@xeno-js/core 0.1.3 → 0.1.4

package/dist/index.js

@@ -1508,15 +1508,15 @@ var init_logger_utils = __esm({
        */
       async addLogger(container, opts) {
         const loggerDependencies = [];
-        const { Guards: Guards45, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts) || opts.console) {
+        const { Guards: Guards46, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts) || opts.console) {
           const { ConsoleLogger: ConsoleLogger2 } = await Promise.resolve().then(() => (init_console_logger(), console_logger_exports));
           container.addSingleton(TOKENS4.CONSOLE_LOGGER, () => new ConsoleLogger2(opts?.level));
           loggerDependencies.push(TOKENS4.CONSOLE_LOGGER);
         }
         const customLoggerFactories = [];
-        if (Guards45.isDefined(opts)) {
-          if (Guards45.isDefined(opts.sentry.config)) {
+        if (Guards46.isDefined(opts)) {
+          if (Guards46.isDefined(opts.sentry.config)) {
             const { SentryLoggerFactory: SentryLoggerFactory2 } = await Promise.resolve().then(() => (init_sentry_logger_factory(), sentry_logger_factory_exports));
             container.addSingleton(TOKENS4.SENTRY_LOGGER, () => {
               const factory = new SentryLoggerFactory2();
@@ -1524,7 +1524,7 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.SENTRY_LOGGER);
           }
-          if (Guards45.isDefined(opts.pino.config)) {
+          if (Guards46.isDefined(opts.pino.config)) {
             const { PinoLoggerFactory: PinoLoggerFactory2 } = await Promise.resolve().then(() => (init_pino_logger_factory(), pino_logger_factory_exports));
             container.addSingleton(TOKENS4.PINO_LOGGER, () => {
               const factory = new PinoLoggerFactory2();
@@ -1532,10 +1532,10 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.PINO_LOGGER);
           }
-          if (!Guards45.isNullOrEmpty(opts.customLoggers)) {
+          if (!Guards46.isNullOrEmpty(opts.customLoggers)) {
             const customLoggers = opts.customLoggers;
             customLoggers.forEach((f) => {
-              if (Guards45.isDefined(f)) {
+              if (Guards46.isDefined(f)) {
                 customLoggerFactories.push(f);
               }
             });
@@ -1708,8 +1708,8 @@ var init_cache_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addCache(container, opts) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!opts.inMemory && !Guards45.isDefined(opts.redis)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!opts.inMemory && !Guards46.isDefined(opts.redis)) {
           throw new Error(
             "No cache strategies are configured. Please provide at least one cache strategy."
           );
@@ -1719,12 +1719,12 @@ var init_cache_utils = __esm({
           TOKENS4.CACHE_KEY_BUILDER,
           (c) => new CacheKeyBuilder(c.resolve(TOKENS4.IDENTITY_ACCESSOR))
         );
-        if (opts.inMemory || !Guards45.isDefined(opts.redis)) {
+        if (opts.inMemory || !Guards46.isDefined(opts.redis)) {
           const { InMemoryCacheExtended: InMemoryCacheExtended2 } = await Promise.resolve().then(() => (init_inmemory_cache(), inmemory_cache_exports));
           container.addSingleton(TOKENS4.CACHE, () => new InMemoryCacheExtended2());
           return;
         }
-        if (Guards45.isDefined(opts.redis)) {
+        if (Guards46.isDefined(opts.redis)) {
           const { RedisCacheFactory: RedisCacheFactory2 } = await Promise.resolve().then(() => (init_redis_cache_factory(), redis_cache_factory_exports));
           container.addSingleton(TOKENS4.CACHE, () => {
             const config = opts.redis;
@@ -1924,29 +1924,20 @@ var init_csrf_token_service = __esm({
       async generate(subject) {
         const randomBuffer = this._cryptoService.randomBytes(32);
         const nonce = btoa(String.fromCharCode(...randomBuffer)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-        const signature = await this._cryptoService.hmacSha256(
