@webpieces/http-server 0.3.166 → 0.3.167

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/http-server",
-  "version": "0.3.166",
+  "version": "0.3.167",
   "description": "WebPieces server with filter chain and dependency injection",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -22,7 +22,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@webpieces/http-routing": "0.3.166",
+    "@webpieces/http-routing": "0.3.167",
     "cors": "2.8.5"
   },
   "devDependencies": {

package/src/WebpiecesMiddleware.js

@@ -9,6 +9,8 @@ const http_api_1 = require("@webpieces/http-api");
 const core_util_1 = require("@webpieces/core-util");
 const core_context_1 = require("@webpieces/core-context");
 class ExpressWrapper {
+    service;
+    routeMeta;
     constructor(service, routeMeta) {
         this.service = service;
         this.routeMeta = routeMeta;

package/src/WebpiecesMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesMiddleware.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesMiddleware.ts"],"names":[],"mappings":";;;;AACA,wDAAwB;AACxB,yCAAuC;AACvC,0DAA4F;AAC5F,kDAc6B;AAE7B,oDAA+C;AAC/C,0DAAyD;AAEzD,MAAa,cAAc;IACvB,YACY,OAAiD,EACjD,SAAwB;QADxB,YAAO,GAAP,OAAO,CAA0C;QACjD,cAAS,GAAT,SAAS,CAAe;IAEpC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChE,qDAAqD;QACrD,6DAA6D;QAC7D,MAAM,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACxE,8HAA8H;QAC9H,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,mBAAmB;YACnB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACpE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEpD,+EAA+E;QAC/E,IAAI,UAAU,GAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,aAAa;YACb,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAI,yBAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAE9E,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACX,2DAA2D,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAC/H,CAAC;QACN,CAAC;QAED,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,WAAW,CAAC,GAAa,EAAE,KAAc;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QAE1C,IAAI,KAAK,YAAY,oBAAS,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAEhC,8DAA8D;YAC9D,IAAI,KAAK,YAAY,wBAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,aAAa,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5D,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAClC,aAAa,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC;YACrD,CAAC;iBAAM,IAAI,KAAK,YAAY,4BAAiB,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,2BAAgB,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/D,aAAa,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,YAAY,gCAAqB,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,KAAK,YAAY,6BAAkB,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAED,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACJ,sBAAsB;YACtB,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;YAC3B,aAAa,CAAC,OAAO,GAAG,uBAAuB,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;CACJ;AAxKD,wCAwKC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CACpB,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAErF,iHAAiH;QACjH,IAAI,CAAC;YACD,6BAA6B;YAC7B,2CAA2C;YAC3C,wDAAwD;YACxD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACP,yDAAyD,EACzD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,yEAAyE;gBACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;;;mBAOlB,KAAK,CAAC,OAAO;;;SAGvB,CAAC,CAAC;YACC,CAAC;YACD,OAAO,CAAC,GAAG,CACP,uDAAuD,EACvD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC9D,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB;QACZ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAE1E,OAAO,IAAA,cAAI,EAAC;YACR,MAAM,EAAE,UAAU,MAAM,EAAE,QAAQ;gBAC9B,6DAA6D;gBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,6BAA6B,CAAC,CAAC;oBAC3E,QAAQ,CAAC,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC;YACD,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,GAAG,EAAE,oBAAoB;YACzC,cAAc,EAAE,GAAG,EAAE,4CAA4C;YACjE,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAChB,OAAiD,EACjD,SAAwB;QAExB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ,CAAA;AAnHY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAmH/B","sourcesContent":["import { Request, Response, NextFunction, RequestHandler } from 'express';\nimport cors from 'cors';\nimport { injectable } from 'inversify';\nimport { provideSingleton, MethodMeta, ExpressRouteHandler } from '@webpieces/http-routing';\nimport {\n    ProtocolError,\n    HttpError,\n    HttpBadRequestError,\n    HttpVendorError,\n    HttpUserError,\n    HttpNotFoundError,\n    HttpTimeoutError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpInternalServerError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    RouteMetadata,\n} from '@webpieces/http-api';\nimport { Service, WpResponse } from '@webpieces/http-filters';\nimport { toError } from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\n\nexport class ExpressWrapper {\n    constructor(\n        private service: Service<MethodMeta, WpResponse<unknown>>,\n        private routeMeta: RouteMetadata\n    ) {\n    }\n\n    public async execute(req: Request, res: Response, next: NextFunction) {\n        // MOVED: Wrap entire request in RequestContext.run()\n        // This establishes AsyncLocalStorage context for the request\n        await RequestContext.run(async () => {\n            await this.executeTryCatch(req, res, next);\n        });\n    }\n\n    public async executeTryCatch(req: Request, res: Response, next: NextFunction): Promise<void> {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- ExpressWrapper catches errors to translate to HTTP responses\n        try {\n            await this.executeImpl(req, res, next);\n        } catch (err: unknown) {\n            const error = toError(err);\n            // 5. Handle errors\n            this.handleError(res, error);\n        }\n    }\n\n    public async executeImpl(req: Request, res: Response, next: NextFunction) {\n        // 1. Read HTTP headers from Express request\n        const requestHeaders = this.readExpressHeaders(req);\n\n        // 2. Parse JSON request body manually (SYMMETRIC with client's JSON.stringify)\n        let requestDto: unknown = {};\n        if (['POST', 'PUT', 'PATCH'].includes(req.method)) {\n            // Read raw body as text\n            const bodyText = await this.readRequestBody(req);\n            // Parse JSON\n            requestDto = bodyText ? JSON.parse(bodyText) : {};\n        }\n\n        // 3. Create MethodMeta with headers and request DTO\n        const methodMeta = new MethodMeta(this.routeMeta, requestHeaders, requestDto);\n\n        // 4. Invoke the service (filter chain + controller)\n        const wpResponse = await this.service.invoke(methodMeta);\n        if (!wpResponse.response) {\n            throw new Error(\n                `Route chain(filters & all) is not returning a response. ${this.routeMeta.controllerClassName}.${this.routeMeta.methodName}`\n            );\n        }\n\n        // 5. Serialize response DTO to JSON (SYMMETRIC with client's response.json())\n        const responseJson = JSON.stringify(wpResponse.response);\n        res.status(200).setHeader('Content-Type', 'application/json').send(responseJson);\n    }\n\n    /**\n     * Read HTTP headers from Express request.\n     * Returns Map of header name (lowercase) -> array of values.\n     *\n     * HTTP spec allows multiple values for same header name.\n     */\n    private readExpressHeaders(req: Request): Map<string, string[]> {\n        const headers = new Map<string, string[]>();\n\n        // Express stores headers in req.headers as Record<string, string | string[]>\n        for (const [name, value] of Object.entries(req.headers)) {\n            const lowerName = name.toLowerCase();\n\n            if (typeof value === 'string') {\n                headers.set(lowerName, [value]);\n            } else if (Array.isArray(value)) {\n                headers.set(lowerName, value);\n            }\n        }\n\n        return headers;\n    }\n\n    /**\n     * Read raw request body as text.\n     * Used to manually parse JSON (instead of express.json() middleware).\n     */\n    private async readRequestBody(req: Request): Promise<string> {\n        return new Promise((resolve, reject) => {\n            let body = '';\n            req.on('data', (chunk) => {\n                body += chunk.toString();\n            });\n            req.on('end', () => {\n                resolve(body);\n            });\n            req.on('error', (err) => {\n                reject(err);\n            });\n        });\n    }\n\n    /**\n     * Handle errors - translate to JSON ProtocolError (SYMMETRIC with ClientErrorTranslator).\n     * PUBLIC so wrapExpress can call it for symmetric error handling.\n     * Maps HttpError subclasses to appropriate HTTP status codes and ProtocolError response.\n     *\n     * Maps all HttpError types (must match ClientErrorTranslator.translateError()):\n     * - HttpUserError → 266 (with errorCode)\n     * - HttpBadRequestError → 400 (with field, guiAlertMessage)\n     * - HttpUnauthorizedError → 401\n     * - HttpForbiddenError → 403\n     * - HttpNotFoundError → 404\n     * - HttpTimeoutError → 408\n     * - HttpInternalServerError → 500\n     * - HttpBadGatewayError → 502\n     * - HttpGatewayTimeoutError → 504\n     * - HttpVendorError → 598 (with waitSeconds)\n     */\n    public handleError(res: Response, error: unknown): void {\n        if (res.headersSent) {\n            return;\n        }\n\n        const protocolError = new ProtocolError();\n\n        if (error instanceof HttpError) {\n            // Set common fields for all HttpError types\n            protocolError.message = error.message;\n            protocolError.subType = error.subType;\n            protocolError.name = error.name;\n\n            // Set type-specific fields (MUST match ClientErrorTranslator)\n            if (error instanceof HttpUserError) {\n                console.log('[ExpressWrapper] User Error:', error.message);\n                protocolError.errorCode = error.errorCode;\n            } else if (error instanceof HttpBadRequestError) {\n                console.log('[ExpressWrapper] Bad Request:', error.message);\n                protocolError.field = error.field;\n                protocolError.guiAlertMessage = error.guiMessage;\n            } else if (error instanceof HttpNotFoundError) {\n                console.log('[ExpressWrapper] Not Found:', error.message);\n            } else if (error instanceof HttpTimeoutError) {\n                console.error('[ExpressWrapper] Timeout Error:', error.message);\n            } else if (error instanceof HttpVendorError) {\n                console.error('[ExpressWrapper] Vendor Error:', error.message);\n                protocolError.waitSeconds = error.waitSeconds;\n            } else if (error instanceof HttpUnauthorizedError) {\n                console.log('[ExpressWrapper] Unauthorized:', error.message);\n            } else if (error instanceof HttpForbiddenError) {\n                console.log('[ExpressWrapper] Forbidden:', error.message);\n            } else if (error instanceof HttpInternalServerError) {\n                console.error('[ExpressWrapper] Internal Server Error:', error.message);\n            } else if (error instanceof HttpBadGatewayError) {\n                console.error('[ExpressWrapper] Bad Gateway:', error.message);\n            } else if (error instanceof HttpGatewayTimeoutError) {\n                console.error('[ExpressWrapper] Gateway Timeout:', error.message);\n            } else {\n                console.log('[ExpressWrapper] Generic HttpError:', error.message);\n            }\n\n            // Serialize ProtocolError to JSON (SYMMETRIC with client)\n            const responseJson = JSON.stringify(protocolError);\n            res.status(error.code).setHeader('Content-Type', 'application/json').send(responseJson);\n        } else {\n            // Unknown error - 500\n            const err = toError(error);\n            protocolError.message = 'Internal Server Error';\n            console.error('[ExpressWrapper] Unexpected error:', err);\n            const responseJson = JSON.stringify(protocolError);\n            res.status(500).setHeader('Content-Type', 'application/json').send(responseJson);\n        }\n    }\n}\n\n/**\n * WebpiecesMiddleware - Express middleware for WebPieces server.\n *\n * This class contains all Express middleware used by WebpiecesServer:\n * 1. globalErrorHandler - Outermost error handler, returns HTML 500 page\n * 2. logNextLayer - Request/response logging\n * 3. jsonTranslator - JSON Content-Type validation and error translation\n *\n * The middleware is injected into WebpiecesServerImpl and registered with Express\n * in the start() method.\n *\n * IMPORTANT: jsonTranslator does NOT dispatch routes - route dispatch happens via\n * Express's registered route handlers (created by RouteBuilder.createHandler()).\n * jsonTranslator only validates Content-Type and translates errors to JSON.\n *\n * NEW: ExpressWrapper simplified - no longer handles JSON or headers\n * - JSON parsing/serialization moved to JsonFilter\n * - Header transfer moved to ContextFilter (injects PlatformHeadersExtension directly)\n * - ExpressWrapper just creates RouterReqResp and invokes filter chain\n *\n * Extension vs Plugin pattern:\n * - Extensions (DI-level): Contribute capabilities to framework (headers, converters, etc.)\n * - Plugins (App-level): Provide complete features with modules + routes (Hibernate, Jackson, etc.)\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesMiddleware {\n\n    /**\n     * Global error handler middleware - catches ALL unhandled errors.\n     * Returns HTML 500 error page for any errors that escape the filter chain.\n     *\n     * This is the outermost safety net - JsonTranslator catches JSON API errors,\n     * this catches everything else.\n     */\n    async globalErrorHandler(\n        req: Request,\n        res: Response,\n        next: NextFunction,\n    ): Promise<void> {\n        console.log('🔴 [Layer 1: GlobalErrorHandler] Request START:', req.method, req.path);\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- Global error handler IS the top-level catch-all\n        try {\n            // await next() catches BOTH:\n            // 1. Synchronous throws from next() itself\n            // 2. Rejected promises from downstream async middleware\n            await next();\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (success):',\n                req.method,\n                req.path,\n            );\n        } catch (err: unknown) {\n            const error = toError(err);\n            console.error('🔴 [Layer 1: GlobalErrorHandler] Caught unhandled error:', error);\n            if (!res.headersSent) {\n                // Return HTML error page (not JSON - JsonTranslator handles JSON errors)\n                res.status(500).send(`\n          <!DOCTYPE html>\n          <html>\n          <head><title>Server Error</title></head>\n          <body>\n            <h1>You hit a server error</h1>\n            <p>An unexpected error occurred while processing your request.</p>\n            <pre>${error.message}</pre>\n          </body>\n          </html>\n        `);\n            }\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (error):',\n                req.method,\n                req.path,\n            );\n        }\n    }\n\n    /**\n     * Logging middleware - logs request/response flow.\n     * Demonstrates middleware execution order.\n     * IMPORTANT: Must be async and await next() to properly chain with async middleware.\n     */\n    async logNextLayer(req: Request, res: Response, next: NextFunction): Promise<void> {\n        console.log('🟡 [Layer 2: LogNextLayer] Before next() -', req.method, req.path);\n        await next();\n        console.log('🟡 [Layer 2: LogNextLayer] After next() -', req.method, req.path);\n    }\n\n    /**\n     * CORS middleware for localhost development.\n     * Only enables CORS when request origin is localhost:*.\n     *\n     * Wide open for all headers/methods in dev mode.\n     * Non-localhost origins are blocked.\n     *\n     * @returns Express middleware handler for CORS\n     */\n    corsForLocalhost(): RequestHandler {\n        console.log('[WebpiecesMiddleware] CORS enabled for localhost:* origins');\n\n        return cors({\n            origin: function (origin, callback) {\n                // Allow requests with no origin (same-origin, Postman, curl)\n                if (!origin) {\n                    callback(null, true);\n                    return;\n                }\n\n                // Only allow localhost origins\n                if (origin.startsWith('http://localhost:') || origin.startsWith('https://localhost:')) {\n                    callback(null, true);\n                } else {\n                    console.log(`[CORS] Blocked origin: ${origin} (only localhost:* allowed)`);\n                    callback(new Error(`CORS not allowed for origin: ${origin}`));\n                }\n            },\n            credentials: true,\n            methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n            allowedHeaders: '*', // Wide open for dev\n            exposedHeaders: '*', // Expose all response headers to browser JS\n            maxAge: 3600,\n        });\n    }\n\n    /**\n     * Create an ExpressWrapper for a route.\n     * The wrapper handles the full request/response cycle (symmetric design).