@xeno-js/core 0.1.13 → 1.1.1

package/dist/index.cjs

@@ -68,15 +68,11 @@ var init_container_utils = __esm({
        * @throws Error If the service is not found in the container.
        * @throws Error If the service is not a scoped service.
        */
-      async runExecute(endpoint, method, headers, transport, container, action) {
+      async runExecute(res, req, container, action) {
         const middleware = container.resolve(import_shared.TOKENS.MIDDLEWARE);
-        return await middleware.execute(
-          { path: endpoint, method: method ?? "GET", transport },
-          { ...headers },
-          async () => {
-            return await action();
-          }
-        );
+        return await middleware.execute(req, res, async () => {
+          return await action();
+        });
       }
     });
   }
@@ -1024,7 +1020,6 @@ var init_gate_keeper = __esm({
           }
         }
         return import_shared27.Result.ok(guest);
-        return import_shared27.Result.ok(guest);
       }
     };
   }
@@ -1509,30 +1504,30 @@ var init_logger_utils = __esm({
        */
       async addLogger(container, opts) {
         const loggerDependencies = [];
-        const { Guards: Guards46, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts) || opts.console) {
+        const { Guards: Guards47, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts) || opts.console) {
           const { ConsoleLogger: ConsoleLogger2 } = await Promise.resolve().then(() => (init_console_logger(), console_logger_exports));
           loggerDependencies.push(new ConsoleLogger2(opts?.level));
         }
-        if (Guards46.isDefined(opts)) {
-          if (Guards46.isDefined(opts.sentry.config)) {
+        if (Guards47.isDefined(opts)) {
+          if (Guards47.isDefined(opts.sentry.config)) {
             const { SentryLoggerFactory: SentryLoggerFactory2 } = await Promise.resolve().then(() => (init_sentry_logger_factory(), sentry_logger_factory_exports));
             loggerDependencies.push(new SentryLoggerFactory2().create(opts));
           }
-          if (Guards46.isDefined(opts.pino.config)) {
+          if (Guards47.isDefined(opts.pino.config)) {
             const { PinoLoggerFactory: PinoLoggerFactory2 } = await Promise.resolve().then(() => (init_pino_logger_factory(), pino_logger_factory_exports));
             loggerDependencies.push(new PinoLoggerFactory2().create(opts));
           }
-          if (!Guards46.isNullOrEmpty(opts.customLoggers)) {
+          if (!Guards47.isNullOrEmpty(opts.customLoggers)) {
             const customLoggers = opts.customLoggers;
             customLoggers.forEach((fn) => {
-              if (Guards46.isDefined(fn)) loggerDependencies.push(fn(container));
+              if (Guards47.isDefined(fn)) loggerDependencies.push(fn(container));
             });
           }
         }
         const { BaseLogger } = await import("@xeno-js/shared");
-        container.addSingleton(TOKENS4.LOGGER, (c) => {
-          const context = c.resolve(TOKENS4.CONTEXT_ACCESSOR);
+        container.addSingleton(TOKENS5.LOGGER, (c) => {
+          const context = c.resolve(TOKENS5.CONTEXT_ACCESSOR);
           return new BaseLogger(context, opts?.level ?? LOG_LEVEL7.DEBUG, loggerDependencies);
         });
       }
@@ -1693,25 +1688,25 @@ var init_cache_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addCache(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!opts.inMemory && !Guards46.isDefined(opts.redis)) {
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
+        if (!opts.inMemory && !Guards47.isDefined(opts.redis)) {
           throw new Error(
             "No cache strategies are configured. Please provide at least one cache strategy."
           );
         }
         const { CacheKeyBuilder } = await import("@xeno-js/shared");
         container.addSingleton(
-          TOKENS4.CACHE_KEY_BUILDER,
-          (c) => new CacheKeyBuilder(c.resolve(TOKENS4.IDENTITY_ACCESSOR))
+          TOKENS5.CACHE_KEY_BUILDER,
+          (c) => new CacheKeyBuilder(c.resolve(TOKENS5.IDENTITY_ACCESSOR))
         );
-        if (opts.inMemory || !Guards46.isDefined(opts.redis)) {
+        if (opts.inMemory || !Guards47.isDefined(opts.redis)) {
           const { InMemoryCacheExtended: InMemoryCacheExtended2 } = await Promise.resolve().then(() => (init_inmemory_cache(), inmemory_cache_exports));
-          container.addSingleton(TOKENS4.CACHE, () => new InMemoryCacheExtended2());
+          container.addSingleton(TOKENS5.CACHE, () => new InMemoryCacheExtended2());
           return;
         }
-        if (Guards46.isDefined(opts.redis)) {
+        if (Guards47.isDefined(opts.redis)) {
           const { RedisCacheFactory: RedisCacheFactory2 } = await Promise.resolve().then(() => (init_redis_cache_factory(), redis_cache_factory_exports));
-          container.addSingleton(TOKENS4.CACHE, () => {
+          container.addSingleton(TOKENS5.CACHE, () => {
             const config = opts.redis;
             return new RedisCacheFactory2().create(config);
           });
@@ -1857,6 +1852,73 @@ var init_concurrency = __esm({
   }
 });
 
+// src/infrastructure/services/cookies/cookies.service.ts
+var import_shared44, CookieHandler;
+var init_cookies_service = __esm({
+  "src/infrastructure/services/cookies/cookies.service.ts"() {
+    "use strict";
+    import_shared44 = require("@xeno-js/shared");
+    CookieHandler = class {
+      constructor(contextAccessor, _config, _cookieOpts) {
+        this.contextAccessor = contextAccessor;
+        this._config = _config;
+        this._cookieOpts = _cookieOpts;
+      }
+      contextAccessor;
+      _config;
+      _cookieOpts;
+      getAll() {
+        const network = this.contextAccessor.getNetworkContext();
+        const req = network?.transport?.req;
+        if (!import_shared44.Guards.isDefined(req) || import_shared44.Guards.isNullOrEmpty(req.headers.get("cookie"))) return [];
+        return req.headers.get("cookie")?.split(";").map((cookie) => {
+          const [name, ...rest] = cookie.split("=");
+          return { name: name.trim(), value: rest.join("=") };
+        }) ?? [];
+      }
+      setAll(cookies) {
+        const network = this.contextAccessor.getNetworkContext();
+        const res = network?.transport?.res;
+        if (!import_shared44.Guards.isDefined(res)) return;
+        const serializedCookies = cookies.map((c) => this.serialize(c));
+        const existingSetCookie = res.headers.getSetCookie();
+        res.headers.delete("Set-Cookie");
+        for (const cookie of [...existingSetCookie, ...serializedCookies]) {
+          res.headers.append("Set-Cookie", cookie);
+        }
+      }
+      serialize(cookie) {
+        const safeName = encodeURIComponent(cookie.name);
+        const safeValue = encodeURIComponent(cookie.value);
+        let str = `${safeName}=${safeValue}`;
+        const isProd = this._config.get("NODE_ENV") === "production";
+        const defaultOptions = {
+          path: this._cookieOpts.path,
+          httpOnly: this._cookieOpts.httpOnly,
+          secure: this._cookieOpts.secure ?? isProd,
+          sameSite: this._cookieOpts.sameSite ?? "Lax"
+        };
+        const opts = { ...defaultOptions, ...cookie.options ?? {} };
+        str += `; Path=${opts.path}`;
+        if (import_shared44.Guards.isDefined(opts.maxAge)) str += `; Max-Age=${opts.maxAge}`;
+        if (import_shared44.Guards.isDefined(opts.domain)) str += `; Domain=${opts.domain}`;
+        if (import_shared44.Guards.isDefined(opts.sameSite)) str += `; SameSite=${opts.sameSite}`;
+        if (opts.secure) str += `; Secure`;
+        if (opts.httpOnly) str += `; HttpOnly`;
+        return str;
+      }
+    };
+  }
+});
+
+// src/infrastructure/services/cookies/index.ts
+var init_cookies = __esm({
+  "src/infrastructure/services/cookies/index.ts"() {
+    "use strict";
+    init_cookies_service();
+  }
+});
+
 // src/infrastructure/services/crypto/crypto.service.ts
 var EdgeCryptoService;
 var init_crypto_service = __esm({
@@ -1905,11 +1967,11 @@ var init_crypto = __esm({
 });
 
 // src/infrastructure/services/csrf/csrf-token.service.ts
-var import_shared44, CsrfTokenService;
+var import_shared45, CsrfTokenService;
 var init_csrf_token_service = __esm({
   "src/infrastructure/services/csrf/csrf-token.service.ts"() {
     "use strict";
-    import_shared44 = require("@xeno-js/shared");
+    import_shared45 = require("@xeno-js/shared");
     CsrfTokenService = class {
       constructor(_secret, _cryptoService) {
         this._secret = _secret;
@@ -1928,7 +1990,7 @@ var init_csrf_token_service = __esm({
         if (separatorIndex <= 0) return false;
         const nonce = token.slice(0, separatorIndex);
         const signature = token.slice(separatorIndex + 1);
-        if (import_shared44.Guards.isNullOrEmpty(nonce) || import_shared44.Guards.isNullOrEmpty(signature)) return false;
+        if (import_shared45.Guards.isNullOrEmpty(nonce) || import_shared45.Guards.isNullOrEmpty(signature)) return false;
         const expected = await this._cryptoService.hmacSha256(this._secret, `${subject}.${nonce}`);
         const encoder = new TextEncoder();
         const actualBuffer = encoder.encode(signature);
@@ -1949,24 +2011,26 @@ var init_csrf = __esm({
 });
 
 // src/infrastructure/services/extractors/extract-bearer.extractor.ts
-var import_shared45, BearerTokenExtractor;
+var import_shared46, BearerTokenExtractor;
 var init_extract_bearer_extractor = __esm({
   "src/infrastructure/services/extractors/extract-bearer.extractor.ts"() {
     "use strict";
-    import_shared45 = require("@xeno-js/shared");
+    import_shared46 = require("@xeno-js/shared");
     BearerTokenExtractor = class {
+      constructor(_cookiePrefix) {
+        this._cookiePrefix = _cookiePrefix;
+      }
+      _cookiePrefix;
       extract(headers) {
-        const authHeader = import_shared45.StringHelper.getSingleValue(headers["authorization"]);
-        if (!import_shared45.Guards.isDefined(authHeader)) {
-          return void 0;
-        }
-        if (authHeader.toLowerCase().startsWith("bearer ")) {
+        const authHeader = headers.get("Authorization");
+        if (import_shared46.Guards.isDefined(authHeader) && authHeader.toLowerCase().startsWith("bearer ")) {
           return authHeader.substring(7);
         }
-        const cookieHeader = import_shared45.StringHelper.getSingleValue(headers["cookie"]);
-        if (import_shared45.Guards.isDefined(cookieHeader)) {
-          const match = /sb-access-token=([^;]+)/.exec(cookieHeader);
-          if (!import_shared45.Guards.isNullOrEmpty(match) && import_shared45.Guards.isDefined(match[1])) {
+        const cookieHeader = headers.get("cookie");
+        if (import_shared46.Guards.isDefined(cookieHeader)) {
+          const regex = new RegExp(`${this._cookiePrefix}=([^;]+)`);
+          const match = regex.exec(cookieHeader);
+          if (!import_shared46.Guards.isNullOrEmpty(match) && import_shared46.Guards.isDefined(match[1])) {
             return match[1].trim();
           }
         }
@@ -1977,44 +2041,44 @@ var init_extract_bearer_extractor = __esm({
 });
 
 // src/infrastructure/services/extractors/extract-ssr-bearer.extractor.ts
-var import_shared46, SupabaseSsrTokenExtractor;
+var import_shared47, SupabaseSsrTokenExtractor;
 var init_extract_ssr_bearer_extractor = __esm({
   "src/infrastructure/services/extractors/extract-ssr-bearer.extractor.ts"() {
     "use strict";
-    import_shared46 = require("@xeno-js/shared");
+    import_shared47 = require("@xeno-js/shared");
     SupabaseSsrTokenExtractor = class {
       extract(headers) {
-        const authHeader = import_shared46.StringHelper.getSingleValue(headers["authorization"]);
-        if (import_shared46.Guards.isDefined(authHeader) && authHeader.toLowerCase().startsWith("bearer ")) {
+        const authHeader = headers.get("authorization");
+        if (import_shared47.Guards.isDefined(authHeader) && authHeader.toLowerCase().startsWith("bearer ")) {
           return authHeader.substring(7);
         }
-        const cookieHeader = import_shared46.StringHelper.getSingleValue(headers["cookie"]);
-        if (import_shared46.Guards.isNullOrEmpty(cookieHeader)) return void 0;
+        const cookieHeader = headers.get("cookie");
+        if (import_shared47.Guards.isNullOrEmpty(cookieHeader)) return void 0;
         const cookies = cookieHeader.split(";").map((c) => c.trim());
         const tokenChunks = {};
         let unchunkedToken;
         for (const cookie of cookies) {
           const [name, ...rest] = cookie.split("=");
-          if (!import_shared46.Guards.isDefined(name) || import_shared46.Guards.isNullOrEmpty(rest)) continue;
+          if (!import_shared47.Guards.isDefined(name) || import_shared47.Guards.isNullOrEmpty(rest)) continue;
           const value = decodeURIComponent(rest.join("="));
-          if (import_shared46.Guards.isDefined(/^sb-[a-z0-9]+-auth-token$/.exec(name))) {
+          if (import_shared47.Guards.isDefined(/^sb-[a-z0-9]+-auth-token$/.exec(name))) {
             unchunkedToken = value;
           } else {
             const match = /^sb-[a-z0-9]+-auth-token\.(\d+)$/.exec(name);
-            if (import_shared46.Guards.isDefined(match)) tokenChunks[parseInt(match[1], 10)] = value;
+            if (import_shared47.Guards.isDefined(match)) tokenChunks[parseInt(match[1], 10)] = value;
           }
         }
         let fullTokenString = unchunkedToken;
-        if (!import_shared46.Guards.isDefined(fullTokenString) && Object.keys(tokenChunks).length > 0) {
+        if (!import_shared47.Guards.isDefined(fullTokenString) && Object.keys(tokenChunks).length > 0) {
           const indices = Object.keys(tokenChunks).map(Number).sort((a, b) => a - b);
           fullTokenString = indices.map((i) => tokenChunks[i]).join("");
         }
-        if (import_shared46.Guards.isNullOrEmpty(fullTokenString)) return void 0;
+        if (import_shared47.Guards.isNullOrEmpty(fullTokenString)) return void 0;
         try {
-          const parsed = import_shared46.StringHelper.safeParse(fullTokenString);
-          if (import_shared46.Guards.isDefined(parsed) && import_shared46.Guards.isObject(parsed) && "access_token" in parsed) {
+          const parsed = import_shared47.StringHelper.safeParse(fullTokenString);
+          if (import_shared47.Guards.isDefined(parsed) && import_shared47.Guards.isObject(parsed) && "access_token" in parsed) {
             const accessToken = parsed["access_token"];
-            if (import_shared46.Guards.isString(accessToken)) return accessToken;
+            if (import_shared47.Guards.isString(accessToken)) return accessToken;
           }
         } catch {
           return void 0;
@@ -2025,14 +2089,14 @@ var init_extract_ssr_bearer_extractor = __esm({
 });
 