-          this._secret,
-          `${subject}.${nonce}`
-        );
+        const signature = await this._cryptoService.hmacSha256(this._secret, `${subject}.${nonce}`);
         return `${nonce}.${signature}`;
       }
       async validate(token, subject) {
         const separatorIndex = token.indexOf(".");
-        if (separatorIndex <= 0)
-          return false;
+        if (separatorIndex <= 0) return false;
         const nonce = token.slice(0, separatorIndex);
         const signature = token.slice(separatorIndex + 1);
-        if (Guards24.isNullOrEmpty(nonce) || Guards24.isNullOrEmpty(signature))
-          return false;
-        const expected = await this._cryptoService.hmacSha256(
-          this._secret,
-          `${subject}.${nonce}`
-        );
+        if (Guards24.isNullOrEmpty(nonce) || Guards24.isNullOrEmpty(signature)) return false;
+        const expected = await this._cryptoService.hmacSha256(this._secret, `${subject}.${nonce}`);
         const encoder = new TextEncoder();
         const actualBuffer = encoder.encode(signature);
         const expectedBuffer = encoder.encode(expected);
-        if (actualBuffer.length !== expectedBuffer.length)
-          return false;
+        if (actualBuffer.length !== expectedBuffer.length) return false;
         return this._cryptoService.timingSafeEqual(actualBuffer, expectedBuffer);
       }
     };
@@ -2048,15 +2039,12 @@ var init_http_cookie_extractor = __esm({
     "use strict";
     HttpCookieExtractor = class {
       extract(cookie) {
-        if (!Guards27.isDefined(cookie.header))
-          return void 0;
+        if (!Guards27.isDefined(cookie.header)) return void 0;
         for (const rawCookie of cookie.header.split(";")) {
           const separatorIndex = rawCookie.indexOf("=");
-          if (separatorIndex <= 0)
-            continue;
+          if (separatorIndex <= 0) continue;
           const name = rawCookie.slice(0, separatorIndex).trim();
-          if (name !== cookie.name)
-            continue;
+          if (name !== cookie.name) continue;
           const value = rawCookie.slice(separatorIndex + 1).trim();
           try {
             return decodeURIComponent(value);
@@ -2119,12 +2107,10 @@ var init_http_header_extractor = __esm({
         const expiration = StringHelper4.getSingleValue(headers["x-expiration"]);
         const csrf = StringHelper4.getSingleValue(headers["x-csrf-token"]);
         const cookieHeader = StringHelper4.getSingleValue(headers["cookie"]);
-        const csrfCookie = this._cookieExtractor.extract(
-          {
-            header: cookieHeader,
-            name: this._cookieName
-          }
-        );
+        const csrfCookie = this._cookieExtractor.extract({
+          header: cookieHeader,
+          name: this._cookieName
+        });
         const origin = StringHelper4.getSingleValue(headers["origin"]);
         const cleanOrigin = HttpHelper.sanitizeOriginUrl(origin);
         const referer = StringHelper4.getSingleValue(headers["referer"]);
@@ -2244,10 +2230,8 @@ var init_client_ip_resolver = __esm({
         if (!Guards30.isDefined(socketIp))
           return !Guards30.isNullOrEmpty(clientIp) ? clientIp.split(",")[0].trim() : void 0;
         const isTrustedProxy = this._trustedProxies.includes(socketIp);
-        if (!isTrustedProxy)
-          return socketIp;
-        if (Guards30.isDefined(clientIp))
-          return clientIp.split(",")[0].trim();
+        if (!isTrustedProxy) return socketIp;
+        if (Guards30.isDefined(clientIp)) return clientIp.split(",")[0].trim();
         return socketIp;
       }
     };
@@ -2805,8 +2789,8 @@ var init_auth_utils = __esm({
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const pipelines = [];
         const strategies = [];
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.policies)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.policies)) {