\n     *\n     * NEW: Simplified - no longer passes headers (ContextFilter handles it now)\n     *\n     * @param service - The service wrapping the filter chain and controller\n     * @param routeMeta - Route metadata for MethodMeta and DTO type\n     * @returns ExpressWrapper instance\n     */\n    createExpressWrapper(\n        service: Service<MethodMeta, WpResponse<unknown>>,\n        routeMeta: RouteMetadata,\n    ): ExpressWrapper {\n        return new ExpressWrapper(service, routeMeta);\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesMiddleware.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesMiddleware.ts"],"names":[],"mappings":";;;;AACA,wDAAwB;AACxB,yCAAuC;AACvC,0DAA4F;AAC5F,kDAc6B;AAE7B,oDAA+C;AAC/C,0DAAyD;AAEzD,MAAa,cAAc;IAEX;IACA;IAFZ,YACY,OAAiD,EACjD,SAAwB;QADxB,YAAO,GAAP,OAAO,CAA0C;QACjD,cAAS,GAAT,SAAS,CAAe;IAEpC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChE,qDAAqD;QACrD,6DAA6D;QAC7D,MAAM,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACxE,8HAA8H;QAC9H,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,mBAAmB;YACnB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACpE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEpD,+EAA+E;QAC/E,IAAI,UAAU,GAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,aAAa;YACb,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,oDAAoD;QACpD,MAAM,UAAU,GAAG,IAAI,yBAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAE9E,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACX,2DAA2D,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAC/H,CAAC;QACN,CAAC;QAED,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,WAAW,CAAC,GAAa,EAAE,KAAc;QAC5C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QAE1C,IAAI,KAAK,YAAY,oBAAS,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACtC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAEhC,8DAA8D;YAC9D,IAAI,KAAK,YAAY,wBAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,aAAa,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5D,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAClC,aAAa,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC;YACrD,CAAC;iBAAM,IAAI,KAAK,YAAY,4BAAiB,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,2BAAgB,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/D,aAAa,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,YAAY,gCAAqB,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,KAAK,YAAY,6BAAkB,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;iBAAM,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,KAAK,YAAY,kCAAuB,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAED,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACJ,sBAAsB;YACtB,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;YAC3B,aAAa,CAAC,OAAO,GAAG,uBAAuB,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;CACJ;AAxKD,wCAwKC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CACpB,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAErF,iHAAiH;QACjH,IAAI,CAAC;YACD,6BAA6B;YAC7B,2CAA2C;YAC3C,wDAAwD;YACxD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACP,yDAAyD,EACzD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,KAAK,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,yEAAyE;gBACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;;;;;;;mBAOlB,KAAK,CAAC,OAAO;;;SAGvB,CAAC,CAAC;YACC,CAAC;YACD,OAAO,CAAC,GAAG,CACP,uDAAuD,EACvD,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,CACX,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC9D,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB;QACZ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAE1E,OAAO,IAAA,cAAI,EAAC;YACR,MAAM,EAAE,UAAU,MAAM,EAAE,QAAQ;gBAC9B,6DAA6D;gBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,6BAA6B,CAAC,CAAC;oBAC3E,QAAQ,CAAC,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC;YACD,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,GAAG,EAAE,oBAAoB;YACzC,cAAc,EAAE,GAAG,EAAE,4CAA4C;YACjE,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAChB,OAAiD,EACjD,SAAwB;QAExB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ,CAAA;AAnHY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAmH/B","sourcesContent":["import { Request, Response, NextFunction, RequestHandler } from 'express';\nimport cors from 'cors';\nimport { injectable } from 'inversify';\nimport { provideSingleton, MethodMeta, ExpressRouteHandler } from '@webpieces/http-routing';\nimport {\n    ProtocolError,\n    HttpError,\n    HttpBadRequestError,\n    HttpVendorError,\n    HttpUserError,\n    HttpNotFoundError,\n    HttpTimeoutError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpInternalServerError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    RouteMetadata,\n} from '@webpieces/http-api';\nimport { Service, WpResponse } from '@webpieces/http-filters';\nimport { toError } from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\n\nexport class ExpressWrapper {\n    constructor(\n        private service: Service<MethodMeta, WpResponse<unknown>>,\n        private routeMeta: RouteMetadata\n    ) {\n    }\n\n    public async execute(req: Request, res: Response, next: NextFunction) {\n        // MOVED: Wrap entire request in RequestContext.run()\n        // This establishes AsyncLocalStorage context for the request\n        await RequestContext.run(async () => {\n            await this.executeTryCatch(req, res, next);\n        });\n    }\n\n    public async executeTryCatch(req: Request, res: Response, next: NextFunction): Promise<void> {\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- ExpressWrapper catches errors to translate to HTTP responses\n        try {\n            await this.executeImpl(req, res, next);\n        } catch (err: unknown) {\n            const error = toError(err);\n            // 5. Handle errors\n            this.handleError(res, error);\n        }\n    }\n\n    public async executeImpl(req: Request, res: Response, next: NextFunction) {\n        // 1. Read HTTP headers from Express request\n        const requestHeaders = this.readExpressHeaders(req);\n\n        // 2. Parse JSON request body manually (SYMMETRIC with client's JSON.stringify)\n        let requestDto: unknown = {};\n        if (['POST', 'PUT', 'PATCH'].includes(req.method)) {\n            // Read raw body as text\n            const bodyText = await this.readRequestBody(req);\n            // Parse JSON\n            requestDto = bodyText ? JSON.parse(bodyText) : {};\n        }\n\n        // 3. Create MethodMeta with headers and request DTO\n        const methodMeta = new MethodMeta(this.routeMeta, requestHeaders, requestDto);\n\n        // 4. Invoke the service (filter chain + controller)\n        const wpResponse = await this.service.invoke(methodMeta);\n        if (!wpResponse.response) {\n            throw new Error(\n                `Route chain(filters & all) is not returning a response. ${this.routeMeta.controllerClassName}.${this.routeMeta.methodName}`\n            );\n        }\n\n        // 5. Serialize response DTO to JSON (SYMMETRIC with client's response.json())\n        const responseJson = JSON.stringify(wpResponse.response);\n        res.status(200).setHeader('Content-Type', 'application/json').send(responseJson);\n    }\n\n    /**\n     * Read HTTP headers from Express request.\n     * Returns Map of header name (lowercase) -> array of values.\n     *\n     * HTTP spec allows multiple values for same header name.\n     */\n    private readExpressHeaders(req: Request): Map<string, string[]> {\n        const headers = new Map<string, string[]>();\n\n        // Express stores headers in req.headers as Record<string, string | string[]>\n        for (const [name, value] of Object.entries(req.headers)) {\n            const lowerName = name.toLowerCase();\n\n            if (typeof value === 'string') {\n                headers.set(lowerName, [value]);\n            } else if (Array.isArray(value)) {\n                headers.set(lowerName, value);\n            }\n        }\n\n        return headers;\n    }\n\n    /**\n     * Read raw request body as text.\n     * Used to manually parse JSON (instead of express.json() middleware).\n     */\n    private async readRequestBody(req: Request): Promise<string> {\n        return new Promise((resolve, reject) => {\n            let body = '';\n            req.on('data', (chunk) => {\n                body += chunk.toString();\n            });\n            req.on('end', () => {\n                resolve(body);\n            });\n            req.on('error', (err) => {\n                reject(err);\n            });\n        });\n    }\n\n    /**\n     * Handle errors - translate to JSON ProtocolError (SYMMETRIC with ClientErrorTranslator).\n     * PUBLIC so wrapExpress can call it for symmetric error handling.\n     * Maps HttpError subclasses to appropriate HTTP status codes and ProtocolError response.\n     *\n     * Maps all HttpError types (must match ClientErrorTranslator.translateError()):\n     * - HttpUserError → 266 (with errorCode)\n     * - HttpBadRequestError → 400 (with field, guiAlertMessage)\n     * - HttpUnauthorizedError → 401\n     * - HttpForbiddenError → 403\n     * - HttpNotFoundError → 404\n     * - HttpTimeoutError → 408\n     * - HttpInternalServerError → 500\n     * - HttpBadGatewayError → 502\n     * - HttpGatewayTimeoutError → 504\n     * - HttpVendorError → 598 (with waitSeconds)\n     */\n    public handleError(res: Response, error: unknown): void {\n        if (res.headersSent) {\n            return;\n        }\n\n        const protocolError = new ProtocolError();\n\n        if (error instanceof HttpError) {\n            // Set common fields for all HttpError types\n            protocolError.message = error.message;\n            protocolError.subType = error.subType;\n            protocolError.name = error.name;\n\n            // Set type-specific fields (MUST match ClientErrorTranslator)\n            if (error instanceof HttpUserError) {\n                console.log('[ExpressWrapper] User Error:', error.message);\n                protocolError.errorCode = error.errorCode;\n            } else if (error instanceof HttpBadRequestError) {\n                console.log('[ExpressWrapper] Bad Request:', error.message);\n                protocolError.field = error.field;\n                protocolError.guiAlertMessage = error.guiMessage;\n            } else if (error instanceof HttpNotFoundError) {\n                console.log('[ExpressWrapper] Not Found:', error.message);\n            } else if (error instanceof HttpTimeoutError) {\n                console.error('[ExpressWrapper] Timeout Error:', error.message);\n            } else if (error instanceof HttpVendorError) {\n                console.error('[ExpressWrapper] Vendor Error:', error.message);\n                protocolError.waitSeconds = error.waitSeconds;\n            } else if (error instanceof HttpUnauthorizedError) {\n                console.log('[ExpressWrapper] Unauthorized:', error.message);\n            } else if (error instanceof HttpForbiddenError) {\n                console.log('[ExpressWrapper] Forbidden:', error.message);\n            } else if (error instanceof HttpInternalServerError) {\n                console.error('[ExpressWrapper] Internal Server Error:', error.message);\n            } else if (error instanceof HttpBadGatewayError) {\n                console.error('[ExpressWrapper] Bad Gateway:', error.message);\n            } else if (error instanceof HttpGatewayTimeoutError) {\n                console.error('[ExpressWrapper] Gateway Timeout:', error.message);\n            } else {\n                console.log('[ExpressWrapper] Generic HttpError:', error.message);\n            }\n\n            // Serialize ProtocolError to JSON (SYMMETRIC with client)\n            const responseJson = JSON.stringify(protocolError);\n            res.status(error.code).setHeader('Content-Type', 'application/json').send(responseJson);\n        } else {\n            // Unknown error - 500\n            const err = toError(error);\n            protocolError.message = 'Internal Server Error';\n            console.error('[ExpressWrapper] Unexpected error:', err);\n            const responseJson = JSON.stringify(protocolError);\n            res.status(500).setHeader('Content-Type', 'application/json').send(responseJson);\n        }\n    }\n}\n\n/**\n * WebpiecesMiddleware - Express middleware for WebPieces server.\n *\n * This class contains all Express middleware used by WebpiecesServer:\n * 1. globalErrorHandler - Outermost error handler, returns HTML 500 page\n * 2. logNextLayer - Request/response logging\n * 3. jsonTranslator - JSON Content-Type validation and error translation\n *\n * The middleware is injected into WebpiecesServerImpl and registered with Express\n * in the start() method.\n *\n * IMPORTANT: jsonTranslator does NOT dispatch routes - route dispatch happens via\n * Express's registered route handlers (created by RouteBuilder.createHandler()).\n * jsonTranslator only validates Content-Type and translates errors to JSON.\n *\n * NEW: ExpressWrapper simplified - no longer handles JSON or headers\n * - JSON parsing/serialization moved to JsonFilter\n * - Header transfer moved to ContextFilter (injects PlatformHeadersExtension directly)\n * - ExpressWrapper just creates RouterReqResp and invokes filter chain\n *\n * Extension vs Plugin pattern:\n * - Extensions (DI-level): Contribute capabilities to framework (headers, converters, etc.)\n * - Plugins (App-level): Provide complete features with modules + routes (Hibernate, Jackson, etc.)\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesMiddleware {\n\n    /**\n     * Global error handler middleware - catches ALL unhandled errors.\n     * Returns HTML 500 error page for any errors that escape the filter chain.\n     *\n     * This is the outermost safety net - JsonTranslator catches JSON API errors,\n     * this catches everything else.\n     */\n    async globalErrorHandler(\n        req: Request,\n        res: Response,\n        next: NextFunction,\n    ): Promise<void> {\n        console.log('🔴 [Layer 1: GlobalErrorHandler] Request START:', req.method, req.path);\n\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- Global error handler IS the top-level catch-all\n        try {\n            // await next() catches BOTH:\n            // 1. Synchronous throws from next() itself\n            // 2. Rejected promises from downstream async middleware\n            await next();\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (success):',\n                req.method,\n                req.path,\n            );\n        } catch (err: unknown) {\n            const error = toError(err);\n            console.error('🔴 [Layer 1: GlobalErrorHandler] Caught unhandled error:', error);\n            if (!res.headersSent) {\n                // Return HTML error page (not JSON - JsonTranslator handles JSON errors)\n                res.status(500).send(`\n          <!DOCTYPE html>\n          <html>\n          <head><title>Server Error</title></head>\n          <body>\n            <h1>You hit a server error</h1>\n            <p>An unexpected error occurred while processing your request.</p>\n            <pre>${error.message}</pre>\n          </body>\n          </html>\n        `);\n            }\n            console.log(\n                '🔴 [Layer 1: GlobalErrorHandler] Request END (error):',\n                req.method,\n                req.path,\n            );\n        }\n    }\n\n    /**\n     * Logging middleware - logs request/response flow.\n     * Demonstrates middleware execution order.\n     * IMPORTANT: Must be async and await next() to properly chain with async middleware.\n     */\n    async logNextLayer(req: Request, res: Response, next: NextFunction): Promise<void> {\n        console.log('🟡 [Layer 2: LogNextLayer] Before next() -', req.method, req.path);\n        await next();\n        console.log('🟡 [Layer 2: LogNextLayer] After next() -', req.method, req.path);\n    }\n\n    /**\n     * CORS middleware for localhost development.\n     * Only enables CORS when request origin is localhost:*.\n     *\n     * Wide open for all headers/methods in dev mode.\n     * Non-localhost origins are blocked.\n     *\n     * @returns Express middleware handler for CORS\n     */\n    corsForLocalhost(): RequestHandler {\n        console.log('[WebpiecesMiddleware] CORS enabled for localhost:* origins');\n\n        return cors({\n            origin: function (origin, callback) {\n                // Allow requests with no origin (same-origin, Postman, curl)\n                if (!origin) {\n                    callback(null, true);\n                    return;\n                }\n\n                // Only allow localhost origins\n                if (origin.startsWith('http://localhost:') || origin.startsWith('https://localhost:')) {\n                    callback(null, true);\n                } else {\n                    console.log(`[CORS] Blocked origin: ${origin} (only localhost:* allowed)`);\n                    callback(new Error(`CORS not allowed for origin: ${origin}`));\n                }\n            },\n            credentials: true,\n            methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n            allowedHeaders: '*', // Wide open for dev\n            exposedHeaders: '*', // Expose all response headers to browser JS\n            maxAge: 3600,\n        });\n    }\n\n    /**\n     * Create an ExpressWrapper for a route.\n     * The wrapper handles the full request/response cycle (symmetric design).\n     *\n     * NEW: Simplified - no longer passes headers (ContextFilter handles it now)\n     *\n     * @param service - The service wrapping the filter chain and controller\n     * @param routeMeta - Route metadata for MethodMeta and DTO type\n     * @returns ExpressWrapper instance\n     */\n    createExpressWrapper(\n        service: Service<MethodMeta, WpResponse<unknown>>,\n        routeMeta: RouteMetadata,\n    ): ExpressWrapper {\n        return new ExpressWrapper(service, routeMeta);\n    }\n}\n"]}

