alepha 0.22.0 → 0.24.0

package/dist/server/cors/index.d.ts

@@ -1,17 +1,16 @@
 import { Middleware, Static } from "alepha";
 import { ServerRouterProvider } from "alepha/server";
-
 //#region ../../src/server/cors/providers/ServerCorsProvider.d.ts
 /**
  * CORS configuration atom (global defaults)
  */
-declare const corsOptions: import("alepha").Atom<import("typebox").TObject<{
-  origin: import("typebox").TOptional<import("typebox").TString>;
-  methods: import("typebox").TArray<import("typebox").TString>;
-  headers: import("typebox").TArray<import("typebox").TString>;
-  credentials: import("typebox").TOptional<import("typebox").TBoolean>;
-  maxAge: import("typebox").TOptional<import("typebox").TNumber>;
-}>, "alepha.server.cors.options">;
+declare const corsOptions: import("alepha").Atom<import("zod").ZodObject<{
+  origin: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodString>>;
+  methods: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodString>>;
+  headers: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodString>>;
+  credentials: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodBoolean>>;
+  maxAge: import("zod").ZodOptional<import("zod").ZodNumber>;
+}, import("zod/v4/core").$strip>, "alepha.server.cors.options">;
 type CorsOptions = Static<typeof corsOptions.schema>;
 declare module "alepha" {
   interface State {
@@ -33,10 +32,10 @@ declare class ServerCorsProvider {
   protected readonly serverRouterProvider: ServerRouterProvider;
   protected readonly globalOptions: Readonly<{
     origin?: string | undefined;
-    credentials?: boolean | undefined;
-    maxAge?: number | undefined;
     methods: string[];
     headers: string[];
+    credentials?: boolean | undefined;
+    maxAge?: number | undefined;
   }>;
   /**
    * Registered CORS configurations with their path patterns

package/dist/server/cors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;AASA;cAAa,WAAA,mBAAW,IAAA,mBAAA,OAAA;;;;;;;KAsCZ,WAAA,GAAc,MAAM,QAAQ,WAAA,CAAY,MAAA;AAAA;EAAA,UAGxC,KAAA;IAAA,CACP,WAAA,CAAY,GAAG,GAAG,WAAA;EAAA;AAAA;AAAA,UAMN,gBAAA,SAAyB,OAAO,CAAC,WAAA;;;;EAIhD,IAAA;;;;EAIA,KAAA;AAAA;AAAA,cAGW,kBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,oBAAA,EAAoB,oBAAA;EAAA,mBACpB,aAAA,EAAa,QAAA;;;;;;;;;;WAKhB,iBAAA,EAAmB,gBAAA;EAzBpB;;;EA8BR,YAAA,CAAa,MAAA,EAAQ,gBAAA;EAAA,mBAIT,OAAA,mBAAO,aAAA;EAlCM;AAMlC;;EAsDS,gBAAA,CAAiB,MAAA,EAAQ,OAAA,CAAQ,WAAA,IAAe,WAAA;EAtDR;;;EAmExC,gBAAA,CACL,OAAA;IACE,OAAA;MAAW,MAAA;IAAA;IACX,KAAA;MAAS,SAAA,GAAY,IAAA,UAAc,KAAA;IAAA;EAAA,GAErC,OAAA,EAAS,WAAA;EAAA,mBAqBQ,SAAA,mBAAS,aAAA;EAAA,mBAwBT,SAAA,mBAAS,aAAA;EASrB,eAAA,CACL,MAAA,sBACA,OAAA,EAAS,WAAA;AAAA;AAAA,KAWD,yBAAA,GAA4B,WAAW;;;;;AA3LnD;;;;;;;;;;;;;;;;;;;cCkBa,KAAA,GAAS,OAAA,GAAU,OAAA,CAAQ,WAAA,MAAe,UAAA;;;;YCb3C,WAAA;IF+BV;;;;IE1BE,IAAA,GAAO,WAAW;EAAA;AAAA;;;;;;;;;cAcT,gBAAA,mBAAgB,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;cASa,8BAAW,mBAAA;;;;;;;KAoCZ,cAAc,cAAc,YAAY;;YAGxC;KACP,YAAY,MAAM;;;UAMN,yBAAyB,QAAQ;;;;EAIhD;;;;EAIA;;cAGW;qBACQ,6BAAG;qBACH,sBAAoB;qBACpB,eAAa;;;;;;;;;;WAKhB,mBAAmB;;;;EAK5B,aAAa,QAAQ;qBAIT,0BAAO;;;;EA0BnB,iBAAiB,QAAQ,QAAQ,eAAe;;;;EAahD,iBACL;IACE;MAAW;;IACX;MAAS,YAAY,cAAc;;KAErC,SAAS;qBAqBQ,4BAAS;qBAwBT,4BAAS;EASrB,gBACL,4BACA,SAAS;;KAWD,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;cCvK3B,QAAK,UAAc,QAAQ,iBAAe;;;;YCb3C;;;;;IAKR,OAAO;;;;;;;;;;;cAcE,mCAAgB,yBAAA"}

package/dist/server/cors/index.js

@@ -1,4 +1,4 @@
-import { $atom, $hook, $inject, $module, $state, AlephaError, createMiddleware, t } from "alepha";
+import { $atom, $hook, $inject, $module, $state, AlephaError, createMiddleware, z } from "alepha";
 import { $logger } from "alepha/logger";
 import { ServerRouterProvider } from "alepha/server";
 //#region ../../src/server/cors/providers/ServerCorsProvider.ts
@@ -7,31 +7,19 @@ import { ServerRouterProvider } from "alepha/server";
 */
 const corsOptions = $atom({
 	name: "alepha.server.cors.options",
-	schema: t.object({
-		origin: t.optional(t.string({
-			description: "Allowed origins (* for all, string for single, comma-separated for multiple)",
-			default: "*"
-		})),
-		methods: t.array(t.string(), {
-			description: "Allowed HTTP methods",
-			default: [
-				"GET",
-				"POST",
-				"PUT",
-				"PATCH",
-				"DELETE",
-				"OPTIONS"
-			]
-		}),
-		headers: t.array(t.string(), {
-			description: "Allowed headers",
-			default: ["Content-Type", "Authorization"]
-		}),
-		credentials: t.optional(t.boolean({
-			description: "Allow credentials",
-			default: false
-		})),
-		maxAge: t.optional(t.number({ description: "Preflight cache duration in seconds" }))
+	schema: z.object({
+		origin: z.string().describe("Allowed origins (* for all, string for single, comma-separated for multiple)").default("*").optional(),
+		methods: z.array(z.string()).describe("Allowed HTTP methods").default([
+			"GET",
+			"POST",
+			"PUT",
+			"PATCH",
+			"DELETE",
+			"OPTIONS"
+		]),
+		headers: z.array(z.string()).describe("Allowed headers").default(["Content-Type", "Authorization"]),
+		credentials: z.boolean().describe("Allow credentials").default(false).optional(),
+		maxAge: z.number().describe("Preflight cache duration in seconds").optional()
 	}),
 	default: {
 		origin: "*",