           const { PolicyRegistry: PolicyRegistry2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.POLICY_REGISTRY, () => new PolicyRegistry2());
           const policyRegistry = opts.policies;
@@ -2815,16 +2799,16 @@ var init_auth_utils = __esm({
           for (const [intent, policy] of Object.entries(policyRegistry)) {
             const intentLower = intent.toLowerCase();
             registryInstance.addPolicy(intentLower, policy);
-            if (!Guards45.isNullOrEmpty(policy.roles)) {
+            if (!Guards46.isNullOrEmpty(policy.roles)) {
               Policies.add("roles");
             }
-            if (!Guards45.isNullOrEmpty(policy.permissions)) {
+            if (!Guards46.isNullOrEmpty(policy.permissions)) {
               Policies.add("permissions");
             }
-            if (!Guards45.isNullOrEmpty(policy.userId)) {
+            if (!Guards46.isNullOrEmpty(policy.userId)) {
               Policies.add("userId");
             }
-            if (!Guards45.isNullOrEmpty(policy.tenantId)) {
+            if (!Guards46.isNullOrEmpty(policy.tenantId)) {
               Policies.add("tenantId");
             }
           }
@@ -2873,10 +2857,10 @@ var init_auth_utils = __esm({
             strategies.push(TOKENS4.TENANT_AUTHORIZATION_PIPELINE);
           }
         }
-        if (!Guards45.isNullOrEmpty(opts.customAuthorizationStrategy)) {
+        if (!Guards46.isNullOrEmpty(opts.customAuthorizationStrategy)) {
           const customStrategies = opts.customAuthorizationStrategy;
           customStrategies.forEach((strategyToken, index) => {
-            if (Guards45.isDefined(strategyToken)) {
+            if (Guards46.isDefined(strategyToken)) {
               const token = `CUSTOM_AUTHORIZATION_STRATEGY_${index}`;
               container.addSingleton(token, (c) => {
                 return strategyToken(c);
@@ -3079,7 +3063,7 @@ var init_db_module = __esm({
     "use strict";
     DbModule = class {
       async configure(container, opts) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { DbUtils: DbUtils2 } = await Promise.resolve().then(() => (init_db_utils(), db_utils_exports));
         const db = opts.enableSqlLite ? await DbUtils2.addSqlLite(opts) : await DbUtils2.addDbClient(opts);
         const { TransactionState: TransactionState2 } = await Promise.resolve().then(() => (init_transaction_state(), transaction_state_exports));
@@ -3096,7 +3080,7 @@ var init_db_module = __esm({
           return new Proxy(db, {
             get(_target, prop, receiver) {
               const activeState = ttx.state;
-              if (Guards45.isDefined(activeState)) {
+              if (Guards46.isDefined(activeState)) {
                 if (prop === "transaction") {
                   return activeState.transaction.bind(activeState);
                 }
@@ -3133,14 +3117,14 @@ var init_http_utils = __esm({
        */
       async addAxios(container, opts) {
         const { NodeAxiosFactory: NodeAxiosFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts.token)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts.token)) {
           throw new Error("HttpConfig.token is required and must be defined.");
         }
         container.addSingleton(opts.token, () => {
           const factory = new NodeAxiosFactory2();
           const instance = factory.create(opts.client);
-          if (!Guards45.hasMethod(instance, "get") || !Guards45.hasMethod(instance, "post") || !Guards45.hasMethod(instance, "put") || !Guards45.hasMethod(instance, "patch") || !Guards45.hasMethod(instance, "delete")) {
+          if (!Guards46.hasMethod(instance, "get") || !Guards46.hasMethod(instance, "post") || !Guards46.hasMethod(instance, "put") || !Guards46.hasMethod(instance, "patch") || !Guards46.hasMethod(instance, "delete")) {
             throw new Error(
               "The created HTTP client instance does not implement the required methods of IHttpClient."
