alepha 0.21.2 → 0.22.0

package/dist/server/cors/index.d.ts

@@ -1,19 +1,16 @@
-import * as _$alepha from "alepha";
 import { Middleware, Static } from "alepha";
-import * as _$alepha_logger0 from "alepha/logger";
 import { ServerRouterProvider } from "alepha/server";
-import * as _$typebox from "typebox";
 
 //#region ../../src/server/cors/providers/ServerCorsProvider.d.ts
 /**
  * CORS configuration atom (global defaults)
  */
-declare const corsOptions: _$alepha.Atom<_$typebox.TObject<{
-  origin: _$typebox.TOptional<_$typebox.TString>;
-  methods: _$typebox.TArray<_$typebox.TString>;
-  headers: _$typebox.TArray<_$typebox.TString>;
-  credentials: _$typebox.TOptional<_$typebox.TBoolean>;
-  maxAge: _$typebox.TOptional<_$typebox.TNumber>;
+declare const corsOptions: import("alepha").Atom<import("typebox").TObject<{
+  origin: import("typebox").TOptional<import("typebox").TString>;
+  methods: import("typebox").TArray<import("typebox").TString>;
+  headers: import("typebox").TArray<import("typebox").TString>;
+  credentials: import("typebox").TOptional<import("typebox").TBoolean>;
+  maxAge: import("typebox").TOptional<import("typebox").TNumber>;
 }>, "alepha.server.cors.options">;
 type CorsOptions = Static<typeof corsOptions.schema>;
 declare module "alepha" {
@@ -32,7 +29,7 @@ interface CorsRegistration extends Partial<CorsOptions> {
   paths?: string[];
 }
 declare class ServerCorsProvider {
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   protected readonly serverRouterProvider: ServerRouterProvider;
   protected readonly globalOptions: Readonly<{
     origin?: string | undefined;
@@ -49,7 +46,7 @@ declare class ServerCorsProvider {
    * Register a CORS configuration (called by primitives)
    */
   registerCors(config: CorsRegistration): void;
-  protected readonly onStart: _$alepha.HookPrimitive<"start">;
+  protected readonly onStart: import("alepha").HookPrimitive<"start">;
   /**
    * Build complete CORS options by merging with global defaults
    */
@@ -65,8 +62,8 @@ declare class ServerCorsProvider {
       setHeader: (name: string, value: string) => void;
     };
   }, options: CorsOptions): void;
-  protected readonly configure: _$alepha.HookPrimitive<"start">;
-  protected readonly onRequest: _$alepha.HookPrimitive<"server:onRequest">;
+  protected readonly configure: import("alepha").HookPrimitive<"start">;
+  protected readonly onRequest: import("alepha").HookPrimitive<"server:onRequest">;
   isOriginAllowed(origin: string | undefined, allowed: CorsOptions["origin"]): boolean;
 }
 type ServerCorsProviderOptions = CorsOptions;
@@ -113,7 +110,7 @@ declare module "alepha/server" {
  *
  * @module alepha.server.cors
  */
-declare const AlephaServerCors: _$alepha.Service<_$alepha.Module>;
+declare const AlephaServerCors: import("alepha").Service<import("alepha").Module>;
 //#endregion
 export { $cors, AlephaServerCors, CorsOptions, CorsRegistration, ServerCorsProvider, ServerCorsProviderOptions, corsOptions };
 //# sourceMappingURL=index.d.ts.map

package/dist/server/cors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;;;;;cASa,WAAA,EAAW,QAAA,CAAA,IAAA,WAAA,OAAA;8BAoCtB,SAAA,CAAA,OAAA;;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,WAAA,CAAY,MAAA;AAAA;EAAA,UAGxC,KAAA;IAAA,CACP,WAAA,CAAY,GAAA,GAAM,WAAA;EAAA;AAAA;AAAA,UAMN,gBAAA,SAAyB,OAAA,CAAQ,WAAA;;;;EAIhD,IAAA;EApDsB;;;EAwDtB,KAAA;AAAA;AAAA,cAGW,kBAAA;EAAA,mBACQ,GAAA,EADU,gBAAA,CACP,MAAA;EAAA,mBACH,oBAAA,EAAoB,oBAAA;EAAA,mBACpB,aAAA,EAAa,QAAA;;;;;;;;;;WAKhB,iBAAA,EAAmB,gBAAA;;AA7BrC;;EAkCS,YAAA,CAAa,MAAA,EAAQ,gBAAA;EAAA,mBAIT,OAAA,EAJyB,QAAA,CAIlB,aAAA;EAtCF;;;EAgEjB,gBAAA,CAAiB,MAAA,EAAQ,OAAA,CAAQ,WAAA,IAAe,WAAA;EAhEC;AAAE;;EA6EnD,gBAAA,CACL,OAAA;IACE,OAAA;MAAW,MAAA;IAAA;IACX,KAAA;MAAS,SAAA,GAAY,IAAA,UAAc,KAAA;IAAA;EAAA,GAErC,OAAA,EAAS,WAAA;EAAA,mBAqBQ,SAAA,EArBG,QAAA,CAqBM,aAAA;EAAA,mBAwBT,SAAA,EAxBS,QAAA,CAwBA,aAAA;EASrB,eAAA,CACL,MAAA,sBACA,OAAA,EAAS,WAAA;AAAA;AAAA,KAWD,yBAAA,GAA4B,WAAA;;;;;;;;AA3LxC;;;;;;;;;;;;;;;;cCkBa,KAAA,GAAS,OAAA,GAAU,OAAA,CAAQ,WAAA,MAAe,UAAA;;;;YCb3C,WAAA;;;AFLZ;;IEUI,IAAA,GAAO,WAAA;EAAA;AAAA;;;;;;;;;cAcE,gBAAA,EAAgB,QAAA,CAAA,OAAA,CAG3B,QAAA,CAH2B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;AASA;cAAa,WAAA,mBAAW,IAAA,mBAAA,OAAA;;;;;;;KAsCZ,WAAA,GAAc,MAAM,QAAQ,WAAA,CAAY,MAAA;AAAA;EAAA,UAGxC,KAAA;IAAA,CACP,WAAA,CAAY,GAAG,GAAG,WAAA;EAAA;AAAA;AAAA,UAMN,gBAAA,SAAyB,OAAO,CAAC,WAAA;;;;EAIhD,IAAA;;;;EAIA,KAAA;AAAA;AAAA,cAGW,kBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,oBAAA,EAAoB,oBAAA;EAAA,mBACpB,aAAA,EAAa,QAAA;;;;;;;;;;WAKhB,iBAAA,EAAmB,gBAAA;EAzBpB;;;EA8BR,YAAA,CAAa,MAAA,EAAQ,gBAAA;EAAA,mBAIT,OAAA,mBAAO,aAAA;EAlCM;AAMlC;;EAsDS,gBAAA,CAAiB,MAAA,EAAQ,OAAA,CAAQ,WAAA,IAAe,WAAA;EAtDR;;;EAmExC,gBAAA,CACL,OAAA;IACE,OAAA;MAAW,MAAA;IAAA;IACX,KAAA;MAAS,SAAA,GAAY,IAAA,UAAc,KAAA;IAAA;EAAA,GAErC,OAAA,EAAS,WAAA;EAAA,mBAqBQ,SAAA,mBAAS,aAAA;EAAA,mBAwBT,SAAA,mBAAS,aAAA;EASrB,eAAA,CACL,MAAA,sBACA,OAAA,EAAS,WAAA;AAAA;AAAA,KAWD,yBAAA,GAA4B,WAAW;;;;;AA3LnD;;;;;;;;;;;;;;;;;;;cCkBa,KAAA,GAAS,OAAA,GAAU,OAAA,CAAQ,WAAA,MAAe,UAAA;;;;YCb3C,WAAA;IF+BV;;;;IE1BE,IAAA,GAAO,WAAW;EAAA;AAAA;;;;;;;;;cAcT,gBAAA,mBAAgB,OAAA,kBAAA,MAAA"}

