@warlock.js/core 5.35.0 → 5.37.0

package/esm/release/types.d.mts

@@ -0,0 +1,102 @@
+//#region ../../packages/core/src/release/types.d.ts
+/**
+ * One named command in the release gate. Checks run in order and the gate
+ * stops at the first one that fails.
+ */
+export type ReleaseCheck = {
+  /** Name shown in the report and recorded in the manifest */
+  name: string;
+  /** Shell command, run inside the candidate's frozen source */
+  command: string;
+  /** Kill the check after this many milliseconds. @default 1_800_000 */
+  timeoutMs?: number;
+};
+/**
+ * Release settings, read from the `release` key of `warlock.config.ts`.
+ *
+ * Every field is optional; the defaults describe a plain Warlock app that
+ * builds into `dist`.
+ */
+export type ReleaseConfig = {
+  /**
+   * Base directory for releases and the `current` / `previous` pointers,
+   * relative to the project root.
+   *
+   * @default ".warlock"
+   */
+  directory?: string;
+  /**
+   * Build output directory, relative to the candidate's source.
+   *
+   * @default "dist"
+   */
+  distDir?: string;
+  /**
+   * Extra files or directories (relative to the candidate's source) copied
+   * next to the build output when staging. `package.json` and the lockfile
+   * are always copied.
+   */
+  include?: string[];
+  /**
+   * Link the project's `node_modules` into the frozen source so gate checks
+   * and the build can run without a second install.
+   *
+   * @default true
+   */
+  linkNodeModules?: boolean;
+  /** The ordered gate checks. Replaces the defaults when set. */
+  gate?: {
+    checks?: ReleaseCheck[];
+  };
+  /** Migration proof settings */
+  migrations?: {
+    /**
+     * Named targets. `--target <name>` applies the target's `env` to this
+     * process before the database connects, so the proof runs against that
+     * database instead of the one the local environment points to.
+     */
+    targets?: Record<string, {
+      env?: Record<string, string>;
+    }>;
+    /**
+     * Migration names that must be the ones executed, in order. Defaults to
+     * the pending set computed before the run.
+     */
+    expected?: string[];
+    /** Tables or collections that must exist after the run. */
+    expectedTables?: string[];
+  };
+  /**
+   * Command that makes the running application pick up the new release.
+   * Warlock never restarts anything on its own: leave it unset and activation
+   * only switches the pointer.
+   *
+   * It runs through the shell with `WARLOCK_RELEASE_ID`,
+   * `WARLOCK_RELEASE_DIR` and `WARLOCK_RELEASE_CURRENT` in its environment.
+   */
+  restart?: {
+    command?: string;
+    timeoutMs?: number;
+  };
+  /** Post-activation health verification */
+  verify?: {
+    /** Health URL. Required by `release verify`. */
+    url?: string;
+    /** @default 200 */
+    expectedStatus?: number;
+    /** Attempts after the first one. @default 5 */
+    retries?: number;
+    /** Wait between attempts in milliseconds. @default 2000 */
+    intervalMs?: number;
+    /** Per-request timeout in milliseconds. @default 5000 */
+    timeoutMs?: number;
+    /** Dotted JSON path of the reported version. @default "version" */
+    versionPath?: string;
+    /** Dotted JSON path of the reported commit. @default "commit" */
+    commitPath?: string;
+    /** Which reported fields must match the active release. @default ["version", "commit"] */
+    match?: Array<"version" | "commit">;
+  };
+};
+//#endregion
+//# sourceMappingURL=types.d.mts.map

package/esm/release/types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/release/types.ts"],"mappings":";;;;;YAIY;;EAEV;;EAEA;;EAEA;;;;;;;;YASU;;;;;;;EAOV;;;;;;EAMA;;;;;;EAMA;;;;;;;EAOA;;EAEA;IAAS,SAAS;;;EAElB;;;;;;IAME,UAAU;MAAiB,MAAM;;;;;;IAKjC;;IAEA;;;;;;;;;;EAUF;IAAY;IAAkB;;;EAE9B;;IAEE;;IAEA;;IAEA;;IAEA;;IAEA;;IAEA;;IAEA;;IAEA,QAAQ"}

package/esm/release/verify.mjs

@@ -0,0 +1,94 @@
+import { appendLog, readManifest, readPointer, writeManifest } from "./store.mjs";
+
+//#region ../../packages/core/src/release/verify.ts
+function readPath(value, dotted) {
+	let current = value;
+	for (const key of dotted.split(".")) {
+		if (typeof current !== "object" || current === null) return void 0;
+		current = current[key];
+	}
+	return current;
+}
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/** Why one attempt failed, or `null` when it matched the release. */
+async function attempt(context, url, expected) {
+	const { verify } = context.config;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), verify.timeoutMs);
+	try {
+		const response = await fetch(url, { signal: controller.signal });
+		if (response.status !== verify.expectedStatus) return `status ${response.status}, expected ${verify.expectedStatus}`;
+		if (verify.match.length === 0) return null;
+		let body;
+		try {
+			body = await response.json();
+		} catch {
+			return "the response is not JSON, so the version cannot be compared";
+		}
+		for (const field of verify.match) {
+			const reported = readPath(body, field === "version" ? verify.versionPath : verify.commitPath);
+			const wanted = expected[field];
+			if (reported === void 0) return `the response reports no ${field} (looked at "${field === "version" ? verify.versionPath : verify.commitPath}")`;
+			if (!(field === "commit" && typeof reported === "string" ? reported.length >= 7 && wanted.startsWith(reported) : reported === wanted)) return `reported ${field} ${String(reported)}, expected ${wanted}`;
+		}
+		return null;
+	} catch (error) {
+		return error.name === "AbortError" ? `no response within ${verify.timeoutMs}ms` : error.message;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/**
+* GET the health URL until it answers with the expected status and reports
+* the active release's version and commit, retrying with a pause between
+* attempts. The outcome is recorded in the active release's manifest.
+*
+* @example
+* const result = await verifyRelease(context);
+*/
+async function verifyRelease(context) {
+	const { verify } = context.config;
+	const id = await readPointer(context, "current");
+	if (!id) throw new Error("No active release to verify.");
+	if (!verify.url) throw new Error("Set release.verify.url to the health URL first.");
+	const manifest = await readManifest(context, id);
+	let reason = "not attempted";
+	let attempts = 0;
+	for (let index = 0; index <= verify.retries; index++) {
+		if (index > 0) await sleep(verify.intervalMs);
+		attempts += 1;
+		reason = await attempt(context, verify.url, {
+			version: manifest.version,
+			commit: manifest.commit
+		});
+		if (reason === null) break;
+	}
+	const ok = reason === null;
+	await writeManifest(context, {
+		...manifest,
+		verification: {
+			at: context.now().toISOString(),
+			ok,
+			attempts,
+			...ok ? {} : { reason: reason ?? void 0 }
+		}
+	});
+	await appendLog(context, {
+		event: "verify",
+		release: id,
+		ok,
+		detail: ok ? `${attempts} attempt(s)` : reason ?? void 0
+	});
+	return {
+		id,
+		ok,
+		attempts,
+		...ok ? {} : { reason: reason ?? void 0 }
+	};
+}
+
+//#endregion
+export { verifyRelease };
+//# sourceMappingURL=verify.mjs.map

package/esm/release/verify.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/verify.ts"],"sourcesContent":["import { appendLog, readManifest, readPointer, writeManifest, type ReleaseContext } from \"./store\";\n\nexport type VerifyResult = {\n  id: string;\n  ok: boolean;\n  attempts: number;\n  reason?: string;\n};\n\nfunction readPath(value: unknown, dotted: string): unknown {\n  let current: unknown = value;\n\n  for (const key of dotted.split(\".\")) {\n    if (typeof current !== \"object\" || current === null) return undefined;\n    current = (current as Record<string, unknown>)[key];\n  }\n\n  return current;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Why one attempt failed, or `null` when it matched the release. */\nasync function attempt(\n  context: ReleaseContext,\n  url: string,\n  expected: { version: string; commit: string },\n): Promise<string | null> {\n  const { verify } = context.config;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), verify.timeoutMs);\n\n  try {\n    const response = await fetch(url, { signal: controller.signal });\n\n    if (response.status !== verify.expectedStatus) {\n      return `status ${response.status}, expected ${verify.expectedStatus}`;\n    }\n\n    if (verify.match.length === 0) return null;\n\n    let body: unknown;\n\n    try {\n      body = await response.json();\n    } catch {\n      return \"the response is not JSON, so the version cannot be compared\";\n    }\n\n    for (const field of verify.match) {\n      const reported = readPath(body, field === \"version\" ? verify.versionPath : verify.commitPath);\n      const wanted = expected[field];\n\n      if (reported === undefined) {\n        return `the response reports no ${field} (looked at \"${\n          field === \"version\" ? verify.versionPath : verify.commitPath\n        }\")`;\n      }\n\n      // A reported short commit counts when it is a prefix of the full one.\n      const matches =\n        field === \"commit\" && typeof reported === \"string\"\n          ? reported.length >= 7 && wanted.startsWith(reported)\n          : reported === wanted;\n\n      if (!matches) return `reported ${field} ${String(reported)}, expected ${wanted}`;\n    }\n\n    return null;\n  } catch (error) {\n    return (error as Error).name === \"AbortError\"\n      ? `no response within ${verify.timeoutMs}ms`\n      : (error as Error).message;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * GET the health URL until it answers with the expected status and reports\n * the active release's version and commit, retrying with a pause between\n * attempts. The outcome is recorded in the active release's manifest.\n *\n * @example\n * const result = await verifyRelease(context);\n */\nexport async function verifyRelease(context: ReleaseContext): Promise<VerifyResult> {\n  const { verify } = context.config;\n  const id = await readPointer(context, \"current\");\n\n  if (!id) throw new Error(\"No active release to verify.\");\n  if (!verify.url) throw new Error(\"Set release.verify.url to the health URL first.\");\n\n  const manifest = await readManifest(context, id);\n  let reason: string | null = \"not attempted\";\n  let attempts = 0;\n\n  for (let index = 0; index <= verify.retries; index++) {\n    if (index > 0) await sleep(verify.intervalMs);\n\n    attempts += 1;\n    reason = await attempt(context, verify.url, {\n      version: manifest.version,\n      commit: manifest.commit,\n    });\n\n    if (reason === null) break;\n  }\n\n  const ok = reason === null;\n\n  await writeManifest(context, {\n    ...manifest,\n    verification: {\n      at: context.now().toISOString(),\n      ok,\n      attempts,\n      ...(ok ? {} : { reason: reason ?? undefined }),\n    },\n  });\n  await appendLog(context, {\n    event: \"verify\",\n    release: id,\n    ok,\n    detail: ok ? `${attempts} attempt(s)` : (reason ?? undefined),\n  });\n\n  return { id, ok, attempts, ...(ok ? {} : { reason: reason ?? undefined }) };\n}\n"],"mappings":";;;AASA,SAAS,SAAS,OAAgB,QAAyB;CACzD,IAAI,UAAmB;CAEvB,KAAK,MAAM,OAAO,OAAO,MAAM,GAAG,GAAG;EACnC,IAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO;EAC5D,UAAW,QAAoC;CACjD;CAEA,OAAO;AACT;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;;AAGA,eAAe,QACb,SACA,KACA,UACwB;CACxB,MAAM,EAAE,WAAW,QAAQ;CAC3B,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,OAAO,SAAS;CAEnE,IAAI;EACF,MAAM,WAAW,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,OAAO,CAAC;EAE/D,IAAI,SAAS,WAAW,OAAO,gBAC7B,OAAO,UAAU,SAAS,OAAO,aAAa,OAAO;EAGvD,IAAI,OAAO,MAAM,WAAW,GAAG,OAAO;EAEtC,IAAI;EAEJ,IAAI;GACF,OAAO,MAAM,SAAS,KAAK;EAC7B,QAAQ;GACN,OAAO;EACT;EAEA,KAAK,MAAM,SAAS,OAAO,OAAO;GAChC,MAAM,WAAW,SAAS,MAAM,UAAU,YAAY,OAAO,cAAc,OAAO,UAAU;GAC5F,MAAM,SAAS,SAAS;GAExB,IAAI,aAAa,QACf,OAAO,2BAA2B,MAAM,eACtC,UAAU,YAAY,OAAO,cAAc,OAAO,WACnD;GASH,IAAI,EAJF,UAAU,YAAY,OAAO,aAAa,WACtC,SAAS,UAAU,KAAK,OAAO,WAAW,QAAQ,IAClD,aAAa,SAEL,OAAO,YAAY,MAAM,GAAG,OAAO,QAAQ,EAAE,aAAa;EAC1E;EAEA,OAAO;CACT,SAAS,OAAO;EACd,OAAQ,MAAgB,SAAS,eAC7B,sBAAsB,OAAO,UAAU,MACtC,MAAgB;CACvB,UAAU;EACR,aAAa,KAAK;CACpB;AACF;;;;;;;;;AAUA,eAAsB,cAAc,SAAgD;CAClF,MAAM,EAAE,WAAW,QAAQ;CAC3B,MAAM,KAAK,MAAM,YAAY,SAAS,SAAS;CAE/C,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,8BAA8B;CACvD,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,iDAAiD;CAElF,MAAM,WAAW,MAAM,aAAa,SAAS,EAAE;CAC/C,IAAI,SAAwB;CAC5B,IAAI,WAAW;CAEf,KAAK,IAAI,QAAQ,GAAG,SAAS,OAAO,SAAS,SAAS;EACpD,IAAI,QAAQ,GAAG,MAAM,MAAM,OAAO,UAAU;EAE5C,YAAY;EACZ,SAAS,MAAM,QAAQ,SAAS,OAAO,KAAK;GAC1C,SAAS,SAAS;GAClB,QAAQ,SAAS;EACnB,CAAC;EAED,IAAI,WAAW,MAAM;CACvB;CAEA,MAAM,KAAK,WAAW;CAEtB,MAAM,cAAc,SAAS;EAC3B,GAAG;EACH,cAAc;GACZ,IAAI,QAAQ,IAAI,CAAC,CAAC,YAAY;GAC9B;GACA;GACA,GAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,UAAU,OAAU;EAC9C;CACF,CAAC;CACD,MAAM,UAAU,SAAS;EACvB,OAAO;EACP,SAAS;EACT;EACA,QAAQ,KAAK,GAAG,SAAS,eAAgB,UAAU;CACrD,CAAC;CAED,OAAO;EAAE;EAAI;EAAI;EAAU,GAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,UAAU,OAAU;CAAG;AAC5E"}

package/esm/router/index.d.mts

@@ -6,5 +6,5 @@ import { matchesDerivedRouteName, routeNameMethodSuffix } from "./route-name-met
 import { RouteNameTakenError } from "./route-name-taken-error.mjs";
 import { RouteRegistry } from "./route-registry.mjs";
 import { Router, router } from "./router.mjs";
-import { AUTH_GUARD_MARKER, isAuthGuardMiddleware, isUnguardedMutatingRoute, markAuthGuard, reportUnguardedMutatingRoutes, resetUnguardedRouteReports } from "./unguarded-route-diagnostics.mjs";
-export { AUTH_GUARD_MARKER, GroupedRoutesOptions, HttpContext, Middleware, MiddlewareResponse, NamedApiRoute, NamedApiRoutesOptions, PartialPick, PositionalHandlerSuspect, RequestControllerContract, RequestHandler, RequestHandlerType, RequestHandlerValidation, RequestMethod, ResourceMethod, RestfulMiddleware, Route, RouteNameTakenError, RouteOptions, RouteRateLimitOptions, RouteRegistry, RouteResource, Router, RouterGroupCallback, RouterStacks, StaticMountOptions, ValidationFailureContext, ValidationFailureHandler, ValidationFailureResponse, clearPositionalHandlerSuspects, describePositionalHandlerSuspect, forgetPositionalHandlerSuspects, inspectHandlerSignature, isAuthGuardMiddleware, isUnguardedMutatingRoute, listPositionalHandlerSuspects, looksLikePositionalHandler, markAuthGuard, matchesDerivedRouteName, normalizeRequestPath, normalizeRoutePath, reportPositionalHandlerSuspects, reportUnguardedMutatingRoutes, resetUnguardedRouteReports, routeNameMethodSuffix, router };
+import { AUTH_GUARD_MARKER, isAuthGuardMiddleware, isRequiredGuardRoute, isUnguardedMutatingRoute, markAuthGuard, reportUnguardedMutatingRoutes, resetUnguardedRouteReports } from "./unguarded-route-diagnostics.mjs";
+export { AUTH_GUARD_MARKER, GroupedRoutesOptions, HttpContext, Middleware, MiddlewareResponse, NamedApiRoute, NamedApiRoutesOptions, PartialPick, PositionalHandlerSuspect, RequestControllerContract, RequestHandler, RequestHandlerType, RequestHandlerValidation, RequestMethod, ResourceMethod, RestfulMiddleware, Route, RouteNameTakenError, RouteOptions, RouteRateLimitOptions, RouteRegistry, RouteResource, Router, RouterGroupCallback, RouterStacks, StaticMountOptions, ValidationFailureContext, ValidationFailureHandler, ValidationFailureResponse, clearPositionalHandlerSuspects, describePositionalHandlerSuspect, forgetPositionalHandlerSuspects, inspectHandlerSignature, isAuthGuardMiddleware, isRequiredGuardRoute, isUnguardedMutatingRoute, listPositionalHandlerSuspects, looksLikePositionalHandler, markAuthGuard, matchesDerivedRouteName, normalizeRequestPath, normalizeRoutePath, reportPositionalHandlerSuspects, reportUnguardedMutatingRoutes, resetUnguardedRouteReports, routeNameMethodSuffix, router };

package/esm/router/index.mjs

@@ -4,7 +4,7 @@ import { clearPositionalHandlerSuspects, describePositionalHandlerSuspect, forge
 import { matchesDerivedRouteName, routeNameMethodSuffix } from "./route-name-method-suffix.mjs";
 import { RouteNameTakenError } from "./route-name-taken-error.mjs";
 import { RouteRegistry } from "./route-registry.mjs";
-import { AUTH_GUARD_MARKER, isAuthGuardMiddleware, isUnguardedMutatingRoute, markAuthGuard, reportUnguardedMutatingRoutes, resetUnguardedRouteReports } from "./unguarded-route-diagnostics.mjs";
+import { AUTH_GUARD_MARKER, isAuthGuardMiddleware, isRequiredGuardRoute, isUnguardedMutatingRoute, markAuthGuard, reportUnguardedMutatingRoutes, resetUnguardedRouteReports } from "./unguarded-route-diagnostics.mjs";
 import { Router, router } from "./router.mjs";
 
-export { AUTH_GUARD_MARKER, RouteNameTakenError, RouteRegistry, Router, clearPositionalHandlerSuspects, describePositionalHandlerSuspect, forgetPositionalHandlerSuspects, inspectHandlerSignature, isAuthGuardMiddleware, isUnguardedMutatingRoute, listPositionalHandlerSuspects, looksLikePositionalHandler, markAuthGuard, matchesDerivedRouteName, normalizeRequestPath, normalizeRoutePath, reportPositionalHandlerSuspects, reportUnguardedMutatingRoutes, resetUnguardedRouteReports, routeNameMethodSuffix, router };
+export { AUTH_GUARD_MARKER, RouteNameTakenError, RouteRegistry, Router, clearPositionalHandlerSuspects, describePositionalHandlerSuspect, forgetPositionalHandlerSuspects, inspectHandlerSignature, isAuthGuardMiddleware, isRequiredGuardRoute, isUnguardedMutatingRoute, listPositionalHandlerSuspects, looksLikePositionalHandler, markAuthGuard, matchesDerivedRouteName, normalizeRequestPath, normalizeRoutePath, reportPositionalHandlerSuspects, reportUnguardedMutatingRoutes, resetUnguardedRouteReports, routeNameMethodSuffix, router };

package/esm/router/router.d.mts

@@ -221,6 +221,10 @@ export declare class Router {
    *
    * Names are the registered names, including method suffixes. `all` stays
    * intact as route metadata; consumers decide whether their use supports it.
+   * A route that opted out with `clientVisible: false` carries that flag so
+   * browser-facing consumers can leave it out. `sites` is present only on a
+   * route that declared some, and `guarded: true` only on a route with an auth
+   * guard in its middleware chain (group middleware included).
    */
   getNamedApiRoutes(options?: NamedApiRoutesOptions): readonly NamedApiRoute[];
   /**