             );
@@ -3167,8 +3151,8 @@ var init_http_utils = __esm({
         });
       },
       async addAllowOrigin(container, opts) {
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         const allowOrigin = [];
@@ -3228,13 +3212,13 @@ var init_validation_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addValidation(container, opts, logger) {
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards45.isDefined(opts.zod) && Guards45.isNullOrEmpty(opts.customValidationStrategy)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards46.isDefined(opts.zod) && Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
           return [];
         }
         const pipelines = [];
         const validationStrategies = [];
-        if (Guards45.isDefined(opts.zod)) {
+        if (Guards46.isDefined(opts.zod)) {
           const config = opts.zod;
           const { ZodValidatorFactory: ZodValidatorFactory2 } = await Promise.resolve().then(() => (init_zod_validator_factory(), zod_validator_factory_exports));
           container.addSingleton(TOKENS4.ZOD_VALIDATOR, () => {
@@ -3248,9 +3232,9 @@ var init_validation_utils = __esm({
           validationStrategies.push(TOKENS4.SCHEMA_VALIDATION_STRATEGY);
         }
         const customValidationFactory = [];
-        if (!Guards45.isNullOrEmpty(opts.customValidationStrategy)) {
+        if (!Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
           for (const strategyToken of opts.customValidationStrategy) {
-            if (Guards45.isDefined(strategyToken)) {
+            if (Guards46.isDefined(strategyToken)) {
               customValidationFactory.push(strategyToken);
             }
           }
@@ -3353,8 +3337,8 @@ var init_pipeline_utils = __esm({
        */
       async addCommand(container, opts) {
         const pipelines = [];
-        const { Guards: Guards45, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.idempotency)) {
+        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.idempotency)) {
           const { IdempotencyStore: IdempotencyStore2 } = await Promise.resolve().then(() => (init_idempotency_store(), idempotency_store_exports));
           container.addSingleton(
             TOKENS4.IDEMPOTENCY_STORE,
@@ -3374,7 +3358,7 @@ var init_pipeline_utils = __esm({
           });
           pipelines.push(TOKENS4.IDEMPOTENCY_PIPELINE);
         }
-        if (Guards45.isDefined(opts.concurrency)) {
+        if (Guards46.isDefined(opts.concurrency)) {
           const { ConcurrencyRetryPipeline: ConcurrencyRetryPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.CONCURRENCY_RETRY_PIPELINE, () => {
             const config = opts.concurrency;
@@ -3454,13 +3438,13 @@ var init_cqrs_module = __esm({
           return new PerformancePipeline2(logger, thresholdMs);
         });
         pipelines.push(TOKENS4.PERFORMANCE_PIPELINE);
-        const { Guards: Guards45 } = await import("@xeno-js/shared");
-        if (Guards45.isDefined(opts.authorization.policies) || Guards45.isDefined(opts.authorization.customAuthorizationStrategy)) {
+        const { Guards: Guards46 } = await import("@xeno-js/shared");
+        if (Guards46.isDefined(opts.authorization.policies) || Guards46.isDefined(opts.authorization.customAuthorizationStrategy)) {
           const { AuthUtils: AuthUtils2 } = await Promise.resolve().then(() => (init_auth_utils(), auth_utils_exports));
           const authPipelines = await AuthUtils2.addAuthZ(container, opts.authorization);
           pipelines.push(...authPipelines);
         }
-        if (Guards45.isDefined(opts.validation.zod) || Guards45.isDefined(opts.validation.customValidationStrategy)) {
+        if (Guards46.isDefined(opts.validation.zod) || Guards46.isDefined(opts.validation.customValidationStrategy)) {
           const { ValidationUtils: ValidationUtils2 } = await Promise.resolve().then(() => (init_validation_utils(), validation_utils_exports));
           const logger = container.resolve(TOKENS4.LOGGER);
           const validationPipelines = await ValidationUtils2.addValidation(
@@ -3472,11 +3456,11 @@ var init_cqrs_module = __esm({
         }
         const commandPipelines = pipelines;
