arkos 2.0.0-next.2 → 2.0.0-next.21

package/dist/esm/utils/setup-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-app.js","sourceRoot":"","sources":["../../../src/utils/setup-app.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,SAAS,MAAM,4BAA4B,CAAC;AACnD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,eAAe,MAAM,sCAAsC,CAAC;AAEnE,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAU;IACzC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,iBAAiB,GAAG,MAAM,EAAE,WAAW,CAAC;IAE9C,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3C,IAAI,OAAO,iBAAiB,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;YACvD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,SAAS,CACP,SAAS,CACP;gBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;gBACnB,KAAK,EAAE,GAAG;gBACV,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,2CAA2C;qBACrD,CAAC,CAAC;gBACL,CAAC;aACF,EACD,iBAAiB,EAAE,SAAS,IAAI,EAAE,CACnC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QACtC,IAAI,OAAO,iBAAiB,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,IAAI,CACF,iBAAiB,EAAE,IAAI,EAAE,aAAa;gBACpC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa;gBACtC,CAAC,CAAC,SAAS,CACP;oBACE,MAAM,EAAE,CACN,MAAc,EACd,EAAgD,EAChD,EAAE;wBACF,MAAM,OAAO,GAAI,iBAAiB,EAAE,IAAY;4BAC9C,EAAE,cAAc,CAAC;wBAEnB,IAAI,OAAO,KAAK,GAAG;4BAAE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;6BAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;4BAC7B,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;6BAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;4BAClC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;;4BACrC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACvB,CAAC;oBAED,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;oBAC7D,cAAc,EAAE;wBACd,cAAc;wBACd,eAAe;wBACf,YAAY;qBACb;oBACD,WAAW,EAAE,IAAI;iBAClB,EACD,iBAAiB,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CACvC,CACN,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QAC9C,IAAI,OAAO,iBAAiB,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC;gBAC3D,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAI,MAAc,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,WAAW,CACT,SAAS,CACP;gBACE,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI;aAClB,EACD,iBAAiB,EAAE,WAAW,IAAI,EAAE,CACrC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;QAC/C,IAAI,OAAO,iBAAiB,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IAExC,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import compression from \"compression\";\nimport { Arkos } from \"../types/arkos\";\nimport { getArkosConfig } from \"./helpers/arkos-config.helpers\";\nimport rateLimit from \"express-rate-limit\";\nimport deepmerge from \"./helpers/deepmerge.helper\";\nimport cors from \"cors\";\nimport express from \"express\";\nimport cookieParser from \"cookie-parser\";\nimport { queryParser } from \"./helpers/query-parser.helpers\";\nimport { handleRequestLogs } from \"../modules/base/base.middlewares\";\nimport debuggerService from \"../modules/debugger/debugger.service\";\n\nexport default function setupApp(app: Arkos) {\n  const config = getArkosConfig();\n\n  const middlewaresConfig = config?.middlewares;\n\n  if (middlewaresConfig?.compression !== false) {\n    if (typeof middlewaresConfig?.compression === \"function\") {\n      app.use(middlewaresConfig.compression);\n    } else {\n      app.use(compression(middlewaresConfig?.compression || {}));\n    }\n  }\n\n  if (middlewaresConfig?.rateLimit !== false) {\n    if (typeof middlewaresConfig?.rateLimit === \"function\") {\n      app.use(middlewaresConfig.rateLimit);\n    } else {\n      app.use(\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 300,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n              handler: (_, res) => {\n                res.status(429).json({\n                  message: \"Too many requests, please try again later\",\n                });\n              },\n            },\n            middlewaresConfig?.rateLimit || {}\n          )\n        )\n      );\n    }\n  }\n\n  if (middlewaresConfig?.cors !== false) {\n    if (typeof middlewaresConfig?.cors === \"function\") {\n      app.use(middlewaresConfig.cors);\n    } else {\n      app.use(\n        cors(\n          middlewaresConfig?.cors?.customHandler\n            ? middlewaresConfig.cors.customHandler\n            : deepmerge(\n                {\n                  origin: (\n                    origin: string,\n                    cb: (err: Error | null, allow?: boolean) => void\n                  ) => {\n                    const allowed = (middlewaresConfig?.cors as any)\n                      ?.allowedOrigins;\n\n                    if (allowed === \"*\") cb(null, true);\n                    else if (Array.isArray(allowed))\n                      cb(null, !origin || allowed?.includes?.(origin));\n                    else if (typeof allowed === \"string\")\n                      cb(null, !origin || allowed === origin);\n                    else cb(null, false);\n                  },\n\n                  methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n                  allowedHeaders: [\n                    \"Content-Type\",\n                    \"Authorization\",\n                    \"Connection\",\n                  ],\n                  credentials: true,\n                },\n                middlewaresConfig?.cors?.options || {}\n              )\n        )\n      );\n    }\n  }\n\n  if (middlewaresConfig?.expressJson !