@webpieces/http-server 0.2.33 → 0.2.35

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/http-server",
-  "version": "0.2.33",
+  "version": "0.2.35",
   "description": "WebPieces server with filter chain and dependency injection",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -22,6 +22,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@webpieces/http-routing": "0.2.33"
+    "@webpieces/http-routing": "0.2.35",
+    "cors": "^2.8.5"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.19"
   }
 }

package/src/WebpiecesFactory.d.ts

@@ -1,5 +1,5 @@
 import { ContainerModule } from 'inversify';
-import { WebAppMeta } from '@webpieces/http-routing';
+import { WebAppMeta, WebpiecesConfig } from '@webpieces/http-routing';
 import { WebpiecesServer } from './WebpiecesServer';
 /**
  * WebpiecesFactory - Factory for creating WebPieces server instances.
@@ -17,14 +17,15 @@ import { WebpiecesServer } from './WebpiecesServer';
  * Usage:
  * ```typescript
  * // Production
- * const server = WebpiecesFactory.create(new ProdServerMeta());
+ * const config = new WebpiecesConfig();
+ * const server = WebpiecesFactory.create(new ProdServerMeta(), config);
  * server.start(8080);
  *
- * // Testing with overrides
- * const overrides = new ContainerModule((bind) => {
+ * // Testing with appOverrides
+ * const appOverrides = new ContainerModule((bind) => {
  *     bind(TYPES.RemoteApi).toConstantValue(mockRemoteApi);
  * });
- * const server = WebpiecesFactory.create(new ProdServerMeta(), overrides);
+ * const server = WebpiecesFactory.create(new ProdServerMeta(), config, appOverrides);
  * const api = server.createApiClient(SaveApiPrototype);
  * ```
  *
@@ -46,7 +47,7 @@ export declare class WebpiecesFactory {
      * 5. Loads optional override module (for testing)
      *
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
+     * @param appOverrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
      * @returns A fully initialized WebpiecesServer ready to start()
      */
     /**
@@ -56,8 +57,10 @@ export declare class WebpiecesFactory {
      * (e.g., rebind() in new Inversify versions).
      *
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (can use async operations)
+     * @param config - Server configuration (CORS, etc.)
+     * @param appOverrides - Optional ContainerModule for app test overrides (can use async operations)
+     * @param testMode - Optional flag for test mode (skips Express server)
      * @returns Promise of a fully initialized WebpiecesServer ready to start()
      */
-    static create(meta: WebAppMeta, overrides?: ContainerModule, testMode?: boolean): Promise<WebpiecesServer>;
+    static create(meta: WebAppMeta, config: WebpiecesConfig, appOverrides?: ContainerModule, testMode?: boolean): Promise<WebpiecesServer>;
 }

package/src/WebpiecesFactory.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebpiecesFactory = void 0;
 const inversify_1 = require("inversify");
 const binding_decorators_1 = require("@inversifyjs/binding-decorators");
+const http_routing_1 = require("@webpieces/http-routing");
 const WebpiecesServerImpl_1 = require("./WebpiecesServerImpl");
 /**
  * WebpiecesFactory - Factory for creating WebPieces server instances.
@@ -20,14 +21,15 @@ const WebpiecesServerImpl_1 = require("./WebpiecesServerImpl");
  * Usage:
  * ```typescript
  * // Production
- * const server = WebpiecesFactory.create(new ProdServerMeta());
+ * const config = new WebpiecesConfig();
+ * const server = WebpiecesFactory.create(new ProdServerMeta(), config);
  * server.start(8080);
  *
- * // Testing with overrides
- * const overrides = new ContainerModule((bind) => {
+ * // Testing with appOverrides
+ * const appOverrides = new ContainerModule((bind) => {
  *     bind(TYPES.RemoteApi).toConstantValue(mockRemoteApi);
  * });
- * const server = WebpiecesFactory.create(new ProdServerMeta(), overrides);
+ * const server = WebpiecesFactory.create(new ProdServerMeta(), config, appOverrides);
  * const api = server.createApiClient(SaveApiPrototype);
  * ```
  *
@@ -49,7 +51,7 @@ class WebpiecesFactory {
      * 5. Loads optional override module (for testing)
      *
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
+     * @param appOverrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
      * @returns A fully initialized WebpiecesServer ready to start()
      */
     /**
@@ -59,18 +61,24 @@ class WebpiecesFactory {
      * (e.g., rebind() in new Inversify versions).
      *
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (can use async operations)
+     * @param config - Server configuration (CORS, etc.)
+     * @param appOverrides - Optional ContainerModule for app test overrides (can use async operations)
+     * @param testMode - Optional flag for test mode (skips Express server)
      * @returns Promise of a fully initialized WebpiecesServer ready to start()
      */
-    static async create(meta, overrides, testMode) {
+    static async create(meta, config, appOverrides, testMode) {
         // Create WebPieces container for framework-level bindings
         const webpiecesContainer = new inversify_1.Container();
+        // Bind WebAppMeta so it can be injected into framework classes
+        webpiecesContainer.bind(http_routing_1.WEBAPP_META_TOKEN).toConstantValue(meta);
+        // Bind WebpiecesConfig so it can be injected into framework classes
+        webpiecesContainer.bind(http_routing_1.WEBPIECES_CONFIG_TOKEN).toConstantValue(config);
         // Load buildProviderModule to auto-scan for @provideSingleton decorators
         await webpiecesContainer.load((0, binding_decorators_1.buildProviderModule)());
         // Resolve WebpiecesServerImpl from DI container
         const serverImpl = webpiecesContainer.get(WebpiecesServerImpl_1.WebpiecesServerImpl);
         // Initialize the server asynchronously (loads app DI modules, registers routes)
-        await serverImpl.initialize(webpiecesContainer, meta, overrides);
+        await serverImpl.initialize(webpiecesContainer, appOverrides);
         // Return as interface to hide initialize() from consumers
         return serverImpl;
     }

package/src/WebpiecesFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesFactory.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesFactory.ts"],"names":[],"mappings":";;;AAAA,yCAAuD;AACvD,wEAAsE;AAGtE,+DAA4D;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAa,gBAAgB;IACzB;;;;;;;;;;;;;OAaG;IAEH;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACf,IAAgB,EAChB,SAA2B,EAC3B,QAAkB;QAElB,0DAA0D;QAC1D,MAAM,kBAAkB,GAAG,IAAI,qBAAS,EAAE,CAAC;QAE3C,yEAAyE;QACzE,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAErD,gDAAgD;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,yCAAmB,CAAC,CAAC;QAE/D,gFAAgF;QAChF,MAAM,UAAU,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAEjE,0DAA0D;QAC1D,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ;AA9CD,4CA8CC","sourcesContent":["import { Container, ContainerModule } from 'inversify';\nimport { buildProviderModule } from '@inversifyjs/binding-decorators';\nimport { WebAppMeta } from '@webpieces/http-routing';\nimport { WebpiecesServer } from './WebpiecesServer';\nimport { WebpiecesServerImpl } from './WebpiecesServerImpl';\n\n/**\n * WebpiecesFactory - Factory for creating WebPieces server instances.\n *\n * This factory encapsulates the server creation and initialization logic:\n * 1. Creates the WebPieces DI container\n * 2. Loads the provider module for @provideSingleton decorators\n * 3. Resolves WebpiecesServerImpl from DI\n * 4. Calls initialize() with the container and meta\n * 5. Returns the server as the WebpiecesServer interface\n *\n * The returned WebpiecesServer interface only exposes start() and stop(),\n * hiding the internal initialize() method from consumers.\n *\n * Usage:\n * ```typescript\n * // Production\n * const server = WebpiecesFactory.create(new ProdServerMeta());\n * server.start(8080);\n *\n * // Testing with overrides\n * const overrides = new ContainerModule((bind) => {\n *     bind(TYPES.RemoteApi).toConstantValue(mockRemoteApi);\n * });\n * const server = WebpiecesFactory.create(new ProdServerMeta(), overrides);\n * const api = server.createApiClient(SaveApiPrototype);\n * ```\n *\n * This pattern:\n * - Enforces proper initialization order\n * - Hides implementation details from consumers\n * - Makes the API simpler and harder to misuse\n * - Follows the principle of least privilege\n */\nexport class WebpiecesFactory {\n    /**\n     * Create a new WebPieces server instance.\n     *\n     * This method:\n     * 1. Creates the WebPieces framework DI container\n     * 2. Loads framework bindings via buildProviderModule()\n     * 3. Resolves the server implementation from DI\n     * 4. Initializes the server with the container and meta\n     * 5. Loads optional override module (for testing)\n     *\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)\n     * @returns A fully initialized WebpiecesServer ready to start()\n     */\n\n    /**\n     * Create a new WebPieces server instance asynchronously.\n     *\n     * Use this method when you need async operations in your override modules\n     * (e.g., rebind() in new Inversify versions).\n     *\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param overrides - Optional ContainerModule for test overrides (can use async operations)\n     * @returns Promise of a fully initialized WebpiecesServer ready to start()\n     */\n    static async create(\n        meta: WebAppMeta,\n        overrides?: ContainerModule,\n        testMode?: boolean\n    ): Promise<WebpiecesServer> {\n        // Create WebPieces container for framework-level bindings\n        const webpiecesContainer = new Container();\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await webpiecesContainer.load(buildProviderModule());\n\n        // Resolve WebpiecesServerImpl from DI container\n        const serverImpl = webpiecesContainer.get(WebpiecesServerImpl);\n\n        // Initialize the server asynchronously (loads app DI modules, registers routes)\n        await serverImpl.initialize(webpiecesContainer, meta, overrides);\n\n        // Return as interface to hide initialize() from consumers\n        return serverImpl;\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesFactory.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesFactory.ts"],"names":[],"mappings":";;;AAAA,yCAAuD;AACvD,wEAAsE;AACtE,0DAAiH;AAEjH,+DAA4D;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAa,gBAAgB;IACzB;;;;;;;;;;;;;OAaG;IAEH;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACf,IAAgB,EAChB,MAAuB,EACvB,YAA8B,EAC9B,QAAkB;QAElB,0DAA0D;QAC1D,MAAM,kBAAkB,GAAG,IAAI,qBAAS,EAAE,CAAC;QAE3C,+DAA+D;QAC/D,kBAAkB,CAAC,IAAI,CAAa,gCAAiB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE7E,oEAAoE;QACpE,kBAAkB,CAAC,IAAI,CAAkB,qCAAsB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEzF,yEAAyE;QACzE,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAErD,gDAAgD;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,yCAAmB,CAAC,CAAC;QAE/D,gFAAgF;QAChF,MAAM,UAAU,CAAC,UAAU,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAE9D,0DAA0D;QAC1D,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ;AAvDD,4CAuDC","sourcesContent":["import { Container, ContainerModule } from 'inversify';\nimport { buildProviderModule } from '@inversifyjs/binding-decorators';\nimport { WebAppMeta, WEBAPP_META_TOKEN, WebpiecesConfig, WEBPIECES_CONFIG_TOKEN } from '@webpieces/http-routing';\nimport { WebpiecesServer } from './WebpiecesServer';\nimport { WebpiecesServerImpl } from './WebpiecesServerImpl';\n\n/**\n * WebpiecesFactory - Factory for creating WebPieces server instances.