 // src/infrastructure/services/extractors/http-cookie.extractor.ts
-var import_shared47, HttpCookieExtractor;
+var import_shared48, HttpCookieExtractor;
 var init_http_cookie_extractor = __esm({
   "src/infrastructure/services/extractors/http-cookie.extractor.ts"() {
     "use strict";
-    import_shared47 = require("@xeno-js/shared");
+    import_shared48 = require("@xeno-js/shared");
     HttpCookieExtractor = class {
       extract(cookie) {
-        if (!import_shared47.Guards.isDefined(cookie.header)) return void 0;
+        if (!import_shared48.Guards.isDefined(cookie.header)) return void 0;
         for (const rawCookie of cookie.header.split(";")) {
           const separatorIndex = rawCookie.indexOf("=");
           if (separatorIndex <= 0) continue;
@@ -2052,11 +2116,11 @@ var init_http_cookie_extractor = __esm({
 });
 
 // src/infrastructure/services/extractors/http-header.extractor.ts
-var import_shared48, HttpHeaderExtractor;
+var import_shared49, HttpHeaderExtractor;
 var init_http_header_extractor = __esm({
   "src/infrastructure/services/extractors/http-header.extractor.ts"() {
     "use strict";
-    import_shared48 = require("@xeno-js/shared");
+    import_shared49 = require("@xeno-js/shared");
     HttpHeaderExtractor = class {
       /**
        * @description Constructor for HttpHeaderExtractor. It takes an instance of IServiceExtractor for extracting Bearer tokens, allowing for separation of concerns and adherence to the Single Responsibility Principle (SRP). This design enables the HttpHeaderExtractor to focus on general header extraction while delegating the specific logic of Bearer token extraction to a dedicated extractor, promoting code reusability and maintainability.
@@ -2078,30 +2142,30 @@ var init_http_header_extractor = __esm({
       _trustedIp;
       _cookieName;
       extract(headers) {
-        const correlationId = import_shared48.GuidHelper.parse(import_shared48.StringHelper.getSingleValue(headers["x-correlation-id"]));
-        const requestId = import_shared48.GuidHelper.parse(import_shared48.StringHelper.getSingleValue(headers["x-request-id"]));
+        const correlationId = import_shared49.GuidHelper.parse(headers.get("x-correlation-id") ?? void 0);
+        const requestId = import_shared49.GuidHelper.parse(headers.get("x-request-id") ?? void 0);
         const token = this._bearerExtractor.extract(headers);
-        const clientIp = import_shared48.StringHelper.getSingleValue(headers[this._trustedIp?.toLowerCase() ?? "x-forwarded-for"]) ?? import_shared48.StringHelper.getSingleValue(headers["x-real-ip"]);
-        const spanId = import_shared48.GuidHelper.parse(import_shared48.StringHelper.getSingleValue(headers["x-span-id"]));
-        const parentSpanId = import_shared48.StringHelper.getSingleValue(headers["x-parent-span-id"]);
-        const acceptHeader = import_shared48.StringHelper.getSingleValue(headers["accept"]);
-        const contentTypeHeader = import_shared48.StringHelper.getSingleValue(headers["content-type"]);
-        const userAgent = import_shared48.StringHelper.getSingleValue(headers["user-agent"]);
-        const returnAddress = import_shared48.StringHelper.getSingleValue(headers["x-return-address"]);
-        const sequenceId = import_shared48.StringHelper.getSingleValue(headers["x-sequence-id"]);
-        const position = import_shared48.StringHelper.getSingleValue(headers["x-sequence-position"]);
-        const size = import_shared48.StringHelper.getSingleValue(headers["x-sequence-size"]);
-        const expiration = import_shared48.StringHelper.getSingleValue(headers["x-expiration"]);
-        const csrf = import_shared48.StringHelper.getSingleValue(headers["x-csrf-token"]);
-        const cookieHeader = import_shared48.StringHelper.getSingleValue(headers["cookie"]);
+        const clientIp = headers.get(this._trustedIp?.toLowerCase() ?? "x-forwarded-for") ?? headers.get("x-real-ip") ?? void 0;
+        const spanId = import_shared49.GuidHelper.parse(headers.get("x-span-id") ?? void 0);
+        const parentSpanId = headers.get("x-parent-span-id") ?? void 0;
+        const acceptHeader = headers.get("accept");
+        const contentTypeHeader = headers.get("content-type");
+        const userAgent = headers.get("user-agent") ?? void 0;
+        const returnAddress = headers.get("x-return-address") ?? void 0;
+        const sequenceId = headers.get("x-sequence-id") ?? void 0;
+        const position = headers.get("x-sequence-position");
+        const size = headers.get("x-sequence-size");
+        const expiration = headers.get("x-expiration");
+        const csrf = headers.get("x-csrf-token") ?? void 0;
+        const cookieHeader = headers.get("cookie") ?? void 0;
         const csrfCookie = this._cookieExtractor.extract({
           header: cookieHeader,
           name: this._cookieName
         });
-        const origin = import_shared48.StringHelper.getSingleValue(headers["origin"]);
-        const cleanOrigin = import_shared48.HttpHelper.sanitizeOriginUrl(origin);
-        const referer = import_shared48.StringHelper.getSingleValue(headers["referer"]);
-        const cleanReferer = import_shared48.HttpHelper.sanitizeOriginUrl(referer);
+        const origin = headers.get("origin") ?? void 0;
+        const cleanOrigin = import_shared49.HttpHelper.sanitizeOriginUrl(origin);
+        const referer = headers.get("referer") ?? void 0;
+        const cleanReferer = import_shared49.HttpHelper.sanitizeOriginUrl(referer);
         const accept = acceptHeader === "*/*" ? void 0 : acceptHeader;
         const formatIndicator = accept ?? contentTypeHeader ?? "application/json";
         const metadata = {
@@ -2120,10 +2184,10 @@ var init_http_header_extractor = __esm({
           referer: cleanReferer,
           sequence: {
             sequenceId,
-            position: import_shared48.Guards.isDefined(position) ? import_shared48.MathHelper.toNumber(position) : void 0,
-            size: import_shared48.Guards.isDefined(size) ? import_shared48.MathHelper.toNumber(size) : void 0
+            position: import_shared49.Guards.isDefined(position) ? import_shared49.MathHelper.toNumber(position) : void 0,
+            size: import_shared49.Guards.isDefined(size) ? import_shared49.MathHelper.toNumber(size) : void 0
           },
-          expiration: import_shared48.Guards.isDefined(expiration) ? import_shared48.MathHelper.toNumber(expiration) : void 0
+          expiration: import_shared49.Guards.isDefined(expiration) ? import_shared49.MathHelper.toNumber(expiration) : void 0
         };
         return metadata;
       }
@@ -2143,18 +2207,18 @@ var init_extractors = __esm({
 });
 
 // src/infrastructure/services/resiliences/resilience.service.ts
-var import_shared49, ServiceResilience;
+var import_shared50, ServiceResilience;
 var init_resilience_service = __esm({
   "src/infrastructure/services/resiliences/resilience.service.ts"() {
     "use strict";
-    import_shared49 = require("@xeno-js/shared");
+    import_shared50 = require("@xeno-js/shared");
     ServiceResilience = class {
       constructor(policy) {
         this.policy = policy;
       }
       policy;
       async execute(operation, signal) {
-        import_shared49.AppError.throwIfAborted(signal, "ServiceResilience.execute");
+        import_shared50.AppError.throwIfAborted(signal, "ServiceResilience.execute");
         return this.policy.execute(() => operation(), signal);
       }
     };
@@ -2170,11 +2234,11 @@ var init_resiliences = __esm({
 });
 
 // src/infrastructure/services/resolver/utils/socket.utils.ts
-var import_shared50, SocketIpExtractor;
+var import_shared51, SocketIpExtractor;
 var init_socket_utils = __esm({
   "src/infrastructure/services/resolver/utils/socket.utils.ts"() {
     "use strict";
-    import_shared50 = require("@xeno-js/shared");
+    import_shared51 = require("@xeno-js/shared");
     SocketIpExtractor = Object.freeze({
       /**
        * @description Extracts the IP address of the remote socket from an incoming request.
@@ -2182,7 +2246,7 @@ var init_socket_utils = __esm({
        * @returns The IP address of the remote socket, or undefined if not available.
        */
       extract(req) {
-        if (import_shared50.Guards.isDefined(req) && import_shared50.Guards.isObject(req)) {
+        if (import_shared51.Guards.isDefined(req) && import_shared51.Guards.isObject(req)) {
           const candidate = req;
           return candidate.socket?.remoteAddress ?? candidate.connection?.remoteAddress;
         }
@@ -2201,11 +2265,11 @@ var init_utils = __esm({
 });
 
 // src/infrastructure/services/resolver/client-ip.resolver.ts
-var import_shared51, ClientIpResolver;
+var import_shared52, ClientIpResolver;
 var init_client_ip_resolver = __esm({
   "src/infrastructure/services/resolver/client-ip.resolver.ts"() {
     "use strict";
-    import_shared51 = require("@xeno-js/shared");
+    import_shared52 = require("@xeno-js/shared");
     init_utils();
     ClientIpResolver = class {
       constructor(_trustedProxies = []) {
@@ -2214,11 +2278,11 @@ var init_client_ip_resolver = __esm({
       _trustedProxies;
       resolve(req, clientIp) {
         const socketIp = SocketIpExtractor.extract(req);
-        if (!import_shared51.Guards.isDefined(socketIp))
-          return !import_shared51.Guards.isNullOrEmpty(clientIp) ? clientIp.split(",")[0].trim() : void 0;
+        if (!import_shared52.Guards.isDefined(socketIp))
+          return !import_shared52.Guards.isNullOrEmpty(clientIp) ? clientIp.split(",")[0].trim() : void 0;
         const isTrustedProxy = this._trustedProxies.includes(socketIp);
         if (!isTrustedProxy) return socketIp;
-        if (import_shared51.Guards.isDefined(clientIp)) return clientIp.split(",")[0].trim();
+        if (import_shared52.Guards.isDefined(clientIp)) return clientIp.split(",")[0].trim();
         return socketIp;
       }
     };
@@ -2240,6 +2304,7 @@ __export(services_exports, {
   AllowOrigin: () => AllowOrigin,
   BearerTokenExtractor: () => BearerTokenExtractor,
   ClientIpResolver: () => ClientIpResolver,
+  CookieHandler: () => CookieHandler,
   CsrfTokenService: () => CsrfTokenService,
   EdgeCryptoService: () => EdgeCryptoService,
   HttpCookieExtractor: () => HttpCookieExtractor,
@@ -2254,6 +2319,7 @@ var init_services = __esm({
     init_allow_methods();
     init_allow_origins();
     init_concurrency();
+    init_cookies();
     init_crypto();
     init_csrf();
     init_extractors();
@@ -2281,15 +2347,15 @@ var init_allow_method_factory = __esm({
 });
 
 // src/infrastructure/factories/axios.factory.ts
-var import_node_http, import_node_https, import_shared52, import_axios, NodeAxiosFactory;
+var import_node_http, import_node_https, import_shared53, import_axios, NodeAxiosFactory;
 var init_axios_factory = __esm({
   "src/infrastructure/factories/axios.factory.ts"() {
     "use strict";
     import_node_http = __toESM(require("http"), 1);
     import_node_https = __toESM(require("https"), 1);
-    import_shared52 = require("@xeno-js/shared");
+    import_shared53 = require("@xeno-js/shared");
     import_axios = __toESM(require("axios"), 1);
-    NodeAxiosFactory = class extends import_shared52.AxiosFactory {
+    NodeAxiosFactory = class {
       create(config) {
         const isKeepAlive = config.keepAlive ?? true;
         const maxSockets = config.maxSockets ?? 100;
@@ -2314,18 +2380,18 @@ var init_axios_factory = __esm({
           proxy: config.proxy,
           withCredentials: config.withCredentials
         });
-        return new import_shared52.AxiosHttpClient(axiosInstance);
+        return new import_shared53.AxiosHttpClient(axiosInstance);
       }
     };
   }
 });
 