package/dist/server/cors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $state, type Static, t } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: t.object({\n    origin: t.optional(\n      t.string({\n        description:\n          \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n        default: \"*\",\n      }),\n    ),\n    methods: t.array(t.string(), {\n      description: \"Allowed HTTP methods\",\n      default: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    }),\n    headers: t.array(t.string(), {\n      description: \"Allowed headers\",\n      default: [\"Content-Type\", \"Authorization\"],\n    }),\n    credentials: t.optional(\n      t.boolean({\n        description: \"Allow credentials\",\n        default: false,\n      }),\n    ),\n    maxAge: t.optional(\n      t.number({\n        description: \"Preflight cache duration in seconds\",\n      }),\n    ),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: false,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsRegistration extends Partial<CorsOptions> {\n  /**\n   * Name identifier for this CORS config.\n   */\n  name?: string;\n  /**\n   * Path patterns to match (supports wildcards like /api/*).\n   */\n  paths?: string[];\n}\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $state(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsRegistration[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsRegistration): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  public buildCorsOptions(config: Partial<CorsOptions>): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  public applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  protected readonly configure = $hook({\n    on: \"start\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { AlephaError, createMiddleware, type Middleware } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Middleware that applies CORS headers to the response and handles OPTIONS preflight.\n *\n * Reads the request from the ALS context and applies the configured\n * CORS headers via `ServerCorsProvider`. Options are merged with\n * global CORS defaults.\n *\n * For OPTIONS preflight requests, the middleware short-circuits with a 204 response\n * and skips the handler entirely.\n *\n * **Route middleware** — requires a request context (`$action`). Throws if used outside one.\n *\n * ```typescript\n * class ApiController {\n *   getOrders = $action({\n *     use: [$cors({ origin: \"https://app.example.com\", credentials: true })],\n *     handler: async ({ query }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $cors = (options?: Partial<CorsOptions>): Middleware => {\n  return createMiddleware({\n    name: \"$cors\",\n    options: options as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const corsProvider = alepha.inject(ServerCorsProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\");\n\n        if (!request) {\n          throw new AlephaError(\n            \"$cors requires a request context (use inside $action)\",\n          );\n        }\n\n        const corsConfig = corsProvider.buildCorsOptions(options ?? {});\n        corsProvider.applyCorsHeaders(request, corsConfig);\n\n        // OPTIONS preflight → respond immediately, skip handler\n        if (request.method === \"OPTIONS\") {\n          request.reply.setStatus(204);\n          return;\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n","import { $module } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cross-Origin Resource Sharing configuration.\n *\n * **Features:**\n * - CORS policy definition\n *\n * @module alepha.server.cors\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;AASA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EAAE,SACR,EAAE,OAAO;GACP,aACE;GACF,SAAS;GACV,CAAC,CACH;EACD,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS;IAAC;IAAO;IAAQ;IAAO;IAAS;IAAU;IAAU;GAC9D,CAAC;EACF,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS,CAAC,gBAAgB,gBAAgB;GAC3C,CAAC;EACF,aAAa,EAAE,SACb,EAAE,QAAQ;GACR,aAAa;GACb,SAAS;GACV,CAAC,CACH;EACD,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,aAAa,uCACd,CAAC,CACH;EACF,CAAC;CACF,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;GAAU;EAC7D,SAAS,CAAC,gBAAgB,gBAAgB;EAC1C,aAAa;EACd;CACF,CAAC;AAuBF,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,SAAS;CAClC,uBAA0C,QAAQ,qBAAqB;CACvE,gBAAmC,OAAO,YAAY;;;;CAKtD,oBAAwD,EAAE;;;;CAK1D,aAAoB,QAAgC;EAClD,KAAK,kBAAkB,KAAK,OAAO;;CAGrC,UAA6B,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;GAEnB,KAAK,MAAM,UAAU,KAAK,mBACxB,IAAI,OAAO,OACT,KAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,QAAQ;IAClE,KAAK,MAAM,SAAS,eAClB,MAAM,OAAO,KAAK,iBAAiB,OAAO;;GAMlD,IAAI,KAAK,kBAAkB,SAAS,GAClC,KAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,kCACnD;;EAGN,CAAC;;;;CAKF,iBAAwB,QAA2C;EACjE,OAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC7C;;;;;CAMH,iBACE,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;EAE1D,IAAI,aAAa,KAAK,gBAAgB,WAAW,OAAO,EACtD,QAAQ,MAAM,UAAU,+BAA+B,UAAU;EAGnE,IAAI,aACF,QAAQ,MAAM,UAAU,oCAAoC,OAAO;EAGrE,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;EAC3E,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;EAE3E,IAAI,UAAU,MACZ,QAAQ,MAAM,UAAU,0BAA0B,OAAO,OAAO,CAAC;;CAIrE,YAA+B,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,WAAW;GACpD,KAAK,MAAM,SAAS,QAAQ;IAC1B,IACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,WAEjB;IAGF,KAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;MACtB,MAAM,UAAU,IAAI;;KAEvB,CAAC;;;EAGP,CAAC;CAEF,YAA+B,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;GACtC,KAAK,iBAAiB,SAAS,WAAW;;EAE7C,CAAC;CAEF,gBACE,QACA,SACS;EACT,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,YAAY,KAAK,OAAO;EAC5B,OAAO,QACJ,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,SAAS,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;ACrK7B,MAAa,SAAS,YAA+C;CACnE,OAAO,iBAAiB;EACtB,MAAM;EACG;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,mBAAmB;GAEtD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,sBAAsB;IAEjD,IAAI,CAAC,SACH,MAAM,IAAI,YACR,wDACD;IAGH,MAAM,aAAa,aAAa,iBAAiB,WAAW,EAAE,CAAC;IAC/D,aAAa,iBAAiB,SAAS,WAAW;IAGlD,IAAI,QAAQ,WAAW,WAAW;KAChC,QAAQ,MAAM,UAAU,IAAI;KAC5B;;IAGF,OAAO,KAAK,GAAG,KAAK;;;EAGzB,CAAC;;;;;;;;;;;;ACtBJ,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,mBAAmB;CAC/B,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $state, type Static, t } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: t.object({\n    origin: t.optional(\n      t.string({\n        description:\n          \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n        default: \"*\",\n      }),\n    ),\n    methods: t.array(t.string(), {\n      description: \"Allowed HTTP methods\",\n      default: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    }),\n    headers: t.array(t.string(), {\n      description: \"Allowed headers\",\n      default: [\"Content-Type\", \"Authorization\"],\n    }),\n    credentials: t.optional(\n      t.boolean({\n        description: \"Allow credentials\",\n        default: false,\n      }),\n    ),\n    maxAge: t.optional(\n      t.number({\n        description: \"Preflight cache duration in seconds\",\n      }),\n    ),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: false,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsRegistration extends Partial<CorsOptions> {\n  /**\n   * Name identifier for this CORS config.\n   */\n  name?: string;\n  /**\n   * Path patterns to match (supports wildcards like /api/*).\n   */\n  paths?: string[];\n}\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $state(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsRegistration[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsRegistration): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  public buildCorsOptions(config: Partial<CorsOptions>): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  public applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  protected readonly configure = $hook({\n    on: \"start\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { AlephaError, createMiddleware, type Middleware } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Middleware that applies CORS headers to the response and handles OPTIONS preflight.\n *\n * Reads the request from the ALS context and applies the configured\n * CORS headers via `ServerCorsProvider`. Options are merged with\n * global CORS defaults.\n *\n * For OPTIONS preflight requests, the middleware short-circuits with a 204 response\n * and skips the handler entirely.\n *\n * **Route middleware** — requires a request context (`$action`). Throws if used outside one.\n *\n * ```typescript\n * class ApiController {\n *   getOrders = $action({\n *     use: [$cors({ origin: \"https://app.example.com\", credentials: true })],\n *     handler: async ({ query }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $cors = (options?: Partial<CorsOptions>): Middleware => {\n  return createMiddleware({\n    name: \"$cors\",\n    options: options as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const corsProvider = alepha.inject(ServerCorsProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\");\n\n        if (!request) {\n          throw new AlephaError(\n            \"$cors requires a request context (use inside $action)\",\n          );\n        }\n\n        const corsConfig = corsProvider.buildCorsOptions(options ?? {});\n        corsProvider.applyCorsHeaders(request, corsConfig);\n\n        // OPTIONS preflight → respond immediately, skip handler\n        if (request.method === \"OPTIONS\") {\n          request.reply.setStatus(204);\n          return;\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n","import { $module } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cross-Origin Resource Sharing configuration.\n *\n * **Features:**\n * - CORS policy definition\n *\n * @module alepha.server.cors\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;AASA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EAAE,SACR,EAAE,OAAO;GACP,aACE;GACF,SAAS;EACX,CAAC,CACH;EACA,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG;GAC3B,aAAa;GACb,SAAS;IAAC;IAAO;IAAQ;IAAO;IAAS;IAAU;GAAS;EAC9D,CAAC;EACD,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG;GAC3B,aAAa;GACb,SAAS,CAAC,gBAAgB,eAAe;EAC3C,CAAC;EACD,aAAa,EAAE,SACb,EAAE,QAAQ;GACR,aAAa;GACb,SAAS;EACX,CAAC,CACH;EACA,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,aAAa,sCACf,CAAC,CACH;CACF,CAAC;CACD,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;EAAS;EAC5D,SAAS,CAAC,gBAAgB,eAAe;EACzC,aAAa;CACf;AACF,CAAC;AAuBD,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,uBAA0C,QAAQ,oBAAoB;CACtE,gBAAmC,OAAO,WAAW;;;;CAKrD,oBAAwD,CAAC;;;;CAKzD,aAAoB,QAAgC;EAClD,KAAK,kBAAkB,KAAK,MAAM;CACpC;CAEA,UAA6B,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;GAEnB,KAAK,MAAM,UAAU,KAAK,mBACxB,IAAI,OAAO,OACT,KAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,OAAO;IACjE,KAAK,MAAM,SAAS,eAClB,MAAM,OAAO,KAAK,iBAAiB,MAAM;GAE7C;GAIJ,IAAI,KAAK,kBAAkB,SAAS,GAClC,KAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,iCACpD;EAEJ;CACF,CAAC;;;;CAKD,iBAAwB,QAA2C;EACjE,OAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;EAC9C;CACF;;;;CAKA,iBACE,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;EAE1D,IAAI,aAAa,KAAK,gBAAgB,WAAW,MAAM,GACrD,QAAQ,MAAM,UAAU,+BAA+B,SAAS;EAGlE,IAAI,aACF,QAAQ,MAAM,UAAU,oCAAoC,MAAM;EAGpE,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAC1E,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAE1E,IAAI,UAAU,MACZ,QAAQ,MAAM,UAAU,0BAA0B,OAAO,MAAM,CAAC;CAEpE;CAEA,YAA+B,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,UAAU;GACnD,KAAK,MAAM,SAAS,QAAQ;IAC1B,IACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,WAEjB;IAGF,KAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;MACtB,MAAM,UAAU,GAAG;KACrB;IACF,CAAC;GACH;EACF;CACF,CAAC;CAED,YAA+B,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;GACtC,KAAK,iBAAiB,SAAS,UAAU;EAC3C;CACF,CAAC;CAED,gBACE,QACA,SACS;EACT,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,YAAY,KAAK,OAAO;EAC5B,OAAO,QACJ,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,SAAS,UAAU,EAAE;CAC1B;AACF;;;;;;;;;;;;;;;;;;;;;;;;ACvKA,MAAa,SAAS,YAA+C;CACnE,OAAO,iBAAiB;EACtB,MAAM;EACG;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB;IAEhD,IAAI,CAAC,SACH,MAAM,IAAI,YACR,uDACF;IAGF,MAAM,aAAa,aAAa,iBAAiB,WAAW,CAAC,CAAC;IAC9D,aAAa,iBAAiB,SAAS,UAAU;IAGjD,IAAI,QAAQ,WAAW,WAAW;KAChC,QAAQ,MAAM,UAAU,GAAG;KAC3B;IACF;IAEA,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;;;;;;;;;;;ACvBA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,kBAAkB;AAC/B,CAAC"}

package/dist/server/etag/index.d.ts

@@ -1,10 +1,7 @@
-import * as _$alepha from "alepha";
 import { Alepha, Middleware } from "alepha";
-import * as _$alepha_cache0 from "alepha/cache";
 import { CachePrimitiveOptions } from "alepha/cache";
 import { CryptoProvider } from "alepha/crypto";
 import { DateTimeProvider, DurationLike } from "alepha/datetime";
-import * as _$alepha_logger0 from "alepha/logger";
 import { ServerRequest, ServerRoute } from "alepha/server";
 
 //#region ../../src/server/etag/primitives/$etag.d.ts
@@ -138,11 +135,11 @@ interface EtagMiddlewareOptionsResolved {
 //#endregion
 //#region ../../src/server/etag/providers/ServerEtagProvider.d.ts
 declare class ServerEtagProvider {
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   protected readonly alepha: Alepha;
   protected readonly crypto: CryptoProvider;
   protected readonly time: DateTimeProvider;
-  protected readonly cache: _$alepha_cache0.CacheMiddlewareFn<RouteCacheEntry>;
+  protected readonly cache: import("alepha/cache").CacheMiddlewareFn<RouteCacheEntry>;
   generateETag(content: string | Buffer): string;
   invalidate(route: ServerRoute): Promise<void>;
   /**
@@ -153,16 +150,16 @@ declare class ServerEtagProvider {
   /**
    * After an action response, store it in cache if store is enabled.
    */
-  protected readonly onActionResponse: _$alepha.HookPrimitive<"action:onResponse">;
+  protected readonly onActionResponse: import("alepha").HookPrimitive<"action:onResponse">;
   /**
    * Before sending the response, check ETag for etag-only routes.
    * This handles the case where etag is enabled but store is not.
    */
-  protected readonly onSend: _$alepha.HookPrimitive<"server:onSend">;
+  protected readonly onSend: import("alepha").HookPrimitive<"server:onSend">;
   /**
    * After the response is generated, store it and set ETag headers.
    */
-  protected readonly onResponse: _$alepha.HookPrimitive<"server:onResponse">;
+  protected readonly onResponse: import("alepha").HookPrimitive<"server:onResponse">;
   buildCacheControlHeader(options?: EtagMiddlewareOptionsResolved): string | undefined;
   shouldStore(options?: EtagMiddlewareOptionsResolved): boolean;
   shouldUseEtag(options?: EtagMiddlewareOptionsResolved): boolean;
@@ -194,7 +191,7 @@ interface RouteCacheEntry {
  *
  * @module alepha.server.etag
  */
-declare const AlephaServerEtag: _$alepha.Service<_$alepha.Module>;
+declare const AlephaServerEtag: import("alepha").Service<import("alepha").Module>;
 //#endregion
 export { $etag, AlephaServerEtag, EtagMiddlewareOptions, EtagMiddlewareOptionsResolved, ServerEtagProvider, resolveEtagOptions };
 //# sourceMappingURL=index.d.ts.map

