@xeno-js/core 0.1.4 → 0.1.6

package/dist/index.js

@@ -1508,15 +1508,15 @@ var init_logger_utils = __esm({
        */
       async addLogger(container, opts) {
         const loggerDependencies = [];
-        const { Guards: Guards46, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts) || opts.console) {
+        const { Guards: Guards47, LOG_LEVEL: LOG_LEVEL7, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts) || opts.console) {
           const { ConsoleLogger: ConsoleLogger2 } = await Promise.resolve().then(() => (init_console_logger(), console_logger_exports));
           container.addSingleton(TOKENS4.CONSOLE_LOGGER, () => new ConsoleLogger2(opts?.level));
           loggerDependencies.push(TOKENS4.CONSOLE_LOGGER);
         }
         const customLoggerFactories = [];
-        if (Guards46.isDefined(opts)) {
-          if (Guards46.isDefined(opts.sentry.config)) {
+        if (Guards47.isDefined(opts)) {
+          if (Guards47.isDefined(opts.sentry.config)) {
             const { SentryLoggerFactory: SentryLoggerFactory2 } = await Promise.resolve().then(() => (init_sentry_logger_factory(), sentry_logger_factory_exports));
             container.addSingleton(TOKENS4.SENTRY_LOGGER, () => {
               const factory = new SentryLoggerFactory2();
@@ -1524,7 +1524,7 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.SENTRY_LOGGER);
           }
-          if (Guards46.isDefined(opts.pino.config)) {
+          if (Guards47.isDefined(opts.pino.config)) {
             const { PinoLoggerFactory: PinoLoggerFactory2 } = await Promise.resolve().then(() => (init_pino_logger_factory(), pino_logger_factory_exports));
             container.addSingleton(TOKENS4.PINO_LOGGER, () => {
               const factory = new PinoLoggerFactory2();
@@ -1532,10 +1532,10 @@ var init_logger_utils = __esm({
             });
             loggerDependencies.push(TOKENS4.PINO_LOGGER);
           }
-          if (!Guards46.isNullOrEmpty(opts.customLoggers)) {
+          if (!Guards47.isNullOrEmpty(opts.customLoggers)) {
             const customLoggers = opts.customLoggers;
             customLoggers.forEach((f) => {
-              if (Guards46.isDefined(f)) {
+              if (Guards47.isDefined(f)) {
                 customLoggerFactories.push(f);
               }
             });
@@ -1708,8 +1708,8 @@ var init_cache_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addCache(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!opts.inMemory && !Guards46.isDefined(opts.redis)) {
+        const { Guards: Guards47, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!opts.inMemory && !Guards47.isDefined(opts.redis)) {
           throw new Error(
             "No cache strategies are configured. Please provide at least one cache strategy."
           );
@@ -1719,12 +1719,12 @@ var init_cache_utils = __esm({
           TOKENS4.CACHE_KEY_BUILDER,
           (c) => new CacheKeyBuilder(c.resolve(TOKENS4.IDENTITY_ACCESSOR))
         );
-        if (opts.inMemory || !Guards46.isDefined(opts.redis)) {
+        if (opts.inMemory || !Guards47.isDefined(opts.redis)) {
           const { InMemoryCacheExtended: InMemoryCacheExtended2 } = await Promise.resolve().then(() => (init_inmemory_cache(), inmemory_cache_exports));
           container.addSingleton(TOKENS4.CACHE, () => new InMemoryCacheExtended2());
           return;
         }
-        if (Guards46.isDefined(opts.redis)) {
+        if (Guards47.isDefined(opts.redis)) {
           const { RedisCacheFactory: RedisCacheFactory2 } = await Promise.resolve().then(() => (init_redis_cache_factory(), redis_cache_factory_exports));
           container.addSingleton(TOKENS4.CACHE, () => {
             const config = opts.redis;
@@ -1763,6 +1763,17 @@ var init_allow_method_service = __esm({
         }
         return false;
       }
+      getMethods(path) {
+        const cleanPath = this.normalizePath(path.split("?")[0].split("#")[0]);
+        const methods = this.findMethods(cleanPath);
+        return Guards22.isDefined(methods) ? methods.join(", ").toUpperCase() : "";
+      }
+      findMethods(cleanPath) {
+        const staticMethods = this._staticRoutes.get(cleanPath);
+        if (Guards22.isDefined(staticMethods)) return staticMethods;
+        for (const route of this._dynamicRoutes) if (route.pattern.test(cleanPath)) return route.methods;
+        return void 0;
+      }
       isDynamicPath(path) {