 // src/infrastructure/factories/cockatiel-resilience.factory.ts
-var import_shared53, import_cockatiel, CockatielResilienceFactory;
+var import_shared54, import_cockatiel, CockatielResilienceFactory;
 var init_cockatiel_resilience_factory = __esm({
   "src/infrastructure/factories/cockatiel-resilience.factory.ts"() {
     "use strict";
-    import_shared53 = require("@xeno-js/shared");
+    import_shared54 = require("@xeno-js/shared");
     import_cockatiel = require("cockatiel");
     init_resilience_service();
     CockatielResilienceFactory = class {
@@ -2335,36 +2401,36 @@ var init_cockatiel_resilience_factory = __esm({
           retry: {
             attempts: this.checkConfigValue(
               config.retry.attempts,
-              import_shared53.RESILIENCE_DEFAULTS.RETRY.ATTEMPTS,
+              import_shared54.RESILIENCE_DEFAULTS.RETRY.ATTEMPTS,
               message
             ),
             baseDelayMs: this.checkConfigValue(
               config.retry.baseDelayMs,
-              import_shared53.RESILIENCE_DEFAULTS.RETRY.BASE_DELAY_MS,
+              import_shared54.RESILIENCE_DEFAULTS.RETRY.BASE_DELAY_MS,
               message
             ),
             maxDelayMs: this.checkConfigValue(
               config.retry.maxDelayMs,
-              import_shared53.RESILIENCE_DEFAULTS.RETRY.MAX_DELAY_MS,
+              import_shared54.RESILIENCE_DEFAULTS.RETRY.MAX_DELAY_MS,
               message
             )
           },
           circuitBreaker: {
             consecutiveFailures: this.checkConfigValue(
               config.circuitBreaker.consecutiveFailures,
-              import_shared53.RESILIENCE_DEFAULTS.CIRCUIT_BREAKER.CONSECUTIVE_FAILURES,
+              import_shared54.RESILIENCE_DEFAULTS.CIRCUIT_BREAKER.CONSECUTIVE_FAILURES,
               message
             ),
             halfOpenTimeoutMs: this.checkConfigValue(
               config.circuitBreaker.halfOpenTimeoutMs,
-              import_shared53.RESILIENCE_DEFAULTS.CIRCUIT_BREAKER.HALF_OPEN_TIMEOUT_MS,
+              import_shared54.RESILIENCE_DEFAULTS.CIRCUIT_BREAKER.HALF_OPEN_TIMEOUT_MS,
               message
             )
           },
           bulkhead: {
             maxConcurrent: this.checkConfigValue(
               config.bulkhead.maxConcurrent,
-              import_shared53.RESILIENCE_DEFAULTS.BULKHEAD.MAX_CONCURRENT,
+              import_shared54.RESILIENCE_DEFAULTS.BULKHEAD.MAX_CONCURRENT,
               message
             )
           }
@@ -2390,13 +2456,13 @@ var init_cockatiel_resilience_factory = __esm({
         return new ServiceResilience((0, import_cockatiel.wrap)(bulkheadPolicy, circuitBreakerPolicy, retryPolicy));
       }
       isTransientError(error) {
-        if (!import_shared53.Guards.isDefined(error) || !import_shared53.Guards.isObject(error)) return false;
+        if (!import_shared54.Guards.isDefined(error) || !import_shared54.Guards.isObject(error)) return false;
         let status;
         let isNetworkError = false;
-        if (error instanceof import_shared53.AppError) {
+        if (error instanceof import_shared54.AppError) {
           status = error.status;
           const cause = error.cause;
-          if (import_shared53.Guards.isDefined(cause) && import_shared53.Guards.isString(cause.code)) {
+          if (import_shared54.Guards.isDefined(cause) && import_shared54.Guards.isString(cause.code)) {
             isNetworkError = [
               "ECONNABORTED",
               "ECONNRESET",
@@ -2408,7 +2474,7 @@ var init_cockatiel_resilience_factory = __esm({
         } else {
           const err = error;
           status = err.status;
-          if (import_shared53.Guards.isString(err.code)) {
+          if (import_shared54.Guards.isString(err.code)) {
             isNetworkError = [
               "ECONNABORTED",
               "ECONNRESET",
@@ -2419,30 +2485,30 @@ var init_cockatiel_resilience_factory = __esm({
           }
         }
         if (isNetworkError) return true;
-        if (import_shared53.Guards.isDefined(status)) return status === 408 || status >= 500 && status < 600;
+        if (import_shared54.Guards.isDefined(status)) return status === 408 || status >= 500 && status < 600;
         return false;
       }
       isTransientAndIdempotent(error) {
         if (!this.isTransientError(error)) return false;
         let method;
-        if (error instanceof import_shared53.AppError) {
+        if (error instanceof import_shared54.AppError) {
           const cause = error.cause;
-          if (import_shared53.Guards.isDefined(cause) && import_shared53.Guards.isDefined(cause.config) && import_shared53.Guards.isString(cause.config.method)) {
+          if (import_shared54.Guards.isDefined(cause) && import_shared54.Guards.isDefined(cause.config) && import_shared54.Guards.isString(cause.config.method)) {
             method = cause.config.method.toUpperCase();
           }
         } else {
           const err = error;
-          if (import_shared53.Guards.isDefined(err.config) && import_shared53.Guards.isString(err.config.method)) {
+          if (import_shared54.Guards.isDefined(err.config) && import_shared54.Guards.isString(err.config.method)) {
             method = err.config.method.toUpperCase();
           }
         }
-        if (import_shared53.Guards.isNullOrEmpty(method)) return false;
+        if (import_shared54.Guards.isNullOrEmpty(method)) return false;
         const idempotentMethods = ["GET", "PUT", "DELETE", "HEAD", "OPTIONS"];
         return idempotentMethods.includes(method);
       }
       checkConfigValue(value, defaultValue, message) {
-        if (import_shared53.Guards.isDefined(value)) {
-          import_shared53.Guards.throwIfNegative(value, message);
+        if (import_shared54.Guards.isDefined(value)) {
+          import_shared54.Guards.throwIfNegative(value, message);
           return value;
         }
         return defaultValue;
@@ -2474,11 +2540,11 @@ var init_db_client_factory = __esm({
 });
 
 // src/infrastructure/context/request-context.ts
-var import_shared54, NodeRequestContext;
+var import_shared55, NodeRequestContext;
 var init_request_context = __esm({
   "src/infrastructure/context/request-context.ts"() {
     "use strict";
-    import_shared54 = require("@xeno-js/shared");
+    import_shared55 = require("@xeno-js/shared");
     NodeRequestContext = class {
       /**
        * @description Constructs a new instance of the NodeRequestContext class, which requires an instance of AsyncLocalStorage to manage the request context. The AsyncLocalStorage instance is used to create and access the context for each request, allowing for the storage of identity information and other relevant data that needs to be accessible across asynchronous operations. This constructor initializes the NodeRequestContext with the provided AsyncLocalStorage, enabling it to implement the methods defined in the IRequestContext interface for managing request-specific context data.
@@ -2506,7 +2572,7 @@ var init_request_context = __esm({
       }
       updateIdentity(identity) {
         const store = this._storage.getStore();
-        if (import_shared54.Guards.isDefined(store) && import_shared54.Guards.isDefined(store.context)) {
+        if (import_shared55.Guards.isDefined(store) && import_shared55.Guards.isDefined(store.context)) {
           store.context = Object.freeze({
             ...store.context,
             identity: Object.freeze(identity)
@@ -2515,23 +2581,23 @@ var init_request_context = __esm({
       }
       getContext() {
         const store = this._storage.getStore();
-        if (!import_shared54.Guards.isDefined(store)) return void 0;
+        if (!import_shared55.Guards.isDefined(store)) return void 0;
         const context = store.context;
         return Object.freeze(context);
       }
       getIdentity() {
         const store = this._storage.getStore();
-        if (!import_shared54.Guards.isDefined(store)) return void 0;
+        if (!import_shared55.Guards.isDefined(store)) return void 0;
         return Object.freeze(store.context?.identity);
       }
       getScope() {
         const store = this._storage.getStore();
-        if (!import_shared54.Guards.isDefined(store)) return void 0;
+        if (!import_shared55.Guards.isDefined(store)) return void 0;
         return store.scope;
       }
       getNetworkContext() {
         const store = this._storage.getStore();
-        if (!import_shared54.Guards.isDefined(store)) return void 0;
+        if (!import_shared55.Guards.isDefined(store)) return void 0;
         return Object.freeze(store.context?.network);
       }
     };
@@ -2604,37 +2670,37 @@ var init_sql_light_db_client_factory = __esm({
 });
 
 // src/infrastructure/factories/supabase.factory.ts
-var import_ssr, import_shared55, SupabaseServerAuthFactory;
+var import_ssr, import_shared56, SupabaseServerAuthFactory;
 var init_supabase_factory = __esm({
   "src/infrastructure/factories/supabase.factory.ts"() {
     "use strict";
     import_ssr = require("@supabase/ssr");
-    import_shared55 = require("@xeno-js/shared");
+    import_shared56 = require("@xeno-js/shared");
+    init_services();
     SupabaseServerAuthFactory = class {
       create({
         config,
         container
       }) {
-        if (!import_shared55.Guards.isDefined(config.ssrOpts)) {
-          throw new Error(
-            "ISsrCookieHandler is required for @supabase/ssr initialization., Please provide it in the config object."
-          );
-        }
-        const cookieService = config.ssrOpts(container);
+        const cookieService = this._getCookieSsr(config.ssrOpts, container, config.cookieOpts);
         const client = (0, import_ssr.createServerClient)(config.url, config.key, {
           ...config.opts,
-          cookies: {
-            getAll() {
-              return cookieService.getAll();
-            },
-            setAll(cookiesToSet) {
-              cookieService.setAll(cookiesToSet);
-            }
-          }
+          cookies: cookieService
         });
-        const mapper = new import_shared55.SupabaseClaimsMapper();
-        const sessionMapper = new import_shared55.SupabaseSessionMapper(mapper);
-        return new import_shared55.SupabaseAuthService(client, mapper, sessionMapper, config);
+        const mapper = new import_shared56.SupabaseClaimsMapper();
+        const sessionMapper = new import_shared56.SupabaseSessionMapper(mapper);
+        return new import_shared56.SupabaseAuthService(client, mapper, sessionMapper, config);
+      }
+      _getCookieSsr(ssrOpts, container, config) {
+        if (import_shared56.Guards.isDefined(ssrOpts)) {
+          return ssrOpts(container);
+        } else {
+          return new CookieHandler(
+            container.resolve(import_shared56.TOKENS.REQUEST_CONTEXT),
+            container.resolve(import_shared56.TOKENS.CONFIGURATION_SERVICE),
+            config
+          );
+        }
       }
     };
   }
@@ -2645,11 +2711,11 @@ var user_context_factory_exports = {};
 __export(user_context_factory_exports, {
   UserContextFactory: () => UserContextFactory
 });
-var import_shared56, UserContextFactory;
+var import_shared57, UserContextFactory;
 var init_user_context_factory = __esm({
   "src/infrastructure/factories/user-context.factory.ts"() {
     "use strict";
-    import_shared56 = require("@xeno-js/shared");
+    import_shared57 = require("@xeno-js/shared");
     UserContextFactory = class {
       /**
        * @description Constructs an instance of UserContextFactory.
@@ -2670,7 +2736,7 @@ var init_user_context_factory = __esm({
           tenantId: void 0
         };
         const identity = this._identityFactory.getIdentity();
-        if (import_shared56.Guards.isDefined(identity)) {
+        if (import_shared57.Guards.isDefined(identity)) {
           output.userId = identity.userId;
           output.tenantId = identity.tenantId;
         }
@@ -2681,14 +2747,14 @@ var init_user_context_factory = __esm({
 });
 