package/dist/server/etag/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/index.ts"],"mappings":";;;;;;;;;;;;;;;;;AAyCA;;;;;;;;;AAsCA;;;;;;;;;AAgBA;;;;;;;;;cAtDa,KAAA,GAAS,OAAA,GAAU,qBAAA,KAAwB,UAAA;AAAA,iBAsCxC,kBAAA,CACd,OAAA,GAAU,qBAAA,GACT,6BAAA;AAAA,KAcS,qBAAA;;;;;;;;;EAsDkB;;;;;;;EAtCxB,KAAA,UAAe,YAAA,GAAe,qBAAA;EA6DoB;;AAIxD;;;EA1DM,IAAA;EA2D0B;;;;;EApD1B,OAAA;IAoDJ;;;IA7CU,MAAA;IA+CV;;;IA3CU,OAAA;IAkDJ;;;IA9CI,OAAA;IAgDe;;;IA5Cf,OAAA;IAgDJ;;;;IA3CI,MAAA,YAAkB,YAAA;;;AC3I9B;;IDgJY,OAAA,YAAmB,YAAA;IChJA;;;IDoJnB,cAAA;IC/Ic;;;IDmJd,eAAA;ICzIgC;;;ID6IhC,SAAA;IClIA;;;;;IDwIA,oBAAA,YAAgC,YAAA;EAAA;AAAA;AAAA,UAI3B,6BAAA;EACf,KAAA,UAAe,YAAA,GAAe,qBAAA;EAC9B,IAAA;EACA,OAAA;IAIM,MAAA;IACA,OAAA;IACA,OAAA;IACA,OAAA;IACA,MAAA,YAAkB,YAAA;IAClB,OAAA,YAAmB,YAAA;IACnB,cAAA;IACA,eAAA;IACA,SAAA;IACA,oBAAA,YAAgC,YAAA;EAAA;AAAA;;;cCtL3B,kBAAA;EAAA,mBACQ,GAAA,EADU,gBAAA,CACP,MAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBACN,IAAA,EAAI,gBAAA;EAAA,mBACJ,KAAA,EAAK,eAAA,CAAA,iBAAA,CAAA,eAAA;EAKjB,YAAA,CAAa,OAAA,WAAkB,MAAA;EAKzB,UAAA,CAAW,KAAA,EAAO,WAAA,GAAW,OAAA;EDkD3C;;;;EC1Cc,UAAA,CACX,OAAA,EAAS,aAAA,EACT,OAAA,EAAS,6BAAA,GACR,OAAA;EDuCJ;AAID;;EAJC,mBCuCoB,gBAAA,EA9ET,QAAA,CA8EyB,aAAA;EDjCL;;;;EAAA,mBC0FX,MAAA,EAzDgB,QAAA,CAyDV,aAAA;ED1FK;AAchC;;EAdgC,mBCqIX,UAAA,EA3CM,QAAA,CA2CI,aAAA;EA0GtB,uBAAA,CACL,OAAA,GAAU,6BAAA;EA6DL,WAAA,CAAY,OAAA,GAAU,6BAAA;EAMtB,aAAA,CAAc,OAAA,GAAU,6BAAA;EAAA,UAUrB,iBAAA,CAAkB,QAAA,WAAmB,YAAA;EAAA,UAQrC,cAAA,CAAe,KAAA,EAAO,WAAA,EAAa,MAAA,GAAS,aAAA;ED1OA;;;;EAAA,UC0PtC,qBAAA,CACd,MAAA,EAAQ,cAAA,CAAe,UAAA,GACvB,GAAA,UACA,MAAA,sBACA,WAAA,sBACA,YAAA,YACC,OAAA;AAAA;AAAA,UAwCK,eAAA;EACR,WAAA;EACA,IAAA;EACA,MAAA;EACA,YAAA;EACA,IAAA;AAAA;;;;;;;;;;;ADhbF;;;cElBa,gBAAA,EAAgB,QAAA,CAAA,OAAA,CAG3B,QAAA,CAH2B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/index.ts"],"mappings":";;;;;;;;;;;AAyCA;;;;;;;;AAkCC;AAID;;;;;;;;AAEgC;AAchC;;;;;;;;;;;;cAtDa,KAAA,GAAS,OAAA,GAAU,qBAAA,KAAwB,UAkCvD;AAAA,iBAIe,kBAAA,CACd,OAAA,GAAU,qBAAA,GACT,6BAA6B;AAAA,KAcpB,qBAAA;;;;;;;;;EA+DA;;;;;;AAc4C;EA7DlD,KAAA,UAAe,YAAA,GAAe,qBAAA;EAiEU;;;;;EA1DxC,IAAA;EA0EkC;;;;;EAnElC,OAAA;IAqDJ;;;IA9CU,MAAA;IAqDJ;;;IAjDI,OAAA;IAoDJ;;;IAhDI,OAAA;IAmDJ;;;IA/CI,OAAA;IAgDwC;;;;IA3CxC,MAAA,YAAkB,YAAA;IC3IC;;;;IDgJnB,OAAA,YAAmB,YAAA;IC3IL;;;ID+Id,cAAA;IC5HC;;;IDgID,eAAA;IC4NmB;;;IDxNnB,SAAA;ICgP4C;;;;;ID1O5C,oBAAA,YAAgC,YAAA;EAAA;AAAA;AAAA,UAI3B,6BAAA;EACf,KAAA,UAAe,YAAA,GAAe,qBAAA;EAC9B,IAAA;EACA,OAAA;IAIM,MAAA;IACA,OAAA;IACA,OAAA;IACA,OAAA;IACA,MAAA,YAAkB,YAAA;IAClB,OAAA,YAAmB,YAAA;IACnB,cAAA;IACA,eAAA;IACA,SAAA;IACA,oBAAA,YAAgC,YAAA;EAAA;AAAA;;;cCtL3B,kBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBACN,IAAA,EAAI,gBAAA;EAAA,mBACJ,KAAA,yBAAK,iBAAA,CAAA,eAAA;EAKjB,YAAA,CAAa,OAAA,WAAkB,MAAA;EAKzB,UAAA,CAAW,KAAA,EAAO,WAAA,GAAW,OAAA;EDgBY;;AAkCvD;AAID;EC9Ce,UAAA,CACX,OAAA,EAAS,aAAA,EACT,OAAA,EAAS,6BAAA,GACR,OAAA;;;;qBA8EgB,gBAAA,mBAAgB,aAAA;EDjClC;;AAA6B;AAchC;EAdG,mBC0FkB,MAAA,mBAAM,aAAA;;;;qBA2CN,UAAA,mBAAU,aAAA;EA0GtB,uBAAA,CACL,OAAA,GAAU,6BAAA;EA6DL,WAAA,CAAY,OAAA,GAAU,6BAAA;EAMtB,aAAA,CAAc,OAAA,GAAU,6BAAA;EAAA,UAUrB,iBAAA,CAAkB,QAAA,WAAmB,YAAA;EAAA,UAQrC,cAAA,CAAe,KAAA,EAAO,WAAA,EAAa,MAAA,GAAS,aAAA;EDvSnC;;;;EAAA,UCuTH,qBAAA,CACd,MAAA,EAAQ,cAAA,CAAe,UAAA,GACvB,GAAA,UACA,MAAA,sBACA,WAAA,sBACA,YAAA,YACC,OAAA;AAAA;AAAA,UAwCK,eAAA;EACR,WAAA;EACA,IAAA;EACA,MAAA;EACA,YAAA;EACA,IAAA;AAAA;;;;;;;;ADhbF;;;;;;cElBa,gBAAA,mBAAgB,OAAA,kBAAA,MAAA"}