         return path.includes(":") || path.includes("{") && path.includes("}");
       }
@@ -2789,8 +2800,8 @@ var init_auth_utils = __esm({
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const pipelines = [];
         const strategies = [];
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (Guards46.isDefined(opts.policies)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.policies)) {
           const { PolicyRegistry: PolicyRegistry2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.POLICY_REGISTRY, () => new PolicyRegistry2());
           const policyRegistry = opts.policies;
@@ -2799,16 +2810,16 @@ var init_auth_utils = __esm({
           for (const [intent, policy] of Object.entries(policyRegistry)) {
             const intentLower = intent.toLowerCase();
             registryInstance.addPolicy(intentLower, policy);
-            if (!Guards46.isNullOrEmpty(policy.roles)) {
+            if (!Guards47.isNullOrEmpty(policy.roles)) {
               Policies.add("roles");
             }
-            if (!Guards46.isNullOrEmpty(policy.permissions)) {
+            if (!Guards47.isNullOrEmpty(policy.permissions)) {
               Policies.add("permissions");
             }
-            if (!Guards46.isNullOrEmpty(policy.userId)) {
+            if (!Guards47.isNullOrEmpty(policy.userId)) {
               Policies.add("userId");
             }
-            if (!Guards46.isNullOrEmpty(policy.tenantId)) {
+            if (!Guards47.isNullOrEmpty(policy.tenantId)) {
               Policies.add("tenantId");
             }
           }
@@ -2857,10 +2868,10 @@ var init_auth_utils = __esm({
             strategies.push(TOKENS4.TENANT_AUTHORIZATION_PIPELINE);
           }
         }
-        if (!Guards46.isNullOrEmpty(opts.customAuthorizationStrategy)) {
+        if (!Guards47.isNullOrEmpty(opts.customAuthorizationStrategy)) {
           const customStrategies = opts.customAuthorizationStrategy;
           customStrategies.forEach((strategyToken, index) => {
-            if (Guards46.isDefined(strategyToken)) {
+            if (Guards47.isDefined(strategyToken)) {
               const token = `CUSTOM_AUTHORIZATION_STRATEGY_${index}`;
               container.addSingleton(token, (c) => {
                 return strategyToken(c);
@@ -3063,7 +3074,7 @@ var init_db_module = __esm({
     "use strict";
     DbModule = class {
       async configure(container, opts) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        const { Guards: Guards47, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { DbUtils: DbUtils2 } = await Promise.resolve().then(() => (init_db_utils(), db_utils_exports));
         const db = opts.enableSqlLite ? await DbUtils2.addSqlLite(opts) : await DbUtils2.addDbClient(opts);
         const { TransactionState: TransactionState2 } = await Promise.resolve().then(() => (init_transaction_state(), transaction_state_exports));
@@ -3080,7 +3091,7 @@ var init_db_module = __esm({
           return new Proxy(db, {
             get(_target, prop, receiver) {
               const activeState = ttx.state;
-              if (Guards46.isDefined(activeState)) {
+              if (Guards47.isDefined(activeState)) {
                 if (prop === "transaction") {
                   return activeState.transaction.bind(activeState);
                 }
@@ -3117,14 +3128,14 @@ var init_http_utils = __esm({
        */
       async addAxios(container, opts) {
         const { NodeAxiosFactory: NodeAxiosFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts.token)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts.token)) {
           throw new Error("HttpConfig.token is required and must be defined.");
         }
         container.addSingleton(opts.token, () => {
           const factory = new NodeAxiosFactory2();
           const instance = factory.create(opts.client);
-          if (!Guards46.hasMethod(instance, "get") || !Guards46.hasMethod(instance, "post") || !Guards46.hasMethod(instance, "put") || !Guards46.hasMethod(instance, "patch") || !Guards46.hasMethod(instance, "delete")) {
+          if (!Guards47.hasMethod(instance, "get") || !Guards47.hasMethod(instance, "post") || !Guards47.hasMethod(instance, "put") || !Guards47.hasMethod(instance, "patch") || !Guards47.hasMethod(instance, "delete")) {
             throw new Error(
               "The created HTTP client instance does not implement the required methods of IHttpClient."