package/esm/router/router.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/router.ts"],"mappings":";;;;;;qBAqKa;;;;UAIH;;;;;;;;;UAUA;;;;;UAMA;;;;;UAUA;;;;iBAKO;;;;YAKL;IACR,SAAS;IACT,WAAW;;;;;YAMH,gBAAgB,iBAAiB,QAAQ,QAAQ,QAAQ;;;;;YAOzD,QAAQ;;;;SASJ,eAAW;UAQlB;;;;EAOA,eAAe,WAAW,QAAQ,QAAQ,QAAQ;;;;EASlD,cAAc,WAAW,QAAQ,QAAQ,QAAQ;;;;EASjD,SAAS,cAAc,YAAY;;;;;;;;;;;;;;EAmBnC,UAAU,SAAS,sBAAsB,eAAc;;YAOpD,0BAA0B,QAAQ;;;;;;YAelC,mBACR,cACA,SAAS,gBACT,eAAc;;;;EAmBT,KACL,cACA,kBACA,oBACA,eAAc;;;;EAcT,WACL,cACA,kBACA,oBACA,eAAc;;;;EAcT,MACL,OAAO,wBACP,oBACA,eAAc;;;;EAUT,YACL,OAAO,wBACP,oBACA,eAAc;;;;EAUT,MACL,cACA,iBACA,UAAU,KAAK;EAEV,MAAM,SAAS;;;;EAoBf,IACL,QAAQ,iBACR,yBACA,SAAS,oBACT,UAAS;;;;EA8HJ,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,KAAK,yBAAyB,SAAS,oBAAoB,UAAS;;;;EAOpE,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,OAAO,yBAAyB,SAAS,oBAAoB,UAAS;;;;EAOtE,MAAM,cAAc,SAAS,oBAAoB,UAAS;;;;EAO1D,KAAK,cAAc,SAAS,oBAAoB,UAAS;;;;EAOzD,QAAQ,cAAc,SAAS,oBAAoB,UAAS;;;;EAO5D,MAAM,cAAc,UAAS,eAAiB;;;;;;;;;;;EAc9C,gBACL,cACA,UAAU,eACV,UAAS;IACP,OAAO;IACP,SAAS;IACT,UAAU,QAAQ,OAAO,gBAAgB;MACvC,aAAa;;;;;;EAsGZ,MAAM,SAAS,sBAAsB,UAAU;;;;EA4D/C,OAAO,gBAAgB;;;;;;;;;;;;;EAgBvB,QAAQ,0BAA0B;;;;;;;EAU5B,eAAe,SAC1B,oBACA,gBAAgB,IAAI,QAAQ,KAC3B,QAAQ;;;;;;EAiCJ,yBAAyB;;;;;;;;;EA0BnB,2BAA2B,GACtC,aAAa,kBACb,eAAe,IAAI,QAAQ,KAC1B,QAAQ;;;;UAoDH;;;;EA4ED,QAAI;;;;;;;EAUJ,kBAAkB,UAAS,iCAAsC;;;;;;;;;EAyBjE;;;;EAOA,KAAK,QAAQ;;;;;EAqDb,cAAc,QAAQ;;;;EAiKtB,SAAS,cAAc,SAAQ;;;;UAkC9B;;qBA+EG,QAAM"}
+{"version":3,"file":"router.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/router/router.ts"],"mappings":";;;;;;qBAqKa;;;;UAIH;;;;;;;;;UAUA;;;;;UAMA;;;;;UAUA;;;;iBAKO;;;;YAKL;IACR,SAAS;IACT,WAAW;;;;;YAMH,gBAAgB,iBAAiB,QAAQ,QAAQ,QAAQ;;;;;YAOzD,QAAQ;;;;SASJ,eAAW;UAQlB;;;;EAOA,eAAe,WAAW,QAAQ,QAAQ,QAAQ;;;;EASlD,cAAc,WAAW,QAAQ,QAAQ,QAAQ;;;;EASjD,SAAS,cAAc,YAAY;;;;;;;;;;;;;;EAmBnC,UAAU,SAAS,sBAAsB,eAAc;;YAOpD,0BAA0B,QAAQ;;;;;;YAelC,mBACR,cACA,SAAS,gBACT,eAAc;;;;EAmBT,KACL,cACA,kBACA,oBACA,eAAc;;;;EAcT,WACL,cACA,kBACA,oBACA,eAAc;;;;EAcT,MACL,OAAO,wBACP,oBACA,eAAc;;;;EAUT,YACL,OAAO,wBACP,oBACA,eAAc;;;;EAUT,MACL,cACA,iBACA,UAAU,KAAK;EAEV,MAAM,SAAS;;;;EAoBf,IACL,QAAQ,iBACR,yBACA,SAAS,oBACT,UAAS;;;;EAsIJ,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,KAAK,yBAAyB,SAAS,oBAAoB,UAAS;;;;EAOpE,IAAI,cAAc,SAAS,oBAAoB,UAAS;;;;EAOxD,OAAO,yBAAyB,SAAS,oBAAoB,UAAS;;;;EAOtE,MAAM,cAAc,SAAS,oBAAoB,UAAS;;;;EAO1D,KAAK,cAAc,SAAS,oBAAoB,UAAS;;;;EAOzD,QAAQ,cAAc,SAAS,oBAAoB,UAAS;;;;EAO5D,MAAM,cAAc,UAAS,eAAiB;;;;;;;;;;;EAc9C,gBACL,cACA,UAAU,eACV,UAAS;IACP,OAAO;IACP,SAAS;IACT,UAAU,QAAQ,OAAO,gBAAgB;MACvC,aAAa;;;;;;EAsGZ,MAAM,SAAS,sBAAsB,UAAU;;;;EAqE/C,OAAO,gBAAgB;;;;;;;;;;;;;EAgBvB,QAAQ,0BAA0B;;;;;;;EAU5B,eAAe,SAC1B,oBACA,gBAAgB,IAAI,QAAQ,KAC3B,QAAQ;;;;;;EAiCJ,yBAAyB;;;;;;;;;EA0BnB,2BAA2B,GACtC,aAAa,kBACb,eAAe,IAAI,QAAQ,KAC1B,QAAQ;;;;UAoDH;;;;EA4ED,QAAI;;;;;;;;;;;EAcJ,kBAAkB,UAAS,iCAAsC;;;;;;;;;EAkCjE;;;;EAOA,KAAK,QAAQ;;;;;EAqDb,cAAc,QAAQ;;;;EAiKtB,SAAS,cAAc,SAAQ;;;;UAkC9B;;qBA+EG,QAAM"}

package/esm/router/router.mjs

@@ -15,7 +15,7 @@ import { buildRequestLogSnapshot } from "../http/request-log-snapshot.mjs";
 import { Request } from "../http/request.mjs";
 import { describeRouteForLog } from "./describe-route-for-log.mjs";
 import { logRequestLifecycle } from "./log-request-lifecycle.mjs";
-import { reportUnguardedMutatingRoutes } from "./unguarded-route-diagnostics.mjs";
+import { isRequiredGuardRoute, reportUnguardedMutatingRoutes } from "./unguarded-route-diagnostics.mjs";
 import { RouteBuilder } from "./route-builder.mjs";
 import { resolveRouteRateLimit, resolveStaticRateLimit } from "./resolve-route-rate-limit.mjs";
 import { DEV_DISPATCH_METHODS, buildNotFoundBody, createDevRateLimiter } from "./dev-dispatch.mjs";
@@ -229,6 +229,8 @@ var Router = class Router {
 		if (middlewarePrecedence === "before") options.middleware = [...options.middleware || [], ...this.stacks.middleware];
 		else options.middleware = [...this.stacks.middleware, ...options.middleware || []];
 		if (options.public === void 0 && (this.stacks.public ?? 0) > 0) options.public = true;
+		const groupSites = this.stacks.sites?.at(-1);
+		if (options.sites === void 0 && groupSites !== void 0) options.sites = groupSites;
 		if (Array.isArray(handler)) {
 			const [controller, action] = handler;
 			if (typeof controller[action] !== "function") throw new WarlockError("WL3002", `Invalid controller action "${action}" for controller "${controller.constructor.name}"`);
@@ -391,7 +393,8 @@ var Router = class Router {
 	* Group routes with options
 	*/
 	group(options, callback) {
-		const { prefix, name = prefix ? trim(prefix.replace(/\//g, "."), ".") : void 0, middleware, public: isPublic } = options;
+		const { prefix, name = prefix ? trim(prefix.replace(/\//g, "."), ".") : void 0, middleware, public: isPublic, sites } = options;
+		if (sites) (this.stacks.sites ??= []).push(sites);
 		if (isPublic) this.stacks.public = (this.stacks.public ?? 0) + 1;
 		if (prefix) this.stacks.prefix.push(prefix);
 		if (name) this.stacks.name.push(name);
@@ -403,6 +406,7 @@ var Router = class Router {
 			if (name) this.stacks.name.pop();
 			if (middleware) this.stacks.middleware.splice(this.stacks.middleware.length - middleware.length, middleware.length);
 			if (isPublic) this.stacks.public = (this.stacks.public ?? 1) - 1;
+			if (sites) this.stacks.sites?.pop();
 		}
 		return this;
 	}
@@ -554,13 +558,20 @@ var Router = class Router {
 	*
 	* Names are the registered names, including method suffixes. `all` stays
 	* intact as route metadata; consumers decide whether their use supports it.
+	* A route that opted out with `clientVisible: false` carries that flag so
+	* browser-facing consumers can leave it out. `sites` is present only on a
+	* route that declared some, and `guarded: true` only on a route with an auth
+	* guard in its middleware chain (group middleware included).
 	*/
 	getNamedApiRoutes(options = {}) {
 		return Object.freeze(this.routes.filter((route) => !route.isPage && typeof route.name === "string" && route.name.length > 0).map((route) => {
 			const snapshot = {
 				name: route.name,
 				path: route.path,
-				method: route.method
+				method: route.method,
+				...route.clientVisible === false ? { clientVisible: false } : {},
+				...route.sites === void 0 ? {} : { sites: Object.freeze([...route.sites]) },
+				...isRequiredGuardRoute(route) ? { guarded: true } : {}
 			};
 			const schema = route.handler?.responseSchema;
 			const response = schema ? options.resolveResponse?.(schema, route) : void 0;