package/dist/server/etag/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $cache } from \"alepha/cache\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider, type DurationLike } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRequest, ServerRoute } from \"alepha/server\";\nimport type { EtagMiddlewareOptionsResolved } from \"../primitives/$etag.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerEtagProvider {\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly time = $inject(DateTimeProvider);\n  protected readonly cache = $cache<RouteCacheEntry>({\n    provider: \"memory\",\n    name: \"http:server\",\n  });\n\n  public generateETag(content: string | Buffer): string {\n    const data = typeof content === \"string\" ? content : content.toString();\n    return `\"${this.crypto.hash(data, \"md5\")}\"`;\n  }\n\n  public async invalidate(route: ServerRoute) {\n    await this.cache.invalidate(this.createCacheKey(route));\n  }\n\n  /**\n   * Check cache for a stored response. Returns the cached body if found, undefined otherwise.\n   * Called by the $etag() middleware before the handler runs.\n   */\n  public async checkCache(\n    request: ServerRequest,\n    options: EtagMiddlewareOptionsResolved,\n  ): Promise<any> {\n    if (!this.shouldStore(options)) {\n      return undefined;\n    }\n\n    // Build key from route metadata (set by ServerRouterProvider before handler)\n    // or from action request context (for .run() direct calls)\n    const actionRequest = this.alepha.store.get(\"alepha.action.request\");\n\n    const keySource = {\n      method:\n        request.metadata?.routeMethod ??\n        actionRequest?.method ??\n        request.method ??\n        \"GET\",\n      path:\n        request.metadata?.routePath ??\n        String(actionRequest?.url ?? request.url ?? \"\"),\n    } as ServerRoute;\n\n    const key = this.createCacheKey(keySource, actionRequest ?? request);\n    const cached = await this.cache.get(key);\n\n    if (!cached) {\n      this.log.trace(\"Cache miss\", { key });\n      return undefined;\n    }\n\n    this.log.trace(\"Cache hit\", { key });\n\n    // Mark as cache hit in request metadata\n    request.metadata ??= {} as any;\n    request.metadata.etagHit = true;\n\n    // For HTTP routes, set reply headers\n    if (request.reply) {\n      // Check if client has matching ETag - return 304\n      if (\n        request.headers?.[\"if-none-match\"] === cached.hash ||\n        request.headers?.[\"if-modified-since\"] === cached.lastModified\n      ) {\n        request.reply.status = 304;\n        request.reply.setHeader(\"etag\", cached.hash);\n        request.reply.setHeader(\"last-modified\", cached.lastModified);\n        this.log.trace(\"ETag match, returning 304\", {\n          key,\n          etag: cached.hash,\n        });\n        return request.reply.body;\n      }\n\n      request.reply.body = cached.body;\n      request.reply.status = cached.status ?? 200;\n\n      if (cached.contentType) {\n        request.reply.setHeader(\"Content-Type\", cached.contentType);\n      }\n\n      request.reply.setHeader(\"etag\", cached.hash);\n      request.reply.setHeader(\"last-modified\", cached.lastModified);\n    }\n\n    // For action direct invocations, return body\n    const body =\n      cached.contentType === \"application/json\"\n        ? JSON.parse(cached.body)\n        : cached.body;\n\n    return body;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Hooks (post-handler, read from request.metadata)\n  // -------------------------------------------------------------------------------------------------------------------\n\n  /**\n   * After an action response, store it in cache if store is enabled.\n   */\n  protected readonly onActionResponse = $hook({\n    on: \"action:onResponse\",\n    handler: async ({ action, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options || !this.shouldStore(options)) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (request.reply.status && request.reply.status >= 400) {\n        return;\n      }\n\n      if (!response) {\n        return;\n      }\n\n      const contentType =\n        typeof response === \"string\" ? \"text/plain\" : \"application/json\";\n      const body =\n        contentType === \"text/plain\" ? response : JSON.stringify(response);\n\n      const generatedEtag = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      const key = this.createCacheKey(action.route, request);\n\n      this.log.trace(\"Storing action response\", {\n        key,\n        action: action.name,\n      });\n\n      await this.cache.set(key, {\n        body: body,\n        lastModified,\n        contentType: contentType,\n        hash: generatedEtag,\n      });\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        request.reply.setHeader(\"cache-control\", cacheControl);\n      }\n    },\n  });\n\n  /**\n   * Before sending the response, check ETag for etag-only routes.\n   * This handles the case where etag is enabled but store is not.\n   */\n  protected readonly onSend = $hook({\n    on: \"server:onSend\",\n    handler: ({ request }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      if (request.reply.headers.etag) {\n        // ETag already set, skip\n        return;\n      }\n\n      if (\n        !shouldStore &&\n        shouldUseEtag &&\n        request.reply.body != null &&\n        (typeof request.reply.body === \"string\" ||\n          Buffer.isBuffer(request.reply.body))\n      ) {\n        const generatedEtag = this.generateETag(request.reply.body);\n\n        if (request.headers[\"if-none-match\"] === generatedEtag) {\n          request.reply.status = 304;\n          request.reply.body = undefined;\n          request.reply.setHeader(\"etag\", generatedEtag);\n          this.log.trace(\"ETag match on send, returning 304\", {\n            route: request.url,\n            etag: generatedEtag,\n          });\n          return;\n        }\n      }\n    },\n  });\n\n  /**\n   * After the response is generated, store it and set ETag headers.\n   */\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: async ({ route, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        response.headers[\"cache-control\"] = cacheControl;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      // Skip if neither cache nor etag is enabled\n      if (!shouldStore && !shouldUseEtag) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (response.status && response.status >= 400) {\n        return;\n      }\n\n      // Initialize headers if not present\n      response.headers ??= {};\n\n      const key = this.createCacheKey(route, request);\n\n      // Handle ReadableStream responses (e.g., SSR streaming)\n      if (response.body instanceof ReadableStream && shouldStore) {\n        // Tee the stream: one for client, one for cache collection\n        const [clientStream, cacheStream] = (\n          response.body as ReadableStream<Uint8Array>\n        ).tee();\n\n        // Replace response body with client stream (continues streaming to client)\n        response.body = clientStream as typeof response.body;\n\n        // Collect cache stream in background (non-blocking)\n        this.collectStreamForCache(\n          cacheStream,\n          key,\n          response.status,\n          response.headers?.[\"content-type\"],\n          shouldUseEtag,\n        )\n          .then((hash) => {\n            if (shouldUseEtag && hash) {\n              this.log.trace(\"Stream cached with hash\", { key, hash });\n            }\n          })\n          .catch((err) => {\n            this.log.warn(\"Failed to cache stream\", { key, error: err });\n          });\n\n        return;\n      }\n\n      // Only process string responses (text, html, json, etc.)\n      if (typeof response.body !== \"string\") {\n        return;\n      }\n\n      const generatedEtag = this.generateETag(response.body);\n      const lastModified = this.time.toISOString();\n\n      // Store response if storing is enabled\n      if (shouldStore) {\n        this.log.trace(\"Storing response\", {\n          key,\n          route: route.path,\n          etag: shouldUseEtag,\n        });\n\n        await this.cache.set(key, {\n          body: response.body,\n          status: response.status,\n          contentType: response.headers?.[\"content-type\"],\n          lastModified,\n          hash: generatedEtag,\n        });\n      }\n\n      // Set ETag headers if etag is enabled\n      if (shouldUseEtag) {\n        response.headers.etag = generatedEtag;\n        response.headers[\"last-modified\"] = lastModified;\n      }\n    },\n  });\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Public helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  public buildCacheControlHeader(\n    options?: EtagMiddlewareOptionsResolved,\n  ): string | undefined {\n    if (!options) {\n      return undefined;\n    }\n\n    const control = options.control;\n    if (!control) {\n      return undefined;\n    }\n\n    // If control is a string, return it directly\n    if (typeof control === \"string\") {\n      return control;\n    }\n\n    // If control is true, return default Cache-Control\n    if (control === true) {\n      return \"public, max-age=300\";\n    }\n\n    // Build Cache-Control from object directives\n    const directives: string[] = [];\n\n    if (control.public) {\n      directives.push(\"public\");\n    }\n    if (control.private) {\n      directives.push(\"private\");\n    }\n    if (control.noCache) {\n      directives.push(\"no-cache\");\n    }\n    if (control.noStore) {\n      directives.push(\"no-store\");\n    }\n    if (control.maxAge !== undefined) {\n      const maxAgeSeconds = this.durationToSeconds(control.maxAge);\n      directives.push(`max-age=${maxAgeSeconds}`);\n    }\n    if (control.sMaxAge !== undefined) {\n      const sMaxAgeSeconds = this.durationToSeconds(control.sMaxAge);\n      directives.push(`s-maxage=${sMaxAgeSeconds}`);\n    }\n    if (control.mustRevalidate) {\n      directives.push(\"must-revalidate\");\n    }\n    if (control.proxyRevalidate) {\n      directives.push(\"proxy-revalidate\");\n    }\n    if (control.immutable) {\n      directives.push(\"immutable\");\n    }\n    if (control.staleWhileRevalidate !== undefined) {\n      const seconds = this.durationToSeconds(control.staleWhileRevalidate);\n      directives.push(`stale-while-revalidate=${seconds}`);\n    }\n\n    return directives.length > 0 ? directives.join(\", \") : undefined;\n  }\n\n  public shouldStore(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.store) return true;\n    return false;\n  }\n\n  public shouldUseEtag(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.etag) return true;\n    return false;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Protected helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  protected durationToSeconds(duration: number | DurationLike): number {\n    if (typeof duration === \"number\") {\n      return duration;\n    }\n\n    return this.time.duration(duration).asSeconds();\n  }\n\n  protected createCacheKey(route: ServerRoute, config?: ServerRequest): string {\n    const params: string[] = [];\n    for (const [key, value] of Object.entries(config?.params ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n    for (const [key, value] of Object.entries(config?.query ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n\n    return `${route.method}:${(route.path ?? \"\").replaceAll(\":\", \"\")}:${params.join(\",\").replaceAll(\":\", \"\")}`;\n  }\n\n  /**\n   * Collect a ReadableStream into a string and store it in the cache.\n   * This runs in the background while the original stream is sent to the client.\n   */\n  protected async collectStreamForCache(\n    stream: ReadableStream<Uint8Array>,\n    key: string,\n    status: number | undefined,\n    contentType: string | undefined,\n    generateEtag: boolean,\n  ): Promise<string | undefined> {\n    const chunks: Uint8Array[] = [];\n    const reader = stream.getReader();\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        chunks.push(value);\n      }\n\n      // Combine chunks into a single string\n      const decoder = new TextDecoder();\n      const body =\n        chunks\n          .map((chunk) => decoder.decode(chunk, { stream: true }))\n          .join(\"\") + decoder.decode(); // Flush remaining\n\n      const hash = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      this.log.trace(\"Storing streamed response\", { key });\n\n      await this.cache.set(key, {\n        body,\n        status,\n        contentType,\n        lastModified,\n        hash,\n      });\n\n      return generateEtag ? hash : undefined;\n    } finally {\n      reader.releaseLock();\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ninterface RouteCacheEntry {\n  contentType?: string;\n  body: any;\n  status?: number;\n  lastModified: string;\n  hash: string;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport type { CachePrimitiveOptions } from \"alepha/cache\";\nimport type { DurationLike } from \"alepha/datetime\";\nimport { ServerEtagProvider } from \"../providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Middleware that enables ETag-based response caching per-route.