package/src/WebpiecesServerImpl.js

@@ -33,12 +33,24 @@ const core_context_1 = require("@webpieces/core-context");
  * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.
  */
 let WebpiecesServerImpl = class WebpiecesServerImpl {
+    meta;
+    routeBuilder;
+    middleware;
+    webpiecesContainer;
+    /**
+     * Application container: User's application bindings.
+     * This is a child container of webpiecesContainer, so it can access
+     * framework bindings while keeping app bindings separate.
+     */
+    appContainer;
+    initialized = false;
+    app;
+    server;
+    port = 8200;
     constructor(meta, routeBuilder, middleware) {
         this.meta = meta;
         this.routeBuilder = routeBuilder;
         this.middleware = middleware;
-        this.initialized = false;
-        this.port = 8200;
     }
     /**
      * Initialize the server asynchronously.

package/src/WebpiecesServerImpl.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesServerImpl.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesServerImpl.ts"],"names":[],"mappings":";;;;AAAA,8DAAyC;AACzC,yCAAyE;AACzE,wEAAoE;AACpE,0DAWiC;AAEjC,+DAA0D;AAC1D,0DAAuD;AAGvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAe5B,YAC+B,IAAwB,EACzB,YAAsC,EACnC,UAAuC;QAFjC,SAAI,GAAJ,IAAI,CAAY;QACjB,iBAAY,GAAZ,YAAY,CAAkB;QAC3B,eAAU,GAAV,UAAU,CAAqB;QARhE,gBAAW,GAAG,KAAK,CAAC;QAGpB,SAAI,GAAW,IAAI,CAAC;IAMzB,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CACZ,kBAA6B,EAC7B,YAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACX,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAEvE,0FAA0F;QAC1F,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEvC,iCAAiC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,aAAa,CAAC,YAA8B;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEzC,yEAAyE;QACzE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAEpD,8CAA8C;QAC9C,kFAAkF;QAClF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,gEAAgE;QAChE,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAE3C,mDAAmD;QACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACrC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe,IAAI,EAAE,QAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAG,QAAQ,EAAE,CAAC;YACV,oDAAoD;YACpD,uEAAuE;YACvE,OAAO;QACX,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QAErB,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvE,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEjD,oCAAoC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjE,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEhD,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxD,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;oBAClE,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,SAAS,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAErD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEzE,IAAI,CAAC,eAAe,CAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,IAAI,EACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;YACF,KAAK,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,cAAmC;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,MAAM;gBACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACpC,MAAM;YACV,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,QAAQ;gBACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACtC,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACrC,MAAM;YACV;gBACI,OAAO,CAAC,IAAI,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;gBAC/B,IAAI,GAAG,EAAE,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAI,YAAgD;QAC/D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC3F,CAAC;QAED,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,IAAA,yBAAU,EAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAA,2BAAY,EAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAEnD,sBAAsB;QACtB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,qDAAqD;QACrD,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,QAAQ,GAAG,YAAY,CAAC;YAErC,MAAM,QAAQ,GAAG,IAAA,0BAAW,EAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,4BAAa,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAE/F,8EAA8E;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEvE,uEAAuE;YACvE,sEAAsE;YACtE,4EAA4E;YAC5E,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,UAAmB,EAAoB,EAAE;gBAChE,+CAA+C;gBAC/C,oFAAoF;gBACpF,IAAI,CAAC,6BAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC7B,oCAAoC;oBACpC,OAAO,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACjC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;oBAChE,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC,CAAC;QACN,CAAC;QAED,OAAO,KAAU,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAAwB,EAAE,UAAmB,EAAE,OAAiD;QACpH,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,yBAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,eAAe,CAAC,QAAQ,CAAC;IACpC,CAAC;CACJ,CAAA;AAlUY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAiBJ,mBAAA,IAAA,kBAAM,EAAC,gCAAiB,CAAC,CAAA;IACzB,mBAAA,IAAA,kBAAM,EAAC,+BAAgB,CAAC,CAAA;IACxB,mBAAA,IAAA,kBAAM,EAAC,yCAAmB,CAAC,CAAA;qDADoB,+BAAgB;QACf,yCAAmB;GAlB/D,mBAAmB,CAkU/B","sourcesContent":["import express, {Express} from 'express';\nimport {Container, ContainerModule, inject, injectable} from 'inversify';\nimport {buildProviderModule} from '@inversifyjs/binding-decorators';\nimport {\n    ExpressRouteHandler,\n    getApiPath,\n    getAuthMeta,\n    getEndpoints,\n    MethodMeta,\n    provideSingleton,\n    RouteBuilderImpl, RouteMetadata,\n    WebAppMeta,\n    WEBAPP_META_TOKEN,\n    WebpiecesConfig,\n} from '@webpieces/http-routing';\nimport {WebpiecesServer} from './WebpiecesServer';\nimport {WebpiecesMiddleware} from './WebpiecesMiddleware';\nimport {RequestContext} from '@webpieces/core-context';\nimport {Service, WpResponse} from \"@webpieces/http-filters\";\n\n/**\n * WebpiecesServerImpl - Internal server implementation.\n *\n * This class implements the WebpiecesServer interface and contains\n * all the actual server logic. It is created by WebpiecesFactory.create().\n *\n * This class uses a two-container pattern similar to Java WebPieces:\n * 1. webpiecesContainer: Core WebPieces framework bindings\n * 2. appContainer: User's application bindings (child of webpiecesContainer)\n *\n * This separation allows:\n * - Clean separation of concerns\n * - Better testability\n * - Ability to override framework bindings in tests\n *\n * The server:\n * 1. Initializes both DI containers from WebAppMeta.getDIModules()\n * 2. Registers routes using explicit RouteBuilderImpl\n * 3. Creates filter chains\n * 4. Supports both HTTP server mode and testing mode (no HTTP)\n *\n * DI Pattern: This class is registered in webpiecesContainer via @provideSingleton()\n * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesServerImpl implements WebpiecesServer {\n    private webpiecesContainer!: Container;\n\n    /**\n     * Application container: User's application bindings.\n     * This is a child container of webpiecesContainer, so it can access\n     * framework bindings while keeping app bindings separate.\n     */\n    private appContainer!: Container;\n\n    private initialized = false;\n    private app?: Express;\n    private server?: ReturnType<Express['listen']>;\n    private port: number = 8200;\n\n    constructor(\n        @inject(WEBAPP_META_TOKEN) private meta: WebAppMeta,\n        @inject(RouteBuilderImpl) private routeBuilder: RouteBuilderImpl,\n        @inject(WebpiecesMiddleware) private middleware: WebpiecesMiddleware,\n    ) {}\n\n    /**\n     * Initialize the server asynchronously.\n     * This is called by WebpiecesFactory.create() after resolving this class from DI.\n     * This method is internal and not exposed on the WebpiecesServer interface.\n     *\n     * @param webpiecesContainer - The framework container\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST)\n     */\n    async initialize(\n        webpiecesContainer: Container,\n        appOverrides?: ContainerModule\n    ): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        this.webpiecesContainer = webpiecesContainer;\n\n        // Create application container as child of framework container\n        this.appContainer = new Container({ parent: this.webpiecesContainer });\n\n        // Set container on RouteBuilder (late binding - appContainer didn't exist in constructor)\n        this.routeBuilder.setContainer(this.appContainer);\n\n        // 1. Load DI modules asynchronously\n        await this.loadDIModules(appOverrides);\n\n        // 2. Register routes and filters\n        this.registerRoutes();\n\n        this.initialized = true;\n    }\n\n    /**\n     * Load DI modules from WebAppMeta.\n     *\n     * Currently, all user modules are loaded into the application container.\n     * In the future, we could separate:\n     * - WebPieces framework modules -> webpiecesContainer\n     * - Application modules -> appContainer\n     *\n     * For now, everything goes into appContainer which has access to webpiecesContainer.\n     *\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST to override bindings)\n     */\n    private async loadDIModules(appOverrides?: ContainerModule): Promise<void> {\n        const modules = this.meta.getDIModules();\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await this.appContainer.load(buildProviderModule());\n\n        // Load all modules into application container\n        // (webpiecesContainer is currently empty, reserved for future framework bindings)\n        for (const module of modules) {\n            await this.appContainer.load(module);\n        }\n\n        // Load appOverrides LAST so they can override existing bindings\n        if (appOverrides) {\n            await this.appContainer.load(appOverrides);\n        }\n    }\n\n    /**\n     * Register routes from WebAppMeta.\n     *\n     * Creates an explicit RouteBuilderImpl instead of an anonymous object.\n     * This improves:\n     * - Traceability: Can Cmd+Click on addRoute to see implementation\n     * - Debugging: Explicit class shows up in stack traces\n     * - Understanding: Clear class name vs anonymous object\n     */\n    private registerRoutes(): void {\n        const routeConfigs = this.meta.getRoutes();\n\n        // Configure routes using the explicit RouteBuilder\n        for (const routeConfig of routeConfigs) {\n            routeConfig.configure(this.routeBuilder);\n        }\n    }\n\n    /**\n     * Start the HTTP server with Express.\n     * Returns a Promise that resolves when the server is listening,\n     * or rejects if the server fails to start.\n     *\n     * @param port - The port to listen on (default: 8080)\n     * @returns Promise that resolves when server is ready\n     */\n    async start(port: number = 8200, testMode?: boolean): Promise<void> {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before start().');\n        }\n\n        this.port = port;\n\n        if(testMode) {\n            //In testMode, we eliminate express ENTIRELY and use\n            //Router, method filters and controllers so that we can test full stack\n            return;\n        }\n\n        // Create Express app\n        this.app = express();\n\n        // Layer 1: Global Error Handler (OUTERMOST - runs FIRST)\n        // Catches all unhandled errors and returns HTML 500 page\n        this.app.use(this.middleware.globalErrorHandler.bind(this.middleware));\n\n        // Layer 2: CORS for localhost development\n        this.app.use(this.middleware.corsForLocalhost());\n\n        // Layer 3: Request/Response Logging\n        this.app.use(this.middleware.logNextLayer.bind(this.middleware));\n\n        // Register routes\n        const routeCount = this.registerExpressRoutes();\n\n        // Start listening - wrap in Promise\n        const promise = new Promise<void>((resolve, reject) => {\n            this.server = this.app!.listen(this.port, (error?: Error) => {\n                if (error) {\n                    console.error(`[WebpiecesServer] Failed to start server:`, error);\n                    reject(error);\n                    return;\n                }\n                console.log(`[WebpiecesServer] Server listening on http://localhost:${this.port}`);\n                console.log(`[WebpiecesServer] Registered ${routeCount} routes`);\n                resolve();\n            });\n        });\n\n        await promise;\n    }\n\n    /**\n     * Register Express routes - the SINGLE loop over routes.