             );
@@ -3151,8 +3162,8 @@ var init_http_utils = __esm({
         });
       },
       async addAllowOrigin(container, opts) {
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (Guards46.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isNullOrEmpty(opts)) throw new Error("At least an allow origin must be passed");
         const { TOKENS: TOKENS4 } = await import("@xeno-js/shared");
         const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
         const allowOrigin = [];
@@ -3212,13 +3223,13 @@ var init_validation_utils = __esm({
        * @link https://github.com/xeno-js/xeno-js
        */
       async addValidation(container, opts, logger) {
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (!Guards46.isDefined(opts.zod) && Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
+        const { Guards: Guards47, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (!Guards47.isDefined(opts.zod) && Guards47.isNullOrEmpty(opts.customValidationStrategy)) {
           return [];
         }
         const pipelines = [];
         const validationStrategies = [];
-        if (Guards46.isDefined(opts.zod)) {
+        if (Guards47.isDefined(opts.zod)) {
           const config = opts.zod;
           const { ZodValidatorFactory: ZodValidatorFactory2 } = await Promise.resolve().then(() => (init_zod_validator_factory(), zod_validator_factory_exports));
           container.addSingleton(TOKENS4.ZOD_VALIDATOR, () => {
@@ -3232,9 +3243,9 @@ var init_validation_utils = __esm({
           validationStrategies.push(TOKENS4.SCHEMA_VALIDATION_STRATEGY);
         }
         const customValidationFactory = [];
-        if (!Guards46.isNullOrEmpty(opts.customValidationStrategy)) {
+        if (!Guards47.isNullOrEmpty(opts.customValidationStrategy)) {
           for (const strategyToken of opts.customValidationStrategy) {
-            if (Guards46.isDefined(strategyToken)) {
+            if (Guards47.isDefined(strategyToken)) {
               customValidationFactory.push(strategyToken);
             }
           }
@@ -3337,8 +3348,8 @@ var init_pipeline_utils = __esm({
        */
       async addCommand(container, opts) {
         const pipelines = [];
-        const { Guards: Guards46, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
-        if (Guards46.isDefined(opts.idempotency)) {
+        const { Guards: Guards47, TOKENS: TOKENS4 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.idempotency)) {
           const { IdempotencyStore: IdempotencyStore2 } = await Promise.resolve().then(() => (init_idempotency_store(), idempotency_store_exports));
           container.addSingleton(
             TOKENS4.IDEMPOTENCY_STORE,
@@ -3358,7 +3369,7 @@ var init_pipeline_utils = __esm({
           });
           pipelines.push(TOKENS4.IDEMPOTENCY_PIPELINE);
         }
-        if (Guards46.isDefined(opts.concurrency)) {
+        if (Guards47.isDefined(opts.concurrency)) {
           const { ConcurrencyRetryPipeline: ConcurrencyRetryPipeline2 } = await Promise.resolve().then(() => (init_application(), application_exports));
           container.addSingleton(TOKENS4.CONCURRENCY_RETRY_PIPELINE, () => {
             const config = opts.concurrency;
@@ -3438,13 +3449,13 @@ var init_cqrs_module = __esm({
           return new PerformancePipeline2(logger, thresholdMs);
         });
         pipelines.push(TOKENS4.PERFORMANCE_PIPELINE);
-        const { Guards: Guards46 } = await import("@xeno-js/shared");
-        if (Guards46.isDefined(opts.authorization.policies) || Guards46.isDefined(opts.authorization.customAuthorizationStrategy)) {
+        const { Guards: Guards47 } = await import("@xeno-js/shared");
+        if (Guards47.isDefined(opts.authorization.policies) || Guards47.isDefined(opts.authorization.customAuthorizationStrategy)) {
           const { AuthUtils: AuthUtils2 } = await Promise.resolve().then(() => (init_auth_utils(), auth_utils_exports));
           const authPipelines = await AuthUtils2.addAuthZ(container, opts.authorization);
           pipelines.push(...authPipelines);
         }
-        if (Guards46.isDefined(opts.validation.zod) || Guards46.isDefined(opts.validation.customValidationStrategy)) {
+        if (Guards47.isDefined(opts.validation.zod) || Guards47.isDefined(opts.validation.customValidationStrategy)) {