\n *\n * This factory encapsulates the server creation and initialization logic:\n * 1. Creates the WebPieces DI container\n * 2. Loads the provider module for @provideSingleton decorators\n * 3. Resolves WebpiecesServerImpl from DI\n * 4. Calls initialize() with the container and meta\n * 5. Returns the server as the WebpiecesServer interface\n *\n * The returned WebpiecesServer interface only exposes start() and stop(),\n * hiding the internal initialize() method from consumers.\n *\n * Usage:\n * ```typescript\n * // Production\n * const config = new WebpiecesConfig();\n * const server = WebpiecesFactory.create(new ProdServerMeta(), config);\n * server.start(8080);\n *\n * // Testing with appOverrides\n * const appOverrides = new ContainerModule((bind) => {\n *     bind(TYPES.RemoteApi).toConstantValue(mockRemoteApi);\n * });\n * const server = WebpiecesFactory.create(new ProdServerMeta(), config, appOverrides);\n * const api = server.createApiClient(SaveApiPrototype);\n * ```\n *\n * This pattern:\n * - Enforces proper initialization order\n * - Hides implementation details from consumers\n * - Makes the API simpler and harder to misuse\n * - Follows the principle of least privilege\n */\nexport class WebpiecesFactory {\n    /**\n     * Create a new WebPieces server instance.\n     *\n     * This method:\n     * 1. Creates the WebPieces framework DI container\n     * 2. Loads framework bindings via buildProviderModule()\n     * 3. Resolves the server implementation from DI\n     * 4. Initializes the server with the container and meta\n     * 5. Loads optional override module (for testing)\n     *\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param appOverrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)\n     * @returns A fully initialized WebpiecesServer ready to start()\n     */\n\n    /**\n     * Create a new WebPieces server instance asynchronously.\n     *\n     * Use this method when you need async operations in your override modules\n     * (e.g., rebind() in new Inversify versions).\n     *\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param config - Server configuration (CORS, etc.)\n     * @param appOverrides - Optional ContainerModule for app test overrides (can use async operations)\n     * @param testMode - Optional flag for test mode (skips Express server)\n     * @returns Promise of a fully initialized WebpiecesServer ready to start()\n     */\n    static async create(\n        meta: WebAppMeta,\n        config: WebpiecesConfig,\n        appOverrides?: ContainerModule,\n        testMode?: boolean\n    ): Promise<WebpiecesServer> {\n        // Create WebPieces container for framework-level bindings\n        const webpiecesContainer = new Container();\n\n        // Bind WebAppMeta so it can be injected into framework classes\n        webpiecesContainer.bind<WebAppMeta>(WEBAPP_META_TOKEN).toConstantValue(meta);\n\n        // Bind WebpiecesConfig so it can be injected into framework classes\n        webpiecesContainer.bind<WebpiecesConfig>(WEBPIECES_CONFIG_TOKEN).toConstantValue(config);\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await webpiecesContainer.load(buildProviderModule());\n\n        // Resolve WebpiecesServerImpl from DI container\n        const serverImpl = webpiecesContainer.get(WebpiecesServerImpl);\n\n        // Initialize the server asynchronously (loads app DI modules, registers routes)\n        await serverImpl.initialize(webpiecesContainer, appOverrides);\n\n        // Return as interface to hide initialize() from consumers\n        return serverImpl;\n    }\n}\n"]}

package/src/WebpiecesMiddleware.d.ts

@@ -1,4 +1,4 @@
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import { MethodMeta } from '@webpieces/http-routing';
 import { RouteMetadata } from '@webpieces/http-api';
 import { Service, WpResponse } from '@webpieces/http-filters';
@@ -79,6 +79,16 @@ export declare class WebpiecesMiddleware {
      * IMPORTANT: Must be async and await next() to properly chain with async middleware.
      */
     logNextLayer(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * CORS middleware for localhost development.
+     * Only enables CORS when request origin is localhost:*.
+     *
+     * Wide open for all headers/methods in dev mode.
+     * Non-localhost origins are blocked.
+     *
+     * @returns Express middleware handler for CORS
+     */
+    corsForLocalhost(): RequestHandler;
     /**
      * Create an ExpressWrapper for a route.
      * The wrapper handles the full request/response cycle (symmetric design).

package/src/WebpiecesMiddleware.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebpiecesMiddleware = exports.ExpressWrapper = void 0;
 const tslib_1 = require("tslib");
+const cors_1 = tslib_1.__importDefault(require("cors"));
 const inversify_1 = require("inversify");
 const http_routing_1 = require("@webpieces/http-routing");
 const http_api_1 = require("@webpieces/http-api");
@@ -242,6 +243,40 @@ let WebpiecesMiddleware = class WebpiecesMiddleware {
         await next();
         console.log('🟡 [Layer 2: LogNextLayer] After next() -', req.method, req.path);
     }
+    /**
+     * CORS middleware for localhost development.
+     * Only enables CORS when request origin is localhost:*.
+     *
+     * Wide open for all headers/methods in dev mode.
+     * Non-localhost origins are blocked.
+     *
+     * @returns Express middleware handler for CORS
+     */
+    corsForLocalhost() {
+        console.log('[WebpiecesMiddleware] CORS enabled for localhost:* origins');
+        return (0, cors_1.default)({
+            origin: function (origin, callback) {
+                // Allow requests with no origin (same-origin, Postman, curl)
+                if (!origin) {
+                    callback(null, true);
+                    return;
+                }
+                // Only allow localhost origins
+                if (origin.startsWith('http://localhost:') || origin.startsWith('https://localhost:')) {
+                    callback(null, true);
+                }
+                else {
+                    console.log(`[CORS] Blocked origin: ${origin} (only localhost:* allowed)`);
+                    callback(new Error(`CORS not allowed for origin: ${origin}`));
+                }
+            },
+            credentials: true,
+            methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
+            allowedHeaders: '*', // Wide open for dev
+            exposedHeaders: '*', // Expose all response headers to browser JS
+            maxAge: 3600,
+        });
+    }
     /**
      * Create an ExpressWrapper for a route.
      * The wrapper handles the full request/response cycle (symmetric design).

package/src/WebpiecesMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesMiddleware.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesMiddleware.ts"],"names":[],"mappings":";;;;AACA,yCAAuC;AACvC,0DAA4F;AAC5F,kDAc6B;AAE7B,oDAA+C;AAC/C,0DAAyD;AAEzD,MAAa,cAAc;IACvB,YACY,OAAiD,EACjD,SAAwB;QADxB,YAAO,GAAP,OAAO,CAA0C;QACjD,cAAS,GAAT,SAAS,CAAe;IAEpC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChE,qDAAqD;QACrD,6DAA6D;QAC7D,MAAM,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACxE,8HAA8H;QAC9H,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,mBAAmB;YACnB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACpE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEpD,+EAA+E;QAC/E,IAAI,UAAU,GAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,aAAa;YACb,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAI,yBAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAE9E,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACX,2DAA2D,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAC/H,CAAC;QACN,CAAC;QAED,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,WAAW,CAAC,GAAa,EAAE,KAAc;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QAE1C,IAAI,KAAK,YAAY,oBAAS,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAEhC,8DAA8D;YAC9D,IAAI,KAAK,YAAY,wBAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,aAAa,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5D,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAClC,aAAa,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC;YACrD,CAAC;iBAAM,IAAI,KAAK,YAAY,4BAAiB,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,2BAAgB,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/D,aAAa,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,YAAY,gCAAqB,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,KAAK,YAAY,6BAAkB,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAED,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACJ,sBAAsB;YACtB,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;YAC3B,aAAa,CAAC,OAAO,GAAG,uBAAuB,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;CACJ;AAxKD,wCAwKC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CACpB,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAErF,iHAAiH;QACjH,IAAI,CAAC;YACD,6BAA6B;YAC7B,2CAA2C;YAC3C,wDAAwD;YACxD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACP,yDAAyD,EACzD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,yEAAyE;gBACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;;;mBAOlB,KAAK,CAAC,OAAO;;;SAGvB,CAAC,CAAC;YACC,CAAC;YACD,OAAO,CAAC,GAAG,CACP,uDAAuD,EACvD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC9D,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAChB,OAAiD,EACjD,SAAwB;QAExB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ,CAAA;AA/EY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;GACA,mBAAmB,CA+E/B","sourcesContent":["import { Request, Response, NextFunction } from 'express';\nimport { injectable } from 'inversify';\nimport { provideSingleton, MethodMeta, ExpressRouteHandler } from '@webpieces/http-routing';\nimport {\n    ProtocolError,\n    HttpError,\n    HttpBadRequestError,\n    HttpVendorError,\n    HttpUserError,\n    HttpNotFoundError,\n    HttpTimeoutError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpInternalServerError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    RouteMetadata,\n} from '@webpieces/http-api';\nimport { Service, WpResponse } from '@webpieces/http-filters';\nimport { toError } from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\n\nexport class ExpressWrapper {\n    constructor(\n        private service: Service<MethodMeta, WpResponse<unknown>>,\n        private routeMeta: RouteMetadata\n    ) {\n    }\n\n    public async