package/esm/router/router.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"router.mjs","names":["configAccessor","config"],"sources":["../../../../../../../../packages/core/src/router/router.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport proxy, { type FastifyHttpProxyOptions } from \"@fastify/http-proxy\";\nimport { WarlockError } from \"../errors/warlock-error\";\nimport type { FastifyStaticOptions } from \"@fastify/static\";\nimport { ltrim, merge, toCamelCase, trim } from \"@mongez/reinforcements\";\nimport { isEmpty } from \"@mongez/supportive-is\";\nimport { log } from \"@warlock.js/logger\";\nimport type { FastifyReply, FastifyRequest } from \"fastify\";\nimport { container } from \"../container\";\nimport { registerLazyStatic } from \"../http/lazy-static\";\nimport { buildCorsOptions } from \"../http/build-cors-options\";\nimport { Request } from \"../http/request\";\nimport { buildRequestLogSnapshot } from \"../http/request-log-snapshot\";\nimport { Response } from \"../http/response\";\nimport { type FastifyInstance } from \"../http/server\";\nimport { buildTracingContext, dispatchPhase, isTracingEnabled } from \"../http/tracing\";\nimport { describeRouteForLog } from \"./describe-route-for-log\";\nimport { logRequestLifecycle } from \"./log-request-lifecycle\";\nimport {\n  forgetPositionalHandlerSuspects,\n  inspectHandlerSignature,\n  reportPositionalHandlerSuspects,\n} from \"./positional-handler-diagnostics\";\nimport { reportUnguardedMutatingRoutes } from \"./unguarded-route-diagnostics\";\nimport { config as configAccessor } from \"../config/config-getter\";\nimport { normalizeRoutePath } from \"./normalize-route-path\";\nimport { RouteBuilder } from \"./route-builder\";\nimport { resolveRouteRateLimit, resolveStaticRateLimit } from \"./resolve-route-rate-limit\";\nimport { RouteNameTakenError } from \"./route-name-taken-error\";\nimport { DEV_DISPATCH_METHODS, buildNotFoundBody, createDevRateLimiter } from \"./dev-dispatch\";\nimport { RouteRegistry } from \"./route-registry\";\nimport { routeNameMethodSuffix } from \"./route-name-method-suffix\";\nimport type {\n  GroupedRoutesOptions,\n  HttpContext,\n  NamedApiRoute,\n  NamedApiRoutesOptions,\n  RequestHandler,\n  RequestHandlerType,\n  RequestHandlerValidation,\n  ResourceMethod,\n  Route,\n  RouteOptions,\n  RouteResource,\n  RouterGroupCallback,\n  RouterStacks,\n  StaticMountOptions,\n} from \"./types\";\n\n/**\n * A Fastify lifecycle hook as it may be declared in a route's `serverOptions`.\n * Fastify accepts a single hook or an array in either position.\n */\ntype RouteLifecycleHook = (\n  request: FastifyRequest,\n  reply: FastifyReply,\n) => unknown | Promise<unknown>;\n\n/**\n * The pre-handler phases the dev server forwards from a route's `serverOptions`.\n *\n * These are the admission-control phases and they share the `(request, reply)`\n * signature. `preParsing` is deliberately absent — it must return the payload\n * stream, so forwarding it generically would corrupt the body rather than\n * guard it. `bodyLimit` cannot be forwarded at all; Fastify reads it at\n * registration time and no hook can bound a body already being parsed.\n */\nconst FORWARDED_ROUTE_PHASES = [\"onRequest\", \"preValidation\", \"preHandler\"] as const;\n\ntype ForwardedRoutePhase = (typeof FORWARDED_ROUTE_PHASES)[number];\n\n/**\n * The route the dev dispatcher matched, stashed on the request so the hooks and\n * the wildcard handler all act on one match rather than each matching again.\n */\ntype DevMatchedRoute = { route: Route; params: Record<string, string> };\n\ntype DevDispatchRequest = FastifyRequest & {\n  matchedDevRoute?: DevMatchedRoute;\n};\n\nfunction toHookList(\n  hook: RouteLifecycleHook | RouteLifecycleHook[] | undefined,\n): RouteLifecycleHook[] {\n  if (!hook) {\n    return [];\n  }\n\n  return Array.isArray(hook) ? hook : [hook];\n}\n\n/**\n * Run a matched route's hooks for one phase.\n *\n * Returning the reply is how an async Fastify hook signals that it has answered\n * the request; the chain must stop there, so the value is propagated rather\n * than discarded.\n */\nasync function runRouteHooks(\n  route: Route,\n  phase: ForwardedRoutePhase,\n  request: FastifyRequest,\n  reply: FastifyReply,\n) {\n  const hooks = toHookList(\n    route.serverOptions?.[phase] as RouteLifecycleHook | RouteLifecycleHook[] | undefined,\n  );\n\n  for (const hook of hooks) {\n    const outcome = await hook(request, reply);\n\n    if (outcome === reply) {\n      return reply;\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Bound functions do not inherit static properties, so the handler metadata that\n * documentation and typings read (`responseSchema`) is copied onto the bound copy.\n */\nfunction copyResponseSchema(source: unknown, target: RequestHandler): void {\n  const responseSchema = (source as RequestHandler | undefined)?.responseSchema;\n\n  if (responseSchema) {\n    target.responseSchema = responseSchema;\n  }\n}\n\n/**\n * Bind a restful resource method to its resource, keeping its `responseSchema`.\n */\nfunction bindResourceHandler(\n  resource: RouteResource,\n  method: ResourceMethod | \"bulkDelete\",\n): RequestHandler {\n  const source = resource[method];\n  const handler = source?.bind(resource) as RequestHandler;\n\n  copyResponseSchema(source, handler);\n\n  return handler;\n}\n\n/**\n * Describe one claimant of a route name, for the duplicate-name error.\n *\n * `warlock dev` registers SSR page routes on the same router as API routes, so\n * the two share a single route-name namespace and collide across kinds. The\n * error is only actionable if it says which claimant is which, so `isPage` —\n * the router's only route-kind discriminator — is what separates them here.\n *\n * `sourceFile` is stamped only on routes registered through `withSourceFile`.\n * Routes registered without that scope have no owner, so say the source is\n * unknown rather than printing an empty string.\n */\nfunction describeRouteClaimant(route: Route) {\n  const type = route.isPage ? \"page route\" : \"API route\";\n  const source = route.sourceFile ? `declared in ${route.sourceFile}` : \"source file unknown\";\n\n  return `${type} ${route.method} ${route.path} (${source})`;\n}\n\nexport class Router {\n  /**\n   * Routes list\n   */\n  private routes: Route[] = [];\n\n  /**\n   * Bumped on every mutation of {@link routes}.\n   *\n   * The dev dispatcher caches a route registry and needs to know when it is\n   * stale. Comparing `routes.length` would miss an HMR reload that replaces a\n   * route without changing the count — the registry would then keep matching\n   * paths that no longer exist. A version counter cannot miss that.\n   */\n  private routesVersion = 0;\n\n  /**\n   * In-progress atomic replacement, when one exists. Reads continue to use\n   * {@link routes}; mutations and collision checks use this isolated draft.\n   */\n  private routeReplacementTransaction?: {\n    routes: Route[];\n    removedSourceFiles: Set<string>;\n    addedRoutes: Route[];\n  };\n\n  /**\n   * Set by the dev server: whether to warn about mutating routes that have no\n   * auth middleware and no `public: true` (`http.warnUnguardedRoutes`).\n   */\n  private warnUnguardedRoutes = false;\n\n  /**\n   * Router Instance\n   */\n  private static instance: Router;\n\n  /**\n   * Static paths\n   */\n  protected staticDirectories: {\n    options: FastifyStaticOptions;\n    rateLimit: StaticMountOptions[\"rateLimit\"];\n  }[] = [];\n\n  /**\n   * Event listeners\n   */\n  protected eventListeners: Record<string, ((router: Router, server: FastifyInstance) => void)[]> =\n    {};\n\n  /**\n   * Stacks\n   * Stacks will be used for grouping routes to add prefix, name or middleware\n   */\n  protected stacks: RouterStacks = {\n    prefix: [],\n    name: [],\n    middleware: [],\n  };\n\n  /**\n   * Get router instance\n   */\n  public static getInstance() {\n    if (!Router.instance) {\n      Router.instance = new Router();\n    }\n\n    return Router.instance;\n  }\n\n  private constructor() {\n    //\n  }\n\n  /**\n   * Listen to router before scan\n   */\n  public beforeScanning(callback: (router: Router, server: FastifyInstance) => void) {\n    this.eventListeners.beforeScan = [...(this.eventListeners.beforeScan || []), callback];\n\n    return this;\n  }\n\n  /**\n   * Listen to router after scanning\n   */\n  public afterScanning(callback: (router: Router, server: FastifyInstance) => void) {\n    this.eventListeners.afterScanning = [...(this.eventListeners.afterScanning || []), callback];\n\n    return this;\n  }\n\n  /**\n   * Redirect path to another path\n   */\n  public redirect(from: string, to: string, redirectMode: \"temporary\" | \"permanent\" = \"temporary\") {\n    return this.get(from, ({ response }) => {\n      response.redirect(to, redirectMode === \"temporary\" ? 302 : 301);\n    });\n  }\n\n  /**\n   * Serve a static folder.\n   *\n   * Static mounts are exempt from the global rate limiter by default; set\n   * `http.rateLimit.staticFiles: true` to count every mount, or pass\n   * `{ rateLimit }` to decide for this mount alone: `true` counts it against\n   * the global limiter, `false` exempts it, and an object gives it its own\n   * limit and bucket.\n   *\n   * @example\n   * router.directory({ root: rootPath(\"docs\"), prefix: \"/docs/\" });\n   * router.directory({ root: rootPath(\"exports\"), prefix: \"/exports/\" }, { rateLimit: true });\n   */\n  public directory(options: FastifyStaticOptions, mountOptions: StaticMountOptions = {}) {\n    this.staticDirectories.push({ options, rateLimit: mountOptions.rateLimit });\n\n    return this;\n  }\n\n  /** Declare static routes at boot; load the upstream sender on the first file request. */\n  protected registerStaticDirectories(server: FastifyInstance) {\n    for (const directory of this.staticDirectories) {\n      registerLazyStatic(\n        server,\n        { ...directory.options, decorateReply: false },\n        { rateLimit: resolveStaticRateLimit(directory.rateLimit) },\n      );\n    }\n  }\n\n  /**\n   * Register a GET route that serves a static file. Like `directory()`, it is\n   * exempt from the global rate limiter unless `http.rateLimit.staticFiles`\n   * or its own `rateLimit` says otherwise.\n   */\n  protected addStaticFileRoute(\n    path: string,\n    handler: RequestHandler,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    this.get(\n      path,\n      handler,\n      mountOptions.rateLimit === undefined ? {} : { rateLimit: mountOptions.rateLimit },\n    );\n\n    const routes = this.routeReplacementTransaction?.routes ?? this.routes;\n    const route = routes[routes.length - 1];\n\n    if (route) route.$staticFile = true;\n\n    return this;\n  }\n\n  /**\n   * Serve file\n   */\n  public file(\n    path: string,\n    location: string,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    return this.addStaticFileRoute(\n      path,\n      ({ response }) => {\n        response.sendFile(location, cacheTime);\n      },\n      mountOptions,\n    );\n  }\n\n  /**\n   * Serve cached file, it will cache the file to 1 year by default\n   */\n  public cachedFile(\n    path: string,\n    location: string,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    return this.addStaticFileRoute(\n      path,\n      ({ response }) => {\n        response.sendCachedFile(location, cacheTime);\n      },\n      mountOptions,\n    );\n  }\n\n  /**\n   * Serve list of files\n   */\n  public files(\n    files: Record<string, string>,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    for (const [path, location] of Object.entries(files)) {\n      this.file(path, location, cacheTime, mountOptions);\n    }\n  }\n\n  /**\n   * Serve list of cached files, it will cache the file to 1 year by default\n   */\n  public cachedFiles(\n    files: Record<string, string>,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    for (const [path, location] of Object.entries(files)) {\n      this.cachedFile(path, location, cacheTime, mountOptions);\n    }\n  }\n\n  /**\n   * Add proxy route\n   */\n  public proxy(\n    path: string,\n    baseUrl: string,\n    options?: Omit<FastifyHttpProxyOptions, \"prefix\" | \"upstream\">,\n  ): this;\n  public proxy(options: FastifyHttpProxyOptions): this;\n  public proxy(...args: any[]) {\n    this.beforeScanning((_router, server) => {\n      if (args.length === 1) {\n        server.register(proxy, args[0]);\n      } else {\n        server.register(proxy, {\n          prefix: args[0],\n          upstream: args[1],\n          ...args[2],\n        });\n      }\n    });\n\n    return this;\n  }\n\n  /**\n   * Add route to routes list\n   */\n  public add(\n    method: Route[\"method\"],\n    path: string | string[],\n    handler: RequestHandlerType,\n    options: RouteOptions = {},\n  ) {\n    if (Array.isArray(path)) {\n      path.forEach((p) => this.add(method, p, handler, options));\n      return this;\n    }\n\n    const prefix = this.stacks.prefix.reduce((path, prefix) => {\n      return normalizeRoutePath(path, prefix);\n    }, \"\");\n\n    const name = this.stacks.name.reduceRight(\n      (name, prefixName) => {\n        return trim(prefixName + \".\" + name, \".\");\n      },\n      options.name || trim(path.replace(/\\//g, \".\"), \".\"),\n    );\n\n    // The one place a route path becomes canonical. `normalizeRoutePath` is\n    // exported so the build-time page-route manifest can produce the very same\n    // string without registering anything.\n    path = normalizeRoutePath(prefix, path);\n\n    const middlewarePrecedence = options.middlewarePrecedence || \"after\";\n\n    // Work on a copy: the caller may reuse one options object for several\n    // routes, and merging the group stack into it would compound per route.\n    options = { ...options };\n\n    if (middlewarePrecedence === \"before\") {\n      options.middleware = [...(options.middleware || []), ...this.stacks.middleware];\n    } else {\n      options.middleware = [...this.stacks.middleware, ...(options.middleware || [])];\n    }\n\n    // An enclosing `router.group({ public: true })` makes the route public\n    // unless it says otherwise itself.\n    if (options.public === undefined && (this.stacks.public ?? 0) > 0) {\n      options.public = true;\n    }\n\n    if (Array.isArray(handler)) {\n      const [controller, action] = handler;\n\n      if (typeof controller[action] !== \"function\") {\n        throw new WarlockError(\n          \"WL3002\",\n          `Invalid controller action \"${action}\" for controller \"${controller.constructor.name}\"`,\n        );\n      }\n\n      handler = controller[action].bind(controller) as RequestHandler;\n      copyResponseSchema(controller[action], handler);\n\n      if (!handler.validation) {\n        handler.validation = {};\n        if (controller[`${action}ValidationSchema`]) {\n          handler.validation.schema = controller[`${action}ValidationSchema`]();\n        }\n\n        if (controller[`${action}Validate`]) {\n          handler.validation.validate = controller[`${action}Validate`];\n        }\n      }\n    }\n\n    const routeData: Route = {\n      method,\n      path,\n      handler,\n      ...options,\n      name,\n      rateLimit: options.rateLimit,\n      $prefix: prefix || \"/\",\n      // it must be a new array to avoid modifying the original array\n      $prefixStack: [...this.stacks.prefix],\n      // Inject source file from stacks if set\n      sourceFile: this.stacks.sourceFile || \"\",\n    };\n\n    const routes = this.routeReplacementTransaction?.routes ?? this.routes;\n\n    if (routeData.name) {\n      // check if the name exists\n      const route = routes.find((route) => route.name === routeData.name);\n\n      if (route) {\n        // check again if the route name exists with the same method\n        if (route.method === routeData.method) {\n          throw new RouteNameTakenError(\n            routeData.name,\n            `Route name \"${routeData.name}\" is already taken.\\n` +\n              `  already registered: ${describeRouteClaimant(route)}\\n` +\n              `  now being added:    ${describeRouteClaimant(routeData)}\\n` +\n              `Pages and API routes share one route-name namespace, so a name can only be ` +\n              `claimed once. Rename one of them via the \"name\" route option.`,\n          );\n        } else {\n          routeData.name += routeNameMethodSuffix(routeData.method);\n        }\n      }\n    }\n\n    // Registration-time only — nothing here runs per request. Suspects are\n    // collected now and reported together at boot (see `scan`), so a route file\n    // written against v4 produces one legible list instead of a mystery 500 per\n    // request. Recorded after the collision check so a route that never lands\n    // is never reported.\n    if (this.routeReplacementTransaction) {\n      this.routeReplacementTransaction.addedRoutes.push(routeData);\n    } else {\n      inspectHandlerSignature(routeData.handler, routeData);\n    }\n\n    routes.push(routeData);\n\n    if (!this.routeReplacementTransaction) {\n      this.routesVersion++;\n    }\n\n    return this;\n  }\n\n  /**\n   * Add a request that accepts all methods\n   */\n  public any(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"all\" as Route[\"method\"], path, handler, options);\n  }\n\n  /**\n   * Add get request method\n   */\n  public get(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"GET\", path, handler, options);\n  }\n\n  /**\n   * Add post request method\n   */\n  public post(path: string | string[], handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"POST\", path, handler, options);\n  }\n\n  /**\n   * Add put request method\n   */\n  public put(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"PUT\", path, handler, options);\n  }\n\n  /**\n   * Add delete request method\n   */\n  public delete(path: string | string[], handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"DELETE\", path, handler, options);\n  }\n\n  /**\n   * Add patch request method\n   */\n  public patch(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"PATCH\", path, handler, options);\n  }\n\n  /**\n   * Add head request method\n   */\n  public head(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"HEAD\", path, handler, options);\n  }\n\n  /**\n   * Add options request method\n   */\n  public options(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"OPTIONS\", path, handler, options);\n  }\n\n  /**\n   * Get a chainable route builder for the same route path\n   */\n  public route(path: string, options: RouteOptions = {}) {\n    return new RouteBuilder(this, path, options);\n  }\n\n  /**\n   * Add full restful resource routes\n   * This method will generate the following routes:\n   * 1. GET /path: list all resources\n   * 2. GET /path/:id: get a single resource\n   * 3. POST /path: create a new resource\n   * 4. PUT /path/:id: update a resource\n   * 5. DELETE /path/:id: delete a resource\n   * 6. PATCH /path/:id: update a resource partially\n   */\n  public restfulResource(\n    path: string,\n    resource: RouteResource,\n    options: RouteOptions & {\n      only?: ResourceMethod[];\n      except?: ResourceMethod[];\n      replace?: Partial<Record<ResourceMethod, RequestHandler>> & {\n        bulkDelete?: RequestHandler;\n      };\n    } = {},\n  ) {\n    // Derive the base resource name from the path before the group below\n    // clears it for use as the routes' relative path. `options.name`, when\n    // given, replaces the path-derived name entirely (see the explicit\n    // `name` passed to `group()`) rather than composing with it.