           const { ValidationUtils: ValidationUtils2 } = await Promise.resolve().then(() => (init_validation_utils(), validation_utils_exports));
           const logger = container.resolve(TOKENS4.LOGGER);
           const validationPipelines = await ValidationUtils2.addValidation(
@@ -3456,11 +3467,11 @@ var init_cqrs_module = __esm({
         }
         const commandPipelines = pipelines;
         const queryPipelines = pipelines;
-        if ((Guards46.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
+        if ((Guards47.isDefined(opts.commandBus.idempotency) || opts.queryBus.isEnabled) && opts.isCache) {
           const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
           await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
         }
-        if (Guards46.isDefined(opts.commandBus.idempotency) || Guards46.isDefined(opts.commandBus.concurrency)) {
+        if (Guards47.isDefined(opts.commandBus.idempotency) || Guards47.isDefined(opts.commandBus.concurrency)) {
           const { PipelineUtils: PipelineUtils2 } = await Promise.resolve().then(() => (init_pipeline_utils(), pipeline_utils_exports));
           const newCommandPipelines = await PipelineUtils2.addCommand(container, {
             ...opts.commandBus,
@@ -3649,7 +3660,10 @@ var init_allow_method_middleware = __esm({
               spanId: tracing?.spanId ?? GuidHelper6.generate(),
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             },
-            STATUS_CODES4.NOT_ALLOWED
+            STATUS_CODES4.NOT_ALLOWED,
+            {
+              Allow: this._allowMethod.getMethods(req.path)
+            }
           );
         }
         return await next();
@@ -3788,11 +3802,13 @@ var init_cors_middleware = __esm({
   "src/presentation/middlewares/cors.middleware.ts"() {
     "use strict";
     CORSMiddleware = class {
-      constructor(_requestContext) {
+      constructor(_requestContext, _withCredentials = "false") {
         this._requestContext = _requestContext;
+        this._withCredentials = _withCredentials;
       }
       _requestContext;
-      async execute(req, _headers, next) {
+      _withCredentials;
+      async execute(_req, _headers, next) {
         const { network } = this._requestContext.getContext() ?? {};
         const origin = network?.origin;
         const response = await next();
@@ -3800,7 +3816,7 @@ var init_cors_middleware = __esm({
           response.headers = {
             ...response.headers ?? {},
             "Access-Control-Allow-Origin": origin,
-            "Access-Control-Allow-Credentials": "true",
+            "Access-Control-Allow-Credentials": this._withCredentials,
             "Vary": "Origin"
           };
         return response;
@@ -3951,10 +3967,16 @@ var init_options_middleware = __esm({
   "src/presentation/middlewares/options.middleware.ts"() {
     "use strict";
     OptionsMiddleware = class {
-      constructor(_requestContext) {
+      constructor(_requestContext, _alloewMethod, _allowHeaders = [], _withCredentials = "false") {
         this._requestContext = _requestContext;
+        this._alloewMethod = _alloewMethod;
+        this._allowHeaders = _allowHeaders;
+        this._withCredentials = _withCredentials;
       }
       _requestContext;
+      _alloewMethod;
+      _allowHeaders;
+      _withCredentials;
       async execute(req, _headers, next) {
         if (req.method.toUpperCase() === "OPTIONS") {
           const network = this._requestContext.getNetworkContext();
@@ -3962,11 +3984,11 @@ var init_options_middleware = __esm({
           const headers = {};
           if (Guards39.isDefined(origin)) {
             headers["Access-Control-Allow-Origin"] = origin;
-            headers["Access-Control-Allow-Credentials"] = "true";
+            headers["Access-Control-Allow-Credentials"] = this._withCredentials;
             headers["Vary"] = "Origin";
           }
-          headers["Access-Control-Allow-Methods"] = "POST,GET,PUT,PATCH,DELETE,OPTIONS";
-          headers["Access-Control-Allow-Headers"] = "X-CSRF-Token, Accept, Accept-Version, Content-Type, Authorization, X-Correlation-Id";
+          headers["Access-Control-Allow-Methods"] = this._alloewMethod.getMethods(req.path);
+          headers["Access-Control-Allow-Headers"] = this._allowHeaders.join(", ");
           return HttpHelper7.success(null, STATUS_CODES8.NO_CONTENT, {}, headers);
         }
         return await next();