\n *\n * Sets per-request etag options in the ALS context.\n * The global `ServerEtagProvider` hooks read these\n * to generate ETags, handle 304s, and optionally store responses.\n *\n * When `store` is enabled, the middleware also checks the cache before\n * calling the handler, short-circuiting on cache hits.\n *\n * **Route middleware** — works inside `$action`, `$page`, or any pipeline.\n *\n * ```typescript\n * class UserController {\n *   // ETag only (no response caching)\n *   getUser = $action({\n *     use: [$etag()],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // ETag + response caching (store)\n *   getProfile = $action({\n *     use: [$etag(true)],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // Fine-grained control\n *   getStats = $action({\n *     use: [$etag({ store: { ttl: [5, \"minutes\"] }, control: { public: true, maxAge: 300 } })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $etag = (options?: EtagMiddlewareOptions): Middleware => {\n  const resolved = resolveEtagOptions(options);\n\n  return createMiddleware({\n    name: \"$etag\",\n    options: resolved as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const etagProvider = alepha.inject(ServerEtagProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\") ?? args[0];\n\n        // Set etag options on request metadata for hooks to read\n        if (request?.metadata) {\n          request.metadata.etagOptions = resolved;\n        }\n\n        // If store is enabled, check cache before handler\n        if (etagProvider.shouldStore(resolved)) {\n          if (request) {\n            const cached = await etagProvider.checkCache(request, resolved);\n\n            // checkCache sets request.metadata.etagHit on cache hit\n            // cached may be undefined for 304 responses (no body)\n            if (cached !== undefined || request.metadata?.etagHit) {\n              return cached;\n            }\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport function resolveEtagOptions(\n  options?: EtagMiddlewareOptions,\n): EtagMiddlewareOptionsResolved {\n  if (options === true) {\n    return { store: true, etag: true };\n  }\n\n  if (!options) {\n    return { etag: true };\n  }\n\n  return { etag: true, ...options };\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type EtagMiddlewareOptions =\n  /**\n   * If true, enables both store and etag.\n   */\n  | true\n  /**\n   * Object configuration for fine-grained control.\n   */\n  | {\n      /**\n       * If true, enables storing cached responses. (in-memory, Redis, @see alepha/cache for other providers)\n       * If a DurationLike is provided, it will be used as the TTL for the cache.\n       * If CachePrimitiveOptions is provided, it will be used to configure the cache storage.\n       *\n       * @default false\n       */\n      store?: true | DurationLike | CachePrimitiveOptions;\n\n      /**\n       * If true, enables ETag support for the cached responses.\n       *\n       * @default true (always true when using $etag)\n       */\n      etag?: true;\n\n      /**\n       * - If true, sets Cache-Control to \"public, max-age=300\" (5 minutes).\n       * - If string, sets Cache-Control to the provided value directly.\n       * - If object, configures Cache-Control directives.\n       */\n      control?:\n        | true\n        | string\n        | {\n            /**\n             * Indicates that the response may be cached by any cache.\n             */\n            public?: boolean;\n            /**\n             * Indicates that the response is intended for a single user and must not be stored by a shared cache.\n             */\n            private?: boolean;\n            /**\n             * Forces caches to submit the request to the origin server for validation before releasing a cached copy.\n             */\n            noCache?: boolean;\n            /**\n             * Instructs caches not to store the response.\n             */\n            noStore?: boolean;\n            /**\n             * Maximum amount of time a resource is considered fresh.\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            maxAge?: number | DurationLike;\n            /**\n             * Overrides max-age for shared caches (e.g., CDNs).\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            sMaxAge?: number | DurationLike;\n            /**\n             * Indicates that once a resource becomes stale, caches must not use it without successful validation.\n             */\n            mustRevalidate?: boolean;\n            /**\n             * Similar to must-revalidate, but only for shared caches.\n             */\n            proxyRevalidate?: boolean;\n            /**\n             * Indicates that the response can be stored but must be revalidated before each use.\n             */\n            immutable?: boolean;\n            /**\n             * Time window (in seconds or DurationLike) during which a stale response may be served\n             * while a fresh one is fetched in the background.\n             * Supported by Cloudflare, modern browsers, and most CDNs.\n             */\n            staleWhileRevalidate?: number | DurationLike;\n          };\n    };\n\nexport interface EtagMiddlewareOptionsResolved {\n  store?: true | DurationLike | CachePrimitiveOptions;\n  etag?: true;\n  control?:\n    | true\n    | string\n    | {\n        public?: boolean;\n        private?: boolean;\n        noCache?: boolean;\n        noStore?: boolean;\n        maxAge?: number | DurationLike;\n        sMaxAge?: number | DurationLike;\n        mustRevalidate?: boolean;\n        proxyRevalidate?: boolean;\n        immutable?: boolean;\n        staleWhileRevalidate?: number | DurationLike;\n      };\n}\n","import { $module } from \"alepha\";\nimport { AlephaCache } from \"alepha/cache\";\nimport { AlephaCrypto } from \"alepha/crypto\";\nimport { ServerEtagProvider } from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$etag.ts\";\nexport * from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * ETag-based response caching.\n *\n * **Features:**\n * - ETag generation and validation\n * - Conditional request handling (304 Not Modified)\n * - Optional response caching (store)\n * - Cache-Control header support\n *\n * @module alepha.server.etag\n */\nexport const AlephaServerEtag = $module({\n  name: \"alepha.server.etag\",\n  services: [AlephaCache, AlephaCrypto, ServerEtagProvider],\n});\n"],"mappings":";;;;;;AAUA,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,SAAS;CAClC,SAA4B,QAAQ,OAAO;CAC3C,SAA4B,QAAQ,eAAe;CACnD,OAA0B,QAAQ,iBAAiB;CACnD,QAA2B,OAAwB;EACjD,UAAU;EACV,MAAM;EACP,CAAC;CAEF,aAAoB,SAAkC;EACpD,MAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,UAAU;EACvE,OAAO,IAAI,KAAK,OAAO,KAAK,MAAM,MAAM,CAAC;;CAG3C,MAAa,WAAW,OAAoB;EAC1C,MAAM,KAAK,MAAM,WAAW,KAAK,eAAe,MAAM,CAAC;;;;;;CAOzD,MAAa,WACX,SACA,SACc;EACd,IAAI,CAAC,KAAK,YAAY,QAAQ,EAC5B;EAKF,MAAM,gBAAgB,KAAK,OAAO,MAAM,IAAI,wBAAwB;EAEpE,MAAM,YAAY;GAChB,QACE,QAAQ,UAAU,eAClB,eAAe,UACf,QAAQ,UACR;GACF,MACE,QAAQ,UAAU,aAClB,OAAO,eAAe,OAAO,QAAQ,OAAO,GAAG;GAClD;EAED,MAAM,MAAM,KAAK,eAAe,WAAW,iBAAiB,QAAQ;EACpE,MAAM,SAAS,MAAM,KAAK,MAAM,IAAI,IAAI;EAExC,IAAI,CAAC,QAAQ;GACX,KAAK,IAAI,MAAM,cAAc,EAAE,KAAK,CAAC;GACrC;;EAGF,KAAK,IAAI,MAAM,aAAa,EAAE,KAAK,CAAC;EAGpC,QAAQ,aAAa,EAAE;EACvB,QAAQ,SAAS,UAAU;EAG3B,IAAI,QAAQ,OAAO;GAEjB,IACE,QAAQ,UAAU,qBAAqB,OAAO,QAC9C,QAAQ,UAAU,yBAAyB,OAAO,cAClD;IACA,QAAQ,MAAM,SAAS;IACvB,QAAQ,MAAM,UAAU,QAAQ,OAAO,KAAK;IAC5C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,aAAa;IAC7D,KAAK,IAAI,MAAM,6BAA6B;KAC1C;KACA,MAAM,OAAO;KACd,CAAC;IACF,OAAO,QAAQ,MAAM;;GAGvB,QAAQ,MAAM,OAAO,OAAO;GAC5B,QAAQ,MAAM,SAAS,OAAO,UAAU;GAExC,IAAI,OAAO,aACT,QAAQ,MAAM,UAAU,gBAAgB,OAAO,YAAY;GAG7D,QAAQ,MAAM,UAAU,QAAQ,OAAO,KAAK;GAC5C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,aAAa;;EAS/D,OAJE,OAAO,gBAAgB,qBACnB,KAAK,MAAM,OAAO,KAAK,GACvB,OAAO;;;;;CAYf,mBAAsC,MAAM;EAC1C,IAAI;EACJ,SAAS,OAAO,EAAE,QAAQ,SAAS,eAAe;GAChD,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,WAAW,CAAC,KAAK,YAAY,QAAQ,EACxC;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,QAAQ,MAAM,UAAU,QAAQ,MAAM,UAAU,KAClD;GAGF,IAAI,CAAC,UACH;GAGF,MAAM,cACJ,OAAO,aAAa,WAAW,eAAe;GAChD,MAAM,OACJ,gBAAgB,eAAe,WAAW,KAAK,UAAU,SAAS;GAEpE,MAAM,gBAAgB,KAAK,aAAa,KAAK;GAC7C,MAAM,eAAe,KAAK,KAAK,aAAa;GAE5C,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO,QAAQ;GAEtD,KAAK,IAAI,MAAM,2BAA2B;IACxC;IACA,QAAQ,OAAO;IAChB,CAAC;GAEF,MAAM,KAAK,MAAM,IAAI,KAAK;IAClB;IACN;IACa;IACb,MAAM;IACP,CAAC;GAGF,MAAM,eAAe,KAAK,wBAAwB,QAAQ;GAC1D,IAAI,cACF,QAAQ,MAAM,UAAU,iBAAiB,aAAa;;EAG3D,CAAC;;;;;CAMF,SAA4B,MAAM;EAChC,IAAI;EACJ,UAAU,EAAE,cAAc;GACxB,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAGF,MAAM,cAAc,KAAK,YAAY,QAAQ;GAC7C,MAAM,gBAAgB,KAAK,cAAc,QAAQ;GAEjD,IAAI,QAAQ,MAAM,QAAQ,MAExB;GAGF,IACE,CAAC,eACD,iBACA,QAAQ,MAAM,QAAQ,SACrB,OAAO,QAAQ,MAAM,SAAS,YAC7B,OAAO,SAAS,QAAQ,MAAM,KAAK,GACrC;IACA,MAAM,gBAAgB,KAAK,aAAa,QAAQ,MAAM,KAAK;IAE3D,IAAI,QAAQ,QAAQ,qBAAqB,eAAe;KACtD,QAAQ,MAAM,SAAS;KACvB,QAAQ,MAAM,OAAO,KAAA;KACrB,QAAQ,MAAM,UAAU,QAAQ,cAAc;KAC9C,KAAK,IAAI,MAAM,qCAAqC;MAClD,OAAO,QAAQ;MACf,MAAM;MACP,CAAC;KACF;;;;EAIP,CAAC;;;;CAKF,aAAgC,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,SAAS,OAAO,EAAE,OAAO,SAAS,eAAe;GAC/C,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAIF,MAAM,eAAe,KAAK,wBAAwB,QAAQ;GAC1D,IAAI,cACF,SAAS,QAAQ,mBAAmB;GAGtC,MAAM,cAAc,KAAK,YAAY,QAAQ;GAC7C,MAAM,gBAAgB,KAAK,cAAc,QAAQ;GAGjD,IAAI,CAAC,eAAe,CAAC,eACnB;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,SAAS,UAAU,SAAS,UAAU,KACxC;GAIF,SAAS,YAAY,EAAE;GAEvB,MAAM,MAAM,KAAK,eAAe,OAAO,QAAQ;GAG/C,IAAI,SAAS,gBAAgB,kBAAkB,aAAa;IAE1D,MAAM,CAAC,cAAc,eACnB,SAAS,KACT,KAAK;IAGP,SAAS,OAAO;IAGhB,KAAK,sBACH,aACA,KACA,SAAS,QACT,SAAS,UAAU,iBACnB,cACD,CACE,MAAM,SAAS;KACd,IAAI,iBAAiB,MACnB,KAAK,IAAI,MAAM,2BAA2B;MAAE;MAAK;MAAM,CAAC;MAE1D,CACD,OAAO,QAAQ;KACd,KAAK,IAAI,KAAK,0BAA0B;MAAE;MAAK,OAAO;MAAK,CAAC;MAC5D;IAEJ;;GAIF,IAAI,OAAO,SAAS,SAAS,UAC3B;GAGF,MAAM,gBAAgB,KAAK,aAAa,SAAS,KAAK;GACtD,MAAM,eAAe,KAAK,KAAK,aAAa;GAG5C,IAAI,aAAa;IACf,KAAK,IAAI,MAAM,oBAAoB;KACjC;KACA,OAAO,MAAM;KACb,MAAM;KACP,CAAC;IAEF,MAAM,KAAK,MAAM,IAAI,KAAK;KACxB,MAAM,SAAS;KACf,QAAQ,SAAS;KACjB,aAAa,SAAS,UAAU;KAChC;KACA,MAAM;KACP,CAAC;;GAIJ,IAAI,eAAe;IACjB,SAAS,QAAQ,OAAO;IACxB,SAAS,QAAQ,mBAAmB;;;EAGzC,CAAC;CAMF,wBACE,SACoB;EACpB,IAAI,CAAC,SACH;EAGF,MAAM,UAAU,QAAQ;EACxB,IAAI,CAAC,SACH;EAIF,IAAI,OAAO,YAAY,UACrB,OAAO;EAIT,IAAI,YAAY,MACd,OAAO;EAIT,MAAM,aAAuB,EAAE;EAE/B,IAAI,QAAQ,QACV,WAAW,KAAK,SAAS;EAE3B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,SACV,WAAW,KAAK,WAAW;EAE7B,IAAI,QAAQ,SACV,WAAW,KAAK,WAAW;EAE7B,IAAI,QAAQ,WAAW,KAAA,GAAW;GAChC,MAAM,gBAAgB,KAAK,kBAAkB,QAAQ,OAAO;GAC5D,WAAW,KAAK,WAAW,gBAAgB;;EAE7C,IAAI,QAAQ,YAAY,KAAA,GAAW;GACjC,MAAM,iBAAiB,KAAK,kBAAkB,QAAQ,QAAQ;GAC9D,WAAW,KAAK,YAAY,iBAAiB;;EAE/C,IAAI,QAAQ,gBACV,WAAW,KAAK,kBAAkB;EAEpC,IAAI,QAAQ,iBACV,WAAW,KAAK,mBAAmB;EAErC,IAAI,QAAQ,WACV,WAAW,KAAK,YAAY;EAE9B,IAAI,QAAQ,yBAAyB,KAAA,GAAW;GAC9C,MAAM,UAAU,KAAK,kBAAkB,QAAQ,qBAAqB;GACpE,WAAW,KAAK,0BAA0B,UAAU;;EAGtD,OAAO,WAAW,SAAS,IAAI,WAAW,KAAK,KAAK,GAAG,KAAA;;CAGzD,YAAmB,SAAkD;EACnE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,OAAO,OAAO;EAC1B,OAAO;;CAGT,cAAqB,SAAkD;EACrE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,MAAM,OAAO;EACzB,OAAO;;CAOT,kBAA4B,UAAyC;EACnE,IAAI,OAAO,aAAa,UACtB,OAAO;EAGT,OAAO,KAAK,KAAK,SAAS,SAAS,CAAC,WAAW;;CAGjD,eAAyB,OAAoB,QAAgC;EAC3E,MAAM,SAAmB,EAAE;EAC3B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,UAAU,EAAE,CAAC,EAC7D,OAAO,KAAK,GAAG,IAAI,GAAG,QAAQ;EAEhC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,SAAS,EAAE,CAAC,EAC5D,OAAO,KAAK,GAAG,IAAI,GAAG,QAAQ;EAGhC,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,WAAW,KAAK,GAAG,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,WAAW,KAAK,GAAG;;;;;;CAO1G,MAAgB,sBACd,QACA,KACA,QACA,aACA,cAC6B;EAC7B,MAAM,SAAuB,EAAE;EAC/B,MAAM,SAAS,OAAO,WAAW;EAEjC,IAAI;GACF,OAAO,MAAM;IACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;IAC3C,IAAI,MAAM;IACV,OAAO,KAAK,MAAM;;GAIpB,MAAM,UAAU,IAAI,aAAa;GACjC,MAAM,OACJ,OACG,KAAK,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,MAAM,CAAC,CAAC,CACvD,KAAK,GAAG,GAAG,QAAQ,QAAQ;GAEhC,MAAM,OAAO,KAAK,aAAa,KAAK;GACpC,MAAM,eAAe,KAAK,KAAK,aAAa;GAE5C,KAAK,IAAI,MAAM,6BAA6B,EAAE,KAAK,CAAC;GAEpD,MAAM,KAAK,MAAM,IAAI,KAAK;IACxB;IACA;IACA;IACA;IACA;IACD,CAAC;GAEF,OAAO,eAAe,OAAO,KAAA;YACrB;GACR,OAAO,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACpa1B,MAAa,SAAS,YAAgD;CACpE,MAAM,WAAW,mBAAmB,QAAQ;CAE5C,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAS;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,mBAAmB;GAEtD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,sBAAsB,IAAI,KAAK;IAG1D,IAAI,SAAS,UACX,QAAQ,SAAS,cAAc;IAIjC,IAAI,aAAa,YAAY,SAAS;SAChC,SAAS;MACX,MAAM,SAAS,MAAM,aAAa,WAAW,SAAS,SAAS;MAI/D,IAAI,WAAW,KAAA,KAAa,QAAQ,UAAU,SAC5C,OAAO;;;IAKb,OAAO,KAAK,GAAG,KAAK;;;EAGzB,CAAC;;AAKJ,SAAgB,mBACd,SAC+B;CAC/B,IAAI,YAAY,MACd,OAAO;EAAE,OAAO;EAAM,MAAM;EAAM;CAGpC,IAAI,CAAC,SACH,OAAO,EAAE,MAAM,MAAM;CAGvB,OAAO;EAAE,MAAM;EAAM,GAAG;EAAS;;;;;;;;;;;;;;;ACnEnC,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU;EAAC;EAAa;EAAc;EAAmB;CAC1D,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $cache } from \"alepha/cache\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider, type DurationLike } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRequest, ServerRoute } from \"alepha/server\";\nimport type { EtagMiddlewareOptionsResolved } from \"../primitives/$etag.