== false) {\n    if (typeof middlewaresConfig?.expressJson === \"function\") {\n      app.use(middlewaresConfig.expressJson);\n    } else {\n      app.use(express.json(middlewaresConfig?.expressJson || {}));\n    }\n  }\n\n  if (middlewaresConfig?.cookieParser !== false) {\n    if (typeof middlewaresConfig?.cookieParser === \"function\") {\n      app.use(middlewaresConfig.cookieParser);\n    } else {\n      const params = Array.isArray(middlewaresConfig?.cookieParser)\n        ? middlewaresConfig.cookieParser\n        : [];\n      app.use(cookieParser(...(params as any))); // FIXME: check types correctly\n    }\n  }\n\n  if (middlewaresConfig?.queryParser !== false) {\n    if (typeof middlewaresConfig?.queryParser === \"function\") {\n      app.use(middlewaresConfig.queryParser);\n    } else {\n      app.use(\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n              parseNumber: true,\n            },\n            middlewaresConfig?.queryParser || {}\n          )\n        )\n      );\n    }\n  }\n\n  if (middlewaresConfig?.requestLogger !== false) {\n    if (typeof middlewaresConfig?.requestLogger === \"function\") {\n      app.use(middlewaresConfig.requestLogger);\n    } else {\n      app.use(handleRequestLogs);\n    }\n  }\n\n  app.use(debuggerService.logRequestInfo);\n\n  return app;\n}\n"]}
+{"version":3,"file":"setup-app.js","sourceRoot":"","sources":["../../../src/utils/setup-app.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,SAAS,MAAM,4BAA4B,CAAC;AACnD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,SAAS,MAAM,sBAAsB,CAAC;AAC7C,OAAO,IAAI,MAAM,QAAQ,CAAC;AAG1B,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAU;IACzC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,iBAAiB,GAAG,MAAM,EAAE,WAAW,CAAC;IAE9C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,OAAO;YACjD,MAAM,SAAS,CACb,+LAA+L,CAChM,CAAC;QAEJ,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,IAAI,iBAAiB,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;QAC/C,IAAI,OAAO,iBAAiB,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,IAAI,EAAE,CAAQ,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3C,IAAI,OAAO,iBAAiB,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;YACvD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,SAAS,CACP,SAAS,CACP;gBACE,QAAQ,EAAE,EAAE,GAAG,IAAI;gBACnB,KAAK,EAAE,GAAG;gBACV,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,KAAK;gBACpB,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;oBACvB,MAAM,IAAI,oBAAoB,EAAE,CAAC;gBACnC,CAAC,CAAC;aACH,EACD,iBAAiB,EAAE,SAAS,IAAI,EAAE,CACnC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC;QAEjD,IAAI,eAAe,IAAI,UAAU;YAC/B,IAAI,CAAC,IAAI,CACP,sJAAsJ,EACtJ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEJ,IAAI,gBAAgB,IAAI,UAAU;YAChC,IAAI,CAAC,IAAI,CACP,yJAAyJ,EACzJ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEJ,IAAI,SAAS,IAAI,UAAU;YACzB,IAAI,CAAC,IAAI,CACP,0IAA0I,EAC1I,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEJ,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YACnC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;YAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC;YAC/D,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SAC3C,CAAC;QAEF,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,GAAG,CAAC,UAAiC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBAEN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAsC,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,IACL,iBAAiB,EAAE,IAAI;YACvB,OAAO,UAAU,KAAK,QAAQ;YAC9B,eAAe,IAAI,UAAU,EAC7B,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,IACL,iBAAiB,EAAE,IAAI;YACvB,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,gBAAgB,IAAI,UAAU,CAAC,EACjC,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,UAA8B,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,UAGnC,CAAC;YAEF,GAAG,CAAC,GAAG,CACL,IAAI,CACF,SAAS,CAAC,cAAc,EAAE;gBACxB,MAAM,EAAE,cAAc,IAAI,cAAc,CAAC,MAAM;gBAC/C,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;aACnB,CAAC,CACH,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QAC9C,IAAI,OAAO,iBAAiB,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GACV,OAAO,iBAAiB,EAAE,YAAY,KAAK,QAAQ;gBACjD,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,OAAO,iBAAiB,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CACL,WAAW,CACT,SAAS,CACP;gBACE,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI;aAClB,EACD,iBAAiB,EAAE,WAAW,IAAI,EAAE,CACrC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IAExC,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import compression from \"compression\";\nimport { Arkos } from \"../types/arkos\";\nimport { getArkosConfig, isProduction } from \"./helpers/arkos-config.helpers\";\nimport rateLimit from \"express-rate-limit\";\nimport deepmerge from \"./helpers/deepmerge.helper\";\nimport cors from \"cors\";\nimport express from \"express\";\nimport cookieParser from \"cookie-parser\";\nimport { queryParser } from \"./helpers/query-parser.helpers\";\nimport { handleRequestLogs } from \"../modules/base/base.middlewares\";\nimport debuggerService from \"../modules/debugger/debugger.service\";\nimport { catchAsync } from \"../exports/error-handler\";\nimport { TooManyRequestsError } from \"../modules/error-handler/utils/errors\";\nimport ExitError from \"./helpers/exit-error\";\nimport sheu from \"./sheu\";\nimport { ArkosRequestHandler } from \"../types\";\n\nexport default function setupApp(app: Arkos) {\n  const config = getArkosConfig();\n\n  const middlewaresConfig = config?.middlewares;\n\n  app.use((_, _1, next) => {\n    if (process.env.