\n     * For each route: createHandler (sets up filter chain) → wrapExpress → registerHandler.\n     *\n     * @returns Number of routes registered\n     */\n    private registerExpressRoutes(): number {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        const routes = this.routeBuilder.getRoutes();\n        let count = 0;\n\n        for (const routeWithMeta of routes) {\n            const service = this.routeBuilder.createRouteHandler(routeWithMeta);\n            const routeMeta = routeWithMeta.definition.routeMeta;\n\n            // Create ExpressWrapper directly (handles full request/response cycle)\n            const wrapper = this.middleware.createExpressWrapper(service, routeMeta);\n\n            this.registerHandler(\n                routeMeta.httpMethod,\n                routeMeta.path,\n                wrapper.execute.bind(wrapper),\n            );\n            count++;\n        }\n\n        return count;\n    }\n\n    registerHandler(httpMethod: string, path: string, expressHandler: ExpressRouteHandler) {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        switch (httpMethod.toLowerCase()) {\n            case 'get':\n                this.app.get(path, expressHandler);\n                break;\n            case 'post':\n                this.app.post(path, expressHandler);\n                break;\n            case 'put':\n                this.app.put(path, expressHandler);\n                break;\n            case 'delete':\n                this.app.delete(path, expressHandler);\n                break;\n            case 'patch':\n                this.app.patch(path, expressHandler);\n                break;\n            default:\n                console.warn(`[WebpiecesServer] Unknown HTTP method: ${httpMethod}`);\n        }\n    }\n\n    /**\n     * Stop the HTTP server.\n     * Returns a Promise that resolves when the server is stopped,\n     * or rejects if there's an error stopping the server.\n     *\n     * @returns Promise that resolves when server is stopped\n     */\n    async stop(): Promise<void> {\n        if (!this.server) {\n            return;\n        }\n\n        return new Promise<void>((resolve, reject) => {\n            this.server!.close((err?: Error) => {\n                if (err) {\n                    console.error('[WebpiecesServer] Error stopping server:', err);\n                    reject(err);\n                    return;\n                }\n                console.log('[WebpiecesServer] Server stopped');\n                resolve();\n            });\n        });\n    }\n\n    /**\n     * Get the application DI container.\n     *\n     * Useful for testing to verify state or access services directly.\n     *\n     * @returns The application Container\n     */\n    getContainer(): Container {\n        return this.appContainer;\n    }\n\n    /**\n     * Create an API client proxy for testing.\n     *\n     * This creates a client that routes calls through the full filter chain\n     * and controller, but WITHOUT any HTTP overhead. Perfect for testing!\n     *\n     * The client uses the ApiPrototype class to discover routes via decorators,\n     * then creates pre-configured invoker functions for each API method.\n     *\n     * IMPORTANT: This loops over the API methods (from decorators), NOT all routes.\n     * For each API method, it sets up the filter chain ONCE during proxy creation,\n     * so subsequent calls reuse the same filter chain (efficient!).\n     *\n     * @param apiPrototype - The API prototype class with routing decorators (can be abstract)\n     * @returns A proxy that implements the API interface\n     *\n     * Example:\n     * ```typescript\n     * const saveApi = server.createApiClient<SaveApi>(SaveApi);\n     * const response = await saveApi.save(request);\n     * ```\n     */\n    createApiClient<T>(apiPrototype: abstract new (...args: any[]) => T): T {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before createApiClient().');\n        }\n\n        // Get endpoints from the API prototype using @ApiPath/@Endpoint decorators\n        const basePath = getApiPath(apiPrototype) || '';\n        const endpoints = getEndpoints(apiPrototype) || {};\n\n        // Create proxy object\n        const proxy: Record<string, unknown> = {};\n\n        // Loop over API endpoints and create proxy functions\n        for (const [methodName, endpointPath] of Object.entries(endpoints)) {\n            const httpMethod = 'POST';\n            const path = basePath + endpointPath;\n\n            const authMeta = getAuthMeta(apiPrototype, methodName);\n            const routeMeta = new RouteMetadata(httpMethod, path, methodName, apiPrototype.name, authMeta);\n\n            // Create invoker service ONCE (sets up filter chain once, not on every call!)\n            const service = this.routeBuilder.createRouteInvoker(httpMethod, path);\n\n            // Proxy method creates MethodMeta and calls the pre-configured service\n            // IMPORTANT: Tests MUST wrap calls in RequestContext.run() themselves\n            // This forces explicit context setup in tests, matching production behavior\n            proxy[methodName] = async (requestDto: unknown): Promise<unknown> => {\n                // Verify we're inside an active RequestContext\n                // This helps test authors know they need to wrap their test in RequestContext.run()\n                if (!RequestContext.isActive()) {\n                    //Many devs may not activate headers\n                    return RequestContext.run(async () => {\n                        return await this.runMethod(routeMeta, requestDto, service);\n                    });\n                }\n                return await this.runMethod(routeMeta, requestDto, service);\n            };\n        }\n\n        return proxy as T;\n    }\n\n    private async runMethod(routeMeta: RouteMetadata, requestDto: unknown, service: Service<MethodMeta, WpResponse<unknown>>) {\n        // Create MethodMeta without headers (test mode - no HTTP involved)\n        // requestHeaders is optional, so we can omit it\n        const meta = new MethodMeta(routeMeta, undefined, requestDto);\n        const responseWrapper = await service.invoke(meta);\n        return responseWrapper.response;\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesServerImpl.js","sourceRoot":"","sources":["../../../../../packages/http/http-server/src/WebpiecesServerImpl.ts"],"names":[],"mappings":";;;;AAAA,8DAAyC;AACzC,yCAAyE;AACzE,wEAAoE;AACpE,0DAWiC;AAEjC,+DAA0D;AAC1D,0DAAuD;AAGvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAgBW;IACD;IACG;IAjBjC,kBAAkB,CAAa;IAEvC;;;;OAIG;IACK,YAAY,CAAa;IAEzB,WAAW,GAAG,KAAK,CAAC;IACpB,GAAG,CAAW;IACd,MAAM,CAAiC;IACvC,IAAI,GAAW,IAAI,CAAC;IAE5B,YACuC,IAAgB,EACjB,YAA8B,EAC3B,UAA+B;QAFjC,SAAI,GAAJ,IAAI,CAAY;QACjB,iBAAY,GAAZ,YAAY,CAAkB;QAC3B,eAAU,GAAV,UAAU,CAAqB;IACrE,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CACZ,kBAA6B,EAC7B,YAA8B;QAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACX,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAEvE,0FAA0F;QAC1F,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEvC,iCAAiC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,aAAa,CAAC,YAA8B;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEzC,yEAAyE;QACzE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,wCAAmB,GAAE,CAAC,CAAC;QAEpD,8CAA8C;QAC9C,kFAAkF;QAClF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,gEAAgE;QAChE,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAE3C,mDAAmD;QACnD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACrC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,OAAe,IAAI,EAAE,QAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAG,QAAQ,EAAE,CAAC;YACV,oDAAoD;YACpD,uEAAuE;YACvE,OAAO;QACX,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QAErB,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvE,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEjD,oCAAoC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjE,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEhD,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxD,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;oBAClE,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,0DAA0D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnF,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,SAAS,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,aAAa,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAErD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEzE,IAAI,CAAC,eAAe,CAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,IAAI,EACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;YACF,KAAK,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,cAAmC;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,MAAM;gBACP,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACpC,MAAM;YACV,KAAK,KAAK;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,MAAM;YACV,KAAK,QAAQ;gBACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACtC,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACrC,MAAM;YACV;gBACI,OAAO,CAAC,IAAI,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;gBAC/B,IAAI,GAAG,EAAE,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;oBAC/D,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAI,YAAgD;QAC/D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC3F,CAAC;QAED,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,IAAA,yBAAU,EAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAA,2BAAY,EAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAEnD,sBAAsB;QACtB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,qDAAqD;QACrD,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,MAAM,CAAC;YAC1B,MAAM,IAAI,GAAG,QAAQ,GAAG,YAAY,CAAC;YAErC,MAAM,QAAQ,GAAG,IAAA,0BAAW,EAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,4BAAa,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAE/F,8EAA8E;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEvE,uEAAuE;YACvE,sEAAsE;YACtE,4EAA4E;YAC5E,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,UAAmB,EAAoB,EAAE;gBAChE,+CAA+C;gBAC/C,oFAAoF;gBACpF,IAAI,CAAC,6BAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC7B,oCAAoC;oBACpC,OAAO,6BAAc,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACjC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;oBAChE,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC,CAAC;QACN,CAAC;QAED,OAAO,KAAU,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAAwB,EAAE,UAAmB,EAAE,OAAiD;QACpH,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,IAAI,GAAG,IAAI,yBAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,eAAe,CAAC,QAAQ,CAAC;IACpC,CAAC;CACJ,CAAA;AAlUY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAiBJ,mBAAA,IAAA,kBAAM,EAAC,gCAAiB,CAAC,CAAA;IACzB,mBAAA,IAAA,kBAAM,EAAC,+BAAgB,CAAC,CAAA;IACxB,mBAAA,IAAA,kBAAM,EAAC,yCAAmB,CAAC,CAAA;qDADoB,+BAAgB;QACf,yCAAmB;GAlB/D,mBAAmB,CAkU/B","sourcesContent":["import express, {Express} from 'express';\nimport {Container, ContainerModule, inject, injectable} from 'inversify';\nimport {buildProviderModule} from '@inversifyjs/binding-decorators';\nimport {\n    ExpressRouteHandler,\n    getApiPath,\n    getAuthMeta,\n    getEndpoints,\n    MethodMeta,\n    provideSingleton,\n    RouteBuilderImpl, RouteMetadata,\n    WebAppMeta,\n    WEBAPP_META_TOKEN,\n    WebpiecesConfig,\n} from '@webpieces/http-routing';\nimport {WebpiecesServer} from './WebpiecesServer';\nimport {WebpiecesMiddleware} from './WebpiecesMiddleware';\nimport {RequestContext} from '@webpieces/core-context';\nimport {Service, WpResponse} from \"@webpieces/http-filters\";\n\n/**\n * WebpiecesServerImpl - Internal server implementation.\n *\n * This class implements the WebpiecesServer interface and contains\n * all the actual server logic. It is created by WebpiecesFactory.create().\n *\n * This class uses a two-container pattern similar to Java WebPieces:\n * 1. webpiecesContainer: Core WebPieces framework bindings\n * 2. appContainer: User's application bindings (child of webpiecesContainer)\n *\n * This separation allows:\n * - Clean separation of concerns\n * - Better testability\n * - Ability to override framework bindings in tests\n *\n * The server:\n * 1. Initializes both DI containers from WebAppMeta.getDIModules()\n * 2. Registers routes using explicit RouteBuilderImpl\n * 3. Creates filter chains\n * 4. Supports both HTTP server mode and testing mode (no HTTP)\n *\n * DI Pattern: This class is registered in webpiecesContainer via @provideSingleton()\n * and resolved by WebpiecesFactory. It receives RouteBuilder via constructor injection.