execute(req: Request, res: Response, next: NextFunction) {\n        // MOVED: Wrap entire request in RequestContext.run()\n        // This establishes AsyncLocalStorage context for the request\n        await RequestContext.run(async () => {\n            await this.executeTryCatch(req, res, next);\n        });\n    }\n\n    public async executeTryCatch(req: Request, res: Response, next: NextFunction) {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- ExpressWrapper catches errors to translate to HTTP responses\n        try {\n            await this.executeImpl(req, res, next);\n        } catch (err: any) {\n            const error = toError(err);\n            // 5. Handle errors\n            this.handleError(res, error);\n        }\n    }\n\n    public async executeImpl(req: Request, res: Response, next: NextFunction) {\n        // 1. Read HTTP headers from Express request\n        const requestHeaders = this.readExpressHeaders(req);\n\n        // 2. Parse JSON request body manually (SYMMETRIC with client's JSON.stringify)\n        let requestDto: unknown = {};\n        if (['POST', 'PUT', 'PATCH'].includes(req.method)) {\n            // Read raw body as text\n            const bodyText = await this.readRequestBody(req);\n            // Parse JSON\n            requestDto = bodyText ? JSON.parse(bodyText) : {};\n        }\n\n        // 3. Create MethodMeta with headers and request DTO\n        const methodMeta = new MethodMeta(this.routeMeta, requestHeaders, requestDto);\n\n        // 4. Invoke the service (filter chain + controller)\n        const wpResponse = await this.service.invoke(methodMeta);\n        if (!wpResponse.response) {\n            throw new Error(\n                `Route chain(filters & all) is not returning a response. ${this.routeMeta.controllerClassName}.${this.routeMeta.methodName}`\n            );\n        }\n\n        // 5. Serialize response DTO to JSON (SYMMETRIC with client's response.json())\n        const responseJson = JSON.stringify(wpResponse.response);\n        res.status(200).setHeader('Content-Type', 'application/json').send(responseJson);\n    }\n\n    /**\n     * Read HTTP headers from Express request.\n     * Returns Map of header name (lowercase) -> array of values.\n     *\n     * HTTP spec allows multiple values for same header name.\n     */\n    private readExpressHeaders(req: Request): Map<string, string[]> {\n        const headers = new Map<string, string[]>();\n\n        // Express stores headers in req.headers as Record<string, string | string[]>\n        for (const [name, value] of Object.entries(req.headers)) {\n            const lowerName = name.toLowerCase();\n\n            if (typeof value === 'string') {\n                headers.set(lowerName, [value]);\n            } else if (Array.isArray(value)) {\n                headers.set(lowerName, value);\n            }\n        }\n\n        return headers;\n    }\n\n    /**\n     * Read raw request body as text.\n     * Used to manually parse JSON (instead of express.json() middleware).\n     */\n    private async readRequestBody(req: Request): Promise<string> {\n        return new Promise((resolve, reject) => {\n            let body = '';\n            req.on('data', (chunk) => {\n                body += chunk.toString();\n            });\n            req.on('end', () => {\n                resolve(body);\n            });\n            req.on('error', (err) => {\n                reject(err);\n            });\n        });\n    }\n\n    /**\n     * Handle errors - translate to JSON ProtocolError (SYMMETRIC with ClientErrorTranslator).\n     * PUBLIC so wrapExpress can call it for symmetric error handling.\n     * Maps HttpError subclasses to appropriate HTTP status codes and ProtocolError response.\n     *\n     * Maps all HttpError types (must match ClientErrorTranslator.translateError()):\n     * - HttpUserError → 266 (with errorCode)\n     * - HttpBadRequestError → 400 (with field, guiAlertMessage)\n     * - HttpUnauthorizedError → 401\n     * - HttpForbiddenError → 403\n     * - HttpNotFoundError → 404\n     * - HttpTimeoutError → 408\n     * - HttpInternalServerError → 500\n     * - HttpBadGatewayError → 502\n     * - HttpGatewayTimeoutError → 504\n     * - HttpVendorError → 598 (with waitSeconds)\n     */\n    public handleError(res: Response, error: unknown): void {\n        if (res.headersSent) {\n            return;\n        }\n\n        const protocolError = new ProtocolError();\n\n        if (error instanceof HttpError) {\n            // Set common fields for all HttpError types\n            protocolError.message = error.message;\n            protocolError.subType = error.subType;\n            protocolError.name = error.name;\n\n            // Set type-specific fields (MUST match ClientErrorTranslator)\n            if (error instanceof HttpUserError) {\n                console.log('[ExpressWrapper] User Error:', error.message);\n                protocolError.errorCode = error.errorCode;\n            } else if (error instanceof HttpBadRequestError) {\n                console.log('[ExpressWrapper] Bad Request:', error.message);\n                protocolError.field = error.field;\n                protocolError.guiAlertMessage = error.guiMessage;\n            } else if (error instanceof HttpNotFoundError) {\n                console.log('[ExpressWrapper] Not Found:', error.message);\n            } else if (error instanceof HttpTimeoutError) {\n                console.error('[ExpressWrapper] Timeout Error:', error.message);\n            } else if (error instanceof HttpVendorError) {\n                console.error('[ExpressWrapper] Vendor Error:', error.message);\n                protocolError.waitSeconds = error.waitSeconds;\n            } else if (error instanceof HttpUnauthorizedError) {\n                console.log('[ExpressWrapper] Unauthorized:', error.message);\n            } else if (error instanceof HttpForbiddenError) {\n                console.log('[ExpressWrapper] Forbidden:', error.message);\n            } else if (error instanceof HttpInternalServerError) {\n                console.error('[ExpressWrapper] Internal Server Error:', error.message);\n            } else if (error instanceof HttpBadGatewayError) {\n                console.error('[ExpressWrapper] Bad Gateway:', error.message);\n            } else if (error instanceof HttpGatewayTimeoutError) {\n                console.error('[ExpressWrapper] Gateway Timeout:', error.message);\n            } else {\n                console.log('[ExpressWrapper] Generic HttpError:', error.message);\n            }\n\n            // Serialize ProtocolError to JSON (SYMMETRIC with client)\n            const responseJson = JSON.stringify(protocolError);\n            res.status(error.code).setHeader('Content-Type', 'application/json').send(responseJson);\n        } else {\n            // Unknown error - 500\n            const err = toError(error);\n            protocolError.message = 'Internal Server Error';\n            console.error('[ExpressWrapper] Unexpected error:', err);\n            const responseJson = JSON.stringify(protocolError);\n            res.status(500).setHeader('Content-Type', 'application/json').send(responseJson);\n        }\n    }\n}\n\n/**\n * WebpiecesMiddleware - Express middleware for WebPieces server.\n *\n * This class contains all Express middleware used by WebpiecesServer:\n * 1. globalErrorHandler - Outermost error handler, returns HTML 500 page\n * 2. logNextLayer - Request/response logging\n * 3. jsonTranslator - JSON Content-Type validation and error translation\n *\n * The middleware is injected into WebpiecesServerImpl and registered with Express\n * in the start() method.\n *\n * IMPORTANT: jsonTranslator does NOT dispatch routes - route dispatch happens via\n * Express's registered route handlers (created by RouteBuilder.createHandler()).\n * jsonTranslator only validates Content-Type and translates errors to JSON.\n *\n * NEW: ExpressWrapper simplified - no longer handles JSON or headers\n * - JSON parsing/serialization moved to JsonFilter\n * - Header transfer moved to ContextFilter (injects PlatformHeadersExtension directly)\n * - ExpressWrapper just creates RouterReqResp and invokes filter chain\n *\n * Extension vs Plugin pattern:\n * - Extensions (DI-level): Contribute capabilities to framework (headers, converters, etc.)\n * - Plugins (App-level): Provide complete features with modules + routes (Hibernate, Jackson, etc.)\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesMiddleware {\n\n    /**\n     * Global error handler middleware - catches ALL unhandled errors.\n     * Returns HTML 500 error page for any errors that escape the filter chain.\n     *\n     * This is the outermost safety net - JsonTranslator catches JSON API errors,\n     * this catches everything else.\n     */\n    async globalErrorHandler(\n        req: Request,\n        res: Response,\n        next: NextFunction,\n    ): Promise<void> {\n        console.log('🔴 [Layer 1: GlobalErrorHandler] Request START:', req.method, req.path);\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- Global error handler IS the top-level catch-all\n        try {\n            // await next() catches BOTH:\n            // 1. Synchronous throws from next() itself\n            // 2. Rejected promises from downstream async middleware\n            await next();\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (success):',\n                req.method,\n                req.path,\n            );\n        } catch (err: any) {\n            const error = toError(err);\n            console.error('🔴 [Layer 1: GlobalErrorHandler] Caught unhandled error:', error);\n            if (!res.headersSent) {\n                // Return HTML error page (not JSON - JsonTranslator handles JSON errors)\n                res.status(500).send(`\n          <!DOCTYPE html>\n          <html>\n          <head><title>Server Error</title></head>\n          <body>\n            <h1>You hit a server error</h1>\n            <p>An unexpected error occurred while processing your request.</p>\n            <pre>${error.message}</pre>\n          </body>\n          </html>\n        `);\n            }\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (error):',\n                req.method,\n                req.path,\n            );\n        }\n    }\n\n    /**\n     * Logging middleware - logs request/response flow.\n     * Demonstrates middleware execution order.\n     * IMPORTANT: Must be async and await next() to properly chain with async middleware.\n     */\n    async logNextLayer(req: Request, res: Response, next: NextFunction): Promise<void> {\n        console.log('🟡 [Layer 2: LogNextLayer] Before next() -', req.method, req.path);\n        await next();\n        console.log('🟡 [Layer 2: LogNextLayer] After next() -', req.method, req.path);\n    }\n\n    /**\n     * Create an ExpressWrapper for a route.\n     * The wrapper handles the full request/response cycle (symmetric design).