package/dist/server/cors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $state, type Static, t } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: t.object({\n    origin: t.optional(\n      t.string({\n        description:\n          \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n        default: \"*\",\n      }),\n    ),\n    methods: t.array(t.string(), {\n      description: \"Allowed HTTP methods\",\n      default: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    }),\n    headers: t.array(t.string(), {\n      description: \"Allowed headers\",\n      default: [\"Content-Type\", \"Authorization\"],\n    }),\n    credentials: t.optional(\n      t.boolean({\n        description: \"Allow credentials\",\n        default: false,\n      }),\n    ),\n    maxAge: t.optional(\n      t.number({\n        description: \"Preflight cache duration in seconds\",\n      }),\n    ),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: false,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsRegistration extends Partial<CorsOptions> {\n  /**\n   * Name identifier for this CORS config.\n   */\n  name?: string;\n  /**\n   * Path patterns to match (supports wildcards like /api/*).\n   */\n  paths?: string[];\n}\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $state(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsRegistration[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsRegistration): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  public buildCorsOptions(config: Partial<CorsOptions>): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  public applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  protected readonly configure = $hook({\n    on: \"start\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { AlephaError, createMiddleware, type Middleware } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Middleware that applies CORS headers to the response and handles OPTIONS preflight.\n *\n * Reads the request from the ALS context and applies the configured\n * CORS headers via `ServerCorsProvider`. Options are merged with\n * global CORS defaults.\n *\n * For OPTIONS preflight requests, the middleware short-circuits with a 204 response\n * and skips the handler entirely.\n *\n * **Route middleware** — requires a request context (`$action`). Throws if used outside one.\n *\n * ```typescript\n * class ApiController {\n *   getOrders = $action({\n *     use: [$cors({ origin: \"https://app.example.com\", credentials: true })],\n *     handler: async ({ query }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $cors = (options?: Partial<CorsOptions>): Middleware => {\n  return createMiddleware({\n    name: \"$cors\",\n    options: options as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const corsProvider = alepha.inject(ServerCorsProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\");\n\n        if (!request) {\n          throw new AlephaError(\n            \"$cors requires a request context (use inside $action)\",\n          );\n        }\n\n        const corsConfig = corsProvider.buildCorsOptions(options ?? {});\n        corsProvider.applyCorsHeaders(request, corsConfig);\n\n        // OPTIONS preflight → respond immediately, skip handler\n        if (request.method === \"OPTIONS\") {\n          request.reply.setStatus(204);\n          return;\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n","import { $module } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cross-Origin Resource Sharing configuration.\n *\n * **Features:**\n * - CORS policy definition\n *\n * @module alepha.server.cors\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;AASA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EAAE,SACR,EAAE,OAAO;GACP,aACE;GACF,SAAS;EACX,CAAC,CACH;EACA,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG;GAC3B,aAAa;GACb,SAAS;IAAC;IAAO;IAAQ;IAAO;IAAS;IAAU;GAAS;EAC9D,CAAC;EACD,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG;GAC3B,aAAa;GACb,SAAS,CAAC,gBAAgB,eAAe;EAC3C,CAAC;EACD,aAAa,EAAE,SACb,EAAE,QAAQ;GACR,aAAa;GACb,SAAS;EACX,CAAC,CACH;EACA,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,aAAa,sCACf,CAAC,CACH;CACF,CAAC;CACD,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;EAAS;EAC5D,SAAS,CAAC,gBAAgB,eAAe;EACzC,aAAa;CACf;AACF,CAAC;AAuBD,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,uBAA0C,QAAQ,oBAAoB;CACtE,gBAAmC,OAAO,WAAW;;;;CAKrD,oBAAwD,CAAC;;;;CAKzD,aAAoB,QAAgC;EAClD,KAAK,kBAAkB,KAAK,MAAM;CACpC;CAEA,UAA6B,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;GAEnB,KAAK,MAAM,UAAU,KAAK,mBACxB,IAAI,OAAO,OACT,KAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,OAAO;IACjE,KAAK,MAAM,SAAS,eAClB,MAAM,OAAO,KAAK,iBAAiB,MAAM;GAE7C;GAIJ,IAAI,KAAK,kBAAkB,SAAS,GAClC,KAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,iCACpD;EAEJ;CACF,CAAC;;;;CAKD,iBAAwB,QAA2C;EACjE,OAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;EAC9C;CACF;;;;CAKA,iBACE,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;EAE1D,IAAI,aAAa,KAAK,gBAAgB,WAAW,MAAM,GACrD,QAAQ,MAAM,UAAU,+BAA+B,SAAS;EAGlE,IAAI,aACF,QAAQ,MAAM,UAAU,oCAAoC,MAAM;EAGpE,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAC1E,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAE1E,IAAI,UAAU,MACZ,QAAQ,MAAM,UAAU,0BAA0B,OAAO,MAAM,CAAC;CAEpE;CAEA,YAA+B,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,UAAU;GACnD,KAAK,MAAM,SAAS,QAAQ;IAC1B,IACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,WAEjB;IAGF,KAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;MACtB,MAAM,UAAU,GAAG;KACrB;IACF,CAAC;GACH;EACF;CACF,CAAC;CAED,YAA+B,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;GACtC,KAAK,iBAAiB,SAAS,UAAU;EAC3C;CACF,CAAC;CAED,gBACE,QACA,SACS;EACT,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,YAAY,KAAK,OAAO;EAC5B,OAAO,QACJ,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,SAAS,UAAU,EAAE;CAC1B;AACF;;;;;;;;;;;;;;;;;;;;;;;;ACvKA,MAAa,SAAS,YAA+C;CACnE,OAAO,iBAAiB;EACtB,MAAM;EACG;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB;IAEhD,IAAI,CAAC,SACH,MAAM,IAAI,YACR,uDACF;IAGF,MAAM,aAAa,aAAa,iBAAiB,WAAW,CAAC,CAAC;IAC9D,aAAa,iBAAiB,SAAS,UAAU;IAGjD,IAAI,QAAQ,WAAW,WAAW;KAChC,QAAQ,MAAM,UAAU,GAAG;KAC3B;IACF;IAEA,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;;;;;;;;;;;ACvBA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,kBAAkB;AAC/B,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $state, type Static, z } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: z.object({\n    origin: z\n      .string()\n      .describe(\n        \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n      )\n      .default(\"*\")\n      .optional(),\n    methods: z\n      .array(z.string())\n      .describe(\"Allowed HTTP methods\")\n      .default([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"]),\n    headers: z\n      .array(z.string())\n      .describe(\"Allowed headers\")\n      .default([\"Content-Type\", \"Authorization\"]),\n    credentials: z\n      .boolean()\n      .describe(\"Allow credentials\")\n      .default(false)\n      .optional(),\n    maxAge: z\n      .number()\n      .describe(\"Preflight cache duration in seconds\")\n      .optional(),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: false,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsRegistration extends Partial<CorsOptions> {\n  /**\n   * Name identifier for this CORS config.\n   */\n  name?: string;\n  /**\n   * Path patterns to match (supports wildcards like /api/*).\n   */\n  paths?: string[];\n}\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $state(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsRegistration[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsRegistration): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  public buildCorsOptions(config: Partial<CorsOptions>): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  public applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  protected readonly configure = $hook({\n    on: \"start\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { AlephaError, createMiddleware, type Middleware } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Middleware that applies CORS headers to the response and handles OPTIONS preflight.\n *\n * Reads the request from the ALS context and applies the configured\n * CORS headers via `ServerCorsProvider`. Options are merged with\n * global CORS defaults.\n *\n * For OPTIONS preflight requests, the middleware short-circuits with a 204 response\n * and skips the handler entirely.\n *\n * **Route middleware** — requires a request context (`$action`). Throws if used outside one.\n *\n * ```typescript\n * class ApiController {\n *   getOrders = $action({\n *     use: [$cors({ origin: \"https://app.example.com\", credentials: true })],\n *     handler: async ({ query }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $cors = (options?: Partial<CorsOptions>): Middleware => {\n  return createMiddleware({\n    name: \"$cors\",\n    options: options as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const corsProvider = alepha.inject(ServerCorsProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\");\n\n        if (!request) {\n          throw new AlephaError(\n            \"$cors requires a request context (use inside $action)\",\n          );\n        }\n\n        const corsConfig = corsProvider.buildCorsOptions(options ?? {});\n        corsProvider.applyCorsHeaders(request, corsConfig);\n\n        // OPTIONS preflight → respond immediately, skip handler\n        if (request.method === \"OPTIONS\") {\n          request.reply.setStatus(204);\n          return;\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n","import { $module } from \"alepha\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cross-Origin Resource Sharing configuration.\n *\n * **Features:**\n * - CORS policy definition\n *\n * @module alepha.server.cors\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;AASA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EACL,OAAO,CAAC,CACR,SACC,8EACF,CAAC,CACA,QAAQ,GAAG,CAAC,CACZ,SAAS;EACZ,SAAS,EACN,MAAM,EAAE,OAAO,CAAC,CAAC,CACjB,SAAS,sBAAsB,CAAC,CAChC,QAAQ;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;EAAS,CAAC;EAC/D,SAAS,EACN,MAAM,EAAE,OAAO,CAAC,CAAC,CACjB,SAAS,iBAAiB,CAAC,CAC3B,QAAQ,CAAC,gBAAgB,eAAe,CAAC;EAC5C,aAAa,EACV,QAAQ,CAAC,CACT,SAAS,mBAAmB,CAAC,CAC7B,QAAQ,KAAK,CAAC,CACd,SAAS;EACZ,QAAQ,EACL,OAAO,CAAC,CACR,SAAS,qCAAqC,CAAC,CAC/C,SAAS;CACd,CAAC;CACD,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;EAAS;EAC5D,SAAS,CAAC,gBAAgB,eAAe;EACzC,aAAa;CACf;AACF,CAAC;AAuBD,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,uBAA0C,QAAQ,oBAAoB;CACtE,gBAAmC,OAAO,WAAW;;;;CAKrD,oBAAwD,CAAC;;;;CAKzD,aAAoB,QAAgC;EAClD,KAAK,kBAAkB,KAAK,MAAM;CACpC;CAEA,UAA6B,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;GAEnB,KAAK,MAAM,UAAU,KAAK,mBACxB,IAAI,OAAO,OACT,KAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,OAAO;IACjE,KAAK,MAAM,SAAS,eAClB,MAAM,OAAO,KAAK,iBAAiB,MAAM;GAE7C;GAIJ,IAAI,KAAK,kBAAkB,SAAS,GAClC,KAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,iCACpD;EAEJ;CACF,CAAC;;;;CAKD,iBAAwB,QAA2C;EACjE,OAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;EAC9C;CACF;;;;CAKA,iBACE,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;EAE1D,IAAI,aAAa,KAAK,gBAAgB,WAAW,MAAM,GACrD,QAAQ,MAAM,UAAU,+BAA+B,SAAS;EAGlE,IAAI,aACF,QAAQ,MAAM,UAAU,oCAAoC,MAAM;EAGpE,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAC1E,QAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,IAAI,CAAC;EAE1E,IAAI,UAAU,MACZ,QAAQ,MAAM,UAAU,0BAA0B,OAAO,MAAM,CAAC;CAEpE;CAEA,YAA+B,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,UAAU;GACnD,KAAK,MAAM,SAAS,QAAQ;IAC1B,IACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,WAEjB;IAGF,KAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;MACtB,MAAM,UAAU,GAAG;KACrB;IACF,CAAC;GACH;EACF;CACF,CAAC;CAED,YAA+B,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;GACtC,KAAK,iBAAiB,SAAS,UAAU;EAC3C;CACF,CAAC;CAED,gBACE,QACA,SACS;EACT,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,YAAY,KAAK,OAAO;EAC5B,OAAO,QACJ,MAAM,GAAG,CAAC,CACV,KAAK,MAAM,EAAE,KAAK,CAAC,CAAC,CACpB,SAAS,UAAU,EAAE;CAC1B;AACF;;;;;;;;;;;;;;;;;;;;;;;;ACrKA,MAAa,SAAS,YAA+C;CACnE,OAAO,iBAAiB;EACtB,MAAM;EACG;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB;IAEhD,IAAI,CAAC,SACH,MAAM,IAAI,YACR,uDACF;IAGF,MAAM,aAAa,aAAa,iBAAiB,WAAW,CAAC,CAAC;IAC9D,aAAa,iBAAiB,SAAS,UAAU;IAGjD,IAAI,QAAQ,WAAW,WAAW;KAChC,QAAQ,MAAM,UAAU,GAAG;KAC3B;IACF;IAEA,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;;;;;;;;;;;ACvBA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,kBAAkB;AAC/B,CAAC"}

package/dist/server/etag/index.d.ts

@@ -3,7 +3,6 @@ import { CachePrimitiveOptions } from "alepha/cache";
 import { CryptoProvider } from "alepha/crypto";
 import { DateTimeProvider, DurationLike } from "alepha/datetime";
 import { ServerRequest, ServerRoute } from "alepha/server";
-
 //#region ../../src/server/etag/primitives/$etag.d.ts
 /**
  * Middleware that enables ETag-based response caching per-route.
@@ -45,11 +44,11 @@ type EtagMiddlewareOptions =
 /**
  * If true, enables both store and etag.
  */
-true
+true |
 /**
  * Object configuration for fine-grained control.
  */
-| {
+{
   /**
    * If true, enables storing cached responses. (in-memory, Redis, @see alepha/cache for other providers)
    * If a DurationLike is provided, it will be used as the TTL for the cache.

package/dist/server/etag/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/index.ts"],"mappings":";;;;;;;;;;;AAyCA;;;;;;;;AAkCC;AAID;;;;;;;;AAEgC;AAchC;;;;;;;;;;;;cAtDa,KAAA,GAAS,OAAA,GAAU,qBAAA,KAAwB,UAkCvD;AAAA,iBAIe,kBAAA,CACd,OAAA,GAAU,qBAAA,GACT,6BAA6B;AAAA,KAcpB,qBAAA;;;;;;;;;EA+DA;;;;;;AAc4C;EA7DlD,KAAA,UAAe,YAAA,GAAe,qBAAA;EAiEU;;;;;EA1DxC,IAAA;EA0EkC;;;;;EAnElC,OAAA;IAqDJ;;;IA9CU,MAAA;IAqDJ;;;IAjDI,OAAA;IAoDJ;;;IAhDI,OAAA;IAmDJ;;;IA/CI,OAAA;IAgDwC;;;;IA3CxC,MAAA,YAAkB,YAAA;IC3IC;;;;IDgJnB,OAAA,YAAmB,YAAA;IC3IL;;;ID+Id,cAAA;IC5HC;;;IDgID,eAAA;IC4NmB;;;IDxNnB,SAAA;ICgP4C;;;;;ID1O5C,oBAAA,YAAgC,YAAA;EAAA;AAAA;AAAA,UAI3B,6BAAA;EACf,KAAA,UAAe,YAAA,GAAe,qBAAA;EAC9B,IAAA;EACA,OAAA;IAIM,MAAA;IACA,OAAA;IACA,OAAA;IACA,OAAA;IACA,MAAA,YAAkB,YAAA;IAClB,OAAA,YAAmB,YAAA;IACnB,cAAA;IACA,eAAA;IACA,SAAA;IACA,oBAAA,YAAgC,YAAA;EAAA;AAAA;;;cCtL3B,kBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBACN,IAAA,EAAI,gBAAA;EAAA,mBACJ,KAAA,yBAAK,iBAAA,CAAA,eAAA;EAKjB,YAAA,CAAa,OAAA,WAAkB,MAAA;EAKzB,UAAA,CAAW,KAAA,EAAO,WAAA,GAAW,OAAA;EDgBY;;AAkCvD;AAID;EC9Ce,UAAA,CACX,OAAA,EAAS,aAAA,EACT,OAAA,EAAS,6BAAA,GACR,OAAA;;;;qBA8EgB,gBAAA,mBAAgB,aAAA;EDjClC;;AAA6B;AAchC;EAdG,mBC0FkB,MAAA,mBAAM,aAAA;;;;qBA2CN,UAAA,mBAAU,aAAA;EA0GtB,uBAAA,CACL,OAAA,GAAU,6BAAA;EA6DL,WAAA,CAAY,OAAA,GAAU,6BAAA;EAMtB,aAAA,CAAc,OAAA,GAAU,6BAAA;EAAA,UAUrB,iBAAA,CAAkB,QAAA,WAAmB,YAAA;EAAA,UAQrC,cAAA,CAAe,KAAA,EAAO,WAAA,EAAa,MAAA,GAAS,aAAA;EDvSnC;;;;EAAA,UCuTH,qBAAA,CACd,MAAA,EAAQ,cAAA,CAAe,UAAA,GACvB,GAAA,UACA,MAAA,sBACA,WAAA,sBACA,YAAA,YACC,OAAA;AAAA;AAAA,UAwCK,eAAA;EACR,WAAA;EACA,IAAA;EACA,MAAA;EACA,YAAA;EACA,IAAA;AAAA;;;;;;;;ADhbF;;;;;;cElBa,gBAAA,mBAAgB,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAyCa,QAAK,UAAc,0BAAwB;iBAsCxC,mBACd,UAAU,wBACT;KAcS;;;;;;;;;;;;;;;;EAgBN,eAAe,eAAe;;;;;;EAO9B;;;;;;EAOA;;;;IAOM;;;;IAIA;;;;IAIA;;;;IAIA;;;;;IAKA,kBAAkB;;;;;IAKlB,mBAAmB;;;;IAInB;;;;IAIA;;;;IAIA;;;;;;IAMA,gCAAgC;;;UAI3B;EACf,eAAe,eAAe;EAC9B;EACA;IAIM;IACA;IACA;IACA;IACA,kBAAkB;IAClB,mBAAmB;IACnB;IACA;IACA;IACA,gCAAgC;;;;;cCtL3B;qBACQ,6BAAG;qBACH,QAAM;qBACN,QAAM;qBACN,MAAI;qBACJ,8BAAK,kBAAA;EAKjB,aAAa,kBAAkB;EAKzB,WAAW,OAAO,cAAW;;;;;EAQ7B,WACX,SAAS,eACT,SAAS,gCACR;;;;qBA8EgB,mCAAgB;;;;;qBAyDhB,yBAAM;;;;qBA2CN,6BAAU;EA0GtB,wBACL,UAAU;EA6DL,YAAY,UAAU;EAMtB,cAAc,UAAU;YAUrB,kBAAkB,mBAAmB;YAQrC,eAAe,OAAO,aAAa,SAAS;;;;;YAgBtC,sBACd,QAAQ,eAAe,aACvB,aACA,4BACA,iCACA,wBACC;;UAwCK;EACR;EACA;EACA;EACA;EACA;;;;;;;;;;;;;;;cClcW,mCAAgB,yBAAA"}

