canxjs 1.0.1 → 1.1.0

package/dist/middlewares/RateLimitMiddleware.d.ts

@@ -0,0 +1,10 @@
+import type { MiddlewareHandler, CanxRequest } from '../types';
+export interface RateLimitConfig {
+    windowMs: number;
+    max: number;
+    message?: string | object;
+    statusCode?: number;
+    keyGenerator?: (req: CanxRequest) => string;
+}
+export declare function rateLimit(config: RateLimitConfig): MiddlewareHandler;
+//# sourceMappingURL=RateLimitMiddleware.d.ts.map

package/dist/middlewares/RateLimitMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitMiddleware.d.ts","sourceRoot":"","sources":["../../src/middlewares/RateLimitMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAgB,MAAM,UAAU,CAAC;AAE7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,MAAM,CAAC;CAC7C;AAsBD,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CA+BpE"}

package/dist/middlewares/SecurityMiddleware.d.ts

@@ -0,0 +1,14 @@
+import type { MiddlewareHandler } from '../types';
+export interface SecurityConfig {
+    xssProtection?: boolean;
+    contentTypeOptions?: boolean;
+    frameOptions?: 'DENY' | 'SAMEORIGIN';
+    hsts?: boolean | {
+        maxAge: number;
+        includeSubDomains: boolean;
+    };
+    contentSecurityPolicy?: string;
+    referrerPolicy?: string;
+}
+export declare function security(config?: SecurityConfig): MiddlewareHandler;
+//# sourceMappingURL=SecurityMiddleware.d.ts.map

package/dist/middlewares/SecurityMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityMiddleware.d.ts","sourceRoot":"","sources":["../../src/middlewares/SecurityMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,OAAO,CAAA;KAAE,CAAC;IAChE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,QAAQ,CAAC,MAAM,GAAE,cAAmB,GAAG,iBAAiB,CA2CvE"}

package/dist/middlewares/ValidationMiddleware.d.ts

@@ -0,0 +1,4 @@
+import type { MiddlewareHandler } from '../types';
+import { Schema } from '../schema/Schema';
+export declare function validateSchema(schema: Schema<any>, target?: 'body' | 'query' | 'params'): MiddlewareHandler;
+//# sourceMappingURL=ValidationMiddleware.d.ts.map

package/dist/middlewares/ValidationMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationMiddleware.d.ts","sourceRoot":"","sources":["../../src/middlewares/ValidationMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAe,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG1C,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,GAAE,MAAM,GAAG,OAAO,GAAG,QAAiB,GAAG,iBAAiB,CA8BnH"}

package/dist/schema/Schema.d.ts

@@ -0,0 +1,64 @@
+import { ValidationError } from '../utils/ErrorHandler';
+export type Infer<T extends Schema<any>> = T['_output'];
+export interface ParseResult<T> {
+    success: boolean;
+    data?: T;
+    error?: ValidationError;
+}
+export declare abstract class Schema<Output = any, Input = unknown> {
+    readonly _output: Output;
+    readonly _input: Input;
+    protected description?: string;
+    protected isOptional: boolean;
+    abstract parse(value: unknown): Output;
+    abstract getJsonSchema(): Record<string, any>;
+    safeParse(value: unknown): ParseResult<Output>;
+    optional(): Schema<Output | undefined, Input | undefined>;
+    describe(description: string): this;
+}
+declare class StringSchema extends Schema<string> {
+    private checks;
+    constructor();
+    min(length: number, message?: string): this;
+    max(length: number, message?: string): this;
+    email(message?: string): this;
+    parse(value: unknown): string;
+    getJsonSchema(): Record<string, any>;
+}
+declare class NumberSchema extends Schema<number> {
+    private checks;
+    min(min: number, message?: string): this;
+    max(max: number, message?: string): this;
+    parse(value: unknown): number;
+    private validateChecks;
+    getJsonSchema(): Record<string, any>;
+}
+declare class BooleanSchema extends Schema<boolean> {
+    parse(value: unknown): boolean;
+    getJsonSchema(): Record<string, any>;
+}
+declare class ObjectSchema<T extends Record<string, Schema<any>>> extends Schema<{
+    [K in keyof T]: Infer<T[K]>;
+}> {
+    private shape;
+    constructor(shape: T);
+    parse(value: unknown): {
+        [K in keyof T]: Infer<T[K]>;
+    };
+    getJsonSchema(): Record<string, any>;
+}
+declare class ArraySchema<T extends Schema<any>> extends Schema<Infer<T>[]> {
+    private element;
+    constructor(element: T);
+    parse(value: unknown): Infer<T>[];
+    getJsonSchema(): Record<string, any>;
+}
+export declare const z: {
+    string: () => StringSchema;
+    number: () => NumberSchema;
+    boolean: () => BooleanSchema;
+    object: <T extends Record<string, Schema<any>>>(shape: T) => ObjectSchema<T>;
+    array: <T extends Schema<any>>(element: T) => ArraySchema<T>;
+};
+export {};
+//# sourceMappingURL=Schema.d.ts.map