\n     *\n     * NEW: Simplified - no longer passes headers (ContextFilter handles it now)\n     *\n     * @param service - The service wrapping the filter chain and controller\n     * @param routeMeta - Route metadata for MethodMeta and DTO type\n     * @returns ExpressWrapper instance\n     */\n    createExpressWrapper(\n        service: Service<MethodMeta, WpResponse<unknown>>,\n        routeMeta: RouteMetadata,\n    ): ExpressWrapper {\n        return new ExpressWrapper(service, routeMeta);\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesMiddleware.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesMiddleware.ts"],"names":[],"mappings":";;;;AACA,wDAAwB;AACxB,yCAAuC;AACvC,0DAA4F;AAC5F,kDAc6B;AAE7B,oDAA+C;AAC/C,0DAAyD;AAEzD,MAAa,cAAc;IACvB,YACY,OAAiD,EACjD,SAAwB;QADxB,YAAO,GAAP,OAAO,CAA0C;QACjD,cAAS,GAAT,SAAS,CAAe;IAEpC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChE,qDAAqD;QACrD,6DAA6D;QAC7D,MAAM,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACxE,8HAA8H;QAC9H,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,mBAAmB;YACnB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACpE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEpD,+EAA+E;QAC/E,IAAI,UAAU,GAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,aAAa;YACb,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAI,yBAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAE9E,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACX,2DAA2D,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAC/H,CAAC;QACN,CAAC;QAED,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,WAAW,CAAC,GAAa,EAAE,KAAc;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QAE1C,IAAI,KAAK,YAAY,oBAAS,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAEhC,8DAA8D;YAC9D,IAAI,KAAK,YAAY,wBAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,aAAa,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5D,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAClC,aAAa,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC;YACrD,CAAC;iBAAM,IAAI,KAAK,YAAY,4BAAiB,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,2BAAgB,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/D,aAAa,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,YAAY,gCAAqB,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,KAAK,YAAY,6BAAkB,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAED,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACJ,sBAAsB;YACtB,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;YAC3B,aAAa,CAAC,OAAO,GAAG,uBAAuB,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;CACJ;AAxKD,wCAwKC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CACpB,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAErF,iHAAiH;QACjH,IAAI,CAAC;YACD,6BAA6B;YAC7B,2CAA2C;YAC3C,wDAAwD;YACxD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACP,yDAAyD,EACzD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,yEAAyE;gBACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;;;mBAOlB,KAAK,CAAC,OAAO;;;SAGvB,CAAC,CAAC;YACC,CAAC;YACD,OAAO,CAAC,GAAG,CACP,uDAAuD,EACvD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC9D,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB;QACZ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAE1E,OAAO,IAAA,cAAI,EAAC;YACR,MAAM,EAAE,UAAU,MAAM,EAAE,QAAQ;gBAC9B,6DAA6D;gBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,6BAA6B,CAAC,CAAC;oBAC3E,QAAQ,CAAC,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC;YACD,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,GAAG,EAAE,oBAAoB;YACzC,cAAc,EAAE,GAAG,EAAE,4CAA4C;YACjE,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAChB,OAAiD,EACjD,SAAwB;QAExB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ,CAAA;AAnHY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAmH/B","sourcesContent":["import { Request, Response, NextFunction, RequestHandler } from 'express';\nimport cors from 'cors';\nimport { injectable } from 'inversify';\nimport { provideSingleton, MethodMeta, ExpressRouteHandler } from '@webpieces/http-routing';\nimport {\n    ProtocolError,\n    HttpError,\n    HttpBadRequestError,\n    HttpVendorError,\n    HttpUserError,\n    HttpNotFoundError,\n    HttpTimeoutError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpInternalServerError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    RouteMetadata,\n} from '@webpieces/http-api';\nimport { Service, WpResponse } from '@webpieces/http-filters';\nimport { toError } from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\n\nexport class ExpressWrapper {\n    constructor(\n        private service: Service<MethodMeta, WpResponse<unknown>>,\n        private routeMeta: RouteMetadata\n    ) {\n    }\n\n    public async execute(req: Request, res: Response, next: NextFunction) {\n        // MOVED: Wrap entire request in RequestContext.run()\n        // This establishes AsyncLocalStorage context for the request\n        await RequestContext.run(async () => {\n            await this.executeTryCatch(req, res, next);\n        });\n    }\n\n    public async executeTryCatch(req: Request, res: Response, next: NextFunction) {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- ExpressWrapper catches errors to translate to HTTP responses\n        try {\n            await this.executeImpl(req, res, next);\n        } catch (err: any) {\n            const error = toError(err);\n            // 5. Handle errors\n            this.handleError(res, error);\n        }\n    }\n\n    public async executeImpl(req: Request, res: Response, next: NextFunction) {\n        // 1. Read HTTP headers from Express request\n        const requestHeaders = this.readExpressHeaders(req);\n\n        // 2. Parse JSON request body manually (SYMMETRIC with client's JSON.stringify)\n        let requestDto: unknown = {};\n        if (['POST', 'PUT', 'PATCH'].includes(req.method)) {\n            // Read raw body as text\n            const bodyText = await this.readRequestBody(req);\n            // Parse JSON\n            requestDto = bodyText ? JSON.parse(bodyText) : {};\n        }\n\n        // 3. Create MethodMeta with headers and request DTO\n        const methodMeta = new MethodMeta(this.routeMeta, requestHeaders, requestDto);\n\n        // 4. Invoke the service (filter chain + controller)\n        const wpResponse = await this.service.invoke(methodMeta);\n        if (!wpResponse.response) {\n            throw new Error(\n                `Route chain(filters & all) is not returning a response. ${this.routeMeta.controllerClassName}.${this.routeMeta.methodName}`\n            );\n        }\n\n        // 5. Serialize response DTO to JSON (SYMMETRIC with client's response.json())\n        const responseJson = JSON.stringify(wpResponse.response);\n        res.status(200).setHeader('Content-Type', 'application/json').send(responseJson);\n    }\n\n    /**\n     * Read HTTP headers from Express request.\n     * Returns Map of header name (lowercase) -> array of values.\n     *\n     * HTTP spec allows multiple values for same header name.\n     */\n    private readExpressHeaders(req: Request): Map<string, string[]> {\n        const headers = new Map<string, string[]>();\n\n        // Express stores headers in req.headers as Record<string, string | string[]>\n        for (const [name, value] of Object.entries(req.headers)) {\n            const lowerName = name.toLowerCase();\n\n            if (typeof value === 'string') {\n                headers.set(lowerName, [value]);\n            } else if (Array.isArray(value)) {\n                headers.set(lowerName, value);\n            }\n        }\n\n        return headers;\n    }\n\n    /**\n     * Read raw request body as text.\n     * Used to manually parse JSON (instead of express.json() middleware).\n     */\n    private async readRequestBody(req: Request): Promise<string> {\n        return new Promise((resolve, reject) => {\n            let body = '';\n            req.on('data', (chunk) => {\n                body += chunk.toString();\n            });\n            req.on('end', () => {\n                resolve(body);\n            });\n            req.on('error', (err) => {\n                reject(err);\n            });\n        });\n    }\n\n    /**\n     * Handle errors - translate to JSON ProtocolError (SYMMETRIC with ClientErrorTranslator).\n     * PUBLIC so wrapExpress can call it for symmetric error handling.\n     * Maps HttpError subclasses to appropriate HTTP status codes and ProtocolError response.\n     *\n     * Maps all HttpError types (must match ClientErrorTranslator.translateError()):\n     * - HttpUserError → 266 (with errorCode)\n     * - HttpBadRequestError → 400 (with field, guiAlertMessage)\n     * - HttpUnauthorizedError → 401\n     * - HttpForbiddenError → 403\n     * - HttpNotFoundError → 404\n     * - HttpTimeoutError → 408\n     * - HttpInternalServerError → 500\n     * - HttpBadGatewayError → 502\n     * - HttpGatewayTimeoutError → 504\n     * - HttpVendorError → 598 (with waitSeconds)\n     */\n    public handleError(res: Response, error: unknown): void {\n        if (res.headersSent) {\n            return;\n        }\n\n        const protocolError = new ProtocolError();\n\n        if (error instanceof HttpError) {\n            // Set common fields for all HttpError types\n            protocolError.message = error.message;\n            protocolError.subType = error.subType;\n            protocolError.name = error.name;\n\n            // Set type-specific fields (MUST match ClientErrorTranslator)\n            if (error instanceof HttpUserError) {\n                console.log('[ExpressWrapper] User Error:', error.message);\n                protocolError.errorCode = error.errorCode;\n            } else if (error instanceof HttpBadRequestError) {\n                console.log('[ExpressWrapper] Bad Request:', error.message);\n                protocolError.field = error.field;\n                protocolError.guiAlertMessage = error.guiMessage;\n            } else if (error instanceof HttpNotFoundError) {\n                console.log('[ExpressWrapper] Not Found:', error.message);\n            } else if (error instanceof HttpTimeoutError) {\n                console.error('[ExpressWrapper] Timeout Error:', error.message);\n            } else if (error instanceof HttpVendorError) {\n                console.error('[ExpressWrapper] Vendor Error:', error.message);\n                protocolError.waitSeconds = error.waitSeconds;\n            } else if (error instanceof HttpUnauthorizedError) {\n                console.log('[ExpressWrapper] Unauthorized:', error.message);\n            } else if (error instanceof HttpForbiddenError) {\n                console.log('[ExpressWrapper] Forbidden:', error.message);\n            } else if (error instanceof HttpInternalServerError) {\n                console.error('[ExpressWrapper] Internal Server Error:', error.message);\n            } else if (error instanceof HttpBadGatewayError) {\n                console.error('[ExpressWrapper] Bad Gateway:', error.message);\n            } else if (error instanceof HttpGatewayTimeoutError) {\n                console.error('[ExpressWrapper] Gateway Timeout:', error.message);\n            } else {\n                console.log('[ExpressWrapper] Generic HttpError:', error.message);\n            }\n\n            // Serialize ProtocolError to JSON (SYMMETRIC with client)\n            const responseJson = JSON.stringify(protocolError);\n            res.status(error.code).setHeader('Content-Type', 'application/json').send(responseJson);\n        } else {\n            // Unknown error - 500\n            const err = toError(error);\n            protocolError.message = 'Internal Server Error';\n            console.error('[ExpressWrapper] Unexpected error:', err);\n            const responseJson = JSON.stringify(protocolError);\n            res.status(500).setHeader('Content-Type', 'application/json').send(responseJson);\n        }\n    }\n}\n\n/**\n * WebpiecesMiddleware - Express middleware for WebPieces server.