCount() > 0);\n  }\n\n  /**\n   * Run one check. A thrown error counts as a failed check rather than crashing\n   * the probe. The failure is surfaced in the readiness `checks` map and the\n   * 503 status — not logged, since probes poll frequently and a failed check is\n   * a normal signal, not an error event.\n   */\n  private async runCheck(check: HealthCheck): Promise<boolean> {\n    try {\n      return await check();\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * The application's health registry singleton.\n */\nexport const health = new HealthRegistry();\n"],"mappings":";;;;;;;;;;;AAwBA,IAAM,iBAAN,MAAqB;;gCACO,IAAI,IAAyB;;;;;CAKvD,AAAO,SAAS,MAAc,OAA0B;EACtD,KAAK,OAAO,IAAI,MAAM,KAAK;CAC7B;;;;CAKA,AAAO,YAAY,MAAoB;EACrC,KAAK,OAAO,OAAO,IAAI;CACzB;;;;;CAMA,AAAO,WAAyB;EAC9B,OAAO,EAAE,QAAQ,YAAY,iBAAiB,UAAU,KAAK;CAC/D;;;;;;CAOA,MAAa,YAAmC;EAC9C,IAAI,CAAC,YAAY,YAAY,YAAY,gBACvC,OAAO,EAAE,QAAQ,QAAQ;EAG3B,MAAM,SAAkC,CAAC;EACzC,IAAI,YAAY;EAEhB,KAAK,MAAM,CAAC,MAAM,UAAU,KAAK,QAAQ;GACvC,MAAM,SAAS,MAAM,KAAK,SAAS,KAAK;GACxC,OAAO,QAAQ;GAEf,IAAI,CAAC,QACH,YAAY;EAEhB;EAEA,OAAO;GAAE,QAAQ,YAAY,OAAO;GAAS;EAAO;CACtD;;;;;;;;;;;;;;CAeA,AAAO,yBAAyB,eAA6B,OAAO,UAAgB;EAClF,KAAK,SAAS,YAAY,cAAc,IAAI,CAAC;CAC/C;;;;;;;CAQA,MAAc,SAAS,OAAsC;EAC3D,IAAI;GACF,OAAO,MAAM,MAAM;EACrB,QAAQ;GACN,OAAO;EACT;CACF;AACF;;;;AAKA,MAAa,SAAS,IAAI,eAAe"}

package/esm/http/index.d.mts

@@ -1,12 +1,16 @@
+import { BadRequestError, ConflictError, CookieJarUnavailableError, ForbiddenError, HttpError, NotAcceptableError, NotAllowedError, ResourceNotFoundError, ServerError, UnAuthorizedError } from "./errors/errors.mjs";
+import { ConditionalRequestInput, ConditionalRequestOutcome, EntityTag, evaluateConditionalRequest, matchesIfMatch, matchesIfNoneMatch, parseEntityTag, parseEntityTagList, strongEntityTagMatch, weakEntityTagMatch } from "./conditional-request.mjs";
+import { HttpLoggingConfig, PrivateRequestLoggingRule, RequestLogSnapshot, RequestLogSource, RequestLoggingOptions, URL_CREDENTIAL_PARAMS, buildRequestLogSnapshot, redactQueryCredentials, redactUrlCredentials, resolveRequestLoggingOptions } from "./request-log-snapshot.mjs";
 import { PipeableReactStream, StreamReactResponseOptions, streamReactResponse } from "./stream-react-response.mjs";
 import { XMLable } from "./xmlable.mjs";
-import { CookieOptions, Response, ResponseStatus, SendBufferOptions, SendFileOptions } from "./response.mjs";
+import { CookieOptions, Response, ResponseStatus, SendBufferOptions, SendFileOptions, toSingleLineSseField } from "./response.mjs";
 import { FileNamingStrategy, ImageTransformCallback, ImageTransformConfig, ImageVariantDefinition, ImageVariantFit, ImageVariantOutputFormat, PrefixConfig, PrefixOptions, SaveAsOptions, SaveOptions, UploadedFileImageOptions, UploadsConfigurations, UploadsImagesConfigurations } from "./uploads-types.mjs";
 import { FileValidationOptions, UploadedFile, UploadedFileJson } from "./uploaded-file.mjs";
 import { Request, RequestTranslator } from "./request.mjs";
 import { CspConfig, DEFAULT_CSP_DIRECTIVES, InvalidCspDirectiveError, applyCspHeader, buildCspHeaderValue, mergeCspDirectives, resolveCspConfig, serializeCspDirectives, validateCspConfigAtBoot, validateCspDirectives } from "./csp.mjs";
+import { HttpErrorMapper, HttpErrorMapping } from "./error-mapper.mjs";
 import { HttpTracingConfig, TracingContext, TracingHooks, TracingPhaseInfo, TracingRequestEndInfo } from "./tracing/tracing.type.mjs";
-import { DecodedAccessToken, HttpConfigurations, PartialMiddleware, RequestEvent, RequestLocals, ResponseEvent, ResponseSSEController, ResponseStreamController, ReturnedResponse } from "./types.mjs";
+import { DecodedAccessToken, HttpConfigurations, HttpServerOptions, PartialMiddleware, RequestEvent, RequestLocals, ResponseEvent, ResponseSSEController, ResponseSSEMessageOptions, ResponseSSEOptions, ResponseStreamController, ResponseStreamOptions, ReturnedResponse } from "./types.mjs";
 import { defaultHttpConfigurations, httpConfig } from "./config.mjs";
 import { createHttpApplication, stopHttpApplication } from "./createHttpApplication.mjs";
 import { requiresDefaultCsrfGuard, runDefaultCsrfGuard } from "./csrf-default-guard.mjs";
@@ -20,8 +24,9 @@ import { UPLOADS_DEFAULTS, uploadsConfig } from "./uploads-config.mjs";
 import { DetectedImageFormat, GeneratedImageDescriptor, GeneratedImageVariant, ResolvedImageVariantsConfig, UploadedFileQuery, VariantOutputFormat, VariantSourceFormat } from "./uploads/image-variant-types.mjs";
 import { GenerateImageVariantsOptions, generateImageVariants } from "./uploads/generate-image-variants.mjs";
 import { ImageVariantsConfigError } from "./uploads/image-variants-config-error.mjs";
-import { uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
-import { BadRequestError, ConflictError, CookieJarUnavailableError, ForbiddenError, HttpError, NotAcceptableError, NotAllowedError, ResourceNotFoundError, ServerError, UnAuthorizedError } from "./errors/errors.mjs";
+import { PurgeImageVariantsOptions, purgeImageVariants } from "./uploads/purge-image-variants.mjs";
+import { ResolveImageVariantInput, ResolvedImageVariant, resolveImageVariant } from "./uploads/resolve-image-variant.mjs";
+import { UploadedFileControllerOptions, createUploadedFileController, uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
 import { CacheMiddlewareOptions } from "./middleware/cache-response-middleware.mjs";
 import { ConcurrencyLimitOptions } from "./middleware/concurrency-limit.middleware.mjs";
 import { IdempotencyOptions } from "./middleware/idempotency.middleware.mjs";
@@ -33,12 +38,14 @@ import { createRequestStore, t } from "./middleware/inject-request-context.mjs";
 import { anyMatch, ipMatches } from "./middleware/utils/cidr-match.mjs";
 import { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from "./middleware/utils/idempotency-key.mjs";
 import { parseSize } from "./middleware/utils/parse-size.mjs";
-import { ClosableServer, FastifyInstance, closeServerWithTimeout, getHttpServer, startHttpServer } from "./server.mjs";
-import { registerHttpPlugins } from "./plugins.mjs";
+import { ClosableServer, FastifyInstance, beginHttpDrain, closeServerWithTimeout, getHttpServer, startHttpServer, trackConnectionsForDrain } from "./server.mjs";
+import { registerHttpPlugins, resolvePublicRoot } from "./plugins.mjs";
 import { assertConfiguredHttpPortIsFree, preflightConfiguredHttpPort, remedyLines, shouldPreflightHttpPort } from "./boot-port-preflight.mjs";
 import { PortInUseError, assertPortIsAvailable, isPortAvailable } from "./port-preflight.mjs";
 import { HttpReadyReport, getHttpReadyReport, resetHttpReadyReport, setHttpReadyReport } from "./ready-report.mjs";
 import { HttpServerRebuiltListener, notifyHttpServerRebuilt, onHttpServerRebuilt } from "./server-rebuilt.mjs";
+import { escapeHeaderValue } from "./escape-header-value.mjs";
+import { SafeRedirectOptions, isSafeRedirect, safeRedirect } from "./safe-redirect.mjs";
 import { deriveTraceId, parseTraceparentTraceId } from "./tracing/trace-id.mjs";
 import { TracingContextSource, buildTracingContext, dispatchPhase, dispatchRequestEnd, dispatchRequestStart, isTracingEnabled, registerTracingHooks, resetTracingConfigForTests, resolveTracingConfig } from "./tracing/tracing-dispatcher.mjs";
 import { RequestContextStore, requestContext, useCurrentUser, useRequest, useRequestStore } from "./context/request-context.mjs";

package/esm/http/index.mjs

@@ -8,22 +8,26 @@ import { deriveTraceId, parseTraceparentTraceId } from "./tracing/trace-id.mjs";
 import { buildTracingContext, dispatchPhase, dispatchRequestEnd, dispatchRequestStart, isTracingEnabled, registerTracingHooks, resetTracingConfigForTests, resolveTracingConfig } from "./tracing/tracing-dispatcher.mjs";
 import "./tracing/index.mjs";
 import { createRequestStore, t } from "./middleware/inject-request-context.mjs";
+import { evaluateConditionalRequest, matchesIfMatch, matchesIfNoneMatch, parseEntityTag, parseEntityTagList, strongEntityTagMatch, weakEntityTagMatch } from "./conditional-request.mjs";
 import { defaultHttpConfigurations, httpConfig } from "./config.mjs";
-import { streamReactResponse } from "./stream-react-response.mjs";
-import { Response, ResponseStatus } from "./response.mjs";
+import { ImageVariantsConfigError } from "./uploads/image-variants-config-error.mjs";
 import { UPLOADS_DEFAULTS, uploadsConfig } from "./uploads-config.mjs";
+import { streamReactResponse } from "./stream-react-response.mjs";
+import { Response, ResponseStatus, toSingleLineSseField } from "./response.mjs";
 import { UploadedFile } from "./uploaded-file.mjs";
+import { URL_CREDENTIAL_PARAMS, buildRequestLogSnapshot, redactQueryCredentials, redactUrlCredentials, resolveRequestLoggingOptions } from "./request-log-snapshot.mjs";
 import { Request } from "./request.mjs";
-import { registerHttpPlugins } from "./plugins.mjs";
-import { closeServerWithTimeout, getHttpServer, startHttpServer } from "./server.mjs";
+import { registerHttpPlugins, resolvePublicRoot } from "./plugins.mjs";
+import { beginHttpDrain, closeServerWithTimeout, getHttpServer, startHttpServer, trackConnectionsForDrain } from "./server.mjs";
 import { createHttpApplication, stopHttpApplication } from "./createHttpApplication.mjs";
 import { RequestLog } from "./database/RequestLog.mjs";
 import { logResponse, wrapResponseInDataKey } from "./events.mjs";
 import { health } from "./health.mjs";
 import { RequestController } from "./request-controller.mjs";
-import { ImageVariantsConfigError } from "./uploads/image-variants-config-error.mjs";
 import { generateImageVariants } from "./uploads/generate-image-variants.mjs";
-import { uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
+import { purgeImageVariants } from "./uploads/purge-image-variants.mjs";
+import { resolveImageVariant } from "./uploads/resolve-image-variant.mjs";
+import { createUploadedFileController, uploadedFileController } from "./uploads/uploaded-file.controller.mjs";
 import "./uploads/index.mjs";
 import { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from "./middleware/utils/idempotency-key.mjs";
 import { anyMatch, ipMatches } from "./middleware/utils/cidr-match.mjs";
@@ -34,6 +38,8 @@ import { PortInUseError, assertPortIsAvailable, isPortAvailable } from "./port-p
 import { assertConfiguredHttpPortIsFree, preflightConfiguredHttpPort, remedyLines, shouldPreflightHttpPort } from "./boot-port-preflight.mjs";
 import { getHttpReadyReport, resetHttpReadyReport, setHttpReadyReport } from "./ready-report.mjs";
 import { notifyHttpServerRebuilt, onHttpServerRebuilt } from "./server-rebuilt.mjs";
+import { escapeHeaderValue } from "./escape-header-value.mjs";
+import { isSafeRedirect, safeRedirect } from "./safe-redirect.mjs";
 import { requestMemo } from "./context/request-memo.mjs";
 
 export {  };