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerEtagProvider {\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly time = $inject(DateTimeProvider);\n  protected readonly cache = $cache<RouteCacheEntry>({\n    provider: \"memory\",\n    name: \"http:server\",\n  });\n\n  public generateETag(content: string | Buffer): string {\n    const data = typeof content === \"string\" ? content : content.toString();\n    return `\"${this.crypto.hash(data, \"md5\")}\"`;\n  }\n\n  public async invalidate(route: ServerRoute) {\n    await this.cache.invalidate(this.createCacheKey(route));\n  }\n\n  /**\n   * Check cache for a stored response. Returns the cached body if found, undefined otherwise.\n   * Called by the $etag() middleware before the handler runs.\n   */\n  public async checkCache(\n    request: ServerRequest,\n    options: EtagMiddlewareOptionsResolved,\n  ): Promise<any> {\n    if (!this.shouldStore(options)) {\n      return undefined;\n    }\n\n    // Build key from route metadata (set by ServerRouterProvider before handler)\n    // or from action request context (for .run() direct calls)\n    const actionRequest = this.alepha.store.get(\"alepha.action.request\");\n\n    const keySource = {\n      method:\n        request.metadata?.routeMethod ??\n        actionRequest?.method ??\n        request.method ??\n        \"GET\",\n      path:\n        request.metadata?.routePath ??\n        String(actionRequest?.url ?? request.url ?? \"\"),\n    } as ServerRoute;\n\n    const key = this.createCacheKey(keySource, actionRequest ?? request);\n    const cached = await this.cache.get(key);\n\n    if (!cached) {\n      this.log.trace(\"Cache miss\", { key });\n      return undefined;\n    }\n\n    this.log.trace(\"Cache hit\", { key });\n\n    // Mark as cache hit in request metadata\n    request.metadata ??= {} as any;\n    request.metadata.etagHit = true;\n\n    // For HTTP routes, set reply headers\n    if (request.reply) {\n      // Check if client has matching ETag - return 304\n      if (\n        request.headers?.[\"if-none-match\"] === cached.hash ||\n        request.headers?.[\"if-modified-since\"] === cached.lastModified\n      ) {\n        request.reply.status = 304;\n        request.reply.setHeader(\"etag\", cached.hash);\n        request.reply.setHeader(\"last-modified\", cached.lastModified);\n        this.log.trace(\"ETag match, returning 304\", {\n          key,\n          etag: cached.hash,\n        });\n        return request.reply.body;\n      }\n\n      request.reply.body = cached.body;\n      request.reply.status = cached.status ?? 200;\n\n      if (cached.contentType) {\n        request.reply.setHeader(\"Content-Type\", cached.contentType);\n      }\n\n      request.reply.setHeader(\"etag\", cached.hash);\n      request.reply.setHeader(\"last-modified\", cached.lastModified);\n    }\n\n    // For action direct invocations, return body\n    const body =\n      cached.contentType === \"application/json\"\n        ? JSON.parse(cached.body)\n        : cached.body;\n\n    return body;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Hooks (post-handler, read from request.metadata)\n  // -------------------------------------------------------------------------------------------------------------------\n\n  /**\n   * After an action response, store it in cache if store is enabled.\n   */\n  protected readonly onActionResponse = $hook({\n    on: \"action:onResponse\",\n    handler: async ({ action, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options || !this.shouldStore(options)) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (request.reply.status && request.reply.status >= 400) {\n        return;\n      }\n\n      if (!response) {\n        return;\n      }\n\n      const contentType =\n        typeof response === \"string\" ? \"text/plain\" : \"application/json\";\n      const body =\n        contentType === \"text/plain\" ? response : JSON.stringify(response);\n\n      const generatedEtag = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      const key = this.createCacheKey(action.route, request);\n\n      this.log.trace(\"Storing action response\", {\n        key,\n        action: action.name,\n      });\n\n      await this.cache.set(key, {\n        body: body,\n        lastModified,\n        contentType: contentType,\n        hash: generatedEtag,\n      });\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        request.reply.setHeader(\"cache-control\", cacheControl);\n      }\n    },\n  });\n\n  /**\n   * Before sending the response, check ETag for etag-only routes.\n   * This handles the case where etag is enabled but store is not.\n   */\n  protected readonly onSend = $hook({\n    on: \"server:onSend\",\n    handler: ({ request }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      if (request.reply.headers.etag) {\n        // ETag already set, skip\n        return;\n      }\n\n      if (\n        !shouldStore &&\n        shouldUseEtag &&\n        request.reply.body != null &&\n        (typeof request.reply.body === \"string\" ||\n          Buffer.isBuffer(request.reply.body))\n      ) {\n        const generatedEtag = this.generateETag(request.reply.body);\n\n        if (request.headers[\"if-none-match\"] === generatedEtag) {\n          request.reply.status = 304;\n          request.reply.body = undefined;\n          request.reply.setHeader(\"etag\", generatedEtag);\n          this.log.trace(\"ETag match on send, returning 304\", {\n            route: request.url,\n            etag: generatedEtag,\n          });\n          return;\n        }\n      }\n    },\n  });\n\n  /**\n   * After the response is generated, store it and set ETag headers.\n   */\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: async ({ route, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        response.headers[\"cache-control\"] = cacheControl;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      // Skip if neither cache nor etag is enabled\n      if (!shouldStore && !shouldUseEtag) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (response.status && response.status >= 400) {\n        return;\n      }\n\n      // Initialize headers if not present\n      response.headers ??= {};\n\n      const key = this.createCacheKey(route, request);\n\n      // Handle ReadableStream responses (e.g., SSR streaming)\n      if (response.body instanceof ReadableStream && shouldStore) {\n        // Tee the stream: one for client, one for cache collection\n        const [clientStream, cacheStream] = (\n          response.body as ReadableStream<Uint8Array>\n        ).tee();\n\n        // Replace response body with client stream (continues streaming to client)\n        response.body = clientStream as typeof response.body;\n\n        // Collect cache stream in background (non-blocking)\n        this.collectStreamForCache(\n          cacheStream,\n          key,\n          response.status,\n          response.headers?.[\"content-type\"],\n          shouldUseEtag,\n        )\n          .then((hash) => {\n            if (shouldUseEtag && hash) {\n              this.log.trace(\"Stream cached with hash\", { key, hash });\n            }\n          })\n          .catch((err) => {\n            this.log.warn(\"Failed to cache stream\", { key, error: err });\n          });\n\n        return;\n      }\n\n      // Only process string responses (text, html, json, etc.)\n      if (typeof response.body !== \"string\") {\n        return;\n      }\n\n      const generatedEtag = this.generateETag(response.body);\n      const lastModified = this.time.toISOString();\n\n      // Store response if storing is enabled\n      if (shouldStore) {\n        this.log.trace(\"Storing response\", {\n          key,\n          route: route.path,\n          etag: shouldUseEtag,\n        });\n\n        await this.cache.set(key, {\n          body: response.body,\n          status: response.status,\n          contentType: response.headers?.[\"content-type\"],\n          lastModified,\n          hash: generatedEtag,\n        });\n      }\n\n      // Set ETag headers if etag is enabled\n      if (shouldUseEtag) {\n        response.headers.etag = generatedEtag;\n        response.headers[\"last-modified\"] = lastModified;\n      }\n    },\n  });\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Public helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  public buildCacheControlHeader(\n    options?: EtagMiddlewareOptionsResolved,\n  ): string | undefined {\n    if (!options) {\n      return undefined;\n    }\n\n    const control = options.control;\n    if (!control) {\n      return undefined;\n    }\n\n    // If control is a string, return it directly\n    if (typeof control === \"string\") {\n      return control;\n    }\n\n    // If control is true, return default Cache-Control\n    if (control === true) {\n      return \"public, max-age=300\";\n    }\n\n    // Build Cache-Control from object directives\n    const directives: string[] = [];\n\n    if (control.public) {\n      directives.push(\"public\");\n    }\n    if (control.private) {\n      directives.push(\"private\");\n    }\n    if (control.noCache) {\n      directives.push(\"no-cache\");\n    }\n    if (control.noStore) {\n      directives.push(\"no-store\");\n    }\n    if (control.maxAge !== undefined) {\n      const maxAgeSeconds = this.durationToSeconds(control.maxAge);\n      directives.push(`max-age=${maxAgeSeconds}`);\n    }\n    if (control.sMaxAge !== undefined) {\n      const sMaxAgeSeconds = this.durationToSeconds(control.sMaxAge);\n      directives.push(`s-maxage=${sMaxAgeSeconds}`);\n    }\n    if (control.mustRevalidate) {\n      directives.push(\"must-revalidate\");\n    }\n    if (control.proxyRevalidate) {\n      directives.push(\"proxy-revalidate\");\n    }\n    if (control.immutable) {\n      directives.push(\"immutable\");\n    }\n    if (control.staleWhileRevalidate !== undefined) {\n      const seconds = this.durationToSeconds(control.staleWhileRevalidate);\n      directives.push(`stale-while-revalidate=${seconds}`);\n    }\n\n    return directives.length > 0 ? directives.join(\", \") : undefined;\n  }\n\n  public shouldStore(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.store) return true;\n    return false;\n  }\n\n  public shouldUseEtag(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.etag) return true;\n    return false;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Protected helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  protected durationToSeconds(duration: number | DurationLike): number {\n    if (typeof duration === \"number\") {\n      return duration;\n    }\n\n    return this.time.duration(duration).asSeconds();\n  }\n\n  protected createCacheKey(route: ServerRoute, config?: ServerRequest): string {\n    const params: string[] = [];\n    for (const [key, value] of Object.entries(config?.params ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n    for (const [key, value] of Object.entries(config?.query ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n\n    return `${route.method}:${(route.path ?? \"\").replaceAll(\":\", \"\")}:${params.join(\",\").replaceAll(\":\", \"\")}`;\n  }\n\n  /**\n   * Collect a ReadableStream into a string and store it in the cache.\n   * This runs in the background while the original stream is sent to the client.\n   */\n  protected async collectStreamForCache(\n    stream: ReadableStream<Uint8Array>,\n    key: string,\n    status: number | undefined,\n    contentType: string | undefined,\n    generateEtag: boolean,\n  ): Promise<string | undefined> {\n    const chunks: Uint8Array[] = [];\n    const reader = stream.getReader();\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        chunks.push(value);\n      }\n\n      // Combine chunks into a single string\n      const decoder = new TextDecoder();\n      const body =\n        chunks\n          .map((chunk) => decoder.decode(chunk, { stream: true }))\n          .join(\"\") + decoder.decode(); // Flush remaining\n\n      const hash = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      this.log.trace(\"Storing streamed response\", { key });\n\n      await this.cache.set(key, {\n        body,\n        status,\n        contentType,\n        lastModified,\n        hash,\n      });\n\n      return generateEtag ? hash : undefined;\n    } finally {\n      reader.releaseLock();\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ninterface RouteCacheEntry {\n  contentType?: string;\n  body: any;\n  status?: number;\n  lastModified: string;\n  hash: string;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport type { CachePrimitiveOptions } from \"alepha/cache\";\nimport type { DurationLike } from \"alepha/datetime\";\nimport { ServerEtagProvider } from \"../providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Middleware that enables ETag-based response caching per-route.