\n *\n * This class contains all Express middleware used by WebpiecesServer:\n * 1. globalErrorHandler - Outermost error handler, returns HTML 500 page\n * 2. logNextLayer - Request/response logging\n * 3. jsonTranslator - JSON Content-Type validation and error translation\n *\n * The middleware is injected into WebpiecesServerImpl and registered with Express\n * in the start() method.\n *\n * IMPORTANT: jsonTranslator does NOT dispatch routes - route dispatch happens via\n * Express's registered route handlers (created by RouteBuilder.createHandler()).\n * jsonTranslator only validates Content-Type and translates errors to JSON.\n *\n * NEW: ExpressWrapper simplified - no longer handles JSON or headers\n * - JSON parsing/serialization moved to JsonFilter\n * - Header transfer moved to ContextFilter (injects PlatformHeadersExtension directly)\n * - ExpressWrapper just creates RouterReqResp and invokes filter chain\n *\n * Extension vs Plugin pattern:\n * - Extensions (DI-level): Contribute capabilities to framework (headers, converters, etc.)\n * - Plugins (App-level): Provide complete features with modules + routes (Hibernate, Jackson, etc.)\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesMiddleware {\n\n    /**\n     * Global error handler middleware - catches ALL unhandled errors.\n     * Returns HTML 500 error page for any errors that escape the filter chain.\n     *\n     * This is the outermost safety net - JsonTranslator catches JSON API errors,\n     * this catches everything else.\n     */\n    async globalErrorHandler(\n        req: Request,\n        res: Response,\n        next: NextFunction,\n    ): Promise<void> {\n        console.log('🔴 [Layer 1: GlobalErrorHandler] Request START:', req.method, req.path);\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- Global error handler IS the top-level catch-all\n        try {\n            // await next() catches BOTH:\n            // 1. Synchronous throws from next() itself\n            // 2. Rejected promises from downstream async middleware\n            await next();\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (success):',\n                req.method,\n                req.path,\n            );\n        } catch (err: any) {\n            const error = toError(err);\n            console.error('🔴 [Layer 1: GlobalErrorHandler] Caught unhandled error:', error);\n            if (!res.headersSent) {\n                // Return HTML error page (not JSON - JsonTranslator handles JSON errors)\n                res.status(500).send(`\n          <!DOCTYPE html>\n          <html>\n          <head><title>Server Error</title></head>\n          <body>\n            <h1>You hit a server error</h1>\n            <p>An unexpected error occurred while processing your request.</p>\n            <pre>${error.message}</pre>\n          </body>\n          </html>\n        `);\n            }\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (error):',\n                req.method,\n                req.path,\n            );\n        }\n    }\n\n    /**\n     * Logging middleware - logs request/response flow.\n     * Demonstrates middleware execution order.\n     * IMPORTANT: Must be async and await next() to properly chain with async middleware.\n     */\n    async logNextLayer(req: Request, res: Response, next: NextFunction): Promise<void> {\n        console.log('🟡 [Layer 2: LogNextLayer] Before next() -', req.method, req.path);\n        await next();\n        console.log('🟡 [Layer 2: LogNextLayer] After next() -', req.method, req.path);\n    }\n\n    /**\n     * CORS middleware for localhost development.\n     * Only enables CORS when request origin is localhost:*.\n     *\n     * Wide open for all headers/methods in dev mode.\n     * Non-localhost origins are blocked.\n     *\n     * @returns Express middleware handler for CORS\n     */\n    corsForLocalhost(): RequestHandler {\n        console.log('[WebpiecesMiddleware] CORS enabled for localhost:* origins');\n\n        return cors({\n            origin: function (origin, callback) {\n                // Allow requests with no origin (same-origin, Postman, curl)\n                if (!origin) {\n                    callback(null, true);\n                    return;\n                }\n\n                // Only allow localhost origins\n                if (origin.startsWith('http://localhost:') || origin.startsWith('https://localhost:')) {\n                    callback(null, true);\n                } else {\n                    console.log(`[CORS] Blocked origin: ${origin} (only localhost:* allowed)`);\n                    callback(new Error(`CORS not allowed for origin: ${origin}`));\n                }\n            },\n            credentials: true,\n            methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n            allowedHeaders: '*', // Wide open for dev\n            exposedHeaders: '*', // Expose all response headers to browser JS\n            maxAge: 3600,\n        });\n    }\n\n    /**\n     * Create an ExpressWrapper for a route.\n     * The wrapper handles the full request/response cycle (symmetric design).\n     *\n     * NEW: Simplified - no longer passes headers (ContextFilter handles it now)\n     *\n     * @param service - The service wrapping the filter chain and controller\n     * @param routeMeta - Route metadata for MethodMeta and DTO type\n     * @returns ExpressWrapper instance\n     */\n    createExpressWrapper(\n        service: Service<MethodMeta, WpResponse<unknown>>,\n        routeMeta: RouteMetadata,\n    ): ExpressWrapper {\n        return new ExpressWrapper(service, routeMeta);\n    }\n}\n"]}

package/src/WebpiecesServerImpl.d.ts

@@ -27,9 +27,9 @@ import { WebpiecesMiddleware } from './WebpiecesMiddleware';
  * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.
  */
 export declare class WebpiecesServerImpl implements WebpiecesServer {
+    private meta;
     private routeBuilder;
     private middleware;
-    private meta;
     private webpiecesContainer;
     /**
      * Application container: User's application bindings.
@@ -41,25 +41,17 @@ export declare class WebpiecesServerImpl implements WebpiecesServer {
     private app?;
     private server?;
     private port;
-    constructor(routeBuilder: RouteBuilderImpl, middleware: WebpiecesMiddleware);
+    constructor(meta: WebAppMeta, routeBuilder: RouteBuilderImpl, middleware: WebpiecesMiddleware);
     /**
-     * Initialize the server (DI container, routes, filters).
+     * Initialize the server asynchronously.
      * This is called by WebpiecesFactory.create() after resolving this class from DI.
      * This method is internal and not exposed on the WebpiecesServer interface.
      *
      * @param webpiecesContainer - The framework container
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)
-     */
-    /**
-     * Initialize the server asynchronously.
-     * Use this when overrides module contains async operations (e.g., rebind() in new Inversify).
-     *
-     * @param webpiecesContainer - The framework container
-     * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)
+     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST)
      */
-    initialize(webpiecesContainer: Container, meta: WebAppMeta, overrides?: ContainerModule): Promise<void>;
+    initialize(webpiecesContainer: Container, appOverrides?: ContainerModule): Promise<void>;
     /**
      * Load DI modules from WebAppMeta.
      *
@@ -70,7 +62,7 @@ export declare class WebpiecesServerImpl implements WebpiecesServer {
      *
      * For now, everything goes into appContainer which has access to webpiecesContainer.
      *
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
+     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST to override bindings)
      */
     private loadDIModules;
     /**

package/src/WebpiecesServerImpl.js

@@ -33,41 +33,33 @@ const core_context_1 = require("@webpieces/core-context");
  * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.
  */
 let WebpiecesServerImpl = class WebpiecesServerImpl {
-    constructor(routeBuilder, middleware) {
+    constructor(meta, routeBuilder, middleware) {
+        this.meta = meta;
         this.routeBuilder = routeBuilder;
         this.middleware = middleware;
         this.initialized = false;
         this.port = 8200;
     }
     /**
-     * Initialize the server (DI container, routes, filters).
+     * Initialize the server asynchronously.
      * This is called by WebpiecesFactory.create() after resolving this class from DI.
      * This method is internal and not exposed on the WebpiecesServer interface.
      *
      * @param webpiecesContainer - The framework container
      * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)
+     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST)
      */
-    /**
-     * Initialize the server asynchronously.
-     * Use this when overrides module contains async operations (e.g., rebind() in new Inversify).
-     *
-     * @param webpiecesContainer - The framework container
-     * @param meta - User-provided WebAppMeta with DI modules and routes
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)
-     */
-    async initialize(webpiecesContainer, meta, overrides) {
+    async initialize(webpiecesContainer, appOverrides) {
         if (this.initialized) {
             return;
         }
         this.webpiecesContainer = webpiecesContainer;
-        this.meta = meta;
         // Create application container as child of framework container
         this.appContainer = new inversify_1.Container({ parent: this.webpiecesContainer });
         // Set container on RouteBuilder (late binding - appContainer didn't exist in constructor)
         this.routeBuilder.setContainer(this.appContainer);
         // 1. Load DI modules asynchronously
-        await this.loadDIModules(overrides);
+        await this.loadDIModules(appOverrides);
         // 2. Register routes and filters
         this.registerRoutes();
         this.initialized = true;
@@ -82,9 +74,9 @@ let WebpiecesServerImpl = class WebpiecesServerImpl {
      *
      * For now, everything goes into appContainer which has access to webpiecesContainer.