\n */\n@provideSingleton()\n@injectable()\nexport class WebpiecesServerImpl implements WebpiecesServer {\n    private webpiecesContainer!: Container;\n\n    /**\n     * Application container: User's application bindings.\n     * This is a child container of webpiecesContainer, so it can access\n     * framework bindings while keeping app bindings separate.\n     */\n    private appContainer!: Container;\n\n    private initialized = false;\n    private app?: Express;\n    private server?: ReturnType<Express['listen']>;\n    private port: number = 8200;\n\n    constructor(\n        @inject(WEBAPP_META_TOKEN) private meta: WebAppMeta,\n        @inject(RouteBuilderImpl) private routeBuilder: RouteBuilderImpl,\n        @inject(WebpiecesMiddleware) private middleware: WebpiecesMiddleware,\n    ) {}\n\n    /**\n     * Initialize the server asynchronously.\n     * This is called by WebpiecesFactory.create() after resolving this class from DI.\n     * This method is internal and not exposed on the WebpiecesServer interface.\n     *\n     * @param webpiecesContainer - The framework container\n     * @param meta - User-provided WebAppMeta with DI modules and routes\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST)\n     */\n    async initialize(\n        webpiecesContainer: Container,\n        appOverrides?: ContainerModule\n    ): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        this.webpiecesContainer = webpiecesContainer;\n\n        // Create application container as child of framework container\n        this.appContainer = new Container({ parent: this.webpiecesContainer });\n\n        // Set container on RouteBuilder (late binding - appContainer didn't exist in constructor)\n        this.routeBuilder.setContainer(this.appContainer);\n\n        // 1. Load DI modules asynchronously\n        await this.loadDIModules(appOverrides);\n\n        // 2. Register routes and filters\n        this.registerRoutes();\n\n        this.initialized = true;\n    }\n\n    /**\n     * Load DI modules from WebAppMeta.\n     *\n     * Currently, all user modules are loaded into the application container.\n     * In the future, we could separate:\n     * - WebPieces framework modules -> webpiecesContainer\n     * - Application modules -> appContainer\n     *\n     * For now, everything goes into appContainer which has access to webpiecesContainer.\n     *\n     * @param appOverrides - Optional ContainerModule for app test overrides (loaded LAST to override bindings)\n     */\n    private async loadDIModules(appOverrides?: ContainerModule): Promise<void> {\n        const modules = this.meta.getDIModules();\n\n        // Load buildProviderModule to auto-scan for @provideSingleton decorators\n        await this.appContainer.load(buildProviderModule());\n\n        // Load all modules into application container\n        // (webpiecesContainer is currently empty, reserved for future framework bindings)\n        for (const module of modules) {\n            await this.appContainer.load(module);\n        }\n\n        // Load appOverrides LAST so they can override existing bindings\n        if (appOverrides) {\n            await this.appContainer.load(appOverrides);\n        }\n    }\n\n    /**\n     * Register routes from WebAppMeta.\n     *\n     * Creates an explicit RouteBuilderImpl instead of an anonymous object.\n     * This improves:\n     * - Traceability: Can Cmd+Click on addRoute to see implementation\n     * - Debugging: Explicit class shows up in stack traces\n     * - Understanding: Clear class name vs anonymous object\n     */\n    private registerRoutes(): void {\n        const routeConfigs = this.meta.getRoutes();\n\n        // Configure routes using the explicit RouteBuilder\n        for (const routeConfig of routeConfigs) {\n            routeConfig.configure(this.routeBuilder);\n        }\n    }\n\n    /**\n     * Start the HTTP server with Express.\n     * Returns a Promise that resolves when the server is listening,\n     * or rejects if the server fails to start.\n     *\n     * @param port - The port to listen on (default: 8080)\n     * @returns Promise that resolves when server is ready\n     */\n    async start(port: number = 8200, testMode?: boolean): Promise<void> {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before start().');\n        }\n\n        this.port = port;\n\n        if(testMode) {\n            //In testMode, we eliminate express ENTIRELY and use\n            //Router, method filters and controllers so that we can test full stack\n            return;\n        }\n\n        // Create Express app\n        this.app = express();\n\n        // Layer 1: Global Error Handler (OUTERMOST - runs FIRST)\n        // Catches all unhandled errors and returns HTML 500 page\n        this.app.use(this.middleware.globalErrorHandler.bind(this.middleware));\n\n        // Layer 2: CORS for localhost development\n        this.app.use(this.middleware.corsForLocalhost());\n\n        // Layer 3: Request/Response Logging\n        this.app.use(this.middleware.logNextLayer.bind(this.middleware));\n\n        // Register routes\n        const routeCount = this.registerExpressRoutes();\n\n        // Start listening - wrap in Promise\n        const promise = new Promise<void>((resolve, reject) => {\n            this.server = this.app!.listen(this.port, (error?: Error) => {\n                if (error) {\n                    console.error(`[WebpiecesServer] Failed to start server:`, error);\n                    reject(error);\n                    return;\n                }\n                console.log(`[WebpiecesServer] Server listening on http://localhost:${this.port}`);\n                console.log(`[WebpiecesServer] Registered ${routeCount} routes`);\n                resolve();\n            });\n        });\n\n        await promise;\n    }\n\n    /**\n     * Register Express routes - the SINGLE loop over routes.\n     * For each route: createHandler (sets up filter chain) → wrapExpress → registerHandler.\n     *\n     * @returns Number of routes registered\n     */\n    private registerExpressRoutes(): number {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        const routes = this.routeBuilder.getRoutes();\n        let count = 0;\n\n        for (const routeWithMeta of routes) {\n            const service = this.routeBuilder.createRouteHandler(routeWithMeta);\n            const routeMeta = routeWithMeta.definition.routeMeta;\n\n            // Create ExpressWrapper directly (handles full request/response cycle)\n            const wrapper = this.middleware.createExpressWrapper(service, routeMeta);\n\n            this.registerHandler(\n                routeMeta.httpMethod,\n                routeMeta.path,\n                wrapper.execute.bind(wrapper),\n            );\n            count++;\n        }\n\n        return count;\n    }\n\n    registerHandler(httpMethod: string, path: string, expressHandler: ExpressRouteHandler) {\n        if (!this.app) {\n            throw new Error('Express app not initialized');\n        }\n\n        switch (httpMethod.toLowerCase()) {\n            case 'get':\n                this.app.get(path, expressHandler);\n                break;\n            case 'post':\n                this.app.post(path, expressHandler);\n                break;\n            case 'put':\n                this.app.put(path, expressHandler);\n                break;\n            case 'delete':\n                this.app.delete(path, expressHandler);\n                break;\n            case 'patch':\n                this.app.patch(path, expressHandler);\n                break;\n            default:\n                console.warn(`[WebpiecesServer] Unknown HTTP method: ${httpMethod}`);\n        }\n    }\n\n    /**\n     * Stop the HTTP server.\n     * Returns a Promise that resolves when the server is stopped,\n     * or rejects if there's an error stopping the server.\n     *\n     * @returns Promise that resolves when server is stopped\n     */\n    async stop(): Promise<void> {\n        if (!this.server) {\n            return;\n        }\n\n        return new Promise<void>((resolve, reject) => {\n            this.server!.close((err?: Error) => {\n                if (err) {\n                    console.error('[WebpiecesServer] Error stopping server:', err);\n                    reject(err);\n                    return;\n                }\n                console.log('[WebpiecesServer] Server stopped');\n                resolve();\n            });\n        });\n    }\n\n    /**\n     * Get the application DI container.\n     *\n     * Useful for testing to verify state or access services directly.\n     *\n     * @returns The application Container\n     */\n    getContainer(): Container {\n        return this.appContainer;\n    }\n\n    /**\n     * Create an API client proxy for testing.\n     *\n     * This creates a client that routes calls through the full filter chain\n     * and controller, but WITHOUT any HTTP overhead. Perfect for testing!\n     *\n     * The client uses the ApiPrototype class to discover routes via decorators,\n     * then creates pre-configured invoker functions for each API method.\n     *\n     * IMPORTANT: This loops over the API methods (from decorators), NOT all routes.\n     * For each API method, it sets up the filter chain ONCE during proxy creation,\n     * so subsequent calls reuse the same filter chain (efficient!).\n     *\n     * @param apiPrototype - The API prototype class with routing decorators (can be abstract)\n     * @returns A proxy that implements the API interface\n     *\n     * Example:\n     * ```typescript\n     * const saveApi = server.createApiClient<SaveApi>(SaveApi);\n     * const response = await saveApi.save(request);\n     * ```\n     */\n    createApiClient<T>(apiPrototype: abstract new (...args: any[]) => T): T {\n        if (!this.initialized) {\n            throw new Error('Server not initialized. Call initialize() before createApiClient().');\n        }\n\n        // Get endpoints from the API prototype using @ApiPath/@Endpoint decorators\n        const basePath = getApiPath(apiPrototype) || '';\n        const endpoints = getEndpoints(apiPrototype) || {};\n\n        // Create proxy object\n        const proxy: Record<string, unknown> = {};\n\n        // Loop over API endpoints and create proxy functions\n        for (const [methodName, endpointPath] of Object.entries(endpoints)) {\n            const httpMethod = 'POST';\n            const path = basePath + endpointPath;\n\n            const authMeta = getAuthMeta(apiPrototype, methodName);\n            const routeMeta = new RouteMetadata(httpMethod, path, methodName, apiPrototype.name, authMeta);\n\n            // Create invoker service ONCE (sets up filter chain once, not on every call!)\n            const service = this.routeBuilder.createRouteInvoker(httpMethod, path);\n\n            // Proxy method creates MethodMeta and calls the pre-configured service\n            // IMPORTANT: Tests MUST wrap calls in RequestContext.run() themselves\n            // This forces explicit context setup in tests, matching production behavior\n            proxy[methodName] = async (requestDto: unknown): Promise<unknown> => {\n                // Verify we're inside an active RequestContext\n                // This helps test authors know they need to wrap their test in RequestContext.run()\n                if (!RequestContext.isActive()) {\n                    //Many devs may not activate headers\n                    return RequestContext.run(async () => {\n                        return await this.runMethod(routeMeta, requestDto, service);\n                    });\n                }\n                return await this.runMethod(routeMeta, requestDto, service);\n            };\n        }\n\n        return proxy as T;\n    }\n\n    private async runMethod(routeMeta: RouteMetadata, requestDto: unknown, service: Service<MethodMeta, WpResponse<unknown>>) {\n        // Create MethodMeta without headers (test mode - no HTTP involved)\n        // requestHeaders is optional, so we can omit it\n        const meta = new MethodMeta(routeMeta, undefined, requestDto);\n        const responseWrapper = await service.invoke(meta);\n        return responseWrapper.response;\n    }\n}\n"]}