@@ -3976,32 +3998,42 @@ var init_options_middleware = __esm({
 });
 
 // src/presentation/middlewares/rate-limiter.middleware.ts
-import { ERROR_CODES as ERROR_CODES7, Guards as Guards40, GuidHelper as GuidHelper10, HttpHelper as HttpHelper8, STATUS_CODES as STATUS_CODES9 } from "@xeno-js/shared";
+import {
+  ERROR_CODE_MESSAGES as ERROR_CODE_MESSAGES6,
+  ERROR_CODES as ERROR_CODES7,
+  Guards as Guards40,
+  GuidHelper as GuidHelper10,
+  HttpHelper as HttpHelper8,
+  STATUS_CODES as STATUS_CODES9
+} from "@xeno-js/shared";
 var RateLimitMiddleware;
 var init_rate_limiter_middleware = __esm({
   "src/presentation/middlewares/rate-limiter.middleware.ts"() {
     "use strict";
     RateLimitMiddleware = class {
-      constructor(_ctxAccessor, _cache, _logger, _opts) {
+      constructor(_ctxAccessor, _cache, _keyBuilder, _logger, _opts) {
         this._ctxAccessor = _ctxAccessor;
         this._cache = _cache;
+        this._keyBuilder = _keyBuilder;
         this._logger = _logger;
         this._opts = _opts;
       }
       _ctxAccessor;
       _cache;
+      _keyBuilder;
       _logger;
       _opts;
       async execute(req, _headers, next) {
+        const cacheKey = this._keyBuilder.buildRateLimitKey(req.path);
         const { network, tracing } = this._ctxAccessor.getContext() ?? {};
-        if (!Guards40.isDefined(network?.clientIp))
+        if (!Guards40.isDefined(cacheKey))
           return HttpHelper8.error(
             {
               success: false,
               error: {
                 code: ERROR_CODES7.SYSTEM_ERROR,
-                message: "IP undefined. Please contact the administrator.",
-                details: `IP undefined. Please contact the administrator.`,
+                message: ERROR_CODE_MESSAGES6[ERROR_CODES7.SYSTEM_ERROR],
+                details: `Bad Request: Unable to identify client context for rate limiting.`,
                 path: req.path
               },
               correlationId: tracing?.correlationId ?? GuidHelper10.generate(),
@@ -4015,18 +4047,16 @@ var init_rate_limiter_middleware = __esm({
               "Retry-After": [String(this._opts.windowSeconds)]
             }
           );
-        const clientIp = network?.clientIp;
-        const cacheKey = `rate_limit:${clientIp}`;
         const currentHits = await this._cache.increment(cacheKey, this._opts.windowSeconds);
         if (currentHits > this._opts.maxRequests) {
-          this._logger.warn(`[RateLimit] IP ${clientIp} blocked on ${req.path}`);
+          this._logger.warn(`[RateLimit] key ${cacheKey} has been  blocked on ${req.path}`);
           return HttpHelper8.error(
             {
               success: false,
               error: {
                 code: ERROR_CODES7.TOO_MANY_REQUESTS,
-                message: "Rate limit exceeded.",
-                details: `IP ${clientIp} throttled.`,
+                message: ERROR_CODE_MESSAGES6[ERROR_CODES7.TOO_MANY_REQUESTS],
+                details: `Rate limit exceeded. Key ${cacheKey} throttled.`,
                 path: req.path
               },
               correlationId: tracing?.correlationId ?? GuidHelper10.generate(),
@@ -4107,7 +4137,7 @@ var init_context_mapper = __esm({
 
 // src/presentation/middlewares/request.middleware.ts
 import {
-  ERROR_CODE_MESSAGES as ERROR_CODE_MESSAGES6,
+  ERROR_CODE_MESSAGES as ERROR_CODE_MESSAGES7,
   ERROR_CODES as ERROR_CODES8,
   GUEST as GUEST3,
   GuidHelper as GuidHelper11,
@@ -4176,7 +4206,7 @@ var init_request_middleware = __esm({
               success: false,
               error: {
                 code: ERROR_CODES8.SYSTEM_ERROR,
-                message: ERROR_CODE_MESSAGES6[ERROR_CODES8.SYSTEM_ERROR],
+                message: ERROR_CODE_MESSAGES7[ERROR_CODES8.SYSTEM_ERROR],
                 details: `[Fatal System Error] Exception caught during request handling on path: ${req.path}`,
                 path: req.path
               },
@@ -4234,13 +4264,57 @@ var init_presentation = __esm({
   }
 });
 
+// src/infrastructure/cache/rate-limit-key-builder.cache.ts
+import { Guards as Guards42 } from "@xeno-js/shared";
+var RateLimitKeyBuilder;
+var init_rate_limit_key_builder_cache = __esm({
+  "src/infrastructure/cache/rate-limit-key-builder.cache.ts"() {
+    "use strict";
+    RateLimitKeyBuilder = class {
+      constructor(_contextAccessor) {
+        this._contextAccessor = _contextAccessor;