package/dist/server/etag/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $cache } from \"alepha/cache\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider, type DurationLike } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRequest, ServerRoute } from \"alepha/server\";\nimport type { EtagMiddlewareOptionsResolved } from \"../primitives/$etag.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerEtagProvider {\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly time = $inject(DateTimeProvider);\n  protected readonly cache = $cache<RouteCacheEntry>({\n    provider: \"memory\",\n    name: \"http:server\",\n  });\n\n  public generateETag(content: string | Buffer): string {\n    const data = typeof content === \"string\" ? content : content.toString();\n    return `\"${this.crypto.hash(data, \"md5\")}\"`;\n  }\n\n  public async invalidate(route: ServerRoute) {\n    await this.cache.invalidate(this.createCacheKey(route));\n  }\n\n  /**\n   * Check cache for a stored response. Returns the cached body if found, undefined otherwise.\n   * Called by the $etag() middleware before the handler runs.\n   */\n  public async checkCache(\n    request: ServerRequest,\n    options: EtagMiddlewareOptionsResolved,\n  ): Promise<any> {\n    if (!this.shouldStore(options)) {\n      return undefined;\n    }\n\n    // Build key from route metadata (set by ServerRouterProvider before handler)\n    // or from action request context (for .run() direct calls)\n    const actionRequest = this.alepha.store.get(\"alepha.action.request\");\n\n    const keySource = {\n      method:\n        request.metadata?.routeMethod ??\n        actionRequest?.method ??\n        request.method ??\n        \"GET\",\n      path:\n        request.metadata?.routePath ??\n        String(actionRequest?.url ?? request.url ?? \"\"),\n    } as ServerRoute;\n\n    const key = this.createCacheKey(keySource, actionRequest ?? request);\n    const cached = await this.cache.get(key);\n\n    if (!cached) {\n      this.log.trace(\"Cache miss\", { key });\n      return undefined;\n    }\n\n    this.log.trace(\"Cache hit\", { key });\n\n    // Mark as cache hit in request metadata\n    request.metadata ??= {} as any;\n    request.metadata.etagHit = true;\n\n    // For HTTP routes, set reply headers\n    if (request.reply) {\n      // Check if client has matching ETag - return 304\n      if (\n        request.headers?.[\"if-none-match\"] === cached.hash ||\n        request.headers?.[\"if-modified-since\"] === cached.lastModified\n      ) {\n        request.reply.status = 304;\n        request.reply.setHeader(\"etag\", cached.hash);\n        request.reply.setHeader(\"last-modified\", cached.lastModified);\n        this.log.trace(\"ETag match, returning 304\", {\n          key,\n          etag: cached.hash,\n        });\n        return request.reply.body;\n      }\n\n      request.reply.body = cached.body;\n      request.reply.status = cached.status ?? 200;\n\n      if (cached.contentType) {\n        request.reply.setHeader(\"Content-Type\", cached.contentType);\n      }\n\n      request.reply.setHeader(\"etag\", cached.hash);\n      request.reply.setHeader(\"last-modified\", cached.lastModified);\n    }\n\n    // For action direct invocations, return body\n    const body =\n      cached.contentType === \"application/json\"\n        ? JSON.parse(cached.body)\n        : cached.body;\n\n    return body;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Hooks (post-handler, read from request.metadata)\n  // -------------------------------------------------------------------------------------------------------------------\n\n  /**\n   * After an action response, store it in cache if store is enabled.\n   */\n  protected readonly onActionResponse = $hook({\n    on: \"action:onResponse\",\n    handler: async ({ action, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options || !this.shouldStore(options)) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (request.reply.status && request.reply.status >= 400) {\n        return;\n      }\n\n      if (!response) {\n        return;\n      }\n\n      const contentType =\n        typeof response === \"string\" ? \"text/plain\" : \"application/json\";\n      const body =\n        contentType === \"text/plain\" ? response : JSON.stringify(response);\n\n      const generatedEtag = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      const key = this.createCacheKey(action.route, request);\n\n      this.log.trace(\"Storing action response\", {\n        key,\n        action: action.name,\n      });\n\n      await this.cache.set(key, {\n        body: body,\n        lastModified,\n        contentType: contentType,\n        hash: generatedEtag,\n      });\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        request.reply.setHeader(\"cache-control\", cacheControl);\n      }\n    },\n  });\n\n  /**\n   * Before sending the response, check ETag for etag-only routes.\n   * This handles the case where etag is enabled but store is not.\n   */\n  protected readonly onSend = $hook({\n    on: \"server:onSend\",\n    handler: ({ request }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      if (request.reply.headers.etag) {\n        // ETag already set, skip\n        return;\n      }\n\n      if (\n        !shouldStore &&\n        shouldUseEtag &&\n        request.reply.body != null &&\n        (typeof request.reply.body === \"string\" ||\n          Buffer.isBuffer(request.reply.body))\n      ) {\n        const generatedEtag = this.generateETag(request.reply.body);\n\n        if (request.headers[\"if-none-match\"] === generatedEtag) {\n          request.reply.status = 304;\n          request.reply.body = undefined;\n          request.reply.setHeader(\"etag\", generatedEtag);\n          this.log.trace(\"ETag match on send, returning 304\", {\n            route: request.url,\n            etag: generatedEtag,\n          });\n          return;\n        }\n      }\n    },\n  });\n\n  /**\n   * After the response is generated, store it and set ETag headers.\n   */\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: async ({ route, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        response.headers[\"cache-control\"] = cacheControl;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      // Skip if neither cache nor etag is enabled\n      if (!shouldStore && !shouldUseEtag) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (response.status && response.status >= 400) {\n        return;\n      }\n\n      // Initialize headers if not present\n      response.headers ??= {};\n\n      const key = this.createCacheKey(route, request);\n\n      // Handle ReadableStream responses (e.g., SSR streaming)\n      if (response.body instanceof ReadableStream && shouldStore) {\n        // Tee the stream: one for client, one for cache collection\n        const [clientStream, cacheStream] = (\n          response.body as ReadableStream<Uint8Array>\n        ).tee();\n\n        // Replace response body with client stream (continues streaming to client)\n        response.body = clientStream as typeof response.body;\n\n        // Collect cache stream in background (non-blocking)\n        this.collectStreamForCache(\n          cacheStream,\n          key,\n          response.status,\n          response.headers?.[\"content-type\"],\n          shouldUseEtag,\n        )\n          .then((hash) => {\n            if (shouldUseEtag && hash) {\n              this.log.trace(\"Stream cached with hash\", { key, hash });\n            }\n          })\n          .catch((err) => {\n            this.log.warn(\"Failed to cache stream\", { key, error: err });\n          });\n\n        return;\n      }\n\n      // Only process string responses (text, html, json, etc.)\n      if (typeof response.body !== \"string\") {\n        return;\n      }\n\n      const generatedEtag = this.generateETag(response.body);\n      const lastModified = this.time.toISOString();\n\n      // Store response if storing is enabled\n      if (shouldStore) {\n        this.log.trace(\"Storing response\", {\n          key,\n          route: route.path,\n          etag: shouldUseEtag,\n        });\n\n        await this.cache.set(key, {\n          body: response.body,\n          status: response.status,\n          contentType: response.headers?.[\"content-type\"],\n          lastModified,\n          hash: generatedEtag,\n        });\n      }\n\n      // Set ETag headers if etag is enabled\n      if (shouldUseEtag) {\n        response.headers.etag = generatedEtag;\n        response.headers[\"last-modified\"] = lastModified;\n      }\n    },\n  });\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Public helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  public buildCacheControlHeader(\n    options?: EtagMiddlewareOptionsResolved,\n  ): string | undefined {\n    if (!options) {\n      return undefined;\n    }\n\n    const control = options.control;\n    if (!control) {\n      return undefined;\n    }\n\n    // If control is a string, return it directly\n    if (typeof control === \"string\") {\n      return control;\n    }\n\n    // If control is true, return default Cache-Control\n    if (control === true) {\n      return \"public, max-age=300\";\n    }\n\n    // Build Cache-Control from object directives\n    const directives: string[] = [];\n\n    if (control.public) {\n      directives.push(\"public\");\n    }\n    if (control.private) {\n      directives.push(\"private\");\n    }\n    if (control.noCache) {\n      directives.push(\"no-cache\");\n    }\n    if (control.noStore) {\n      directives.push(\"no-store\");\n    }\n    if (control.maxAge !== undefined) {\n      const maxAgeSeconds = this.durationToSeconds(control.maxAge);\n      directives.push(`max-age=${maxAgeSeconds}`);\n    }\n    if (control.sMaxAge !== undefined) {\n      const sMaxAgeSeconds = this.durationToSeconds(control.sMaxAge);\n      directives.push(`s-maxage=${sMaxAgeSeconds}`);\n    }\n    if (control.mustRevalidate) {\n      directives.push(\"must-revalidate\");\n    }\n    if (control.proxyRevalidate) {\n      directives.push(\"proxy-revalidate\");\n    }\n    if (control.immutable) {\n      directives.push(\"immutable\");\n    }\n    if (control.staleWhileRevalidate !