__ARKOS_SERVER_LISTENER !== \"arkos\")\n      throw ExitError(\n        \"If you are using a custom server, you must call the listen method like 'app.listen(server)'. See https://www.arkosjs.com/docs/core-concepts/routing/setup#custom-server-access-and-websockets\"\n      );\n\n    next();\n  });\n\n  if (middlewaresConfig?.requestLogger !== false) {\n    if (typeof middlewaresConfig?.requestLogger === \"function\") {\n      app.use(middlewaresConfig.requestLogger);\n    } else {\n      app.use(handleRequestLogs);\n    }\n  }\n\n  if (middlewaresConfig?.compression !== false) {\n    if (typeof middlewaresConfig?.compression === \"function\") {\n      app.use(middlewaresConfig.compression);\n    } else {\n      app.use(compression(middlewaresConfig?.compression || {}) as any);\n    }\n  }\n\n  if (middlewaresConfig?.rateLimit !== false) {\n    if (typeof middlewaresConfig?.rateLimit === \"function\") {\n      app.use(middlewaresConfig.rateLimit);\n    } else {\n      app.use(\n        rateLimit(\n          deepmerge(\n            {\n              windowMs: 60 * 1000,\n              limit: 300,\n              standardHeaders: \"draft-7\",\n              legacyHeaders: false,\n              handler: catchAsync(() => {\n                throw new TooManyRequestsError();\n              }),\n            },\n            middlewaresConfig?.rateLimit || {}\n          )\n        )\n      );\n    }\n  }\n\n  if (middlewaresConfig?.cors !== false) {\n    const corsConfig = middlewaresConfig?.cors || {};\n\n    if (\"customHandler\" in corsConfig)\n      sheu.warn(\n        \"cors.customHandler is deprecated. Pass the handler directly: `cors: myHandler`. See https://www.arkosjs.com/blog/rethinking-cors-defaults-in-arkosjs\",\n        { timestamp: true }\n      );\n\n    if (\"allowedOrigins\" in corsConfig)\n      sheu.warn(\n        \"cors.allowedOrigins is deprecated. Use `cors: { origin: '...' }` directly instead. See https://www.arkosjs.com/blog/rethinking-cors-defaults-in-arkosjs\",\n        { timestamp: true }\n      );\n\n    if (\"options\" in corsConfig)\n      sheu.warn(\n        \"cors.options is deprecated. Pass cors.CorsOptions directly instead. See https://www.arkosjs.com/blog/rethinking-cors-defaults-in-arkosjs\",\n        { timestamp: true }\n      );\n\n    const defaultOptions = {\n      origin: isProduction() ? \"*\" : true,\n      methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n      allowedHeaders: [\"Content-Type\", \"Authorization\", \"Connection\"],\n      credentials: isProduction() ? false : true,\n    };\n\n    if (typeof corsConfig === \"function\") {\n      if (corsConfig.length >= 3) {\n        app.use(corsConfig as ArkosRequestHandler);\n      } else {\n        // cors.CorsOptionsDelegate — (req, cb)\n        app.use(cors(corsConfig as cors.CorsOptionsDelegate));\n      }\n    } else if (\n      middlewaresConfig?.cors &&\n      typeof corsConfig === \"object\" &&\n      \"customHandler\" in corsConfig\n    ) {\n      // { customHandler } shape — delegate entirely to user's handler\n      app.use(cors(corsConfig.customHandler));\n    } else if (\n      middlewaresConfig?.cors &&\n      typeof corsConfig === \"object\" &&\n      !(\"allowedOrigins\" in corsConfig)\n    ) {\n      // Plain cors.CorsOptions passed directly at top level\n      app.use(cors(deepmerge(defaultOptions, corsConfig as cors.CorsOptions)));\n    } else {\n      const { allowedOrigins, options } = corsConfig as {\n        allowedOrigins?: string | string[] | \"*\";\n        options?: cors.CorsOptions;\n      };\n\n      app.use(\n        cors(\n          deepmerge(defaultOptions, {\n            origin: allowedOrigins ?? defaultOptions.origin,\n            ...(options || {}),\n          })\n        )\n      );\n    }\n  }\n\n  if (middlewaresConfig?.expressJson !== false) {\n    if (typeof middlewaresConfig?.expressJson === \"function\") {\n      app.use(middlewaresConfig.expressJson);\n    } else {\n      app.use(express.json(middlewaresConfig?.expressJson || {}));\n    }\n  }\n\n  if (middlewaresConfig?.cookieParser !== false) {\n    if (typeof middlewaresConfig?.cookieParser === \"function\") {\n      app.use(middlewaresConfig.cookieParser);\n    } else {\n      const params =\n        typeof middlewaresConfig?.cookieParser === \"object\"\n          ? middlewaresConfig.cookieParser\n          : { secret: undefined, options: undefined };\n      app.use(cookieParser(params.secret, params.options));\n    }\n  }\n\n  if (middlewaresConfig?.queryParser !== false) {\n    if (typeof middlewaresConfig?.queryParser === \"function\") {\n      app.use(middlewaresConfig.queryParser);\n    } else {\n      app.use(\n        queryParser(\n          deepmerge(\n            {\n              parseNull: true,\n              parseUndefined: true,\n              parseBoolean: true,\n              parseNumber: true,\n            },\n            middlewaresConfig?.queryParser || {}\n          )\n        )\n      );\n    }\n  }\n\n  app.use(debuggerService.logRequestInfo);\n\n  return app;\n}\n"]}

package/dist/esm/utils/validate-schema.js