\n    const baseResourceName = options.name || toCamelCase(ltrim(path, \"/\"));\n\n    return this.group({ prefix: path, name: baseResourceName }, () => {\n      const path = \"\";\n\n      // clone the resource so we don't mess up with it\n      const routeResource = resource;\n\n      const isAcceptableResource = (type: ResourceMethod) => {\n        return Boolean(\n          // check if the route is not excluded\n          (!options.except || !options.except.includes(type)) &&\n          // check if the only option is set and the route is included\n          (!options.only || options.only.includes(type)),\n        );\n      };\n\n      if (routeResource.list && isAcceptableResource(\"list\")) {\n        this.get(path, options.replace?.list || bindResourceHandler(routeResource, \"list\"), {\n          ...options,\n          name: \"list\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.get && isAcceptableResource(\"get\")) {\n        this.get(path + \"/:id\", options.replace?.get || bindResourceHandler(routeResource, \"get\"), {\n          ...options,\n          name: \"single\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.create && isAcceptableResource(\"create\")) {\n        const handler = options.replace?.create || this.manageValidation(routeResource, \"create\");\n\n        this.post(path, handler, {\n          ...options,\n          name: \"create\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.update && isAcceptableResource(\"update\")) {\n        const handler = options.replace?.update || this.manageValidation(routeResource, \"update\");\n\n        this.put(path + \"/:id\", handler, {\n          ...options,\n          name: \"update\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.patch && isAcceptableResource(\"patch\")) {\n        const handler = options.replace?.patch || this.manageValidation(routeResource, \"patch\");\n\n        this.patch(path + \"/:id\", handler, {\n          ...options,\n          name: \"patch\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.delete && isAcceptableResource(\"delete\")) {\n        this.delete(\n          path + \"/:id\",\n          options.replace?.delete || bindResourceHandler(routeResource, \"delete\"),\n          {\n            ...options,\n            name: \"delete\",\n            restful: true,\n          },\n        );\n      }\n\n      if (routeResource.bulkDelete && isAcceptableResource(\"delete\")) {\n        this.delete(\n          path,\n          options.replace?.bulkDelete || bindResourceHandler(routeResource, \"bulkDelete\"),\n          {\n            ...options,\n            name: \"bulkDelete\",\n            restful: true,\n          },\n        );\n      }\n\n      return this;\n    });\n  }\n\n  /**\n   * Group routes with options\n   */\n  public group(options: GroupedRoutesOptions, callback: RouterGroupCallback) {\n    const {\n      prefix,\n      // name must always be defined because\n      // if there are multiple groups without name\n      // they might generate the same route name\n      // thus causing an error\n      // in this case we need always to make sure that\n      // the name is always defined.\n      name = prefix ? trim(prefix.replace(/\\//g, \".\"), \".\") : undefined,\n      middleware,\n      public: isPublic,\n    } = options;\n\n    if (isPublic) {\n      this.stacks.public = (this.stacks.public ?? 0) + 1;\n    }\n\n    if (prefix) {\n      this.stacks.prefix.push(prefix);\n    }\n\n    if (name) {\n      this.stacks.name.push(name);\n    }\n\n    if (middleware) {\n      this.stacks.middleware.push(...middleware);\n    }\n\n    try {\n      callback();\n    } finally {\n      // Always pop/splice this group's stacks, even if the callback throws,\n      // so a throwing group never leaks state onto the process-global singleton.\n      if (prefix) {\n        this.stacks.prefix.pop();\n      }\n\n      if (name) {\n        this.stacks.name.pop();\n      }\n\n      if (middleware) {\n        this.stacks.middleware.splice(\n          this.stacks.middleware.length - middleware.length,\n          middleware.length,\n        );\n      }\n      if (isPublic) {\n        this.stacks.public = (this.stacks.public ?? 1) - 1;\n      }\n    }\n\n    return this;\n  }\n\n  /**\n   * Add prefix to all routes in the given callback\n   */\n  public prefix(prefix: string, callback: () => void) {\n    return this.group({ prefix }, callback);\n  }\n\n  /**\n   * Add API version prefix to all routes in the given callback\n   * Automatically formats the version as /v{version}\n   * @example\n   * router.version(\"1\", () => {\n   *   router.get(\"/users\", getUsersV1); // /v1/users\n   * });\n   *\n   * router.version(\"2\", () => {\n   *   router.get(\"/users\", getUsersV2); // /v2/users\n   * });\n   */\n  public version(version: string | number, callback: () => void) {\n    return this.prefix(`/v${version}`, callback);\n  }\n\n  /**\n   * Wrap route additions with a source file path\n   * Used for tracking which routes come from which file (for HMR)\n   * @param sourceFile Relative path to the source file (e.g., \"src/app/users/routes.ts\")\n   * @param callback Function that adds routes (will have sourceFile injected)\n   */\n  public async withSourceFile<T = any>(\n    sourceFile: string,\n    callback: () => T | Promise<T>,\n  ): Promise<T | undefined> {\n    // Set source file in stacks\n    this.stacks.sourceFile = sourceFile;\n\n    try {\n      // Execute callback (routes added here will have sourceFile injected)\n      return await callback();\n    } catch (error) {\n      // Log loudly, then RETHROW. Swallowing here silently dropped a whole\n      // route file (duplicate name, invalid action, import error) so the\n      // surface 404'd with no boot error. The caller decides what a throw\n      // means: at boot it aborts the boot, during HMR the dev server's\n      // batch-reload handler catches it, prints it, and keeps serving.\n      log.error({\n        module: \"router\",\n        action: \"registerRoutes\",\n        message: `Failed to register routes from \"${sourceFile}\"`,\n        context: { sourceFile, error },\n      });\n\n      throw error;\n    } finally {\n      // Always clear source file from stacks so a throwing file never leaks\n      // its sourceFile onto the process-global singleton.\n      delete this.stacks.sourceFile;\n    }\n  }\n\n  /**\n   * Remove all routes that belong to a specific source file\n   * Used when reloading routes files via HMR\n   * @param sourceFile Relative path to the source file\n   */\n  public removeRoutesBySourceFile(sourceFile: string): void {\n    if (this.routeReplacementTransaction) {\n      this.routeReplacementTransaction.routes = this.routeReplacementTransaction.routes.filter(\n        (route) => route.sourceFile !== sourceFile,\n      );\n      this.routeReplacementTransaction.removedSourceFiles.add(sourceFile);\n      return;\n    }\n\n    this.routes = this.routes.filter((route) => route.sourceFile !== sourceFile);\n\n    // Keep the signature diagnostics in step, so a reload that fixes a handler\n    // stops reporting the version it replaced.\n    forgetPositionalHandlerSuspects(sourceFile);\n\n    this.routesVersion++;\n  }\n\n  /**\n   * Atomically replace every route owned by the given exact source-file keys.\n   *\n   * The installer mutates an isolated draft. Public reads keep seeing the old\n   * live table across awaits, and a failed installer discards every draft\n   * mutation. A successful installer swaps the whole draft in one synchronous\n   * commit and invalidates the dev route registry exactly once.\n   */\n  public async replaceRoutesBySourceFiles<T>(\n    sourceFiles: Iterable<string>,\n    install: () => T | Promise<T>,\n  ): Promise<T> {\n    if (this.routeReplacementTransaction) {\n      throw new Error(\"Cannot nest route replacement transactions\");\n    }\n\n    const removedSourceFiles = new Set(sourceFiles);\n\n    this.routeReplacementTransaction = {\n      routes: this.routes.filter((route) => !removedSourceFiles.has(route.sourceFile)),\n      removedSourceFiles,\n      addedRoutes: [],\n    };\n\n    try {\n      const result = await install();\n      const transaction = this.routeReplacementTransaction!;\n\n      this.routes = transaction.routes;\n      this.routeReplacementTransaction = undefined;\n\n      // Diagnostic state follows the same commit boundary as the route table.\n      // Added routes were deliberately not inspected while still speculative.\n      for (const sourceFile of transaction.removedSourceFiles) {\n        forgetPositionalHandlerSuspects(sourceFile);\n      }\n\n      const committedRoutes = new Set(transaction.routes);\n\n      for (const route of transaction.addedRoutes) {\n        if (committedRoutes.has(route)) {\n          inspectHandlerSignature(route.handler, route);\n        }\n      }\n\n      if (this.warnUnguardedRoutes) {\n        reportUnguardedMutatingRoutes(\n          transaction.addedRoutes.filter((route) => committedRoutes.has(route)),\n        );\n      }\n\n      this.routesVersion++;\n\n      return result;\n    } catch (error) {\n      this.routeReplacementTransaction = undefined;\n      throw error;\n    }\n  }\n\n  /**\n   * Manage validation system for the given resource\n   */\n  private manageValidation(resource: RouteResource, method: \"create\" | \"update\" | \"patch\") {\n    const handler = bindResourceHandler(resource, method);\n\n    const methodValidation = resource?.validation?.[method];\n\n    if (method === \"patch\") {\n      handler.validation = methodValidation;\n\n      if (handler.validation?.validate) {\n        handler.validation.validate = handler.validation.validate.bind(resource);\n      }\n\n      if (resource.validation?.patch) {\n        handler.validation = merge(resource.validation.patch, handler.validation);\n      }\n\n      return handler;\n    }\n\n    if (!resource.validation || (!methodValidation && !resource.validation.all)) return handler;\n\n    if (resource.validation.all) {\n      const validationMethods = {\n        all: resource?.validation?.all?.validate,\n        [method]: methodValidation?.validate,\n      };\n\n      const validation: RequestHandlerValidation = {};\n\n      if (resource.validation.all.schema || methodValidation?.schema) {\n        if (!methodValidation?.schema && resource.validation.all.schema) {\n          // Case 2: Only all.schema exists - clone it for this method\n          validation.schema = resource.validation.all.schema;\n        } else if (methodValidation?.schema && resource.validation.all.schema) {\n          // Case 3: Both exist - merge them (all is base, method overrides)\n          validation.schema = resource.validation.all.schema.merge(methodValidation.schema);\n        } else if (methodValidation?.schema && !resource.validation.all.schema) {\n          // Case 1: Only method schema exists - use it directly\n          validation.schema = methodValidation.schema;\n        }\n        // Case 4: Neither exists - handled by outer if being false\n      }\n\n      if (validationMethods.all || validationMethods[method]) {\n        validation.validate = async ({ request, response }: HttpContext) => {\n          if (validationMethods.all) {\n            const output = await validationMethods.all.call(resource, { request, response });\n\n            if (output) return output;\n          }\n\n          if (validationMethods[method]) {\n            return await validationMethods[method]?.call(resource, { request, response });\n          }\n\n          return;\n        };\n      }\n\n      if (!isEmpty(validation)) {\n        handler.validation = validation;\n      }\n    } else {\n      handler.validation = resource.validation[method];\n\n      if (handler.validation?.validate) {\n        handler.validation.validate = handler.validation.validate.bind(resource);\n      }\n    }\n\n    return handler;\n  }\n\n  /**\n   * Get all routes list\n   */\n  public list() {\n    return this.routes;\n  }\n\n  /**\n   * Return fresh browser-safe snapshots of named, non-page routes.\n   *\n   * Names are the registered names, including method suffixes. `all` stays\n   * intact as route metadata; consumers decide whether their use supports it.\n   */\n  public getNamedApiRoutes(options: NamedApiRoutesOptions = {}): readonly NamedApiRoute[] {\n    return Object.freeze(\n      this.routes\n        .filter((route) => !route.isPage && typeof route.name === \"string\" && route.name.length > 0)\n        .map((route) => {\n          const snapshot = { name: route.name!, path: route.path, method: route.method };\n          const schema = route.handler?.responseSchema;\n          const response = schema ? options.resolveResponse?.(schema, route) : undefined;\n\n          // A route without a declared schema keeps exactly the three-key record.\n          if (!response || Object.keys(response).length === 0) return Object.freeze(snapshot);\n\n          return Object.freeze({ ...snapshot, response: Object.freeze({ ...response }) });\n        }),\n    );\n  }\n\n  /**\n   * Number of routes currently registered on the singleton.\n   *\n   * Used as a readiness signal: a successful boot that ends up with zero\n   * routes almost always means a route module failed to register silently\n   * (see `withSourceFile`), so callers can surface that instead of letting\n   * the whole surface 404.\n   */\n  public routeCount(): number {\n    return this.routes.length;\n  }\n\n  /**\n   * Register routes to the server\n   */\n  public scan(server: FastifyInstance) {\n    // Every route is registered by the time we scan, so this is the first\n    // moment the whole list can be reported at once — and it is still before a\n    // single request is served.\n    reportPositionalHandlerSuspects();\n\n    this.eventListeners.beforeScan?.forEach((callback) => callback(this, server));\n\n    // Fastify automatically exposes HEAD for every GET route. When an app\n    // declares its own HEAD route at the same path, suppress only that GET\n    // route's implicit registration so the explicit handler owns HEAD,\n    // regardless of declaration order.\n    const explicitHeadPaths = new Set(\n      this.routes\n        .filter((route) => route.method.toLowerCase() === \"head\")\n        .map((route) => route.path),\n    );\n\n    this.routes.forEach((route) => {\n      const requestMethod = route.method.toLowerCase();\n      const requestMethodFunction = server[requestMethod].bind(server);\n\n      const options = {\n        ...route.serverOptions,\n        ...(requestMethod === \"get\" &&\n          explicitHeadPaths.has(route.path) && { exposeHeadRoute: false }),\n        config: {\n          ...route.serverOptions?.config,\n          // `undefined` keeps the global policy; `false` exempts the route.\n          rateLimit: resolveRouteRateLimit(route),\n        },\n      };\n\n      requestMethodFunction(\n        route.path,\n        options,\n        async (baseRequest: FastifyRequest, reply: FastifyReply) => {\n          const { output, response } = await this.handleRoute(route)(baseRequest, reply);\n\n          return output || response.baseResponse;\n        },\n      );\n    });\n\n    this.registerStaticDirectories(server);\n\n    this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));\n  }\n\n  /**\n   * Scan routes for the development server\n   * Uses wildcard routing with find-my-way for HMR support\n   */\n  public scanDevServer(server: FastifyInstance) {\n    // Same boot-time report as production `scan`. Routes reloaded later by HMR\n    // are still recorded, but only surface on the next scan or via\n    // `warlock doctor`.\n    reportPositionalHandlerSuspects();\n\n    // Development only: list mutating routes nobody guarded. Routes added by a\n    // later HMR reload are reported when their replacement commits.\n    this.warnUnguardedRoutes =\n      configAccessor.key<boolean>(\"http.warnUnguardedRoutes\", true) !== false;\n    if (this.warnUnguardedRoutes) {\n      reportUnguardedMutatingRoutes(this.routes);\n    }\n\n    this.eventListeners.beforeScan?.forEach((callback) => callback(this, server));\n\n    let routeRegistry: RouteRegistry | undefined;\n    let registryVersion = -1;\n\n    const applyDevRateLimit = createDevRateLimiter(\n      server,\n      config.get(\"http.rateLimit.global\") !== false,\n    );\n\n    // Rebuilt when the route table changes rather than per request. Building it\n    // inside the handler re-registered every route on every hit — and `all`\n    // routes expand into seven registrations each. Keyed on `routesVersion`\n    // rather than on the route count, so an HMR reload that swaps a route\n    // without changing the count still invalidates.\n    const resolveRouteRegistry = () => {\n      if (routeRegistry && registryVersion === this.routesVersion) {\n        return routeRegistry;\n      }\n\n      routeRegistry = new RouteRegistry();\n\n      routeRegistry.register(this.routes);\n\n      registryVersion = this.routesVersion;\n\n      return routeRegistry;\n    };\n\n    // Matching happens here, in Fastify's own onRequest phase, so a route's\n    // `serverOptions.onRequest` still runs BEFORE body parsing. Production\n    // `scan()` gets that from per-route registration; the wildcard dispatcher\n    // has no per-route slot, so without this the hook silently never runs.\n    server.addHook(\n      \"onRequest\",\n      async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n        // Only requests Fastify routed to the dev wildcard belong to the app's\n        // router. A plugin's own route (devtools' `/__warlock/api/requests/:id`)\n        // must keep its params even when an app catch-all matches the URL too.\n        if (fastifyRequest.routeOptions.url !== \"*\") {\n          return undefined;\n        }\n\n        const match = resolveRouteRegistry().find(fastifyRequest.method, fastifyRequest.url);\n\n        if (!match) {\n          return undefined;\n        }\n\n        (fastifyRequest as DevDispatchRequest).matchedDevRoute = match;\n\n        fastifyRequest.params = match.params;\n\n        // Same slot production gives it: the limiter runs first in onRequest,\n        // ahead of the route's own hooks.\n        await applyDevRateLimit(match.route, fastifyRequest, fastifyReply);\n\n        if (fastifyReply.sent) {\n          return fastifyReply;\n        }\n\n        return runRouteHooks(match.route, \"onRequest\", fastifyRequest, fastifyReply);\n      },\n    );\n\n    for (const phase of FORWARDED_ROUTE_PHASES.filter((name) => name !== \"onRequest\")) {\n      server.addHook(phase, async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n        const match = (fastifyRequest as DevDispatchRequest).matchedDevRoute;\n\n        if (!match) {\n          return undefined;\n        }\n\n        return runRouteHooks(match.route, phase, fastifyRequest, fastifyReply);\n      });\n    }\n\n    // Shared handler for wildcard routing\n    const wildcardHandler = async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n      const match = (fastifyRequest as DevDispatchRequest).matchedDevRoute;\n\n      // No match found - return 404\n      if (!match) {\n        return fastifyReply\n          .code(404)\n          .send(buildNotFoundBody(fastifyRequest.method, fastifyRequest.url));\n      }\n\n      try {\n        // Call the matched route handler\n        const { output, response } = await this.handleRoute(match.route)(\n          fastifyRequest,\n          fastifyReply,\n        );\n\n        return output || response.baseResponse;\n      } catch (error) {\n        log.error(\"router\", \"dev-dispatch\", error as Error, {\n          method: fastifyRequest.method,\n          url: buildRequestLogSnapshot({\n            id: fastifyRequest.id,\n            method: fastifyRequest.method,\n            url: fastifyRequest.url,\n            route: match.route,\n          }).url,\n        });\n\n        throw error;\n      }\n    };\n\n    // Every verb production can register. Fastify's implicit HEAD for the GET\n    // wildcard is switched off so the HEAD wildcard owns it (the registry falls\n    // back to the GET route, exactly as production's implicit HEAD does).\n    // `@fastify/cors` registers its own OPTIONS \"*\" catch-all whenever\n    // preflight is on. Use the plugin's options as well as hasRoute so this\n    // dispatcher works both after HTTP plugin boot and before queued plugins.