+      }
+      _contextAccessor;
+      buildRateLimitKey(resource) {
+        const ctx = this._contextAccessor.getContext();
+        const tenantId = ctx?.identity?.tenantId;
+        const userId = ctx?.identity?.userId;
+        const clientIp = ctx?.network?.clientIp;
+        if (!Guards42.isNullOrEmpty(tenantId) && !Guards42.isNullOrEmpty(userId))
+          return `ratelimit:tenant:${tenantId}:user:${userId}:${resource}`;
+        if (!Guards42.isNullOrEmpty(tenantId) && !Guards42.isNullOrEmpty(clientIp))
+          return `ratelimit:tenant:${tenantId}:ip:${clientIp}:${resource}`;
+        if (!Guards42.isNullOrEmpty(userId)) return `ratelimit:user:${userId}:${resource}`;
+        if (!Guards42.isNullOrEmpty(clientIp)) return `ratelimit:ip:${clientIp}:${resource}`;
+        return void 0;
+      }
+    };
+  }
+});
+
+// src/infrastructure/cache/index.ts
+var cache_exports = {};
+__export(cache_exports, {
+  InMemoryCacheExtended: () => InMemoryCacheExtended,
+  RateLimitKeyBuilder: () => RateLimitKeyBuilder,
+  RedisCache: () => RedisCache
+});
+var init_cache = __esm({
+  "src/infrastructure/cache/index.ts"() {
+    "use strict";
+    init_inmemory_cache();
+    init_rate_limit_key_builder_cache();
+    init_redis_cache();
+  }
+});
+
 // src/infrastructure/modules/middleware.module.ts
 var middleware_module_exports = {};
 __export(middleware_module_exports, {
   MiddlewareModule: () => MiddlewareModule
 });
 import {
-  Guards as Guards42
+  Guards as Guards43
 } from "@xeno-js/shared";
 var MiddlewareModule;
 var init_middleware_module = __esm({
@@ -4289,10 +4363,12 @@ var init_middleware_module = __esm({
             c.resolve(TOKENS4.LOGGER)
           )
         );
-        if (!Guards42.isNullOrEmpty(opts.allowOrigins)) {
-          const withCredentials = Guards42.isDefined(opts.httpConfig.withCredentials) ? opts.httpConfig.withCredentials : false;
-          if (withCredentials && opts.allowOrigins.includes("*"))
-            throw new Error("Wildcard CORS origin is not allowed when withCredentials is set to true");
+        if (!Guards43.isNullOrEmpty(opts.allowOrigins)) {
+          const withCredentials2 = opts.httpConfig.withCredentials ?? false;
+          if (withCredentials2 && opts.allowOrigins.includes("*"))
+            throw new Error(
+              "Wildcard CORS origin is not allowed when withCredentials is set to true in addHttpCore"
+            );
           const { AllowOrigin: AllowOrigin2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("ALLOW_ORIGIN", () => {
             return new AllowOrigin2(opts.allowOrigins);
@@ -4307,22 +4383,28 @@ var init_middleware_module = __esm({
           });
           middlewares.push(TOKENS4.ALLOW_ORIGIN_MIDDLEWARE);
         }
+        const withCredentials = Guards43.isDefined(opts.httpConfig.withCredentials) && opts.httpConfig.withCredentials ? "true" : "false";
         if (opts.optionsMiddleware) {
           const { OptionsMiddleware: OptionsMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(
             TOKENS4.OPTIONS_MIDDLEWARE,
-            (c) => new OptionsMiddleware2(c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR))
+            (c) => new OptionsMiddleware2(
+              c.resolve(TOKENS4.NETWORK_CONTEXT_ACCESSOR),
+              c.resolve(TOKENS4.ALLOW_METHOD),
+              opts.allowHeaders,
+              withCredentials
+            )
           );
           middlewares.push(TOKENS4.OPTIONS_MIDDLEWARE);
         }
         if (opts.cors) {
           const { CORSMiddleware: CORSMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
           container.addSingleton(TOKENS4.CORS_MIDDLEWARE, (c) => {
-            return new CORSMiddleware2(c.resolve(TOKENS4.CONTEXT_ACCESSOR));
+            return new CORSMiddleware2(c.resolve(TOKENS4.CONTEXT_ACCESSOR), withCredentials);
           });
           middlewares.push(TOKENS4.CORS_MIDDLEWARE);
         }
-        if (Guards42.isDefined(opts.routeRegistry)) {
+        if (Guards43.isDefined(opts.routeRegistry)) {
           const registry = opts.routeRegistry;
           const { AllowMethodFactory: AllowMethodFactory2 } = await Promise.resolve().then(() => (init_factories(), factories_exports));
           container.addSingleton(TOKENS4.ALLOW_METHOD, () => new AllowMethodFactory2().create(registry));
@@ -4346,7 +4428,38 @@ var init_middleware_module = __esm({