 // src/infrastructure/factories/zod-validator.factory.ts
-var import_shared57, ZodValidatorFactory;
+var import_shared58, ZodValidatorFactory;
 var init_zod_validator_factory = __esm({
   "src/infrastructure/factories/zod-validator.factory.ts"() {
     "use strict";
-    import_shared57 = require("@xeno-js/shared");
+    import_shared58 = require("@xeno-js/shared");
     ZodValidatorFactory = class {
       create(opts) {
-        const validatorService = new import_shared57.ZodValidatorService(/* @__PURE__ */ new Map(), opts.logger);
+        const validatorService = new import_shared58.ZodValidatorService(/* @__PURE__ */ new Map(), opts.logger);
         for (const [intentKey, schema] of Object.entries(opts.schemas)) {
           validatorService.addSchema(intentKey, schema);
         }
@@ -2756,28 +2822,28 @@ var init_auth_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js 
        */
       async addAuthZ(container, opts) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const strategies = [];
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (Guards46.isDefined(opts.policies)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.policies)) {
           const { PolicyRegistry: PolicyRegistry2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           const policyRegistry = opts.policies;
           const registryInstance = new PolicyRegistry2();
-          const ctxAccessor = container.resolve(TOKENS4.CONTEXT_ACCESSOR);
+          const ctxAccessor = container.resolve(TOKENS5.CONTEXT_ACCESSOR);
           const Policies = /* @__PURE__ */ new Set();
           for (const [intent, policy] of Object.entries(policyRegistry)) {
             const intentLower = intent.toLowerCase();
             registryInstance.addPolicy(intentLower, policy);
-            if (!Guards46.isNullOrEmpty(policy.roles)) {
+            if (!Guards47.isNullOrEmpty(policy.roles)) {
               Policies.add("roles");
             }
-            if (!Guards46.isNullOrEmpty(policy.permissions)) {
+            if (!Guards47.isNullOrEmpty(policy.permissions)) {
               Policies.add("permissions");
             }
-            if (!Guards46.isNullOrEmpty(policy.userId)) {
+            if (!Guards47.isNullOrEmpty(policy.userId)) {
               Policies.add("userId");
             }
-            if (!Guards46.isNullOrEmpty(policy.tenantId)) {
+            if (!Guards47.isNullOrEmpty(policy.tenantId)) {
               Policies.add("tenantId");
             }
           }
@@ -2798,10 +2864,10 @@ var init_auth_utils = __esm({
             strategies.push(new TenantAuthorizationStrategy2(registryInstance, ctxAccessor));
           }
         }
-        if (!Guards46.isNullOrEmpty(opts.customAuthorizationStrategy)) {
+        if (!Guards47.isNullOrEmpty(opts.customAuthorizationStrategy)) {
           const customStrategies = opts.customAuthorizationStrategy;
           customStrategies.forEach((strategyToken) => {
-            if (Guards46.isDefined(strategyToken)) {
+            if (Guards47.isDefined(strategyToken)) {
               strategies.push(strategyToken(container));
             }
           });
@@ -2821,17 +2887,26 @@ var init_auth_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js 
        */
       async addAuthN(container, opts) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        const _t = opts;
-        const { SupabaseServerAuthFactory: SupabaseServerAuthFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        const factory = new SupabaseServerAuthFactory2();
-        const supabase = factory.create({ config: opts, container });
-        container.addScoped(TOKENS4.AUTH_SERVICE, () => {
-          return supabase;
-        });
-        container.addSingleton(TOKENS4.BASE_AUTH_SERVICE, () => {
-          return supabase;
-        });
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.customAuth)) {
+          const authService = opts.customAuth.authExtendedService();
+          container.addScoped(TOKENS5.AUTH_SERVICE, () => {
+            return authService;
+          });
+          container.addSingleton(TOKENS5.BASE_AUTH_SERVICE, () => {
+            return authService;
+          });
+        } else {
+          const { SupabaseServerAuthFactory: SupabaseServerAuthFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
+          const factory = new SupabaseServerAuthFactory2();
+          const supabase = factory.create({ config: opts, container });
+          container.addScoped(TOKENS5.AUTH_SERVICE, () => {
+            return supabase;
+          });
+          container.addSingleton(TOKENS5.BASE_AUTH_SERVICE, () => {
+            return supabase;
+          });
+        }
       }
     });
   }
@@ -2923,12 +2998,12 @@ var unit_of_work_exports = {};
 __export(unit_of_work_exports, {
   UnitOfWork: () => UnitOfWork
 });
-var import_shared58, import_shared59, UnitOfWork;
+var import_shared59, import_shared60, UnitOfWork;
 var init_unit_of_work = __esm({
   "src/infrastructure/transaction/unit-of-work.ts"() {
     "use strict";
-    import_shared58 = require("@xeno-js/shared");
     import_shared59 = require("@xeno-js/shared");
+    import_shared60 = require("@xeno-js/shared");
     UnitOfWork = class {
       /**
        * Creates an instance of UnitOfWork.
@@ -2947,7 +3022,7 @@ var init_unit_of_work = __esm({
       _dbContext;
       _ttx;
       async runInTransaction(callback, signal) {
-        import_shared58.AppError.throwIfAborted(signal, "UnitOfWork.runInTransaction");
+        import_shared59.AppError.throwIfAborted(signal, "UnitOfWork.runInTransaction");
         return this._dbContext.transaction(async (tx) => {
           this._ttx.state = tx;
           try {
@@ -2959,9 +3034,9 @@ var init_unit_of_work = __esm({
         });
       }
       async dispose() {
-        if (import_shared59.Guards.isDefined(this._ttx.state)) {
+        if (import_shared60.Guards.isDefined(this._ttx.state)) {
           try {
-            if (import_shared59.Guards.hasMethod(this._ttx.state, "rollback")) {
+            if (import_shared60.Guards.hasMethod(this._ttx.state, "rollback")) {
               await this._ttx.state.rollback();
             }
           } finally {
@@ -2984,7 +3059,7 @@ var init_db_module = __esm({
     "use strict";
     DbModule = class {
       async configure(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const { DbUtils: DbUtils2 } = await Promise.resolve().then(() => (init_db_utils(), db_utils_exports));
         const db = opts.enableSqlLite ? await DbUtils2.addSqlLite(opts) : await DbUtils2.addDbClient(opts);
         const { TransactionState: TransactionState2 } = await Promise.resolve().then(() => (init_transaction_state(), transaction_state_exports));
@@ -2992,16 +3067,16 @@ var init_db_module = __esm({
           return new TransactionState2();
         });
         const { UnitOfWork: UnitOfWork2 } = await Promise.resolve().then(() => (init_unit_of_work(), unit_of_work_exports));
-        container.addScoped(TOKENS4.UNIT_OF_WORK, (c) => {
+        container.addScoped(TOKENS5.UNIT_OF_WORK, (c) => {
           const ttx = c.resolve("TRANSACTION_STATE");
           return new UnitOfWork2(db, ttx);
         });
-        container.addScoped(TOKENS4.DB_CONTEXT, (c) => {
+        container.addScoped(TOKENS5.DB_CONTEXT, (c) => {
           const ttx = c.resolve("TRANSACTION_STATE");
           return new Proxy(db, {
             get(_target, prop, receiver) {
               const activeState = ttx.state;
-              if (Guards46.isDefined(activeState)) {
+              if (Guards47.isDefined(activeState)) {
                 if (prop === "transaction") {
                   return activeState.transaction.bind(activeState);
                 }
@@ -3038,14 +3113,14 @@ var init_http_utils = __esm({
        */
       async addAxios(container, opts) {
         const { NodeAxiosFactory: NodeAxiosFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts.token)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts.token)) {
           throw new Error("HttpConfig.token is required and must be defined.");
         }
         container.addSingleton(opts.token, () => {
           const factory = new NodeAxiosFactory2();
           const instance = factory.create(opts.client);
-          if (!Guards46.hasMethod(instance, "get") || !Guards46.hasMethod(instance, "post") || !Guards46.hasMethod(instance, "put") || !Guards46.hasMethod(instance, "patch") || !Guards46.hasMethod(instance, "delete")) {
+          if (!Guards47.hasMethod(instance, "get") || !Guards47.hasMethod(instance, "post") || !Guards47.hasMethod(instance, "put") || !Guards47.hasMethod(instance, "patch") || !Guards47.hasMethod(instance, "delete")) {
             throw new Error(
               "The created HTTP client instance does not implement the required methods of IHttpClient."
             );
@@ -3064,9 +3139,9 @@ var init_http_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addResilience(container, opts) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const { CockatielResilienceFactory: CockatielResilienceFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        container.addSingleton(TOKENS4.RESILIENCE_CLIENT, () => {
+        container.addSingleton(TOKENS5.RESILIENCE_CLIENT, () => {
           const factory = new CockatielResilienceFactory2();
           return factory.create(opts);
         });
@@ -3115,22 +3190,22 @@ var init_validation_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addValidation(container, opts, logger) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts.zod) && Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts.zod) && Guards47.isNullOrEmpty(opts.customValidationStrategy)) {
           return;
         }
         const validationStrategies = [];
-        if (Guards46.isDefined(opts.zod)) {
+        if (Guards47.isDefined(opts.zod)) {
           const config = opts.zod;
           const { ZodValidatorFactory: ZodValidatorFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
           const { SchemaValidationStrategy: SchemaValidationStrategy2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           const validatorService = new ZodValidatorFactory2().create({ ...config, logger });
-          container.addSingleton(TOKENS4.VALIDATOR_SERVICE, () => validatorService);
+          container.addSingleton(TOKENS5.VALIDATOR_SERVICE, () => validatorService);
           validationStrategies.push(new SchemaValidationStrategy2(validatorService));
         }
-        if (!Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
+        if (!Guards47.isNullOrEmpty(opts.customValidationStrategy)) {
           for (const strategyToken of opts.customValidationStrategy) {
-            if (Guards46.isDefined(strategyToken)) validationStrategies.push(strategyToken(container));
+            if (Guards47.isDefined(strategyToken)) validationStrategies.push(strategyToken(container));
           }
         }
         const { ValidationPipeline: ValidationPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
@@ -3141,11 +3216,11 @@ var init_validation_utils = __esm({
 });
 
 // src/infrastructure/idempotency/idempotency-store.ts
-var import_shared60, IdempotencyStore;
+var import_shared61, IdempotencyStore;
 var init_idempotency_store = __esm({
   "src/infrastructure/idempotency/idempotency-store.ts"() {
     "use strict";
-    import_shared60 = require("@xeno-js/shared");
+    import_shared61 = require("@xeno-js/shared");
     IdempotencyStore = class {
       /**
        * @description Constructs a new instance of IdempotencyStore, accepting an instance of ICache for accessing the caching system and an instance of IIdentityAccessor for obtaining the user's identity context. The IdempotencyStore uses the caching system to manage locks and results of idempotent commands, ensuring that commands with the same ID are processed only once. The identity context is used to build contextual keys, allowing for more granular management of idempotent commands in multi-tenant scenarios.
@@ -3167,31 +3242,31 @@ var init_idempotency_store = __esm({
       async acquireLock(requestId, ttlSeconds) {
         const key = this._cacheKeyBuilder.buildContextualKey(`command:${requestId}`);
         return await this._cache.setIfAbsent(
-          `${import_shared60.IDEMPOTENCY_CONSTANTS.LOCK_KEY_PREFIX}${key}`,
-          import_shared60.IDEMPOTENCY_CONSTANTS.LOCKED_VALUE,
+          `${import_shared61.IDEMPOTENCY_CONSTANTS.LOCK_KEY_PREFIX}${key}`,
+          import_shared61.IDEMPOTENCY_CONSTANTS.LOCKED_VALUE,
           ttlSeconds
         );
       }
       async hasBeenProcessed(commandId) {
         const key = this._cacheKeyBuilder.buildContextualKey(`command:${commandId}`);
-        return await this._cache.has(`${import_shared60.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`);
+        return await this._cache.has(`${import_shared61.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`);
       }
       async markAsProcessed(commandId, payload, ttlSeconds) {
         const key = this._cacheKeyBuilder.buildContextualKey(`command:${commandId}`);
         await this._cache.set(
-          `${import_shared60.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`,
+          `${import_shared61.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`,
           payload,
           ttlSeconds
         );
       }
       async getPayload(commandId) {
         const key = this._cacheKeyBuilder.buildContextualKey(`command:${commandId}`);
-        const payload = await this._cache.get(`${import_shared60.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`);
+        const payload = await this._cache.get(`${import_shared61.IDEMPOTENCY_CONSTANTS.PROCESSED_KEY_PREFIX}${key}`);
         return payload;
       }
       async releaseLock(commandId) {
         const key = this._cacheKeyBuilder.buildContextualKey(`command:${commandId}`);
-        await this._cache.remove(`${import_shared60.IDEMPOTENCY_CONSTANTS.LOCK_KEY_PREFIX}${key}`);
+        await this._cache.remove(`${import_shared61.IDEMPOTENCY_CONSTANTS.LOCK_KEY_PREFIX}${key}`);
       }
     };
   }
@@ -3230,16 +3305,16 @@ var init_pipeline_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addCommand(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const pipelines = [];
-        if (Guards46.isDefined(opts.idempotency)) {
+        if (Guards47.isDefined(opts.idempotency)) {
           const { IdempotencyStore: IdempotencyStore2 } = await Promise.resolve().then(() => (init_idempotency(), idempotency_exports));
           const imdStore = new IdempotencyStore2(
-            container.resolve(TOKENS4.CACHE),
-            container.resolve(TOKENS4.CACHE_KEY_BUILDER)
+            container.resolve(TOKENS5.CACHE),
+            container.resolve(TOKENS5.CACHE_KEY_BUILDER)
           );
           const { IdempotencyPipeline: IdempotencyPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
-          const requestContext = container.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR);
+          const requestContext = container.resolve(TOKENS5.NETWORK_CONTEXT_ACCESSOR);
           const config = opts.idempotency;
           pipelines.push(
             new IdempotencyPipeline2(
@@ -3250,7 +3325,7 @@ var init_pipeline_utils = __esm({
             )
           );
         }
-        if (Guards46.isDefined(opts.concurrency)) {
+        if (Guards47.isDefined(opts.concurrency)) {
           const { ConcurrencyRetryPipeline: ConcurrencyRetryPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           const config = opts.concurrency;
           pipelines.push(new ConcurrencyRetryPipeline2(config?.maxRetries, config?.delayConfig));
@@ -3268,12 +3343,12 @@ var init_pipeline_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addQuery(container) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const { QueryCachingPipeline: QueryCachingPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
         return new QueryCachingPipeline2(
-          container.resolve(TOKENS4.CACHE),
-          container.resolve(TOKENS4.CACHE_KEY_BUILDER),
-          container.resolve(TOKENS4.LOGGER)
+          container.resolve(TOKENS5.CACHE),
+          container.resolve(TOKENS5.CACHE_KEY_BUILDER),
+          container.resolve(TOKENS5.LOGGER)
         );
       }
     });
@@ -3291,11 +3366,11 @@ var init_cqrs_module = __esm({
     "use strict";
     CqrsModule = class {
       async configure(container, opts) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        const logger = container.resolve(TOKENS4.LOGGER);
+        const { TOKENS: TOKENS5 } = await import("@xeno-js/shared");
+        const logger = container.resolve(TOKENS5.LOGGER);
         const { Mediator: Mediator2 } = await Promise.resolve().then(() => (init_application(), application_exports));
-        container.addSingleton(TOKENS4.MEDIATOR, (c) => {
-          const serviceScopeAccessor = c.resolve(TOKENS4.SERVICE_SCOPE_ACCESSOR);
+        container.addSingleton(TOKENS5.MEDIATOR, (c) => {
+          const serviceScopeAccessor = c.resolve(TOKENS5.SERVICE_SCOPE_ACCESSOR);
           return new Mediator2(serviceScopeAccessor);
         });
         const { ExceptionPipeline: ExceptionPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
@@ -3307,24 +3382,24 @@ var init_cqrs_module = __esm({
           new LoggingPipeline2(logger),
           new PerformancePipeline2(logger, thresholdMs)
         ];
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (Guards46.isDefined(opts.authorization.policies) || Guards46.isDefined(opts.authorization.customAuthorizationStrategy)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.authorization.policies) || Guards47.isDefined(opts.authorization.customAuthorizationStrategy)) {
           const { AuthUtils: AuthUtils2 } = await Promise.resolve().then(() => (init_auth_utils(), auth_utils_exports));
           const authPipelines = await AuthUtils2.addAuthZ(container, opts.authorization);
           pipelines.push(authPipelines);
         }
-        if (Guards46.isDefined(opts.validation.zod) || Guards46.isDefined(opts.validation.customValidationStrategy)) {
+        if (Guards47.isDefined(opts.validation.zod) || Guards47.isDefined(opts.validation.customValidationStrategy)) {
           const { ValidationUtils: ValidationUtils2 } = await Promise.resolve().then(() => (init_validation_utils(), validation_utils_exports));
           const validationPipelines = await ValidationUtils2.addValidation(
             container,
             opts.validation,
             logger
           );
-          if (Guards46.isDefined(validationPipelines)) pipelines.push(validationPipelines);
+          if (Guards47.isDefined(validationPipelines)) pipelines.push(validationPipelines);
         }
         const commandPipelines = [...pipelines];
         const queryPipelines = [...pipelines];
-        if (Guards46.isDefined(opts.commandBus.idempotency) || Guards46.isDefined(opts.commandBus.concurrency)) {
+        if (Guards47.isDefined(opts.commandBus.idempotency) || Guards47.isDefined(opts.commandBus.concurrency)) {
           const { PipelineUtils: PipelineUtils2 } = await Promise.resolve().then(() => (init_pipeline_utils(), pipeline_utils_exports));
           const newCommandPipelines = await PipelineUtils2.addCommand(container, opts.commandBus);
           commandPipelines.push(...newCommandPipelines);
@@ -3335,10 +3410,10 @@ var init_cqrs_module = __esm({
           queryPipelines.push(newQueryPipelines);
         }
         const { CompositePipeline: CompositePipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
-        container.addSingleton(TOKENS4.COMMAND_PIPELINES_BEHAVIOR, () => {
+        container.addSingleton(TOKENS5.COMMAND_PIPELINES_BEHAVIOR, () => {
           return new CompositePipeline2(commandPipelines);
         });
-        container.addSingleton(TOKENS4.QUERY_PIPELINES_BEHAVIOR, () => {
+        container.addSingleton(TOKENS5.QUERY_PIPELINES_BEHAVIOR, () => {
           return new CompositePipeline2(queryPipelines);
         });
       }
@@ -3347,11 +3422,11 @@ var init_cqrs_module = __esm({
 });
 