package/dist/schema/Schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Schema.d.ts","sourceRoot":"","sources":["../../src/schema/Schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAMxD,MAAM,MAAM,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAExD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,8BAAsB,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,KAAK,GAAG,OAAO;IACxD,QAAQ,CAAC,OAAO,EAAG,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAG,KAAK,CAAC;IACxB,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,UAAU,EAAE,OAAO,CAAS;IAEtC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IACtC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAE7C,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;IAY9C,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC;IAMzD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;CAIpC;AAMD,cAAM,YAAa,SAAQ,MAAM,CAAC,MAAM,CAAC;IACvC,OAAO,CAAC,MAAM,CAA2C;;IAMzD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAK3C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAK3C,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAM7B,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAmB7B,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAMrC;AAMD,cAAM,YAAa,SAAQ,MAAM,CAAC,MAAM,CAAC;IACvC,OAAO,CAAC,MAAM,CAA2C;IAEzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAKxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAKxC,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAiB7B,OAAO,CAAC,cAAc;IAUtB,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAMrC;AAMD,cAAM,aAAc,SAAQ,MAAM,CAAC,OAAO,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAY9B,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAMrC;AAMD,cAAM,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,SAAQ,MAAM,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC;IAC3F,OAAO,CAAC,KAAK;gBAAL,KAAK,EAAE,CAAC;IAI5B,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG;SAAG,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE;IAuCtD,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAqBrC;AAMD,cAAM,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAE,SAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,CAAC;IAI9B,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAqBjC,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAOrC;AAMD,eAAO,MAAM,CAAC;;;;aAIH,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;YAChD,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;CAC1C,CAAC"}