      *
-     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)
+     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST to override bindings)
      */
-    async loadDIModules(overrides) {
+    async loadDIModules(appOverrides) {
         const modules = this.meta.getDIModules();
         // Load buildProviderModule to auto-scan for @provideSingleton decorators
         await this.appContainer.load((0, binding_decorators_1.buildProviderModule)());
@@ -93,9 +85,9 @@ let WebpiecesServerImpl = class WebpiecesServerImpl {
         for (const module of modules) {
             await this.appContainer.load(module);
         }
-        // Load overrides LAST so they can override existing bindings
-        if (overrides) {
-            await this.appContainer.load(overrides);
+        // Load appOverrides LAST so they can override existing bindings
+        if (appOverrides) {
+            await this.appContainer.load(appOverrides);
         }
     }
     /**
@@ -137,7 +129,9 @@ let WebpiecesServerImpl = class WebpiecesServerImpl {
         // Layer 1: Global Error Handler (OUTERMOST - runs FIRST)
         // Catches all unhandled errors and returns HTML 500 page
         this.app.use(this.middleware.globalErrorHandler.bind(this.middleware));
-        // Layer 2: Request/Response Logging
+        // Layer 2: CORS for localhost development
+        this.app.use(this.middleware.corsForLocalhost());
+        // Layer 3: Request/Response Logging
         this.app.use(this.middleware.logNextLayer.bind(this.middleware));
         // Register routes
         const routeCount = this.registerExpressRoutes();
@@ -301,9 +295,10 @@ exports.WebpiecesServerImpl = WebpiecesServerImpl;
 exports.WebpiecesServerImpl = WebpiecesServerImpl = tslib_1.__decorate([
     (0, http_routing_1.provideSingleton)(),
     (0, inversify_1.injectable)(),
-    tslib_1.__param(0, (0, inversify_1.inject)(http_routing_1.RouteBuilderImpl)),
-    tslib_1.__param(1, (0, inversify_1.inject)(WebpiecesMiddleware_1.WebpiecesMiddleware)),
-    tslib_1.__metadata("design:paramtypes", [http_routing_1.RouteBuilderImpl,
+    tslib_1.__param(0, (0, inversify_1.inject)(http_routing_1.WEBAPP_META_TOKEN)),
+    tslib_1.__param(1, (0, inversify_1.inject)(http_routing_1.RouteBuilderImpl)),
+    tslib_1.__param(2, (0, inversify_1.inject)(WebpiecesMiddleware_1.WebpiecesMiddleware)),
+    tslib_1.__metadata("design:paramtypes", [Object, http_routing_1.RouteBuilderImpl,
         WebpiecesMiddleware_1.WebpiecesMiddleware])
 ], WebpiecesServerImpl);
 //# sourceMappingURL=WebpiecesServerImpl.js.map

package/src/WebpiecesServerImpl.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesServerImpl.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesServerImpl.ts"],"names":[],"mappings":";;;;AAAA,8DAA0E;AAC1E,yCAAyE;AACzE,wEAAoE;AACpE,0DAOiC;AAEjC,+DAA0D;AAC1D,0DAAuD;AAGvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAgB5B,YAC8B,YAAsC,EACnC,UAAuC;QADlC,iBAAY,GAAZ,YAAY,CAAkB;QAC3B,eAAU,GAAV,UAAU,CAAqB;QAPhE,gBAAW,GAAG,KAAK,CAAC;QAGpB,SAAI,GAAW,IAAI,CAAC;IAKzB,CAAC;IAEJ;;;;;;;;OAQG;IACH;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CACZ,kBAA6B,EAC7B,IAAgB,EAChB,SAA2B;QAE3B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACX,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAEvE,0FAA0F;QAC1F,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEpC,iCAAiC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,aAAa,CAAC,SAA2B;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEzC,yEAAyE;QACzE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAEpD,8CAA8C;QAC9C,kFAAkF;QAClF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,6DAA6D;QAC7D,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAE3C,mDAAmD;QACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACrC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe,IAAI,EAAE,QAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAG,QAAQ,EAAE,CAAC;YACV,oDAAoD;YACpD,uEAAuE;YACvE,OAAO;QACX,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QAErB,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvE,oCAAoC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjE,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEhD,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxD,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;oBAClE,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,SAAS,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAErD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEzE,IAAI,CAAC,eAAe,CAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,IAAI,EACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;YACF,KAAK,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,cAAmC;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,MAAM;gBACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACpC,MAAM;YACV,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,QAAQ;gBACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACtC,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACrC,MAAM;YACV;gBACI,OAAO,CAAC,IAAI,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;gBAC/B,IAAI,GAAG,EAAE,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAI,YAAgD;QAC/D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC3F,CAAC;QAED,8FAA8F;QAC9F,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAC,YAAY,CAAC,CAAC;QAE3C,sBAAsB;QACtB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,mDAAmD;QACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;YACxC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YAE5B,8EAA8E;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEvE,uEAAuE;YACvE,sEAAsE;YACtE,4EAA4E;YAC5E,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,UAAmB,EAAoB,EAAE;gBAChE,+CAA+C;gBAC/C,oFAAoF;gBACpF,IAAI,CAAC,6BAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC7B,oCAAoC;oBACpC,OAAO,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACjC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;oBAChE,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC,CAAC;QACN,CAAC;QAED,OAAO,KAAU,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAAwB,EAAE,UAAmB,EAAE,OAAiD;QACpH,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,yBAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,eAAe,CAAC,QAAQ,CAAC;IACpC,CAAC;CACJ,CAAA;AAtUY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAkBJ,mBAAA,IAAA,kBAAM,EAAC,+BAAgB,CAAC,CAAA;IACxB,mBAAA,IAAA,kBAAM,EAAC,yCAAmB,CAAC,CAAA;6CADoB,+BAAgB;QACf,yCAAmB;GAlB/D,mBAAmB,CAsU/B","sourcesContent":["import express, {Express, NextFunction, Request, Response} from 'express';\nimport {Container, ContainerModule, inject, injectable} from 'inversify';\nimport {buildProviderModule} from '@inversifyjs/binding-decorators';\nimport {\n    ExpressRouteHandler,\n    getRoutes,\n    MethodMeta,\n    provideSingleton,\n    RouteBuilderImpl, RouteMetadata,\n    WebAppMeta,\n} from '@webpieces/http-routing';\nimport {WebpiecesServer} from './WebpiecesServer';\nimport {WebpiecesMiddleware} from './WebpiecesMiddleware';\nimport {RequestContext} from '@webpieces/core-context';\nimport {Service, WpResponse} from \"@webpieces/http-filters\";\n\n/**\n * WebpiecesServerImpl - Internal server implementation.\n *\n * This class implements the WebpiecesServer interface and contains\n * all the actual server logic. It is created by WebpiecesFactory.create().\n *\n * This class uses a two-container pattern similar to Java WebPieces:\n * 1. webpiecesContainer: Core WebPieces framework bindings\n * 2. appContainer: User's application bindings (child of webpiecesContainer)\n *\n * This separation allows:\n * - Clean separation of concerns\n * - Better testability\n * - Ability to override framework bindings in tests\n *\n * The server:\n * 1. Initializes both DI containers from WebAppMeta.getDIModules()\n * 2. Registers routes using explicit RouteBuilderImpl\n * 3. Creates filter chains\n * 4. Supports both HTTP server mode and testing mode (no HTTP)\n *\n * DI Pattern: This class is registered in webpiecesContainer via @provideSingleton()\n * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesServerImpl implements WebpiecesServer {\n    private meta!: WebAppMeta;\n    private webpiecesContainer!: Container;\n\n    /**\n     * Application container: User's application bindings.\n     * This is a child container of webpiecesContainer, so it can access\n     * framework bindings while keeping app bindings separate.\n     */\n    private appContainer!: Container;\n\n    private initialized = false;\n    private app?: Express;\n    private server?: ReturnType<Express['listen']>;\n    private port: number = 8200;\n\n    constructor(\n        @inject(RouteBuilderImpl) private routeBuilder: RouteBuilderImpl,\n        @inject(WebpiecesMiddleware) private middleware: WebpiecesMiddleware,\n    ) {}\n\n    /**\n     * Initialize the server (DI container, routes, filters).\n     * This is called by WebpiecesFactory.create() after resolving this class from DI.\n     * This method is internal and not exposed on the WebpiecesServer interface.\n     *\n     * @param webpiecesContainer - The framework container\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)\n     */\n    /**\n     * Initialize the server asynchronously.\n     * Use this when overrides module contains async operations (e.g., rebind() in new Inversify).\n     *\n     * @param webpiecesContainer - The framework container\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param overrides - Optional ContainerModule for test overrides (loaded LAST)\n     */\n    async initialize(\n        webpiecesContainer: Container,\n        meta: WebAppMeta,\n        overrides?: ContainerModule\n    ): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        this.webpiecesContainer = webpiecesContainer;\n        this.meta = meta;\n\n        // Create application container as child of framework container\n        this.appContainer = new Container({ parent: this.webpiecesContainer });\n\n        // Set container on RouteBuilder (late binding - appContainer didn't exist in constructor)\n        this.routeBuilder.setContainer(this.appContainer);\n\n        // 1. Load DI modules asynchronously\n        await this.loadDIModules(overrides);\n\n        // 2. Register routes and filters\n        this.registerRoutes();\n\n        this.initialized = true;\n    }\n\n    /**\n     * Load DI modules from WebAppMeta.\n     *\n     * Currently, all user modules are loaded into the application container.\n     * In the future, we could separate:\n     * - WebPieces framework modules -> webpiecesContainer\n     * - Application modules -> appContainer\n     *\n     * For now, everything goes into appContainer which has access to webpiecesContainer.\n     *\n     * @param overrides - Optional ContainerModule for test overrides (loaded LAST to override bindings)\n     */\n    private async loadDIModules(overrides?: ContainerModule): Promise<void> {\n        const modules = this.meta.getDIModules();\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await this.appContainer.load(buildProviderModule());\n\n        // Load all modules into application container\n        // (webpiecesContainer is currently empty, reserved for future framework bindings)\n        for (const module of modules) {\n            await this.appContainer.load(module);\n        }\n\n        // Load overrides LAST so they can override existing bindings\n        if (overrides) {\n            await this.appContainer.load(overrides);\n        }\n    }\n\n    /**\n     * Register routes from WebAppMeta.\n     *\n     * Creates an explicit RouteBuilderImpl instead of an anonymous object.\n     * This improves:\n     * - Traceability: Can Cmd+Click on addRoute to see implementation\n     * - Debugging: Explicit class shows up in stack traces\n     * - Understanding: Clear class name vs anonymous object\n     */\n    private registerRoutes(): void {\n        const routeConfigs = this.meta.getRoutes();\n\n        // Configure routes using the explicit RouteBuilder\n        for (const routeConfig of routeConfigs) {\n            routeConfig.configure(this.routeBuilder);\n        }\n    }\n\n    /**\n     * Start the HTTP server with Express.\n     * Returns a Promise that resolves when the server is listening,\n     * or rejects if the server fails to start.