@@ -1,9 +1,12 @@
 import { z } from "zod";
 import { getArkosConfig } from "./helpers/arkos-config.helpers.js";
-import deepmerge from "./helpers/deepmerge.helper.js";
 export default async function validateSchema(schema, data, options) {
     const arkosConfig = getArkosConfig();
-    const result = parseWithWhitelistCheck(schema, data, deepmerge(arkosConfig?.validation?.validationOptions || {}, options || {}));
+    const validationOptions = {
+        ...(arkosConfig?.validation?.validationOptions || {}),
+        ...(options || {}),
+    };
+    const result = parseWithWhitelistCheck(schema, data, validationOptions);
     if (!result.success)
         throw result.error;
     return result.data;
@@ -11,55 +14,54 @@ export default async function validateSchema(schema, data, options) {
 export function parseWithWhitelistCheck(schema, data, options) {
     const errors = [];
     function checkNestedKeys(schemaType, dataValue, path = []) {
-        if (typeof dataValue !== "object" || dataValue === null)
+        if (typeof dataValue !== "object" || dataValue === null) {
             return;
-        if (Array.isArray(dataValue) && schemaType._def?.typeName === "ZodArray") {
-            const arrayElement = schemaType._def.type;
+        }
+        const def = schemaType._zod.def;
+        if (def.type === "array" && Array.isArray(dataValue)) {
             dataValue.forEach((item, index) => {
-                checkNestedKeys(arrayElement, item, [...path, index]);
+                checkNestedKeys(def.element, item, [...path, index]);
             });
             return;
         }
-        if (schemaType._def?.typeName === "ZodObject") {
-            const schemaShape = schemaType._def.shape();
-            const allowedKeys = Object.keys(schemaShape);
+        if (def.type === "object") {
+            const shape = def.shape;
+            const allowedKeys = Object.keys(shape);
             const actualKeys = Object.keys(dataValue);
             const extraKeys = actualKeys.filter((key) => !allowedKeys.includes(key));
             extraKeys.forEach((key) => {
                 errors.push({
-                    code: z.ZodIssueCode.unrecognized_keys,
+                    code: "unrecognized_keys",
                     keys: [key],
                     path: [...path, key],
                     message: `Unrecognized key(s) in object: ${key}`,
                 });
             });
             allowedKeys.forEach((key) => {
-                const schemaField = schemaShape[key];
+                const schemaField = shape[key];
                 const nestedValue = dataValue[key];
-                if (nestedValue === undefined || nestedValue === null)
+                if (nestedValue === undefined || nestedValue === null) {
                     return;
+                }
                 let unwrappedSchema = schemaField;
-                if (schemaField._def?.typeName === "ZodOptional" ||
-                    schemaField._def?.typeName === "ZodNullable") {
-                    unwrappedSchema = schemaField._def.innerType;
+                while (["optional", "nullable"].includes(unwrappedSchema._zod.def.type)) {
+                    unwrappedSchema = unwrappedSchema._zod.def.innerType;
                 }
                 checkNestedKeys(unwrappedSchema, nestedValue, [...path, key]);
             });
         }
     }
-    if (options?.forbidNonWhitelisted !== false && data !== null) {
+    if (options?.forbidNonWhitelisted !== false) {
         checkNestedKeys(schema, data);
     }
     const parseResult = schema.safeParse(data);
-    if (!parseResult.success) {
+    if (!parseResult.success)
         errors.push(...parseResult.error.issues);
-    }
-    if (errors.length > 0) {
+    if (errors.length > 0)
         return {
             success: false,
-            error: new z.ZodError(errors),
+            error: new z.ZodRealError(errors),
         };
-    }
     return {
         success: true,
         data: parseResult.data,

package/dist/esm/utils/validate-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-schema.js","sourceRoot":"","sources":["../../../src/utils/validate-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,SAAS,MAAM,4BAA4B,CAAC;AA4BnD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,cAAc,CAC1C,MAAS,EACT,IAAa,EACb,OAA8B;IAE9B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,uBAAuB,CACpC,MAAM,EACN,IAAI,EACJ,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,IAAI,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,CAC3E,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAS,EACT,IAAa,EACb,OAA8B;IAE9B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,SAAS,eAAe,CACtB,UAAe,EACf,SAAc,EACd,OAA4B,EAAE;QAE9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO;QAGhE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YACzE,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAChC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAGD,IAAI,UAAU,CAAC,IAAI,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAEzE,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,iBAAiB;oBACtC,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;oBACpB,OAAO,EAAE,kCAAkC,GAAG,EAAE;iBACjD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAGH,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI;oBAAE,OAAO;gBAG9D,IAAI,eAAe,GAAG,WAAW,CAAC;gBAClC,IACE,WAAW,CAAC,IAAI,EAAE,QAAQ,KAAK,aAAa;oBAC5C,WAAW,CAAC,IAAI,EAAE,QAAQ,KAAK,aAAa,EAC5C,CAAC;oBACD,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC/C,CAAC;gBAED,eAAe,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,oBAAoB,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7D,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,WAAW,CAAC,IAAkB;KACrC,CAAC;AACJ,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { getArkosConfig } from \"./helpers/arkos-config.helpers\";\nimport deepmerge from \"./helpers/deepmerge.helper\";\n\nexport type ZodValidationOptions = { forbidNonWhitelisted?: boolean };\n/**\n * Validates data using a Zod schema and throws an AppError if validation fails.