== undefined) {\n      const seconds = this.durationToSeconds(control.staleWhileRevalidate);\n      directives.push(`stale-while-revalidate=${seconds}`);\n    }\n\n    return directives.length > 0 ? directives.join(\", \") : undefined;\n  }\n\n  public shouldStore(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.store) return true;\n    return false;\n  }\n\n  public shouldUseEtag(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.etag) return true;\n    return false;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Protected helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  protected durationToSeconds(duration: number | DurationLike): number {\n    if (typeof duration === \"number\") {\n      return duration;\n    }\n\n    return this.time.duration(duration).asSeconds();\n  }\n\n  protected createCacheKey(route: ServerRoute, config?: ServerRequest): string {\n    const params: string[] = [];\n    for (const [key, value] of Object.entries(config?.params ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n    for (const [key, value] of Object.entries(config?.query ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n\n    return `${route.method}:${(route.path ?? \"\").replaceAll(\":\", \"\")}:${params.join(\",\").replaceAll(\":\", \"\")}`;\n  }\n\n  /**\n   * Collect a ReadableStream into a string and store it in the cache.\n   * This runs in the background while the original stream is sent to the client.\n   */\n  protected async collectStreamForCache(\n    stream: ReadableStream<Uint8Array>,\n    key: string,\n    status: number | undefined,\n    contentType: string | undefined,\n    generateEtag: boolean,\n  ): Promise<string | undefined> {\n    const chunks: Uint8Array[] = [];\n    const reader = stream.getReader();\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        chunks.push(value);\n      }\n\n      // Combine chunks into a single string\n      const decoder = new TextDecoder();\n      const body =\n        chunks\n          .map((chunk) => decoder.decode(chunk, { stream: true }))\n          .join(\"\") + decoder.decode(); // Flush remaining\n\n      const hash = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      this.log.trace(\"Storing streamed response\", { key });\n\n      await this.cache.set(key, {\n        body,\n        status,\n        contentType,\n        lastModified,\n        hash,\n      });\n\n      return generateEtag ? hash : undefined;\n    } finally {\n      reader.releaseLock();\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ninterface RouteCacheEntry {\n  contentType?: string;\n  body: any;\n  status?: number;\n  lastModified: string;\n  hash: string;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport type { CachePrimitiveOptions } from \"alepha/cache\";\nimport type { DurationLike } from \"alepha/datetime\";\nimport { ServerEtagProvider } from \"../providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Middleware that enables ETag-based response caching per-route.\n *\n * Sets per-request etag options in the ALS context.\n * The global `ServerEtagProvider` hooks read these\n * to generate ETags, handle 304s, and optionally store responses.\n *\n * When `store` is enabled, the middleware also checks the cache before\n * calling the handler, short-circuiting on cache hits.\n *\n * **Route middleware** — works inside `$action`, `$page`, or any pipeline.\n *\n * ```typescript\n * class UserController {\n *   // ETag only (no response caching)\n *   getUser = $action({\n *     use: [$etag()],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // ETag + response caching (store)\n *   getProfile = $action({\n *     use: [$etag(true)],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // Fine-grained control\n *   getStats = $action({\n *     use: [$etag({ store: { ttl: [5, \"minutes\"] }, control: { public: true, maxAge: 300 } })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $etag = (options?: EtagMiddlewareOptions): Middleware => {\n  const resolved = resolveEtagOptions(options);\n\n  return createMiddleware({\n    name: \"$etag\",\n    options: resolved as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const etagProvider = alepha.inject(ServerEtagProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\") ?? args[0];\n\n        // Set etag options on request metadata for hooks to read\n        if (request?.metadata) {\n          request.metadata.etagOptions = resolved;\n        }\n\n        // If store is enabled, check cache before handler\n        if (etagProvider.shouldStore(resolved)) {\n          if (request) {\n            const cached = await etagProvider.checkCache(request, resolved);\n\n            // checkCache sets request.metadata.etagHit on cache hit\n            // cached may be undefined for 304 responses (no body)\n            if (cached !== undefined || request.metadata?.etagHit) {\n              return cached;\n            }\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport function resolveEtagOptions(\n  options?: EtagMiddlewareOptions,\n): EtagMiddlewareOptionsResolved {\n  if (options === true) {\n    return { store: true, etag: true };\n  }\n\n  if (!options) {\n    return { etag: true };\n  }\n\n  return { etag: true, ...options };\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type EtagMiddlewareOptions =\n  /**\n   * If true, enables both store and etag.\n   */\n  | true\n  /**\n   * Object configuration for fine-grained control.\n   */\n  | {\n      /**\n       * If true, enables storing cached responses. (in-memory, Redis, @see alepha/cache for other providers)\n       * If a DurationLike is provided, it will be used as the TTL for the cache.\n       * If CachePrimitiveOptions is provided, it will be used to configure the cache storage.\n       *\n       * @default false\n       */\n      store?: true | DurationLike | CachePrimitiveOptions;\n\n      /**\n       * If true, enables ETag support for the cached responses.\n       *\n       * @default true (always true when using $etag)\n       */\n      etag?: true;\n\n      /**\n       * - If true, sets Cache-Control to \"public, max-age=300\" (5 minutes).\n       * - If string, sets Cache-Control to the provided value directly.\n       * - If object, configures Cache-Control directives.\n       */\n      control?:\n        | true\n        | string\n        | {\n            /**\n             * Indicates that the response may be cached by any cache.\n             */\n            public?: boolean;\n            /**\n             * Indicates that the response is intended for a single user and must not be stored by a shared cache.\n             */\n            private?: boolean;\n            /**\n             * Forces caches to submit the request to the origin server for validation before releasing a cached copy.\n             */\n            noCache?: boolean;\n            /**\n             * Instructs caches not to store the response.\n             */\n            noStore?: boolean;\n            /**\n             * Maximum amount of time a resource is considered fresh.\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            maxAge?: number | DurationLike;\n            /**\n             * Overrides max-age for shared caches (e.g., CDNs).\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            sMaxAge?: number | DurationLike;\n            /**\n             * Indicates that once a resource becomes stale, caches must not use it without successful validation.\n             */\n            mustRevalidate?: boolean;\n            /**\n             * Similar to must-revalidate, but only for shared caches.\n             */\n            proxyRevalidate?: boolean;\n            /**\n             * Indicates that the response can be stored but must be revalidated before each use.\n             */\n            immutable?: boolean;\n            /**\n             * Time window (in seconds or DurationLike) during which a stale response may be served\n             * while a fresh one is fetched in the background.\n             * Supported by Cloudflare, modern browsers, and most CDNs.\n             */\n            staleWhileRevalidate?: number | DurationLike;\n          };\n    };\n\nexport interface EtagMiddlewareOptionsResolved {\n  store?: true | DurationLike | CachePrimitiveOptions;\n  etag?: true;\n  control?:\n    | true\n    | string\n    | {\n        public?: boolean;\n        private?: boolean;\n        noCache?: boolean;\n        noStore?: boolean;\n        maxAge?: number | DurationLike;\n        sMaxAge?: number | DurationLike;\n        mustRevalidate?: boolean;\n        proxyRevalidate?: boolean;\n        immutable?: boolean;\n        staleWhileRevalidate?: number | DurationLike;\n      };\n}\n","import { $module } from \"alepha\";\nimport { AlephaCache } from \"alepha/cache\";\nimport { AlephaCrypto } from \"alepha/crypto\";\nimport { ServerEtagProvider } from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$etag.ts\";\nexport * from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * ETag-based response caching.\n *\n * **Features:**\n * - ETag generation and validation\n * - Conditional request handling (304 Not Modified)\n * - Optional response caching (store)\n * - Cache-Control header support\n *\n * @module alepha.server.etag\n */\nexport const AlephaServerEtag = $module({\n  name: \"alepha.server.etag\",\n  services: [AlephaCache, AlephaCrypto, ServerEtagProvider],\n});\n"],"mappings":";;;;;;AAUA,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,SAA4B,QAAQ,MAAM;CAC1C,SAA4B,QAAQ,cAAc;CAClD,OAA0B,QAAQ,gBAAgB;CAClD,QAA2B,OAAwB;EACjD,UAAU;EACV,MAAM;CACR,CAAC;CAED,aAAoB,SAAkC;EACpD,MAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS;EACtE,OAAO,IAAI,KAAK,OAAO,KAAK,MAAM,KAAK,EAAE;CAC3C;CAEA,MAAa,WAAW,OAAoB;EAC1C,MAAM,KAAK,MAAM,WAAW,KAAK,eAAe,KAAK,CAAC;CACxD;;;;;CAMA,MAAa,WACX,SACA,SACc;EACd,IAAI,CAAC,KAAK,YAAY,OAAO,GAC3B;EAKF,MAAM,gBAAgB,KAAK,OAAO,MAAM,IAAI,uBAAuB;EAEnE,MAAM,YAAY;GAChB,QACE,QAAQ,UAAU,eAClB,eAAe,UACf,QAAQ,UACR;GACF,MACE,QAAQ,UAAU,aAClB,OAAO,eAAe,OAAO,QAAQ,OAAO,EAAE;EAClD;EAEA,MAAM,MAAM,KAAK,eAAe,WAAW,iBAAiB,OAAO;EACnE,MAAM,SAAS,MAAM,KAAK,MAAM,IAAI,GAAG;EAEvC,IAAI,CAAC,QAAQ;GACX,KAAK,IAAI,MAAM,cAAc,EAAE,IAAI,CAAC;GACpC;EACF;EAEA,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,CAAC;EAGnC,QAAQ,aAAa,CAAC;EACtB,QAAQ,SAAS,UAAU;EAG3B,IAAI,QAAQ,OAAO;GAEjB,IACE,QAAQ,UAAU,qBAAqB,OAAO,QAC9C,QAAQ,UAAU,yBAAyB,OAAO,cAClD;IACA,QAAQ,MAAM,SAAS;IACvB,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;IAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;IAC5D,KAAK,IAAI,MAAM,6BAA6B;KAC1C;KACA,MAAM,OAAO;IACf,CAAC;IACD,OAAO,QAAQ,MAAM;GACvB;GAEA,QAAQ,MAAM,OAAO,OAAO;GAC5B,QAAQ,MAAM,SAAS,OAAO,UAAU;GAExC,IAAI,OAAO,aACT,QAAQ,MAAM,UAAU,gBAAgB,OAAO,WAAW;GAG5D,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;GAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;EAC9D;EAQA,OAJE,OAAO,gBAAgB,qBACnB,KAAK,MAAM,OAAO,IAAI,IACtB,OAAO;CAGf;;;;CASA,mBAAsC,MAAM;EAC1C,IAAI;EACJ,SAAS,OAAO,EAAE,QAAQ,SAAS,eAAe;GAChD,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,WAAW,CAAC,KAAK,YAAY,OAAO,GACvC;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,QAAQ,MAAM,UAAU,QAAQ,MAAM,UAAU,KAClD;GAGF,IAAI,CAAC,UACH;GAGF,MAAM,cACJ,OAAO,aAAa,WAAW,eAAe;GAChD,MAAM,OACJ,gBAAgB,eAAe,WAAW,KAAK,UAAU,QAAQ;GAEnE,MAAM,gBAAgB,KAAK,aAAa,IAAI;GAC5C,