 // src/presentation/controllers/base.controller.ts
-var import_shared61, BaseController;
+var import_shared62, BaseController;
 var init_base_controller = __esm({
   "src/presentation/controllers/base.controller.ts"() {
     "use strict";
-    import_shared61 = require("@xeno-js/shared");
+    import_shared62 = require("@xeno-js/shared");
     BaseController = class {
       /**
        * Constructs a new instance of the BaseController class.
@@ -3383,7 +3458,7 @@ var init_base_controller = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       ok(data, status = 200, meta = {}, headers = {}) {
-        return import_shared61.HttpHelper.success(data, status, meta, headers);
+        return import_shared62.HttpHelper.success(data, status, meta, headers);
       }
       /**
        * Helper to automatically map a failed Result (from the CQRS pipeline)
@@ -3401,7 +3476,7 @@ var init_base_controller = __esm({
       fail(error, details = void 0, headers = {}) {
         const context = this._requestContext.getContext();
         const customHeaders = error["header"];
-        return import_shared61.HttpHelper.error(
+        return import_shared62.HttpHelper.error(
           {
             success: false,
             error: {
@@ -3410,9 +3485,9 @@ var init_base_controller = __esm({
               path: context?.network.path,
               details: details ?? error.message
             },
-            correlationId: context?.tracing.correlationId ?? import_shared61.GuidHelper.generate(),
-            requestId: context?.network.requestId ?? import_shared61.GuidHelper.generate(),
-            spanId: context?.tracing.spanId ?? import_shared61.GuidHelper.generate(),
+            correlationId: context?.tracing.correlationId ?? import_shared62.GuidHelper.generate(),
+            requestId: context?.network.requestId ?? import_shared62.GuidHelper.generate(),
+            spanId: context?.tracing.spanId ?? import_shared62.GuidHelper.generate(),
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
           },
           error.status,
@@ -3426,6 +3501,7 @@ var init_base_controller = __esm({
       /**
        * Helper to send a query through the mediator and return the result.
        * @param request - The IQuery instance to be sent.
+       * @param signal - The AbortSignal
        * @returns A promise resolving to the result of the query.
        *
        * @author Xeno
@@ -3433,13 +3509,13 @@ var init_base_controller = __esm({
        * @since 2025-09-30
        * @link https://github.com/xeno-js/xeno-js
        */
-      _query(request) {
-        const signal = new AbortController().signal;
+      _query(request, signal) {
         return this._mediator.query(request, signal);
       }
       /**
        * Helper to send a command through the mediator and return the result.
        * @param request - The ICommand instance to be sent.
+       * @param signal - The AbortSignal
        * @returns A promise resolving to the result of the command.
        *
        * @author Xeno
@@ -3447,8 +3523,7 @@ var init_base_controller = __esm({
        * @since 2025-09-30
        * @link https://github.com/xeno-js/xeno-js
        */
-      _send(request) {
-        const signal = new AbortController().signal;
+      _send(request, signal) {
         return this._mediator.send(request, signal);
       }
       getContext() {
@@ -3467,11 +3542,11 @@ var init_controllers = __esm({
 });
 
 // src/presentation/middlewares/allow-method.middleware.ts
-var import_shared62, MethodCheckMiddleware;
+var import_shared63, MethodCheckMiddleware;
 var init_allow_method_middleware = __esm({
   "src/presentation/middlewares/allow-method.middleware.ts"() {
     "use strict";
-    import_shared62 = require("@xeno-js/shared");
+    import_shared63 = require("@xeno-js/shared");
     MethodCheckMiddleware = class {
       constructor(_requestContext, _allowMethod) {
         this._requestContext = _requestContext;
@@ -3479,25 +3554,25 @@ var init_allow_method_middleware = __esm({
       }
       _requestContext;
       _allowMethod;
-      async execute(req, _headers, next) {
+      async execute(req, _res, next) {
         const isAllowed = this._allowMethod.check(req.path, req.method);
         if (!isAllowed) {
           const { network, tracing } = this._requestContext.getContext() ?? {};
-          return import_shared62.HttpHelper.error(
+          return import_shared63.HttpHelper.error(
             {
               success: false,
               error: {
-                code: import_shared62.ERROR_CODES.NOT_ALLOWED,
-                message: import_shared62.ERROR_CODE_MESSAGES[import_shared62.ERROR_CODES.NOT_ALLOWED],
+                code: import_shared63.ERROR_CODES.NOT_ALLOWED,
+                message: import_shared63.ERROR_CODE_MESSAGES[import_shared63.ERROR_CODES.NOT_ALLOWED],
                 details: `Operation blocked by allow method middleware`,
                 path: req.path
               },
-              correlationId: tracing?.correlationId ?? import_shared62.GuidHelper.generate(),
-              requestId: network?.requestId ?? import_shared62.GuidHelper.generate(),
-              spanId: tracing?.spanId ?? import_shared62.GuidHelper.generate(),
+              correlationId: tracing?.correlationId ?? import_shared63.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared63.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared63.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            import_shared62.STATUS_CODES.NOT_ALLOWED,
+            import_shared63.STATUS_CODES.NOT_ALLOWED,
             {
               Allow: this._allowMethod.getMethods(req.path)
             }
@@ -3510,11 +3585,11 @@ var init_allow_method_middleware = __esm({
 });
 
 // src/presentation/middlewares/allow-origin.middleware.ts
-var import_shared63, AllowOriginMiddleware;
+var import_shared64, AllowOriginMiddleware;
 var init_allow_origin_middleware = __esm({
   "src/presentation/middlewares/allow-origin.middleware.ts"() {
     "use strict";
-    import_shared63 = require("@xeno-js/shared");
+    import_shared64 = require("@xeno-js/shared");
     AllowOriginMiddleware = class {
       constructor(_allowOrigin, _requestContext, _logger) {
         this._allowOrigin = _allowOrigin;
@@ -3524,26 +3599,26 @@ var init_allow_origin_middleware = __esm({
       _allowOrigin;
       _requestContext;
       _logger;
-      async execute(req, _headers, next) {
+      async execute(req, _res, next) {
         const { network, tracing } = this._requestContext.getContext() ?? {};
         const origin = network?.origin;
         if (!this._allowOrigin.isAllowed(origin)) {
           this._logger.warn(`Access denied by AllowOrigin policy for origin: ${origin ?? "unknown"}`);
-          return import_shared63.HttpHelper.error(
+          return import_shared64.HttpHelper.error(
             {
               success: false,
               error: {
-                code: import_shared63.ERROR_CODES.FORBIDDEN,
-                message: import_shared63.ERROR_CODE_MESSAGES[import_shared63.ERROR_CODES.FORBIDDEN],
+                code: import_shared64.ERROR_CODES.FORBIDDEN,
+                message: import_shared64.ERROR_CODE_MESSAGES[import_shared64.ERROR_CODES.FORBIDDEN],
                 details: `The origin '${origin ?? "unknown"}' is not allowed to access this resource.`,
                 path: req.path
               },
-              correlationId: tracing?.correlationId ?? import_shared63.GuidHelper.generate(),
-              requestId: network?.requestId ?? import_shared63.GuidHelper.generate(),
-              spanId: tracing?.spanId ?? import_shared63.GuidHelper.generate(),
+              correlationId: tracing?.correlationId ?? import_shared64.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared64.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared64.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            import_shared63.STATUS_CODES.FORBIDDEN
+            import_shared64.STATUS_CODES.FORBIDDEN
           );
         }
         return next();
@@ -3553,11 +3628,11 @@ var init_allow_origin_middleware = __esm({
 });
 
 // src/presentation/middlewares/auth.middleware.ts
-var import_shared64, AuthenticationMiddleware;
+var import_shared65, AuthenticationMiddleware;
 var init_auth_middleware = __esm({
   "src/presentation/middlewares/auth.middleware.ts"() {
     "use strict";
-    import_shared64 = require("@xeno-js/shared");
+    import_shared65 = require("@xeno-js/shared");
     AuthenticationMiddleware = class {
       constructor(_requestContext, _tokenExtractor, _gateKeeper, _logger) {
         this._requestContext = _requestContext;
@@ -3569,8 +3644,8 @@ var init_auth_middleware = __esm({
       _tokenExtractor;
       _gateKeeper;
       _logger;
-      async execute(req, headers, next) {
-        const token = this._tokenExtractor.extract(headers);
+      async execute(req, _res, next) {
+        const token = this._tokenExtractor.extract(req.headers);
         const authResult = await this._gateKeeper.authenticate(token);
         if (!authResult.isOk()) {
           const error = authResult.getErrorOrThrow();
@@ -3578,7 +3653,7 @@ var init_auth_middleware = __esm({
             `Authentication failed for request on path: ${req.path}. Code: ${error.code}. Error: ${error}`
           );
           const { network, tracing } = this._requestContext.getContext() ?? {};
-          return import_shared64.HttpHelper.error(
+          return import_shared65.HttpHelper.error(
             {
               success: false,
               error: {
@@ -3587,12 +3662,12 @@ var init_auth_middleware = __esm({
                 details: `[Authentication Error] Failed to authenticate request on path: ${req.path}`,
                 path: req.path
               },
-              correlationId: tracing?.correlationId ?? import_shared64.GuidHelper.generate(),
-              requestId: network?.requestId ?? import_shared64.GuidHelper.generate(),
-              spanId: tracing?.spanId ?? import_shared64.GuidHelper.generate(),
+              correlationId: tracing?.correlationId ?? import_shared65.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared65.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared65.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            error.status ?? import_shared64.STATUS_CODES.UNAUTHORIZED,
+            error.status ?? import_shared65.STATUS_CODES.UNAUTHORIZED,
             { "Content-Type": [network?.formatIndicator ?? "application/json"] }
           );
         }
@@ -3613,12 +3688,12 @@ var init_composite_middleware = __esm({
         this._middlewares = _middlewares;
       }
       _middlewares;
-      async execute(req, headers, next) {
+      async execute(req, res, next) {
         let currentNext = next;
         for (let i = this._middlewares.length - 1; i >= 0; i--) {
           const currentBehavior = this._middlewares[i];
           const previousNext = currentNext;
-          currentNext = () => currentBehavior.execute(req, headers, previousNext);
+          currentNext = () => currentBehavior.execute(req, res, previousNext);
         }
         return currentNext();
       }
@@ -3627,11 +3702,11 @@ var init_composite_middleware = __esm({
 });
 