\n *\n * @param {ZodSchema} schema - The Zod schema to validate against.\n * @param {unknown} data - The data to validate.\n * @returns {Promise<any>} - The validated data or throws an AppError on failure.\n *\n * @example\n * ```typescript\n * const userSchema = z.object({\n *   name: z.string(),\n *   email: z.string().email()\n * });\n *\n * async function main() {\n *   const data = { name: \"Uanela Como\", email: \"invalid-email\" };\n *   try {\n *     const validatedUser = await validateSchema(userSchema, data);\n *     // do something\n *   } catch (error) {\n *     console.error(error.message);\n *   }\n * }\n * ```\n */\nexport default async function validateSchema<T extends z.ZodTypeAny>(\n  schema: T,\n  data: unknown,\n  options?: ZodValidationOptions\n): Promise<z.infer<T>> {\n  const arkosConfig = getArkosConfig();\n  const result = parseWithWhitelistCheck(\n    schema,\n    data,\n    deepmerge(arkosConfig?.validation?.validationOptions || {}, options || {})\n  );\n  if (!result.success) throw result.error;\n  return result.data;\n}\n\nexport function parseWithWhitelistCheck<T extends z.ZodTypeAny>(\n  schema: T,\n  data: unknown,\n  options?: ZodValidationOptions\n): { success: true; data: z.infer<T> } | { success: false; error: z.ZodError } {\n  const errors: z.ZodIssue[] = [];\n\n  function checkNestedKeys(\n    schemaType: any,\n    dataValue: any,\n    path: (string | number)[] = []\n  ): void {\n    if (typeof dataValue !== \"object\" || dataValue === null) return;\n\n    // Handle arrays\n    if (Array.isArray(dataValue) && schemaType._def?.typeName === \"ZodArray\") {\n      const arrayElement = schemaType._def.type;\n      dataValue.forEach((item, index) => {\n        checkNestedKeys(arrayElement, item, [...path, index]);\n      });\n      return;\n    }\n\n    // Handle objects\n    if (schemaType._def?.typeName === \"ZodObject\") {\n      const schemaShape = schemaType._def.shape();\n      const allowedKeys = Object.keys(schemaShape);\n      const actualKeys = Object.keys(dataValue);\n      const extraKeys = actualKeys.filter((key) => !allowedKeys.includes(key));\n\n      extraKeys.forEach((key) => {\n        errors.push({\n          code: z.ZodIssueCode.unrecognized_keys,\n          keys: [key],\n          path: [...path, key],\n          message: `Unrecognized key(s) in object: ${key}`,\n        });\n      });\n\n      // Check nested fields\n      allowedKeys.forEach((key) => {\n        const schemaField = schemaShape[key];\n        const nestedValue = dataValue[key];\n        if (nestedValue === undefined || nestedValue === null) return;\n\n        // Handle optional/nullable wrappers\n        let unwrappedSchema = schemaField;\n        if (\n          schemaField._def?.typeName === \"ZodOptional\" ||\n          schemaField._def?.typeName === \"ZodNullable\"\n        ) {\n          unwrappedSchema = schemaField._def.innerType;\n        }\n\n        checkNestedKeys(unwrappedSchema, nestedValue, [...path, key]);\n      });\n    }\n  }\n\n  if (options?.forbidNonWhitelisted !== false && data !== null) {\n    checkNestedKeys(schema, data);\n  }\n\n  const parseResult = schema.safeParse(data);\n  if (!parseResult.success) {\n    errors.push(...parseResult.error.issues);\n  }\n\n  if (errors.length > 0) {\n    return {\n      success: false,\n      error: new z.ZodError(errors),\n    };\n  }\n\n  return {\n    success: true,\n    data: parseResult.data as z.infer<T>,\n  };\n}\n"]}
+{"version":3,"file":"validate-schema.js","sourceRoot":"","sources":["../../../src/utils/validate-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AA4BhE,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,cAAc,CAC1C,MAAS,EACT,IAAa,EACb,OAA8B;IAE9B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,MAAM,iBAAiB,GAAG;QACxB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;KACnB,CAAC;IAEF,MAAM,MAAM,GAAG,uBAAuB,CACpC,MAAM,EACN,IAAI,EACJ,iBAAiB,CAClB,CAAC;IAGF,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC;IAGrB,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAS,EACT,IAAa,EACb,OAA8B;IAI9B,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,SAAS,eAAe,CACtB,UAAwB,EACxB,SAAkB,EAClB,OAA4B,EAAE;QAE9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAI,UAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAEzC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,SAAS,CAAC,OAAO,CAAC,CAAC,IAAa,EAAE,KAAa,EAAE,EAAE;gBACjD,eAAe,CACb,GAAG,CAAC,OAAO,EACX,IAAI,EACJ,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CACjB,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YAExB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CACpC,CAAC;YAEF,