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO,OAAO;GAErD,KAAK,IAAI,MAAM,2BAA2B;IACxC;IACA,QAAQ,OAAO;GACjB,CAAC;GAED,MAAM,KAAK,MAAM,IAAI,KAAK;IAClB;IACN;IACa;IACb,MAAM;GACR,CAAC;GAGD,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,QAAQ,MAAM,UAAU,iBAAiB,YAAY;EAEzD;CACF,CAAC;;;;;CAMD,SAA4B,MAAM;EAChC,IAAI;EACJ,UAAU,EAAE,cAAc;GACxB,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAGF,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAEhD,IAAI,QAAQ,MAAM,QAAQ,MAExB;GAGF,IACE,CAAC,eACD,iBACA,QAAQ,MAAM,QAAQ,SACrB,OAAO,QAAQ,MAAM,SAAS,YAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,IACpC;IACA,MAAM,gBAAgB,KAAK,aAAa,QAAQ,MAAM,IAAI;IAE1D,IAAI,QAAQ,QAAQ,qBAAqB,eAAe;KACtD,QAAQ,MAAM,SAAS;KACvB,QAAQ,MAAM,OAAO,KAAA;KACrB,QAAQ,MAAM,UAAU,QAAQ,aAAa;KAC7C,KAAK,IAAI,MAAM,qCAAqC;MAClD,OAAO,QAAQ;MACf,MAAM;KACR,CAAC;KACD;IACF;GACF;EACF;CACF,CAAC;;;;CAKD,aAAgC,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,SAAS,OAAO,EAAE,OAAO,SAAS,eAAe;GAC/C,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAIF,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,SAAS,QAAQ,mBAAmB;GAGtC,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAGhD,IAAI,CAAC,eAAe,CAAC,eACnB;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,SAAS,UAAU,SAAS,UAAU,KACxC;GAIF,SAAS,YAAY,CAAC;GAEtB,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO;GAG9C,IAAI,SAAS,gBAAgB,kBAAkB,aAAa;IAE1D,MAAM,CAAC,cAAc,eACnB,SAAS,KACT,IAAI;IAGN,SAAS,OAAO;IAGhB,KAAK,sBACH,aACA,KACA,SAAS,QACT,SAAS,UAAU,iBACnB,aACF,EACG,MAAM,SAAS;KACd,IAAI,iBAAiB,MACnB,KAAK,IAAI,MAAM,2BAA2B;MAAE;MAAK;KAAK,CAAC;IAE3D,CAAC,EACA,OAAO,QAAQ;KACd,KAAK,IAAI,KAAK,0BAA0B;MAAE;MAAK,OAAO;KAAI,CAAC;IAC7D,CAAC;IAEH;GACF;GAGA,IAAI,OAAO,SAAS,SAAS,UAC3B;GAGF,MAAM,gBAAgB,KAAK,aAAa,SAAS,IAAI;GACrD,MAAM,eAAe,KAAK,KAAK,YAAY;GAG3C,IAAI,aAAa;IACf,KAAK,IAAI,MAAM,oBAAoB;KACjC;KACA,OAAO,MAAM;KACb,MAAM;IACR,CAAC;IAED,MAAM,KAAK,MAAM,IAAI,KAAK;KACxB,MAAM,SAAS;KACf,QAAQ,SAAS;KACjB,aAAa,SAAS,UAAU;KAChC;KACA,MAAM;IACR,CAAC;GACH;GAGA,IAAI,eAAe;IACjB,SAAS,QAAQ,OAAO;IACxB,SAAS,QAAQ,mBAAmB;GACtC;EACF;CACF,CAAC;CAMD,wBACE,SACoB;EACpB,IAAI,CAAC,SACH;EAGF,MAAM,UAAU,QAAQ;EACxB,IAAI,CAAC,SACH;EAIF,IAAI,OAAO,YAAY,UACrB,OAAO;EAIT,IAAI,YAAY,MACd,OAAO;EAIT,MAAM,aAAuB,CAAC;EAE9B,IAAI,QAAQ,QACV,WAAW,KAAK,QAAQ;EAE1B,IAAI,QAAQ,SACV,WAAW,KAAK,SAAS;EAE3B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,WAAW,KAAA,GAAW;GAChC,MAAM,gBAAgB,KAAK,kBAAkB,QAAQ,MAAM;GAC3D,WAAW,KAAK,WAAW,eAAe;EAC5C;EACA,IAAI,QAAQ,YAAY,KAAA,GAAW;GACjC,MAAM,iBAAiB,KAAK,kBAAkB,QAAQ,OAAO;GAC7D,WAAW,KAAK,YAAY,gBAAgB;EAC9C;EACA,IAAI,QAAQ,gBACV,WAAW,KAAK,iBAAiB;EAEnC,IAAI,QAAQ,iBACV,WAAW,KAAK,kBAAkB;EAEpC,IAAI,QAAQ,WACV,WAAW,KAAK,WAAW;EAE7B,IAAI,QAAQ,yBAAyB,KAAA,GAAW;GAC9C,MAAM,UAAU,KAAK,kBAAkB,QAAQ,oBAAoB;GACnE,WAAW,KAAK,0BAA0B,SAAS;EACrD;EAEA,OAAO,WAAW,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,KAAA;CACzD;CAEA,YAAmB,SAAkD;EACnE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,OAAO,OAAO;EAC1B,OAAO;CACT;CAEA,cAAqB,SAAkD;EACrE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,MAAM,OAAO;EACzB,OAAO;CACT;CAMA,kBAA4B,UAAyC;EACnE,IAAI,OAAO,aAAa,UACtB,OAAO;EAGT,OAAO,KAAK,KAAK,SAAS,QAAQ,EAAE,UAAU;CAChD;CAEA,eAAyB,OAAoB,QAAgC;EAC3E,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,UAAU,CAAC,CAAC,GAC5D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAE/B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,SAAS,CAAC,CAAC,GAC3D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAG/B,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,WAAW,KAAK,EAAE,EAAE,GAAG,OAAO,KAAK,GAAG,EAAE,WAAW,KAAK,EAAE;CACzG;;;;;CAMA,MAAgB,sBACd,QACA,KACA,QACA,aACA,cAC6B;EAC7B,MAAM,SAAuB,CAAC;EAC9B,MAAM,SAAS,OAAO,UAAU;EAEhC,IAAI;GACF,OAAO,MAAM;IACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,OAAO,KAAK,KAAK;GACnB;GAGA,MAAM,UAAU,IAAI,YAAY;GAChC,MAAM,OACJ,OACG,KAAK,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,EACtD,KAAK,EAAE,IAAI,QAAQ,OAAO;GAE/B,MAAM,OAAO,KAAK,aAAa,IAAI;GACnC,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,KAAK,IAAI,MAAM,6BAA6B,EAAE,IAAI,CAAC;GAEnD,MAAM,KAAK,MAAM,IAAI,KAAK;IACxB;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,OAAO,eAAe,OAAO,KAAA;EAC/B,UAAU;GACR,OAAO,YAAY;EACrB;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACvaA,MAAa,SAAS,YAAgD;CACpE,MAAM,WAAW,mBAAmB,OAAO;CAE3C,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAS;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB,KAAK,KAAK;IAG1D,IAAI,SAAS,UACX,QAAQ,SAAS,cAAc;IAIjC,IAAI,aAAa,YAAY,QAAQ;SAC/B,SAAS;MACX,MAAM,SAAS,MAAM,aAAa,WAAW,SAAS,QAAQ;MAI9D,IAAI,WAAW,KAAA,KAAa,QAAQ,UAAU,SAC5C,OAAO;KAEX;;IAGF,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;AAIA,SAAgB,mBACd,SAC+B;CAC/B,IAAI,YAAY,MACd,OAAO;EAAE,OAAO;EAAM,MAAM;CAAK;CAGnC,IAAI,CAAC,SACH,OAAO,EAAE,MAAM,KAAK;CAGtB,OAAO;EAAE,MAAM;EAAM,GAAG;CAAQ;AAClC;;;;;;;;;;;;;;ACpEA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU;EAAC;EAAa;EAAc;CAAkB;AAC1D,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/etag/providers/ServerEtagProvider.ts","../../../src/server/etag/primitives/$etag.ts","../../../src/server/etag/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $cache } from \"alepha/cache\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider, type DurationLike } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRequest, ServerRoute } from \"alepha/server\";\nimport type { EtagMiddlewareOptionsResolved } from \"../primitives/$etag.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerEtagProvider {\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly time = $inject(DateTimeProvider);\n  protected readonly cache = $cache<RouteCacheEntry>({\n    provider: \"memory\",\n    name: \"http:server\",\n  });\n\n  public generateETag(content: string | Buffer): string {\n    const data = typeof content === \"string\" ? content : content.toString();\n    return `\"${this.crypto.hash(data, \"md5\")}\"`;\n  }\n\n  public async invalidate(route: ServerRoute) {\n    await this.cache.invalidate(this.createCacheKey(route));\n  }\n\n  /**\n   * Check cache for a stored response. Returns the cached body if found, undefined otherwise.\n   * Called by the $etag() middleware before the handler runs.\n   */\n  public async checkCache(\n    request: ServerRequest,\n    options: EtagMiddlewareOptionsResolved,\n  ): Promise<any> {\n    if (!this.shouldStore(options)) {\n      return undefined;\n    }\n\n    // Build key from route metadata (set by ServerRouterProvider before handler)\n    // or from action request context (for .run() direct calls)\n    const actionRequest = this.alepha.store.get(\"alepha.action.request\");\n\n    const keySource = {\n      method:\n        request.metadata?.routeMethod ??\n        actionRequest?.method ??\n        request.method ??\n        \"GET\",\n      path:\n        request.metadata?.routePath ??\n        String(actionRequest?.url ?? request.url ?? \"\"),\n    } as ServerRoute;\n\n    const key = this.createCacheKey(keySource, actionRequest ?? request);\n    const cached = await this.cache.get(key);\n\n    if (!cached) {\n      this.log.trace(\"Cache miss\", { key });\n      return undefined;\n    }\n\n    this.log.trace(\"Cache hit\", { key });\n\n    // Mark as cache hit in request metadata\n    request.metadata ??= {} as any;\n    request.metadata.etagHit = true;\n\n    // For HTTP routes, set reply headers\n    if (request.reply) {\n      // Check if client has matching ETag - return 304\n      if (\n        request.headers?.[\"if-none-match\"] === cached.hash ||\n        request.headers?.[\"if-modified-since\"] === cached.lastModified\n      ) {\n        request.reply.status = 304;\n        request.reply.setHeader(\"etag\", cached.hash);\n        request.reply.setHeader(\"last-modified\", cached.lastModified);\n        this.log.trace(\"ETag match, returning 304\", {\n          key,\n          etag: cached.hash,\n        });\n        return request.reply.body;\n      }\n\n      request.reply.body = cached.body;\n      request.reply.status = cached.status ?? 200;\n\n      if (cached.contentType) {\n        request.reply.setHeader(\"Content-Type\", cached.contentType);\n      }\n\n      request.reply.setHeader(\"etag\", cached.hash);\n      request.reply.setHeader(\"last-modified\", cached.lastModified);\n    }\n\n    // For action direct invocations, return body\n    const body =\n      cached.contentType === \"application/json\"\n        ? JSON.parse(cached.body)\n        : cached.body;\n\n    return body;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Hooks (post-handler, read from request.metadata)\n  // -------------------------------------------------------------------------------------------------------------------\n\n  /**\n   * After an action response, store it in cache if store is enabled.\n   */\n  protected readonly onActionResponse = $hook({\n    on: \"action:onResponse\",\n    handler: async ({ action, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options || !this.shouldStore(options)) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (request.reply.status && request.reply.status >= 400) {\n        return;\n      }\n\n      if (!response) {\n        return;\n      }\n\n      const contentType =\n        typeof response === \"string\" ? \"text/plain\" : \"application/json\";\n      const body =\n        contentType === \"text/plain\" ? response : JSON.stringify(response);\n\n      const generatedEtag = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      const key = this.createCacheKey(action.route, request);\n\n      this.log.trace(\"Storing action response\", {\n        key,\n        action: action.name,\n      });\n\n      await this.cache.set(key, {\n        body: body,\n        lastModified,\n        contentType: contentType,\n        hash: generatedEtag,\n      });\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        request.reply.setHeader(\"cache-control\", cacheControl);\n      }\n    },\n  });\n\n  /**\n   * Before sending the response, check ETag for etag-only routes.\n   * This handles the case where etag is enabled but store is not.\n   */\n  protected readonly onSend = $hook({\n    on: \"server:onSend\",\n    handler: ({ request }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      if (request.reply.headers.etag) {\n        // ETag already set, skip\n        return;\n      }\n\n      if (\n        !shouldStore &&\n        shouldUseEtag &&\n        request.reply.body != null &&\n        (typeof request.reply.body === \"string\" ||\n          Buffer.isBuffer(request.reply.body))\n      ) {\n        const generatedEtag = this.generateETag(request.reply.body);\n\n        if (request.headers[\"if-none-match\"] === generatedEtag) {\n          request.reply.status = 304;\n          request.reply.body = undefined;\n          request.reply.setHeader(\"etag\", generatedEtag);\n          this.log.trace(\"ETag match on send, returning 304\", {\n            route: request.url,\n            etag: generatedEtag,\n          });\n          return;\n        }\n      }\n    },\n  });\n\n  /**\n   * After the response is generated, store it and set ETag headers.