\n    const corsOwnsPreflight = buildCorsOptions().preflight !== false;\n\n    for (const method of DEV_DISPATCH_METHODS) {\n      if (\n        method === \"OPTIONS\" &&\n        (corsOwnsPreflight || server.hasRoute({ method: \"OPTIONS\", url: \"*\" }))\n      ) {\n        continue;\n      }\n\n      server.route({\n        method,\n        url: \"*\",\n        ...(method === \"GET\" && { exposeHeadRoute: false }),\n        // The dispatcher limits each matched route itself (see\n        // `createDevRateLimiter`), so the plugin must not limit the wildcard:\n        // that would count exempt routes and unmatched URLs too.\n        config: { rateLimit: false },\n        handler: wildcardHandler,\n      });\n    }\n\n    this.registerStaticDirectories(server);\n\n    this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));\n  }\n\n  /**\n   * Get the route path for the given route name\n   */\n  public getRoute(name: string, params: Record<string, any> = {}) {\n    const route = this.routes.find((route) => route.name === name);\n\n    if (!route) {\n      throw new WarlockError(\"WL3003\", `Route name \"${name}\" not found`);\n    }\n\n    const used = new Set<string>();\n\n    const path = route.path.replace(/:([A-Za-z0-9_]+)(\\?)?/g, (_match, key: string, optional) => {\n      const value = params[key];\n\n      if (value === undefined || value === null) {\n        if (optional) return \"\";\n\n        throw new WarlockError(\"WL3004\", `Route \"${name}\" is missing the \"${key}\" param`);\n      }\n\n      used.add(key);\n\n      return encodeURIComponent(String(value));\n    });\n\n    const query = Object.keys(params)\n      .filter((key) => !used.has(key) && params[key] !== undefined && params[key] !== null)\n      .map((key) => `${encodeURIComponent(key)}=${encodeURIComponent(String(params[key]))}`)\n      .join(\"&\");\n\n    return query ? `${path}?${query}` : path;\n  }\n\n  /**\n   * Handle the given route\n   */\n  private handleRoute(route: Route) {\n    return async (fastifyRequest: FastifyRequest, fastifyResponse: FastifyReply) => {\n      const request = new Request();\n      const response = new Response();\n      response.setResponse(fastifyResponse);\n      request.response = response;\n\n      response.request = request;\n\n      // \"route.match\" tracing phase: the pattern is\n      // already known here (`route.path`), so this brackets the cost of\n      // stamping the request/route onto the `Request` instance rather than\n      // route-registry matching itself, which happens upstream of this\n      // function for both the production `scan()` path and the dev wildcard\n      // dispatcher (both funnel into `handleRoute`).\n      const tracingEnabled = isTracingEnabled();\n      const routeMatchStartedAt = tracingEnabled ? performance.now() : 0;\n\n      request.setRequest(fastifyRequest).setRoute(route);\n\n      if (tracingEnabled) {\n        dispatchPhase(buildTracingContext(request), {\n          name: \"route.match\",\n          durationMs: performance.now() - routeMatchStartedAt,\n          attrs: { route: route.path },\n        });\n      }\n\n      /*\n        Both ends of the entry, not just the start — see\n        `log-request-lifecycle.ts`. A start line on its own made a hung request\n        and an instant one look identical, and the completion line is what makes\n        a MISSING one legible as a hang.\n      */\n      const result = await logRequestLifecycle(\n        {\n          info: (entry) => log.info(entry),\n          warn: (entry) => log.warn(entry),\n          error: (entry) => log.error(entry),\n          now: () => performance.now(),\n        },\n        {\n          module: \"route\",\n          action: describeRouteForLog(route.method, route.path),\n          requestId: request.id,\n          // A bounded snapshot, built once with the route's logging policy\n          // applied — never the Request/Response instances, whose native\n          // request, reply and URL graphs would reach every log channel.\n          context: { request: request.toLogSnapshot() },\n          request,\n          // Read after the run: the status is decided during the request.\n          statusCode: () => fastifyResponse.statusCode,\n        },\n        () => request.execute(),\n      );\n\n      // A handler may return a plain object (`ReturnedResponse`). Route it\n      // through `Response.send` so status, events and hooks apply, exactly as\n      // middleware outputs already do.\n      let output = result;\n\n      if (\n        output !== undefined &&\n        output !== null &&\n        !(output instanceof Response) &&\n        (output as unknown) !== fastifyResponse\n      ) {\n        output = await response.send(output);\n      }\n\n      return {\n        output,\n        response,\n        request,\n      };\n    };\n  }\n}\n\nexport const router = Router.getInstance();\n\ncontainer.set(\"router\", router);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAM,yBAAyB;CAAC;CAAa;CAAiB;AAAY;AAc1E,SAAS,WACP,MACsB;CACtB,IAAI,CAAC,MACH,OAAO,CAAC;CAGV,OAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,IAAI;AAC3C;;;;;;;;AASA,eAAe,cACb,OACA,OACA,SACA,OACA;CACA,MAAM,QAAQ,WACZ,MAAM,gBAAgB,MACxB;CAEA,KAAK,MAAM,QAAQ,OAGjB,IAAI,MAFkB,KAAK,SAAS,KAAK,MAEzB,OACd,OAAO;AAKb;;;;;AAMA,SAAS,mBAAmB,QAAiB,QAA8B;CACzE,MAAM,iBAAkB,QAAuC;CAE/D,IAAI,gBACF,OAAO,iBAAiB;AAE5B;;;;AAKA,SAAS,oBACP,UACA,QACgB;CAChB,MAAM,SAAS,SAAS;CACxB,MAAM,UAAU,QAAQ,KAAK,QAAQ;CAErC,mBAAmB,QAAQ,OAAO;CAElC,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAS,sBAAsB,OAAc;CAC3C,MAAM,OAAO,MAAM,SAAS,eAAe;CAC3C,MAAM,SAAS,MAAM,aAAa,eAAe,MAAM,eAAe;CAEtE,OAAO,GAAG,KAAK,GAAG,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,OAAO;AAC1D;AAEA,IAAa,SAAb,MAAa,OAAO;;;;CAgElB,OAAc,cAAc;EAC1B,IAAI,CAAC,OAAO,UACV,OAAO,WAAW,IAAI,OAAO;EAG/B,OAAO,OAAO;CAChB;CAEA,AAAQ,cAAc;gBApEI,CAAC;uBAUH;6BAgBM;2BAaxB,CAAC;wBAML,CAAC;gBAM8B;GAC/B,QAAQ,CAAC;GACT,MAAM,CAAC;GACP,YAAY,CAAC;EACf;CAeA;;;;CAKA,AAAO,eAAe,UAA6D;EACjF,KAAK,eAAe,aAAa,CAAC,GAAI,KAAK,eAAe,cAAc,CAAC,GAAI,QAAQ;EAErF,OAAO;CACT;;;;CAKA,AAAO,cAAc,UAA6D;EAChF,KAAK,eAAe,gBAAgB,CAAC,GAAI,KAAK,eAAe,iBAAiB,CAAC,GAAI,QAAQ;EAE3F,OAAO;CACT;;;;CAKA,AAAO,SAAS,MAAc,IAAY,eAA0C,aAAa;EAC/F,OAAO,KAAK,IAAI,OAAO,EAAE,eAAe;GACtC,SAAS,SAAS,IAAI,iBAAiB,cAAc,MAAM,GAAG;EAChE,CAAC;CACH;;;;;;;;;;;;;;CAeA,AAAO,UAAU,SAA+B,eAAmC,CAAC,GAAG;EACrF,KAAK,kBAAkB,KAAK;GAAE;GAAS,WAAW,aAAa;EAAU,CAAC;EAE1E,OAAO;CACT;;CAGA,AAAU,0BAA0B,QAAyB;EAC3D,KAAK,MAAM,aAAa,KAAK,mBAC3B,mBACE,QACA;GAAE,GAAG,UAAU;GAAS,eAAe;EAAM,GAC7C,EAAE,WAAW,uBAAuB,UAAU,SAAS,EAAE,CAC3D;CAEJ;;;;;;CAOA,AAAU,mBACR,MACA,SACA,eAAmC,CAAC,GACpC;EACA,KAAK,IACH,MACA,SACA,aAAa,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,aAAa,UAAU,CAClF;EAEA,MAAM,SAAS,KAAK,6BAA6B,UAAU,KAAK;EAChE,MAAM,QAAQ,OAAO,OAAO,SAAS;EAErC,IAAI,OAAO,MAAM,cAAc;EAE/B,OAAO;CACT;;;;CAKA,AAAO,KACL,MACA,UACA,WACA,eAAmC,CAAC,GACpC;EACA,OAAO,KAAK,mBACV,OACC,EAAE,eAAe;GAChB,SAAS,SAAS,UAAU,SAAS;EACvC,GACA,YACF;CACF;;;;CAKA,AAAO,WACL,MACA,UACA,WACA,eAAmC,CAAC,GACpC;EACA,OAAO,KAAK,mBACV,OACC,EAAE,eAAe;GAChB,SAAS,eAAe,UAAU,SAAS;EAC7C,GACA,YACF;CACF;;;;CAKA,AAAO,MACL,OACA,WACA,eAAmC,CAAC,GACpC;EACA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,KAAK,GACjD,KAAK,KAAK,MAAM,UAAU,WAAW,YAAY;CAErD;;;;CAKA,AAAO,YACL,OACA,WACA,eAAmC,CAAC,GACpC;EACA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,KAAK,GACjD,KAAK,WAAW,MAAM,UAAU,WAAW,YAAY;CAE3D;CAWA,AAAO,MAAM,GAAG,MAAa;EAC3B,KAAK,gBAAgB,SAAS,WAAW;GACvC,IAAI,KAAK,WAAW,GAClB,OAAO,SAAS,OAAO,KAAK,EAAE;QAE9B,OAAO,SAAS,OAAO;IACrB,QAAQ,KAAK;IACb,UAAU,KAAK;IACf,GAAG,KAAK;GACV,CAAC;EAEL,CAAC;EAED,OAAO;CACT;;;;CAKA,AAAO,IACL,QACA,MACA,SACA,UAAwB,CAAC,GACzB;EACA,IAAI,MAAM,QAAQ,IAAI,GAAG;GACvB,KAAK,SAAS,MAAM,KAAK,IAAI,QAAQ,GAAG,SAAS,OAAO,CAAC;GACzD,OAAO;EACT;EAEA,MAAM,SAAS,KAAK,OAAO,OAAO,QAAQ,MAAM,WAAW;GACzD,OAAO,mBAAmB,MAAM,MAAM;EACxC,GAAG,EAAE;EAEL,MAAM,OAAO,KAAK,OAAO,KAAK,aAC3B,MAAM,eAAe;GACpB,OAAO,KAAK,aAAa,MAAM,MAAM,GAAG;EAC1C,GACA,QAAQ,QAAQ,KAAK,KAAK,QAAQ,OAAO,GAAG,GAAG,GAAG,CACpD;EAKA,OAAO,mBAAmB,QAAQ,IAAI;EAEtC,MAAM,uBAAuB,QAAQ,wBAAwB;EAI7D,UAAU,EAAE,GAAG,QAAQ;EAEvB,IAAI,yBAAyB,UAC3B,QAAQ,aAAa,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,GAAG,KAAK,OAAO,UAAU;OAE9E,QAAQ,aAAa,CAAC,GAAG,KAAK,OAAO,YAAY,GAAI,QAAQ,cAAc,CAAC,CAAE;EAKhF,IAAI,QAAQ,WAAW,WAAc,KAAK,OAAO,UAAU,KAAK,GAC9D,QAAQ,SAAS;EAGnB,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,MAAM,CAAC,YAAY,UAAU;GAE7B,IAAI,OAAO,WAAW,YAAY,YAChC,MAAM,IAAI,aACR,UACA,8BAA8B,OAAO,oBAAoB,WAAW,YAAY,KAAK,EACvF;GAGF,UAAU,WAAW,OAAO,CAAC,KAAK,UAAU;GAC5C,mBAAmB,WAAW,SAAS,OAAO;GAE9C,IAAI,CAAC,QAAQ,YAAY;IACvB,QAAQ,aAAa,CAAC;IACtB,IAAI,WAAW,GAAG,OAAO,oBACvB,QAAQ,WAAW,SAAS,WAAW,GAAG,OAAO,kBAAkB,CAAC;IAGtE,IAAI,WAAW,GAAG,OAAO,YACvB,QAAQ,WAAW,WAAW,WAAW,GAAG,OAAO;GAEvD;EACF;EAEA,MAAM,YAAmB;GACvB;GACA;GACA;GACA,GAAG;GACH;GACA,WAAW,QAAQ;GACnB,SAAS,UAAU;GAEnB,cAAc,CAAC,GAAG,KAAK,OAAO,MAAM;GAEpC,YAAY,KAAK,OAAO,cAAc;EACxC;EAEA,MAAM,SAAS,KAAK,6BAA6B,UAAU,KAAK;EAEhE,IAAI,UAAU,MAAM;GAElB,MAAM,QAAQ,OAAO,MAAM,UAAU,MAAM,SAAS,UAAU,IAAI;GAElE,IAAI,OAAO;IAET,IAAI,MAAM,WAAW,UAAU,QAC7B,MAAM,IAAI,oBACR,UAAU,MACV,eAAe,UAAU,KAAK,6CACH,sBAAsB,KAAK,EAAE,0BAC7B,sBAAsB,SAAS,EAAE,2IAG9D;SAEA,UAAU,QAAQ,sBAAsB,UAAU,MAAM;GAE5D;EACF;EAOA,IAAI,KAAK,6BACP,KAAK,4BAA4B,YAAY,KAAK,SAAS;OAE3D,wBAAwB,UAAU,SAAS,SAAS;EAGtD,OAAO,KAAK,SAAS;EAErB,IAAI,CAAC,KAAK,6BACR,KAAK;EAGP,OAAO;CACT;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAA0B,MAAM,SAAS,OAAO;CAClE;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAAO,MAAM,SAAS,OAAO;CAC/C;;;;CAKA,AAAO,KAAK,MAAyB,SAA6B,UAAwB,CAAC,GAAG;EAC5F,OAAO,KAAK,IAAI,QAAQ,MAAM,SAAS,OAAO;CAChD;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAAO,MAAM,SAAS,OAAO;CAC/C;;;;CAKA,AAAO,OAAO,MAAyB,SAA6B,UAAwB,CAAC,GAAG;EAC9F,OAAO,KAAK,IAAI,UAAU,MAAM,SAAS,OAAO;CAClD;;;;CAKA,AAAO,MAAM,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAClF,OAAO,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CACjD;;;;CAKA,AAAO,KAAK,MAAc,SAA6B,UAAwB,CAAC,GAAG;EACjF,OAAO,KAAK,IAAI,QAAQ,MAAM,SAAS,OAAO;CAChD;;;;CAKA,AAAO,QAAQ,MAAc,SAA6B,UAAwB,CAAC,GAAG;EACpF,OAAO,KAAK,IAAI,WAAW,MAAM,SAAS,OAAO;CACnD;;;;CAKA,AAAO,MAAM,MAAc,UAAwB,CAAC,GAAG;EACrD,OAAO,IAAI,aAAa,MAAM,MAAM,OAAO;CAC7C;;;;;;;;;;;CAYA,AAAO,gBACL,MACA,UACA,UAMI,CAAC,GACL;EAKA,MAAM,mBAAmB,QAAQ,QAAQ,YAAY,MAAM,MAAM,GAAG,CAAC;EAErE,OAAO,KAAK,MAAM;GAAE,QAAQ;GAAM,MAAM;EAAiB,SAAS;GAChE,MAAM,OAAO;GAGb,MAAM,gBAAgB;GAEtB,MAAM,wBAAwB,SAAyB;IACrD,OAAO,SAEJ,CAAC,QAAQ,UAAU,CAAC,QAAQ,OAAO,SAAS,IAAI,OAEhD,CAAC,QAAQ,QAAQ,QAAQ,KAAK,SAAS,IAAI,EAC9C;GACF;GAEA,IAAI,cAAc,QAAQ,qBAAqB,MAAM,GACnD,KAAK,IAAI,MAAM,QAAQ,SAAS,QAAQ,oBAAoB,eAAe,MAAM,GAAG;IAClF,GAAG;IACH,MAAM;IACN,SAAS;GACX,CAAC;GAGH,IAAI,cAAc,OAAO,qBAAqB,KAAK,GACjD,KAAK,IAAI,QAAe,QAAQ,SAAS,OAAO,oBAAoB,eAAe,KAAK,GAAG;IACzF,GAAG;IACH,MAAM;IACN,SAAS;GACX,CAAC;GAGH,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GAAG;IAC1D,MAAM,UAAU,QAAQ,SAAS,UAAU,KAAK,iBAAiB,eAAe,QAAQ;IAExF,KAAK,KAAK,MAAM,SAAS;KACvB,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GAAG;IAC1D,MAAM,UAAU,QAAQ,SAAS,UAAU,KAAK,iBAAiB,eAAe,QAAQ;IAExF,KAAK,IAAI,QAAe,SAAS;KAC/B,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,SAAS,qBAAqB,OAAO,GAAG;IACxD,MAAM,UAAU,QAAQ,SAAS,SAAS,KAAK,iBAAiB,eAAe,OAAO;IAEtF,KAAK,MAAM,QAAe,SAAS;KACjC,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GACvD,KAAK,OACH,QACA,QAAQ,SAAS,UAAU,oBAAoB,eAAe,QAAQ,GACtE;IACE,GAAG;IACH,MAAM;IACN,SAAS;GACX,CACF;GAGF,IAAI,cAAc,cAAc,qBAAqB,QAAQ,GAC3D,KAAK,OACH,MACA,QAAQ,SAAS,cAAc,oBAAoB,eAAe,YAAY,GAC9E;IACE,GAAG;IACH,MAAM;IACN,SAAS;GACX,CACF;GAGF,OAAO;EACT,CAAC;CACH;;;;CAKA,AAAO,MAAM,SAA+B,UAA+B;EACzE,MAAM,EACJ,QAOA,OAAO,SAAS,KAAK,OAAO,QAAQ,OAAO,GAAG,GAAG,GAAG,IAAI,QACxD,YACA,QAAQ,aACN;EAEJ,IAAI,UACF,KAAK,OAAO,UAAU,KAAK,OAAO,UAAU,KAAK;EAGnD,IAAI,QACF,KAAK,OAAO,OAAO,KAAK,MAAM;EAGhC,IAAI,MACF,KAAK,OAAO,KAAK,KAAK,IAAI;EAG5B,IAAI,YACF,KAAK,OAAO,WAAW,KAAK,GAAG,UAAU;EAG3C,IAAI;GACF,SAAS;EACX,UAAU;GAGR,IAAI,QACF,KAAK,OAAO,OAAO,IAAI;GAGzB,IAAI,MACF,KAAK,OAAO,KAAK,IAAI;GAGvB,IAAI,YACF,KAAK,OAAO,WAAW,OACrB,KAAK,OAAO,WAAW,SAAS,WAAW,QAC3C,WAAW,MACb;GAEF,IAAI,UACF,KAAK,OAAO,UAAU,KAAK,OAAO,UAAU,KAAK;EAErD;EAEA,OAAO;CACT;;;;CAKA,AAAO,OAAO,QAAgB,UAAsB;EAClD,OAAO,KAAK,MAAM,EAAE,OAAO,GAAG,QAAQ;CACxC;;;;;;;;;;;;;CAcA,AAAO,QAAQ,SAA0B,UAAsB;EAC7D,OAAO,KAAK,OAAO,KAAK,WAAW,QAAQ;CAC7C;;;;;;;CAQA,MAAa,eACX,YACA,UACwB;EAExB,KAAK,OAAO,aAAa;EAEzB,IAAI;GAEF,OAAO,MAAM,SAAS;EACxB,SAAS,OAAO;GAMd,IAAI,MAAM;IACR,QAAQ;IACR,QAAQ;IACR,SAAS,mCAAmC,WAAW;IACvD,SAAS;KAAE;KAAY;IAAM;GAC/B,CAAC;GAED,MAAM;EACR,UAAU;GAGR,OAAO,KAAK,OAAO;EACrB;CACF;;;;;;CAOA,AAAO,yBAAyB,YAA0B;EACxD,IAAI,KAAK,6BAA6B;GACpC,KAAK,4BAA4B,SAAS,KAAK,4BAA4B,OAAO,QAC/E,UAAU,MAAM,eAAe,UAClC;GACA,KAAK,4BAA4B,mBAAmB,IAAI,UAAU;GAClE;EACF;EAEA,KAAK,SAAS,KAAK,OAAO,QAAQ,UAAU,MAAM,eAAe,UAAU;EAI3E,gCAAgC,UAAU;EAE1C,KAAK;CACP;;;;;;;;;CAUA,MAAa,2BACX,aACA,SACY;EACZ,IAAI,KAAK,6BACP,MAAM,IAAI,MAAM,4CAA4C;EAG9D,MAAM,qBAAqB,IAAI,IAAI,WAAW;EAE9C,KAAK,8BAA8B;GACjC,QAAQ,KAAK,OAAO,QAAQ,UAAU,CAAC,mBAAmB,IAAI,MAAM,UAAU,CAAC;GAC/E;GACA,aAAa,CAAC;EAChB;EAEA,IAAI;GACF,MAAM,SAAS,MAAM,QAAQ;GAC7B,MAAM,cAAc,KAAK;GAEzB,KAAK,SAAS,YAAY;GAC1B,KAAK,8BAA8B;GAInC,KAAK,MAAM,cAAc,YAAY,oBACnC,gCAAgC,UAAU;GAG5C,MAAM,kBAAkB,IAAI,IAAI,YAAY,MAAM;GAElD,KAAK,MAAM,SAAS,YAAY,aAC9B,IAAI,gBAAgB,IAAI,KAAK,GAC3B,wBAAwB,MAAM,SAAS,KAAK;GAIhD,IAAI,KAAK,qBACP,8BACE,YAAY,YAAY,QAAQ,UAAU,gBAAgB,IAAI,KAAK,CAAC,CACtE;GAGF,KAAK;GAEL,OAAO;EACT,SAAS,OAAO;GACd,KAAK,8BAA8B;GACnC,MAAM;EACR;CACF;;;;CAKA,AAAQ,iBAAiB,UAAyB,QAAuC;EACvF,MAAM,UAAU,oBAAoB,UAAU,MAAM;EAEpD,MAAM,mBAAmB,UAAU,aAAa;EAEhD,IAAI,WAAW,SAAS;GACtB,QAAQ,aAAa;GAErB,IAAI,QAAQ,YAAY,UACtB,QAAQ,WAAW,WAAW,QAAQ,WAAW,SAAS,KAAK,QAAQ;GAGzE,IAAI,SAAS,YAAY,OACvB,QAAQ,aAAa,MAAM,SAAS,WAAW,OAAO,QAAQ,UAAU;GAG1E,OAAO;EACT;EAEA,IAAI,CAAC,SAAS,cAAe,CAAC,oBAAoB,CAAC,SAAS,WAAW,KAAM,OAAO;EAEpF,IAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,oBAAoB;IACxB,KAAK,UAAU,YAAY,KAAK;KAC/B,SAAS,kBAAkB;GAC9B;GAEA,MAAM,aAAuC,CAAC;GAE9C,IAAI,SAAS,WAAW,IAAI,UAAU,kBAAkB,QAAQ;IAC9D,IAAI,CAAC,kBAAkB,UAAU,SAAS,WAAW,IAAI,QAEvD,WAAW,SAAS,SAAS,WAAW,IAAI;SACvC,IAAI,kBAAkB,UAAU,SAAS,WAAW,IAAI,QAE7D,WAAW,SAAS,SAAS,WAAW,IAAI,OAAO,MAAM,iBAAiB,MAAM;SAC3E,IAAI,kBAAkB,UAAU,CAAC,SAAS,WAAW,IAAI,QAE9D,WAAW,SAAS,iBAAiB;GAGzC;GAEA,IAAI,kBAAkB,OAAO,kBAAkB,SAC7C,WAAW,WAAW,OAAO,EAAE,SAAS,eAA4B;IAClE,IAAI,kBAAkB,KAAK;KACzB,MAAM,SAAS,MAAM,kBAAkB,IAAI,KAAK,UAAU;MAAE;MAAS;KAAS,CAAC;KAE/E,IAAI,QAAQ,OAAO;IACrB;IAEA,IAAI,kBAAkB,SACpB,OAAO,MAAM,kBAAkB,OAAO,EAAE,KAAK,UAAU;KAAE;KAAS;IAAS,CAAC;GAIhF;GAGF,IAAI,CAAC,QAAQ,UAAU,GACrB,QAAQ,aAAa;EAEzB,OAAO;GACL,QAAQ,aAAa,SAAS,WAAW;GAEzC,IAAI,QAAQ,YAAY,UACtB,QAAQ,WAAW,WAAW,QAAQ,WAAW,SAAS,KAAK,QAAQ;EAE3E;EAEA,OAAO;CACT;;;;CAKA,AAAO,OAAO;EACZ,OAAO,KAAK;CACd;;;;;;;CAQA,AAAO,kBAAkB,UAAiC,CAAC,GAA6B;EACtF,OAAO,OAAO,OACZ,KAAK,OACF,QAAQ,UAAU,CAAC,MAAM,UAAU,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,CAAC,CAAC,CAC3F,KAAK,UAAU;GACd,MAAM,WAAW;IAAE,MAAM,MAAM;IAAO,MAAM,MAAM;IAAM,QAAQ,MAAM;GAAO;GAC7E,MAAM,SAAS,MAAM,SAAS;GAC9B,MAAM,WAAW,SAAS,QAAQ,kBAAkB,QAAQ,KAAK,IAAI;GAGrE,IAAI,CAAC,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,WAAW,GAAG,OAAO,OAAO,OAAO,QAAQ;GAElF,OAAO,OAAO,OAAO;IAAE,GAAG;IAAU,UAAU,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;GAAE,CAAC;EAChF,CAAC,CACL;CACF;;;;;;;;;CAUA,AAAO,aAAqB;EAC1B,OAAO,KAAK,OAAO;CACrB;;;;CAKA,AAAO,KAAK,QAAyB;EAInC,gCAAgC;EAEhC,KAAK,eAAe,YAAY,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;EAM5E,MAAM,oBAAoB,IAAI,IAC5B,KAAK,OACF,QAAQ,UAAU,MAAM,OAAO,YAAY,MAAM,MAAM,CAAC,CACxD,KAAK,UAAU,MAAM,IAAI,CAC9B;EAEA,KAAK,OAAO,SAAS,UAAU;GAC7B,MAAM,gBAAgB,MAAM,OAAO,YAAY;GAC/C,MAAM,wBAAwB,OAAO,cAAc,CAAC,KAAK,MAAM;GAE/D,MAAM,UAAU;IACd,GAAG,MAAM;IACT,GAAI,kBAAkB,SACpB,kBAAkB,IAAI,MAAM,IAAI,KAAK,EAAE,iBAAiB,MAAM;IAChE,QAAQ;KACN,GAAG,MAAM,eAAe;KAExB,WAAW,sBAAsB,KAAK;IACxC;GACF;GAEA,sBACE,MAAM,MACN,SACA,OAAO,aAA6B,UAAwB;IAC1D,MAAM,EAAE,QAAQ,aAAa,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,aAAa,KAAK;IAE7E,OAAO,UAAU,SAAS;GAC5B,CACF;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM;EAErC,KAAK,eAAe,eAAe,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;CACjF;;;;;CAMA,AAAO,cAAc,QAAyB;EAI5C,gCAAgC;EAIhC,KAAK,sBACHA,OAAe,IAAa,4BAA4B,IAAI,MAAM;EACpE,IAAI,KAAK,qBACP,8BAA8B,KAAK,MAAM;EAG3C,KAAK,eAAe,YAAY,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;EAE5E,IAAI;EACJ,IAAI,kBAAkB;EAEtB,MAAM,oBAAoB,qBACxB,QACAC,WAAO,IAAI,uBAAuB,MAAM,KAC1C;EAOA,MAAM,6BAA6B;GACjC,IAAI,iBAAiB,oBAAoB,KAAK,eAC5C,OAAO;GAGT,gBAAgB,IAAI,cAAc;GAElC,cAAc,SAAS,KAAK,MAAM;GAElC,kBAAkB,KAAK;GAEvB,OAAO;EACT;EAMA,OAAO,QACL,aACA,OAAO,gBAAgC,iBAA+B;GAIpE,IAAI,eAAe,aAAa,QAAQ,KACtC;GAGF,MAAM,QAAQ,qBAAqB,CAAC,CAAC,KAAK,eAAe,QAAQ,eAAe,GAAG;GAEnF,IAAI,CAAC,OACH;GAGF,AAAC,eAAsC,kBAAkB;GAEzD,eAAe,SAAS,MAAM;GAI9B,MAAM,kBAAkB,MAAM,OAAO,gBAAgB,YAAY;GAEjE,IAAI,aAAa,MACf,OAAO;GAGT,OAAO,cAAc,MAAM,OAAO,aAAa,gBAAgB,YAAY;EAC7E,CACF;EAEA,KAAK,MAAM,SAAS,uBAAuB,QAAQ,SAAS,SAAS,WAAW,GAC9E,OAAO,QAAQ,OAAO,OAAO,gBAAgC,iBAA+B;GAC1F,MAAM,QAAS,eAAsC;GAErD,IAAI,CAAC,OACH;GAGF,OAAO,cAAc,MAAM,OAAO,OAAO,gBAAgB,YAAY;EACvE,CAAC;EAIH,MAAM,kBAAkB,OAAO,gBAAgC,iBAA+B;GAC5F,MAAM,QAAS,eAAsC;GAGrD,IAAI,CAAC,OACH,OAAO,aACJ,KAAK,GAAG,CAAC,CACT,KAAK,kBAAkB,eAAe,QAAQ,eAAe,GAAG,CAAC;GAGtE,IAAI;IAEF,MAAM,EAAE,QAAQ,aAAa,MAAM,KAAK,YAAY,MAAM,KAAK,CAAC,CAC9D,gBACA,YACF;IAEA,OAAO,UAAU,SAAS;GAC5B,SAAS,OAAO;IACd,IAAI,MAAM,UAAU,gBAAgB,OAAgB;KAClD,QAAQ,eAAe;KACvB,KAAK,wBAAwB;MAC3B,IAAI,eAAe;MACnB,QAAQ,eAAe;MACvB,KAAK,eAAe;MACpB,OAAO,MAAM;KACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;GACR;EACF;EAQA,MAAM,oBAAoB,iBAAiB,CAAC,CAAC,cAAc;EAE3D,KAAK,MAAM,UAAU,sBAAsB;GACzC,IACE,WAAW,cACV,qBAAqB,OAAO,SAAS;IAAE,QAAQ;IAAW,KAAK;GAAI,CAAC,IAErE;GAGF,OAAO,MAAM;IACX;IACA,KAAK;IACL,GAAI,WAAW,SAAS,EAAE,iBAAiB,MAAM;IAIjD,QAAQ,EAAE,WAAW,MAAM;IAC3B,SAAS;GACX,CAAC;EACH;EAEA,KAAK,0BAA0B,MAAM;EAErC,KAAK,eAAe,eAAe,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;CACjF;;;;CAKA,AAAO,SAAS,MAAc,SAA8B,CAAC,GAAG;EAC9D,MAAM,QAAQ,KAAK,OAAO,MAAM,UAAU,MAAM,SAAS,IAAI;EAE7D,IAAI,CAAC,OACH,MAAM,IAAI,aAAa,UAAU,eAAe,KAAK,YAAY;EAGnE,MAAM,uBAAO,IAAI,IAAY;EAE7B,MAAM,OAAO,MAAM,KAAK,QAAQ,2BAA2B,QAAQ,KAAa,aAAa;GAC3F,MAAM,QAAQ,OAAO;GAErB,IAAI,UAAU,UAAa,UAAU,MAAM;IACzC,IAAI,UAAU,OAAO;IAErB,MAAM,IAAI,aAAa,UAAU,UAAU,KAAK,oBAAoB,IAAI,QAAQ;GAClF;GAEA,KAAK,IAAI,GAAG;GAEZ,OAAO,mBAAmB,OAAO,KAAK,CAAC;EACzC,CAAC;EAED,MAAM,QAAQ,OAAO,KAAK,MAAM,CAAC,CAC9B,QAAQ,QAAQ,CAAC,KAAK,IAAI,GAAG,KAAK,OAAO,SAAS,UAAa,OAAO,SAAS,IAAI,CAAC,CACpF,KAAK,QAAQ,GAAG,mBAAmB,GAAG,EAAE,GAAG,mBAAmB,OAAO,OAAO,IAAI,CAAC,GAAG,CAAC,CACrF,KAAK,GAAG;EAEX,OAAO,QAAQ,GAAG,KAAK,GAAG,UAAU;CACtC;;;;CAKA,AAAQ,YAAY,OAAc;EAChC,OAAO,OAAO,gBAAgC,oBAAkC;GAC9E,MAAM,UAAU,IAAI,QAAQ;GAC5B,MAAM,WAAW,IAAI,SAAS;GAC9B,SAAS,YAAY,eAAe;GACpC,QAAQ,WAAW;GAEnB,SAAS,UAAU;GAQnB,MAAM,iBAAiB,iBAAiB;GACxC,MAAM,sBAAsB,iBAAiB,YAAY,IAAI,IAAI;GAEjE,QAAQ,WAAW,cAAc,CAAC,CAAC,SAAS,KAAK;GAEjD,IAAI,gBACF,cAAc,oBAAoB,OAAO,GAAG;IAC1C,MAAM;IACN,YAAY,YAAY,IAAI,IAAI;IAChC,OAAO,EAAE,OAAO,MAAM,KAAK;GAC7B,CAAC;GAkCH,IAAI,SAAS,MAzBQ,oBACnB;IACE,OAAO,UAAU,IAAI,KAAK,KAAK;IAC/B,OAAO,UAAU,IAAI,KAAK,KAAK;IAC/B,QAAQ,UAAU,IAAI,MAAM,KAAK;IACjC,WAAW,YAAY,IAAI;GAC7B,GACA;IACE,QAAQ;IACR,QAAQ,oBAAoB,MAAM,QAAQ,MAAM,IAAI;IACpD,WAAW,QAAQ;IAInB,SAAS,EAAE,SAAS,QAAQ,cAAc,EAAE;IAC5C;IAEA,kBAAkB,gBAAgB;GACpC,SACM,QAAQ,QAAQ,CACxB;GAOA,IACE,WAAW,UACX,WAAW,QACX,EAAE,kBAAkB,aACnB,WAAuB,iBAExB,SAAS,MAAM,SAAS,KAAK,MAAM;GAGrC,OAAO;IACL;IACA;IACA;GACF;EACF;CACF;AACF;AAEA,MAAa,SAAS,OAAO,YAAY;AAEzC,UAAU,IAAI,UAAU,MAAM"}