package/dist/utils/ErrorHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ErrorHandler.d.ts","sourceRoot":"","sources":["../../src/utils/ErrorHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,qBAAa,SAAU,SAAQ,KAAK;IAClC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,SAAgB,SAAS,EAAE,IAAI,CAAC;gBAG9B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAqB,EAC3B,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWnC,MAAM;;;;;;;;CAUP;AAED,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAgB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,SAAsB;CAMpG;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,QAAQ,GAAE,MAAmB,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;CAKhE;AAED,qBAAa,mBAAoB,SAAQ,SAAS;gBACpC,OAAO,SAA4B;CAIhD;AAED,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,OAAO,SAAuD;CAI3E;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAsB,EAAE,QAAQ,CAAC,EAAE,MAAM;CAI7D;AAED,qBAAa,cAAe,SAAQ,SAAS;IAC3C,SAAgB,UAAU,EAAE,MAAM,CAAC;gBAEvB,UAAU,GAAE,MAAW,EAAE,OAAO,SAAsB;CAKnE;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,SAAgB;CAIpC;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAmB,EAAE,aAAa,CAAC,EAAE,KAAK;CAO9D;AAED,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAI9C;AAMD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7E,UAAU,mBAAmB;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;CACpD;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,iBAAiB,CAuCjF;AAMD,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE/E,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,GAAG,YAAY,CAW3D;AAMD,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,SAAa,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,CAK1G;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,CAKpE;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAI3E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAI3G;AAMD,eAAO,MAAM,MAAM;;;;;;;;;;;CAWlB,CAAC;;;;;;;;;;;;;;;;;;;AAEF,wBAQE"}
+{"version":3,"file":"ErrorHandler.d.ts","sourceRoot":"","sources":["../../src/utils/ErrorHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,qBAAa,SAAU,SAAQ,KAAK;IAClC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,SAAgB,SAAS,EAAE,IAAI,CAAC;gBAG9B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAqB,EAC3B,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWnC,MAAM;;;;;;;;CAUP;AAED,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,SAAgB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,SAAsB;CAMpG;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,QAAQ,GAAE,MAAmB,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;CAKhE;AAED,qBAAa,mBAAoB,SAAQ,SAAS;gBACpC,OAAO,SAA4B;CAIhD;AAED,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,OAAO,SAAuD;CAI3E;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAsB,EAAE,QAAQ,CAAC,EAAE,MAAM;CAI7D;AAED,qBAAa,cAAe,SAAQ,SAAS;IAC3C,SAAgB,UAAU,EAAE,MAAM,CAAC;gBAEvB,UAAU,GAAE,MAAW,EAAE,OAAO,SAAsB;CAKnE;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,SAAgB;CAIpC;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAmB,EAAE,aAAa,CAAC,EAAE,KAAK;CAO9D;AAED,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAI9C;AAMD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7E,UAAU,mBAAmB;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;CACpD;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,iBAAiB,CAmEjF;AAMD,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE/E,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,GAAG,YAAY,CAW3D;AAMD,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,SAAa,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,CAK1G;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,CAKpE;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAI3E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAI3G;AAMD,eAAO,MAAM,MAAM;;;;;;;;;;;CAWlB,CAAC;;;;;;;;;;;;;;;;;;;AAEF,wBAQE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "canxjs",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Ultra-fast async-first MVC backend framework for Bun runtime",
   "type": "module",
   "main": "./dist/index.js",
@@ -93,5 +93,8 @@
   "bugs": {
     "url": "https://github.com/chandafa/canx.JS/issues"
   },
-  "homepage": "https://github.com/chandafa/canx.JS#readme"
+  "homepage": "https://github.com/chandafa/canx.JS#readme",
+  "publishConfig": {
+    "access": "public"
+  }
 }

package/src/Application.ts

@@ -76,8 +76,15 @@ export class Canx implements CanxApplication {
   /**
    * Start the server
    */
-  async listen(port?: number, callback?: () => void): Promise<void> {
-    if (port) this.config.port = port;
+  async listen(port?: number | (() => void), callback?: () => void): Promise<void> {
+    if (typeof port === 'function') {
+      callback = port;
+      port = undefined;
+    }
+
+    if (port && typeof port === 'number') {
+      this.config.port = port;
+    }
 
     // Initialize plugins
     for (const plugin of this.plugins) {

package/src/docs/ApiDoc.ts

@@ -77,25 +77,33 @@ export function ApiParam(param: ApiParameter): MethodDecorator {
   };
 }
 
-export function ApiBody(schema: ApiSchema, required = true): MethodDecorator {
+import { Schema } from '../schema/Schema';
+
+export function ApiBody(schema: ApiSchema | Schema<any>, required = true): MethodDecorator {
   return (target: any, propertyKey: string | symbol) => {
     if (!apiMetadata.has(target)) apiMetadata.set(target, new Map());
     const meta = apiMetadata.get(target)!;
     const existing = meta.get(String(propertyKey)) || {} as ApiEndpoint;
-    existing.requestBody = { required, content: { 'application/json': { schema } } };
+    
+    const finalSchema = schema instanceof Schema ? schema.getJsonSchema() : schema;
+    
+    existing.requestBody = { required, content: { 'application/json': { schema: finalSchema as ApiSchema } } };
     meta.set(String(propertyKey), existing);
   };
 }
 