\n   */\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: async ({ route, request, response }) => {\n      const options = request.metadata\n        ?.etagOptions as EtagMiddlewareOptionsResolved;\n      if (!options) {\n        return;\n      }\n\n      // Set Cache-Control header if configured\n      const cacheControl = this.buildCacheControlHeader(options);\n      if (cacheControl) {\n        response.headers[\"cache-control\"] = cacheControl;\n      }\n\n      const shouldStore = this.shouldStore(options);\n      const shouldUseEtag = this.shouldUseEtag(options);\n\n      // Skip if neither cache nor etag is enabled\n      if (!shouldStore && !shouldUseEtag) {\n        return;\n      }\n\n      // Skip if this was a cache hit (don't re-store)\n      if (request.metadata?.etagHit) {\n        return;\n      }\n\n      // Don't cache error responses (status >= 400)\n      if (response.status && response.status >= 400) {\n        return;\n      }\n\n      // Initialize headers if not present\n      response.headers ??= {};\n\n      const key = this.createCacheKey(route, request);\n\n      // Handle ReadableStream responses (e.g., SSR streaming)\n      if (response.body instanceof ReadableStream && shouldStore) {\n        // Tee the stream: one for client, one for cache collection\n        const [clientStream, cacheStream] = (\n          response.body as ReadableStream<Uint8Array>\n        ).tee();\n\n        // Replace response body with client stream (continues streaming to client)\n        response.body = clientStream as typeof response.body;\n\n        // Collect cache stream in background (non-blocking)\n        this.collectStreamForCache(\n          cacheStream,\n          key,\n          response.status,\n          response.headers?.[\"content-type\"],\n          shouldUseEtag,\n        )\n          .then((hash) => {\n            if (shouldUseEtag && hash) {\n              this.log.trace(\"Stream cached with hash\", { key, hash });\n            }\n          })\n          .catch((err) => {\n            this.log.warn(\"Failed to cache stream\", { key, error: err });\n          });\n\n        return;\n      }\n\n      // Only process string responses (text, html, json, etc.)\n      if (typeof response.body !== \"string\") {\n        return;\n      }\n\n      const generatedEtag = this.generateETag(response.body);\n      const lastModified = this.time.toISOString();\n\n      // Store response if storing is enabled\n      if (shouldStore) {\n        this.log.trace(\"Storing response\", {\n          key,\n          route: route.path,\n          etag: shouldUseEtag,\n        });\n\n        await this.cache.set(key, {\n          body: response.body,\n          status: response.status,\n          contentType: response.headers?.[\"content-type\"],\n          lastModified,\n          hash: generatedEtag,\n        });\n      }\n\n      // Set ETag headers if etag is enabled\n      if (shouldUseEtag) {\n        response.headers.etag = generatedEtag;\n        response.headers[\"last-modified\"] = lastModified;\n      }\n    },\n  });\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Public helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  public buildCacheControlHeader(\n    options?: EtagMiddlewareOptionsResolved,\n  ): string | undefined {\n    if (!options) {\n      return undefined;\n    }\n\n    const control = options.control;\n    if (!control) {\n      return undefined;\n    }\n\n    // If control is a string, return it directly\n    if (typeof control === \"string\") {\n      return control;\n    }\n\n    // If control is true, return default Cache-Control\n    if (control === true) {\n      return \"public, max-age=300\";\n    }\n\n    // Build Cache-Control from object directives\n    const directives: string[] = [];\n\n    if (control.public) {\n      directives.push(\"public\");\n    }\n    if (control.private) {\n      directives.push(\"private\");\n    }\n    if (control.noCache) {\n      directives.push(\"no-cache\");\n    }\n    if (control.noStore) {\n      directives.push(\"no-store\");\n    }\n    if (control.maxAge !== undefined) {\n      const maxAgeSeconds = this.durationToSeconds(control.maxAge);\n      directives.push(`max-age=${maxAgeSeconds}`);\n    }\n    if (control.sMaxAge !== undefined) {\n      const sMaxAgeSeconds = this.durationToSeconds(control.sMaxAge);\n      directives.push(`s-maxage=${sMaxAgeSeconds}`);\n    }\n    if (control.mustRevalidate) {\n      directives.push(\"must-revalidate\");\n    }\n    if (control.proxyRevalidate) {\n      directives.push(\"proxy-revalidate\");\n    }\n    if (control.immutable) {\n      directives.push(\"immutable\");\n    }\n    if (control.staleWhileRevalidate !== undefined) {\n      const seconds = this.durationToSeconds(control.staleWhileRevalidate);\n      directives.push(`stale-while-revalidate=${seconds}`);\n    }\n\n    return directives.length > 0 ? directives.join(\", \") : undefined;\n  }\n\n  public shouldStore(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.store) return true;\n    return false;\n  }\n\n  public shouldUseEtag(options?: EtagMiddlewareOptionsResolved): boolean {\n    if (!options) return false;\n    if (options.etag) return true;\n    return false;\n  }\n\n  // -------------------------------------------------------------------------------------------------------------------\n  // Protected helpers\n  // -------------------------------------------------------------------------------------------------------------------\n\n  protected durationToSeconds(duration: number | DurationLike): number {\n    if (typeof duration === \"number\") {\n      return duration;\n    }\n\n    return this.time.duration(duration).asSeconds();\n  }\n\n  protected createCacheKey(route: ServerRoute, config?: ServerRequest): string {\n    const params: string[] = [];\n    for (const [key, value] of Object.entries(config?.params ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n    for (const [key, value] of Object.entries(config?.query ?? {})) {\n      params.push(`${key}=${value}`);\n    }\n\n    return `${route.method}:${(route.path ?? \"\").replaceAll(\":\", \"\")}:${params.join(\",\").replaceAll(\":\", \"\")}`;\n  }\n\n  /**\n   * Collect a ReadableStream into a string and store it in the cache.\n   * This runs in the background while the original stream is sent to the client.\n   */\n  protected async collectStreamForCache(\n    stream: ReadableStream<Uint8Array>,\n    key: string,\n    status: number | undefined,\n    contentType: string | undefined,\n    generateEtag: boolean,\n  ): Promise<string | undefined> {\n    const chunks: Uint8Array[] = [];\n    const reader = stream.getReader();\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        chunks.push(value);\n      }\n\n      // Combine chunks into a single string\n      const decoder = new TextDecoder();\n      const body =\n        chunks\n          .map((chunk) => decoder.decode(chunk, { stream: true }))\n          .join(\"\") + decoder.decode(); // Flush remaining\n\n      const hash = this.generateETag(body);\n      const lastModified = this.time.toISOString();\n\n      this.log.trace(\"Storing streamed response\", { key });\n\n      await this.cache.set(key, {\n        body,\n        status,\n        contentType,\n        lastModified,\n        hash,\n      });\n\n      return generateEtag ? hash : undefined;\n    } finally {\n      reader.releaseLock();\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ninterface RouteCacheEntry {\n  contentType?: string;\n  body: any;\n  status?: number;\n  lastModified: string;\n  hash: string;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport type { CachePrimitiveOptions } from \"alepha/cache\";\nimport type { DurationLike } from \"alepha/datetime\";\nimport { ServerEtagProvider } from \"../providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Middleware that enables ETag-based response caching per-route.\n *\n * Sets per-request etag options in the ALS context.\n * The global `ServerEtagProvider` hooks read these\n * to generate ETags, handle 304s, and optionally store responses.\n *\n * When `store` is enabled, the middleware also checks the cache before\n * calling the handler, short-circuiting on cache hits.\n *\n * **Route middleware** — works inside `$action`, `$page`, or any pipeline.\n *\n * ```typescript\n * class UserController {\n *   // ETag only (no response caching)\n *   getUser = $action({\n *     use: [$etag()],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // ETag + response caching (store)\n *   getProfile = $action({\n *     use: [$etag(true)],\n *     handler: async ({ params }) => { ... },\n *   });\n *\n *   // Fine-grained control\n *   getStats = $action({\n *     use: [$etag({ store: { ttl: [5, \"minutes\"] }, control: { public: true, maxAge: 300 } })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport const $etag = (options?: EtagMiddlewareOptions): Middleware => {\n  const resolved = resolveEtagOptions(options);\n\n  return createMiddleware({\n    name: \"$etag\",\n    options: resolved as unknown as Record<string, unknown>,\n    handler: ({ alepha, next }) => {\n      const etagProvider = alepha.inject(ServerEtagProvider);\n\n      return async (...args) => {\n        const request = alepha.get(\"alepha.http.request\") ?? args[0];\n\n        // Set etag options on request metadata for hooks to read\n        if (request?.metadata) {\n          request.metadata.etagOptions = resolved;\n        }\n\n        // If store is enabled, check cache before handler\n        if (etagProvider.shouldStore(resolved)) {\n          if (request) {\n            const cached = await etagProvider.checkCache(request, resolved);\n\n            // checkCache sets request.metadata.etagHit on cache hit\n            // cached may be undefined for 304 responses (no body)\n            if (cached !== undefined || request.metadata?.etagHit) {\n              return cached;\n            }\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport function resolveEtagOptions(\n  options?: EtagMiddlewareOptions,\n): EtagMiddlewareOptionsResolved {\n  if (options === true) {\n    return { store: true, etag: true };\n  }\n\n  if (!options) {\n    return { etag: true };\n  }\n\n  return { etag: true, ...options };\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type EtagMiddlewareOptions =\n  /**\n   * If true, enables both store and etag.\n   */\n  | true\n  /**\n   * Object configuration for fine-grained control.