         const queryPipelines = pipelines;
-        if ((Guards45.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
+        if ((Guards46.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
           const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
           await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
         }
-        if (Guards45.isDefined(opts.commandBus.idempotency) || Guards45.isDefined(opts.commandBus.concurrency)) {
+        if (Guards46.isDefined(opts.commandBus.idempotency) || Guards46.isDefined(opts.commandBus.concurrency)) {
           const { PipelineUtils: PipelineUtils2 } = await Promise.resolve().then(() => (init_pipeline_utils(), pipeline_utils_exports));
           const newCommandPipelines = await PipelineUtils2.addCommand(container, {
             ...opts.commandBus,
@@ -3894,10 +3878,7 @@ var init_csrf_middleware = __esm({
               }
             );
           }
-          if (!Guards37.isDefined(identity?.userId) || !await this._csrfTokenService.validate(
-            headerToken,
-            identity?.userId
-          )) {
+          if (!Guards37.isDefined(identity?.userId) || !await this._csrfTokenService.validate(headerToken, identity?.userId)) {
             return HttpHelper6.error(
               {
                 success: false,
@@ -3945,10 +3926,8 @@ var init_csrf_cookie_middleware = __esm({
         const context = this._requestContext.getContext();
         const identity = context?.identity;
         const network = context?.network;
-        if (!Guards38.isDefined(identity?.userId))
-          return response;
-        if (Guards38.isDefined(network?.csrfCookie))
-          return response;
+        if (!Guards38.isDefined(identity?.userId)) return response;
+        if (Guards38.isDefined(network?.csrfCookie)) return response;
         const token = await this._csrfTokenService.generate(identity.userId);
         const cookieName = this._csrf.cookieName ?? "__Host-xeno-csrf";
         const maxAge = this._csrf.cookieMaxAgeSeconds ?? 3600;
@@ -3957,10 +3936,7 @@ var init_csrf_cookie_middleware = __esm({
         const existingCookies = response.headers["Set-Cookie"];
         response.headers = {
           ...response.headers ?? {},
-          "Set-Cookie": [
-            ...existingCookies ?? [],
-            cookie
-          ]
+          "Set-Cookie": [...existingCookies ?? [], cookie]
         };
         return response;
       }
@@ -4000,7 +3976,7 @@ var init_options_middleware = __esm({
 });
 
 // src/presentation/middlewares/rate-limiter.middleware.ts
-import { ERROR_CODES as ERROR_CODES7, GuidHelper as GuidHelper10, HttpHelper as HttpHelper8 } from "@xeno-js/shared";
+import { ERROR_CODES as ERROR_CODES7, Guards as Guards40, GuidHelper as GuidHelper10, HttpHelper as HttpHelper8, STATUS_CODES as STATUS_CODES9 } from "@xeno-js/shared";
 var RateLimitMiddleware;
 var init_rate_limiter_middleware = __esm({
   "src/presentation/middlewares/rate-limiter.middleware.ts"() {
@@ -4018,6 +3994,27 @@ var init_rate_limiter_middleware = __esm({
       _opts;
       async execute(req, _headers, next) {
         const { network, tracing } = this._ctxAccessor.getContext() ?? {};
+        if (!Guards40.isDefined(network?.clientIp))
+          return HttpHelper8.error(
+            {
+              success: false,
+              error: {
+                code: ERROR_CODES7.SYSTEM_ERROR,
+                message: "IP undefined. Please contact the administrator.",
+                details: `IP undefined. Please contact the administrator.`,
+                path: req.path
+              },
+              correlationId: tracing?.correlationId ?? GuidHelper10.generate(),
+              requestId: network?.requestId ?? GuidHelper10.generate(),
+              spanId: tracing?.spanId ?? GuidHelper10.generate(),
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            },
+            STATUS_CODES9.SERVICE_UNAVAILABLE,
+            {
+              "Content-Type": [network?.formatIndicator ?? "application/json"],
+              "Retry-After": [String(this._opts.windowSeconds)]
+            }
+          );
         const clientIp = network?.clientIp;