+{"version":3,"file":"router.mjs","names":["configAccessor","config"],"sources":["../../../../../../../../packages/core/src/router/router.ts"],"sourcesContent":["import config from \"@mongez/config\";\nimport proxy, { type FastifyHttpProxyOptions } from \"@fastify/http-proxy\";\nimport { WarlockError } from \"../errors/warlock-error\";\nimport type { FastifyStaticOptions } from \"@fastify/static\";\nimport { ltrim, merge, toCamelCase, trim } from \"@mongez/reinforcements\";\nimport { isEmpty } from \"@mongez/supportive-is\";\nimport { log } from \"@warlock.js/logger\";\nimport type { FastifyReply, FastifyRequest } from \"fastify\";\nimport { container } from \"../container\";\nimport { registerLazyStatic } from \"../http/lazy-static\";\nimport { buildCorsOptions } from \"../http/build-cors-options\";\nimport { Request } from \"../http/request\";\nimport { buildRequestLogSnapshot } from \"../http/request-log-snapshot\";\nimport { Response } from \"../http/response\";\nimport { type FastifyInstance } from \"../http/server\";\nimport { buildTracingContext, dispatchPhase, isTracingEnabled } from \"../http/tracing\";\nimport { describeRouteForLog } from \"./describe-route-for-log\";\nimport { logRequestLifecycle } from \"./log-request-lifecycle\";\nimport {\n  forgetPositionalHandlerSuspects,\n  inspectHandlerSignature,\n  reportPositionalHandlerSuspects,\n} from \"./positional-handler-diagnostics\";\nimport { isRequiredGuardRoute, reportUnguardedMutatingRoutes } from \"./unguarded-route-diagnostics\";\nimport { config as configAccessor } from \"../config/config-getter\";\nimport { normalizeRoutePath } from \"./normalize-route-path\";\nimport { RouteBuilder } from \"./route-builder\";\nimport { resolveRouteRateLimit, resolveStaticRateLimit } from \"./resolve-route-rate-limit\";\nimport { RouteNameTakenError } from \"./route-name-taken-error\";\nimport { DEV_DISPATCH_METHODS, buildNotFoundBody, createDevRateLimiter } from \"./dev-dispatch\";\nimport { RouteRegistry } from \"./route-registry\";\nimport { routeNameMethodSuffix } from \"./route-name-method-suffix\";\nimport type {\n  GroupedRoutesOptions,\n  HttpContext,\n  NamedApiRoute,\n  NamedApiRoutesOptions,\n  RequestHandler,\n  RequestHandlerType,\n  RequestHandlerValidation,\n  ResourceMethod,\n  Route,\n  RouteOptions,\n  RouteResource,\n  RouterGroupCallback,\n  RouterStacks,\n  StaticMountOptions,\n} from \"./types\";\n\n/**\n * A Fastify lifecycle hook as it may be declared in a route's `serverOptions`.\n * Fastify accepts a single hook or an array in either position.\n */\ntype RouteLifecycleHook = (\n  request: FastifyRequest,\n  reply: FastifyReply,\n) => unknown | Promise<unknown>;\n\n/**\n * The pre-handler phases the dev server forwards from a route's `serverOptions`.\n *\n * These are the admission-control phases and they share the `(request, reply)`\n * signature. `preParsing` is deliberately absent — it must return the payload\n * stream, so forwarding it generically would corrupt the body rather than\n * guard it. `bodyLimit` cannot be forwarded at all; Fastify reads it at\n * registration time and no hook can bound a body already being parsed.\n */\nconst FORWARDED_ROUTE_PHASES = [\"onRequest\", \"preValidation\", \"preHandler\"] as const;\n\ntype ForwardedRoutePhase = (typeof FORWARDED_ROUTE_PHASES)[number];\n\n/**\n * The route the dev dispatcher matched, stashed on the request so the hooks and\n * the wildcard handler all act on one match rather than each matching again.\n */\ntype DevMatchedRoute = { route: Route; params: Record<string, string> };\n\ntype DevDispatchRequest = FastifyRequest & {\n  matchedDevRoute?: DevMatchedRoute;\n};\n\nfunction toHookList(\n  hook: RouteLifecycleHook | RouteLifecycleHook[] | undefined,\n): RouteLifecycleHook[] {\n  if (!hook) {\n    return [];\n  }\n\n  return Array.isArray(hook) ? hook : [hook];\n}\n\n/**\n * Run a matched route's hooks for one phase.\n *\n * Returning the reply is how an async Fastify hook signals that it has answered\n * the request; the chain must stop there, so the value is propagated rather\n * than discarded.\n */\nasync function runRouteHooks(\n  route: Route,\n  phase: ForwardedRoutePhase,\n  request: FastifyRequest,\n  reply: FastifyReply,\n) {\n  const hooks = toHookList(\n    route.serverOptions?.[phase] as RouteLifecycleHook | RouteLifecycleHook[] | undefined,\n  );\n\n  for (const hook of hooks) {\n    const outcome = await hook(request, reply);\n\n    if (outcome === reply) {\n      return reply;\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Bound functions do not inherit static properties, so the handler metadata that\n * documentation and typings read (`responseSchema`) is copied onto the bound copy.\n */\nfunction copyResponseSchema(source: unknown, target: RequestHandler): void {\n  const responseSchema = (source as RequestHandler | undefined)?.responseSchema;\n\n  if (responseSchema) {\n    target.responseSchema = responseSchema;\n  }\n}\n\n/**\n * Bind a restful resource method to its resource, keeping its `responseSchema`.\n */\nfunction bindResourceHandler(\n  resource: RouteResource,\n  method: ResourceMethod | \"bulkDelete\",\n): RequestHandler {\n  const source = resource[method];\n  const handler = source?.bind(resource) as RequestHandler;\n\n  copyResponseSchema(source, handler);\n\n  return handler;\n}\n\n/**\n * Describe one claimant of a route name, for the duplicate-name error.\n *\n * `warlock dev` registers SSR page routes on the same router as API routes, so\n * the two share a single route-name namespace and collide across kinds. The\n * error is only actionable if it says which claimant is which, so `isPage` —\n * the router's only route-kind discriminator — is what separates them here.\n *\n * `sourceFile` is stamped only on routes registered through `withSourceFile`.\n * Routes registered without that scope have no owner, so say the source is\n * unknown rather than printing an empty string.\n */\nfunction describeRouteClaimant(route: Route) {\n  const type = route.isPage ? \"page route\" : \"API route\";\n  const source = route.sourceFile ? `declared in ${route.sourceFile}` : \"source file unknown\";\n\n  return `${type} ${route.method} ${route.path} (${source})`;\n}\n\nexport class Router {\n  /**\n   * Routes list\n   */\n  private routes: Route[] = [];\n\n  /**\n   * Bumped on every mutation of {@link routes}.\n   *\n   * The dev dispatcher caches a route registry and needs to know when it is\n   * stale. Comparing `routes.length` would miss an HMR reload that replaces a\n   * route without changing the count — the registry would then keep matching\n   * paths that no longer exist. A version counter cannot miss that.\n   */\n  private routesVersion = 0;\n\n  /**\n   * In-progress atomic replacement, when one exists. Reads continue to use\n   * {@link routes}; mutations and collision checks use this isolated draft.\n   */\n  private routeReplacementTransaction?: {\n    routes: Route[];\n    removedSourceFiles: Set<string>;\n    addedRoutes: Route[];\n  };\n\n  /**\n   * Set by the dev server: whether to warn about mutating routes that have no\n   * auth middleware and no `public: true` (`http.warnUnguardedRoutes`).\n   */\n  private warnUnguardedRoutes = false;\n\n  /**\n   * Router Instance\n   */\n  private static instance: Router;\n\n  /**\n   * Static paths\n   */\n  protected staticDirectories: {\n    options: FastifyStaticOptions;\n    rateLimit: StaticMountOptions[\"rateLimit\"];\n  }[] = [];\n\n  /**\n   * Event listeners\n   */\n  protected eventListeners: Record<string, ((router: Router, server: FastifyInstance) => void)[]> =\n    {};\n\n  /**\n   * Stacks\n   * Stacks will be used for grouping routes to add prefix, name or middleware\n   */\n  protected stacks: RouterStacks = {\n    prefix: [],\n    name: [],\n    middleware: [],\n  };\n\n  /**\n   * Get router instance\n   */\n  public static getInstance() {\n    if (!Router.instance) {\n      Router.instance = new Router();\n    }\n\n    return Router.instance;\n  }\n\n  private constructor() {\n    //\n  }\n\n  /**\n   * Listen to router before scan\n   */\n  public beforeScanning(callback: (router: Router, server: FastifyInstance) => void) {\n    this.eventListeners.beforeScan = [...(this.eventListeners.beforeScan || []), callback];\n\n    return this;\n  }\n\n  /**\n   * Listen to router after scanning\n   */\n  public afterScanning(callback: (router: Router, server: FastifyInstance) => void) {\n    this.eventListeners.afterScanning = [...(this.eventListeners.afterScanning || []), callback];\n\n    return this;\n  }\n\n  /**\n   * Redirect path to another path\n   */\n  public redirect(from: string, to: string, redirectMode: \"temporary\" | \"permanent\" = \"temporary\") {\n    return this.get(from, ({ response }) => {\n      response.redirect(to, redirectMode === \"temporary\" ? 302 : 301);\n    });\n  }\n\n  /**\n   * Serve a static folder.\n   *\n   * Static mounts are exempt from the global rate limiter by default; set\n   * `http.rateLimit.staticFiles: true` to count every mount, or pass\n   * `{ rateLimit }` to decide for this mount alone: `true` counts it against\n   * the global limiter, `false` exempts it, and an object gives it its own\n   * limit and bucket.\n   *\n   * @example\n   * router.directory({ root: rootPath(\"docs\"), prefix: \"/docs/\" });\n   * router.directory({ root: rootPath(\"exports\"), prefix: \"/exports/\" }, { rateLimit: true });\n   */\n  public directory(options: FastifyStaticOptions, mountOptions: StaticMountOptions = {}) {\n    this.staticDirectories.push({ options, rateLimit: mountOptions.rateLimit });\n\n    return this;\n  }\n\n  /** Declare static routes at boot; load the upstream sender on the first file request. */\n  protected registerStaticDirectories(server: FastifyInstance) {\n    for (const directory of this.staticDirectories) {\n      registerLazyStatic(\n        server,\n        { ...directory.options, decorateReply: false },\n        { rateLimit: resolveStaticRateLimit(directory.rateLimit) },\n      );\n    }\n  }\n\n  /**\n   * Register a GET route that serves a static file. Like `directory()`, it is\n   * exempt from the global rate limiter unless `http.rateLimit.staticFiles`\n   * or its own `rateLimit` says otherwise.\n   */\n  protected addStaticFileRoute(\n    path: string,\n    handler: RequestHandler,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    this.get(\n      path,\n      handler,\n      mountOptions.rateLimit === undefined ? {} : { rateLimit: mountOptions.rateLimit },\n    );\n\n    const routes = this.routeReplacementTransaction?.routes ?? this.routes;\n    const route = routes[routes.length - 1];\n\n    if (route) route.$staticFile = true;\n\n    return this;\n  }\n\n  /**\n   * Serve file\n   */\n  public file(\n    path: string,\n    location: string,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    return this.addStaticFileRoute(\n      path,\n      ({ response }) => {\n        response.sendFile(location, cacheTime);\n      },\n      mountOptions,\n    );\n  }\n\n  /**\n   * Serve cached file, it will cache the file to 1 year by default\n   */\n  public cachedFile(\n    path: string,\n    location: string,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    return this.addStaticFileRoute(\n      path,\n      ({ response }) => {\n        response.sendCachedFile(location, cacheTime);\n      },\n      mountOptions,\n    );\n  }\n\n  /**\n   * Serve list of files\n   */\n  public files(\n    files: Record<string, string>,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    for (const [path, location] of Object.entries(files)) {\n      this.file(path, location, cacheTime, mountOptions);\n    }\n  }\n\n  /**\n   * Serve list of cached files, it will cache the file to 1 year by default\n   */\n  public cachedFiles(\n    files: Record<string, string>,\n    cacheTime?: number,\n    mountOptions: StaticMountOptions = {},\n  ) {\n    for (const [path, location] of Object.entries(files)) {\n      this.cachedFile(path, location, cacheTime, mountOptions);\n    }\n  }\n\n  /**\n   * Add proxy route\n   */\n  public proxy(\n    path: string,\n    baseUrl: string,\n    options?: Omit<FastifyHttpProxyOptions, \"prefix\" | \"upstream\">,\n  ): this;\n  public proxy(options: FastifyHttpProxyOptions): this;\n  public proxy(...args: any[]) {\n    this.beforeScanning((_router, server) => {\n      if (args.length === 1) {\n        server.register(proxy, args[0]);\n      } else {\n        server.register(proxy, {\n          prefix: args[0],\n          upstream: args[1],\n          ...args[2],\n        });\n      }\n    });\n\n    return this;\n  }\n\n  /**\n   * Add route to routes list\n   */\n  public add(\n    method: Route[\"method\"],\n    path: string | string[],\n    handler: RequestHandlerType,\n    options: RouteOptions = {},\n  ) {\n    if (Array.isArray(path)) {\n      path.forEach((p) => this.add(method, p, handler, options));\n      return this;\n    }\n\n    const prefix = this.stacks.prefix.reduce((path, prefix) => {\n      return normalizeRoutePath(path, prefix);\n    }, \"\");\n\n    const name = this.stacks.name.reduceRight(\n      (name, prefixName) => {\n        return trim(prefixName + \".\" + name, \".\");\n      },\n      options.name || trim(path.replace(/\\//g, \".\"), \".\"),\n    );\n\n    // The one place a route path becomes canonical. `normalizeRoutePath` is\n    // exported so the build-time page-route manifest can produce the very same\n    // string without registering anything.\n    path = normalizeRoutePath(prefix, path);\n\n    const middlewarePrecedence = options.middlewarePrecedence || \"after\";\n\n    // Work on a copy: the caller may reuse one options object for several\n    // routes, and merging the group stack into it would compound per route.\n    options = { ...options };\n\n    if (middlewarePrecedence === \"before\") {\n      options.middleware = [...(options.middleware || []), ...this.stacks.middleware];\n    } else {\n      options.middleware = [...this.stacks.middleware, ...(options.middleware || [])];\n    }\n\n    // An enclosing `router.group({ public: true })` makes the route public\n    // unless it says otherwise itself.\n    if (options.public === undefined && (this.stacks.public ?? 0) > 0) {\n      options.public = true;\n    }\n\n    // An enclosing `router.group({ sites })` scopes the route's browser table\n    // entry unless the route names its own sites.\n    const groupSites = this.stacks.sites?.at(-1);\n\n    if (options.sites === undefined && groupSites !== undefined) {\n      options.sites = groupSites;\n    }\n\n    if (Array.isArray(handler)) {\n      const [controller, action] = handler;\n\n      if (typeof controller[action] !== \"function\") {\n        throw new WarlockError(\n          \"WL3002\",\n          `Invalid controller action \"${action}\" for controller \"${controller.constructor.name}\"`,\n        );\n      }\n\n      handler = controller[action].bind(controller) as RequestHandler;\n      copyResponseSchema(controller[action], handler);\n\n      if (!handler.validation) {\n        handler.validation = {};\n        if (controller[`${action}ValidationSchema`]) {\n          handler.validation.schema = controller[`${action}ValidationSchema`]();\n        }\n\n        if (controller[`${action}Validate`]) {\n          handler.validation.validate = controller[`${action}Validate`];\n        }\n      }\n    }\n\n    const routeData: Route = {\n      method,\n      path,\n      handler,\n      ...options,\n      name,\n      rateLimit: options.rateLimit,\n      $prefix: prefix || \"/\",\n      // it must be a new array to avoid modifying the original array\n      $prefixStack: [...this.stacks.prefix],\n      // Inject source file from stacks if set\n      sourceFile: this.stacks.sourceFile || \"\",\n    };\n\n    const routes = this.routeReplacementTransaction?.routes ?? this.routes;\n\n    if (routeData.name) {\n      // check if the name exists\n      const route = routes.find((route) => route.name === routeData.name);\n\n      if (route) {\n        // check again if the route name exists with the same method\n        if (route.method === routeData.method) {\n          throw new RouteNameTakenError(\n            routeData.name,\n            `Route name \"${routeData.name}\" is already taken.\\n` +\n              `  already registered: ${describeRouteClaimant(route)}\\n` +\n              `  now being added:    ${describeRouteClaimant(routeData)}\\n` +\n              `Pages and API routes share one route-name namespace, so a name can only be ` +\n              `claimed once. Rename one of them via the \"name\" route option.`,\n          );\n        } else {\n          routeData.name += routeNameMethodSuffix(routeData.method);\n        }\n      }\n    }\n\n    // Registration-time only — nothing here runs per request. Suspects are\n    // collected now and reported together at boot (see `scan`), so a route file\n    // written against v4 produces one legible list instead of a mystery 500 per\n    // request. Recorded after the collision check so a route that never lands\n    // is never reported.\n    if (this.routeReplacementTransaction) {\n      this.routeReplacementTransaction.addedRoutes.push(routeData);\n    } else {\n      inspectHandlerSignature(routeData.handler, routeData);\n    }\n\n    routes.push(routeData);\n\n    if (!this.routeReplacementTransaction) {\n      this.routesVersion++;\n    }\n\n    return this;\n  }\n\n  /**\n   * Add a request that accepts all methods\n   */\n  public any(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"all\" as Route[\"method\"], path, handler, options);\n  }\n\n  /**\n   * Add get request method\n   */\n  public get(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"GET\", path, handler, options);\n  }\n\n  /**\n   * Add post request method\n   */\n  public post(path: string | string[], handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"POST\", path, handler, options);\n  }\n\n  /**\n   * Add put request method\n   */\n  public put(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"PUT\", path, handler, options);\n  }\n\n  /**\n   * Add delete request method\n   */\n  public delete(path: string | string[], handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"DELETE\", path, handler, options);\n  }\n\n  /**\n   * Add patch request method\n   */\n  public patch(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"PATCH\", path, handler, options);\n  }\n\n  /**\n   * Add head request method\n   */\n  public head(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"HEAD\", path, handler, options);\n  }\n\n  /**\n   * Add options request method\n   */\n  public options(path: string, handler: RequestHandlerType, options: RouteOptions = {}) {\n    return this.add(\"OPTIONS\", path, handler, options);\n  }\n\n  /**\n   * Get a chainable route builder for the same route path\n   */\n  public route(path: string, options: RouteOptions = {}) {\n    return new RouteBuilder(this, path, options);\n  }\n\n  /**\n   * Add full restful resource routes\n   * This method will generate the following routes:\n   * 1. GET /path: list all resources\n   * 2. GET /path/:id: get a single resource\n   * 3. POST /path: create a new resource\n   * 4. PUT /path/:id: update a resource\n   * 5. DELETE /path/:id: delete a resource\n   * 6. PATCH /path/:id: update a resource partially\n   */\n  public restfulResource(\n    path: string,\n    resource: RouteResource,\n    options: RouteOptions & {\n      only?: ResourceMethod[];\n      except?: ResourceMethod[];\n      replace?: Partial<Record<ResourceMethod, RequestHandler>> & {\n        bulkDelete?: RequestHandler;\n      };\n    } = {},\n  ) {\n    // Derive the base resource name from the path before the group below\n    // clears it for use as the routes' relative path. `options.name`, when\n    // given, replaces the path-derived name entirely (see the explicit\n    // `name` passed to `group()`) rather than composing with it.