package/src/filters/ContextFilter.js

@@ -29,6 +29,7 @@ const ContextKeys_1 = require("../headers/ContextKeys");
  * 7. Context auto-clears when RequestContext.run() completes
  */
 let ContextFilter = class ContextFilter extends http_filters_1.Filter {
+    headerMethods;
     constructor(extensions = [], headerMethods) {
         super();
         // Flatten all headers from all extensions

package/src/filters/ContextFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContextFilter.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/filters/ContextFilter.ts"],"names":[],"mappings":";;;;AAAA,yCAAoE;AACpE,0DAAuE;AACvE,0DAAyD;AACzD,0DAAsE;AACtE,kDAA4G;AAC5G,0EAAqE;AACrE,wDAAmD;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AAGI,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,qBAAuC;IAGtE,YAEI,aAAyC,EAAE,EACpB,aAA4B;QAEnD,KAAK,EAAE,CAAC;QAER,0CAA0C;QAC1C,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEnE,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,CAAC,MAAM,0BAA0B,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;IACxH,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAgB,EAChB,UAAoD;QAEpD,6EAA6E;QAC7E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE3B,4EAA4E;QAC5E,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxD,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEnE,iCAAiC;QACjC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,0EAA0E;IAC9E,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,IAAgB;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,0EAA0E;QAC1E,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,2DAA2D;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACxE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,oEAAoE;gBACpE,6BAAc,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAEhC,8DAA8D;QAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACK,eAAe;QACnB,IAAI,CAAC,6BAAc,CAAC,SAAS,CAAC,2CAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3C,6BAAc,CAAC,SAAS,CAAC,2CAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,iBAAiB;QACrB,OAAO,eAAe,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;CACJ,CAAA;AArFY,sCAAa;wBAAb,aAAa;IAFzB,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAKJ,mBAAA,IAAA,uBAAW,EAAC,uBAAY,CAAC,wBAAwB,CAAC,CAAA;IAAE,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAE9D,mBAAA,IAAA,kBAAM,EAAC,wBAAa,CAAC,CAAA;oDAAgB,wBAAa;GAN9C,aAAa,CAqFzB","sourcesContent":["import {inject, injectable, multiInject, optional} from 'inversify';\nimport { provideSingleton, MethodMeta } from '@webpieces/http-routing';\nimport { RequestContext } from '@webpieces/core-context';\nimport { Filter, WpResponse, Service } from '@webpieces/http-filters';\nimport { PlatformHeader, PlatformHeadersExtension, HeaderMethods, HEADER_TYPES } from '@webpieces/http-api';\nimport {WebpiecesCoreHeaders} from \"../headers/WebpiecesCoreHeaders\";\nimport {ContextKeys} from \"../headers/ContextKeys\";\n\n/**\n * ContextFilter - Transfers platform headers and stores request metadata in RequestContext.\n * Priority: 2000 (executes first in filter chain)\n *\n * NEW: Now handles header transfer from RouterRequest to RequestContext\n * - Injects PlatformHeadersExtension instances via @multiInject (safe because filter created after modules load)\n * - Reads headers from RouterRequest (Express-independent)\n * - Transfers only headers marked with isWantTransferred=true\n * - Generates REQUEST_ID if not present\n *\n * RequestContext lifecycle:\n * 1. ExpressWrapper.execute() calls RequestContext.run() (establishes context)\n * 2. ExpressWrapper creates RouterReqResp and MethodMeta\n * 3. Filter chain executes, starting with ContextFilter\n * 4. ContextFilter transfers headers from RouterRequest to RequestContext\n * 5. ContextFilter stores metadata (METHOD_META, REQUEST_PATH, HTTP_METHOD)\n * 6. Downstream filters and controller can access headers + metadata\n * 7. Context auto-clears when RequestContext.run() completes\n */\n@provideSingleton()\n@injectable()\nexport class ContextFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    private headerMethods: PlatformHeader[];\n\n    constructor(\n        @multiInject(HEADER_TYPES.PlatformHeadersExtension) @optional()\n        extensions: PlatformHeadersExtension[] = [],\n        @inject(HeaderMethods) headerMethods: HeaderMethods\n    ) {\n        super();\n\n        // Flatten all headers from all extensions\n        const allHeaders: PlatformHeader[] = [];\n        for (const extension of extensions) {\n            allHeaders.push(...extension.getHeaders());\n        }\n\n        // Create HeaderMethods helper with flattened headers\n        this.headerMethods = headerMethods.findTransferHeaders(allHeaders);\n\n        console.log(`[ContextFilter] Collected ${allHeaders.length} platform headers from ${extensions.length} extensions`);\n    }\n\n    async filter(\n        meta: MethodMeta,\n        nextFilter: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        // Transfer platform headers from MethodMeta.requestHeaders to RequestContext\n        this.transferHeaders(meta);\n\n        // Store request metadata in context for other filters/controllers to access\n        RequestContext.putHeader(ContextKeys.METHOD_META, meta);\n        RequestContext.putHeader(ContextKeys.REQUEST_PATH, meta.path);\n        RequestContext.putHeader(ContextKeys.HTTP_METHOD, meta.httpMethod);\n\n        // Execute next filter/controller\n        return await nextFilter.invoke(meta);\n        // RequestContext is auto-cleared by ExpressWrapper when request completes\n    }\n\n    /**\n     * Transfer platform headers from MethodMeta.requestHeaders to RequestContext.\n     * Uses HeaderMethods.findTransferHeaders() to filter by isWantTransferred=true.\n     */\n    private transferHeaders(meta: MethodMeta): void {\n        if (!meta.requestHeaders) {\n            // No headers in test mode (createApiClient creates context but not headers)\n            this.ensureRequestId();\n            return;\n        }\n\n        // Transfer each header to RequestContext using RequestContext.putHeader()\n        for (const header of this.headerMethods) {\n            // Get values from requestHeaders (case-insensitive lookup)\n            const values = meta.requestHeaders.get(header.headerName.toLowerCase());\n            if (values && values.length > 0) {\n                // Use RequestContext.putHeader() which calls header.getHeaderName()\n                RequestContext.putHeader(header, values[0]);\n            }\n        }\n\n        // Clear request headers from MethodMeta - MUST FORCE USAGE of RequestContext!!!\n        meta.requestHeaders = undefined;\n\n        // Generate REQUEST_ID if not present (first service in chain)\n        this.ensureRequestId();\n    }\n\n    /**\n     * Ensure REQUEST_ID is set in RequestContext.\n     * Generates one if not present.\n     */\n    private ensureRequestId(): void {\n        if (!RequestContext.hasHeader(WebpiecesCoreHeaders.REQUEST_ID)) {\n            const requestId = this.generateRequestId();\n            RequestContext.putHeader(WebpiecesCoreHeaders.REQUEST_ID, requestId);\n        }\n    }\n\n    /**\n     * Generate a unique request ID.\n     * Format: req-{timestamp}-{random}\n     */\n    private generateRequestId(): string {\n        return `svrGenReqId-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;\n    }\n}\n\n"]}
+{"version":3,"file":"ContextFilter.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/filters/ContextFilter.ts"],"names":[],"mappings":";;;;AAAA,yCAAoE;AACpE,0DAAuE;AACvE,0DAAyD;AACzD,0DAAsE;AACtE,kDAA4G;AAC5G,0EAAqE;AACrE,wDAAmD;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AAGI,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,qBAAuC;IAC9D,aAAa,CAAmB;IAExC,YAEI,aAAyC,EAAE,EACpB,aAA4B;QAEnD,KAAK,EAAE,CAAC;QAER,0CAA0C;QAC1C,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEnE,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,CAAC,MAAM,0BAA0B,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;IACxH,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAgB,EAChB,UAAoD;QAEpD,6EAA6E;QAC7E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE3B,4EAA4E;QAC5E,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxD,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,6BAAc,CAAC,SAAS,CAAC,yBAAW,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEnE,iCAAiC;QACjC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,0EAA0E;IAC9E,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,IAAgB;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,0EAA0E;QAC1E,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,2DAA2D;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACxE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,oEAAoE;gBACpE,6BAAc,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAEhC,8DAA8D;QAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACK,eAAe;QACnB,IAAI,CAAC,6BAAc,CAAC,SAAS,CAAC,2CAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3C,6BAAc,CAAC,SAAS,CAAC,2CAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,iBAAiB;QACrB,OAAO,eAAe,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;CACJ,CAAA;AArFY,sCAAa;wBAAb,aAAa;IAFzB,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAKJ,mBAAA,IAAA,uBAAW,EAAC,uBAAY,CAAC,wBAAwB,CAAC,CAAA;IAAE,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAE9D,mBAAA,IAAA,kBAAM,EAAC,wBAAa,CAAC,CAAA;oDAAgB,wBAAa;GAN9C,aAAa,CAqFzB","sourcesContent":["import {inject, injectable, multiInject, optional} from 'inversify';\nimport { provideSingleton, MethodMeta } from '@webpieces/http-routing';\nimport { RequestContext } from '@webpieces/core-context';\nimport { Filter, WpResponse, Service } from '@webpieces/http-filters';\nimport { PlatformHeader, PlatformHeadersExtension, HeaderMethods, HEADER_TYPES } from '@webpieces/http-api';\nimport {WebpiecesCoreHeaders} from \"../headers/WebpiecesCoreHeaders\";\nimport {ContextKeys} from \"../headers/ContextKeys\";\n\n/**\n * ContextFilter - Transfers platform headers and stores request metadata in RequestContext.\n * Priority: 2000 (executes first in filter chain)\n *\n * NEW: Now handles header transfer from RouterRequest to RequestContext\n * - Injects PlatformHeadersExtension instances via @multiInject (safe because filter created after modules load)\n * - Reads headers from RouterRequest (Express-independent)\n * - Transfers only headers marked with isWantTransferred=true\n * - Generates REQUEST_ID if not present\n *\n * RequestContext lifecycle:\n * 1. ExpressWrapper.execute() calls RequestContext.run() (establishes context)\n * 2. ExpressWrapper creates RouterReqResp and MethodMeta\n * 3. Filter chain executes, starting with ContextFilter\n * 4. ContextFilter transfers headers from RouterRequest to RequestContext\n * 5. ContextFilter stores metadata (METHOD_META, REQUEST_PATH, HTTP_METHOD)\n * 6. Downstream filters and controller can access headers + metadata\n * 7. Context auto-clears when RequestContext.run() completes\n */\n@provideSingleton()\n@injectable()\nexport class ContextFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    private headerMethods: PlatformHeader[];\n\n    constructor(\n        @multiInject(HEADER_TYPES.PlatformHeadersExtension) @optional()\n        extensions: PlatformHeadersExtension[] = [],\n        @inject(HeaderMethods) headerMethods: HeaderMethods\n    ) {\n        super();\n\n        // Flatten all headers from all extensions\n        const allHeaders: PlatformHeader[] = [];\n        for (const extension of extensions) {\n            allHeaders.push(...extension.getHeaders());\n        }\n\n        // Create HeaderMethods helper with flattened headers\n        this.headerMethods = headerMethods.findTransferHeaders(allHeaders);\n\n        console.log(`[ContextFilter] Collected ${allHeaders.length} platform headers from ${extensions.length} extensions`);\n    }\n\n    async filter(\n        meta: MethodMeta,\n        nextFilter: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        // Transfer platform headers from MethodMeta.requestHeaders to RequestContext\n        this.transferHeaders(meta);\n\n        // Store request metadata in context for other filters/controllers to access\n        RequestContext.putHeader(ContextKeys.METHOD_META, meta);\n        RequestContext.putHeader(ContextKeys.REQUEST_PATH, meta.path);\n        RequestContext.putHeader(ContextKeys.HTTP_METHOD, meta.httpMethod);\n\n        // Execute next filter/controller\n        return await nextFilter.invoke(meta);\n        // RequestContext is auto-cleared by ExpressWrapper when request completes\n    }\n\n    /**\n     * Transfer platform headers from MethodMeta.requestHeaders to RequestContext.\n     * Uses HeaderMethods.findTransferHeaders() to filter by isWantTransferred=true.\n     */\n    private transferHeaders(meta: MethodMeta): void {\n        if (!meta.requestHeaders) {\n            // No headers in test mode (createApiClient creates context but not headers)\n            this.ensureRequestId();\n            return;\n        }\n\n        // Transfer each header to RequestContext using RequestContext.putHeader()\n        for (const header of this.headerMethods) {\n            // Get values from requestHeaders (case-insensitive lookup)\n            const values = meta.requestHeaders.get(header.headerName.toLowerCase());\n            if (values && values.length > 0) {\n                // Use RequestContext.putHeader() which calls header.getHeaderName()\n                RequestContext.putHeader(header, values[0]);\n            }\n        }\n\n        // Clear request headers from MethodMeta - MUST FORCE USAGE of RequestContext!!!\n        meta.requestHeaders = undefined;\n\n        // Generate REQUEST_ID if not present (first service in chain)\n        this.ensureRequestId();\n    }\n\n    /**\n     * Ensure REQUEST_ID is set in RequestContext.\n     * Generates one if not present.\n     */\n    private ensureRequestId(): void {\n        if (!RequestContext.hasHeader(WebpiecesCoreHeaders.REQUEST_ID)) {\n            const requestId = this.generateRequestId();\n            RequestContext.putHeader(WebpiecesCoreHeaders.REQUEST_ID, requestId);\n        }\n    }\n\n    /**\n     * Generate a unique request ID.\n     * Format: req-{timestamp}-{random}\n     */\n    private generateRequestId(): string {\n        return `svrGenReqId-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;\n    }\n}\n\n"]}