 // src/presentation/middlewares/cors.middleware.ts
-var import_shared65, CORSMiddleware;
+var import_shared66, CORSMiddleware;
 var init_cors_middleware = __esm({
   "src/presentation/middlewares/cors.middleware.ts"() {
     "use strict";
-    import_shared65 = require("@xeno-js/shared");
+    import_shared66 = require("@xeno-js/shared");
     CORSMiddleware = class {
       constructor(_requestContext, _withCredentials = "false") {
         this._requestContext = _requestContext;
@@ -3639,11 +3714,11 @@ var init_cors_middleware = __esm({
       }
       _requestContext;
       _withCredentials;
-      async execute(_req, _headers, next) {
+      async execute(_req, _res, next) {
         const { network } = this._requestContext.getContext() ?? {};
         const origin = network?.origin;
         const response = await next();
-        if (import_shared65.Guards.isDefined(origin))
+        if (import_shared66.Guards.isDefined(origin))
           response.headers = {
             ...response.headers ?? {},
             "Access-Control-Allow-Origin": origin,
@@ -3657,11 +3732,11 @@ var init_cors_middleware = __esm({
 });
 
 // src/presentation/middlewares/csrf.middleware.ts
-var import_shared66, CsrfMiddleware;
+var import_shared67, CsrfMiddleware;
 var init_csrf_middleware = __esm({
   "src/presentation/middlewares/csrf.middleware.ts"() {
     "use strict";
-    import_shared66 = require("@xeno-js/shared");
+    import_shared67 = require("@xeno-js/shared");
     CsrfMiddleware = class {
       constructor(_requestContext, _csrfTokenService) {
         this._requestContext = _requestContext;
@@ -3669,71 +3744,71 @@ var init_csrf_middleware = __esm({
       }
       _requestContext;
       _csrfTokenService;
-      async execute(req, _headers, next) {
+      async execute(req, _res, next) {
         const method = req.method.toUpperCase();
         const isStateChanging = ["POST", "PUT", "DELETE", "PATCH"].includes(method);
         if (isStateChanging) {
           const { network, tracing, identity } = this._requestContext.getContext() ?? {};
           const headerToken = network?.csrf;
           const cookieToken = network?.csrfCookie;
-          if (!import_shared66.Guards.isDefined(headerToken) || !import_shared66.Guards.isDefined(cookieToken)) {
-            return import_shared66.HttpHelper.error(
+          if (!import_shared67.Guards.isDefined(headerToken) || !import_shared67.Guards.isDefined(cookieToken)) {
+            return import_shared67.HttpHelper.error(
               {
                 success: false,
                 error: {
-                  code: import_shared66.ERROR_CODES.FORBIDDEN,
-                  message: import_shared66.ERROR_CODE_MESSAGES[import_shared66.ERROR_CODES.FORBIDDEN],
+                  code: import_shared67.ERROR_CODES.FORBIDDEN,
+                  message: import_shared67.ERROR_CODE_MESSAGES[import_shared67.ERROR_CODES.FORBIDDEN],
                   details: "CSRF token missing",
                   path: req.path
                 },
-                correlationId: tracing?.correlationId ?? import_shared66.GuidHelper.generate(),
-                requestId: network?.requestId ?? import_shared66.GuidHelper.generate(),
-                spanId: tracing?.spanId ?? import_shared66.GuidHelper.generate(),
+                correlationId: tracing?.correlationId ?? import_shared67.GuidHelper.generate(),
+                requestId: network?.requestId ?? import_shared67.GuidHelper.generate(),
+                spanId: tracing?.spanId ?? import_shared67.GuidHelper.generate(),
                 timestamp: (/* @__PURE__ */ new Date()).toISOString()
               },
-              import_shared66.STATUS_CODES.FORBIDDEN,
+              import_shared67.STATUS_CODES.FORBIDDEN,
               {
                 "Content-Type": [network?.formatIndicator ?? "application/json"]
               }
             );
           }
           if (headerToken !== cookieToken) {
-            return import_shared66.HttpHelper.error(
+            return import_shared67.HttpHelper.error(
               {
                 success: false,
                 error: {
-                  code: import_shared66.ERROR_CODES.FORBIDDEN,
-                  message: import_shared66.ERROR_CODE_MESSAGES[import_shared66.ERROR_CODES.FORBIDDEN],
+                  code: import_shared67.ERROR_CODES.FORBIDDEN,
+                  message: import_shared67.ERROR_CODE_MESSAGES[import_shared67.ERROR_CODES.FORBIDDEN],
                   details: "CSRF token mismatch",
                   path: req.path
                 },
-                correlationId: tracing?.correlationId ?? import_shared66.GuidHelper.generate(),
-                requestId: network?.requestId ?? import_shared66.GuidHelper.generate(),
-                spanId: tracing?.spanId ?? import_shared66.GuidHelper.generate(),
+                correlationId: tracing?.correlationId ?? import_shared67.GuidHelper.generate(),
+                requestId: network?.requestId ?? import_shared67.GuidHelper.generate(),
+                spanId: tracing?.spanId ?? import_shared67.GuidHelper.generate(),
                 timestamp: (/* @__PURE__ */ new Date()).toISOString()
               },
-              import_shared66.STATUS_CODES.FORBIDDEN,
+              import_shared67.STATUS_CODES.FORBIDDEN,
               {
                 "Content-Type": [network?.formatIndicator ?? "application/json"]
               }
             );
           }
-          if (!import_shared66.Guards.isDefined(identity?.userId) || !await this._csrfTokenService.validate(headerToken, identity?.userId)) {
-            return import_shared66.HttpHelper.error(
+          if (!import_shared67.Guards.isDefined(identity?.userId) || !await this._csrfTokenService.validate(headerToken, identity?.userId)) {
+            return import_shared67.HttpHelper.error(
               {
                 success: false,
                 error: {
-                  code: import_shared66.ERROR_CODES.FORBIDDEN,
-                  message: import_shared66.ERROR_CODE_MESSAGES[import_shared66.ERROR_CODES.FORBIDDEN],
+                  code: import_shared67.ERROR_CODES.FORBIDDEN,
+                  message: import_shared67.ERROR_CODE_MESSAGES[import_shared67.ERROR_CODES.FORBIDDEN],
                   details: "CSRF token invalid",
                   path: req.path
                 },
-                correlationId: tracing?.correlationId ?? import_shared66.GuidHelper.generate(),
-                requestId: network?.requestId ?? import_shared66.GuidHelper.generate(),
-                spanId: tracing?.spanId ?? import_shared66.GuidHelper.generate(),
+                correlationId: tracing?.correlationId ?? import_shared67.GuidHelper.generate(),
+                requestId: network?.requestId ?? import_shared67.GuidHelper.generate(),
+                spanId: tracing?.spanId ?? import_shared67.GuidHelper.generate(),
                 timestamp: (/* @__PURE__ */ new Date()).toISOString()
               },
-              import_shared66.STATUS_CODES.FORBIDDEN,
+              import_shared67.STATUS_CODES.FORBIDDEN,
               {
                 "Content-Type": [network?.formatIndicator ?? "application/json"]
               }
@@ -3747,11 +3822,11 @@ var init_csrf_middleware = __esm({
 });
 
 // src/presentation/middlewares/csrf-cookie.middleware.ts
-var import_shared67, CsrfCookieMiddleware;
+var import_shared68, CsrfCookieMiddleware;
 var init_csrf_cookie_middleware = __esm({
   "src/presentation/middlewares/csrf-cookie.middleware.ts"() {
     "use strict";
-    import_shared67 = require("@xeno-js/shared");
+    import_shared68 = require("@xeno-js/shared");
     CsrfCookieMiddleware = class {
       constructor(_requestContext, _csrfTokenService, _csrf) {
         this._requestContext = _requestContext;
@@ -3761,13 +3836,13 @@ var init_csrf_cookie_middleware = __esm({
       _requestContext;
       _csrfTokenService;
       _csrf;
-      async execute(_req, _headers, next) {
+      async execute(_req, _res, next) {
         const response = await next();
         const context = this._requestContext.getContext();
         const identity = context?.identity;
         const network = context?.network;
-        if (!import_shared67.Guards.isDefined(identity?.userId)) return response;
-        if (import_shared67.Guards.isDefined(network?.csrfCookie)) return response;
+        if (!import_shared68.Guards.isDefined(identity?.userId)) return response;
+        if (import_shared68.Guards.isDefined(network?.csrfCookie)) return response;
         const token = await this._csrfTokenService.generate(identity.userId);
         const cookieName = this._csrf.cookieName ?? "__Host-xeno-csrf";
         const maxAge = this._csrf.cookieMaxAgeSeconds ?? 3600;
@@ -3785,11 +3860,11 @@ var init_csrf_cookie_middleware = __esm({
 });
 
 // src/presentation/middlewares/options.middleware.ts
-var import_shared68, OptionsMiddleware;
+var import_shared69, OptionsMiddleware;
 var init_options_middleware = __esm({
   "src/presentation/middlewares/options.middleware.ts"() {
     "use strict";
-    import_shared68 = require("@xeno-js/shared");
+    import_shared69 = require("@xeno-js/shared");
     OptionsMiddleware = class {
       constructor(_requestContext, _alloewMethod, _allowHeaders = [], _withCredentials = "false") {
         this._requestContext = _requestContext;
@@ -3801,19 +3876,19 @@ var init_options_middleware = __esm({
       _alloewMethod;
       _allowHeaders;
       _withCredentials;
-      async execute(req, _headers, next) {
+      async execute(req, _res, next) {
         if (req.method.toUpperCase() === "OPTIONS") {
           const network = this._requestContext.getNetworkContext();
           const origin = network?.origin;
           const headers = {};
-          if (import_shared68.Guards.isDefined(origin)) {
+          if (import_shared69.Guards.isDefined(origin)) {
             headers["Access-Control-Allow-Origin"] = origin;
             headers["Access-Control-Allow-Credentials"] = this._withCredentials;
             headers["Vary"] = "Origin";
           }
           headers["Access-Control-Allow-Methods"] = this._alloewMethod.getMethods(req.path);
           headers["Access-Control-Allow-Headers"] = this._allowHeaders.join(", ");
-          return import_shared68.HttpHelper.success(null, import_shared68.STATUS_CODES.NO_CONTENT, {}, headers);
+          return import_shared69.HttpHelper.success(null, import_shared69.STATUS_CODES.NO_CONTENT, {}, headers);
         }
         return await next();
       }
@@ -3822,11 +3897,11 @@ var init_options_middleware = __esm({
 });
 
 // src/presentation/middlewares/rate-limiter.middleware.ts
-var import_shared69, RateLimitMiddleware;
+var import_shared70, RateLimitMiddleware;
 var init_rate_limiter_middleware = __esm({
   "src/presentation/middlewares/rate-limiter.middleware.ts"() {
     "use strict";
-    import_shared69 = require("@xeno-js/shared");
+    import_shared70 = require("@xeno-js/shared");
     RateLimitMiddleware = class {
       constructor(_ctxAccessor, _cache, _keyBuilder, _logger, _opts) {
         this._ctxAccessor = _ctxAccessor;
@@ -3840,25 +3915,25 @@ var init_rate_limiter_middleware = __esm({
       _keyBuilder;
       _logger;
       _opts;
-      async execute(req, _headers, next) {
+      async execute(req, _res, next) {
         const cacheKey = this._keyBuilder.buildRateLimitKey(req.path);
         const { network, tracing } = this._ctxAccessor.getContext() ?? {};
-        if (!import_shared69.Guards.isDefined(cacheKey))
-          return import_shared69.HttpHelper.error(
+        if (!import_shared70.Guards.isDefined(cacheKey))
+          return import_shared70.HttpHelper.error(
             {
               success: false,
               error: {
-                code: import_shared69.ERROR_CODES.SYSTEM_ERROR,
-                message: import_shared69.ERROR_CODE_MESSAGES[import_shared69.ERROR_CODES.SYSTEM_ERROR],
+                code: import_shared70.ERROR_CODES.SYSTEM_ERROR,
+                message: import_shared70.ERROR_CODE_MESSAGES[import_shared70.ERROR_CODES.SYSTEM_ERROR],
                 details: `Bad Request: Unable to identify client context for rate limiting.`,
                 path: req.path
               },
-              correlationId: tracing?.correlationId ?? import_shared69.GuidHelper.generate(),
-              requestId: network?.requestId ?? import_shared69.GuidHelper.generate(),
-              spanId: tracing?.spanId ?? import_shared69.GuidHelper.generate(),
+              correlationId: tracing?.correlationId ?? import_shared70.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared70.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared70.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            import_shared69.STATUS_CODES.SERVICE_UNAVAILABLE,
+            import_shared70.STATUS_CODES.SERVICE_UNAVAILABLE,
             {
               "Content-Type": [network?.formatIndicator ?? "application/json"],
               "Retry-After": [String(this._opts.windowSeconds)]
@@ -3867,21 +3942,21 @@ var init_rate_limiter_middleware = __esm({
         const currentHits = await this._cache.increment(cacheKey, this._opts.windowSeconds);
         if (currentHits > this._opts.maxRequests) {
           this._logger.warn(`[RateLimit] key ${cacheKey} has been  blocked on ${req.path}`);
-          return import_shared69.HttpHelper.error(
+          return import_shared70.HttpHelper.error(
             {
               success: false,
               error: {
-                code: import_shared69.ERROR_CODES.TOO_MANY_REQUESTS,
-                message: import_shared69.ERROR_CODE_MESSAGES[import_shared69.ERROR_CODES.TOO_MANY_REQUESTS],
+                code: import_shared70.ERROR_CODES.TOO_MANY_REQUESTS,
+                message: import_shared70.ERROR_CODE_MESSAGES[import_shared70.ERROR_CODES.TOO_MANY_REQUESTS],
                 details: `Rate limit exceeded.`,
                 path: req.path
               },
-              correlationId: tracing?.correlationId ?? import_shared69.GuidHelper.generate(),
-              requestId: network?.requestId ?? import_shared69.GuidHelper.generate(),
-              spanId: tracing?.spanId ?? import_shared69.GuidHelper.generate(),
+              correlationId: tracing?.correlationId ?? import_shared70.GuidHelper.generate(),
+              requestId: network?.requestId ?? import_shared70.GuidHelper.generate(),
+              spanId: tracing?.spanId ?? import_shared70.GuidHelper.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            import_shared69.STATUS_CODES.TOO_MANY_REQUESTS,
+            import_shared70.STATUS_CODES.TOO_MANY_REQUESTS,
             {
               "Content-Type": [network?.formatIndicator ?? "application/json"],
               "Retry-After": [String(this._opts.windowSeconds)]
@@ -3896,8 +3971,8 @@ var init_rate_limiter_middleware = __esm({
 