package/esm/http/lazy-static.mjs

@@ -0,0 +1,194 @@
+import path from "node:path";
+import { statSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+//#region ../../packages/core/src/http/lazy-static.ts
+function optionError(field, message, valueError = false) {
+	return Object.assign(valueError ? /* @__PURE__ */ new TypeError(`"${field}" option ${message}`) : /* @__PURE__ */ new Error(`"${field}" option ${message}`), {
+		code: valueError ? "FST_STATIC_INVALID_OPTION_VALUE" : "FST_STATIC_INVALID_OPTION",
+		statusCode: 500
+	});
+}
+/** Validate without importing the plugin's directory-listing module. */
+function staticOptions(server, options) {
+	const root = options.root;
+	const normalize = (entry) => entry instanceof URL && entry.protocol === "file:" ? fileURLToPath(entry) : entry;
+	const normalized = Array.isArray(root) ? root.map(normalize) : root === void 0 ? void 0 : normalize(root);
+	if (options.serve !== false || normalized !== void 0) {
+		if (normalized === void 0) throw optionError("root", "is required");
+		if (Array.isArray(normalized) && normalized.length === 0) throw optionError("root", "array requires one or more paths");
+		if (Array.isArray(normalized) && new Set(normalized).size !== normalized.length) throw optionError("root", "array contains duplicate paths");
+		for (const entry of Array.isArray(normalized) ? normalized : [normalized]) {
+			if (typeof entry !== "string") throw optionError("root", "must be a string", true);
+			if (!path.isAbsolute(entry)) throw optionError("root", "must be an absolute path");
+			try {
+				if (!statSync(entry).isDirectory()) throw optionError("root", "must be a directory");
+			} catch (error) {
+				if (error.code !== "ENOENT") throw error;
+				if (!options.suppressWarning) server.log.warn(`"root" path "${entry}" must exist`);
+			}
+		}
+	}
+	if (options.setHeaders !== void 0 && typeof options.setHeaders !== "function") throw optionError("setHeaders", "must be a function", true);
+	if (options.serve !== false && options.wildcard && typeof options.wildcard !== "boolean") throw optionError("wildcard", "must be a boolean", true);
+	const list = options.list;
+	if (list) {
+		if (Array.isArray(normalized)) throw Object.assign(/* @__PURE__ */ new TypeError("multi-root with list option is not supported"), {
+			code: "FST_STATIC_MULTIROOT_LIST_CONFLICT",
+			statusCode: 500
+		});
+		if (typeof list === "object") {
+			if (list.format && list.format !== "json" && list.format !== "html") throw optionError("list.format", "must be json or html", true);
+			if (list.names && !Array.isArray(list.names)) throw optionError("list.names", "must be an array", true);
+			if (list.jsonFormat != null && list.jsonFormat !== "names" && list.jsonFormat !== "extended") throw optionError("list.jsonFormat", "must be names or extended", true);
+			if (list.format === "html" && typeof list.render !== "function") throw optionError("list.render", "must be a function and is required with html format", true);
+		}
+	}
+	return {
+		...options,
+		root: normalized
+	};
+}
+/** Mirror the plugin's boot-time route snapshot for wildcard:false. */
+async function fileRoutes(options, prefix) {
+	const { glob } = await import("glob");
+	const roots = Array.isArray(options.root) ? options.root : [options.root];
+	const routes = /* @__PURE__ */ new Map();
+	const indexes = new Set(options.index === void 0 ? ["index.html"] : options.index === false ? [] : [options.index].flat());
+	const indexDirectories = /* @__PURE__ */ new Map();
+	for (const root of roots) {
+		if (typeof root !== "string") continue;
+		const rootPath = root.split(path.win32.sep).join(path.posix.sep).replace(/\/?$/, "/");
+		const files = await glob("**/**", {
+			cwd: rootPath,
+			absolute: false,
+			follow: true,
+			nodir: true,
+			dot: options.serveDotFiles,
+			ignore: options.globIgnore
+		});
+		for (const fileName of files) {
+			const file = fileName.split(path.win32.sep).join(path.posix.sep);
+			const url = prefix + file;
+			if (routes.has(url)) continue;
+			routes.set(url, {
+				url,
+				file: `/${file}`,
+				rootPath
+			});
+			const key = path.posix.basename(url);
+			if (indexes.has(key) && !indexDirectories.has(key)) indexDirectories.set(path.posix.dirname(url), rootPath);
+		}
+	}
+	for (const [directory, rootPath] of indexDirectories) {
+		const url = directory + (directory.endsWith("/") ? "" : "/");
+		const file = "/" + url.replace(prefix, "");
+		routes.set(url, {
+			url,
+			file,
+			rootPath
+		});
+		if (options.redirect === true) routes.set(url.replace(/\/$/, ""), {
+			url: url.replace(/\/$/, ""),
+			file: file.replace(/\/$/, ""),
+			rootPath
+		});
+	}
+	return [...routes.values()];
+}
+/**
+* Queue public routes after earlier plugins, and capture upstream handlers on the
+* first file request. Only public Fastify methods are replaced on the facade;
+* the listening application's route/decorator table never changes after ready.
+*/
+function registerLazyStatic(server, input, mount = {}) {
+	const options = staticOptions(server, input);
+	server.register(Object.assign(async (instance) => prepareStatic(instance, options, mount), { [Symbol.for("skip-override")]: true }));
+}
+async function prepareStatic(server, options, mount) {
+	const originalPrefix = options.prefix ?? "/";
+	const prefix = options.prefixAvoidTrailingSlash || originalPrefix.endsWith("/") ? originalPrefix : `${originalPrefix}/`;
+	const handlers = /* @__PURE__ */ new Map();
+	const decorators = /* @__PURE__ */ new Map();
+	let initialized;
+	function initialize() {
+		return initialized ??= (async () => {
+			const facade = Object.create(server);
+			const capture = (route) => {
+				const url = route.url ?? route.path;
+				if (!url) throw new Error("Static plugin declared a route without a path.");
+				for (const method of [route.method].flat()) handlers.set(`${method} ${url}`, route.handler);
+				return facade;
+			};
+			Object.defineProperties(facade, {
+				route: { value: capture },
+				get: { value: (url, route, handler) => capture({
+					...route,
+					url,
+					method: ["GET", "HEAD"],
+					handler
+				}) },
+				decorateReply: { value: (name, handler) => {
+					decorators.set(name, handler);
+					return facade;
+				} }
+			});
+			const { default: staticPlugin } = await import("@fastify/static");
+			await staticPlugin(facade, {
+				...options,
+				decorateReply: true,
+				suppressWarning: true
+			});
+		})();
+	}
+	if (options.decorateReply !== false) for (const name of ["sendFile", "download"]) server.decorateReply(name, function(...args) {
+		initialize().then(() => {
+			const decorator = decorators.get(name);
+			if (!decorator) throw new Error(`Static plugin did not provide ${name}.`);
+			decorator.apply(this, args);
+		}).catch((error) => this.send(error));
+		return this;
+	});
+	if (options.serve === false) return;
+	const routes = options.wildcard === false ? await fileRoutes(options, prefix) : [{ url: prefix + "*" }];
+	if (options.wildcard !== false && options.redirect === true && prefix !== originalPrefix) routes.push({ url: originalPrefix });
+	const schema = { hide: options.schemaHide ?? true };
+	for (const route of routes) server.route({
+		url: route.url,
+		method: ["HEAD", "GET"],
+		constraints: options.constraints,
+		schema,
+		logLevel: options.logLevel,
+		config: {
+			...route.file ? {
+				file: route.file,
+				rootPath: route.rootPath
+			} : {},
+			...mount.rateLimit !== void 0 ? { rateLimit: mount.rateLimit } : {}
+		},
+		errorHandler(error, request, reply) {
+			if (error?.code === "ERR_STREAM_PREMATURE_CLOSE") {
+				reply.request.raw.destroy();
+				return;
+			}
+			return server.errorHandler(error, request, reply);
+		},
+		async handler(request, reply) {
+			await initialize();
+			const handler = handlers.get(`${request.method} ${route.url}`);
+			if (handler) {
+				await handler.call(server, request, reply);
+				return reply;
+			}
+			if (route.file) {
+				const sendFile = decorators.get("sendFile");
+				if (sendFile) return sendFile.call(reply, route.file, route.rootPath);
+			}
+			return reply.callNotFound();
+		}
+	});
+}
+
+//#endregion
+export { registerLazyStatic };
+//# sourceMappingURL=lazy-static.mjs.map