-export function ApiResponse(status: number, description: string, schema?: ApiSchema): MethodDecorator {
+export function ApiResponse(status: number, description: string, schema?: ApiSchema | Schema<any>): MethodDecorator {
   return (target: any, propertyKey: string | symbol) => {
     if (!apiMetadata.has(target)) apiMetadata.set(target, new Map());
     const meta = apiMetadata.get(target)!;
     const existing = meta.get(String(propertyKey)) || {} as ApiEndpoint;
     existing.responses = existing.responses || {};
+    
+    const finalSchema = schema instanceof Schema ? schema.getJsonSchema() : schema;
+
     existing.responses[String(status)] = {
       description,
-      content: schema ? { 'application/json': { schema } } : undefined,
+      content: finalSchema ? { 'application/json': { schema: finalSchema as ApiSchema } } : undefined,
     };
     meta.set(String(propertyKey), existing);
   };

package/src/index.ts

@@ -9,7 +9,19 @@
 // ============================================
 export { Server, createCanxRequest, createCanxResponse } from './core/Server';
 export { Router, createRouter } from './core/Router';
+// ============================================
+// Middleware Exports
+// ============================================
 export { MiddlewarePipeline, cors, logger, bodyParser, rateLimit, compress, createMiddlewarePipeline } from './core/Middleware';
+export { security } from './middlewares/SecurityMiddleware';
+export { rateLimit as rateLimitMiddleware } from './middlewares/RateLimitMiddleware';
+export { validateSchema } from './middlewares/ValidationMiddleware';
+
+// ============================================
+// Schema / Validation Exports
+// ============================================
+export { z, Schema as ZSchema } from './schema/Schema';
+export type { Infer } from './schema/Schema';
 
 // ============================================
 // MVC Exports

package/src/middlewares/RateLimitMiddleware.ts

@@ -0,0 +1,62 @@
+import type { MiddlewareHandler, CanxRequest, CanxResponse } from '../types';
+
+export interface RateLimitConfig {
+  windowMs: number;
+  max: number;
+  message?: string | object;
+  statusCode?: number;
+  keyGenerator?: (req: CanxRequest) => string;
+}
+
+// Simple in-memory store. In production for multiple instances, Redis is recommended.
+// This is exposed so it can be swapped if needed.
+class MemoryStore {
+  hits = new Map<string, { count: number; resetTime: number }>();
+
+  increment(key: string, windowMs: number): { count: number; resetTime: number } {
+    const now = Date.now();
+    let record = this.hits.get(key);
+
+    if (!record || record.resetTime <= now) {
+      record = { count: 1, resetTime: now + windowMs };
+    } else {
+      record.count++;
+    }
+
+    this.hits.set(key, record);
+    return record;
+  }
+}
+
+export function rateLimit(config: RateLimitConfig): MiddlewareHandler {
+  const store = new MemoryStore();
+  const {
+    windowMs = 60000,
+    max = 100,
+    message = 'Too many requests, please try again later.',
+    statusCode = 429,
+    keyGenerator = (req: CanxRequest) => req.header('x-forwarded-for') || req.header('cf-connecting-ip') || 'unknown-ip'
+  } = config;
+
+  return async (req, res, next) => {
+    const key = keyGenerator(req);
+    const { count, resetTime } = store.increment(key, windowMs);
+
+    const remaining = Math.max(0, max - count);
+    const resetDate = new Date(resetTime);
+
+    // Standard Rate Limit Headers
+    res.header('X-RateLimit-Limit', String(max));
+    res.header('X-RateLimit-Remaining', String(remaining));
+    res.header('X-RateLimit-Reset', String(Math.ceil(resetTime / 1000)));
+
+    if (count > max) {
+      if (typeof message === 'object') {
+        return res.status(statusCode).json(message);
+      }
+      return res.status(statusCode).text(String(message));
+    }
+
+    return next();
+  };
+}