 // src/presentation/mappers/context.mapper.ts
 function _buildMessagingContext(meta) {
-  const hasSequenceData = import_shared70.Guards.isDefined(meta.sequence?.sequenceId) || import_shared70.Guards.isDefined(meta.sequence?.position) || import_shared70.Guards.isDefined(meta.sequence?.size);
-  const hasMessagingData = hasSequenceData || import_shared70.Guards.isDefined(meta.expiration) || import_shared70.Guards.isDefined(meta.returnAddress);
+  const hasSequenceData = import_shared71.Guards.isDefined(meta.sequence?.sequenceId) || import_shared71.Guards.isDefined(meta.sequence?.position) || import_shared71.Guards.isDefined(meta.sequence?.size);
+  const hasMessagingData = hasSequenceData || import_shared71.Guards.isDefined(meta.expiration) || import_shared71.Guards.isDefined(meta.returnAddress);
   const messaging = hasMessagingData ? {
     returnAddress: meta.returnAddress,
     expiration: meta.expiration,
@@ -3905,11 +3980,11 @@ function _buildMessagingContext(meta) {
   } : void 0;
   return messaging;
 }
-var import_shared70, ContextMapper;
+var import_shared71, ContextMapper;
 var init_context_mapper = __esm({
   "src/presentation/mappers/context.mapper.ts"() {
     "use strict";
-    import_shared70 = require("@xeno-js/shared");
+    import_shared71 = require("@xeno-js/shared");
     ContextMapper = Object.freeze({
       /**
        * @description Maps to RequestContext. It extracts relevant information from the object, such as correlation ID, request ID, authentication token, client IP, user agent, format indicator, and messaging context (if available). The method constructs a RequestContext object that encapsulates all this information, providing a structured representation of the request context for further processing in the application.
@@ -3953,11 +4028,11 @@ var init_context_mapper = __esm({
 });
 
 // src/presentation/middlewares/request.middleware.ts
-var import_shared71, RequestContextMiddleware;
+var import_shared72, RequestContextMiddleware;
 var init_request_middleware = __esm({
   "src/presentation/middlewares/request.middleware.ts"() {
     "use strict";
-    import_shared71 = require("@xeno-js/shared");
+    import_shared72 = require("@xeno-js/shared");
     init_context_mapper();
     RequestContextMiddleware = class {
       /**
@@ -3981,14 +4056,14 @@ var init_request_middleware = __esm({
       _extractor;
       _resolver;
       _logger;
-      async execute(req, headers, next) {
-        const correlationId = import_shared71.GuidHelper.generate();
-        const requestId = import_shared71.GuidHelper.generate();
+      async execute(req, res, next) {
+        const correlationId = import_shared72.GuidHelper.generate();
+        const requestId = import_shared72.GuidHelper.generate();
         const spanId = correlationId;
         const formatIndicator = "application/json";
         try {
-          const meta = this._extractor.extract(headers);
-          const clientIp = this._resolver.resolve(req.transport.req, meta.clientIp);
+          const meta = this._extractor.extract(req.headers);
+          const clientIp = this._resolver.resolve(req, meta.clientIp);
           const metadata = {
             ...meta,
             clientIp,
@@ -3999,9 +4074,9 @@ var init_request_middleware = __esm({
           };
           const tmpContext = ContextMapper.map({
             metadata,
-            identity: import_shared71.GUEST,
+            identity: import_shared72.GUEST,
             path: req.path,
-            transport: req.transport
+            transport: { req, res }
           });
           const result = await this._requestContext.runAsync(tmpContext, async () => {
             return next();
@@ -4011,12 +4086,12 @@ var init_request_middleware = __esm({
           return result;
         } catch (error) {
           this._logger.error("RequestContextMiddleware encountered an error", error);
-          return import_shared71.HttpHelper.error(
+          return import_shared72.HttpHelper.error(
             {
               success: false,
               error: {
-                code: import_shared71.ERROR_CODES.SYSTEM_ERROR,
-                message: import_shared71.ERROR_CODE_MESSAGES[import_shared71.ERROR_CODES.SYSTEM_ERROR],
+                code: import_shared72.ERROR_CODES.SYSTEM_ERROR,
+                message: import_shared72.ERROR_CODE_MESSAGES[import_shared72.ERROR_CODES.SYSTEM_ERROR],
                 details: `[Fatal System Error] Exception caught during request handling on path: ${req.path}`,
                 path: req.path
               },
@@ -4025,7 +4100,7 @@ var init_request_middleware = __esm({
               spanId,
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            import_shared71.STATUS_CODES.INTERNAL_SERVER_ERROR,
+            import_shared72.STATUS_CODES.INTERNAL_SERVER_ERROR,
             { "Content-Type": [formatIndicator] }
           );
         }
@@ -4075,11 +4150,11 @@ var init_presentation = __esm({
 });
 
 // src/infrastructure/cache/rate-limit-key-builder.cache.ts
-var import_shared72, RateLimitKeyBuilder;
+var import_shared73, RateLimitKeyBuilder;
 var init_rate_limit_key_builder_cache = __esm({
   "src/infrastructure/cache/rate-limit-key-builder.cache.ts"() {
     "use strict";
-    import_shared72 = require("@xeno-js/shared");
+    import_shared73 = require("@xeno-js/shared");
     RateLimitKeyBuilder = class {
       constructor(_contextAccessor) {
         this._contextAccessor = _contextAccessor;
@@ -4090,12 +4165,12 @@ var init_rate_limit_key_builder_cache = __esm({
         const tenantId = ctx?.identity?.tenantId;
         const userId = ctx?.identity?.userId;
         const clientIp = ctx?.network?.clientIp;
-        if (!import_shared72.Guards.isNullOrEmpty(tenantId) && !import_shared72.Guards.isNullOrEmpty(userId))
+        if (!import_shared73.Guards.isNullOrEmpty(tenantId) && !import_shared73.Guards.isNullOrEmpty(userId))
           return `ratelimit:tenant:${tenantId}:user:${userId}:${resource}`;
-        if (!import_shared72.Guards.isNullOrEmpty(tenantId) && !import_shared72.Guards.isNullOrEmpty(clientIp))
+        if (!import_shared73.Guards.isNullOrEmpty(tenantId) && !import_shared73.Guards.isNullOrEmpty(clientIp))
           return `ratelimit:tenant:${tenantId}:ip:${clientIp}:${resource}`;
-        if (!import_shared72.Guards.isNullOrEmpty(userId)) return `ratelimit:user:${userId}:${resource}`;
-        if (!import_shared72.Guards.isNullOrEmpty(clientIp)) return `ratelimit:ip:${clientIp}:${resource}`;
+        if (!import_shared73.Guards.isNullOrEmpty(userId)) return `ratelimit:user:${userId}:${resource}`;
+        if (!import_shared73.Guards.isNullOrEmpty(clientIp)) return `ratelimit:ip:${clientIp}:${resource}`;
         return void 0;
       }
     };
@@ -4129,12 +4204,16 @@ var init_middleware_module = __esm({
     "use strict";
     MiddlewareModule = class {
       async configure(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards47, TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const { HttpCookieExtractor: HttpCookieExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         const { HttpHeaderExtractor: HttpHeaderExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
-        const tokenExtractor = await this._getTokenExtractor(opts.isSSR);
+        const tokenExtractor = await this._getTokenExtractor(
+          opts.isSSR,
+          opts.authCookieName,
+          opts.customTokenExtractor
+        );
         container.addSingleton(
-          TOKENS4.SERVICE_EXTRACTOR,
+          TOKENS5.SERVICE_EXTRACTOR,
           () => new HttpHeaderExtractor2(
             tokenExtractor,
             new HttpCookieExtractor2(),
@@ -4144,18 +4223,18 @@ var init_middleware_module = __esm({
         );
         const { ClientIpResolver: ClientIpResolver2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         const middlewares = [];
-        const requestContext = container.resolve(TOKENS4.REQUEST_CONTEXT);
-        const logger = container.resolve(TOKENS4.LOGGER);
+        const requestContext = container.resolve(TOKENS5.REQUEST_CONTEXT);
+        const logger = container.resolve(TOKENS5.LOGGER);
         const { RequestContextMiddleware: RequestContextMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
         middlewares.push(
           new RequestContextMiddleware2(
             requestContext,
-            container.resolve(TOKENS4.SERVICE_EXTRACTOR),
+            container.resolve(TOKENS5.SERVICE_EXTRACTOR),
             new ClientIpResolver2(opts.trustedProxies),
             logger
           )
         );
-        if (!Guards46.isNullOrEmpty(opts.allowOrigins)) {
+        if (!Guards47.isNullOrEmpty(opts.allowOrigins)) {
           if (opts.withCredentials && opts.allowOrigins.includes("*"))
             throw new Error(
               "Wildcard CORS origin is not allowed when withCredentials is set to true in addHttpCore"
@@ -4181,7 +4260,7 @@ var init_middleware_module = __esm({
           const { CORSMiddleware: CORSMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           middlewares.push(new CORSMiddleware2(requestContext, withCredentials));
         }
-        if (Guards46.isDefined(opts.routeRegistry)) {
+        if (Guards47.isDefined(opts.routeRegistry)) {
           const { MethodCheckMiddleware: MethodCheckMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           middlewares.push(new MethodCheckMiddleware2(requestContext, allowMethod));
         }
@@ -4203,31 +4282,31 @@ var init_middleware_module = __esm({
             new AuthenticationMiddleware2(
               requestContext,
               tokenExtractor,
-              new GateKeeper2(container.resolve(TOKENS4.BASE_AUTH_SERVICE), new ClaimsIdentityMapper2()),
+              new GateKeeper2(container.resolve(TOKENS5.BASE_AUTH_SERVICE), new ClaimsIdentityMapper2()),
               logger
             )
           );
         }
-        if (Guards46.isDefined(opts.rateLimite.maxRequests) || Guards46.isDefined(opts.rateLimite.windowSeconds)) {
+        if (Guards47.isDefined(opts.rateLimite.maxRequests) || Guards47.isDefined(opts.rateLimite.windowSeconds)) {
           const maxRequests = opts.rateLimite.maxRequests ?? 30;
-          Guards46.throwIfNegative(maxRequests, "MaxRequests must be positive");
-          Guards46.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
+          Guards47.throwIfNegative(maxRequests, "MaxRequests must be positive");
+          Guards47.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
           const windowSeconds = opts.rateLimite.windowSeconds ?? 30;
-          Guards46.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
-          Guards46.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
+          Guards47.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
+          Guards47.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
           const { RateLimitKeyBuilder: RateLimitKeyBuilder2 } = await Promise.resolve().then(() => (init_cache(), cache_exports));
           const { RateLimitMiddleware: RateLimitMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           middlewares.push(
             new RateLimitMiddleware2(
               requestContext,
-              container.resolve(TOKENS4.CACHE),
+              container.resolve(TOKENS5.CACHE),
               new RateLimitKeyBuilder2(requestContext),
               logger,
               { maxRequests, windowSeconds }
             )
           );
         }
-        if (Guards46.isDefined(opts.csrf)) {
+        if (Guards47.isDefined(opts.csrf)) {
           const csrf = opts.csrf;
           const { EdgeCryptoService: EdgeCryptoService2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("CRYPTO_SERVICE", () => new EdgeCryptoService2());
@@ -4247,22 +4326,24 @@ var init_middleware_module = __esm({
           middlewares.push(new CsrfMiddleware2(requestContext, container.resolve("CSRF_TOKEN_SERVICE")));
         }
         const { CompositeMiddleware: CompositeMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
-        container.addSingleton(TOKENS4.MIDDLEWARE, () => {
+        container.addSingleton(TOKENS5.MIDDLEWARE, () => {
           return new CompositeMiddleware2(middlewares);
         });
       }
-      async _getTokenExtractor(isSSR) {
+      async _getTokenExtractor(isSSR, cookieName, customTokenExtractor) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(customTokenExtractor)) return customTokenExtractor();
         if (isSSR) {
           const { SupabaseSsrTokenExtractor: SupabaseSsrTokenExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           return new SupabaseSsrTokenExtractor2();
         } else {
           const { BearerTokenExtractor: BearerTokenExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
-          return new BearerTokenExtractor2();
+          return new BearerTokenExtractor2(cookieName ?? "sb-access-token");
         }
       }
       async _getAllowMethod(configure, opts) {
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (!configure || !Guards46.isDefined(opts)) return void 0;
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (!configure || !Guards47.isDefined(opts)) return void 0;
         const { AllowMethodFactory: AllowMethodFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
         return new AllowMethodFactory2().create(opts);
       }
@@ -4281,17 +4362,17 @@ var init_context_module = __esm({
     "use strict";
     ContextModule = class {
       async configure(container) {
-        const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { TOKENS: TOKENS5 } = await import("@xeno-js/shared");
         const { ServiceScopeFactory: ServiceScopeFactory2 } = await Promise.resolve().then(() => (init_service_scope_factory(), service_scope_factory_exports));
         const { NodeRequestContextFactory: NodeRequestContextFactory2 } = await Promise.resolve().then(() => (init_request_context_factory(), request_context_factory_exports));
         const requestContext = new NodeRequestContextFactory2(
           new ServiceScopeFactory2(container)
         ).create();
-        container.addSingleton(TOKENS4.REQUEST_CONTEXT, () => requestContext);
-        container.addSingleton(TOKENS4.CONTEXT_ACCESSOR, () => requestContext);
-        container.addSingleton(TOKENS4.IDENTITY_ACCESSOR, () => requestContext);
-        container.addSingleton(TOKENS4.SERVICE_SCOPE_ACCESSOR, () => requestContext);
-        container.addSingleton(TOKENS4.NETWORK_CONTEXT_ACCESSOR, () => requestContext);
+        container.addSingleton(TOKENS5.REQUEST_CONTEXT, () => requestContext);
+        container.addSingleton(TOKENS5.CONTEXT_ACCESSOR, () => requestContext);
+        container.addSingleton(TOKENS5.IDENTITY_ACCESSOR, () => requestContext);
+        container.addSingleton(TOKENS5.SERVICE_SCOPE_ACCESSOR, () => requestContext);
+        container.addSingleton(TOKENS5.NETWORK_CONTEXT_ACCESSOR, () => requestContext);
         const { UserContextFactory: UserContextFactory2 } = await Promise.resolve().then(() => (init_user_context_factory(), user_context_factory_exports));
         container.addSingleton("USER_CONTEXT_FACTORY", () => {
           return new UserContextFactory2(requestContext);
@@ -4309,7 +4390,7 @@ __export(index_exports, {
   BaseController: () => BaseController,
   BaseHandler: () => BaseHandler,
   BasePostgresSqlDataSource: () => BasePostgresSqlDataSource,
-  BaseQuery: () => import_shared79.Query,
+  BaseQuery: () => import_shared80.Query,
   BaseSqliteSqlDataSource: () => BaseSqliteSqlDataSource,
   ContainerUtils: () => ContainerUtils,
   ReadDao: () => ReadDao,
@@ -4321,7 +4402,7 @@ module.exports = __toCommonJS(index_exports);
 init_application();
 