package/esm/http/lazy-static.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-static.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/lazy-static.ts"],"sourcesContent":["import type { FastifyStaticOptions } from \"@fastify/static\";\nimport { statSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type {\n  FastifyInstance,\n  FastifyReply,\n  FastifyRequest,\n  FastifySchema,\n  RouteHandlerMethod,\n  RouteOptions,\n} from \"fastify\";\n\ntype FileRoute = { url: string; file?: string; rootPath?: string };\ntype ReplyDecorator = (this: FastifyReply, ...args: unknown[]) => FastifyReply;\n\nfunction optionError(field: string, message: string, valueError = false): Error {\n  return Object.assign(\n    valueError\n      ? new TypeError(`\"${field}\" option ${message}`)\n      : new Error(`\"${field}\" option ${message}`),\n    {\n      code: valueError ? \"FST_STATIC_INVALID_OPTION_VALUE\" : \"FST_STATIC_INVALID_OPTION\",\n      statusCode: 500,\n    },\n  );\n}\n\n/** Validate without importing the plugin's directory-listing module. */\nfunction staticOptions(\n  server: FastifyInstance,\n  options: FastifyStaticOptions,\n): FastifyStaticOptions {\n  const root = options.root;\n  const normalize = (entry: string | URL): string | URL =>\n    entry instanceof URL && entry.protocol === \"file:\" ? fileURLToPath(entry) : entry;\n  const normalized = Array.isArray(root)\n    ? root.map(normalize)\n    : root === undefined\n      ? undefined\n      : normalize(root);\n  if (options.serve !== false || normalized !== undefined) {\n    if (normalized === undefined) throw optionError(\"root\", \"is required\");\n    if (Array.isArray(normalized) && normalized.length === 0)\n      throw optionError(\"root\", \"array requires one or more paths\");\n    if (Array.isArray(normalized) && new Set(normalized).size !== normalized.length)\n      throw optionError(\"root\", \"array contains duplicate paths\");\n    for (const entry of Array.isArray(normalized) ? normalized : [normalized]) {\n      if (typeof entry !== \"string\") throw optionError(\"root\", \"must be a string\", true);\n      if (!path.isAbsolute(entry)) throw optionError(\"root\", \"must be an absolute path\");\n      try {\n        if (!statSync(entry).isDirectory()) throw optionError(\"root\", \"must be a directory\");\n      } catch (error) {\n        if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n        if (!options.suppressWarning) server.log.warn(`\"root\" path \"${entry}\" must exist`);\n      }\n    }\n  }\n  if (options.setHeaders !== undefined && typeof options.setHeaders !== \"function\")\n    throw optionError(\"setHeaders\", \"must be a function\", true);\n  if (options.serve !== false && options.wildcard && typeof options.wildcard !== \"boolean\")\n    throw optionError(\"wildcard\", \"must be a boolean\", true);\n  const list = options.list;\n  if (list) {\n    if (Array.isArray(normalized))\n      throw Object.assign(new TypeError(\"multi-root with list option is not supported\"), {\n        code: \"FST_STATIC_MULTIROOT_LIST_CONFLICT\",\n        statusCode: 500,\n      });\n    if (typeof list === \"object\") {\n      if (list.format && list.format !== \"json\" && list.format !== \"html\")\n        throw optionError(\"list.format\", \"must be json or html\", true);\n      if (list.names && !Array.isArray(list.names))\n        throw optionError(\"list.names\", \"must be an array\", true);\n      if (list.jsonFormat != null && list.jsonFormat !== \"names\" && list.jsonFormat !== \"extended\")\n        throw optionError(\"list.jsonFormat\", \"must be names or extended\", true);\n      if (list.format === \"html\" && typeof list.render !== \"function\")\n        throw optionError(\n          \"list.render\",\n          \"must be a function and is required with html format\",\n          true,\n        );\n    }\n  }\n  return { ...options, root: normalized } as FastifyStaticOptions;\n}\n\n/** Mirror the plugin's boot-time route snapshot for wildcard:false. */\nasync function fileRoutes(options: FastifyStaticOptions, prefix: string): Promise<FileRoute[]> {\n  const { glob } = await import(\"glob\");\n  const roots = Array.isArray(options.root) ? options.root : [options.root];\n  const routes = new Map<string, FileRoute>();\n  const indexes = new Set(\n    options.index === undefined\n      ? [\"index.html\"]\n      : options.index === false\n        ? []\n        : [options.index].flat(),\n  );\n  const indexDirectories = new Map<string, string>();\n  for (const root of roots) {\n    if (typeof root !== \"string\") continue;\n    const rootPath = root.split(path.win32.sep).join(path.posix.sep).replace(/\\/?$/, \"/\");\n    const files = await glob(\"**/**\", {\n      cwd: rootPath,\n      absolute: false,\n      follow: true,\n      nodir: true,\n      dot: options.serveDotFiles,\n      ignore: options.globIgnore,\n    });\n    for (const fileName of files) {\n      const file = fileName.split(path.win32.sep).join(path.posix.sep);\n      const url = prefix + file;\n      if (routes.has(url)) continue;\n      routes.set(url, { url, file: `/${file}`, rootPath });\n      // Match upstream: distinct index filenames in later roots replace the\n      // directory route, while duplicate file URLs keep the first root.\n      const key = path.posix.basename(url);\n      if (indexes.has(key) && !indexDirectories.has(key))\n        indexDirectories.set(path.posix.dirname(url), rootPath);\n    }\n  }\n  for (const [directory, rootPath] of indexDirectories) {\n    const url = directory + (directory.endsWith(\"/\") ? \"\" : \"/\");\n    const file = \"/\" + url.replace(prefix, \"\");\n    routes.set(url, { url, file, rootPath });\n    if (options.redirect === true)\n      routes.set(url.replace(/\\/$/, \"\"), {\n        url: url.replace(/\\/$/, \"\"),\n        file: file.replace(/\\/$/, \"\"),\n        rootPath,\n      });\n  }\n  return [...routes.values()];\n}\n\n/**\n * Queue public routes after earlier plugins, and capture upstream handlers on the\n * first file request. Only public Fastify methods are replaced on the facade;\n * the listening application's route/decorator table never changes after ready.\n */\nexport function registerLazyStatic(\n  server: FastifyInstance,\n  input: FastifyStaticOptions,\n  mount: LazyStaticMount = {},\n): void {\n  const options = staticOptions(server, input);\n  // Earlier plugins install onRoute hooks (including global rate limiting).\n  // Keep the decorators on the calling scope, as @fastify/static does.\n  server.register(\n    Object.assign(async (instance: FastifyInstance) => prepareStatic(instance, options, mount), {\n      [Symbol.for(\"skip-override\")]: true,\n    }),\n  );\n}\n\n/**\n * How the file routes of one static mount meet the rate limiter.\n */\nexport type LazyStaticMount = {\n  /**\n   * The `config.rateLimit` of every file route: `false` exempts the mount\n   * from the global limiter, an object gives it its own limit, and\n   * `undefined` leaves it under the global policy.\n   */\n  rateLimit?: false | Record<string, unknown>;\n};\n\nasync function prepareStatic(\n  server: FastifyInstance,\n  options: FastifyStaticOptions,\n  mount: LazyStaticMount,\n): Promise<void> {\n  const originalPrefix = options.prefix ?? \"/\";\n  const prefix =\n    options.prefixAvoidTrailingSlash || originalPrefix.endsWith(\"/\")\n      ? originalPrefix\n      : `${originalPrefix}/`;\n  const handlers = new Map<string, RouteHandlerMethod>();\n  const decorators = new Map<string, ReplyDecorator>();\n  let initialized: Promise<void> | undefined;\n\n  function initialize(): Promise<void> {\n    return (initialized ??= (async () => {\n      const facade = Object.create(server) as FastifyInstance;\n      const capture = (route: RouteOptions): FastifyInstance => {\n        const url = route.url ?? (route as RouteOptions & { path?: string }).path;\n        if (!url) throw new Error(\"Static plugin declared a route without a path.\");\n        for (const method of [route.method].flat()) handlers.set(`${method} ${url}`, route.handler);\n        return facade;\n      };\n      Object.defineProperties(facade, {\n        route: { value: capture },\n        get: {\n          value: (\n            url: string,\n            route: Omit<RouteOptions, \"method\" | \"url\" | \"handler\">,\n            handler: RouteHandlerMethod,\n          ) => capture({ ...route, url, method: [\"GET\", \"HEAD\"], handler }),\n        },\n        decorateReply: {\n          value: (name: string, handler: ReplyDecorator) => {\n            decorators.set(name, handler);\n            return facade;\n          },\n        },\n      });\n      const { default: staticPlugin } = await import(\"@fastify/static\");\n      await staticPlugin(facade, { ...options, decorateReply: true, suppressWarning: true });\n    })());\n  }\n\n  if (options.decorateReply !== false) {\n    for (const name of [\"sendFile\", \"download\"]) {\n      server.decorateReply(name, function (this: FastifyReply, ...args: unknown[]) {\n        void initialize()\n          .then(() => {\n            const decorator = decorators.get(name);\n            if (!decorator) throw new Error(`Static plugin did not provide ${name}.`);\n            decorator.apply(this, args);\n          })\n          .catch((error: unknown) => this.send(error));\n        return this;\n      });\n    }\n  }\n  if (options.serve === false) return;\n  const routes: FileRoute[] =\n    options.wildcard === false ? await fileRoutes(options, prefix) : [{ url: prefix + \"*\" }];\n  if (options.wildcard !== false && options.redirect === true && prefix !== originalPrefix)\n    routes.push({ url: originalPrefix });\n  const schema: FastifySchema & { hide: boolean } = { hide: options.schemaHide ?? true };\n  for (const route of routes) {\n    server.route({\n      url: route.url,\n      method: [\"HEAD\", \"GET\"],\n      constraints: options.constraints,\n      schema,\n      logLevel: options.logLevel,\n      config: {\n        ...(route.file ? { file: route.file, rootPath: route.rootPath } : {}),\n        ...(mount.rateLimit !== undefined ? { rateLimit: mount.rateLimit } : {}),\n      },\n      errorHandler(error, request, reply) {\n        if (error?.code === \"ERR_STREAM_PREMATURE_CLOSE\") {\n          reply.request.raw.destroy();\n          return;\n        }\n        return server.errorHandler(error, request, reply);\n      },\n      async handler(request: FastifyRequest, reply: FastifyReply) {\n        await initialize();\n        const handler = handlers.get(`${request.method} ${route.url}`);\n        if (handler) {\n          await handler.call(server, request, reply);\n          // Some upstream handlers start an async send without returning its\n          // promise. Returning the real reply keeps Fastify from auto-sending.\n          return reply;\n        }\n        // A wildcard:false file may disappear between boot and the first request.\n        if (route.file) {\n          const sendFile = decorators.get(\"sendFile\");\n          if (sendFile) return sendFile.call(reply, route.file, route.rootPath);\n        }\n        return reply.callNotFound();\n      },\n    });\n  }\n}\n"],"mappings":";;;;;AAgBA,SAAS,YAAY,OAAe,SAAiB,aAAa,OAAc;CAC9E,OAAO,OAAO,OACZ,6BACI,IAAI,UAAU,IAAI,MAAM,WAAW,SAAS,oBAC5C,IAAI,MAAM,IAAI,MAAM,WAAW,SAAS,GAC5C;EACE,MAAM,aAAa,oCAAoC;EACvD,YAAY;CACd,CACF;AACF;;AAGA,SAAS,cACP,QACA,SACsB;CACtB,MAAM,OAAO,QAAQ;CACrB,MAAM,aAAa,UACjB,iBAAiB,OAAO,MAAM,aAAa,UAAU,cAAc,KAAK,IAAI;CAC9E,MAAM,aAAa,MAAM,QAAQ,IAAI,IACjC,KAAK,IAAI,SAAS,IAClB,SAAS,SACP,SACA,UAAU,IAAI;CACpB,IAAI,QAAQ,UAAU,SAAS,eAAe,QAAW;EACvD,IAAI,eAAe,QAAW,MAAM,YAAY,QAAQ,aAAa;EACrE,IAAI,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,GACrD,MAAM,YAAY,QAAQ,kCAAkC;EAC9D,IAAI,MAAM,QAAQ,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC,SAAS,WAAW,QACvE,MAAM,YAAY,QAAQ,gCAAgC;EAC5D,KAAK,MAAM,SAAS,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC,UAAU,GAAG;GACzE,IAAI,OAAO,UAAU,UAAU,MAAM,YAAY,QAAQ,oBAAoB,IAAI;GACjF,IAAI,CAAC,KAAK,WAAW,KAAK,GAAG,MAAM,YAAY,QAAQ,0BAA0B;GACjF,IAAI;IACF,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY,GAAG,MAAM,YAAY,QAAQ,qBAAqB;GACrF,SAAS,OAAO;IACd,IAAK,MAAgC,SAAS,UAAU,MAAM;IAC9D,IAAI,CAAC,QAAQ,iBAAiB,OAAO,IAAI,KAAK,gBAAgB,MAAM,aAAa;GACnF;EACF;CACF;CACA,IAAI,QAAQ,eAAe,UAAa,OAAO,QAAQ,eAAe,YACpE,MAAM,YAAY,cAAc,sBAAsB,IAAI;CAC5D,IAAI,QAAQ,UAAU,SAAS,QAAQ,YAAY,OAAO,QAAQ,aAAa,WAC7E,MAAM,YAAY,YAAY,qBAAqB,IAAI;CACzD,MAAM,OAAO,QAAQ;CACrB,IAAI,MAAM;EACR,IAAI,MAAM,QAAQ,UAAU,GAC1B,MAAM,OAAO,uBAAO,IAAI,UAAU,8CAA8C,GAAG;GACjF,MAAM;GACN,YAAY;EACd,CAAC;EACH,IAAI,OAAO,SAAS,UAAU;GAC5B,IAAI,KAAK,UAAU,KAAK,WAAW,UAAU,KAAK,WAAW,QAC3D,MAAM,YAAY,eAAe,wBAAwB,IAAI;GAC/D,IAAI,KAAK,SAAS,CAAC,MAAM,QAAQ,KAAK,KAAK,GACzC,MAAM,YAAY,cAAc,oBAAoB,IAAI;GAC1D,IAAI,KAAK,cAAc,QAAQ,KAAK,eAAe,WAAW,KAAK,eAAe,YAChF,MAAM,YAAY,mBAAmB,6BAA6B,IAAI;GACxE,IAAI,KAAK,WAAW,UAAU,OAAO,KAAK,WAAW,YACnD,MAAM,YACJ,eACA,uDACA,IACF;EACJ;CACF;CACA,OAAO;EAAE,GAAG;EAAS,MAAM;CAAW;AACxC;;AAGA,eAAe,WAAW,SAA+B,QAAsC;CAC7F,MAAM,EAAE,SAAS,MAAM,OAAO;CAC9B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAC,QAAQ,IAAI;CACxE,MAAM,yBAAS,IAAI,IAAuB;CAC1C,MAAM,UAAU,IAAI,IAClB,QAAQ,UAAU,SACd,CAAC,YAAY,IACb,QAAQ,UAAU,QAChB,CAAC,IACD,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAC7B;CACA,MAAM,mCAAmB,IAAI,IAAoB;CACjD,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,OAAO,SAAS,UAAU;EAC9B,MAAM,WAAW,KAAK,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,QAAQ,QAAQ,GAAG;EACpF,MAAM,QAAQ,MAAM,KAAK,SAAS;GAChC,KAAK;GACL,UAAU;GACV,QAAQ;GACR,OAAO;GACP,KAAK,QAAQ;GACb,QAAQ,QAAQ;EAClB,CAAC;EACD,KAAK,MAAM,YAAY,OAAO;GAC5B,MAAM,OAAO,SAAS,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG;GAC/D,MAAM,MAAM,SAAS;GACrB,IAAI,OAAO,IAAI,GAAG,GAAG;GACrB,OAAO,IAAI,KAAK;IAAE;IAAK,MAAM,IAAI;IAAQ;GAAS,CAAC;GAGnD,MAAM,MAAM,KAAK,MAAM,SAAS,GAAG;GACnC,IAAI,QAAQ,IAAI,GAAG,KAAK,CAAC,iBAAiB,IAAI,GAAG,GAC/C,iBAAiB,IAAI,KAAK,MAAM,QAAQ,GAAG,GAAG,QAAQ;EAC1D;CACF;CACA,KAAK,MAAM,CAAC,WAAW,aAAa,kBAAkB;EACpD,MAAM,MAAM,aAAa,UAAU,SAAS,GAAG,IAAI,KAAK;EACxD,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,EAAE;EACzC,OAAO,IAAI,KAAK;GAAE;GAAK;GAAM;EAAS,CAAC;EACvC,IAAI,QAAQ,aAAa,MACvB,OAAO,IAAI,IAAI,QAAQ,OAAO,EAAE,GAAG;GACjC,KAAK,IAAI,QAAQ,OAAO,EAAE;GAC1B,MAAM,KAAK,QAAQ,OAAO,EAAE;GAC5B;EACF,CAAC;CACL;CACA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;;;;;;AAOA,SAAgB,mBACd,QACA,OACA,QAAyB,CAAC,GACpB;CACN,MAAM,UAAU,cAAc,QAAQ,KAAK;CAG3C,OAAO,SACL,OAAO,OAAO,OAAO,aAA8B,cAAc,UAAU,SAAS,KAAK,GAAG,GACzF,OAAO,IAAI,eAAe,IAAI,KACjC,CAAC,CACH;AACF;AAcA,eAAe,cACb,QACA,SACA,OACe;CACf,MAAM,iBAAiB,QAAQ,UAAU;CACzC,MAAM,SACJ,QAAQ,4BAA4B,eAAe,SAAS,GAAG,IAC3D,iBACA,GAAG,eAAe;CACxB,MAAM,2BAAW,IAAI,IAAgC;CACrD,MAAM,6BAAa,IAAI,IAA4B;CACnD,IAAI;CAEJ,SAAS,aAA4B;EACnC,OAAQ,iBAAiB,YAAY;GACnC,MAAM,SAAS,OAAO,OAAO,MAAM;GACnC,MAAM,WAAW,UAAyC;IACxD,MAAM,MAAM,MAAM,OAAQ,MAA2C;IACrE,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,gDAAgD;IAC1E,KAAK,MAAM,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,GAAG,SAAS,IAAI,GAAG,OAAO,GAAG,OAAO,MAAM,OAAO;IAC1F,OAAO;GACT;GACA,OAAO,iBAAiB,QAAQ;IAC9B,OAAO,EAAE,OAAO,QAAQ;IACxB,KAAK,EACH,QACE,KACA,OACA,YACG,QAAQ;KAAE,GAAG;KAAO;KAAK,QAAQ,CAAC,OAAO,MAAM;KAAG;IAAQ,CAAC,EAClE;IACA,eAAe,EACb,QAAQ,MAAc,YAA4B;KAChD,WAAW,IAAI,MAAM,OAAO;KAC5B,OAAO;IACT,EACF;GACF,CAAC;GACD,MAAM,EAAE,SAAS,iBAAiB,MAAM,OAAO;GAC/C,MAAM,aAAa,QAAQ;IAAE,GAAG;IAAS,eAAe;IAAM,iBAAiB;GAAK,CAAC;EACvF,EAAC,CAAE;CACL;CAEA,IAAI,QAAQ,kBAAkB,OAC5B,KAAK,MAAM,QAAQ,CAAC,YAAY,UAAU,GACxC,OAAO,cAAc,MAAM,SAA8B,GAAG,MAAiB;EAC3E,AAAK,WAAW,CAAC,CACd,WAAW;GACV,MAAM,YAAY,WAAW,IAAI,IAAI;GACrC,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,iCAAiC,KAAK,EAAE;GACxE,UAAU,MAAM,MAAM,IAAI;EAC5B,CAAC,CAAC,CACD,OAAO,UAAmB,KAAK,KAAK,KAAK,CAAC;EAC7C,OAAO;CACT,CAAC;CAGL,IAAI,QAAQ,UAAU,OAAO;CAC7B,MAAM,SACJ,QAAQ,aAAa,QAAQ,MAAM,WAAW,SAAS,MAAM,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC;CACzF,IAAI,QAAQ,aAAa,SAAS,QAAQ,aAAa,QAAQ,WAAW,gBACxE,OAAO,KAAK,EAAE,KAAK,eAAe,CAAC;CACrC,MAAM,SAA4C,EAAE,MAAM,QAAQ,cAAc,KAAK;CACrF,KAAK,MAAM,SAAS,QAClB,OAAO,MAAM;EACX,KAAK,MAAM;EACX,QAAQ,CAAC,QAAQ,KAAK;EACtB,aAAa,QAAQ;EACrB;EACA,UAAU,QAAQ;EAClB,QAAQ;GACN,GAAI,MAAM,OAAO;IAAE,MAAM,MAAM;IAAM,UAAU,MAAM;GAAS,IAAI,CAAC;GACnE,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;EACxE;EACA,aAAa,OAAO,SAAS,OAAO;GAClC,IAAI,OAAO,SAAS,8BAA8B;IAChD,MAAM,QAAQ,IAAI,QAAQ;IAC1B;GACF;GACA,OAAO,OAAO,aAAa,OAAO,SAAS,KAAK;EAClD;EACA,MAAM,QAAQ,SAAyB,OAAqB;GAC1D,MAAM,WAAW;GACjB,MAAM,UAAU,SAAS,IAAI,GAAG,QAAQ,OAAO,GAAG,MAAM,KAAK;GAC7D,IAAI,SAAS;IACX,MAAM,QAAQ,KAAK,QAAQ,SAAS,KAAK;IAGzC,OAAO;GACT;GAEA,IAAI,MAAM,MAAM;IACd,MAAM,WAAW,WAAW,IAAI,UAAU;IAC1C,IAAI,UAAU,OAAO,SAAS,KAAK,OAAO,MAAM,MAAM,MAAM,QAAQ;GACtE;GACA,OAAO,MAAM,aAAa;EAC5B;CACF,CAAC;AAEL"}