\n *\n * Sets per-request etag options in the ALS context.\n * The global `ServerEtagProvider` hooks read these\n * to generate ETags, handle 304s, and optionally store responses.\n *\n * When `store` is enabled, the middleware also checks the cache before\n * calling the handler, short-circuiting on cache hits.\n *\n * **Route middleware** — works inside `$action`, `$page`, or any pipeline.\n *\n * ```typescript\n * class UserController {\n *   // ETag only (no response caching)\n *   getUser = $action({\n *     use: [$etag()],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // ETag + response caching (store)\n *   getProfile = $action({\n *     use: [$etag(true)],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // Fine-grained control\n *   getStats = $action({\n *     use: [$etag({ store: { ttl: [5, \"minutes\"] }, control: { public: true, maxAge: 300 } })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $etag = (options?: EtagMiddlewareOptions): Middleware => {\n  const resolved = resolveEtagOptions(options);\n\n  return createMiddleware({\n    name: \"$etag\",\n    options: resolved as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const etagProvider = alepha.inject(ServerEtagProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\") ?? args[0];\n\n        // Set etag options on request metadata for hooks to read\n        if (request?.metadata) {\n          request.metadata.etagOptions = resolved;\n        }\n\n        // If store is enabled, check cache before handler\n        if (etagProvider.shouldStore(resolved)) {\n          if (request) {\n            const cached = await etagProvider.checkCache(request, resolved);\n\n            // checkCache sets request.metadata.etagHit on cache hit\n            // cached may be undefined for 304 responses (no body)\n            if (cached !== undefined || request.metadata?.etagHit) {\n              return cached;\n            }\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport function resolveEtagOptions(\n  options?: EtagMiddlewareOptions,\n): EtagMiddlewareOptionsResolved {\n  if (options === true) {\n    return { store: true, etag: true };\n  }\n\n  if (!options) {\n    return { etag: true };\n  }\n\n  return { etag: true, ...options };\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type EtagMiddlewareOptions =\n  /**\n   * If true, enables both store and etag.\n   */\n  | true\n  /**\n   * Object configuration for fine-grained control.\n   */\n  | {\n      /**\n       * If true, enables storing cached responses. (in-memory, Redis, @see alepha/cache for other providers)\n       * If a DurationLike is provided, it will be used as the TTL for the cache.\n       * If CachePrimitiveOptions is provided, it will be used to configure the cache storage.\n       *\n       * @default false\n       */\n      store?: true | DurationLike | CachePrimitiveOptions;\n\n      /**\n       * If true, enables ETag support for the cached responses.\n       *\n       * @default true (always true when using $etag)\n       */\n      etag?: true;\n\n      /**\n       * - If true, sets Cache-Control to \"public, max-age=300\" (5 minutes).\n       * - If string, sets Cache-Control to the provided value directly.\n       * - If object, configures Cache-Control directives.\n       */\n      control?:\n        | true\n        | string\n        | {\n            /**\n             * Indicates that the response may be cached by any cache.\n             */\n            public?: boolean;\n            /**\n             * Indicates that the response is intended for a single user and must not be stored by a shared cache.\n             */\n            private?: boolean;\n            /**\n             * Forces caches to submit the request to the origin server for validation before releasing a cached copy.\n             */\n            noCache?: boolean;\n            /**\n             * Instructs caches not to store the response.\n             */\n            noStore?: boolean;\n            /**\n             * Maximum amount of time a resource is considered fresh.\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            maxAge?: number | DurationLike;\n            /**\n             * Overrides max-age for shared caches (e.g., CDNs).\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            sMaxAge?: number | DurationLike;\n            /**\n             * Indicates that once a resource becomes stale, caches must not use it without successful validation.\n             */\n            mustRevalidate?: boolean;\n            /**\n             * Similar to must-revalidate, but only for shared caches.\n             */\n            proxyRevalidate?: boolean;\n            /**\n             * Indicates that the response can be stored but must be revalidated before each use.\n             */\n            immutable?: boolean;\n            /**\n             * Time window (in seconds or DurationLike) during which a stale response may be served\n             * while a fresh one is fetched in the background.\n             * Supported by Cloudflare, modern browsers, and most CDNs.\n             */\n            staleWhileRevalidate?: number | DurationLike;\n          };\n    };\n\nexport interface EtagMiddlewareOptionsResolved {\n  store?: true | DurationLike | CachePrimitiveOptions;\n  etag?: true;\n  control?:\n    | true\n    | string\n    | {\n        public?: boolean;\n        private?: boolean;\n        noCache?: boolean;\n        noStore?: boolean;\n        maxAge?: number | DurationLike;\n        sMaxAge?: number | DurationLike;\n        mustRevalidate?: boolean;\n        proxyRevalidate?: boolean;\n        immutable?: boolean;\n        staleWhileRevalidate?: number | DurationLike;\n      };\n}\n","import { $module } from \"alepha\";\nimport { AlephaCache } from \"alepha/cache\";\nimport { AlephaCrypto } from \"alepha/crypto\";\nimport { ServerEtagProvider } from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$etag.ts\";\nexport * from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * ETag-based response caching.\n *\n * **Features:**\n * - ETag generation and validation\n * - Conditional request handling (304 Not Modified)\n * - Optional response caching (store)\n * - Cache-Control header support\n *\n * @module alepha.server.etag\n */\nexport const AlephaServerEtag = $module({\n  name: \"alepha.server.etag\",\n  services: [AlephaCache, AlephaCrypto, ServerEtagProvider],\n});\n"],"mappings":";;;;;;AAUA,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,SAA4B,QAAQ,MAAM;CAC1C,SAA4B,QAAQ,cAAc;CAClD,OAA0B,QAAQ,gBAAgB;CAClD,QAA2B,OAAwB;EACjD,UAAU;EACV,MAAM;CACR,CAAC;CAED,aAAoB,SAAkC;EACpD,MAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS;EACtE,OAAO,IAAI,KAAK,OAAO,KAAK,MAAM,KAAK,EAAE;CAC3C;CAEA,MAAa,WAAW,OAAoB;EAC1C,MAAM,KAAK,MAAM,WAAW,KAAK,eAAe,KAAK,CAAC;CACxD;;;;;CAMA,MAAa,WACX,SACA,SACc;EACd,IAAI,CAAC,KAAK,YAAY,OAAO,GAC3B;EAKF,MAAM,gBAAgB,KAAK,OAAO,MAAM,IAAI,uBAAuB;EAEnE,MAAM,YAAY;GAChB,QACE,QAAQ,UAAU,eAClB,eAAe,UACf,QAAQ,UACR;GACF,MACE,QAAQ,UAAU,aAClB,OAAO,eAAe,OAAO,QAAQ,OAAO,EAAE;EAClD;EAEA,MAAM,MAAM,KAAK,eAAe,WAAW,iBAAiB,OAAO;EACnE,MAAM,SAAS,MAAM,KAAK,MAAM,IAAI,GAAG;EAEvC,IAAI,CAAC,QAAQ;GACX,KAAK,IAAI,MAAM,cAAc,EAAE,IAAI,CAAC;GACpC;EACF;EAEA,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,CAAC;EAGnC,QAAQ,aAAa,CAAC;EACtB,QAAQ,SAAS,UAAU;EAG3B,IAAI,QAAQ,OAAO;GAEjB,IACE,QAAQ,UAAU,qBAAqB,OAAO,QAC9C,QAAQ,UAAU,yBAAyB,OAAO,cAClD;IACA,QAAQ,MAAM,SAAS;IACvB,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;IAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;IAC5D,KAAK,IAAI,MAAM,6BAA6B;KAC1C;KACA,MAAM,OAAO;IACf,CAAC;IACD,OAAO,QAAQ,MAAM;GACvB;GAEA,QAAQ,MAAM,OAAO,OAAO;GAC5B,QAAQ,MAAM,SAAS,OAAO,UAAU;GAExC,IAAI,OAAO,aACT,QAAQ,MAAM,UAAU,gBAAgB,OAAO,WAAW;GAG5D,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;GAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;EAC9D;EAQA,OAJE,OAAO,gBAAgB,qBACnB,KAAK,MAAM,OAAO,IAAI,IACtB,OAAO;CAGf;;;;CASA,mBAAsC,MAAM;EAC1C,IAAI;EACJ,SAAS,OAAO,EAAE,QAAQ,SAAS,eAAe;GAChD,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,WAAW,CAAC,KAAK,YAAY,OAAO,GACvC;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,QAAQ,MAAM,UAAU,QAAQ,MAAM,UAAU,KAClD;GAGF,IAAI,CAAC,UACH;GAGF,MAAM,cACJ,OAAO,aAAa,WAAW,eAAe;GAChD,MAAM,OACJ,gBAAgB,eAAe,WAAW,KAAK,UAAU,QAAQ;GAEnE,MAAM,gBAAgB,KAAK,aAAa,IAAI;GAC5C,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO,OAAO;GAErD,KAAK,IAAI,MAAM,2BAA2B;IACxC;IACA,QAAQ,OAAO;GACjB,CAAC;GAED,MAAM,KAAK,MAAM,IAAI,KAAK;IAClB;IACN;IACa;IACb,MAAM;GACR,CAAC;GAGD,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,QAAQ,MAAM,UAAU,iBAAiB,YAAY;EAEzD;CACF,CAAC;;;;;CAMD,SAA4B,MAAM;EAChC,IAAI;EACJ,UAAU,EAAE,cAAc;GACxB,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAGF,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAEhD,IAAI,QAAQ,MAAM,QAAQ,MAExB;GAGF,IACE,CAAC,eACD,iBACA,QAAQ,MAAM,QAAQ,SACrB,OAAO,QAAQ,MAAM,SAAS,YAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,IACpC;IACA,MAAM,gBAAgB,KAAK,aAAa,QAAQ,MAAM,IAAI;IAE1D,IAAI,QAAQ,QAAQ,qBAAqB,eAAe;KACtD,QAAQ,MAAM,SAAS;KACvB,QAAQ,MAAM,OAAO,KAAA;KACrB,QAAQ,MAAM,UAAU,QAAQ,aAAa;KAC7C,KAAK,IAAI,MAAM,qCAAqC;MAClD,OAAO,QAAQ;MACf,MAAM;KACR,CAAC;KACD;IACF;GACF;EACF;CACF,CAAC;;;;CAKD,aAAgC,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,SAAS,OAAO,EAAE,OAAO,SAAS,eAAe;GAC/C,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAIF,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,SAAS,QAAQ,mBAAmB;GAGtC,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAGhD,IAAI,CAAC,eAAe,CAAC,eACnB;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,SAAS,UAAU,SAAS,UAAU,KACxC;GAIF,SAAS,YAAY,CAAC;GAEtB,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO;GAG9C,IAAI,SAAS,gBAAgB,kBAAkB,aAAa;IAE1D,MAAM,CAAC,cAAc,eACnB,SAAS,KACT,IAAI;IAGN,SAAS,OAAO;IAGhB,KAAK,sBACH,aACA,KACA,SAAS,QACT,SAAS,UAAU,iBACnB,aACF,EACG,MAAM,SAAS;KACd,IAAI,iBAAiB,MACnB,KAAK,IAAI,MAAM,2BAA2B;MAAE;MAAK;KAAK,CAAC;IAE3D,CAAC,EACA,OAAO,QAAQ;KACd,KAAK,IAAI,KAAK,0BAA0B;MAAE;MAAK,OAAO;KAAI,CAAC;IAC7D,CAAC;IAEH;GACF;GAGA,IAAI,OAAO,SAAS,SAAS,UAC3B;GAGF,MAAM,gBAAgB,KAAK,aAAa,SAAS,IAAI;GACrD,MAAM,eAAe,KAAK,KAAK,YAAY;GAG3C,IAAI,aAAa;IACf,KAAK,IAAI,MAAM,oBAAoB;KACjC;KACA,OAAO,MAAM;KACb,MAAM;IACR,CAAC;IAED,MAAM,KAAK,MAAM,IAAI,KAAK;KACxB,MAAM,SAAS;KACf,QAAQ,SAAS;KACjB,aAAa,SAAS,UAAU;KAChC;KACA,MAAM;IACR,CAAC;GACH;GAGA,IAAI,eAAe;IACjB,SAAS,QAAQ,OAAO;IACxB,SAAS,QAAQ,mBAAmB;GACtC;EACF;CACF,CAAC;CAMD,wBACE,SACoB;EACpB,IAAI,CAAC,SACH;EAGF,MAAM,UAAU,QAAQ;EACxB,IAAI,CAAC,SACH;EAIF,IAAI,OAAO,YAAY,UACrB,OAAO;EAIT,IAAI,YAAY,MACd,OAAO;EAIT,MAAM,aAAuB,CAAC;EAE9B,IAAI,QAAQ,QACV,WAAW,KAAK,QAAQ;EAE1B,IAAI,QAAQ,SACV,WAAW,KAAK,SAAS;EAE3B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,WAAW,KAAA,GAAW;GAChC,MAAM,gBAAgB,KAAK,kBAAkB,QAAQ,MAAM;GAC3D,WAAW,KAAK,WAAW,eAAe;EAC5C;EACA,IAAI,QAAQ,YAAY,KAAA,GAAW;GACjC,MAAM,iBAAiB,KAAK,kBAAkB,QAAQ,OAAO;GAC7D,WAAW,KAAK,YAAY,gBAAgB;EAC9C;EACA,IAAI,QAAQ,gBACV,WAAW,KAAK,iBAAiB;EAEnC,IAAI,QAAQ,iBACV,WAAW,KAAK,kBAAkB;EAEpC,IAAI,QAAQ,WACV,WAAW,KAAK,WAAW;EAE7B,IAAI,QAAQ,yBAAyB,KAAA,GAAW;GAC9C,MAAM,UAAU,KAAK,kBAAkB,QAAQ,oBAAoB;GACnE,WAAW,KAAK,0BAA0B,SAAS;EACrD;EAEA,OAAO,WAAW,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,KAAA;CACzD;CAEA,YAAmB,SAAkD;EACnE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,OAAO,OAAO;EAC1B,OAAO;CACT;CAEA,cAAqB,SAAkD;EACrE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,MAAM,OAAO;EACzB,OAAO;CACT;CAMA,kBAA4B,UAAyC;EACnE,IAAI,OAAO,aAAa,UACtB,OAAO;EAGT,OAAO,KAAK,KAAK,SAAS,QAAQ,EAAE,UAAU;CAChD;CAEA,eAAyB,OAAoB,QAAgC;EAC3E,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,UAAU,CAAC,CAAC,GAC5D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAE/B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,SAAS,CAAC,CAAC,GAC3D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAG/B,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,WAAW,KAAK,EAAE,EAAE,GAAG,OAAO,KAAK,GAAG,EAAE,WAAW,KAAK,EAAE;CACzG;;;;;CAMA,MAAgB,sBACd,QACA,KACA,QACA,aACA,cAC6B;EAC7B,MAAM,SAAuB,CAAC;EAC9B,MAAM,SAAS,OAAO,UAAU;EAEhC,IAAI;GACF,OAAO,MAAM;IACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,OAAO,KAAK,KAAK;GACnB;GAGA,MAAM,UAAU,IAAI,YAAY;GAChC,MAAM,OACJ,OACG,KAAK,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,EACtD,KAAK,EAAE,IAAI,QAAQ,OAAO;GAE/B,MAAM,OAAO,KAAK,aAAa,IAAI;GACnC,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,KAAK,IAAI,MAAM,6BAA6B,EAAE,IAAI,CAAC;GAEnD,MAAM,KAAK,MAAM,IAAI,KAAK;IACxB;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,OAAO,eAAe,OAAO,KAAA;EAC/B,UAAU;GACR,OAAO,YAAY;EACrB;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACvaA,MAAa,SAAS,YAAgD;CACpE,MAAM,WAAW,mBAAmB,OAAO;CAE3C,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAS;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB,KAAK,KAAK;IAG1D,IAAI,SAAS,UACX,QAAQ,SAAS,cAAc;IAIjC,IAAI,aAAa,YAAY,QAAQ;SAC/B,SAAS;MACX,MAAM,SAAS,MAAM,aAAa,WAAW,SAAS,QAAQ;MAI9D,IAAI,WAAW,KAAA,KAAa,QAAQ,UAAU,SAC5C,OAAO;KAEX;;IAGF,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;AAIA,SAAgB,mBACd,SAC+B;CAC/B,IAAI,YAAY,MACd,OAAO;EAAE,OAAO;EAAM,MAAM;CAAK;CAGnC,IAAI,CAAC,SACH,OAAO,EAAE,MAAM,KAAK;CAGtB,OAAO;EAAE,MAAM;EAAM,GAAG;CAAQ;AAClC;;;;;;;;;;;;;;ACpEA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU;EAAC;EAAa;EAAc;CAAkB;AAC1D,CAAC"}