         const cacheKey = `rate_limit:${clientIp}`;
         const currentHits = await this._cache.increment(cacheKey, this._opts.windowSeconds);
@@ -4037,7 +4034,7 @@ var init_rate_limiter_middleware = __esm({
               spanId: tracing?.spanId ?? GuidHelper10.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            429,
+            STATUS_CODES9.TOO_MANY_REQUESTS,
             {
               "Content-Type": [network?.formatIndicator ?? "application/json"],
               "Retry-After": [String(this._opts.windowSeconds)]
@@ -4051,10 +4048,10 @@ var init_rate_limiter_middleware = __esm({
 });
 
 // src/presentation/mappers/context.mapper.ts
-import { Guards as Guards40 } from "@xeno-js/shared";
+import { Guards as Guards41 } from "@xeno-js/shared";
 function _buildMessagingContext(meta) {
-  const hasSequenceData = Guards40.isDefined(meta.sequence?.sequenceId) || Guards40.isDefined(meta.sequence?.position) || Guards40.isDefined(meta.sequence?.size);
-  const hasMessagingData = hasSequenceData || Guards40.isDefined(meta.expiration) || Guards40.isDefined(meta.returnAddress);
+  const hasSequenceData = Guards41.isDefined(meta.sequence?.sequenceId) || Guards41.isDefined(meta.sequence?.position) || Guards41.isDefined(meta.sequence?.size);
+  const hasMessagingData = hasSequenceData || Guards41.isDefined(meta.expiration) || Guards41.isDefined(meta.returnAddress);
   const messaging = hasMessagingData ? {
     returnAddress: meta.returnAddress,
     expiration: meta.expiration,
@@ -4115,7 +4112,7 @@ import {
   GUEST as GUEST3,
   GuidHelper as GuidHelper11,
   HttpHelper as HttpHelper9,
-  STATUS_CODES as STATUS_CODES9
+  STATUS_CODES as STATUS_CODES10
 } from "@xeno-js/shared";
 var RequestContextMiddleware;
 var init_request_middleware = __esm({
@@ -4188,7 +4185,7 @@ var init_request_middleware = __esm({
               spanId,
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            STATUS_CODES9.INTERNAL_SERVER_ERROR,
+            STATUS_CODES10.INTERNAL_SERVER_ERROR,
             { "Content-Type": [formatIndicator] }
           );
         }
@@ -4242,7 +4239,9 @@ var middleware_module_exports = {};
 __export(middleware_module_exports, {
   MiddlewareModule: () => MiddlewareModule
 });
-import { Guards as Guards41 } from "@xeno-js/shared";
+import {
+  Guards as Guards42
+} from "@xeno-js/shared";
 var MiddlewareModule;
 var init_middleware_module = __esm({
   "src/infrastructure/modules/middleware.module.ts"() {
@@ -4266,7 +4265,12 @@ var init_middleware_module = __esm({
         const { HttpHeaderExtractor: HttpHeaderExtractor2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         container.addSingleton(
           TOKENS4.SERVICE_EXTRACTOR,
-          (c) => new HttpHeaderExtractor2(c.resolve(TOKENS4.BEARER_TOKEN_EXTRACTOR), c.resolve("COOKIE_EXTRACTOR"), opts.trustedIpHeader, opts.csrf?.cookieName ?? "__Host-xeno-csrf")
+          (c) => new HttpHeaderExtractor2(
+            c.resolve(TOKENS4.BEARER_TOKEN_EXTRACTOR),
+            c.resolve("COOKIE_EXTRACTOR"),
+            opts.trustedIpHeader,
+            opts.csrf?.cookieName ?? "__Host-xeno-csrf"
+          )
         );
         if (!opts.isLogger) {
           const { LoggerUtils: LoggerUtils2 } = await Promise.resolve().then(() => (init_logger_utils(), logger_utils_exports));
@@ -4285,16 +4289,9 @@ var init_middleware_module = __esm({
             c.resolve(TOKENS4.LOGGER)
           )
         );
-        if (opts.optionsMiddleware) {
-          const { OptionsMiddleware: OptionsMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
-          container.addSingleton(
-            TOKENS4.OPTIONS_MIDDLEWARE,
-            (c) => new OptionsMiddleware2(c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR))
-          );
-          middlewares.push(TOKENS4.OPTIONS_MIDDLEWARE);
-        }
-        if (!Guards41.isNullOrEmpty(opts.allowOrigins)) {
-          if (Guards41.isDefined(opts.httpConfig.withCredentials) && opts.allowOrigins.includes("*"))
+        if (!Guards42.isNullOrEmpty(opts.allowOrigins)) {
+          const withCredentials = Guards42.isDefined(opts.httpConfig.withCredentials) ? opts.httpConfig.withCredentials : false;