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;oBACpB,OAAO,EAAE,kCAAkC,GAAG,EAAE;iBACjD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBAE/B,MAAM,WAAW,GACf,SACD,CAAC,GAAG,CAAC,CAAC;gBAEP,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACtD,OAAO;gBACT,CAAC;gBAED,IAAI,eAAe,GAAG,WAAW,CAAC;gBAElC,OACE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAC9B,eAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CACvC,EACD,CAAC;oBACD,eAAe,GAAI,eAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChE,CAAC;gBAED,eAAe,CACb,eAAe,EACf,WAAW,EACX,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CACf,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,oBAAoB,KAAK,KAAK,EAAE,CAAC;QAC5C,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAE3C,IAAI,CAAC,WAAW,CAAC,OAAO;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAG3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;SAClC,CAAC;IAGJ,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,WAAW,CAAC,IAAK;KACxB,CAAC;AACJ,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { getArkosConfig } from \"./helpers/arkos-config.helpers\";\n\nexport type ZodValidationOptions = { forbidNonWhitelisted?: boolean };\n/**\n * Validates data using a Zod schema and throws an AppError if validation fails.\n *\n * @param {ZodSchema} schema - The Zod schema to validate against.\n * @param {unknown} data - The data to validate.\n * @returns {Promise<any>} - The validated data or throws an AppError on failure.\n *\n * @example\n * ```typescript\n * const userSchema = z.object({\n *   name: z.string(),\n *   email: z.string().email()\n * });\n *\n * async function main() {\n *   const data = { name: \"Uanela Como\", email: \"invalid-email\" };\n *   try {\n *     const validatedUser = await validateSchema(userSchema, data);\n *     // do something\n *   } catch (error) {\n *     console.error(error.message);\n *   }\n * }\n * ```\n */\nexport default async function validateSchema<T extends z.ZodTypeAny>(\n  schema: T,\n  data: unknown,\n  options?: ZodValidationOptions\n): Promise<z.infer<T>> {\n  const arkosConfig = getArkosConfig();\n\n  const validationOptions = {\n    ...(arkosConfig?.validation?.validationOptions || {}),\n    ...(options || {}),\n  };\n\n  const result = parseWithWhitelistCheck(\n    schema,\n    data,\n    validationOptions\n  );\n\n\n  if (!result.success)\n    throw result.error;\n\n\n  return result.data;\n}\n\nexport function parseWithWhitelistCheck<T extends z.ZodTypeAny>(\n  schema: T,\n  data: unknown,\n  options?: ZodValidationOptions\n):\n  | { success: true; data: z.infer<T> }\n  | { success: false; error: z.ZodError } {\n  const errors: z.core.$ZodIssue[] = [];\n\n  function checkNestedKeys(\n    schemaType: z.ZodTypeAny,\n    dataValue: unknown,\n    path: (string | number)[] = []\n  ): void {\n    if (typeof dataValue !== \"object\" || dataValue === null) {\n      return;\n    }\n\n    const def = (schemaType as any)._zod.def;\n\n    if (def.type === \"array\" && Array.isArray(dataValue)) {\n      dataValue.forEach((item: unknown, index: number) => {\n        checkNestedKeys(\n          def.element,\n          item,\n          [...path, index]\n        );\n      });\n\n      return;\n    }\n\n    if (def.type === \"object\") {\n      const shape = def.shape;\n\n      const allowedKeys = Object.keys(shape);\n      const actualKeys = Object.keys(dataValue);\n\n      const extraKeys = actualKeys.filter(\n        (key) => !allowedKeys.includes(key)\n      );\n\n      extraKeys.forEach((key) => {\n        errors.push({\n          code: \"unrecognized_keys\",\n          keys: [key],\n          path: [...path, key],\n          message: `Unrecognized key(s) in object: ${key}`,\n        });\n      });\n\n      allowedKeys.forEach((key) => {\n        const schemaField = shape[key];\n\n        const nestedValue = (\n          dataValue as Record<string, unknown>\n        )[key];\n\n        if (nestedValue === undefined || nestedValue === null) {\n          return;\n        }\n\n        let unwrappedSchema = schemaField;\n\n        while (\n          [\"optional\", \"nullable\"].includes(\n            (unwrappedSchema as any)._zod.def.type\n          )\n        ) {\n          unwrappedSchema = (unwrappedSchema as any)._zod.def.innerType;\n        }\n\n        checkNestedKeys(\n          unwrappedSchema,\n          nestedValue,\n          [...path, key]\n        );\n      });\n    }\n  }\n\n  if (options?.forbidNonWhitelisted !== false) {\n    checkNestedKeys(schema, data);\n  }\n\n  const parseResult = schema.safeParse(data);\n\n  if (!parseResult.success)\n    errors.push(...parseResult.error.issues);\n\n\n  if (errors.length > 0)\n    return {\n      success: false,\n      error: new z.ZodRealError(errors),\n    };\n\n\n  return {\n    success: true,\n    data: parseResult.data!,\n  };\n}\n"]}

package/dist/types/app.d.ts

@@ -1,6 +1,11 @@
 import "./utils/helpers/arkos-config.helpers";
+import express from "express";
 import { Arkos } from "./types/arkos";
 import { IncomingMessage, Server, ServerResponse } from "http";
+export declare const app: express.Express;
+export declare const docsLink = "https://www.arkosjs.com/docs/core-concepts/routing/setup#setting-up-your-app";
+type AppState = "idle" | "building" | "built" | "listening";
+export declare let state: AppState;
 /**
  * Creates and configures an Arkos application instance.