\n   */\n  | {\n      /**\n       * If true, enables storing cached responses. (in-memory, Redis, @see alepha/cache for other providers)\n       * If a DurationLike is provided, it will be used as the TTL for the cache.\n       * If CachePrimitiveOptions is provided, it will be used to configure the cache storage.\n       *\n       * @default false\n       */\n      store?: true | DurationLike | CachePrimitiveOptions;\n\n      /**\n       * If true, enables ETag support for the cached responses.\n       *\n       * @default true (always true when using $etag)\n       */\n      etag?: true;\n\n      /**\n       * - If true, sets Cache-Control to \"public, max-age=300\" (5 minutes).\n       * - If string, sets Cache-Control to the provided value directly.\n       * - If object, configures Cache-Control directives.\n       */\n      control?:\n        | true\n        | string\n        | {\n            /**\n             * Indicates that the response may be cached by any cache.\n             */\n            public?: boolean;\n            /**\n             * Indicates that the response is intended for a single user and must not be stored by a shared cache.\n             */\n            private?: boolean;\n            /**\n             * Forces caches to submit the request to the origin server for validation before releasing a cached copy.\n             */\n            noCache?: boolean;\n            /**\n             * Instructs caches not to store the response.\n             */\n            noStore?: boolean;\n            /**\n             * Maximum amount of time a resource is considered fresh.\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            maxAge?: number | DurationLike;\n            /**\n             * Overrides max-age for shared caches (e.g., CDNs).\n             * Can be specified as a number (seconds) or as a DurationLike object.\n             */\n            sMaxAge?: number | DurationLike;\n            /**\n             * Indicates that once a resource becomes stale, caches must not use it without successful validation.\n             */\n            mustRevalidate?: boolean;\n            /**\n             * Similar to must-revalidate, but only for shared caches.\n             */\n            proxyRevalidate?: boolean;\n            /**\n             * Indicates that the response can be stored but must be revalidated before each use.\n             */\n            immutable?: boolean;\n            /**\n             * Time window (in seconds or DurationLike) during which a stale response may be served\n             * while a fresh one is fetched in the background.\n             * Supported by Cloudflare, modern browsers, and most CDNs.\n             */\n            staleWhileRevalidate?: number | DurationLike;\n          };\n    };\n\nexport interface EtagMiddlewareOptionsResolved {\n  store?: true | DurationLike | CachePrimitiveOptions;\n  etag?: true;\n  control?:\n    | true\n    | string\n    | {\n        public?: boolean;\n        private?: boolean;\n        noCache?: boolean;\n        noStore?: boolean;\n        maxAge?: number | DurationLike;\n        sMaxAge?: number | DurationLike;\n        mustRevalidate?: boolean;\n        proxyRevalidate?: boolean;\n        immutable?: boolean;\n        staleWhileRevalidate?: number | DurationLike;\n      };\n}\n","import { $module } from \"alepha\";\nimport { AlephaCache } from \"alepha/cache\";\nimport { AlephaCrypto } from \"alepha/crypto\";\nimport { ServerEtagProvider } from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$etag.ts\";\nexport * from \"./providers/ServerEtagProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * ETag-based response caching.\n *\n * **Features:**\n * - ETag generation and validation\n * - Conditional request handling (304 Not Modified)\n * - Optional response caching (store)\n * - Cache-Control header support\n *\n * @module alepha.server.etag\n */\nexport const AlephaServerEtag = $module({\n  name: \"alepha.server.etag\",\n  services: [AlephaCache, AlephaCrypto, ServerEtagProvider],\n});\n"],"mappings":";;;;;;AAUA,IAAa,qBAAb,MAAgC;CAC9B,MAAyB,QAAQ;CACjC,SAA4B,QAAQ,MAAM;CAC1C,SAA4B,QAAQ,cAAc;CAClD,OAA0B,QAAQ,gBAAgB;CAClD,QAA2B,OAAwB;EACjD,UAAU;EACV,MAAM;CACR,CAAC;CAED,aAAoB,SAAkC;EACpD,MAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS;EACtE,OAAO,IAAI,KAAK,OAAO,KAAK,MAAM,KAAK,EAAE;CAC3C;CAEA,MAAa,WAAW,OAAoB;EAC1C,MAAM,KAAK,MAAM,WAAW,KAAK,eAAe,KAAK,CAAC;CACxD;;;;;CAMA,MAAa,WACX,SACA,SACc;EACd,IAAI,CAAC,KAAK,YAAY,OAAO,GAC3B;EAKF,MAAM,gBAAgB,KAAK,OAAO,MAAM,IAAI,uBAAuB;EAEnE,MAAM,YAAY;GAChB,QACE,QAAQ,UAAU,eAClB,eAAe,UACf,QAAQ,UACR;GACF,MACE,QAAQ,UAAU,aAClB,OAAO,eAAe,OAAO,QAAQ,OAAO,EAAE;EAClD;EAEA,MAAM,MAAM,KAAK,eAAe,WAAW,iBAAiB,OAAO;EACnE,MAAM,SAAS,MAAM,KAAK,MAAM,IAAI,GAAG;EAEvC,IAAI,CAAC,QAAQ;GACX,KAAK,IAAI,MAAM,cAAc,EAAE,IAAI,CAAC;GACpC;EACF;EAEA,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,CAAC;EAGnC,QAAQ,aAAa,CAAC;EACtB,QAAQ,SAAS,UAAU;EAG3B,IAAI,QAAQ,OAAO;GAEjB,IACE,QAAQ,UAAU,qBAAqB,OAAO,QAC9C,QAAQ,UAAU,yBAAyB,OAAO,cAClD;IACA,QAAQ,MAAM,SAAS;IACvB,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;IAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;IAC5D,KAAK,IAAI,MAAM,6BAA6B;KAC1C;KACA,MAAM,OAAO;IACf,CAAC;IACD,OAAO,QAAQ,MAAM;GACvB;GAEA,QAAQ,MAAM,OAAO,OAAO;GAC5B,QAAQ,MAAM,SAAS,OAAO,UAAU;GAExC,IAAI,OAAO,aACT,QAAQ,MAAM,UAAU,gBAAgB,OAAO,WAAW;GAG5D,QAAQ,MAAM,UAAU,QAAQ,OAAO,IAAI;GAC3C,QAAQ,MAAM,UAAU,iBAAiB,OAAO,YAAY;EAC9D;EAQA,OAJE,OAAO,gBAAgB,qBACnB,KAAK,MAAM,OAAO,IAAI,IACtB,OAAO;CAGf;;;;CASA,mBAAsC,MAAM;EAC1C,IAAI;EACJ,SAAS,OAAO,EAAE,QAAQ,SAAS,eAAe;GAChD,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,WAAW,CAAC,KAAK,YAAY,OAAO,GACvC;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,QAAQ,MAAM,UAAU,QAAQ,MAAM,UAAU,KAClD;GAGF,IAAI,CAAC,UACH;GAGF,MAAM,cACJ,OAAO,aAAa,WAAW,eAAe;GAChD,MAAM,OACJ,gBAAgB,eAAe,WAAW,KAAK,UAAU,QAAQ;GAEnE,MAAM,gBAAgB,KAAK,aAAa,IAAI;GAC5C,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO,OAAO;GAErD,KAAK,IAAI,MAAM,2BAA2B;IACxC;IACA,QAAQ,OAAO;GACjB,CAAC;GAED,MAAM,KAAK,MAAM,IAAI,KAAK;IAClB;IACN;IACa;IACb,MAAM;GACR,CAAC;GAGD,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,QAAQ,MAAM,UAAU,iBAAiB,YAAY;EAEzD;CACF,CAAC;;;;;CAMD,SAA4B,MAAM;EAChC,IAAI;EACJ,UAAU,EAAE,cAAc;GACxB,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAGF,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAEhD,IAAI,QAAQ,MAAM,QAAQ,MAExB;GAGF,IACE,CAAC,eACD,iBACA,QAAQ,MAAM,QAAQ,SACrB,OAAO,QAAQ,MAAM,SAAS,YAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,IACpC;IACA,MAAM,gBAAgB,KAAK,aAAa,QAAQ,MAAM,IAAI;IAE1D,IAAI,QAAQ,QAAQ,qBAAqB,eAAe;KACtD,QAAQ,MAAM,SAAS;KACvB,QAAQ,MAAM,OAAO,KAAA;KACrB,QAAQ,MAAM,UAAU,QAAQ,aAAa;KAC7C,KAAK,IAAI,MAAM,qCAAqC;MAClD,OAAO,QAAQ;MACf,MAAM;KACR,CAAC;KACD;IACF;GACF;EACF;CACF,CAAC;;;;CAKD,aAAgC,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,SAAS,OAAO,EAAE,OAAO,SAAS,eAAe;GAC/C,MAAM,UAAU,QAAQ,UACpB;GACJ,IAAI,CAAC,SACH;GAIF,MAAM,eAAe,KAAK,wBAAwB,OAAO;GACzD,IAAI,cACF,SAAS,QAAQ,mBAAmB;GAGtC,MAAM,cAAc,KAAK,YAAY,OAAO;GAC5C,MAAM,gBAAgB,KAAK,cAAc,OAAO;GAGhD,IAAI,CAAC,eAAe,CAAC,eACnB;GAIF,IAAI,QAAQ,UAAU,SACpB;GAIF,IAAI,SAAS,UAAU,SAAS,UAAU,KACxC;GAIF,SAAS,YAAY,CAAC;GAEtB,MAAM,MAAM,KAAK,eAAe,OAAO,OAAO;GAG9C,IAAI,SAAS,gBAAgB,kBAAkB,aAAa;IAE1D,MAAM,CAAC,cAAc,eACnB,SAAS,KACT,IAAI;IAGN,SAAS,OAAO;IAGhB,KAAK,sBACH,aACA,KACA,SAAS,QACT,SAAS,UAAU,iBACnB,aACF,CAAC,CACE,MAAM,SAAS;KACd,IAAI,iBAAiB,MACnB,KAAK,IAAI,MAAM,2BAA2B;MAAE;MAAK;KAAK,CAAC;IAE3D,CAAC,CAAC,CACD,OAAO,QAAQ;KACd,KAAK,IAAI,KAAK,0BAA0B;MAAE;MAAK,OAAO;KAAI,CAAC;IAC7D,CAAC;IAEH;GACF;GAGA,IAAI,OAAO,SAAS,SAAS,UAC3B;GAGF,MAAM,gBAAgB,KAAK,aAAa,SAAS,IAAI;GACrD,MAAM,eAAe,KAAK,KAAK,YAAY;GAG3C,IAAI,aAAa;IACf,KAAK,IAAI,MAAM,oBAAoB;KACjC;KACA,OAAO,MAAM;KACb,MAAM;IACR,CAAC;IAED,MAAM,KAAK,MAAM,IAAI,KAAK;KACxB,MAAM,SAAS;KACf,QAAQ,SAAS;KACjB,aAAa,SAAS,UAAU;KAChC;KACA,MAAM;IACR,CAAC;GACH;GAGA,IAAI,eAAe;IACjB,SAAS,QAAQ,OAAO;IACxB,SAAS,QAAQ,mBAAmB;GACtC;EACF;CACF,CAAC;CAMD,wBACE,SACoB;EACpB,IAAI,CAAC,SACH;EAGF,MAAM,UAAU,QAAQ;EACxB,IAAI,CAAC,SACH;EAIF,IAAI,OAAO,YAAY,UACrB,OAAO;EAIT,IAAI,YAAY,MACd,OAAO;EAIT,MAAM,aAAuB,CAAC;EAE9B,IAAI,QAAQ,QACV,WAAW,KAAK,QAAQ;EAE1B,IAAI,QAAQ,SACV,WAAW,KAAK,SAAS;EAE3B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,SACV,WAAW,KAAK,UAAU;EAE5B,IAAI,QAAQ,WAAW,KAAA,GAAW;GAChC,MAAM,gBAAgB,KAAK,kBAAkB,QAAQ,MAAM;GAC3D,WAAW,KAAK,WAAW,eAAe;EAC5C;EACA,IAAI,QAAQ,YAAY,KAAA,GAAW;GACjC,MAAM,iBAAiB,KAAK,kBAAkB,QAAQ,OAAO;GAC7D,WAAW,KAAK,YAAY,gBAAgB;EAC9C;EACA,IAAI,QAAQ,gBACV,WAAW,KAAK,iBAAiB;EAEnC,IAAI,QAAQ,iBACV,WAAW,KAAK,kBAAkB;EAEpC,IAAI,QAAQ,WACV,WAAW,KAAK,WAAW;EAE7B,IAAI,QAAQ,yBAAyB,KAAA,GAAW;GAC9C,MAAM,UAAU,KAAK,kBAAkB,QAAQ,oBAAoB;GACnE,WAAW,KAAK,0BAA0B,SAAS;EACrD;EAEA,OAAO,WAAW,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,KAAA;CACzD;CAEA,YAAmB,SAAkD;EACnE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,OAAO,OAAO;EAC1B,OAAO;CACT;CAEA,cAAqB,SAAkD;EACrE,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,MAAM,OAAO;EACzB,OAAO;CACT;CAMA,kBAA4B,UAAyC;EACnE,IAAI,OAAO,aAAa,UACtB,OAAO;EAGT,OAAO,KAAK,KAAK,SAAS,QAAQ,CAAC,CAAC,UAAU;CAChD;CAEA,eAAyB,OAAoB,QAAgC;EAC3E,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,UAAU,CAAC,CAAC,GAC5D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAE/B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,SAAS,CAAC,CAAC,GAC3D,OAAO,KAAK,GAAG,IAAI,GAAG,OAAO;EAG/B,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,QAAQ,GAAA,CAAI,WAAW,KAAK,EAAE,EAAE,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,WAAW,KAAK,EAAE;CACzG;;;;;CAMA,MAAgB,sBACd,QACA,KACA,QACA,aACA,cAC6B;EAC7B,MAAM,SAAuB,CAAC;EAC9B,MAAM,SAAS,OAAO,UAAU;EAEhC,IAAI;GACF,OAAO,MAAM;IACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,OAAO,KAAK,KAAK;GACnB;GAGA,MAAM,UAAU,IAAI,YAAY;GAChC,MAAM,OACJ,OACG,KAAK,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CACvD,KAAK,EAAE,IAAI,QAAQ,OAAO;GAE/B,MAAM,OAAO,KAAK,aAAa,IAAI;GACnC,MAAM,eAAe,KAAK,KAAK,YAAY;GAE3C,KAAK,IAAI,MAAM,6BAA6B,EAAE,IAAI,CAAC;GAEnD,MAAM,KAAK,MAAM,IAAI,KAAK;IACxB;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,OAAO,eAAe,OAAO,KAAA;EAC/B,UAAU;GACR,OAAO,YAAY;EACrB;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACvaA,MAAa,SAAS,YAAgD;CACpE,MAAM,WAAW,mBAAmB,OAAO;CAE3C,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAS;EACT,UAAU,EAAE,QAAQ,WAAW;GAC7B,MAAM,eAAe,OAAO,OAAO,kBAAkB;GAErD,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,UAAU,OAAO,IAAI,qBAAqB,KAAK,KAAK;IAG1D,IAAI,SAAS,UACX,QAAQ,SAAS,cAAc;IAIjC,IAAI,aAAa,YAAY,QAAQ;SAC/B,SAAS;MACX,MAAM,SAAS,MAAM,aAAa,WAAW,SAAS,QAAQ;MAI9D,IAAI,WAAW,KAAA,KAAa,QAAQ,UAAU,SAC5C,OAAO;KAEX;;IAGF,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;AAIA,SAAgB,mBACd,SAC+B;CAC/B,IAAI,YAAY,MACd,OAAO;EAAE,OAAO;EAAM,MAAM;CAAK;CAGnC,IAAI,CAAC,SACH,OAAO,EAAE,MAAM,KAAK;CAGtB,OAAO;EAAE,MAAM;EAAM,GAAG;CAAQ;AAClC;;;;;;;;;;;;;;ACpEA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU;EAAC;EAAa;EAAc;CAAkB;AAC1D,CAAC"}