package/src/filters/LogApiFilter.js

@@ -23,6 +23,9 @@ const http_api_1 = require("@webpieces/http-api");
  * because they are expected behavior from the server's perspective.
  */
 let LogApiFilter = class LogApiFilter extends http_filters_1.Filter {
+    headerMethods;
+    logApiCall;
+    allHeaders;
     constructor(extensions = [], headerMethods) {
         super();
         this.headerMethods = headerMethods;

package/src/filters/LogApiFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"LogApiFilter.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/filters/LogApiFilter.ts"],"names":[],"mappings":";;;;AAAA,yCAAoE;AACpE,0DAA2F;AAC3F,0DAAsE;AACtE,kDAM6B;AAE7B;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,qBAAuC;IAIrE,YAEI,aAAyC,EAAE,EACZ,aAA4B;QAE3D,KAAK,EAAE,CAAC;QAFuB,kBAAa,GAAb,aAAa,CAAe;QAI3D,0CAA0C;QAC1C,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,UAAU,CAAC,MAAM,0BAA0B,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;QAExH,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAU,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAgB,EAChB,UAAoD;QAEpD,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,mCAAoB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEzF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,KAAK,IAAsB,EAAE;YACxC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxG,OAAO,IAAI,yBAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;CACJ,CAAA;AAvCY,oCAAY;uBAAZ,YAAY;IAFxB,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAMJ,mBAAA,IAAA,uBAAW,EAAC,uBAAY,CAAC,wBAAwB,CAAC,CAAA;IAAE,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAE9D,mBAAA,IAAA,kBAAM,EAAC,wBAAa,CAAC,CAAA;oDAAwB,wBAAa;GAPtD,YAAY,CAuCxB","sourcesContent":["import {inject, injectable, multiInject, optional} from 'inversify';\nimport {provideSingleton, MethodMeta, RequestContextReader} from '@webpieces/http-routing';\nimport { Filter, WpResponse, Service } from '@webpieces/http-filters';\nimport {\n    PlatformHeader,\n    PlatformHeadersExtension,\n    HeaderMethods,\n    HEADER_TYPES,\n    LogApiCall,\n} from '@webpieces/http-api';\n\n/**\n * LogApiFilter - Structured API logging for all requests/responses.\n * Priority: 1800 (after ContextFilter at 2000, before custom filters)\n *\n * Logging patterns (via LogApiCall):\n * - [API-SVR-req] Class.method /url request={...} headers={...}\n * - [API-SVR-resp-SUCCESS] Class.method response={...}\n * - [API-SVR-resp-FAIL] Class.method error=... (server errors: 500, 502, 504)\n * - [API-SVR-resp-OTHER] Class.method errorType=... (user errors: 400, 401, 403, 404, 266)\n *\n * Headers are read from RequestContext (NOT from meta.requestHeaders which is undefined\n * after ContextFilter runs at priority 2000).\n *\n * User errors (HttpBadRequestError, etc.) are logged as OTHER, not FAIL,\n * because they are expected behavior from the server's perspective.\n */\n@provideSingleton()\n@injectable()\nexport class LogApiFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    private logApiCall: LogApiCall;\n    private allHeaders: PlatformHeader[];\n\n    constructor(\n        @multiInject(HEADER_TYPES.PlatformHeadersExtension) @optional()\n        extensions: PlatformHeadersExtension[] = [],\n        @inject(HeaderMethods) private headerMethods: HeaderMethods\n    ) {\n        super();\n\n        // Flatten all headers from all extensions\n        this.allHeaders = [];\n        for (const extension of extensions) {\n            this.allHeaders.push(...extension.getHeaders());\n        }\n\n        console.log(`[LogApiFilter] Collected ${this.allHeaders.length} platform headers from ${extensions.length} extensions`);\n\n        this.logApiCall = new LogApiCall();\n    }\n\n    async filter(\n        meta: MethodMeta,\n        nextFilter: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        // Build header map from RequestContext (headers are already transferred by ContextFilter)\n        const contextReader = new RequestContextReader();\n        const headers = this.headerMethods.buildSecureMapForLogs(this.allHeaders, contextReader);\n\n        // Wrap nextFilter.invoke in a method that returns the response\n        const method = async (): Promise<unknown> => {\n            const wpResponse = await nextFilter.invoke(meta);\n            return wpResponse.response;\n        };\n\n        const response = await this.logApiCall.execute(\"SVR\", meta.routeMeta, meta.requestDto, headers, method);\n        return new WpResponse(response);\n    }\n}\n"]}
+{"version":3,"file":"LogApiFilter.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/filters/LogApiFilter.ts"],"names":[],"mappings":";;;;AAAA,yCAAoE;AACpE,0DAA2F;AAC3F,0DAAsE;AACtE,kDAM6B;AAE7B;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,qBAAuC;IAOlC;IAN3B,UAAU,CAAa;IACvB,UAAU,CAAmB;IAErC,YAEI,aAAyC,EAAE,EACZ,aAA4B;QAE3D,KAAK,EAAE,CAAC;QAFuB,kBAAa,GAAb,aAAa,CAAe;QAI3D,0CAA0C;QAC1C,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,UAAU,CAAC,MAAM,0BAA0B,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;QAExH,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAU,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAgB,EAChB,UAAoD;QAEpD,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,mCAAoB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEzF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,KAAK,IAAsB,EAAE;YACxC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxG,OAAO,IAAI,yBAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;CACJ,CAAA;AAvCY,oCAAY;uBAAZ,YAAY;IAFxB,IAAA,+BAAgB,GAAE;IAClB,IAAA,sBAAU,GAAE;IAMJ,mBAAA,IAAA,uBAAW,EAAC,uBAAY,CAAC,wBAAwB,CAAC,CAAA;IAAE,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAE9D,mBAAA,IAAA,kBAAM,EAAC,wBAAa,CAAC,CAAA;oDAAwB,wBAAa;GAPtD,YAAY,CAuCxB","sourcesContent":["import {inject, injectable, multiInject, optional} from 'inversify';\nimport {provideSingleton, MethodMeta, RequestContextReader} from '@webpieces/http-routing';\nimport { Filter, WpResponse, Service } from '@webpieces/http-filters';\nimport {\n    PlatformHeader,\n    PlatformHeadersExtension,\n    HeaderMethods,\n    HEADER_TYPES,\n    LogApiCall,\n} from '@webpieces/http-api';\n\n/**\n * LogApiFilter - Structured API logging for all requests/responses.\n * Priority: 1800 (after ContextFilter at 2000, before custom filters)\n *\n * Logging patterns (via LogApiCall):\n * - [API-SVR-req] Class.method /url request={...} headers={...}\n * - [API-SVR-resp-SUCCESS] Class.method response={...}\n * - [API-SVR-resp-FAIL] Class.method error=... (server errors: 500, 502, 504)\n * - [API-SVR-resp-OTHER] Class.method errorType=... (user errors: 400, 401, 403, 404, 266)\n *\n * Headers are read from RequestContext (NOT from meta.requestHeaders which is undefined\n * after ContextFilter runs at priority 2000).\n *\n * User errors (HttpBadRequestError, etc.) are logged as OTHER, not FAIL,\n * because they are expected behavior from the server's perspective.\n */\n@provideSingleton()\n@injectable()\nexport class LogApiFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    private logApiCall: LogApiCall;\n    private allHeaders: PlatformHeader[];\n\n    constructor(\n        @multiInject(HEADER_TYPES.PlatformHeadersExtension) @optional()\n        extensions: PlatformHeadersExtension[] = [],\n        @inject(HeaderMethods) private headerMethods: HeaderMethods\n    ) {\n        super();\n\n        // Flatten all headers from all extensions\n        this.allHeaders = [];\n        for (const extension of extensions) {\n            this.allHeaders.push(...extension.getHeaders());\n        }\n\n        console.log(`[LogApiFilter] Collected ${this.allHeaders.length} platform headers from ${extensions.length} extensions`);\n\n        this.logApiCall = new LogApiCall();\n    }\n\n    async filter(\n        meta: MethodMeta,\n        nextFilter: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        // Build header map from RequestContext (headers are already transferred by ContextFilter)\n        const contextReader = new RequestContextReader();\n        const headers = this.headerMethods.buildSecureMapForLogs(this.allHeaders, contextReader);\n\n        // Wrap nextFilter.invoke in a method that returns the response\n        const method = async (): Promise<unknown> => {\n            const wpResponse = await nextFilter.invoke(meta);\n            return wpResponse.response;\n        };\n\n        const response = await this.logApiCall.execute(\"SVR\", meta.routeMeta, meta.requestDto, headers, method);\n        return new WpResponse(response);\n    }\n}\n"]}