  *
@@ -31,16 +36,14 @@ import { IncomingMessage, Server, ServerResponse } from "http";
  *
  * app.use(reportsRouter);
  *
- * async function start() {
- *  await app.build();
+ * await app.build();
  *
- *  const server = http.createServer(app);
- *  app.listen(server)
- * }
- * main()
+ * const server = http.createServer(app);
+ * app.listen(server)
  * ```
  *
  * @see {@link https://www.arkosjs.com/docs/core-concepts/routing/setup}
  */
-export declare function arkos(): Arkos;
+export default function arkos(): Arkos;
 export declare function getAppServer(): Server<typeof IncomingMessage, typeof ServerResponse>;
+export {};

package/dist/types/components/arkos-gateway/arkos-gateway.d.ts

@@ -0,0 +1,121 @@
+import { ArkosGatewayConfig, ArkosGatewayErrorHandler, ArkosGatewayEventConfig, ArkosGatewayHandler, ArkosGatewayPipe, ArkosGatewayConnectionHandler, ArkosGatewayRegisterOptions } from "./types";
+import { Validator } from "../../types/validation/validator";
+import { Server } from "socket.io";
+export declare class IArkosGateway {
+    private config;
+    private events;
+    private pipes;
+    private gateways;
+    private hooks;
+    constructor(config: ArkosGatewayConfig);
+    /**
+     * Register a Socket.io connection-level middleware — runs before a socket
+     * is accepted into this gateway's namespace. Also accepts a child
+     * `ArkosGateway` which will inherit this gateway's name as prefix along
+     * with its auth, rateLimit, and pipes.
+     *
+     * @example
+     * chatGateway.use((socket, next) => {
+     *   console.log("incoming connection", socket.id)
+     * })
+     *
+     * // nested gateway
+     * chatGateway.use(notificationsGateway)
+     */
+    use(...middlewareOrGateway: Array<ArkosGatewayPipe | IArkosGateway>): this;
+    /**
+     * Register a pipe — middleware that runs before event handlers.
+     *
+     * When called with a function only, the pipe runs before every event
+     * handler in this gateway and drills down to child gateways.
+     *
+     * When called with an event config object, the pipe runs only for that
+     * specific event.
+     *
+     * @example
+     * // runs before every event in this gateway
+     * chatGateway.pipe((socket, data) => {
+     * })
+     *
+     * // runs only before "send_message"
+     * chatGateway.pipe({ event: "send_message" }, (socket, data) => {
+     * })
+     */
+    pipe(fn: ArkosGatewayPipe): this;
+    pipe<TSchema extends Validator = any>(eventConfig: {
+        event: string;
+    }, fn: ArkosGatewayPipe): this;
+    /**
+     * Register an event handler.
+     *
+     * @example
+     * chatGateway.on(
+     *   { event: "send_message", validation: MessageSchema, ack: true },
+     *   (socket, data, ack) => {
+     *     socket.to(data.room).emit("receive_message", data)
+     *     ack?.({ status: "ok" })
+     *   }
+     * )
+     */
+    on<TSchema extends Validator = any>(eventConfig: ArkosGatewayEventConfig<TSchema>, handler: ArkosGatewayHandler): this;
+    /**
+     * Register a lifecycle hook.
+     *
+     * - `"connection"` — called after a socket successfully connects and passes authentication.
+     * - `"disconnect"` — called when a socket disconnects.
+     * - `"error"` — called when an error is thrown inside any event handler.
+     *   If not registered, Arkos emits a default `"error"` event to the socket.
+     *
+     * @example
+     * chatGateway.hook("connection", (socket) => {
+     *   console.log("connected", socket.user.id)
+     * })
+     *
+     * chatGateway.hook("error", (err, socket) => {
+     *   socket.emit("error", { message: err.message })
+     * })
+     */
+    hook(type: "connection", handler: ArkosGatewayConnectionHandler): this;
+    hook(type: "disconnect", handler: ArkosGatewayConnectionHandler): this;
+    hook(type: "error", handler: ArkosGatewayErrorHandler): this;
+    /**
+     * Wire this gateway into a Socket.io `Server` instance.