package/src/middlewares/SecurityMiddleware.ts

@@ -0,0 +1,55 @@
+import type { MiddlewareHandler } from '../types';
+
+export interface SecurityConfig {
+  xssProtection?: boolean;
+  contentTypeOptions?: boolean;
+  frameOptions?: 'DENY' | 'SAMEORIGIN';
+  hsts?: boolean | { maxAge: number; includeSubDomains: boolean };
+  contentSecurityPolicy?: string;
+  referrerPolicy?: string;
+}
+
+export function security(config: SecurityConfig = {}): MiddlewareHandler {
+  return async (req, res, next) => {
+    // X-XSS-Protection
+    if (config.xssProtection !== false) {
+      res.header('X-XSS-Protection', '1; mode=block');
+    }
+
+    // X-Content-Type-Options
+    if (config.contentTypeOptions !== false) {
+      res.header('X-Content-Type-Options', 'nosniff');
+    }
+
+    // X-Frame-Options
+    if (config.frameOptions) {
+      res.header('X-Frame-Options', config.frameOptions);
+    } else if (config.frameOptions !== undefined) {
+      // Allow if explicit string (e.g. ALLOW-FROM) - though deprecated
+      res.header('X-Frame-Options', config.frameOptions);
+    } else {
+        // Default deny if not specified? Or standard default?
+        // Modern default is usually SAMEORIGIN or DENY. Let's do SAMEORIGIN.
+         res.header('X-Frame-Options', 'SAMEORIGIN');
+    }
+
+    // Strict-Transport-Security
+    if (config.hsts) {
+      const maxAge = typeof config.hsts === 'object' ? config.hsts.maxAge : 31536000;
+      const includeSubDomains = typeof config.hsts === 'object' && config.hsts.includeSubDomains ? '; includeSubDomains' : '';
+      res.header('Strict-Transport-Security', `max-age=${maxAge}${includeSubDomains}`);
+    }
+
+    // Content-Security-Policy
+    if (config.contentSecurityPolicy) {
+      res.header('Content-Security-Policy', config.contentSecurityPolicy);
+    }
+
+    // Referrer-Policy
+    if (config.referrerPolicy) {
+      res.header('Referrer-Policy', config.referrerPolicy);
+    }
+
+    return next();
+  };
+}

package/src/middlewares/ValidationMiddleware.ts

@@ -0,0 +1,35 @@
+import type { MiddlewareHandler, CanxRequest } from '../types';
+import { Schema } from '../schema/Schema';
+import { ValidationError } from '../utils/ErrorHandler';
+
+export function validateSchema(schema: Schema<any>, target: 'body' | 'query' | 'params' = 'body'): MiddlewareHandler {
+  return async (req: CanxRequest, res, next) => {
+    let data: unknown;
+
+    if (target === 'body') {
+      data = await req.body();
+    } else if (target === 'query') {
+      data = req.query;
+    } else {
+      data = req.params;
+    }
+
+    try {
+      const validated = schema.parse(data);
+      // Attach validated data to request for type safety in controllers
+      (req as any).validatedData = validated;
+      return next();
+    } catch (error) {
+      if (error instanceof ValidationError) {
+        return res.status(422).json({
+          error: {
+            code: 'VALIDATION_ERROR',
+            message: 'Validation failed',
+            details: Object.fromEntries(error.errors),
+          }
+        });
+      }
+      throw error;
+    }
+  };
+}