package/src/headers/ContextKeys.js

@@ -9,9 +9,9 @@ const core_util_1 = require("@webpieces/core-util");
  * Unlike PlatformHeader, these don't correspond to HTTP headers.
  */
 class ContextKeys {
+    static METHOD_META = new core_util_1.ContextKey('webpieces:method-meta');
+    static REQUEST_PATH = new core_util_1.ContextKey('webpieces:request-path');
+    static HTTP_METHOD = new core_util_1.ContextKey('webpieces:http-method');
 }
 exports.ContextKeys = ContextKeys;
-ContextKeys.METHOD_META = new core_util_1.ContextKey('webpieces:method-meta');
-ContextKeys.REQUEST_PATH = new core_util_1.ContextKey('webpieces:request-path');
-ContextKeys.HTTP_METHOD = new core_util_1.ContextKey('webpieces:http-method');
 //# sourceMappingURL=ContextKeys.js.map

package/src/headers/ContextKeys.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContextKeys.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/headers/ContextKeys.ts"],"names":[],"mappings":";;;AAAA,oDAAkD;AAElD;;;;;GAKG;AACH,MAAa,WAAW;;AAAxB,kCAIC;AAHmB,uBAAW,GAAG,IAAI,sBAAU,CAAC,uBAAuB,CAAC,CAAC;AACtD,wBAAY,GAAG,IAAI,sBAAU,CAAC,wBAAwB,CAAC,CAAC;AACxD,uBAAW,GAAG,IAAI,sBAAU,CAAC,uBAAuB,CAAC,CAAC","sourcesContent":["import { ContextKey } from '@webpieces/core-util';\n\n/**\n * Framework-level context keys for non-HTTP values stored in RequestContext.\n *\n * These are set by ContextFilter and can be read by downstream filters/controllers.\n * Unlike PlatformHeader, these don't correspond to HTTP headers.\n */\nexport class ContextKeys {\n    static readonly METHOD_META = new ContextKey('webpieces:method-meta');\n    static readonly REQUEST_PATH = new ContextKey('webpieces:request-path');\n    static readonly HTTP_METHOD = new ContextKey('webpieces:http-method');\n}\n"]}
+{"version":3,"file":"ContextKeys.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/headers/ContextKeys.ts"],"names":[],"mappings":";;;AAAA,oDAAkD;AAElD;;;;;GAKG;AACH,MAAa,WAAW;IACpB,MAAM,CAAU,WAAW,GAAG,IAAI,sBAAU,CAAC,uBAAuB,CAAC,CAAC;IACtE,MAAM,CAAU,YAAY,GAAG,IAAI,sBAAU,CAAC,wBAAwB,CAAC,CAAC;IACxE,MAAM,CAAU,WAAW,GAAG,IAAI,sBAAU,CAAC,uBAAuB,CAAC,CAAC;;AAH1E,kCAIC","sourcesContent":["import { ContextKey } from '@webpieces/core-util';\n\n/**\n * Framework-level context keys for non-HTTP values stored in RequestContext.\n *\n * These are set by ContextFilter and can be read by downstream filters/controllers.\n * Unlike PlatformHeader, these don't correspond to HTTP headers.\n */\nexport class ContextKeys {\n    static readonly METHOD_META = new ContextKey('webpieces:method-meta');\n    static readonly REQUEST_PATH = new ContextKey('webpieces:request-path');\n    static readonly HTTP_METHOD = new ContextKey('webpieces:http-method');\n}\n"]}

package/src/headers/WebpiecesCoreHeaders.js

@@ -14,6 +14,28 @@ const http_api_1 = require("@webpieces/http-api");
  * Pattern inspired by Java MicroSvcHeader enum.
  */
 class WebpiecesCoreHeaders {
+    /**
+     * Unique ID for this request.
+     * Generated by the server if not provided.
+     * Used for distributed tracing and log correlation.
+     */
+    static REQUEST_ID = new http_api_1.PlatformHeader('x-request-id', true, // transfer (propagate to downstream services)
+    false, // not secured (it's just an ID)
+    true // use for metrics dimensions
+    );
+    /**
+     * ID of the previous request in the call chain.
+     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.
+     * Used for building distributed trace trees.
+     */
+    static PREVIOUS_REQUEST_ID = new http_api_1.PlatformHeader('x-previous-request-id', true, false, false);
+    /**
+     * Correlation ID that spans multiple related requests.
+     * Typically set by the API gateway or first service in the chain.
+     * All services in the call chain use the same CORRELATION_ID.
+     */
+    static CORRELATION_ID = new http_api_1.PlatformHeader('x-correlation-id', true, false, true // use for metrics dimensions
+    );
     /**
      * Get all core headers as an array.
      * Used by WebpiecesModule to bind headers to DI container.
@@ -29,26 +51,4 @@ class WebpiecesCoreHeaders {
     }
 }
 exports.WebpiecesCoreHeaders = WebpiecesCoreHeaders;
-/**
- * Unique ID for this request.
- * Generated by the server if not provided.
- * Used for distributed tracing and log correlation.
- */
-WebpiecesCoreHeaders.REQUEST_ID = new http_api_1.PlatformHeader('x-request-id', true, // transfer (propagate to downstream services)
-false, // not secured (it's just an ID)
-true // use for metrics dimensions
-);
-/**
- * ID of the previous request in the call chain.
- * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.
- * Used for building distributed trace trees.
- */
-WebpiecesCoreHeaders.PREVIOUS_REQUEST_ID = new http_api_1.PlatformHeader('x-previous-request-id', true, false, false);
-/**
- * Correlation ID that spans multiple related requests.
- * Typically set by the API gateway or first service in the chain.
- * All services in the call chain use the same CORRELATION_ID.
- */
-WebpiecesCoreHeaders.CORRELATION_ID = new http_api_1.PlatformHeader('x-correlation-id', true, false, true // use for metrics dimensions
-);
 //# sourceMappingURL=WebpiecesCoreHeaders.js.map

package/src/headers/WebpiecesCoreHeaders.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesCoreHeaders.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/headers/WebpiecesCoreHeaders.ts"],"names":[],"mappings":";;;AAAA,kDAAqD;AAErD;;;;;;;;;;GAUG;AACH,MAAa,oBAAoB;IAqC7B;;;;;OAKG;IACH,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,oBAAoB,CAAC,UAAU;YAC/B,oBAAoB,CAAC,mBAAmB;YACxC,oBAAoB,CAAC,cAAc;SACtC,CAAC;IACN,CAAC;;AAjDL,oDAkDC;AAjDG;;;;GAIG;AACa,+BAAU,GAAG,IAAI,yBAAc,CAC3C,cAAc,EACd,IAAI,EAAG,8CAA8C;AACrD,KAAK,EAAE,gCAAgC;AACvC,IAAI,CAAG,6BAA6B;CACvC,CAAC;AAEF;;;;GAIG;AACa,wCAAmB,GAAG,IAAI,yBAAc,CACpD,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,KAAK,CACR,CAAC;AAEF;;;;GAIG;AACa,mCAAc,GAAG,IAAI,yBAAc,CAC/C,kBAAkB,EAClB,IAAI,EACJ,KAAK,EACL,IAAI,CAAG,6BAA6B;CACvC,CAAC","sourcesContent":["import { PlatformHeader } from '@webpieces/http-api';\n\n/**\n * Core framework headers for distributed tracing and request correlation.\n *\n * These are the minimal headers needed by the WebPieces framework for:\n * - Request tracking across services\n * - Distributed tracing\n * - Request correlation\n * - Metrics and monitoring\n *\n * Pattern inspired by Java MicroSvcHeader enum.\n */\nexport class WebpiecesCoreHeaders {\n    /**\n     * Unique ID for this request.\n     * Generated by the server if not provided.\n     * Used for distributed tracing and log correlation.\n     */\n    static readonly REQUEST_ID = new PlatformHeader(\n        'x-request-id',\n        true,  // transfer (propagate to downstream services)\n        false, // not secured (it's just an ID)\n        true   // use for metrics dimensions\n    );\n\n    /**\n     * ID of the previous request in the call chain.\n     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.\n     * Used for building distributed trace trees.\n     */\n    static readonly PREVIOUS_REQUEST_ID = new PlatformHeader(\n        'x-previous-request-id',\n        true,\n        false,\n        false\n    );\n\n    /**\n     * Correlation ID that spans multiple related requests.\n     * Typically set by the API gateway or first service in the chain.\n     * All services in the call chain use the same CORRELATION_ID.\n     */\n    static readonly CORRELATION_ID = new PlatformHeader(\n        'x-correlation-id',\n        true,\n        false,\n        true   // use for metrics dimensions\n    );\n\n    /**\n     * Get all core headers as an array.\n     * Used by WebpiecesModule to bind headers to DI container.\n     *\n     * @returns Array of all core platform headers\n     */\n    static getAllHeaders(): PlatformHeader[] {\n        return [\n            WebpiecesCoreHeaders.REQUEST_ID,\n            WebpiecesCoreHeaders.PREVIOUS_REQUEST_ID,\n            WebpiecesCoreHeaders.CORRELATION_ID,\n        ];\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesCoreHeaders.js","sourceRoot":"","sources":["../../../../../../packages/http/http-server/src/headers/WebpiecesCoreHeaders.ts"],"names":[],"mappings":";;;AAAA,kDAAqD;AAErD;;;;;;;;;;GAUG;AACH,MAAa,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAU,UAAU,GAAG,IAAI,yBAAc,CAC3C,cAAc,EACd,IAAI,EAAG,8CAA8C;IACrD,KAAK,EAAE,gCAAgC;IACvC,IAAI,CAAG,6BAA6B;KACvC,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAU,mBAAmB,GAAG,IAAI,yBAAc,CACpD,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,KAAK,CACR,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAU,cAAc,GAAG,IAAI,yBAAc,CAC/C,kBAAkB,EAClB,IAAI,EACJ,KAAK,EACL,IAAI,CAAG,6BAA6B;KACvC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,oBAAoB,CAAC,UAAU;YAC/B,oBAAoB,CAAC,mBAAmB;YACxC,oBAAoB,CAAC,cAAc;SACtC,CAAC;IACN,CAAC;;AAjDL,oDAkDC","sourcesContent":["import { PlatformHeader } from '@webpieces/http-api';\n\n/**\n * Core framework headers for distributed tracing and request correlation.\n *\n * These are the minimal headers needed by the WebPieces framework for:\n * - Request tracking across services\n * - Distributed tracing\n * - Request correlation\n * - Metrics and monitoring\n *\n * Pattern inspired by Java MicroSvcHeader enum.\n */\nexport class WebpiecesCoreHeaders {\n    /**\n     * Unique ID for this request.\n     * Generated by the server if not provided.\n     * Used for distributed tracing and log correlation.\n     */\n    static readonly REQUEST_ID = new PlatformHeader(\n        'x-request-id',\n        true,  // transfer (propagate to downstream services)\n        false, // not secured (it's just an ID)\n        true   // use for metrics dimensions\n    );\n\n    /**\n     * ID of the previous request in the call chain.\n     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.\n     * Used for building distributed trace trees.\n     */\n    static readonly PREVIOUS_REQUEST_ID = new PlatformHeader(\n        'x-previous-request-id',\n        true,\n        false,\n        false\n    );\n\n    /**\n     * Correlation ID that spans multiple related requests.\n     * Typically set by the API gateway or first service in the chain.\n     * All services in the call chain use the same CORRELATION_ID.\n     */\n    static readonly CORRELATION_ID = new PlatformHeader(\n        'x-correlation-id',\n        true,\n        false,\n        true   // use for metrics dimensions\n    );\n\n    /**\n     * Get all core headers as an array.\n     * Used by WebpiecesModule to bind headers to DI container.\n     *\n     * @returns Array of all core platform headers\n     */\n    static getAllHeaders(): PlatformHeader[] {\n        return [\n            WebpiecesCoreHeaders.REQUEST_ID,\n            WebpiecesCoreHeaders.PREVIOUS_REQUEST_ID,\n            WebpiecesCoreHeaders.CORRELATION_ID,\n        ];\n    }\n}\n"]}