+     * Registers the namespace, auth middleware, rate limiting, pipes,
+     * and all event handlers — then recurses into child gateways.
+     *
+     * @example
+     * const io = new Server(server)
+     * chatGateway.register(io)
+     */
+    register(io: Server, options?: ArkosGatewayRegisterOptions): void;
+    private _register;
+}
+/**
+ * Creates an Arkos WebSocket Gateway backed by Socket.io.
+ *
+ * Handles authentication, validation, rate limiting, pipes,
+ * error handling, and nested gateways — all declaratively.
+ * Enhances every connected socket with `socket.user()`, `socket.peer()`,
+ * `socket.retry()`, and automatic `_meta` injection on outgoing emits.
+ *
+ * @example
+ * ```ts
+ * const chatGateway = ArkosGateway({
+ *   name: "chat",
+ *   authentication: true,
+ *   rateLimit: { windowMs: 60_000, max: 200 },
+ * })
+ *
+ * chatGateway.on(
+ *   { event: "send_message", validation: MessageSchema, ack: true },
+ *   (socket, data, ack) => {
+ *     socket.to(data.room).emit("receive_message", data)
+ *     ack?.({ status: "ok" })
+ *   }
+ * )
+ * ```
+ * @since 1.7.0-canary.18
+ * @see {@link https://www.arkosjs.com/docs/core-concepts/components/gateways}
+ */
+declare function ArkosGateway(config: ArkosGatewayConfig): IArkosGateway;
+export default ArkosGateway;

package/dist/types/components/arkos-gateway/socket-extensions.d.ts

@@ -0,0 +1,79 @@
+import { ArkosSocket } from "./types";
+import { BroadcastOperator } from "socket.io";
+export declare class ArkosBroadcastOperatorImpl {
+    private readonly socket;
+    private readonly operator;
+    constructor(socket: ArkosSocket, operator: BroadcastOperator<any, any>);
+    /**
+     * Returns all unique user IDs currently in the target room(s).
+     * Uses the internal `arkos::user:` room convention to map sockets to users.
+     *
+     * @example
+     * const users = await socket.to("room-123").users()
+     * console.log(users) // ['user-1', 'user-2']
+     */
+    users(): Promise<string[]>;
+    /**
+     * Excludes sockets from the broadcast.
+     * Accepts a room name, socket ID, array of rooms/IDs, or `{ user: string | string[] }`
+     * to exclude all sockets belonging to one or more users.
+     *
+     * @example
+     * socket.to("room-101").except("room-102").emit("foo", data)
+     * socket.broadcast.except({ user: userId }).emit("foo", data)
+     * socket.broadcast.except({ user: [id1, id2] }).emit("foo", data)
+     */
+    except(room: string | string[] | {
+        user: string | string[];
+    }): ArkosBroadcastOperatorImpl;
+    /**
+     * Emits an event to the target. `_meta` (`mid` + `timestamp`) is injected automatically.
+     *
+     * @example
+     * socket.to("room-101").emit("message", { text: "hello" })
+     * socket.broadcast.emit("announcement", data)
+     */
+    emit(event: string, ...args: any[]): boolean;
+    /**
+     * Sets the volatile flag — the event may be dropped if the client is not ready.
+     * Useful for high-frequency non-critical events like cursor positions or typing indicators.
+     *
+     * @example
+     * socket.to("room-101").volatile.emit("cursor", position)
+     */
+    get volatile(): ArkosBroadcastOperatorImpl;
+    /**
+     * Sets the compress flag for the next emission.
+     *
+     * @example
+     * socket.broadcast.compress(false).emit("ping", data)
+     */
+    compress(value: boolean): ArkosBroadcastOperatorImpl;
+    /**
+     * Sets a timeout in milliseconds for `emitWithAck`.
+     * Rejects the promise if no client acknowledges within the given delay.
+     *
+     * @example
+     * socket.to("room-101").timeout(3000).emitWithAck("confirm", data)
+     */
+    timeout(ms: number): ArkosBroadcastOperatorImpl;
+    /**
+     * Emits an event and waits for acknowledgements from all matched clients.
+     * `_meta` is injected automatically. Use `.timeout(ms)` to avoid hanging indefinitely.
+     *
+     * @example
+     * const responses = await socket.to("room-101").timeout(3000).emitWithAck("confirm", data)
+     */
+    emitWithAck(event: string, ...args: any[]): Promise<any[]>;
+}
+/**
+ * Mounts Arkos socket extensions and patches emit methods for automatic `_meta` injection.
+ * Called once by the gateway at connection time, right after injecting `_arkos`.
+ *
+ * Patches: `emit`, `emitWithAck`, `to()`, `timeout()`, `broadcast`
+ * Mounts: `user()`, `peer()`, `retry()`
+ *
+ * @internal
+ * @since 1.7.0-canary.29
+ */
+export declare function mountArkosSocketExtensions(socket: ArkosSocket): void;