+          if (withCredentials && opts.allowOrigins.includes("*"))
             throw new Error("Wildcard CORS origin is not allowed when withCredentials is set to true");
           const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("ALLOW_ORIGIN", () => {
@@ -4310,6 +4307,14 @@ var init_middleware_module = __esm({
           });
           middlewares.push(TOKENS4.ALLOW_ORIGIN_MIDDLEWARE);
         }
+        if (opts.optionsMiddleware) {
+          const { OptionsMiddleware: OptionsMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
+          container.addSingleton(
+            TOKENS4.OPTIONS_MIDDLEWARE,
+            (c) => new OptionsMiddleware2(c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR))
+          );
+          middlewares.push(TOKENS4.OPTIONS_MIDDLEWARE);
+        }
         if (opts.cors) {
           const { CORSMiddleware: CORSMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(TOKENS4.CORS_MIDDLEWARE, (c) => {
@@ -4317,7 +4322,7 @@ var init_middleware_module = __esm({
           });
           middlewares.push(TOKENS4.CORS_MIDDLEWARE);
         }
-        if (Guards41.isDefined(opts.routeRegistry)) {
+        if (Guards42.isDefined(opts.routeRegistry)) {
           const registry = opts.routeRegistry;
           const { AllowMethodFactory: AllowMethodFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
           container.addSingleton(TOKENS4.ALLOW_METHOD, () => new AllowMethodFactory2().create(registry));
@@ -4341,32 +4346,37 @@ var init_middleware_module = __esm({
           );
         });
         middlewares.push(TOKENS4.AUTH_MIDDLEWARE);
-        if (Guards41.isDefined(opts.csrf)) {
+        if (Guards42.isDefined(opts.csrf)) {
           const csrf = opts.csrf;
           const { CsrfTokenService: CsrfTokenService2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("CSRF_TOKEN_SERVICE", (c) => {
-            return new CsrfTokenService2(
-              csrf.secret,
-              c.resolve("CRYPTO_SERVICE")
-            );
+            return new CsrfTokenService2(csrf.secret, c.resolve("CRYPTO_SERVICE"));
           });
           const { CsrfCookieMiddleware: CsrfCookieMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton("CSRF_COOKIE_MIDDLEWARE", (c) => {
-            return new CsrfCookieMiddleware2(c.resolve(TOKENS4.REQUEST_CONTEXT), c.resolve("CSRF_TOKEN_SERVICE"), csrf);
+            return new CsrfCookieMiddleware2(
+              c.resolve(TOKENS4.REQUEST_CONTEXT),
+              c.resolve("CSRF_TOKEN_SERVICE"),
+              csrf
+            );
           });
+          middlewares.push("CSRF_COOKIE_MIDDLEWARE");
           const { CsrfMiddleware: CsrfMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(TOKENS4.CSRF_MIDDLEWARE, (c) => {
-            return new CsrfMiddleware2(c.resolve(TOKENS4.REQUEST_CONTEXT), c.resolve("CSRF_TOKEN_SERVICE"));
+            return new CsrfMiddleware2(
+              c.resolve(TOKENS4.REQUEST_CONTEXT),
+              c.resolve("CSRF_TOKEN_SERVICE")
+            );
           });
           middlewares.push(TOKENS4.CSRF_MIDDLEWARE);
         }
-        if (Guards41.isDefined(opts.rateLimite.maxRequests) || Guards41.isDefined(opts.rateLimite.windowSeconds)) {
+        if (Guards42.isDefined(opts.rateLimite.maxRequests) || Guards42.isDefined(opts.rateLimite.windowSeconds)) {
           const maxRequests = opts.rateLimite.maxRequests ?? 30;
-          Guards41.throwIfNegative(maxRequests, "MaxRequests must be positive");
-          Guards41.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
+          Guards42.throwIfNegative(maxRequests, "MaxRequests must be positive");
+          Guards42.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
           const windowSeconds = opts.rateLimite.windowSeconds ?? 30;
-          Guards41.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
-          Guards41.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
+          Guards42.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
+          Guards42.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
           if (!opts.isCache) {