\n    const baseResourceName = options.name || toCamelCase(ltrim(path, \"/\"));\n\n    return this.group({ prefix: path, name: baseResourceName }, () => {\n      const path = \"\";\n\n      // clone the resource so we don't mess up with it\n      const routeResource = resource;\n\n      const isAcceptableResource = (type: ResourceMethod) => {\n        return Boolean(\n          // check if the route is not excluded\n          (!options.except || !options.except.includes(type)) &&\n          // check if the only option is set and the route is included\n          (!options.only || options.only.includes(type)),\n        );\n      };\n\n      if (routeResource.list && isAcceptableResource(\"list\")) {\n        this.get(path, options.replace?.list || bindResourceHandler(routeResource, \"list\"), {\n          ...options,\n          name: \"list\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.get && isAcceptableResource(\"get\")) {\n        this.get(path + \"/:id\", options.replace?.get || bindResourceHandler(routeResource, \"get\"), {\n          ...options,\n          name: \"single\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.create && isAcceptableResource(\"create\")) {\n        const handler = options.replace?.create || this.manageValidation(routeResource, \"create\");\n\n        this.post(path, handler, {\n          ...options,\n          name: \"create\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.update && isAcceptableResource(\"update\")) {\n        const handler = options.replace?.update || this.manageValidation(routeResource, \"update\");\n\n        this.put(path + \"/:id\", handler, {\n          ...options,\n          name: \"update\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.patch && isAcceptableResource(\"patch\")) {\n        const handler = options.replace?.patch || this.manageValidation(routeResource, \"patch\");\n\n        this.patch(path + \"/:id\", handler, {\n          ...options,\n          name: \"patch\",\n          restful: true,\n        });\n      }\n\n      if (routeResource.delete && isAcceptableResource(\"delete\")) {\n        this.delete(\n          path + \"/:id\",\n          options.replace?.delete || bindResourceHandler(routeResource, \"delete\"),\n          {\n            ...options,\n            name: \"delete\",\n            restful: true,\n          },\n        );\n      }\n\n      if (routeResource.bulkDelete && isAcceptableResource(\"delete\")) {\n        this.delete(\n          path,\n          options.replace?.bulkDelete || bindResourceHandler(routeResource, \"bulkDelete\"),\n          {\n            ...options,\n            name: \"bulkDelete\",\n            restful: true,\n          },\n        );\n      }\n\n      return this;\n    });\n  }\n\n  /**\n   * Group routes with options\n   */\n  public group(options: GroupedRoutesOptions, callback: RouterGroupCallback) {\n    const {\n      prefix,\n      // name must always be defined because\n      // if there are multiple groups without name\n      // they might generate the same route name\n      // thus causing an error\n      // in this case we need always to make sure that\n      // the name is always defined.\n      name = prefix ? trim(prefix.replace(/\\//g, \".\"), \".\") : undefined,\n      middleware,\n      public: isPublic,\n      sites,\n    } = options;\n\n    if (sites) {\n      (this.stacks.sites ??= []).push(sites);\n    }\n\n    if (isPublic) {\n      this.stacks.public = (this.stacks.public ?? 0) + 1;\n    }\n\n    if (prefix) {\n      this.stacks.prefix.push(prefix);\n    }\n\n    if (name) {\n      this.stacks.name.push(name);\n    }\n\n    if (middleware) {\n      this.stacks.middleware.push(...middleware);\n    }\n\n    try {\n      callback();\n    } finally {\n      // Always pop/splice this group's stacks, even if the callback throws,\n      // so a throwing group never leaks state onto the process-global singleton.\n      if (prefix) {\n        this.stacks.prefix.pop();\n      }\n\n      if (name) {\n        this.stacks.name.pop();\n      }\n\n      if (middleware) {\n        this.stacks.middleware.splice(\n          this.stacks.middleware.length - middleware.length,\n          middleware.length,\n        );\n      }\n      if (isPublic) {\n        this.stacks.public = (this.stacks.public ?? 1) - 1;\n      }\n\n      if (sites) {\n        this.stacks.sites?.pop();\n      }\n    }\n\n    return this;\n  }\n\n  /**\n   * Add prefix to all routes in the given callback\n   */\n  public prefix(prefix: string, callback: () => void) {\n    return this.group({ prefix }, callback);\n  }\n\n  /**\n   * Add API version prefix to all routes in the given callback\n   * Automatically formats the version as /v{version}\n   * @example\n   * router.version(\"1\", () => {\n   *   router.get(\"/users\", getUsersV1); // /v1/users\n   * });\n   *\n   * router.version(\"2\", () => {\n   *   router.get(\"/users\", getUsersV2); // /v2/users\n   * });\n   */\n  public version(version: string | number, callback: () => void) {\n    return this.prefix(`/v${version}`, callback);\n  }\n\n  /**\n   * Wrap route additions with a source file path\n   * Used for tracking which routes come from which file (for HMR)\n   * @param sourceFile Relative path to the source file (e.g., \"src/app/users/routes.ts\")\n   * @param callback Function that adds routes (will have sourceFile injected)\n   */\n  public async withSourceFile<T = any>(\n    sourceFile: string,\n    callback: () => T | Promise<T>,\n  ): Promise<T | undefined> {\n    // Set source file in stacks\n    this.stacks.sourceFile = sourceFile;\n\n    try {\n      // Execute callback (routes added here will have sourceFile injected)\n      return await callback();\n    } catch (error) {\n      // Log loudly, then RETHROW. Swallowing here silently dropped a whole\n      // route file (duplicate name, invalid action, import error) so the\n      // surface 404'd with no boot error. The caller decides what a throw\n      // means: at boot it aborts the boot, during HMR the dev server's\n      // batch-reload handler catches it, prints it, and keeps serving.\n      log.error({\n        module: \"router\",\n        action: \"registerRoutes\",\n        message: `Failed to register routes from \"${sourceFile}\"`,\n        context: { sourceFile, error },\n      });\n\n      throw error;\n    } finally {\n      // Always clear source file from stacks so a throwing file never leaks\n      // its sourceFile onto the process-global singleton.\n      delete this.stacks.sourceFile;\n    }\n  }\n\n  /**\n   * Remove all routes that belong to a specific source file\n   * Used when reloading routes files via HMR\n   * @param sourceFile Relative path to the source file\n   */\n  public removeRoutesBySourceFile(sourceFile: string): void {\n    if (this.routeReplacementTransaction) {\n      this.routeReplacementTransaction.routes = this.routeReplacementTransaction.routes.filter(\n        (route) => route.sourceFile !== sourceFile,\n      );\n      this.routeReplacementTransaction.removedSourceFiles.add(sourceFile);\n      return;\n    }\n\n    this.routes = this.routes.filter((route) => route.sourceFile !== sourceFile);\n\n    // Keep the signature diagnostics in step, so a reload that fixes a handler\n    // stops reporting the version it replaced.\n    forgetPositionalHandlerSuspects(sourceFile);\n\n    this.routesVersion++;\n  }\n\n  /**\n   * Atomically replace every route owned by the given exact source-file keys.\n   *\n   * The installer mutates an isolated draft. Public reads keep seeing the old\n   * live table across awaits, and a failed installer discards every draft\n   * mutation. A successful installer swaps the whole draft in one synchronous\n   * commit and invalidates the dev route registry exactly once.\n   */\n  public async replaceRoutesBySourceFiles<T>(\n    sourceFiles: Iterable<string>,\n    install: () => T | Promise<T>,\n  ): Promise<T> {\n    if (this.routeReplacementTransaction) {\n      throw new Error(\"Cannot nest route replacement transactions\");\n    }\n\n    const removedSourceFiles = new Set(sourceFiles);\n\n    this.routeReplacementTransaction = {\n      routes: this.routes.filter((route) => !removedSourceFiles.has(route.sourceFile)),\n      removedSourceFiles,\n      addedRoutes: [],\n    };\n\n    try {\n      const result = await install();\n      const transaction = this.routeReplacementTransaction!;\n\n      this.routes = transaction.routes;\n      this.routeReplacementTransaction = undefined;\n\n      // Diagnostic state follows the same commit boundary as the route table.\n      // Added routes were deliberately not inspected while still speculative.\n      for (const sourceFile of transaction.removedSourceFiles) {\n        forgetPositionalHandlerSuspects(sourceFile);\n      }\n\n      const committedRoutes = new Set(transaction.routes);\n\n      for (const route of transaction.addedRoutes) {\n        if (committedRoutes.has(route)) {\n          inspectHandlerSignature(route.handler, route);\n        }\n      }\n\n      if (this.warnUnguardedRoutes) {\n        reportUnguardedMutatingRoutes(\n          transaction.addedRoutes.filter((route) => committedRoutes.has(route)),\n        );\n      }\n\n      this.routesVersion++;\n\n      return result;\n    } catch (error) {\n      this.routeReplacementTransaction = undefined;\n      throw error;\n    }\n  }\n\n  /**\n   * Manage validation system for the given resource\n   */\n  private manageValidation(resource: RouteResource, method: \"create\" | \"update\" | \"patch\") {\n    const handler = bindResourceHandler(resource, method);\n\n    const methodValidation = resource?.validation?.[method];\n\n    if (method === \"patch\") {\n      handler.validation = methodValidation;\n\n      if (handler.validation?.validate) {\n        handler.validation.validate = handler.validation.validate.bind(resource);\n      }\n\n      if (resource.validation?.patch) {\n        handler.validation = merge(resource.validation.patch, handler.validation);\n      }\n\n      return handler;\n    }\n\n    if (!resource.validation || (!methodValidation && !resource.validation.all)) return handler;\n\n    if (resource.validation.all) {\n      const validationMethods = {\n        all: resource?.validation?.all?.validate,\n        [method]: methodValidation?.validate,\n      };\n\n      const validation: RequestHandlerValidation = {};\n\n      if (resource.validation.all.schema || methodValidation?.schema) {\n        if (!methodValidation?.schema && resource.validation.all.schema) {\n          // Case 2: Only all.schema exists - clone it for this method\n          validation.schema = resource.validation.all.schema;\n        } else if (methodValidation?.schema && resource.validation.all.schema) {\n          // Case 3: Both exist - merge them (all is base, method overrides)\n          validation.schema = resource.validation.all.schema.merge(methodValidation.schema);\n        } else if (methodValidation?.schema && !resource.validation.all.schema) {\n          // Case 1: Only method schema exists - use it directly\n          validation.schema = methodValidation.schema;\n        }\n        // Case 4: Neither exists - handled by outer if being false\n      }\n\n      if (validationMethods.all || validationMethods[method]) {\n        validation.validate = async ({ request, response }: HttpContext) => {\n          if (validationMethods.all) {\n            const output = await validationMethods.all.call(resource, { request, response });\n\n            if (output) return output;\n          }\n\n          if (validationMethods[method]) {\n            return await validationMethods[method]?.call(resource, { request, response });\n          }\n\n          return;\n        };\n      }\n\n      if (!isEmpty(validation)) {\n        handler.validation = validation;\n      }\n    } else {\n      handler.validation = resource.validation[method];\n\n      if (handler.validation?.validate) {\n        handler.validation.validate = handler.validation.validate.bind(resource);\n      }\n    }\n\n    return handler;\n  }\n\n  /**\n   * Get all routes list\n   */\n  public list() {\n    return this.routes;\n  }\n\n  /**\n   * Return fresh browser-safe snapshots of named, non-page routes.\n   *\n   * Names are the registered names, including method suffixes. `all` stays\n   * intact as route metadata; consumers decide whether their use supports it.\n   * A route that opted out with `clientVisible: false` carries that flag so\n   * browser-facing consumers can leave it out. `sites` is present only on a\n   * route that declared some, and `guarded: true` only on a route with an auth\n   * guard in its middleware chain (group middleware included).\n   */\n  public getNamedApiRoutes(options: NamedApiRoutesOptions = {}): readonly NamedApiRoute[] {\n    return Object.freeze(\n      this.routes\n        .filter((route) => !route.isPage && typeof route.name === \"string\" && route.name.length > 0)\n        .map((route) => {\n          // `clientVisible: false` is the only key this flag ever adds, and it is\n          // present only then: the common snapshot keeps its exact shape.\n          const snapshot = {\n            name: route.name!,\n            path: route.path,\n            method: route.method,\n            ...(route.clientVisible === false ? { clientVisible: false as const } : {}),\n            ...(route.sites === undefined ? {} : { sites: Object.freeze([...route.sites]) }),\n            ...(isRequiredGuardRoute(route) ? { guarded: true as const } : {}),\n          };\n          const schema = route.handler?.responseSchema;\n          const response = schema ? options.resolveResponse?.(schema, route) : undefined;\n\n          // A route without a declared schema keeps exactly the three-key record.\n          if (!response || Object.keys(response).length === 0) return Object.freeze(snapshot);\n\n          return Object.freeze({ ...snapshot, response: Object.freeze({ ...response }) });\n        }),\n    );\n  }\n\n  /**\n   * Number of routes currently registered on the singleton.\n   *\n   * Used as a readiness signal: a successful boot that ends up with zero\n   * routes almost always means a route module failed to register silently\n   * (see `withSourceFile`), so callers can surface that instead of letting\n   * the whole surface 404.\n   */\n  public routeCount(): number {\n    return this.routes.length;\n  }\n\n  /**\n   * Register routes to the server\n   */\n  public scan(server: FastifyInstance) {\n    // Every route is registered by the time we scan, so this is the first\n    // moment the whole list can be reported at once — and it is still before a\n    // single request is served.\n    reportPositionalHandlerSuspects();\n\n    this.eventListeners.beforeScan?.forEach((callback) => callback(this, server));\n\n    // Fastify automatically exposes HEAD for every GET route. When an app\n    // declares its own HEAD route at the same path, suppress only that GET\n    // route's implicit registration so the explicit handler owns HEAD,\n    // regardless of declaration order.\n    const explicitHeadPaths = new Set(\n      this.routes\n        .filter((route) => route.method.toLowerCase() === \"head\")\n        .map((route) => route.path),\n    );\n\n    this.routes.forEach((route) => {\n      const requestMethod = route.method.toLowerCase();\n      const requestMethodFunction = server[requestMethod].bind(server);\n\n      const options = {\n        ...route.serverOptions,\n        ...(requestMethod === \"get\" &&\n          explicitHeadPaths.has(route.path) && { exposeHeadRoute: false }),\n        config: {\n          ...route.serverOptions?.config,\n          // `undefined` keeps the global policy; `false` exempts the route.\n          rateLimit: resolveRouteRateLimit(route),\n        },\n      };\n\n      requestMethodFunction(\n        route.path,\n        options,\n        async (baseRequest: FastifyRequest, reply: FastifyReply) => {\n          const { output, response } = await this.handleRoute(route)(baseRequest, reply);\n\n          return output || response.baseResponse;\n        },\n      );\n    });\n\n    this.registerStaticDirectories(server);\n\n    this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));\n  }\n\n  /**\n   * Scan routes for the development server\n   * Uses wildcard routing with find-my-way for HMR support\n   */\n  public scanDevServer(server: FastifyInstance) {\n    // Same boot-time report as production `scan`. Routes reloaded later by HMR\n    // are still recorded, but only surface on the next scan or via\n    // `warlock doctor`.\n    reportPositionalHandlerSuspects();\n\n    // Development only: list mutating routes nobody guarded. Routes added by a\n    // later HMR reload are reported when their replacement commits.\n    this.warnUnguardedRoutes =\n      configAccessor.key<boolean>(\"http.warnUnguardedRoutes\", true) !== false;\n    if (this.warnUnguardedRoutes) {\n      reportUnguardedMutatingRoutes(this.routes);\n    }\n\n    this.eventListeners.beforeScan?.forEach((callback) => callback(this, server));\n\n    let routeRegistry: RouteRegistry | undefined;\n    let registryVersion = -1;\n\n    const applyDevRateLimit = createDevRateLimiter(\n      server,\n      config.get(\"http.rateLimit.global\") !== false,\n    );\n\n    // Rebuilt when the route table changes rather than per request. Building it\n    // inside the handler re-registered every route on every hit — and `all`\n    // routes expand into seven registrations each. Keyed on `routesVersion`\n    // rather than on the route count, so an HMR reload that swaps a route\n    // without changing the count still invalidates.\n    const resolveRouteRegistry = () => {\n      if (routeRegistry && registryVersion === this.routesVersion) {\n        return routeRegistry;\n      }\n\n      routeRegistry = new RouteRegistry();\n\n      routeRegistry.register(this.routes);\n\n      registryVersion = this.routesVersion;\n\n      return routeRegistry;\n    };\n\n    // Matching happens here, in Fastify's own onRequest phase, so a route's\n    // `serverOptions.onRequest` still runs BEFORE body parsing. Production\n    // `scan()` gets that from per-route registration; the wildcard dispatcher\n    // has no per-route slot, so without this the hook silently never runs.\n    server.addHook(\n      \"onRequest\",\n      async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n        // Only requests Fastify routed to the dev wildcard belong to the app's\n        // router. A plugin's own route (devtools' `/__warlock/api/requests/:id`)\n        // must keep its params even when an app catch-all matches the URL too.\n        if (fastifyRequest.routeOptions.url !== \"*\") {\n          return undefined;\n        }\n\n        const match = resolveRouteRegistry().find(fastifyRequest.method, fastifyRequest.url);\n\n        if (!match) {\n          return undefined;\n        }\n\n        (fastifyRequest as DevDispatchRequest).matchedDevRoute = match;\n\n        fastifyRequest.params = match.params;\n\n        // Same slot production gives it: the limiter runs first in onRequest,\n        // ahead of the route's own hooks.\n        await applyDevRateLimit(match.route, fastifyRequest, fastifyReply);\n\n        if (fastifyReply.sent) {\n          return fastifyReply;\n        }\n\n        return runRouteHooks(match.route, \"onRequest\", fastifyRequest, fastifyReply);\n      },\n    );\n\n    for (const phase of FORWARDED_ROUTE_PHASES.filter((name) => name !== \"onRequest\")) {\n      server.addHook(phase, async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n        const match = (fastifyRequest as DevDispatchRequest).matchedDevRoute;\n\n        if (!match) {\n          return undefined;\n        }\n\n        return runRouteHooks(match.route, phase, fastifyRequest, fastifyReply);\n      });\n    }\n\n    // Shared handler for wildcard routing\n    const wildcardHandler = async (fastifyRequest: FastifyRequest, fastifyReply: FastifyReply) => {\n      const match = (fastifyRequest as DevDispatchRequest).matchedDevRoute;\n\n      // No match found - return 404\n      if (!match) {\n        return fastifyReply\n          .code(404)\n          .send(buildNotFoundBody(fastifyRequest.method, fastifyRequest.url));\n      }\n\n      try {\n        // Call the matched route handler\n        const { output, response } = await this.handleRoute(match.route)(\n          fastifyRequest,\n          fastifyReply,\n        );\n\n        return output || response.baseResponse;\n      } catch (error) {\n        log.error(\"router\", \"dev-dispatch\", error as Error, {\n          method: fastifyRequest.method,\n          url: buildRequestLogSnapshot({\n            id: fastifyRequest.id,\n            method: fastifyRequest.method,\n            url: fastifyRequest.url,\n            route: match.route,\n          }).url,\n        });\n\n        throw error;\n      }\n    };\n\n    // Every verb production can register. Fastify's implicit HEAD for the GET\n    // wildcard is switched off so the HEAD wildcard owns it (the registry falls\n    // back to the GET route, exactly as production's implicit HEAD does).