package/dist/server/health/index.d.ts

@@ -1,6 +1,5 @@
 import { Alepha } from "alepha";
 import { DateTimeProvider } from "alepha/datetime";
-
 //#region ../../src/server/health/providers/ServerHealthProvider.d.ts
 /**
  * Register `/health` & `/healthz` endpoint.
@@ -11,20 +10,20 @@ declare class ServerHealthProvider {
   protected readonly time: DateTimeProvider;
   protected readonly alepha: Alepha;
   readonly health: import("alepha/server").RoutePrimitive<{
-    response: import("typebox").TObject<{
-      message: import("typebox").TString;
-      uptime: import("typebox").TNumber;
-      date: import("typebox").TString;
-      ready: import("typebox").TBoolean;
-    }>;
+    response: import("zod").ZodObject<{
+      message: import("zod").ZodString;
+      uptime: import("zod").ZodNumber;
+      date: import("zod").ZodString;
+      ready: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>;
   }>;
   readonly healthz: import("alepha/server").RoutePrimitive<{
-    response: import("typebox").TObject<{
-      message: import("typebox").TString;
-      uptime: import("typebox").TNumber;
-      date: import("typebox").TString;
-      ready: import("typebox").TBoolean;
-    }>;
+    response: import("zod").ZodObject<{
+      message: import("zod").ZodString;
+      uptime: import("zod").ZodNumber;
+      date: import("zod").ZodString;
+      ready: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>;
   }>;
   protected healthCheck(): {
     message: string;
@@ -35,12 +34,12 @@ declare class ServerHealthProvider {
 }
 //#endregion
 //#region ../../src/server/health/schemas/healthSchema.d.ts
-declare const healthSchema: import("typebox").TObject<{
-  message: import("typebox").TString;
-  uptime: import("typebox").TNumber;
-  date: import("typebox").TString;
-  ready: import("typebox").TBoolean;
-}>;
+declare const healthSchema: import("zod").ZodObject<{
+  message: import("zod").ZodString;
+  uptime: import("zod").ZodNumber;
+  date: import("zod").ZodString;
+  ready: import("zod").ZodBoolean;
+}, import("zod/v4/core").$strip>;
 //#endregion
 //#region ../../src/server/health/index.d.ts
 /**

package/dist/server/health/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;AAUA;;;cAAa,oBAAA;EAAA,mBACQ,IAAA,EAAM,gBAAA;EAAA,mBACN,MAAA,EAAM,MAAA;EAAA,SAET,MAAA,0BAAM,cAAA;;;;;;;;WASN,OAAA,0BAAO,cAAA;;;;;;;;YASb,WAAA;;;;;;;;;cC9BC,YAAA,oBAAY,OAAA;;;;;;;;;;ADQzB;;;;;;cESa,kBAAA,mBAAkB,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;;;cAUa;qBACQ,MAAM;qBACN,QAAM;WAET,gCAAM;;;;;;;;WASN,iCAAO;;;;;;;;YASb;IAEN;IACA;IACA;IACA;;;;;cCnCO,4BAAY;;;;;;;;;;;;;;;;cCiBZ,qCAAkB,yBAAA"}

package/dist/server/health/index.js

@@ -1,12 +1,12 @@
-import { $inject, $module, Alepha, t } from "alepha";
+import { $inject, $module, Alepha, z } from "alepha";
 import { $route, AlephaServer } from "alepha/server";
 import { DateTimeProvider } from "alepha/datetime";
 //#region ../../src/server/health/schemas/healthSchema.ts
-const healthSchema = t.object({
-	message: t.text(),
-	uptime: t.number(),
-	date: t.datetime(),
-	ready: t.boolean()
+const healthSchema = z.object({
+	message: z.text(),
+	uptime: z.number(),
+	date: z.datetime(),
+	ready: z.boolean()
 });
 //#endregion
 //#region ../../src/server/health/providers/ServerHealthProvider.ts

package/dist/server/health/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { t } from \"alepha\";\n\nexport const healthSchema = t.object({\n  message: t.text(),\n  uptime: t.number(),\n  date: t.datetime(),\n  ready: t.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Application health monitoring endpoints.\n *\n * **Features:**\n * - `GET /health` endpoint\n *\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,KAAK;CAChB,QAAQ,EAAE,OAAO;CACjB,MAAM,EAAE,SAAS;CACjB,OAAO,EAAE,QAAQ;AACnB,CAAC;;;;;;;;ACGD,IAAa,uBAAb,MAAkC;CAChC,OAA4C,QAAQ,gBAAgB;CACpE,SAA4B,QAAQ,MAAM;CAE1C,SAAyB,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,UAA0B,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,cAAwB;EACtB,OAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,OAAO,CAAC;GACnC,MAAM,KAAK,KAAK,aAAa;GAC7B,OAAO,KAAK,OAAO,QAAQ;EAC7B;CACF;AACF;;;;;;;;;;;ACrBA,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,oBAAoB;AAC/C,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { z } from \"alepha\";\n\nexport const healthSchema = z.object({\n  message: z.text(),\n  uptime: z.number(),\n  date: z.datetime(),\n  ready: z.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Application health monitoring endpoints.\n *\n * **Features:**\n * - `GET /health` endpoint\n *\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,KAAK;CAChB,QAAQ,EAAE,OAAO;CACjB,MAAM,EAAE,SAAS;CACjB,OAAO,EAAE,QAAQ;AACnB,CAAC;;;;;;;;ACGD,IAAa,uBAAb,MAAkC;CAChC,OAA4C,QAAQ,gBAAgB;CACpE,SAA4B,QAAQ,MAAM;CAE1C,SAAyB,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,UAA0B,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,aACZ;EACA,QAAQ;EACR,eAAe,KAAK,YAAY;CAClC,CAAC;CAED,cAAwB;EACtB,OAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,OAAO,CAAC;GACnC,MAAM,KAAK,KAAK,aAAa;GAC7B,OAAO,KAAK,OAAO,QAAQ;EAC7B;CACF;AACF;;;;;;;;;;;ACrBA,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,oBAAoB;AAC/C,CAAC"}

package/dist/server/links/index.browser.js

@@ -1,18 +1,18 @@
-import { $atom, $inject, $module, $state, Alepha, AlephaError, KIND, Primitive, createPrimitive, t } from "alepha";
+import { $atom, $inject, $module, $state, Alepha, AlephaError, KIND, Primitive, createPrimitive, z } from "alepha";
 import { $logger } from "alepha/logger";
 import { HttpClient, HttpError, ServerReply, UnauthorizedError } from "alepha/server";
 //#region ../../src/server/links/schemas/apiLinksResponseSchema.ts
-const apiActionSchema = t.object({
-	path: t.text({ description: "Pathname used to access the action." }),
-	method: t.optional(t.text({ description: "HTTP method. Omitted when GET (the default for ~75% of actions)." })),
-	contentType: t.optional(t.text({ description: "Content type for the request body. Only present for non-JSON types (e.g. 'multipart/form-data'). When absent, defaults to application/json." })),
-	kind: t.optional(t.text({ description: "Action kind. Used to distinguish special action types (e.g. 'sse' for Server-Sent Events streams)." })),
-	service: t.optional(t.text({ description: "Service name associated with the action, used for service discovery and routing." }))
+const apiActionSchema = z.object({
+	path: z.text({ description: "Pathname used to access the action." }),
+	method: z.text({ description: "HTTP method. Omitted when GET (the default for ~75% of actions)." }).optional(),
+	contentType: z.text({ description: "Content type for the request body. Only present for non-JSON types (e.g. 'multipart/form-data'). When absent, defaults to application/json." }).optional(),
+	kind: z.text({ description: "Action kind. Used to distinguish special action types (e.g. 'sse' for Server-Sent Events streams)." }).optional(),
+	service: z.text({ description: "Service name associated with the action, used for service discovery and routing." }).optional()
 });
-const apiRegistryResponseSchema = t.object({
-	prefix: t.optional(t.text()),
-	actions: t.record(t.text(), apiActionSchema),
-	permissions: t.optional(t.array(t.text()))
+const apiRegistryResponseSchema = z.object({
+	prefix: z.text().optional(),
+	actions: z.record(z.text(), apiActionSchema),
+	permissions: z.array(z.text()).optional()
 });
 /**
 * @deprecated Use `apiRegistryResponseSchema` and `ApiRegistryResponse` instead.
@@ -22,17 +22,14 @@ const apiLinksResponseSchema = apiRegistryResponseSchema;
 //#region ../../src/server/links/atoms/apiLinksAtom.ts
 const apiLinksAtom = $atom({
 	name: "alepha.server.request.apiLinks",
-	schema: t.optional(apiRegistryResponseSchema)
+	schema: apiRegistryResponseSchema.optional()
 });
 //#endregion
 //#region ../../src/server/links/atoms/linkOptionsAtom.ts
 const linkOptionsAtom = $atom({
 	name: "alepha.server.links.options",
 	description: "Configuration options for the links module.",
-	schema: t.object({ batch: t.boolean({
-		description: "Enable batch collection for browser-side calls.",
-		default: true
-	}) }),
+	schema: z.object({ batch: z.boolean().describe("Enable batch collection for browser-side calls.").default(true) }),
 	default: { batch: true }
 });
 //#endregion
@@ -361,8 +358,8 @@ var LinkProvider = class LinkProvider {
 		const action = {
 			...link,
 			schema: {
-				body: t.any(),
-				response: t.any()
+				body: z.any(),
+				response: z.any()
 			}
 		};
 		if (!link.host && link.service) action.path = `/${link.service}${action.path}`;