             const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
             await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
@@ -4454,7 +4464,7 @@ __export(index_exports, {
 init_application();
 
 // src/infrastructure/builder/app.builder.ts
-import { Guards as Guards42, LOG_LEVEL as LOG_LEVEL6, TOKENS as TOKENS3 } from "@xeno-js/shared";
+import { Guards as Guards43, LOG_LEVEL as LOG_LEVEL6, TOKENS as TOKENS3 } from "@xeno-js/shared";
 
 // src/infrastructure/configuration/configuration.ts
 import { Guards as Guards13 } from "@xeno-js/shared";
@@ -4730,7 +4740,9 @@ var AppBuilder = class {
       () => new EnvironmentConfigurationService()
     );
     this._configuration = this._container.resolve(TOKENS3.CONFIGURATION_SERVICE);
-    this._middlewareConfig.allowOrigins?.push(this._configuration.get("APP_URL") ?? `http://localhost:${this._configuration.getNumber("PORT", 3e3)}`);
+    this._middlewareConfig.allowOrigins?.push(
+      this._configuration.get("APP_URL") ?? `http://localhost:${this._configuration.getNumber("PORT", 3e3)}`
+    );
   }
   // --- Module Configurations ---
   _modules = [];
@@ -4846,7 +4858,7 @@ var AppBuilder = class {
       pino: { config: void 0 },
       customLoggers: void 0
     };
-    if (Guards42.isDefined(setupAction) && Guards42.isDefined(config))
+    if (Guards43.isDefined(setupAction) && Guards43.isDefined(config))
       setupAction(config, this._configuration);
     this._modules.push({
       priority: 3,
@@ -4872,7 +4884,7 @@ var AppBuilder = class {
   addCache(setupAction) {
     if (this._isCacheModuleQueued) return this;
     this._isCacheModuleQueued = true;
-    if (Guards42.isDefined(setupAction)) setupAction(this._config, this._configuration);
+    if (Guards43.isDefined(setupAction)) setupAction(this._config, this._configuration);
     this._modules.push({
       priority: 3,
       name: "CacheModule",
@@ -4981,7 +4993,7 @@ var AppBuilder = class {
    * @link https://github.com/xeno-js/xeno-js 
    */
   addPipeline(setupAction) {
-    if (Guards42.isDefined(setupAction)) {
+    if (Guards43.isDefined(setupAction)) {
       setupAction(this._pipelineConfig, this._configuration);
     }
     this._queuePipelineModule();
@@ -5115,7 +5127,7 @@ var AppBuilder = class {
         console.error(`\u{1F449} Module: **${queued.name}**`);
         console.error(`\u{1F4DD} Reason: ${errorMessage}
 `);
-        if (error instanceof Error && Guards42.isDefined(error.stack)) {
+        if (error instanceof Error && Guards43.isDefined(error.stack)) {
           console.error(error.stack);
         }
         throw new Error(`Bootstrap failed at [${queued.name}]: ${errorMessage}`, { cause: error });
@@ -5245,7 +5257,7 @@ init_validation_utils();
 
 // src/infrastructure/repositories/read-dao.ts
 import { AppError as AppError16, Result as Result17 } from "@xeno-js/shared";
-import { Guards as Guards43 } from "@xeno-js/shared";
+import { Guards as Guards44 } from "@xeno-js/shared";
 var ReadDao = class {
   /**
    * Constructs a new ReadDao instance.
@@ -5267,7 +5279,7 @@ var ReadDao = class {
   async findById(id, ctx, signal) {
     AppError16.throwIfAborted(signal, "ReadDao.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (Guards43.isNullOrEmpty(result)) return Result17.ok();
+    if (Guards44.isNullOrEmpty(result)) return Result17.ok();
     const entity = this._mapper.toEntity(result);
     return Result17.ok(entity);
   }
@@ -5281,7 +5293,7 @@ var ReadDao = class {
 
 // src/infrastructure/repositories/repository.ts
 import { AppError as AppError17, Result as Result18 } from "@xeno-js/shared";
-import { Guards as Guards44 } from "@xeno-js/shared";
+import { Guards as Guards45 } from "@xeno-js/shared";
 var Repository = class {
   /**
    * Constructs a new Repository instance.
@@ -5303,7 +5315,7 @@ var Repository = class {
   async findById(id, ctx, signal) {
     AppError17.throwIfAborted(signal, "Repository.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (Guards44.isNullOrEmpty(result)) return Result18.ok();
+    if (Guards45.isNullOrEmpty(result)) return Result18.ok();
     const entity = this._mapper.toEntity(result);
     return Result18.ok(entity);
   }