package/esm/http/middleware/cache-response-middleware.d.mts

@@ -1,7 +1,7 @@
 import { Request } from "../request.mjs";
 import { Middleware } from "../../router/types.mjs";
 
-//#region ../core/src/http/middleware/cache-response-middleware.d.ts
+//#region ../../packages/core/src/http/middleware/cache-response-middleware.d.ts
 type CacheMiddlewareOptions = {
   /**
    * Cache key

package/esm/http/middleware/cache-response-middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-response-middleware.d.mts","names":[],"sources":["../../../../../../../../core/src/http/middleware/cache-response-middleware.ts"],"mappings":";;;;KAsBY,sBAAA;;AAAZ;;EAIE,QAAA,aAAqB,OAAA,EAAS,OAAA,iBAAwB,OAAA,EAAS,OAAA,KAAY,OAAA;EAA7C;;;;;;EAO9B,UAAA;EAP8B;;;;;EAa9B,IAAA;EAAA;;;EAIA,GAAA;EAmB6B;;;AAAO;AA+DtC;;EA3EE,MAAA;EA2EgG;;;;;AAAA;;;;;;EA/DhG,IAAA,gBAAoB,OAAA,EAAS,OAAA;AAAA;AAAA,iBA+Df,eAAA,CAAgB,oBAAA,EAAsB,sBAAA,YAAkC,UAAU"}
+{"version":3,"file":"cache-response-middleware.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/cache-response-middleware.ts"],"mappings":";;;;KAsBY,sBAAA;;AAAZ;;EAIE,QAAA,aAAqB,OAAA,EAAS,OAAA,iBAAwB,OAAA,EAAS,OAAA,KAAY,OAAA;EAA7C;;;;;;EAO9B,UAAA;EAP8B;;;;;EAa9B,IAAA;EAAA;;;EAIA,GAAA;EAmB6B;;;AAAO;AA+DtC;;EA3EE,MAAA;EA2EgG;;;;;AAAA;;;;;;EA/DhG,IAAA,gBAAoB,OAAA,EAAS,OAAA;AAAA;AAAA,iBA+Df,eAAA,CAAgB,oBAAA,EAAsB,sBAAA,YAAkC,UAAU"}

package/esm/http/middleware/cache-response-middleware.mjs

@@ -2,7 +2,7 @@ import { log } from "@warlock.js/logger";
 import { except } from "@mongez/reinforcements";
 import { cache } from "@warlock.js/cache";
 
-//#region ../core/src/http/middleware/cache-response-middleware.ts
+//#region ../../packages/core/src/http/middleware/cache-response-middleware.ts
 const defaultCacheOptions = { withLocale: true };
 /**
 * Resolves `CacheMiddlewareOptions.tags` — a static list or a function of