package/dist/server/health/index.d.ts

@@ -1,8 +1,5 @@
-import * as _$alepha from "alepha";
 import { Alepha } from "alepha";
-import * as _$alepha_server0 from "alepha/server";
 import { DateTimeProvider } from "alepha/datetime";
-import * as _$typebox from "typebox";
 
 //#region ../../src/server/health/providers/ServerHealthProvider.d.ts
 /**
@@ -13,20 +10,20 @@ import * as _$typebox from "typebox";
 declare class ServerHealthProvider {
   protected readonly time: DateTimeProvider;
   protected readonly alepha: Alepha;
-  readonly health: _$alepha_server0.RoutePrimitive<{
-    response: _$typebox.TObject<{
-      message: _$typebox.TString;
-      uptime: _$typebox.TNumber;
-      date: _$typebox.TString;
-      ready: _$typebox.TBoolean;
+  readonly health: import("alepha/server").RoutePrimitive<{
+    response: import("typebox").TObject<{
+      message: import("typebox").TString;
+      uptime: import("typebox").TNumber;
+      date: import("typebox").TString;
+      ready: import("typebox").TBoolean;
     }>;
   }>;
-  readonly healthz: _$alepha_server0.RoutePrimitive<{
-    response: _$typebox.TObject<{
-      message: _$typebox.TString;
-      uptime: _$typebox.TNumber;
-      date: _$typebox.TString;
-      ready: _$typebox.TBoolean;
+  readonly healthz: import("alepha/server").RoutePrimitive<{
+    response: import("typebox").TObject<{
+      message: import("typebox").TString;
+      uptime: import("typebox").TNumber;
+      date: import("typebox").TString;
+      ready: import("typebox").TBoolean;
     }>;
   }>;
   protected healthCheck(): {
@@ -38,11 +35,11 @@ declare class ServerHealthProvider {
 }
 //#endregion
 //#region ../../src/server/health/schemas/healthSchema.d.ts
-declare const healthSchema: _$typebox.TObject<{
-  message: _$typebox.TString;
-  uptime: _$typebox.TNumber;
-  date: _$typebox.TString;
-  ready: _$typebox.TBoolean;
+declare const healthSchema: import("typebox").TObject<{
+  message: import("typebox").TString;
+  uptime: import("typebox").TNumber;
+  date: import("typebox").TString;
+  ready: import("typebox").TBoolean;
 }>;
 //#endregion
 //#region ../../src/server/health/index.d.ts
@@ -54,7 +51,7 @@ declare const healthSchema: _$typebox.TObject<{
  *
  * @module alepha.server.health
  */
-declare const AlephaServerHealth: _$alepha.Service<_$alepha.Module>;
+declare const AlephaServerHealth: import("alepha").Service<import("alepha").Module>;
 //#endregion
 export { AlephaServerHealth, ServerHealthProvider, healthSchema };
 //# sourceMappingURL=index.d.ts.map

package/dist/server/health/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;;;;;;;cAUa,oBAAA;EAAA,mBACQ,IAAA,EAAM,gBAAA;EAAA,mBACN,MAAA,EAAM,MAAA;EAAA,SAET,MAAA,mBAAM,cAAA;;eAFG,SAAA,CAAA,OAAA;;;;;;WAWT,OAAA,mBAAO,cAAA;;eATD,SAAA,CAAA,OAAA;;;;;;YAkBZ,WAAA,CAAA;;;;;;;;;cC9BC,YAAA,YAAY,OAAA;WAKvB,SAAA,CAAA,OAAA;;;;;;;;;;;;ADGF;;;cESa,kBAAA,EAAkB,QAAA,CAAA,OAAA,CAG7B,QAAA,CAH6B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;AAUA;;;cAAa,oBAAA;EAAA,mBACQ,IAAA,EAAM,gBAAA;EAAA,mBACN,MAAA,EAAM,MAAA;EAAA,SAET,MAAA,0BAAM,cAAA;;;;;;;;WASN,OAAA,0BAAO,cAAA;;;;;;;;YASb,WAAA;;;;;;;;;cC9BC,YAAA,oBAAY,OAAA;;;;;;;;;;ADQzB;;;;;;cESa,kBAAA,mBAAkB,OAAA,kBAAA,MAAA"}

package/dist/server/health/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { t } from \"alepha\";\n\nexport const healthSchema = t.object({\n  message: t.text(),\n  uptime: t.number(),\n  date: t.datetime(),\n  ready: t.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Application health monitoring endpoints.\n *\n * **Features:**\n * - `GET /health` endpoint\n *\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,MAAM;CACjB,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,UAAU;CAClB,OAAO,EAAE,SAAS;CACnB,CAAC;;;;;;;;ACGF,IAAa,uBAAb,MAAkC;CAChC,OAA4C,QAAQ,iBAAiB;CACrE,SAA4B,QAAQ,OAAO;CAE3C,SAAyB,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,UAA0B,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,cAAwB;EACtB,OAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,QAAQ,CAAC;GACpC,MAAM,KAAK,KAAK,cAAc;GAC9B,OAAO,KAAK,OAAO,SAAS;GAC7B;;;;;;;;;;;;;ACnBL,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { t } from \"alepha\";\n\nexport const healthSchema = t.object({\n  message: t.text(),\n  uptime: t.number(),\n  date: t.datetime(),\n  ready: t.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Application health monitoring endpoints.\n *\n * **Features:**\n * - `GET /health` endpoint\n *\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,KAAK;CAChB,QAAQ,EAAE,OAAO;CACjB,MAAM,EAAE,SAAS;CACjB,OAAO,EAAE,QAAQ;AACnB,CAAC;;;;;;;;ACGD,IAAa,uBAAb,MAAkC;CAChC,OAA4C,QAAQ,gBAAgB;CACpE,SAA4B,QAAQ,MAAM;CAE1C,SAAyB,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,UAA0B,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,cAAwB;EACtB,OAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,OAAO,CAAC;GACnC,MAAM,KAAK,KAAK,aAAa;GAC7B,OAAO,KAAK,OAAO,QAAQ;EAC7B;CACF;AACF;;;;;;;;;;;ACrBA,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,oBAAoB;AAC/C,CAAC"}

package/dist/server/links/index.browser.js

@@ -265,6 +265,8 @@ var LinkProvider = class LinkProvider {
 	* - `can("admin:user:read")` → O(1) set lookup
 	*/
 	can(name) {
+		const registry = this.alepha.store.get("alepha.server.request.apiLinks");
+		if (registry && registry !== this.lastLoadedRegistry) this.loadRegistry(registry);
 		if (this.actionMap.size > 0) {
 			if (this.actionMap.has(name)) return true;
 		} else {