           );
         });
         middlewares.push(TOKENS4.AUTH_MIDDLEWARE);
-        if (Guards42.isDefined(opts.csrf)) {
+        if (Guards43.isDefined(opts.rateLimite.maxRequests) || Guards43.isDefined(opts.rateLimite.windowSeconds)) {
+          const maxRequests = opts.rateLimite.maxRequests ?? 30;
+          Guards43.throwIfNegative(maxRequests, "MaxRequests must be positive");
+          Guards43.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
+          const windowSeconds = opts.rateLimite.windowSeconds ?? 30;
+          Guards43.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
+          Guards43.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
+          if (!opts.isCache) {
+            const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
+            await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
+          }
+          const { RateLimitKeyBuilder: RateLimitKeyBuilder2 } = await Promise.resolve().then(() => (init_cache(), cache_exports));
+          container.addSingleton(
+            "RATE_LIMIT_KEY_BUILDER",
+            (c) => new RateLimitKeyBuilder2(c.resolve(TOKENS4.REQUEST_CONTEXT))
+          );
+          const { RateLimitMiddleware: RateLimitMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
+          container.addSingleton(TOKENS4.RATE_LIMITER_MIDDLEWARE, (c) => {
+            return new RateLimitMiddleware2(
+              c.resolve(TOKENS4.CONTEXT_ACCESSOR),
+              c.resolve(TOKENS4.CACHE),
+              c.resolve("RATE_LIMIT_KEY_BUILDER"),
+              c.resolve(TOKENS4.LOGGER),
+              {
+                maxRequests,
+                windowSeconds
+              }
+            );
+          });
+          middlewares.push(TOKENS4.RATE_LIMITER_MIDDLEWARE);
+        }
+        if (Guards43.isDefined(opts.csrf)) {
           const csrf = opts.csrf;
           const { CsrfTokenService: CsrfTokenService2 } = await Promise.resolve().then(() => (init_services(), services_exports));
           container.addSingleton("CSRF_TOKEN_SERVICE", (c) => {
@@ -4370,31 +4483,6 @@ var init_middleware_module = __esm({
           });
           middlewares.push(TOKENS4.CSRF_MIDDLEWARE);
         }
-        if (Guards42.isDefined(opts.rateLimite.maxRequests) || Guards42.isDefined(opts.rateLimite.windowSeconds)) {
-          const maxRequests = opts.rateLimite.maxRequests ?? 30;
-          Guards42.throwIfNegative(maxRequests, "MaxRequests must be positive");
-          Guards42.throwIfNotInteger(maxRequests, "MaxRequests must be an integer");
-          const windowSeconds = opts.rateLimite.windowSeconds ?? 30;
-          Guards42.throwIfNegative(windowSeconds, "WindowSeconds must be positive");
-          Guards42.throwIfNotInteger(windowSeconds, "WindowSeconds must be an integer");
-          if (!opts.isCache) {
-            const { CacheUtils: CacheUtils2 } = await Promise.resolve().then(() => (init_cache_utils(), cache_utils_exports));
-            await CacheUtils2.addCache(container, { inMemory: true, redis: void 0 });
-          }
-          const { RateLimitMiddleware: RateLimitMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
-          container.addSingleton(TOKENS4.RATE_LIMITER_MIDDLEWARE, (c) => {
-            return new RateLimitMiddleware2(
-              c.resolve(TOKENS4.CONTEXT_ACCESSOR),
-              c.resolve(TOKENS4.CACHE),
-              c.resolve(TOKENS4.LOGGER),
-              {
-                maxRequests,
-                windowSeconds
-              }
-            );
-          });
-          middlewares.push(TOKENS4.RATE_LIMITER_MIDDLEWARE);
-        }
         const { CompositeMiddleware: CompositeMiddleware2 } = await Promise.resolve().then(() => (init_presentation(), presentation_exports));
         container.addSingleton(TOKENS4.MIDDLEWARE, (c) => {
           const resolvedMiddleware = middlewares.map(
@@ -4464,7 +4552,7 @@ __export(index_exports, {
 init_application();
 
 // src/infrastructure/builder/app.builder.ts
-import { Guards as Guards43, LOG_LEVEL as LOG_LEVEL6, TOKENS as TOKENS3 } from "@xeno-js/shared";
+import { Guards as Guards44, LOG_LEVEL as LOG_LEVEL6, TOKENS as TOKENS3 } from "@xeno-js/shared";
 
 // src/infrastructure/configuration/configuration.ts
 import { Guards as Guards13 } from "@xeno-js/shared";
@@ -4776,6 +4864,7 @@ var AppBuilder = class {