 // src/infrastructure/builder/app.builder.ts
-var import_shared73 = require("@xeno-js/shared");
+var import_shared74 = require("@xeno-js/shared");
 
 // src/infrastructure/configuration/configuration.ts
 var import_shared32 = require("@xeno-js/shared");
@@ -4600,13 +4681,14 @@ var AppBuilder = class {
   constructor(container) {
     this._container = container ?? new ServiceContainer();
     this._container.addSingleton(
-      import_shared73.TOKENS.CONFIGURATION_SERVICE,
+      import_shared74.TOKENS.CONFIGURATION_SERVICE,
       () => new EnvironmentConfigurationService()
     );
-    this._configuration = this._container.resolve(import_shared73.TOKENS.CONFIGURATION_SERVICE);
+    this._configuration = this._container.resolve(import_shared74.TOKENS.CONFIGURATION_SERVICE);
     this._middlewareConfig.allowOrigins?.push(
       this._configuration.get("APP_URL") ?? `http://localhost:${this._configuration.getNumber("PORT", 3e3)}`
     );
+    this.addContext();
   }
   // --- Module Configurations ---
   _modules = [];
@@ -4642,7 +4724,23 @@ var AppBuilder = class {
     allowOrigins: [],
     allowHeaders: [],
     cors: true,
-    withCredentials: true
+    withCredentials: true,
+    authCookieName: "sb-access-token"
+  };
+  _authConfig = {
+    url: "",
+    key: "",
+    opts: void 0,
+    redirectTo: "",
+    storageOpts: { type: "memory", cookieOpts: void 0, storage: void 0 },
+    ssrOpts: void 0,
+    customAuth: void 0,
+    cookieOpts: {
+      path: "/",
+      httpOnly: true,
+      sameSite: "lax",
+      secure: true
+    }
   };
   _httpConfig = {
     dataSourceToken: void 0,
@@ -4663,7 +4761,7 @@ var AppBuilder = class {
     resilience: { retry: {}, circuitBreaker: {}, bulkhead: {} }
   };
   _loggerConfig = {
-    level: import_shared73.LOG_LEVEL.DEBUG,
+    level: import_shared74.LOG_LEVEL.DEBUG,
     console: true,
     sentry: { config: void 0 },
     pino: { config: void 0 },
@@ -4721,7 +4819,7 @@ var AppBuilder = class {
    * @link https://github.com/xeno-js/xeno-js
    */
   addLogger(setupAction) {
-    if (import_shared73.Guards.isDefined(setupAction)) setupAction(this._loggerConfig, this._configuration);
+    if (import_shared74.Guards.isDefined(setupAction)) setupAction(this._loggerConfig, this._configuration);
     if (this._isLoggerModuleQueued) return this;
     this._isLoggerModuleQueued = true;
     this._modules.push({
@@ -4746,7 +4844,7 @@ var AppBuilder = class {
    * @link https://github.com/xeno-js/xeno-js 
    */
   addCache(setupAction) {
-    if (import_shared73.Guards.isDefined(setupAction)) setupAction(this._config, this._configuration);
+    if (import_shared74.Guards.isDefined(setupAction)) setupAction(this._config, this._configuration);
     if (this._isCacheModuleQueued) return this;
     this._isCacheModuleQueued = true;
     this._modules.push({
@@ -4773,21 +4871,13 @@ var AppBuilder = class {
   addAuth(setupAction) {
     if (this._isAuthModuleQueued) return this;
     this._isAuthModuleQueued = true;
-    const config = {
-      url: "",
-      key: "",
-      opts: void 0,
-      redirectTo: "",
-      storageOpts: { type: "memory", cookieOpts: void 0, storage: void 0 },
-      ssrOpts: void 0
-    };
-    setupAction(config, this._configuration);
+    setupAction(this._authConfig, this._configuration);
     this._modules.push({
       priority: 3,
       name: "AuthModule",
       action: async () => {
         const { AuthUtils: AuthUtils2 } = await Promise.resolve().then(() => (init_auth_utils(), auth_utils_exports));
-        await AuthUtils2.addAuthN(this._container, config);
+        await AuthUtils2.addAuthN(this._container, this._authConfig);
       }
     });
     return this;
@@ -4857,7 +4947,7 @@ var AppBuilder = class {
    * @link https://github.com/xeno-js/xeno-js 
    */
   addPipeline(setupAction) {
-    if (import_shared73.Guards.isDefined(setupAction)) {
+    if (import_shared74.Guards.isDefined(setupAction)) {
       setupAction(this._pipelineConfig, this._configuration);
     }
     this._queuePipelineModule();
@@ -4978,7 +5068,7 @@ var AppBuilder = class {
         console.error(`\u{1F449} Module: **${queued.name}**`);
         console.error(`\u{1F4DD} Reason: ${errorMessage}
 `);
-        if (error instanceof Error && import_shared73.Guards.isDefined(error.stack)) {
+        if (error instanceof Error && import_shared74.Guards.isDefined(error.stack)) {
           console.error(error.stack);
         }
         throw new Error(`Bootstrap failed at [${queued.name}]: ${errorMessage}`, { cause: error });
@@ -5039,7 +5129,8 @@ var AppBuilder = class {
         const middlewareModule = new MiddlewareModule2();
         await middlewareModule.configure(this._container, {
           ...this._middlewareConfig,
-          isAuth: this._isAuthModuleQueued
+          isAuth: this._isAuthModuleQueued,
+          customTokenExtractor: this._authConfig.customAuth?.authHeaderExtractor
         });
       }
     });
@@ -5105,7 +5196,7 @@ var BaseSqliteSqlDataSource = class {
 };
 
 // src/infrastructure/datasources/remote.datasource.ts
-var import_shared74 = require("@xeno-js/shared");
+var import_shared75 = require("@xeno-js/shared");
 
 // src/infrastructure/index.ts
 init_factories();
@@ -5133,8 +5224,8 @@ init_pipeline_utils();
 init_validation_utils();
 
 // src/infrastructure/repositories/read-dao.ts
-var import_shared75 = require("@xeno-js/shared");
 var import_shared76 = require("@xeno-js/shared");
+var import_shared77 = require("@xeno-js/shared");
 var ReadDao = class {
   /**
    * Constructs a new ReadDao instance.
@@ -5154,23 +5245,23 @@ var ReadDao = class {
   _dataSource;
   _mapper;
   async findById(id, ctx, signal) {
-    import_shared75.AppError.throwIfAborted(signal, "ReadDao.findById");
+    import_shared76.AppError.throwIfAborted(signal, "ReadDao.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (import_shared76.Guards.isNullOrEmpty(result)) return import_shared75.Result.ok();
+    if (import_shared77.Guards.isNullOrEmpty(result)) return import_shared76.Result.ok();
     const entity = this._mapper.toEntity(result);
-    return import_shared75.Result.ok(entity);
+    return import_shared76.Result.ok(entity);
   }
   async findAll(ctx, signal) {
-    import_shared75.AppError.throwIfAborted(signal, "ReadDao.findAll");
+    import_shared76.AppError.throwIfAborted(signal, "ReadDao.findAll");
     const results = await this._dataSource.findAll(ctx, signal);
     const entities = results.map((result) => this._mapper.toEntity(result));
-    return import_shared75.Result.ok(entities);
+    return import_shared76.Result.ok(entities);
   }
 };
 
 // src/infrastructure/repositories/repository.ts
-var import_shared77 = require("@xeno-js/shared");
 var import_shared78 = require("@xeno-js/shared");
+var import_shared79 = require("@xeno-js/shared");
 var Repository = class {
   /**
    * Constructs a new Repository instance.
@@ -5190,35 +5281,35 @@ var Repository = class {
   _dataSource;
   _mapper;
   async findById(id, ctx, signal) {
-    import_shared77.AppError.throwIfAborted(signal, "Repository.findById");
+    import_shared78.AppError.throwIfAborted(signal, "Repository.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (import_shared78.Guards.isNullOrEmpty(result)) return import_shared77.Result.ok();
+    if (import_shared79.Guards.isNullOrEmpty(result)) return import_shared78.Result.ok();
     const entity = this._mapper.toEntity(result);
-    return import_shared77.Result.ok(entity);
+    return import_shared78.Result.ok(entity);
   }
   async findAll(ctx, signal) {
-    import_shared77.AppError.throwIfAborted(signal, "Repository.findAll");
+    import_shared78.AppError.throwIfAborted(signal, "Repository.findAll");
     const results = await this._dataSource.findAll(ctx, signal);
     const entities = results.map((result) => this._mapper.toEntity(result));
-    return import_shared77.Result.ok(entities);
+    return import_shared78.Result.ok(entities);
   }
   async save(entity, signal) {
     const dto = this._mapper.toDto(entity);
-    import_shared77.AppError.throwIfAborted(signal, "Repository.save");
+    import_shared78.AppError.throwIfAborted(signal, "Repository.save");
     await this._dataSource.insert(dto, signal);
-    return import_shared77.Result.ok();
+    return import_shared78.Result.ok();
   }
   async delete(entity, ctx, signal) {
     const dto = this._mapper.toDto(entity);
-    import_shared77.AppError.throwIfAborted(signal, "Repository.delete");
+    import_shared78.AppError.throwIfAborted(signal, "Repository.delete");
     await this._dataSource.delete(dto, ctx, signal);
-    return import_shared77.Result.ok();
+    return import_shared78.Result.ok();
   }
   async update(id, entity, ctx, signal) {
     const dto = this._mapper.toPartialDto(entity);
-    import_shared77.AppError.throwIfAborted(signal, "Repository.update");
+    import_shared78.AppError.throwIfAborted(signal, "Repository.update");
     await this._dataSource.update(id, dto, ctx, signal);
-    return import_shared77.Result.ok();
+    return import_shared78.Result.ok();
   }
 };
 
@@ -5236,7 +5327,7 @@ __reExport(drizzle_types_exports, require("drizzle-orm"));
 __reExport(index_exports, drizzle_types_exports, module.exports);
 init_presentation();
 __reExport(index_exports, require("@xeno-js/shared"), module.exports);
-var import_shared79 = require("@xeno-js/shared");
+var import_shared80 = require("@xeno-js/shared");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AppBuilder,