\n     *\n     * @param port - The port to listen on (default: 8080)\n     * @returns Promise that resolves when server is ready\n     */\n    async start(port: number = 8200, testMode?: boolean): Promise<void> {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before start().');\n        }\n\n        this.port = port;\n\n        if(testMode) {\n            //In testMode, we eliminate express ENTIRELY and use\n            //Router, method filters and controllers so that we can test full stack\n            return;\n        }\n\n        // Create Express app\n        this.app = express();\n\n        // Layer 1: Global Error Handler (OUTERMOST - runs FIRST)\n        // Catches all unhandled errors and returns HTML 500 page\n        this.app.use(this.middleware.globalErrorHandler.bind(this.middleware));\n\n        // Layer 2: Request/Response Logging\n        this.app.use(this.middleware.logNextLayer.bind(this.middleware));\n\n        // Register routes\n        const routeCount = this.registerExpressRoutes();\n\n        // Start listening - wrap in Promise\n        const promise = new Promise<void>((resolve, reject) => {\n            this.server = this.app!.listen(this.port, (error?: Error) => {\n                if (error) {\n                    console.error(`[WebpiecesServer] Failed to start server:`, error);\n                    reject(error);\n                    return;\n                }\n                console.log(`[WebpiecesServer] Server listening on http://localhost:${this.port}`);\n                console.log(`[WebpiecesServer] Registered ${routeCount} routes`);\n                resolve();\n            });\n        });\n\n        await promise;\n    }\n\n    /**\n     * Register Express routes - the SINGLE loop over routes.\n     * For each route: createHandler (sets up filter chain) → wrapExpress → registerHandler.\n     *\n     * @returns Number of routes registered\n     */\n    private registerExpressRoutes(): number {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        const routes = this.routeBuilder.getRoutes();\n        let count = 0;\n\n        for (const routeWithMeta of routes) {\n            const service = this.routeBuilder.createRouteHandler(routeWithMeta);\n            const routeMeta = routeWithMeta.definition.routeMeta;\n\n            // Create ExpressWrapper directly (handles full request/response cycle)\n            const wrapper = this.middleware.createExpressWrapper(service, routeMeta);\n\n            this.registerHandler(\n                routeMeta.httpMethod,\n                routeMeta.path,\n                wrapper.execute.bind(wrapper),\n            );\n            count++;\n        }\n\n        return count;\n    }\n\n    registerHandler(httpMethod: string, path: string, expressHandler: ExpressRouteHandler) {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        switch (httpMethod.toLowerCase()) {\n            case 'get':\n                this.app.get(path, expressHandler);\n                break;\n            case 'post':\n                this.app.post(path, expressHandler);\n                break;\n            case 'put':\n                this.app.put(path, expressHandler);\n                break;\n            case 'delete':\n                this.app.delete(path, expressHandler);\n                break;\n            case 'patch':\n                this.app.patch(path, expressHandler);\n                break;\n            default:\n                console.warn(`[WebpiecesServer] Unknown HTTP method: ${httpMethod}`);\n        }\n    }\n\n    /**\n     * Stop the HTTP server.\n     * Returns a Promise that resolves when the server is stopped,\n     * or rejects if there's an error stopping the server.\n     *\n     * @returns Promise that resolves when server is stopped\n     */\n    async stop(): Promise<void> {\n        if (!this.server) {\n            return;\n        }\n\n        return new Promise<void>((resolve, reject) => {\n            this.server!.close((err?: Error) => {\n                if (err) {\n                    console.error('[WebpiecesServer] Error stopping server:', err);\n                    reject(err);\n                    return;\n                }\n                console.log('[WebpiecesServer] Server stopped');\n                resolve();\n            });\n        });\n    }\n\n    /**\n     * Get the application DI container.\n     *\n     * Useful for testing to verify state or access services directly.\n     *\n     * @returns The application Container\n     */\n    getContainer(): Container {\n        return this.appContainer;\n    }\n\n    /**\n     * Create an API client proxy for testing.\n     *\n     * This creates a client that routes calls through the full filter chain\n     * and controller, but WITHOUT any HTTP overhead. Perfect for testing!\n     *\n     * The client uses the ApiPrototype class to discover routes via decorators,\n     * then creates pre-configured invoker functions for each API method.\n     *\n     * IMPORTANT: This loops over the API methods (from decorators), NOT all routes.\n     * For each API method, it sets up the filter chain ONCE during proxy creation,\n     * so subsequent calls reuse the same filter chain (efficient!).\n     *\n     * @param apiPrototype - The API prototype class with routing decorators (can be abstract)\n     * @returns A proxy that implements the API interface\n     *\n     * Example:\n     * ```typescript\n     * const saveApi = server.createApiClient<SaveApi>(SaveApiPrototype);\n     * const response = await saveApi.save(request);\n     * ```\n     */\n    createApiClient<T>(apiPrototype: abstract new (...args: any[]) => T): T {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before createApiClient().');\n        }\n\n        // Get routes from the API prototype using decorators (loops over API methods, NOT all routes)\n        const apiMethods = getRoutes(apiPrototype);\n\n        // Create proxy object\n        const proxy: Record<string, unknown> = {};\n\n        // Loop over API methods and create proxy functions\n        for (const routeMeta of apiMethods) {\n            const methodName = routeMeta.methodName;\n            const httpMethod = routeMeta.httpMethod.toUpperCase();\n            const path = routeMeta.path;\n\n            // Create invoker service ONCE (sets up filter chain once, not on every call!)\n            const service = this.routeBuilder.createRouteInvoker(httpMethod, path);\n\n            // Proxy method creates MethodMeta and calls the pre-configured service\n            // IMPORTANT: Tests MUST wrap calls in RequestContext.run() themselves\n            // This forces explicit context setup in tests, matching production behavior\n            proxy[methodName] = async (requestDto: unknown): Promise<unknown> => {\n                // Verify we're inside an active RequestContext\n                // This helps test authors know they need to wrap their test in RequestContext.run()\n                if (!RequestContext.isActive()) {\n                    //Many devs may not activate headers\n                    return RequestContext.run(async () => {\n                        return await this.runMethod(routeMeta, requestDto, service);\n                    });\n                }\n                return await this.runMethod(routeMeta, requestDto, service);\n            };\n        }\n\n        return proxy as T;\n    }\n\n    private async runMethod(routeMeta: RouteMetadata, requestDto: unknown, service: Service<MethodMeta, WpResponse<unknown>>) {\n        // Create MethodMeta without headers (test mode - no HTTP involved)\n        // requestHeaders is optional, so we can omit it\n        const meta = new MethodMeta(routeMeta, undefined, requestDto);\n        const responseWrapper = await service.invoke(meta);\n        return responseWrapper.response;\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesServerImpl.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesServerImpl.ts"],"names":[],"mappings":";;;;AAAA,8DAAyC;AACzC,yCAAyE;AACzE,wEAAoE;AACpE,0DASiC;AAEjC,+DAA0D;AAC1D,0DAAuD;AAGvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAe5B,YAC+B,IAAwB,EACzB,YAAsC,EACnC,UAAuC;QAFjC,SAAI,GAAJ,IAAI,CAAY;QACjB,iBAAY,GAAZ,YAAY,CAAkB;QAC3B,eAAU,GAAV,UAAU,CAAqB;QARhE,gBAAW,GAAG,KAAK,CAAC;QAGpB,SAAI,GAAW,IAAI,CAAC;IAMzB,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CACZ,kBAA6B,EAC7B,YAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACX,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAEvE,0FAA0F;QAC1F,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEvC,iCAAiC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,aAAa,CAAC,YAA8B;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEzC,yEAAyE;QACzE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAEpD,8CAA8C;QAC9C,kFAAkF;QAClF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,gEAAgE;QAChE,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAE3C,mDAAmD;QACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACrC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe,IAAI,EAAE,QAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAG,QAAQ,EAAE,CAAC;YACV,oDAAoD;YACpD,uEAAuE;YACvE,OAAO;QACX,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QAErB,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvE,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEjD,oCAAoC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjE,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEhD,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxD,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;oBAClE,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,SAAS,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAErD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEzE,IAAI,CAAC,eAAe,CAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,IAAI,EACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;YACF,KAAK,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,cAAmC;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,MAAM;gBACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACpC,MAAM;YACV,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,QAAQ;gBACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACtC,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACrC,MAAM;YACV;gBACI,OAAO,CAAC,IAAI,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;gBAC/B,IAAI,GAAG,EAAE,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAI,YAAgD;QAC/D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC3F,CAAC;QAED,8FAA8F;QAC9F,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAC,YAAY,CAAC,CAAC;QAE3C,sBAAsB;QACtB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,mDAAmD;QACnD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;YACxC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YAE5B,8EAA8E;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEvE,uEAAuE;YACvE,sEAAsE;YACtE,4EAA4E;YAC5E,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,UAAmB,EAAoB,EAAE;gBAChE,+CAA+C;gBAC/C,oFAAoF;gBACpF,IAAI,CAAC,6BAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC7B,oCAAoC;oBACpC,OAAO,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACjC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;oBAChE,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC,CAAC;QACN,CAAC;QAED,OAAO,KAAU,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAAwB,EAAE,UAAmB,EAAE,OAAiD;QACpH,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,yBAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,eAAe,CAAC,QAAQ,CAAC;IACpC,CAAC;CACJ,CAAA;AA/TY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAiBJ,mBAAA,IAAA,kBAAM,EAAC,gCAAiB,CAAC,CAAA;IACzB,mBAAA,IAAA,kBAAM,EAAC,+BAAgB,CAAC,CAAA;IACxB,mBAAA,IAAA,kBAAM,EAAC,yCAAmB,CAAC,CAAA;qDADoB,+BAAgB;QACf,yCAAmB;GAlB/D,mBAAmB,CA+T/B","sourcesContent":["import express, {Express} from 'express';\nimport {Container, ContainerModule, inject, injectable} from 'inversify';\nimport {buildProviderModule} from '@inversifyjs/binding-decorators';\nimport {\n    ExpressRouteHandler,\n    getRoutes,\n    MethodMeta,\n    provideSingleton,\n    RouteBuilderImpl, RouteMetadata,\n    WebAppMeta,\n    WEBAPP_META_TOKEN,\n    WebpiecesConfig,\n} from '@webpieces/http-routing';\nimport {WebpiecesServer} from './WebpiecesServer';\nimport {WebpiecesMiddleware} from './WebpiecesMiddleware';\nimport {RequestContext} from '@webpieces/core-context';\nimport {Service, WpResponse} from \"@webpieces/http-filters\";\n\n/**\n * WebpiecesServerImpl - Internal server implementation.\n *\n * This class implements the WebpiecesServer interface and contains\n * all the actual server logic. It is created by WebpiecesFactory.create().