package/esm/http/middleware/cache-response-middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cache-response-middleware.mjs","names":[],"sources":["../../../../../../../../core/src/http/middleware/cache-response-middleware.ts"],"sourcesContent":["import { except } from \"@mongez/reinforcements\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport type { Middleware } from \"../../router/types\";\nimport type { Request } from \"./../request\";\nimport type { Response } from \"./../response\";\n\n/**\n * Shape persisted to the cache for a cached response. Stores the status and\n * content-type alongside the body so the HIT path can replay the response\n * faithfully via {@link Response.replay} instead of re-entering `send()`.\n */\ntype CachedResponsePayload = {\n  status: number;\n  data: unknown;\n  contentType?: string;\n};\n\n// TODO: Add option to determine whether to cache the response or not\n// TODO: add option to determine what to be cached from the response\n// TODO: add cache middleware config options for example to set the default driver, ttl, etc\n\nexport type CacheMiddlewareOptions = {\n  /**\n   * Cache key\n   */\n  cacheKey: string | ((request: Request) => string) | ((request: Request) => Promise<string>);\n  /**\n   * If true, then the response will be cached based on the current locale code\n   * This is useful when you have a multi-language website, and you want to cache the response based on the current locale\n   *\n   * @default true\n   */\n  withLocale?: boolean;\n  /**\n   * List of keys from the response object to omit from the cached response\n   *\n   * @default ['user']\n   */\n  omit?: string[];\n  /**\n   * Expires after number of seconds\n   */\n  ttl?: number;\n  /**\n   * Cache driver\n   *\n   * @see config/cache.ts: drivers object\n   * @default cache manager\n   */\n  driver?: string;\n  /**\n   * Tags this cached response is stored under, mirroring `route.cache.tags`\n   * on `@warlock.js/web`'s page cache (`PageCacheOptIn.tags`,\n   * `web/src/routing/route-identity.ts`) so the two caches share one mental\n   * model: `cache.tags([...]).invalidate()` from `@warlock.js/cache` evicts\n   * a tagged API response the same way it evicts a tagged page. Either a\n   * static list, or a function of the request — resolved once per request,\n   * right before the response is stored.\n   *\n   * @default undefined (untagged — behaves exactly as before this option existed)\n   */\n  tags?: string[] | ((request: Request) => string[]);\n};\n\nconst defaultCacheOptions: Partial<CacheMiddlewareOptions> = {\n  withLocale: true,\n};\n\ntype ParsedCacheOptions = Required<Omit<CacheMiddlewareOptions, \"tags\">> & {\n  cacheKey: string;\n  /** Resolved, concrete tag list — see {@link resolveCacheTags}. */\n  tags: string[];\n};\n\n/**\n * Resolves `CacheMiddlewareOptions.tags` — a static list or a function of\n * the request — into a concrete list at store time. Mirrors\n * `resolveCacheTags` in `@warlock.js/web`'s `create-page-route-handler.ts`,\n * the equivalent seam for `route.cache.tags`.\n */\nfunction resolveCacheTags(tags: CacheMiddlewareOptions[\"tags\"], request: Request): string[] {\n  if (tags === undefined) return [];\n\n  return typeof tags === \"function\" ? tags(request) : tags;\n}\n\nasync function parseCacheOptions(cacheOptions: CacheMiddlewareOptions | string, request: Request) {\n  if (typeof cacheOptions === \"string\") {\n    cacheOptions = {\n      cacheKey: cacheOptions,\n    };\n  }\n\n  // Everything below resolves into a fresh per-request object; the options\n  // the factory closed over are shared across all requests and users, so they\n  // must never be written to.\n  const resolvedCacheKey =\n    typeof cacheOptions.cacheKey === \"function\"\n      ? await cacheOptions.cacheKey(request)\n      : cacheOptions.cacheKey;\n\n  const tags = resolveCacheTags(cacheOptions.tags, request);\n\n  const finalCacheOptions = {\n    ...defaultCacheOptions,\n    ...cacheOptions,\n    cacheKey: resolvedCacheKey,\n    tags: [...tags],\n    omit: cacheOptions.omit ? [...cacheOptions.omit] : undefined,\n  } as unknown as ParsedCacheOptions;\n\n  if (finalCacheOptions.withLocale) {\n    const locale = request.getLocaleCode();\n\n    finalCacheOptions.cacheKey = `${finalCacheOptions.cacheKey}:${locale}`;\n  }\n\n  if (!finalCacheOptions.omit) {\n    finalCacheOptions.omit = [\"user\", \"settings\"];\n  }\n\n  return finalCacheOptions;\n}\n\nexport function cacheMiddleware(responseCacheOptions: CacheMiddlewareOptions | string): Middleware {\n  // The `Middleware` return annotation is load-bearing: without it, tsc never\n  // checks this factory's calling convention, which is how the positional v4\n  // shape survived an earlier refactor unnoticed.\n  return async function ({ request, response }) {\n    const { ttl, omit, cacheKey, driver, tags } = await parseCacheOptions(\n      responseCacheOptions,\n      request,\n    );\n    const cacheDriver = driver ? await cache.use(driver) : cache;\n\n    const content = (await cacheDriver.get(cacheKey)) as CachedResponsePayload | null;\n\n    if (content) {\n      // Replay through the standard pipeline (status + content-type preserved)\n      // instead of `baseResponse.send()`, which would re-enter Response.send()\n      // on an already-sent reply, trip the double-send guard, and drop the\n      // status / content-type.\n      return response.replay({\n        status: content.status ?? 200,\n        body: content.data,\n        contentType: content.contentType,\n      });\n    }\n\n    response.onSent((response: Response) => {\n      if (!response.isOk || response.request.path !== request.path) {\n        return;\n      }\n\n      const sentContentType = response.contentType;\n\n      const content: CachedResponsePayload = {\n        status: response.statusCode,\n        data: except(response.parsedBody, omit),\n        contentType: typeof sentContentType === \"string\" ? sentContentType : undefined,\n      };\n\n      // `set` is fire-and-forget inside `onSent`; without a `.catch` a rejected\n      // write (e.g. Redis down) would surface as an unhandledRejection.\n      //\n      // Tagged and untagged writes go through separate calls rather than a\n      // shared branch-free path so an untagged route's write stays byte\n      // identical to what it was before `tags` existed.\n      const write =\n        tags.length > 0\n          ? cacheDriver.tags(tags).set(cacheKey, content, ttl)\n          : cacheDriver.set(cacheKey, content, ttl);\n\n      write.catch((error: unknown) => {\n        log.error(\"cache-middleware\", \"set\", error);\n      });\n    });\n  };\n}\n"],"mappings":";;;;;AAiEA,MAAM,sBAAuD,EAC3D,YAAY,KACd;;;;;;;AAcA,SAAS,iBAAiB,MAAsC,SAA4B;CAC1F,IAAI,SAAS,QAAW,OAAO,CAAC;CAEhC,OAAO,OAAO,SAAS,aAAa,KAAK,OAAO,IAAI;AACtD;AAEA,eAAe,kBAAkB,cAA+C,SAAkB;CAChG,IAAI,OAAO,iBAAiB,UAC1B,eAAe,EACb,UAAU,aACZ;CAMF,MAAM,mBACJ,OAAO,aAAa,aAAa,aAC7B,MAAM,aAAa,SAAS,OAAO,IACnC,aAAa;CAEnB,MAAM,OAAO,iBAAiB,aAAa,MAAM,OAAO;CAExD,MAAM,oBAAoB;EACxB,GAAG;EACH,GAAG;EACH,UAAU;EACV,MAAM,CAAC,GAAG,IAAI;EACd,MAAM,aAAa,OAAO,CAAC,GAAG,aAAa,IAAI,IAAI;CACrD;CAEA,IAAI,kBAAkB,YAAY;EAChC,MAAM,SAAS,QAAQ,cAAc;EAErC,kBAAkB,WAAW,GAAG,kBAAkB,SAAS,GAAG;CAChE;CAEA,IAAI,CAAC,kBAAkB,MACrB,kBAAkB,OAAO,CAAC,QAAQ,UAAU;CAG9C,OAAO;AACT;AAEA,SAAgB,gBAAgB,sBAAmE;CAIjG,OAAO,eAAgB,EAAE,SAAS,YAAY;EAC5C,MAAM,EAAE,KAAK,MAAM,UAAU,QAAQ,SAAS,MAAM,kBAClD,sBACA,OACF;EACA,MAAM,cAAc,SAAS,MAAM,MAAM,IAAI,MAAM,IAAI;EAEvD,MAAM,UAAW,MAAM,YAAY,IAAI,QAAQ;EAE/C,IAAI,SAKF,OAAO,SAAS,OAAO;GACrB,QAAQ,QAAQ,UAAU;GAC1B,MAAM,QAAQ;GACd,aAAa,QAAQ;EACvB,CAAC;EAGH,SAAS,QAAQ,aAAuB;GACtC,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,MACtD;GAGF,MAAM,kBAAkB,SAAS;GAEjC,MAAM,UAAiC;IACrC,QAAQ,SAAS;IACjB,MAAM,OAAO,SAAS,YAAY,IAAI;IACtC,aAAa,OAAO,oBAAoB,WAAW,kBAAkB;GACvE;GAaA,CAJE,KAAK,SAAS,IACV,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,UAAU,SAAS,GAAG,IACjD,YAAY,IAAI,UAAU,SAAS,GAAG,EAEvC,CAAC,OAAO,UAAmB;IAC9B,IAAI,MAAM,oBAAoB,OAAO,KAAK;GAC5C,CAAC;EACH,CAAC;CACH;AACF"}
+{"version":3,"file":"cache-response-middleware.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/cache-response-middleware.ts"],"sourcesContent":["import { except } from \"@mongez/reinforcements\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport type { Middleware } from \"../../router/types\";\nimport type { Request } from \"./../request\";\nimport type { Response } from \"./../response\";\n\n/**\n * Shape persisted to the cache for a cached response. Stores the status and\n * content-type alongside the body so the HIT path can replay the response\n * faithfully via {@link Response.replay} instead of re-entering `send()`.\n */\ntype CachedResponsePayload = {\n  status: number;\n  data: unknown;\n  contentType?: string;\n};\n\n// TODO: Add option to determine whether to cache the response or not\n// TODO: add option to determine what to be cached from the response\n// TODO: add cache middleware config options for example to set the default driver, ttl, etc\n\nexport type CacheMiddlewareOptions = {\n  /**\n   * Cache key\n   */\n  cacheKey: string | ((request: Request) => string) | ((request: Request) => Promise<string>);\n  /**\n   * If true, then the response will be cached based on the current locale code\n   * This is useful when you have a multi-language website, and you want to cache the response based on the current locale\n   *\n   * @default true\n   */\n  withLocale?: boolean;\n  /**\n   * List of keys from the response object to omit from the cached response\n   *\n   * @default ['user']\n   */\n  omit?: string[];\n  /**\n   * Expires after number of seconds\n   */\n  ttl?: number;\n  /**\n   * Cache driver\n   *\n   * @see config/cache.ts: drivers object\n   * @default cache manager\n   */\n  driver?: string;\n  /**\n   * Tags this cached response is stored under, mirroring `route.cache.tags`\n   * on `@warlock.js/web`'s page cache (`PageCacheOptIn.tags`,\n   * `web/src/routing/route-identity.ts`) so the two caches share one mental\n   * model: `cache.tags([...]).invalidate()` from `@warlock.js/cache` evicts\n   * a tagged API response the same way it evicts a tagged page. Either a\n   * static list, or a function of the request — resolved once per request,\n   * right before the response is stored.\n   *\n   * @default undefined (untagged — behaves exactly as before this option existed)\n   */\n  tags?: string[] | ((request: Request) => string[]);\n};\n\nconst defaultCacheOptions: Partial<CacheMiddlewareOptions> = {\n  withLocale: true,\n};\n\ntype ParsedCacheOptions = Required<Omit<CacheMiddlewareOptions, \"tags\">> & {\n  cacheKey: string;\n  /** Resolved, concrete tag list — see {@link resolveCacheTags}. */\n  tags: string[];\n};\n\n/**\n * Resolves `CacheMiddlewareOptions.tags` — a static list or a function of\n * the request — into a concrete list at store time. Mirrors\n * `resolveCacheTags` in `@warlock.js/web`'s `create-page-route-handler.ts`,\n * the equivalent seam for `route.cache.tags`.\n */\nfunction resolveCacheTags(tags: CacheMiddlewareOptions[\"tags\"], request: Request): string[] {\n  if (tags === undefined) return [];\n\n  return typeof tags === \"function\" ? tags(request) : tags;\n}\n\nasync function parseCacheOptions(cacheOptions: CacheMiddlewareOptions | string, request: Request) {\n  if (typeof cacheOptions === \"string\") {\n    cacheOptions = {\n      cacheKey: cacheOptions,\n    };\n  }\n\n  // Everything below resolves into a fresh per-request object; the options\n  // the factory closed over are shared across all requests and users, so they\n  // must never be written to.\n  const resolvedCacheKey =\n    typeof cacheOptions.cacheKey === \"function\"\n      ? await cacheOptions.cacheKey(request)\n      : cacheOptions.cacheKey;\n\n  const tags = resolveCacheTags(cacheOptions.tags, request);\n\n  const finalCacheOptions = {\n    ...defaultCacheOptions,\n    ...cacheOptions,\n    cacheKey: resolvedCacheKey,\n    tags: [...tags],\n    omit: cacheOptions.omit ? [...cacheOptions.omit] : undefined,\n  } as unknown as ParsedCacheOptions;\n\n  if (finalCacheOptions.withLocale) {\n    const locale = request.getLocaleCode();\n\n    finalCacheOptions.cacheKey = `${finalCacheOptions.cacheKey}:${locale}`;\n  }\n\n  if (!finalCacheOptions.omit) {\n    finalCacheOptions.omit = [\"user\", \"settings\"];\n  }\n\n  return finalCacheOptions;\n}\n\nexport function cacheMiddleware(responseCacheOptions: CacheMiddlewareOptions | string): Middleware {\n  // The `Middleware` return annotation is load-bearing: without it, tsc never\n  // checks this factory's calling convention, which is how the positional v4\n  // shape survived an earlier refactor unnoticed.\n  return async function ({ request, response }) {\n    const { ttl, omit, cacheKey, driver, tags } = await parseCacheOptions(\n      responseCacheOptions,\n      request,\n    );\n    const cacheDriver = driver ? await cache.use(driver) : cache;\n\n    const content = (await cacheDriver.get(cacheKey)) as CachedResponsePayload | null;\n\n    if (content) {\n      // Replay through the standard pipeline (status + content-type preserved)\n      // instead of `baseResponse.send()`, which would re-enter Response.send()\n      // on an already-sent reply, trip the double-send guard, and drop the\n      // status / content-type.\n      return response.replay({\n        status: content.status ?? 200,\n        body: content.data,\n        contentType: content.contentType,\n      });\n    }\n\n    response.onSent((response: Response) => {\n      if (!response.isOk || response.request.path !== request.path) {\n        return;\n      }\n\n      const sentContentType = response.contentType;\n\n      const content: CachedResponsePayload = {\n        status: response.statusCode,\n        data: except(response.parsedBody, omit),\n        contentType: typeof sentContentType === \"string\" ? sentContentType : undefined,\n      };\n\n      // `set` is fire-and-forget inside `onSent`; without a `.catch` a rejected\n      // write (e.g. Redis down) would surface as an unhandledRejection.\n      //\n      // Tagged and untagged writes go through separate calls rather than a\n      // shared branch-free path so an untagged route's write stays byte\n      // identical to what it was before `tags` existed.\n      const write =\n        tags.length > 0\n          ? cacheDriver.tags(tags).set(cacheKey, content, ttl)\n          : cacheDriver.set(cacheKey, content, ttl);\n\n      write.catch((error: unknown) => {\n        log.error(\"cache-middleware\", \"set\", error);\n      });\n    });\n  };\n}\n"],"mappings":";;;;;AAiEA,MAAM,sBAAuD,EAC3D,YAAY,KACd;;;;;;;AAcA,SAAS,iBAAiB,MAAsC,SAA4B;CAC1F,IAAI,SAAS,QAAW,OAAO,CAAC;CAEhC,OAAO,OAAO,SAAS,aAAa,KAAK,OAAO,IAAI;AACtD;AAEA,eAAe,kBAAkB,cAA+C,SAAkB;CAChG,IAAI,OAAO,iBAAiB,UAC1B,eAAe,EACb,UAAU,aACZ;CAMF,MAAM,mBACJ,OAAO,aAAa,aAAa,aAC7B,MAAM,aAAa,SAAS,OAAO,IACnC,aAAa;CAEnB,MAAM,OAAO,iBAAiB,aAAa,MAAM,OAAO;CAExD,MAAM,oBAAoB;EACxB,GAAG;EACH,GAAG;EACH,UAAU;EACV,MAAM,CAAC,GAAG,IAAI;EACd,MAAM,aAAa,OAAO,CAAC,GAAG,aAAa,IAAI,IAAI;CACrD;CAEA,IAAI,kBAAkB,YAAY;EAChC,MAAM,SAAS,QAAQ,cAAc;EAErC,kBAAkB,WAAW,GAAG,kBAAkB,SAAS,GAAG;CAChE;CAEA,IAAI,CAAC,kBAAkB,MACrB,kBAAkB,OAAO,CAAC,QAAQ,UAAU;CAG9C,OAAO;AACT;AAEA,SAAgB,gBAAgB,sBAAmE;CAIjG,OAAO,eAAgB,EAAE,SAAS,YAAY;EAC5C,MAAM,EAAE,KAAK,MAAM,UAAU,QAAQ,SAAS,MAAM,kBAClD,sBACA,OACF;EACA,MAAM,cAAc,SAAS,MAAM,MAAM,IAAI,MAAM,IAAI;EAEvD,MAAM,UAAW,MAAM,YAAY,IAAI,QAAQ;EAE/C,IAAI,SAKF,OAAO,SAAS,OAAO;GACrB,QAAQ,QAAQ,UAAU;GAC1B,MAAM,QAAQ;GACd,aAAa,QAAQ;EACvB,CAAC;EAGH,SAAS,QAAQ,aAAuB;GACtC,IAAI,CAAC,SAAS,QAAQ,SAAS,QAAQ,SAAS,QAAQ,MACtD;GAGF,MAAM,kBAAkB,SAAS;GAEjC,MAAM,UAAiC;IACrC,QAAQ,SAAS;IACjB,MAAM,OAAO,SAAS,YAAY,IAAI;IACtC,aAAa,OAAO,oBAAoB,WAAW,kBAAkB;GACvE;GAaA,CAJE,KAAK,SAAS,IACV,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,UAAU,SAAS,GAAG,IACjD,YAAY,IAAI,UAAU,SAAS,GAAG,EAEvC,CAAC,OAAO,UAAmB;IAC9B,IAAI,MAAM,oBAAoB,OAAO,KAAK;GAC5C,CAAC;EACH,CAAC;CACH;AACF"}