\n    // `@fastify/cors` registers its own OPTIONS \"*\" catch-all whenever\n    // preflight is on. Use the plugin's options as well as hasRoute so this\n    // dispatcher works both after HTTP plugin boot and before queued plugins.\n    const corsOwnsPreflight = buildCorsOptions().preflight !== false;\n\n    for (const method of DEV_DISPATCH_METHODS) {\n      if (\n        method === \"OPTIONS\" &&\n        (corsOwnsPreflight || server.hasRoute({ method: \"OPTIONS\", url: \"*\" }))\n      ) {\n        continue;\n      }\n\n      server.route({\n        method,\n        url: \"*\",\n        ...(method === \"GET\" && { exposeHeadRoute: false }),\n        // The dispatcher limits each matched route itself (see\n        // `createDevRateLimiter`), so the plugin must not limit the wildcard:\n        // that would count exempt routes and unmatched URLs too.\n        config: { rateLimit: false },\n        handler: wildcardHandler,\n      });\n    }\n\n    this.registerStaticDirectories(server);\n\n    this.eventListeners.afterScanning?.forEach((callback) => callback(this, server));\n  }\n\n  /**\n   * Get the route path for the given route name\n   */\n  public getRoute(name: string, params: Record<string, any> = {}) {\n    const route = this.routes.find((route) => route.name === name);\n\n    if (!route) {\n      throw new WarlockError(\"WL3003\", `Route name \"${name}\" not found`);\n    }\n\n    const used = new Set<string>();\n\n    const path = route.path.replace(/:([A-Za-z0-9_]+)(\\?)?/g, (_match, key: string, optional) => {\n      const value = params[key];\n\n      if (value === undefined || value === null) {\n        if (optional) return \"\";\n\n        throw new WarlockError(\"WL3004\", `Route \"${name}\" is missing the \"${key}\" param`);\n      }\n\n      used.add(key);\n\n      return encodeURIComponent(String(value));\n    });\n\n    const query = Object.keys(params)\n      .filter((key) => !used.has(key) && params[key] !== undefined && params[key] !== null)\n      .map((key) => `${encodeURIComponent(key)}=${encodeURIComponent(String(params[key]))}`)\n      .join(\"&\");\n\n    return query ? `${path}?${query}` : path;\n  }\n\n  /**\n   * Handle the given route\n   */\n  private handleRoute(route: Route) {\n    return async (fastifyRequest: FastifyRequest, fastifyResponse: FastifyReply) => {\n      const request = new Request();\n      const response = new Response();\n      response.setResponse(fastifyResponse);\n      request.response = response;\n\n      response.request = request;\n\n      // \"route.match\" tracing phase: the pattern is\n      // already known here (`route.path`), so this brackets the cost of\n      // stamping the request/route onto the `Request` instance rather than\n      // route-registry matching itself, which happens upstream of this\n      // function for both the production `scan()` path and the dev wildcard\n      // dispatcher (both funnel into `handleRoute`).\n      const tracingEnabled = isTracingEnabled();\n      const routeMatchStartedAt = tracingEnabled ? performance.now() : 0;\n\n      request.setRequest(fastifyRequest).setRoute(route);\n\n      if (tracingEnabled) {\n        dispatchPhase(buildTracingContext(request), {\n          name: \"route.match\",\n          durationMs: performance.now() - routeMatchStartedAt,\n          attrs: { route: route.path },\n        });\n      }\n\n      /*\n        Both ends of the entry, not just the start — see\n        `log-request-lifecycle.ts`. A start line on its own made a hung request\n        and an instant one look identical, and the completion line is what makes\n        a MISSING one legible as a hang.\n      */\n      const result = await logRequestLifecycle(\n        {\n          info: (entry) => log.info(entry),\n          warn: (entry) => log.warn(entry),\n          error: (entry) => log.error(entry),\n          now: () => performance.now(),\n        },\n        {\n          module: \"route\",\n          action: describeRouteForLog(route.method, route.path),\n          requestId: request.id,\n          // A bounded snapshot, built once with the route's logging policy\n          // applied — never the Request/Response instances, whose native\n          // request, reply and URL graphs would reach every log channel.\n          context: { request: request.toLogSnapshot() },\n          request,\n          // Read after the run: the status is decided during the request.\n          statusCode: () => fastifyResponse.statusCode,\n        },\n        () => request.execute(),\n      );\n\n      // A handler may return a plain object (`ReturnedResponse`). Route it\n      // through `Response.send` so status, events and hooks apply, exactly as\n      // middleware outputs already do.\n      let output = result;\n\n      if (\n        output !== undefined &&\n        output !== null &&\n        !(output instanceof Response) &&\n        (output as unknown) !== fastifyResponse\n      ) {\n        output = await response.send(output);\n      }\n\n      return {\n        output,\n        response,\n        request,\n      };\n    };\n  }\n}\n\nexport const router = Router.getInstance();\n\ncontainer.set(\"router\", router);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAM,yBAAyB;CAAC;CAAa;CAAiB;AAAY;AAc1E,SAAS,WACP,MACsB;CACtB,IAAI,CAAC,MACH,OAAO,CAAC;CAGV,OAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,IAAI;AAC3C;;;;;;;;AASA,eAAe,cACb,OACA,OACA,SACA,OACA;CACA,MAAM,QAAQ,WACZ,MAAM,gBAAgB,MACxB;CAEA,KAAK,MAAM,QAAQ,OAGjB,IAAI,MAFkB,KAAK,SAAS,KAAK,MAEzB,OACd,OAAO;AAKb;;;;;AAMA,SAAS,mBAAmB,QAAiB,QAA8B;CACzE,MAAM,iBAAkB,QAAuC;CAE/D,IAAI,gBACF,OAAO,iBAAiB;AAE5B;;;;AAKA,SAAS,oBACP,UACA,QACgB;CAChB,MAAM,SAAS,SAAS;CACxB,MAAM,UAAU,QAAQ,KAAK,QAAQ;CAErC,mBAAmB,QAAQ,OAAO;CAElC,OAAO;AACT;;;;;;;;;;;;;AAcA,SAAS,sBAAsB,OAAc;CAC3C,MAAM,OAAO,MAAM,SAAS,eAAe;CAC3C,MAAM,SAAS,MAAM,aAAa,eAAe,MAAM,eAAe;CAEtE,OAAO,GAAG,KAAK,GAAG,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,OAAO;AAC1D;AAEA,IAAa,SAAb,MAAa,OAAO;;;;CAgElB,OAAc,cAAc;EAC1B,IAAI,CAAC,OAAO,UACV,OAAO,WAAW,IAAI,OAAO;EAG/B,OAAO,OAAO;CAChB;CAEA,AAAQ,cAAc;gBApEI,CAAC;uBAUH;6BAgBM;2BAaxB,CAAC;wBAML,CAAC;gBAM8B;GAC/B,QAAQ,CAAC;GACT,MAAM,CAAC;GACP,YAAY,CAAC;EACf;CAeA;;;;CAKA,AAAO,eAAe,UAA6D;EACjF,KAAK,eAAe,aAAa,CAAC,GAAI,KAAK,eAAe,cAAc,CAAC,GAAI,QAAQ;EAErF,OAAO;CACT;;;;CAKA,AAAO,cAAc,UAA6D;EAChF,KAAK,eAAe,gBAAgB,CAAC,GAAI,KAAK,eAAe,iBAAiB,CAAC,GAAI,QAAQ;EAE3F,OAAO;CACT;;;;CAKA,AAAO,SAAS,MAAc,IAAY,eAA0C,aAAa;EAC/F,OAAO,KAAK,IAAI,OAAO,EAAE,eAAe;GACtC,SAAS,SAAS,IAAI,iBAAiB,cAAc,MAAM,GAAG;EAChE,CAAC;CACH;;;;;;;;;;;;;;CAeA,AAAO,UAAU,SAA+B,eAAmC,CAAC,GAAG;EACrF,KAAK,kBAAkB,KAAK;GAAE;GAAS,WAAW,aAAa;EAAU,CAAC;EAE1E,OAAO;CACT;;CAGA,AAAU,0BAA0B,QAAyB;EAC3D,KAAK,MAAM,aAAa,KAAK,mBAC3B,mBACE,QACA;GAAE,GAAG,UAAU;GAAS,eAAe;EAAM,GAC7C,EAAE,WAAW,uBAAuB,UAAU,SAAS,EAAE,CAC3D;CAEJ;;;;;;CAOA,AAAU,mBACR,MACA,SACA,eAAmC,CAAC,GACpC;EACA,KAAK,IACH,MACA,SACA,aAAa,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,aAAa,UAAU,CAClF;EAEA,MAAM,SAAS,KAAK,6BAA6B,UAAU,KAAK;EAChE,MAAM,QAAQ,OAAO,OAAO,SAAS;EAErC,IAAI,OAAO,MAAM,cAAc;EAE/B,OAAO;CACT;;;;CAKA,AAAO,KACL,MACA,UACA,WACA,eAAmC,CAAC,GACpC;EACA,OAAO,KAAK,mBACV,OACC,EAAE,eAAe;GAChB,SAAS,SAAS,UAAU,SAAS;EACvC,GACA,YACF;CACF;;;;CAKA,AAAO,WACL,MACA,UACA,WACA,eAAmC,CAAC,GACpC;EACA,OAAO,KAAK,mBACV,OACC,EAAE,eAAe;GAChB,SAAS,eAAe,UAAU,SAAS;EAC7C,GACA,YACF;CACF;;;;CAKA,AAAO,MACL,OACA,WACA,eAAmC,CAAC,GACpC;EACA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,KAAK,GACjD,KAAK,KAAK,MAAM,UAAU,WAAW,YAAY;CAErD;;;;CAKA,AAAO,YACL,OACA,WACA,eAAmC,CAAC,GACpC;EACA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,KAAK,GACjD,KAAK,WAAW,MAAM,UAAU,WAAW,YAAY;CAE3D;CAWA,AAAO,MAAM,GAAG,MAAa;EAC3B,KAAK,gBAAgB,SAAS,WAAW;GACvC,IAAI,KAAK,WAAW,GAClB,OAAO,SAAS,OAAO,KAAK,EAAE;QAE9B,OAAO,SAAS,OAAO;IACrB,QAAQ,KAAK;IACb,UAAU,KAAK;IACf,GAAG,KAAK;GACV,CAAC;EAEL,CAAC;EAED,OAAO;CACT;;;;CAKA,AAAO,IACL,QACA,MACA,SACA,UAAwB,CAAC,GACzB;EACA,IAAI,MAAM,QAAQ,IAAI,GAAG;GACvB,KAAK,SAAS,MAAM,KAAK,IAAI,QAAQ,GAAG,SAAS,OAAO,CAAC;GACzD,OAAO;EACT;EAEA,MAAM,SAAS,KAAK,OAAO,OAAO,QAAQ,MAAM,WAAW;GACzD,OAAO,mBAAmB,MAAM,MAAM;EACxC,GAAG,EAAE;EAEL,MAAM,OAAO,KAAK,OAAO,KAAK,aAC3B,MAAM,eAAe;GACpB,OAAO,KAAK,aAAa,MAAM,MAAM,GAAG;EAC1C,GACA,QAAQ,QAAQ,KAAK,KAAK,QAAQ,OAAO,GAAG,GAAG,GAAG,CACpD;EAKA,OAAO,mBAAmB,QAAQ,IAAI;EAEtC,MAAM,uBAAuB,QAAQ,wBAAwB;EAI7D,UAAU,EAAE,GAAG,QAAQ;EAEvB,IAAI,yBAAyB,UAC3B,QAAQ,aAAa,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,GAAG,KAAK,OAAO,UAAU;OAE9E,QAAQ,aAAa,CAAC,GAAG,KAAK,OAAO,YAAY,GAAI,QAAQ,cAAc,CAAC,CAAE;EAKhF,IAAI,QAAQ,WAAW,WAAc,KAAK,OAAO,UAAU,KAAK,GAC9D,QAAQ,SAAS;EAKnB,MAAM,aAAa,KAAK,OAAO,OAAO,GAAG,EAAE;EAE3C,IAAI,QAAQ,UAAU,UAAa,eAAe,QAChD,QAAQ,QAAQ;EAGlB,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,MAAM,CAAC,YAAY,UAAU;GAE7B,IAAI,OAAO,WAAW,YAAY,YAChC,MAAM,IAAI,aACR,UACA,8BAA8B,OAAO,oBAAoB,WAAW,YAAY,KAAK,EACvF;GAGF,UAAU,WAAW,OAAO,CAAC,KAAK,UAAU;GAC5C,mBAAmB,WAAW,SAAS,OAAO;GAE9C,IAAI,CAAC,QAAQ,YAAY;IACvB,QAAQ,aAAa,CAAC;IACtB,IAAI,WAAW,GAAG,OAAO,oBACvB,QAAQ,WAAW,SAAS,WAAW,GAAG,OAAO,kBAAkB,CAAC;IAGtE,IAAI,WAAW,GAAG,OAAO,YACvB,QAAQ,WAAW,WAAW,WAAW,GAAG,OAAO;GAEvD;EACF;EAEA,MAAM,YAAmB;GACvB;GACA;GACA;GACA,GAAG;GACH;GACA,WAAW,QAAQ;GACnB,SAAS,UAAU;GAEnB,cAAc,CAAC,GAAG,KAAK,OAAO,MAAM;GAEpC,YAAY,KAAK,OAAO,cAAc;EACxC;EAEA,MAAM,SAAS,KAAK,6BAA6B,UAAU,KAAK;EAEhE,IAAI,UAAU,MAAM;GAElB,MAAM,QAAQ,OAAO,MAAM,UAAU,MAAM,SAAS,UAAU,IAAI;GAElE,IAAI,OAAO;IAET,IAAI,MAAM,WAAW,UAAU,QAC7B,MAAM,IAAI,oBACR,UAAU,MACV,eAAe,UAAU,KAAK,6CACH,sBAAsB,KAAK,EAAE,0BAC7B,sBAAsB,SAAS,EAAE,2IAG9D;SAEA,UAAU,QAAQ,sBAAsB,UAAU,MAAM;GAE5D;EACF;EAOA,IAAI,KAAK,6BACP,KAAK,4BAA4B,YAAY,KAAK,SAAS;OAE3D,wBAAwB,UAAU,SAAS,SAAS;EAGtD,OAAO,KAAK,SAAS;EAErB,IAAI,CAAC,KAAK,6BACR,KAAK;EAGP,OAAO;CACT;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAA0B,MAAM,SAAS,OAAO;CAClE;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAAO,MAAM,SAAS,OAAO;CAC/C;;;;CAKA,AAAO,KAAK,MAAyB,SAA6B,UAAwB,CAAC,GAAG;EAC5F,OAAO,KAAK,IAAI,QAAQ,MAAM,SAAS,OAAO;CAChD;;;;CAKA,AAAO,IAAI,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAChF,OAAO,KAAK,IAAI,OAAO,MAAM,SAAS,OAAO;CAC/C;;;;CAKA,AAAO,OAAO,MAAyB,SAA6B,UAAwB,CAAC,GAAG;EAC9F,OAAO,KAAK,IAAI,UAAU,MAAM,SAAS,OAAO;CAClD;;;;CAKA,AAAO,MAAM,MAAc,SAA6B,UAAwB,CAAC,GAAG;EAClF,OAAO,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CACjD;;;;CAKA,AAAO,KAAK,MAAc,SAA6B,UAAwB,CAAC,GAAG;EACjF,OAAO,KAAK,IAAI,QAAQ,MAAM,SAAS,OAAO;CAChD;;;;CAKA,AAAO,QAAQ,MAAc,SAA6B,UAAwB,CAAC,GAAG;EACpF,OAAO,KAAK,IAAI,WAAW,MAAM,SAAS,OAAO;CACnD;;;;CAKA,AAAO,MAAM,MAAc,UAAwB,CAAC,GAAG;EACrD,OAAO,IAAI,aAAa,MAAM,MAAM,OAAO;CAC7C;;;;;;;;;;;CAYA,AAAO,gBACL,MACA,UACA,UAMI,CAAC,GACL;EAKA,MAAM,mBAAmB,QAAQ,QAAQ,YAAY,MAAM,MAAM,GAAG,CAAC;EAErE,OAAO,KAAK,MAAM;GAAE,QAAQ;GAAM,MAAM;EAAiB,SAAS;GAChE,MAAM,OAAO;GAGb,MAAM,gBAAgB;GAEtB,MAAM,wBAAwB,SAAyB;IACrD,OAAO,SAEJ,CAAC,QAAQ,UAAU,CAAC,QAAQ,OAAO,SAAS,IAAI,OAEhD,CAAC,QAAQ,QAAQ,QAAQ,KAAK,SAAS,IAAI,EAC9C;GACF;GAEA,IAAI,cAAc,QAAQ,qBAAqB,MAAM,GACnD,KAAK,IAAI,MAAM,QAAQ,SAAS,QAAQ,oBAAoB,eAAe,MAAM,GAAG;IAClF,GAAG;IACH,MAAM;IACN,SAAS;GACX,CAAC;GAGH,IAAI,cAAc,OAAO,qBAAqB,KAAK,GACjD,KAAK,IAAI,QAAe,QAAQ,SAAS,OAAO,oBAAoB,eAAe,KAAK,GAAG;IACzF,GAAG;IACH,MAAM;IACN,SAAS;GACX,CAAC;GAGH,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GAAG;IAC1D,MAAM,UAAU,QAAQ,SAAS,UAAU,KAAK,iBAAiB,eAAe,QAAQ;IAExF,KAAK,KAAK,MAAM,SAAS;KACvB,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GAAG;IAC1D,MAAM,UAAU,QAAQ,SAAS,UAAU,KAAK,iBAAiB,eAAe,QAAQ;IAExF,KAAK,IAAI,QAAe,SAAS;KAC/B,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,SAAS,qBAAqB,OAAO,GAAG;IACxD,MAAM,UAAU,QAAQ,SAAS,SAAS,KAAK,iBAAiB,eAAe,OAAO;IAEtF,KAAK,MAAM,QAAe,SAAS;KACjC,GAAG;KACH,MAAM;KACN,SAAS;IACX,CAAC;GACH;GAEA,IAAI,cAAc,UAAU,qBAAqB,QAAQ,GACvD,KAAK,OACH,QACA,QAAQ,SAAS,UAAU,oBAAoB,eAAe,QAAQ,GACtE;IACE,GAAG;IACH,MAAM;IACN,SAAS;GACX,CACF;GAGF,IAAI,cAAc,cAAc,qBAAqB,QAAQ,GAC3D,KAAK,OACH,MACA,QAAQ,SAAS,cAAc,oBAAoB,eAAe,YAAY,GAC9E;IACE,GAAG;IACH,MAAM;IACN,SAAS;GACX,CACF;GAGF,OAAO;EACT,CAAC;CACH;;;;CAKA,AAAO,MAAM,SAA+B,UAA+B;EACzE,MAAM,EACJ,QAOA,OAAO,SAAS,KAAK,OAAO,QAAQ,OAAO,GAAG,GAAG,GAAG,IAAI,QACxD,YACA,QAAQ,UACR,UACE;EAEJ,IAAI,OACF,CAAC,KAAK,OAAO,UAAU,CAAC,EAAC,CAAE,KAAK,KAAK;EAGvC,IAAI,UACF,KAAK,OAAO,UAAU,KAAK,OAAO,UAAU,KAAK;EAGnD,IAAI,QACF,KAAK,OAAO,OAAO,KAAK,MAAM;EAGhC,IAAI,MACF,KAAK,OAAO,KAAK,KAAK,IAAI;EAG5B,IAAI,YACF,KAAK,OAAO,WAAW,KAAK,GAAG,UAAU;EAG3C,IAAI;GACF,SAAS;EACX,UAAU;GAGR,IAAI,QACF,KAAK,OAAO,OAAO,IAAI;GAGzB,IAAI,MACF,KAAK,OAAO,KAAK,IAAI;GAGvB,IAAI,YACF,KAAK,OAAO,WAAW,OACrB,KAAK,OAAO,WAAW,SAAS,WAAW,QAC3C,WAAW,MACb;GAEF,IAAI,UACF,KAAK,OAAO,UAAU,KAAK,OAAO,UAAU,KAAK;GAGnD,IAAI,OACF,KAAK,OAAO,OAAO,IAAI;EAE3B;EAEA,OAAO;CACT;;;;CAKA,AAAO,OAAO,QAAgB,UAAsB;EAClD,OAAO,KAAK,MAAM,EAAE,OAAO,GAAG,QAAQ;CACxC;;;;;;;;;;;;;CAcA,AAAO,QAAQ,SAA0B,UAAsB;EAC7D,OAAO,KAAK,OAAO,KAAK,WAAW,QAAQ;CAC7C;;;;;;;CAQA,MAAa,eACX,YACA,UACwB;EAExB,KAAK,OAAO,aAAa;EAEzB,IAAI;GAEF,OAAO,MAAM,SAAS;EACxB,SAAS,OAAO;GAMd,IAAI,MAAM;IACR,QAAQ;IACR,QAAQ;IACR,SAAS,mCAAmC,WAAW;IACvD,SAAS;KAAE;KAAY;IAAM;GAC/B,CAAC;GAED,MAAM;EACR,UAAU;GAGR,OAAO,KAAK,OAAO;EACrB;CACF;;;;;;CAOA,AAAO,yBAAyB,YAA0B;EACxD,IAAI,KAAK,6BAA6B;GACpC,KAAK,4BAA4B,SAAS,KAAK,4BAA4B,OAAO,QAC/E,UAAU,MAAM,eAAe,UAClC;GACA,KAAK,4BAA4B,mBAAmB,IAAI,UAAU;GAClE;EACF;EAEA,KAAK,SAAS,KAAK,OAAO,QAAQ,UAAU,MAAM,eAAe,UAAU;EAI3E,gCAAgC,UAAU;EAE1C,KAAK;CACP;;;;;;;;;CAUA,MAAa,2BACX,aACA,SACY;EACZ,IAAI,KAAK,6BACP,MAAM,IAAI,MAAM,4CAA4C;EAG9D,MAAM,qBAAqB,IAAI,IAAI,WAAW;EAE9C,KAAK,8BAA8B;GACjC,QAAQ,KAAK,OAAO,QAAQ,UAAU,CAAC,mBAAmB,IAAI,MAAM,UAAU,CAAC;GAC/E;GACA,aAAa,CAAC;EAChB;EAEA,IAAI;GACF,MAAM,SAAS,MAAM,QAAQ;GAC7B,MAAM,cAAc,KAAK;GAEzB,KAAK,SAAS,YAAY;GAC1B,KAAK,8BAA8B;GAInC,KAAK,MAAM,cAAc,YAAY,oBACnC,gCAAgC,UAAU;GAG5C,MAAM,kBAAkB,IAAI,IAAI,YAAY,MAAM;GAElD,KAAK,MAAM,SAAS,YAAY,aAC9B,IAAI,gBAAgB,IAAI,KAAK,GAC3B,wBAAwB,MAAM,SAAS,KAAK;GAIhD,IAAI,KAAK,qBACP,8BACE,YAAY,YAAY,QAAQ,UAAU,gBAAgB,IAAI,KAAK,CAAC,CACtE;GAGF,KAAK;GAEL,OAAO;EACT,SAAS,OAAO;GACd,KAAK,8BAA8B;GACnC,MAAM;EACR;CACF;;;;CAKA,AAAQ,iBAAiB,UAAyB,QAAuC;EACvF,MAAM,UAAU,oBAAoB,UAAU,MAAM;EAEpD,MAAM,mBAAmB,UAAU,aAAa;EAEhD,IAAI,WAAW,SAAS;GACtB,QAAQ,aAAa;GAErB,IAAI,QAAQ,YAAY,UACtB,QAAQ,WAAW,WAAW,QAAQ,WAAW,SAAS,KAAK,QAAQ;GAGzE,IAAI,SAAS,YAAY,OACvB,QAAQ,aAAa,MAAM,SAAS,WAAW,OAAO,QAAQ,UAAU;GAG1E,OAAO;EACT;EAEA,IAAI,CAAC,SAAS,cAAe,CAAC,oBAAoB,CAAC,SAAS,WAAW,KAAM,OAAO;EAEpF,IAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,oBAAoB;IACxB,KAAK,UAAU,YAAY,KAAK;KAC/B,SAAS,kBAAkB;GAC9B;GAEA,MAAM,aAAuC,CAAC;GAE9C,IAAI,SAAS,WAAW,IAAI,UAAU,kBAAkB,QAAQ;IAC9D,IAAI,CAAC,kBAAkB,UAAU,SAAS,WAAW,IAAI,QAEvD,WAAW,SAAS,SAAS,WAAW,IAAI;SACvC,IAAI,kBAAkB,UAAU,SAAS,WAAW,IAAI,QAE7D,WAAW,SAAS,SAAS,WAAW,IAAI,OAAO,MAAM,iBAAiB,MAAM;SAC3E,IAAI,kBAAkB,UAAU,CAAC,SAAS,WAAW,IAAI,QAE9D,WAAW,SAAS,iBAAiB;GAGzC;GAEA,IAAI,kBAAkB,OAAO,kBAAkB,SAC7C,WAAW,WAAW,OAAO,EAAE,SAAS,eAA4B;IAClE,IAAI,kBAAkB,KAAK;KACzB,MAAM,SAAS,MAAM,kBAAkB,IAAI,KAAK,UAAU;MAAE;MAAS;KAAS,CAAC;KAE/E,IAAI,QAAQ,OAAO;IACrB;IAEA,IAAI,kBAAkB,SACpB,OAAO,MAAM,kBAAkB,OAAO,EAAE,KAAK,UAAU;KAAE;KAAS;IAAS,CAAC;GAIhF;GAGF,IAAI,CAAC,QAAQ,UAAU,GACrB,QAAQ,aAAa;EAEzB,OAAO;GACL,QAAQ,aAAa,SAAS,WAAW;GAEzC,IAAI,QAAQ,YAAY,UACtB,QAAQ,WAAW,WAAW,QAAQ,WAAW,SAAS,KAAK,QAAQ;EAE3E;EAEA,OAAO;CACT;;;;CAKA,AAAO,OAAO;EACZ,OAAO,KAAK;CACd;;;;;;;;;;;CAYA,AAAO,kBAAkB,UAAiC,CAAC,GAA6B;EACtF,OAAO,OAAO,OACZ,KAAK,OACF,QAAQ,UAAU,CAAC,MAAM,UAAU,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,CAAC,CAAC,CAC3F,KAAK,UAAU;GAGd,MAAM,WAAW;IACf,MAAM,MAAM;IACZ,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,GAAI,MAAM,kBAAkB,QAAQ,EAAE,eAAe,MAAe,IAAI,CAAC;IACzE,GAAI,MAAM,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,OAAO,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE;IAC9E,GAAI,qBAAqB,KAAK,IAAI,EAAE,SAAS,KAAc,IAAI,CAAC;GAClE;GACA,MAAM,SAAS,MAAM,SAAS;GAC9B,MAAM,WAAW,SAAS,QAAQ,kBAAkB,QAAQ,KAAK,IAAI;GAGrE,IAAI,CAAC,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,WAAW,GAAG,OAAO,OAAO,OAAO,QAAQ;GAElF,OAAO,OAAO,OAAO;IAAE,GAAG;IAAU,UAAU,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;GAAE,CAAC;EAChF,CAAC,CACL;CACF;;;;;;;;;CAUA,AAAO,aAAqB;EAC1B,OAAO,KAAK,OAAO;CACrB;;;;CAKA,AAAO,KAAK,QAAyB;EAInC,gCAAgC;EAEhC,KAAK,eAAe,YAAY,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;EAM5E,MAAM,oBAAoB,IAAI,IAC5B,KAAK,OACF,QAAQ,UAAU,MAAM,OAAO,YAAY,MAAM,MAAM,CAAC,CACxD,KAAK,UAAU,MAAM,IAAI,CAC9B;EAEA,KAAK,OAAO,SAAS,UAAU;GAC7B,MAAM,gBAAgB,MAAM,OAAO,YAAY;GAC/C,MAAM,wBAAwB,OAAO,cAAc,CAAC,KAAK,MAAM;GAE/D,MAAM,UAAU;IACd,GAAG,MAAM;IACT,GAAI,kBAAkB,SACpB,kBAAkB,IAAI,MAAM,IAAI,KAAK,EAAE,iBAAiB,MAAM;IAChE,QAAQ;KACN,GAAG,MAAM,eAAe;KAExB,WAAW,sBAAsB,KAAK;IACxC;GACF;GAEA,sBACE,MAAM,MACN,SACA,OAAO,aAA6B,UAAwB;IAC1D,MAAM,EAAE,QAAQ,aAAa,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,aAAa,KAAK;IAE7E,OAAO,UAAU,SAAS;GAC5B,CACF;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM;EAErC,KAAK,eAAe,eAAe,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;CACjF;;;;;CAMA,AAAO,cAAc,QAAyB;EAI5C,gCAAgC;EAIhC,KAAK,sBACHA,OAAe,IAAa,4BAA4B,IAAI,MAAM;EACpE,IAAI,KAAK,qBACP,8BAA8B,KAAK,MAAM;EAG3C,KAAK,eAAe,YAAY,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;EAE5E,IAAI;EACJ,IAAI,kBAAkB;EAEtB,MAAM,oBAAoB,qBACxB,QACAC,WAAO,IAAI,uBAAuB,MAAM,KAC1C;EAOA,MAAM,6BAA6B;GACjC,IAAI,iBAAiB,oBAAoB,KAAK,eAC5C,OAAO;GAGT,gBAAgB,IAAI,cAAc;GAElC,cAAc,SAAS,KAAK,MAAM;GAElC,kBAAkB,KAAK;GAEvB,OAAO;EACT;EAMA,OAAO,QACL,aACA,OAAO,gBAAgC,iBAA+B;GAIpE,IAAI,eAAe,aAAa,QAAQ,KACtC;GAGF,MAAM,QAAQ,qBAAqB,CAAC,CAAC,KAAK,eAAe,QAAQ,eAAe,GAAG;GAEnF,IAAI,CAAC,OACH;GAGF,AAAC,eAAsC,kBAAkB;GAEzD,eAAe,SAAS,MAAM;GAI9B,MAAM,kBAAkB,MAAM,OAAO,gBAAgB,YAAY;GAEjE,IAAI,aAAa,MACf,OAAO;GAGT,OAAO,cAAc,MAAM,OAAO,aAAa,gBAAgB,YAAY;EAC7E,CACF;EAEA,KAAK,MAAM,SAAS,uBAAuB,QAAQ,SAAS,SAAS,WAAW,GAC9E,OAAO,QAAQ,OAAO,OAAO,gBAAgC,iBAA+B;GAC1F,MAAM,QAAS,eAAsC;GAErD,IAAI,CAAC,OACH;GAGF,OAAO,cAAc,MAAM,OAAO,OAAO,gBAAgB,YAAY;EACvE,CAAC;EAIH,MAAM,kBAAkB,OAAO,gBAAgC,iBAA+B;GAC5F,MAAM,QAAS,eAAsC;GAGrD,IAAI,CAAC,OACH,OAAO,aACJ,KAAK,GAAG,CAAC,CACT,KAAK,kBAAkB,eAAe,QAAQ,eAAe,GAAG,CAAC;GAGtE,IAAI;IAEF,MAAM,EAAE,QAAQ,aAAa,MAAM,KAAK,YAAY,MAAM,KAAK,CAAC,CAC9D,gBACA,YACF;IAEA,OAAO,UAAU,SAAS;GAC5B,SAAS,OAAO;IACd,IAAI,MAAM,UAAU,gBAAgB,OAAgB;KAClD,QAAQ,eAAe;KACvB,KAAK,wBAAwB;MAC3B,IAAI,eAAe;MACnB,QAAQ,eAAe;MACvB,KAAK,eAAe;MACpB,OAAO,MAAM;KACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;GACR;EACF;EAQA,MAAM,oBAAoB,iBAAiB,CAAC,CAAC,cAAc;EAE3D,KAAK,MAAM,UAAU,sBAAsB;GACzC,IACE,WAAW,cACV,qBAAqB,OAAO,SAAS;IAAE,QAAQ;IAAW,KAAK;GAAI,CAAC,IAErE;GAGF,OAAO,MAAM;IACX;IACA,KAAK;IACL,GAAI,WAAW,SAAS,EAAE,iBAAiB,MAAM;IAIjD,QAAQ,EAAE,WAAW,MAAM;IAC3B,SAAS;GACX,CAAC;EACH;EAEA,KAAK,0BAA0B,MAAM;EAErC,KAAK,eAAe,eAAe,SAAS,aAAa,SAAS,MAAM,MAAM,CAAC;CACjF;;;;CAKA,AAAO,SAAS,MAAc,SAA8B,CAAC,GAAG;EAC9D,MAAM,QAAQ,KAAK,OAAO,MAAM,UAAU,MAAM,SAAS,IAAI;EAE7D,IAAI,CAAC,OACH,MAAM,IAAI,aAAa,UAAU,eAAe,KAAK,YAAY;EAGnE,MAAM,uBAAO,IAAI,IAAY;EAE7B,MAAM,OAAO,MAAM,KAAK,QAAQ,2BAA2B,QAAQ,KAAa,aAAa;GAC3F,MAAM,QAAQ,OAAO;GAErB,IAAI,UAAU,UAAa,UAAU,MAAM;IACzC,IAAI,UAAU,OAAO;IAErB,MAAM,IAAI,aAAa,UAAU,UAAU,KAAK,oBAAoB,IAAI,QAAQ;GAClF;GAEA,KAAK,IAAI,GAAG;GAEZ,OAAO,mBAAmB,OAAO,KAAK,CAAC;EACzC,CAAC;EAED,MAAM,QAAQ,OAAO,KAAK,MAAM,CAAC,CAC9B,QAAQ,QAAQ,CAAC,KAAK,IAAI,GAAG,KAAK,OAAO,SAAS,UAAa,OAAO,SAAS,IAAI,CAAC,CACpF,KAAK,QAAQ,GAAG,mBAAmB,GAAG,EAAE,GAAG,mBAAmB,OAAO,OAAO,IAAI,CAAC,GAAG,CAAC,CACrF,KAAK,GAAG;EAEX,OAAO,QAAQ,GAAG,KAAK,GAAG,UAAU;CACtC;;;;CAKA,AAAQ,YAAY,OAAc;EAChC,OAAO,OAAO,gBAAgC,oBAAkC;GAC9E,MAAM,UAAU,IAAI,QAAQ;GAC5B,MAAM,WAAW,IAAI,SAAS;GAC9B,SAAS,YAAY,eAAe;GACpC,QAAQ,WAAW;GAEnB,SAAS,UAAU;GAQnB,MAAM,iBAAiB,iBAAiB;GACxC,MAAM,sBAAsB,iBAAiB,YAAY,IAAI,IAAI;GAEjE,QAAQ,WAAW,cAAc,CAAC,CAAC,SAAS,KAAK;GAEjD,IAAI,gBACF,cAAc,oBAAoB,OAAO,GAAG;IAC1C,MAAM;IACN,YAAY,YAAY,IAAI,IAAI;IAChC,OAAO,EAAE,OAAO,MAAM,KAAK;GAC7B,CAAC;GAkCH,IAAI,SAAS,MAzBQ,oBACnB;IACE,OAAO,UAAU,IAAI,KAAK,KAAK;IAC/B,OAAO,UAAU,IAAI,KAAK,KAAK;IAC/B,QAAQ,UAAU,IAAI,MAAM,KAAK;IACjC,WAAW,YAAY,IAAI;GAC7B,GACA;IACE,QAAQ;IACR,QAAQ,oBAAoB,MAAM,QAAQ,MAAM,IAAI;IACpD,WAAW,QAAQ;IAInB,SAAS,EAAE,SAAS,QAAQ,cAAc,EAAE;IAC5C;IAEA,kBAAkB,gBAAgB;GACpC,SACM,QAAQ,QAAQ,CACxB;GAOA,IACE,WAAW,UACX,WAAW,QACX,EAAE,kBAAkB,aACnB,WAAuB,iBAExB,SAAS,MAAM,SAAS,KAAK,MAAM;GAGrC,OAAO;IACL;IACA;IACA;GACF;EACF;CACF;AACF;AAEA,MAAa,SAAS,OAAO,YAAY;AAEzC,UAAU,IAAI,UAAU,MAAM"}