     trustedIpHeader: void 0,
     trustedProxies: [],
     allowOrigins: [],
+    allowHeaders: [],
     cors: true
   };
   _httpConfig = {
@@ -4858,7 +4947,7 @@ var AppBuilder = class {
       pino: { config: void 0 },
       customLoggers: void 0
     };
-    if (Guards43.isDefined(setupAction) && Guards43.isDefined(config))
+    if (Guards44.isDefined(setupAction) && Guards44.isDefined(config))
       setupAction(config, this._configuration);
     this._modules.push({
       priority: 3,
@@ -4884,7 +4973,7 @@ var AppBuilder = class {
   addCache(setupAction) {
     if (this._isCacheModuleQueued) return this;
     this._isCacheModuleQueued = true;
-    if (Guards43.isDefined(setupAction)) setupAction(this._config, this._configuration);
+    if (Guards44.isDefined(setupAction)) setupAction(this._config, this._configuration);
     this._modules.push({
       priority: 3,
       name: "CacheModule",
@@ -4993,7 +5082,7 @@ var AppBuilder = class {
    * @link https://github.com/xeno-js/xeno-js 
    */
   addPipeline(setupAction) {
-    if (Guards43.isDefined(setupAction)) {
+    if (Guards44.isDefined(setupAction)) {
       setupAction(this._pipelineConfig, this._configuration);
     }
     this._queuePipelineModule();
@@ -5127,7 +5216,7 @@ var AppBuilder = class {
         console.error(`\u{1F449} Module: **${queued.name}**`);
         console.error(`\u{1F4DD} Reason: ${errorMessage}
 `);
-        if (error instanceof Error && Guards43.isDefined(error.stack)) {
+        if (error instanceof Error && Guards44.isDefined(error.stack)) {
           console.error(error.stack);
         }
         throw new Error(`Bootstrap failed at [${queued.name}]: ${errorMessage}`, { cause: error });
@@ -5219,8 +5308,8 @@ var AppBuilder = class {
   }
 };
 
-// src/infrastructure/cache/index.ts
-init_redis_cache();
+// src/infrastructure/index.ts
+init_cache();
 
 // src/infrastructure/context/index.ts
 init_request_context();
@@ -5257,7 +5346,7 @@ init_validation_utils();
 
 // src/infrastructure/repositories/read-dao.ts
 import { AppError as AppError16, Result as Result17 } from "@xeno-js/shared";
-import { Guards as Guards44 } from "@xeno-js/shared";
+import { Guards as Guards45 } from "@xeno-js/shared";
 var ReadDao = class {
   /**
    * Constructs a new ReadDao instance.
@@ -5279,7 +5368,7 @@ var ReadDao = class {
   async findById(id, ctx, signal) {
     AppError16.throwIfAborted(signal, "ReadDao.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (Guards44.isNullOrEmpty(result)) return Result17.ok();
+    if (Guards45.isNullOrEmpty(result)) return Result17.ok();
     const entity = this._mapper.toEntity(result);
     return Result17.ok(entity);
   }
@@ -5293,7 +5382,7 @@ var ReadDao = class {
 
 // src/infrastructure/repositories/repository.ts
 import { AppError as AppError17, Result as Result18 } from "@xeno-js/shared";
-import { Guards as Guards45 } from "@xeno-js/shared";
+import { Guards as Guards46 } from "@xeno-js/shared";
 var Repository = class {
   /**
    * Constructs a new Repository instance.
@@ -5315,7 +5404,7 @@ var Repository = class {
   async findById(id, ctx, signal) {
     AppError17.throwIfAborted(signal, "Repository.findById");
     const result = await this._dataSource.findById(id, ctx, signal);
-    if (Guards45.isNullOrEmpty(result)) return Result18.ok();
+    if (Guards46.isNullOrEmpty(result)) return Result18.ok();
     const entity = this._mapper.toEntity(result);
     return Result18.ok(entity);
   }
@@ -5382,4 +5471,14 @@ export {
  * @link https://github.com/xeno-js/xeno-js
  * @license MIT
  */
+/**
+ * @description The RateLimitKeyBuilder class implements the IRateLimitKeyBuilder interface, providing a method to build rate limit keys based on the user's identity. This class utilizes an instance of IIdentityAccessor to retrieve the current user's identity, allowing for the creation of tenant-specific rate limit keys in multi-tenant applications. If a tenant ID is present in the identity, the rate limit key is prefixed with the tenant ID; otherwise, it defaults to a public rate limit key. This approach ensures that rate limit data is appropriately scoped to the user's context, preventing data leakage between tenants.
+ *
+ * @author Xeno
+ * @version 1.0.0
+ * @since 2025-09-30
+ * @link https://github.com/xeno-js/xeno-vue
+ * @copyright Xeno
+ * @license MIT
+ */
 //# sourceMappingURL=index.js.map