package/esm/http/middleware/concurrency-limit.middleware.d.mts

@@ -1,6 +1,6 @@
 import { Request } from "../request.mjs";
 import { Middleware } from "../../router/types.mjs";
-//#region ../core/src/http/middleware/concurrency-limit.middleware.d.ts
+//#region ../../packages/core/src/http/middleware/concurrency-limit.middleware.d.ts
 /**
  * Options for the concurrency limit middleware.
  */

package/esm/http/middleware/concurrency-limit.middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"concurrency-limit.middleware.d.mts","names":[],"sources":["../../../../../../../../core/src/http/middleware/concurrency-limit.middleware.ts"],"mappings":";;;;;;KASY,uBAAA;EAAuB;;;;;;;;EASjC,YAAA,IAAgB,OAAA,EAAS,OAAO;EAiDlB;;;EA7Cd,YAAA;AAAA;;;;;AAgDW;;;;;;;;;;;;;;;;;;;;;;;;iBAHG,0BAAA,CACd,GAAA,UACA,OAAA,GAAS,uBAAA,GACR,UAAU"}
+{"version":3,"file":"concurrency-limit.middleware.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/concurrency-limit.middleware.ts"],"mappings":";;;;;;KASY,uBAAA;EAAuB;;;;;;;;EASjC,YAAA,IAAgB,OAAA,EAAS,OAAO;EAiDlB;;;EA7Cd,YAAA;AAAA;;;;;AAgDW;;;;;;;;;;;;;;;;;;;;;;;;iBAHG,0BAAA,CACd,GAAA,UACA,OAAA,GAAS,uBAAA,GACR,UAAU"}

package/esm/http/middleware/concurrency-limit.middleware.mjs

@@ -1,7 +1,7 @@
 import { HttpErrorCodes } from "../error-codes.mjs";
 import { t } from "./inject-request-context.mjs";
 
-//#region ../core/src/http/middleware/concurrency-limit.middleware.ts
+//#region ../../packages/core/src/http/middleware/concurrency-limit.middleware.ts
 const counters = /* @__PURE__ */ new Map();
 function release(key) {
 	const after = (counters.get(key) || 1) - 1;

package/esm/http/middleware/concurrency-limit.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"concurrency-limit.middleware.mjs","names":[],"sources":["../../../../../../../../core/src/http/middleware/concurrency-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the concurrency limit middleware.\n */\nexport type ConcurrencyLimitOptions = {\n  /**\n   * Group key generator. Defaults to `request.route.path` — i.e. the cap\n   * applies across all callers of that route. Override to scope per-user\n   * or per-tenant.\n   *\n   * @example\n   * keyGenerator: (request) => `${request.route.path}:${request.locals.user?.id ?? request.ip}`,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\nconst counters = new Map<string, number>();\n\nfunction release(key: string) {\n  const after = (counters.get(key) || 1) - 1;\n\n  if (after <= 0) {\n    counters.delete(key);\n\n    return;\n  }\n\n  counters.set(key, after);\n}\n\n/**\n * Cap the number of in-flight requests against a route. Above the cap, new\n * requests get a fast 429 + `Retry-After: 1` — no queue, no timeout.\n *\n * Use for endpoints whose cost is unbounded per-request: report generation,\n * AI completions, image processing, expensive aggregations. Different from\n * `rateLimit()` — rate-limit caps requests-per-time, concurrency caps\n * in-flight requests at any instant.\n *\n * The counter is process-local. With `N` replicas the effective cap is\n * `N × max`. Document this in the route's behavior; if you need shared\n * concurrency across replicas, reach for a `@warlock.js/cache` lock instead.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/reports/generate\", reportController, {\n *   middleware: [middleware.concurrencyLimit(3)],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     middleware.concurrencyLimit(10, {\n *       keyGenerator: (request) => `ai:${request.locals.user?.id ?? request.ip}`,\n *     }),\n *   ],\n * });\n */\nexport function concurrencyLimitMiddleware(\n  max: number,\n  options: ConcurrencyLimitOptions = {},\n): Middleware {\n  return ({ request, response }) => {\n    const key = options.keyGenerator?.(request) || request.route.path;\n    const current = counters.get(key) || 0;\n\n    if (current >= max) {\n      response.header(\"Retry-After\", 1);\n\n      return response.tooManyRequests({\n        error: options.errorMessage || t(\"http.concurrencyLimitReached\"),\n        errorCode: HttpErrorCodes.ConcurrencyLimitReached,\n        limit: max,\n      });\n    }\n\n    counters.set(key, current + 1);\n\n    let released = false;\n\n    const releaseOnce = () => {\n      if (released) {\n        return;\n      }\n\n      released = true;\n      release(key);\n    };\n\n    // `onSent` only fires from Response.send()/stream().end()/sse().end().\n    // Bare-reply paths (noContent, redirect, sendFile, download, sendBuffer,\n    // raw send) never trigger it, so the slot would leak and the route would\n    // permanently 429 after `max` such requests. Bind to the raw socket\n    // lifecycle as well so the slot frees regardless of response path —\n    // `releaseOnce` is idempotent, so double-firing is harmless.\n    response.onSent((_sentResponse: Response) => releaseOnce());\n    response.baseResponse.raw.once(\"finish\", releaseOnce);\n    response.baseResponse.raw.once(\"close\", releaseOnce);\n  };\n}\n"],"mappings":";;;;AAyBA,MAAM,2BAAW,IAAI,IAAoB;AAEzC,SAAS,QAAQ,KAAa;CAC5B,MAAM,SAAS,SAAS,IAAI,GAAG,KAAK,KAAK;CAEzC,IAAI,SAAS,GAAG;EACd,SAAS,OAAO,GAAG;EAEnB;CACF;CAEA,SAAS,IAAI,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,2BACd,KACA,UAAmC,CAAC,GACxB;CACZ,QAAQ,EAAE,SAAS,eAAe;EAChC,MAAM,MAAM,QAAQ,eAAe,OAAO,KAAK,QAAQ,MAAM;EAC7D,MAAM,UAAU,SAAS,IAAI,GAAG,KAAK;EAErC,IAAI,WAAW,KAAK;GAClB,SAAS,OAAO,eAAe,CAAC;GAEhC,OAAO,SAAS,gBAAgB;IAC9B,OAAO,QAAQ,gBAAgB,EAAE,8BAA8B;IAC/D;IACA,OAAO;GACT,CAAC;EACH;EAEA,SAAS,IAAI,KAAK,UAAU,CAAC;EAE7B,IAAI,WAAW;EAEf,MAAM,oBAAoB;GACxB,IAAI,UACF;GAGF,WAAW;GACX,QAAQ,GAAG;EACb;EAQA,SAAS,QAAQ,kBAA4B,YAAY,CAAC;EAC1D,SAAS,aAAa,IAAI,KAAK,UAAU,WAAW;EACpD,SAAS,aAAa,IAAI,KAAK,SAAS,WAAW;CACrD;AACF"}
+{"version":3,"file":"concurrency-limit.middleware.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/concurrency-limit.middleware.ts"],"sourcesContent":["import type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the concurrency limit middleware.\n */\nexport type ConcurrencyLimitOptions = {\n  /**\n   * Group key generator. Defaults to `request.route.path` — i.e. the cap\n   * applies across all callers of that route. Override to scope per-user\n   * or per-tenant.\n   *\n   * @example\n   * keyGenerator: (request) => `${request.route.path}:${request.locals.user?.id ?? request.ip}`,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Override the default error message.\n   */\n  errorMessage?: string;\n};\n\nconst counters = new Map<string, number>();\n\nfunction release(key: string) {\n  const after = (counters.get(key) || 1) - 1;\n\n  if (after <= 0) {\n    counters.delete(key);\n\n    return;\n  }\n\n  counters.set(key, after);\n}\n\n/**\n * Cap the number of in-flight requests against a route. Above the cap, new\n * requests get a fast 429 + `Retry-After: 1` — no queue, no timeout.\n *\n * Use for endpoints whose cost is unbounded per-request: report generation,\n * AI completions, image processing, expensive aggregations. Different from\n * `rateLimit()` — rate-limit caps requests-per-time, concurrency caps\n * in-flight requests at any instant.\n *\n * The counter is process-local. With `N` replicas the effective cap is\n * `N × max`. Document this in the route's behavior; if you need shared\n * concurrency across replicas, reach for a `@warlock.js/cache` lock instead.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/reports/generate\", reportController, {\n *   middleware: [middleware.concurrencyLimit(3)],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     middleware.concurrencyLimit(10, {\n *       keyGenerator: (request) => `ai:${request.locals.user?.id ?? request.ip}`,\n *     }),\n *   ],\n * });\n */\nexport function concurrencyLimitMiddleware(\n  max: number,\n  options: ConcurrencyLimitOptions = {},\n): Middleware {\n  return ({ request, response }) => {\n    const key = options.keyGenerator?.(request) || request.route.path;\n    const current = counters.get(key) || 0;\n\n    if (current >= max) {\n      response.header(\"Retry-After\", 1);\n\n      return response.tooManyRequests({\n        error: options.errorMessage || t(\"http.concurrencyLimitReached\"),\n        errorCode: HttpErrorCodes.ConcurrencyLimitReached,\n        limit: max,\n      });\n    }\n\n    counters.set(key, current + 1);\n\n    let released = false;\n\n    const releaseOnce = () => {\n      if (released) {\n        return;\n      }\n\n      released = true;\n      release(key);\n    };\n\n    // `onSent` only fires from Response.send()/stream().end()/sse().end().\n    // Bare-reply paths (noContent, redirect, sendFile, download, sendBuffer,\n    // raw send) never trigger it, so the slot would leak and the route would\n    // permanently 429 after `max` such requests. Bind to the raw socket\n    // lifecycle as well so the slot frees regardless of response path —\n    // `releaseOnce` is idempotent, so double-firing is harmless.\n    response.onSent((_sentResponse: Response) => releaseOnce());\n    response.baseResponse.raw.once(\"finish\", releaseOnce);\n    response.baseResponse.raw.once(\"close\", releaseOnce);\n  };\n}\n"],"mappings":";;;;AAyBA,MAAM,2BAAW,IAAI,IAAoB;AAEzC,SAAS,QAAQ,KAAa;CAC5B,MAAM,SAAS,SAAS,IAAI,GAAG,KAAK,KAAK;CAEzC,IAAI,SAAS,GAAG;EACd,SAAS,OAAO,GAAG;EAEnB;CACF;CAEA,SAAS,IAAI,KAAK,KAAK;AACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,2BACd,KACA,UAAmC,CAAC,GACxB;CACZ,QAAQ,EAAE,SAAS,eAAe;EAChC,MAAM,MAAM,QAAQ,eAAe,OAAO,KAAK,QAAQ,MAAM;EAC7D,MAAM,UAAU,SAAS,IAAI,GAAG,KAAK;EAErC,IAAI,WAAW,KAAK;GAClB,SAAS,OAAO,eAAe,CAAC;GAEhC,OAAO,SAAS,gBAAgB;IAC9B,OAAO,QAAQ,gBAAgB,EAAE,8BAA8B;IAC/D;IACA,OAAO;GACT,CAAC;EACH;EAEA,SAAS,IAAI,KAAK,UAAU,CAAC;EAE7B,IAAI,WAAW;EAEf,MAAM,oBAAoB;GACxB,IAAI,UACF;GAGF,WAAW;GACX,QAAQ,GAAG;EACb;EAQA,SAAS,QAAQ,kBAA4B,YAAY,CAAC;EAC1D,SAAS,aAAa,IAAI,KAAK,UAAU,WAAW;EACpD,SAAS,aAAa,IAAI,KAAK,SAAS,WAAW;CACrD;AACF"}

package/esm/http/middleware/idempotency.middleware.d.mts

@@ -1,5 +1,5 @@
 import { Middleware } from "../../router/types.mjs";
-//#region ../core/src/http/middleware/idempotency.middleware.d.ts
+//#region ../../packages/core/src/http/middleware/idempotency.middleware.d.ts
 /**
  * Options for the idempotency middleware.
  */

package/esm/http/middleware/idempotency.middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.middleware.d.mts","names":[],"sources":["../../../../../../../../core/src/http/middleware/idempotency.middleware.ts"],"mappings":";;;;;KAYY,kBAAA;EAAkB;;;EAI5B,GAAA;EAKA;;;;EAAA,cAAA;EAgBM;AA+CR;;;EA1DE,UAAA;EA0D6C;;;;AAAoC;EApDjF,OAAA;;;;;EAKA,MAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+Cc,qBAAA,CAAsB,OAAA,GAAS,kBAAA,GAA0B,UAAU"}
+{"version":3,"file":"idempotency.middleware.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/idempotency.middleware.ts"],"mappings":";;;;;KAYY,kBAAA;EAAkB;;;EAI5B,GAAA;EAKA;;;;EAAA,cAAA;EAgBM;AA+CR;;;EA1DE,UAAA;EA0D6C;;;;AAAoC;EApDjF,OAAA;;;;;EAKA,MAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+Cc,qBAAA,CAAsB,OAAA,GAAS,kBAAA,GAA0B,UAAU"}

package/esm/http/middleware/idempotency.middleware.mjs

@@ -5,7 +5,7 @@ import config from "@mongez/config";
 import { log } from "@warlock.js/logger";
 import { cache } from "@warlock.js/cache";
 