\n *\n * This class uses a two-container pattern similar to Java WebPieces:\n * 1. webpiecesContainer: Core WebPieces framework bindings\n * 2. appContainer: User's application bindings (child of webpiecesContainer)\n *\n * This separation allows:\n * - Clean separation of concerns\n * - Better testability\n * - Ability to override framework bindings in tests\n *\n * The server:\n * 1. Initializes both DI containers from WebAppMeta.getDIModules()\n * 2. Registers routes using explicit RouteBuilderImpl\n * 3. Creates filter chains\n * 4. Supports both HTTP server mode and testing mode (no HTTP)\n *\n * DI Pattern: This class is registered in webpiecesContainer via @provideSingleton()\n * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesServerImpl implements WebpiecesServer {\n    private webpiecesContainer!: Container;\n\n    /**\n     * Application container: User's application bindings.\n     * This is a child container of webpiecesContainer, so it can access\n     * framework bindings while keeping app bindings separate.\n     */\n    private appContainer!: Container;\n\n    private initialized = false;\n    private app?: Express;\n    private server?: ReturnType<Express['listen']>;\n    private port: number = 8200;\n\n    constructor(\n        @inject(WEBAPP_META_TOKEN) private meta: WebAppMeta,\n        @inject(RouteBuilderImpl) private routeBuilder: RouteBuilderImpl,\n        @inject(WebpiecesMiddleware) private middleware: WebpiecesMiddleware,\n    ) {}\n\n    /**\n     * Initialize the server asynchronously.\n     * This is called by WebpiecesFactory.create() after resolving this class from DI.\n     * This method is internal and not exposed on the WebpiecesServer interface.\n     *\n     * @param webpiecesContainer - The framework container\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST)\n     */\n    async initialize(\n        webpiecesContainer: Container,\n        appOverrides?: ContainerModule\n    ): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        this.webpiecesContainer = webpiecesContainer;\n\n        // Create application container as child of framework container\n        this.appContainer = new Container({ parent: this.webpiecesContainer });\n\n        // Set container on RouteBuilder (late binding - appContainer didn't exist in constructor)\n        this.routeBuilder.setContainer(this.appContainer);\n\n        // 1. Load DI modules asynchronously\n        await this.loadDIModules(appOverrides);\n\n        // 2. Register routes and filters\n        this.registerRoutes();\n\n        this.initialized = true;\n    }\n\n    /**\n     * Load DI modules from WebAppMeta.\n     *\n     * Currently, all user modules are loaded into the application container.\n     * In the future, we could separate:\n     * - WebPieces framework modules -> webpiecesContainer\n     * - Application modules -> appContainer\n     *\n     * For now, everything goes into appContainer which has access to webpiecesContainer.\n     *\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST to override bindings)\n     */\n    private async loadDIModules(appOverrides?: ContainerModule): Promise<void> {\n        const modules = this.meta.getDIModules();\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await this.appContainer.load(buildProviderModule());\n\n        // Load all modules into application container\n        // (webpiecesContainer is currently empty, reserved for future framework bindings)\n        for (const module of modules) {\n            await this.appContainer.load(module);\n        }\n\n        // Load appOverrides LAST so they can override existing bindings\n        if (appOverrides) {\n            await this.appContainer.load(appOverrides);\n        }\n    }\n\n    /**\n     * Register routes from WebAppMeta.\n     *\n     * Creates an explicit RouteBuilderImpl instead of an anonymous object.\n     * This improves:\n     * - Traceability: Can Cmd+Click on addRoute to see implementation\n     * - Debugging: Explicit class shows up in stack traces\n     * - Understanding: Clear class name vs anonymous object\n     */\n    private registerRoutes(): void {\n        const routeConfigs = this.meta.getRoutes();\n\n        // Configure routes using the explicit RouteBuilder\n        for (const routeConfig of routeConfigs) {\n            routeConfig.configure(this.routeBuilder);\n        }\n    }\n\n    /**\n     * Start the HTTP server with Express.\n     * Returns a Promise that resolves when the server is listening,\n     * or rejects if the server fails to start.\n     *\n     * @param port - The port to listen on (default: 8080)\n     * @returns Promise that resolves when server is ready\n     */\n    async start(port: number = 8200, testMode?: boolean): Promise<void> {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before start().');\n        }\n\n        this.port = port;\n\n        if(testMode) {\n            //In testMode, we eliminate express ENTIRELY and use\n            //Router, method filters and controllers so that we can test full stack\n            return;\n        }\n\n        // Create Express app\n        this.app = express();\n\n        // Layer 1: Global Error Handler (OUTERMOST - runs FIRST)\n        // Catches all unhandled errors and returns HTML 500 page\n        this.app.use(this.middleware.globalErrorHandler.bind(this.middleware));\n\n        // Layer 2: CORS for localhost development\n        this.app.use(this.middleware.corsForLocalhost());\n\n        // Layer 3: Request/Response Logging\n        this.app.use(this.middleware.logNextLayer.bind(this.middleware));\n\n        // Register routes\n        const routeCount = this.registerExpressRoutes();\n\n        // Start listening - wrap in Promise\n        const promise = new Promise<void>((resolve, reject) => {\n            this.server = this.app!.listen(this.port, (error?: Error) => {\n                if (error) {\n                    console.error(`[WebpiecesServer] Failed to start server:`, error);\n                    reject(error);\n                    return;\n                }\n                console.log(`[WebpiecesServer] Server listening on http://localhost:${this.port}`);\n                console.log(`[WebpiecesServer] Registered ${routeCount} routes`);\n                resolve();\n            });\n        });\n\n        await promise;\n    }\n\n    /**\n     * Register Express routes - the SINGLE loop over routes.\n     * For each route: createHandler (sets up filter chain) → wrapExpress → registerHandler.\n     *\n     * @returns Number of routes registered\n     */\n    private registerExpressRoutes(): number {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        const routes = this.routeBuilder.getRoutes();\n        let count = 0;\n\n        for (const routeWithMeta of routes) {\n            const service = this.routeBuilder.createRouteHandler(routeWithMeta);\n            const routeMeta = routeWithMeta.definition.routeMeta;\n\n            // Create ExpressWrapper directly (handles full request/response cycle)\n            const wrapper = this.middleware.createExpressWrapper(service, routeMeta);\n\n            this.registerHandler(\n                routeMeta.httpMethod,\n                routeMeta.path,\n                wrapper.execute.bind(wrapper),\n            );\n            count++;\n        }\n\n        return count;\n    }\n\n    registerHandler(httpMethod: string, path: string, expressHandler: ExpressRouteHandler) {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        switch (httpMethod.toLowerCase()) {\n            case 'get':\n                this.app.get(path, expressHandler);\n                break;\n            case 'post':\n                this.app.post(path, expressHandler);\n                break;\n            case 'put':\n                this.app.put(path, expressHandler);\n                break;\n            case 'delete':\n                this.app.delete(path, expressHandler);\n                break;\n            case 'patch':\n                this.app.patch(path, expressHandler);\n                break;\n            default:\n                console.warn(`[WebpiecesServer] Unknown HTTP method: ${httpMethod}`);\n        }\n    }\n\n    /**\n     * Stop the HTTP server.\n     * Returns a Promise that resolves when the server is stopped,\n     * or rejects if there's an error stopping the server.\n     *\n     * @returns Promise that resolves when server is stopped\n     */\n    async stop(): Promise<void> {\n        if (!this.server) {\n            return;\n        }\n\n        return new Promise<void>((resolve, reject) => {\n            this.server!.close((err?: Error) => {\n                if (err) {\n                    console.error('[WebpiecesServer] Error stopping server:', err);\n                    reject(err);\n                    return;\n                }\n                console.log('[WebpiecesServer] Server stopped');\n                resolve();\n            });\n        });\n    }\n\n    /**\n     * Get the application DI container.\n     *\n     * Useful for testing to verify state or access services directly.\n     *\n     * @returns The application Container\n     */\n    getContainer(): Container {\n        return this.appContainer;\n    }\n\n    /**\n     * Create an API client proxy for testing.\n     *\n     * This creates a client that routes calls through the full filter chain\n     * and controller, but WITHOUT any HTTP overhead. Perfect for testing!\n     *\n     * The client uses the ApiPrototype class to discover routes via decorators,\n     * then creates pre-configured invoker functions for each API method.\n     *\n     * IMPORTANT: This loops over the API methods (from decorators), NOT all routes.\n     * For each API method, it sets up the filter chain ONCE during proxy creation,\n     * so subsequent calls reuse the same filter chain (efficient!).\n     *\n     * @param apiPrototype - The API prototype class with routing decorators (can be abstract)\n     * @returns A proxy that implements the API interface\n     *\n     * Example:\n     * ```typescript\n     * const saveApi = server.createApiClient<SaveApi>(SaveApiPrototype);\n     * const response = await saveApi.save(request);\n     * ```\n     */\n    createApiClient<T>(apiPrototype: abstract new (...args: any[]) => T): T {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before createApiClient().');\n        }\n\n        // Get routes from the API prototype using decorators (loops over API methods, NOT all routes)\n        const apiMethods = getRoutes(apiPrototype);\n\n        // Create proxy object\n        const proxy: Record<string, unknown> = {};\n\n        // Loop over API methods and create proxy functions\n        for (const routeMeta of apiMethods) {\n            const methodName = routeMeta.methodName;\n            const httpMethod = routeMeta.httpMethod.toUpperCase();\n            const path = routeMeta.path;\n\n            // Create invoker service ONCE (sets up filter chain once, not on every call!)\n            const service = this.routeBuilder.createRouteInvoker(httpMethod, path);\n\n            // Proxy method creates MethodMeta and calls the pre-configured service\n            // IMPORTANT: Tests MUST wrap calls in RequestContext.run() themselves\n            // This forces explicit context setup in tests, matching production behavior\n            proxy[methodName] = async (requestDto: unknown): Promise<unknown> => {\n                // Verify we're inside an active RequestContext\n                // This helps test authors know they need to wrap their test in RequestContext.run()\n                if (!RequestContext.isActive()) {\n                    //Many devs may not activate headers\n                    return RequestContext.run(async () => {\n                        return await this.runMethod(routeMeta, requestDto, service);\n                    });\n                }\n                return await this.runMethod(routeMeta, requestDto, service);\n            };\n        }\n\n        return proxy as T;\n    }\n\n    private async runMethod(routeMeta: RouteMetadata, requestDto: unknown, service: Service<MethodMeta, WpResponse<unknown>>) {\n        // Create MethodMeta without headers (test mode - no HTTP involved)\n        // requestHeaders is optional, so we can omit it\n        const meta = new MethodMeta(routeMeta, undefined, requestDto);\n        const responseWrapper = await service.invoke(meta);\n        return responseWrapper.response;\n    }\n}\n"]}