-//#region ../core/src/http/middleware/idempotency.middleware.ts
+//#region ../../packages/core/src/http/middleware/idempotency.middleware.ts
 const DEFAULT_METHODS = [
 	"POST",
 	"PUT",

package/esm/http/middleware/idempotency.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.middleware.mjs","names":[],"sources":["../../../../../../../../core/src/http/middleware/idempotency.middleware.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\nimport { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from \"./utils/idempotency-key\";\n\n/**\n * Options for the idempotency middleware.\n */\nexport type IdempotencyOptions = {\n  /**\n   * Cache TTL in seconds. Falls back to `http.idempotency.ttl`, then `86400` (24h).\n   */\n  ttl?: number;\n  /**\n   * TTL in seconds of the in-flight reservation held while the handler runs.\n   * Falls back to `http.idempotency.reservationTtl`, then `60`.\n   */\n  reservationTtl?: number;\n  /**\n   * Header name carrying the client's key. Falls back to\n   * `http.idempotency.headerName`, then `\"Idempotency-Key\"`.\n   */\n  headerName?: string;\n  /**\n   * HTTP methods eligible for idempotency. Falls back to\n   * `http.idempotency.methods`, then `[\"POST\",\"PUT\",\"PATCH\",\"DELETE\"]`.\n   * Safe methods (GET/HEAD) are skipped regardless.\n   */\n  methods?: string[];\n  /**\n   * Cache driver name. Falls back to `http.idempotency.driver`, then the\n   * default driver of the cache manager.\n   */\n  driver?: string;\n};\n\ntype CachedResponse = {\n  status: number;\n  body: unknown;\n  bodyHash: string;\n  contentType?: string;\n};\n\ntype InFlightReservation = {\n  state: \"in-flight\";\n  startedAt: number;\n};\n\nconst DEFAULT_METHODS = [\"POST\", \"PUT\", \"PATCH\", \"DELETE\"];\n\n/**\n * Dedupe non-idempotent writes by an `Idempotency-Key` header — same key,\n * same body, within TTL → cached replay; same key, different body → 422\n * `IdempotencyKeyConflict`.\n *\n * **Must run after `authMiddleware`** — the cache key is scoped per-user\n * (`idem:{userType}:{userId}:{key}`) so user A can't replay user B's key.\n * Anonymous requests fall back to IP scope.\n *\n * The replay sets `Idempotent-Replay: true` on the response for easy\n * client-side / observability detection.\n *\n * Eligible methods default to POST/PUT/PATCH/DELETE. GET/HEAD pass through\n * even with the header set (RFC: safe methods are already idempotent).\n *\n * @example\n * import { authMiddleware } from \"@warlock.js/auth\";\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/orders\", createOrderController, {\n *   middleware: [authMiddleware(\"client\"), middleware.idempotency()],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     authMiddleware(\"client\"),\n *     middleware.idempotency({ ttl: 60 * 60 }), // 1h is enough for client retries\n *   ],\n * });\n */\nexport function idempotencyMiddleware(options: IdempotencyOptions = {}): Middleware {\n  return async ({ request, response }) => {\n    const headerName =\n      options.headerName || config.get(\"http.idempotency.headerName\", \"Idempotency-Key\");\n    const methods = options.methods || config.get(\"http.idempotency.methods\", DEFAULT_METHODS);\n    const ttl = options.ttl || config.get(\"http.idempotency.ttl\", 86400);\n    const reservationTtl =\n      options.reservationTtl || config.get(\"http.idempotency.reservationTtl\", 60);\n    const driverName = options.driver || config.get(\"http.idempotency.driver\");\n\n    if (!methods.includes(request.method.toUpperCase())) return;\n\n    const idempotencyKey = request.header(headerName.toLowerCase());\n\n    if (!idempotencyKey) return;\n\n    if (!isValidIdempotencyKey(idempotencyKey)) {\n      return response.badRequest({\n        error: t(\"http.idempotencyKeyInvalid\"),\n        errorCode: HttpErrorCodes.IdempotencyKeyInvalid,\n      });\n    }\n\n    const cacheDriver = driverName ? await cache.use(driverName) : cache;\n    const cacheKey = buildIdempotencyCacheKey(request, idempotencyKey);\n    const bodyHash = hashBody(request.body);\n\n    const respondToExisting = (existing: CachedResponse | InFlightReservation | undefined | null) => {\n      if (!existing || (existing as InFlightReservation).state === \"in-flight\") {\n        response.header(\"Retry-After\", \"1\");\n\n        return response.conflict({\n          error: \"A request with this Idempotency-Key is already in progress\",\n          errorCode: HttpErrorCodes.IdempotencyKeyConflict,\n        });\n      }\n\n      const cached = existing as CachedResponse;\n\n      if (cached.bodyHash !== bodyHash) {\n        return response.unprocessableEntity({\n          error: t(\"http.idempotencyKeyConflict\"),\n          errorCode: HttpErrorCodes.IdempotencyKeyConflict,\n        });\n      }\n\n      response.header(\"Idempotent-Replay\", \"true\");\n\n      return response.replay({\n        status: cached.status,\n        body: cached.body,\n        contentType: cached.contentType,\n      });\n    };\n\n    // Fast path: a finished (or in-flight) request is already recorded.\n    let existing: CachedResponse | InFlightReservation | null = null;\n\n    try {\n      existing = (await cacheDriver.get(cacheKey)) as CachedResponse | InFlightReservation | null;\n    } catch (error) {\n      // The cache is an optimisation of idempotency, not a gate on writes:\n      // when it is down, fail open (the handler runs) and log it.\n      log.error(\"idempotency-middleware\", \"get\", error);\n    }\n\n    if (existing) return respondToExisting(existing);\n\n    // Reserve the key atomically before the handler runs, so concurrent\n    // requests with the same key can't both execute it.\n    try {\n      const reservation = (await cacheDriver.set(\n        cacheKey,\n        { state: \"in-flight\", startedAt: Date.now() } satisfies InFlightReservation,\n        { onConflict: \"create\", ttl: reservationTtl },\n      )) as { wasSet?: boolean; existing?: CachedResponse | InFlightReservation } | undefined;\n\n      if (reservation && reservation.wasSet === false) {\n        return respondToExisting(reservation.existing);\n      }\n    } catch (error) {\n      log.error(\"idempotency-middleware\", \"reserve\", error);\n    }\n\n    response.onSent((sentResponse: Response) => {\n      // Don't cache server errors — clients should be able to retry past a 5xx.\n      // 4xx are deterministic outcomes of the request, so caching is fine.\n      // Free the reservation so a retry can run.\n      if (sentResponse.statusCode >= 500) {\n        // Wrapped so a synchronous throw is caught as well as a rejection.\n        Promise.resolve()\n          .then(() => cacheDriver.remove(cacheKey))\n          .catch((error: unknown) => {\n            log.error(\"idempotency-middleware\", \"remove\", error);\n          });\n\n        return;\n      }\n\n      const sentContentType = sentResponse.contentType;\n\n      // `set` is fire-and-forget inside `onSent`; without a `.catch` a rejected\n      // write (e.g. Redis down) would surface as an unhandledRejection.\n      cacheDriver\n        .set(\n          cacheKey,\n          {\n            status: sentResponse.statusCode,\n            body: sentResponse.parsedBody,\n            bodyHash,\n            contentType: typeof sentContentType === \"string\" ? sentContentType : undefined,\n          },\n          ttl,\n        )\n        .catch((error: unknown) => {\n          log.error(\"idempotency-middleware\", \"set\", error);\n        });\n    });\n  };\n}\n"],"mappings":";;;;;;;;AAoDA,MAAM,kBAAkB;CAAC;CAAQ;CAAO;CAAS;AAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCzD,SAAgB,sBAAsB,UAA8B,CAAC,GAAe;CAClF,OAAO,OAAO,EAAE,SAAS,eAAe;EACtC,MAAM,aACJ,QAAQ,cAAc,OAAO,IAAI,+BAA+B,iBAAiB;EACnF,MAAM,UAAU,QAAQ,WAAW,OAAO,IAAI,4BAA4B,eAAe;EACzF,MAAM,MAAM,QAAQ,OAAO,OAAO,IAAI,wBAAwB,KAAK;EACnE,MAAM,iBACJ,QAAQ,kBAAkB,OAAO,IAAI,mCAAmC,EAAE;EAC5E,MAAM,aAAa,QAAQ,UAAU,OAAO,IAAI,yBAAyB;EAEzE,IAAI,CAAC,QAAQ,SAAS,QAAQ,OAAO,YAAY,CAAC,GAAG;EAErD,MAAM,iBAAiB,QAAQ,OAAO,WAAW,YAAY,CAAC;EAE9D,IAAI,CAAC,gBAAgB;EAErB,IAAI,CAAC,sBAAsB,cAAc,GACvC,OAAO,SAAS,WAAW;GACzB,OAAO,EAAE,4BAA4B;GACrC;EACF,CAAC;EAGH,MAAM,cAAc,aAAa,MAAM,MAAM,IAAI,UAAU,IAAI;EAC/D,MAAM,WAAW,yBAAyB,SAAS,cAAc;EACjE,MAAM,WAAW,SAAS,QAAQ,IAAI;EAEtC,MAAM,qBAAqB,aAAsE;GAC/F,IAAI,CAAC,YAAa,SAAiC,UAAU,aAAa;IACxE,SAAS,OAAO,eAAe,GAAG;IAElC,OAAO,SAAS,SAAS;KACvB,OAAO;KACP;IACF,CAAC;GACH;GAEA,MAAM,SAAS;GAEf,IAAI,OAAO,aAAa,UACtB,OAAO,SAAS,oBAAoB;IAClC,OAAO,EAAE,6BAA6B;IACtC;GACF,CAAC;GAGH,SAAS,OAAO,qBAAqB,MAAM;GAE3C,OAAO,SAAS,OAAO;IACrB,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,aAAa,OAAO;GACtB,CAAC;EACH;EAGA,IAAI,WAAwD;EAE5D,IAAI;GACF,WAAY,MAAM,YAAY,IAAI,QAAQ;EAC5C,SAAS,OAAO;GAGd,IAAI,MAAM,0BAA0B,OAAO,KAAK;EAClD;EAEA,IAAI,UAAU,OAAO,kBAAkB,QAAQ;EAI/C,IAAI;GACF,MAAM,cAAe,MAAM,YAAY,IACrC,UACA;IAAE,OAAO;IAAa,WAAW,KAAK,IAAI;GAAE,GAC5C;IAAE,YAAY;IAAU,KAAK;GAAe,CAC9C;GAEA,IAAI,eAAe,YAAY,WAAW,OACxC,OAAO,kBAAkB,YAAY,QAAQ;EAEjD,SAAS,OAAO;GACd,IAAI,MAAM,0BAA0B,WAAW,KAAK;EACtD;EAEA,SAAS,QAAQ,iBAA2B;GAI1C,IAAI,aAAa,cAAc,KAAK;IAElC,QAAQ,QAAQ,CAAC,CACd,WAAW,YAAY,OAAO,QAAQ,CAAC,CAAC,CACxC,OAAO,UAAmB;KACzB,IAAI,MAAM,0BAA0B,UAAU,KAAK;IACrD,CAAC;IAEH;GACF;GAEA,MAAM,kBAAkB,aAAa;GAIrC,YACG,IACC,UACA;IACE,QAAQ,aAAa;IACrB,MAAM,aAAa;IACnB;IACA,aAAa,OAAO,oBAAoB,WAAW,kBAAkB;GACvE,GACA,GACF,CAAC,CACA,OAAO,UAAmB;IACzB,IAAI,MAAM,0BAA0B,OAAO,KAAK;GAClD,CAAC;EACL,CAAC;CACH;AACF"}
+{"version":3,"file":"idempotency.middleware.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/idempotency.middleware.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Response } from \"../response\";\nimport { t } from \"./inject-request-context\";\nimport { buildIdempotencyCacheKey, hashBody, isValidIdempotencyKey } from \"./utils/idempotency-key\";\n\n/**\n * Options for the idempotency middleware.\n */\nexport type IdempotencyOptions = {\n  /**\n   * Cache TTL in seconds. Falls back to `http.idempotency.ttl`, then `86400` (24h).\n   */\n  ttl?: number;\n  /**\n   * TTL in seconds of the in-flight reservation held while the handler runs.\n   * Falls back to `http.idempotency.reservationTtl`, then `60`.\n   */\n  reservationTtl?: number;\n  /**\n   * Header name carrying the client's key. Falls back to\n   * `http.idempotency.headerName`, then `\"Idempotency-Key\"`.\n   */\n  headerName?: string;\n  /**\n   * HTTP methods eligible for idempotency. Falls back to\n   * `http.idempotency.methods`, then `[\"POST\",\"PUT\",\"PATCH\",\"DELETE\"]`.\n   * Safe methods (GET/HEAD) are skipped regardless.\n   */\n  methods?: string[];\n  /**\n   * Cache driver name. Falls back to `http.idempotency.driver`, then the\n   * default driver of the cache manager.\n   */\n  driver?: string;\n};\n\ntype CachedResponse = {\n  status: number;\n  body: unknown;\n  bodyHash: string;\n  contentType?: string;\n};\n\ntype InFlightReservation = {\n  state: \"in-flight\";\n  startedAt: number;\n};\n\nconst DEFAULT_METHODS = [\"POST\", \"PUT\", \"PATCH\", \"DELETE\"];\n\n/**\n * Dedupe non-idempotent writes by an `Idempotency-Key` header — same key,\n * same body, within TTL → cached replay; same key, different body → 422\n * `IdempotencyKeyConflict`.\n *\n * **Must run after `authMiddleware`** — the cache key is scoped per-user\n * (`idem:{userType}:{userId}:{key}`) so user A can't replay user B's key.\n * Anonymous requests fall back to IP scope.\n *\n * The replay sets `Idempotent-Replay: true` on the response for easy\n * client-side / observability detection.\n *\n * Eligible methods default to POST/PUT/PATCH/DELETE. GET/HEAD pass through\n * even with the header set (RFC: safe methods are already idempotent).\n *\n * @example\n * import { authMiddleware } from \"@warlock.js/auth\";\n * import { middleware } from \"@warlock.js/core\";\n *\n * router.post(\"/orders\", createOrderController, {\n *   middleware: [authMiddleware(\"client\"), middleware.idempotency()],\n * });\n *\n * router.post(\"/ai/summarize\", summarizeController, {\n *   middleware: [\n *     authMiddleware(\"client\"),\n *     middleware.idempotency({ ttl: 60 * 60 }), // 1h is enough for client retries\n *   ],\n * });\n */\nexport function idempotencyMiddleware(options: IdempotencyOptions = {}): Middleware {\n  return async ({ request, response }) => {\n    const headerName =\n      options.headerName || config.get(\"http.idempotency.headerName\", \"Idempotency-Key\");\n    const methods = options.methods || config.get(\"http.idempotency.methods\", DEFAULT_METHODS);\n    const ttl = options.ttl || config.get(\"http.idempotency.ttl\", 86400);\n    const reservationTtl =\n      options.reservationTtl || config.get(\"http.idempotency.reservationTtl\", 60);\n    const driverName = options.driver || config.get(\"http.idempotency.driver\");\n\n    if (!methods.includes(request.method.toUpperCase())) return;\n\n    const idempotencyKey = request.header(headerName.toLowerCase());\n\n    if (!idempotencyKey) return;\n\n    if (!isValidIdempotencyKey(idempotencyKey)) {\n      return response.badRequest({\n        error: t(\"http.idempotencyKeyInvalid\"),\n        errorCode: HttpErrorCodes.IdempotencyKeyInvalid,\n      });\n    }\n\n    const cacheDriver = driverName ? await cache.use(driverName) : cache;\n    const cacheKey = buildIdempotencyCacheKey(request, idempotencyKey);\n    const bodyHash = hashBody(request.body);\n\n    const respondToExisting = (\n      existing: CachedResponse | InFlightReservation | undefined | null,\n    ) => {\n      if (!existing || (existing as InFlightReservation).state === \"in-flight\") {\n        response.header(\"Retry-After\", \"1\");\n\n        return response.conflict({\n          error: \"A request with this Idempotency-Key is already in progress\",\n          errorCode: HttpErrorCodes.IdempotencyKeyConflict,\n        });\n      }\n\n      const cached = existing as CachedResponse;\n\n      if (cached.bodyHash !== bodyHash) {\n        return response.unprocessableEntity({\n          error: t(\"http.idempotencyKeyConflict\"),\n          errorCode: HttpErrorCodes.IdempotencyKeyConflict,\n        });\n      }\n\n      response.header(\"Idempotent-Replay\", \"true\");\n\n      return response.replay({\n        status: cached.status,\n        body: cached.body,\n        contentType: cached.contentType,\n      });\n    };\n\n    // Fast path: a finished (or in-flight) request is already recorded.\n    let existing: CachedResponse | InFlightReservation | null = null;\n\n    try {\n      existing = (await cacheDriver.get(cacheKey)) as CachedResponse | InFlightReservation | null;\n    } catch (error) {\n      // The cache is an optimisation of idempotency, not a gate on writes:\n      // when it is down, fail open (the handler runs) and log it.\n      log.error(\"idempotency-middleware\", \"get\", error);\n    }\n\n    if (existing) return respondToExisting(existing);\n\n    // Reserve the key atomically before the handler runs, so concurrent\n    // requests with the same key can't both execute it.\n    try {\n      const reservation = (await cacheDriver.set(\n        cacheKey,\n        { state: \"in-flight\", startedAt: Date.now() } satisfies InFlightReservation,\n        { onConflict: \"create\", ttl: reservationTtl },\n      )) as { wasSet?: boolean; existing?: CachedResponse | InFlightReservation } | undefined;\n\n      if (reservation && reservation.wasSet === false) {\n        return respondToExisting(reservation.existing);\n      }\n    } catch (error) {\n      log.error(\"idempotency-middleware\", \"reserve\", error);\n    }\n\n    response.onSent((sentResponse: Response) => {\n      // Don't cache server errors — clients should be able to retry past a 5xx.\n      // 4xx are deterministic outcomes of the request, so caching is fine.\n      // Free the reservation so a retry can run.\n      if (sentResponse.statusCode >= 500) {\n        // Wrapped so a synchronous throw is caught as well as a rejection.\n        Promise.resolve()\n          .then(() => cacheDriver.remove(cacheKey))\n          .catch((error: unknown) => {\n            log.error(\"idempotency-middleware\", \"remove\", error);\n          });\n\n        return;\n      }\n\n      const sentContentType = sentResponse.contentType;\n\n      // `set` is fire-and-forget inside `onSent`; without a `.catch` a rejected\n      // write (e.g. Redis down) would surface as an unhandledRejection.\n      cacheDriver\n        .set(\n          cacheKey,\n          {\n            status: sentResponse.statusCode,\n            body: sentResponse.parsedBody,\n            bodyHash,\n            contentType: typeof sentContentType === \"string\" ? sentContentType : undefined,\n          },\n          ttl,\n        )\n        .catch((error: unknown) => {\n          log.error(\"idempotency-middleware\", \"set\", error);\n        });\n    });\n  };\n}\n"],"mappings":";;;;;;;;AAoDA,MAAM,kBAAkB;CAAC;CAAQ;CAAO;CAAS;AAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCzD,SAAgB,sBAAsB,UAA8B,CAAC,GAAe;CAClF,OAAO,OAAO,EAAE,SAAS,eAAe;EACtC,MAAM,aACJ,QAAQ,cAAc,OAAO,IAAI,+BAA+B,iBAAiB;EACnF,MAAM,UAAU,QAAQ,WAAW,OAAO,IAAI,4BAA4B,eAAe;EACzF,MAAM,MAAM,QAAQ,OAAO,OAAO,IAAI,wBAAwB,KAAK;EACnE,MAAM,iBACJ,QAAQ,kBAAkB,OAAO,IAAI,mCAAmC,EAAE;EAC5E,MAAM,aAAa,QAAQ,UAAU,OAAO,IAAI,yBAAyB;EAEzE,IAAI,CAAC,QAAQ,SAAS,QAAQ,OAAO,YAAY,CAAC,GAAG;EAErD,MAAM,iBAAiB,QAAQ,OAAO,WAAW,YAAY,CAAC;EAE9D,IAAI,CAAC,gBAAgB;EAErB,IAAI,CAAC,sBAAsB,cAAc,GACvC,OAAO,SAAS,WAAW;GACzB,OAAO,EAAE,4BAA4B;GACrC;EACF,CAAC;EAGH,MAAM,cAAc,aAAa,MAAM,MAAM,IAAI,UAAU,IAAI;EAC/D,MAAM,WAAW,yBAAyB,SAAS,cAAc;EACjE,MAAM,WAAW,SAAS,QAAQ,IAAI;EAEtC,MAAM,qBACJ,aACG;GACH,IAAI,CAAC,YAAa,SAAiC,UAAU,aAAa;IACxE,SAAS,OAAO,eAAe,GAAG;IAElC,OAAO,SAAS,SAAS;KACvB,OAAO;KACP;IACF,CAAC;GACH;GAEA,MAAM,SAAS;GAEf,IAAI,OAAO,aAAa,UACtB,OAAO,SAAS,oBAAoB;IAClC,OAAO,EAAE,6BAA6B;IACtC;GACF,CAAC;GAGH,SAAS,OAAO,qBAAqB,MAAM;GAE3C,OAAO,SAAS,OAAO;IACrB,QAAQ,OAAO;IACf,MAAM,OAAO;IACb,aAAa,OAAO;GACtB,CAAC;EACH;EAGA,IAAI,WAAwD;EAE5D,IAAI;GACF,WAAY,MAAM,YAAY,IAAI,QAAQ;EAC5C,SAAS,OAAO;GAGd,IAAI,MAAM,0BAA0B,OAAO,KAAK;EAClD;EAEA,IAAI,UAAU,OAAO,kBAAkB,QAAQ;EAI/C,IAAI;GACF,MAAM,cAAe,MAAM,YAAY,IACrC,UACA;IAAE,OAAO;IAAa,WAAW,KAAK,IAAI;GAAE,GAC5C;IAAE,YAAY;IAAU,KAAK;GAAe,CAC9C;GAEA,IAAI,eAAe,YAAY,WAAW,OACxC,OAAO,kBAAkB,YAAY,QAAQ;EAEjD,SAAS,OAAO;GACd,IAAI,MAAM,0BAA0B,WAAW,KAAK;EACtD;EAEA,SAAS,QAAQ,iBAA2B;GAI1C,IAAI,aAAa,cAAc,KAAK;IAElC,QAAQ,QAAQ,CAAC,CACd,WAAW,YAAY,OAAO,QAAQ,CAAC,CAAC,CACxC,OAAO,UAAmB;KACzB,IAAI,MAAM,0BAA0B,UAAU,KAAK;IACrD,CAAC;IAEH;GACF;GAEA,MAAM,kBAAkB,aAAa;GAIrC,YACG,IACC,UACA;IACE,QAAQ,aAAa;IACrB,MAAM,aAAa;IACnB;IACA,aAAa,OAAO,oBAAoB,WAAW,kBAAkB;GACvE,GACA,GACF,CAAC,CACA,OAAO,UAAmB;IACzB,IAAI,MAAM,0BAA0B,OAAO,KAAK;GAClD,CAAC;EACL,CAAC;CACH;AACF"}

package/esm/http/middleware/inject-request-context.d.mts

@@ -2,7 +2,7 @@ import { Response } from "../response.mjs";
 import { Request } from "../request.mjs";
 import { ReturnedResponse } from "../types.mjs";
 
-//#region ../core/src/http/middleware/inject-request-context.d.ts
+//#region ../../packages/core/src/http/middleware/inject-request-context.d.ts
 /**
  * Create request store and execute middleware + handler
  *