package/src/schema/Schema.ts

@@ -0,0 +1,299 @@
+import { ValidationError } from '../utils/ErrorHandler';
+
+// ============================================
+// Core Types
+// ============================================
+
+export type Infer<T extends Schema<any>> = T['_output'];
+
+export interface ParseResult<T> {
+  success: boolean;
+  data?: T;
+  error?: ValidationError;
+}
+
+export abstract class Schema<Output = any, Input = unknown> {
+  readonly _output!: Output;
+  readonly _input!: Input;
+  protected description?: string;
+  protected isOptional: boolean = false;
+
+  abstract parse(value: unknown): Output;
+  abstract getJsonSchema(): Record<string, any>;
+
+  safeParse(value: unknown): ParseResult<Output> {
+    try {
+      const data = this.parse(value);
+      return { success: true, data };
+    } catch (error) {
+       if (error instanceof ValidationError) {
+        return { success: false, error };
+       }
+       throw error;
+    }
+  }
+
+  optional(): Schema<Output | undefined, Input | undefined> {
+    const newSchema = Object.create(this);
+    newSchema.isOptional = true;
+    return newSchema as any;
+  }
+
+  describe(description: string): this {
+    this.description = description;
+    return this;
+  }
+}
+
+// ============================================
+// String Schema
+// ============================================
+
+class StringSchema extends Schema<string> {
+  private checks: Array<(v: string) => string | null> = [];
+
+  constructor() {
+    super();
+  }
+
+  min(length: number, message?: string): this {
+    this.checks.push((v) => v.length >= length ? null : (message || `String must contain at least ${length} character(s)`));
+    return this;
+  }
+
+  max(length: number, message?: string): this {
+    this.checks.push((v) => v.length <= length ? null : (message || `String must contain at most ${length} character(s)`));
+    return this;
+  }
+
+  email(message?: string): this {
+    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    this.checks.push((v) => emailRegex.test(v) ? null : (message || 'Invalid email address'));
+    return this;
+  }
+
+  parse(value: unknown): string {
+    if (this.isOptional && (value === undefined || value === null)) {
+      return value as any;
+    }
+
+    if (typeof value !== 'string') {
+      throw new ValidationError({ _errors: ['Expected string, received ' + typeof value] });
+    }
+
+    for (const check of this.checks) {
+      const error = check(value);
+      if (error) {
+        throw new ValidationError({ _errors: [error] });
+      }
+    }
+
+    return value;
+  }
+
+  getJsonSchema(): Record<string, any> {
+    return {
+      type: 'string',
+      description: this.description,
+    };
+  }
+}
+
+// ============================================
+// Number Schema
+// ============================================
+
+class NumberSchema extends Schema<number> {
+  private checks: Array<(v: number) => string | null> = [];
+
+  min(min: number, message?: string): this {
+    this.checks.push((v) => v >= min ? null : (message || `Number must be greater than or equal to ${min}`));
+    return this;
+  }
+
+  max(max: number, message?: string): this {
+    this.checks.push((v) => v <= max ? null : (message || `Number must be less than or equal to ${max}`));
+    return this;
+  }
+
+  parse(value: unknown): number {
+    if (this.isOptional && (value === undefined || value === null)) {
+      return value as any;
+    }
+
+    if (typeof value !== 'number' || isNaN(value)) {
+       // Try converting string number
+       if (typeof value === 'string' && !isNaN(parseFloat(value))) {
+         const num = parseFloat(value);
+         return this.validateChecks(num);
+       }
+      throw new ValidationError({ _errors: ['Expected number, received ' + typeof value] });
+    }
+
+    return this.validateChecks(value);
+  }
+
+  private validateChecks(value: number): number {
+    for (const check of this.checks) {
+      const error = check(value);
+      if (error) {
+        throw new ValidationError({ _errors: [error] });
+      }
+    }
+    return value;
+  }
+
+  getJsonSchema(): Record<string, any> {
+    return {
+      type: 'number',
+      description: this.description,
+    };
+  }
+}
+
+// ============================================
+// Boolean Schema
+// ============================================
+
+class BooleanSchema extends Schema<boolean> {
+  parse(value: unknown): boolean {
+    if (this.isOptional && (value === undefined || value === null)) {
+      return value as any;
+    }
+
+    if (typeof value === 'boolean') return value;
+    if (value === 'true') return true;
+    if (value === 'false') return false;
+
+    throw new ValidationError({ _errors: ['Expected boolean, received ' + typeof value] });
+  }
+
+  getJsonSchema(): Record<string, any> {
+    return {
+      type: 'boolean',
+      description: this.description,
+    };
+  }
+}
+
+// ============================================
+// Object Schema
+// ============================================
+
+class ObjectSchema<T extends Record<string, Schema<any>>> extends Schema<{ [K in keyof T]: Infer<T[K]> }> {
+  constructor(private shape: T) {
+    super();
+  }
+
+  parse(value: unknown): { [K in keyof T]: Infer<T[K]> } {
+    if (this.isOptional && (value === undefined || value === null)) {
+      return value as any;
+    }
+
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+      throw new ValidationError({ _errors: ['Expected object, received ' + typeof value] });
+    }
+
+    const result: any = {};
+    const errors = new Map<string, string[]>();
+
+    for (const [key, schema] of Object.entries(this.shape)) {
+      try {
+        result[key] = schema.parse((value as any)[key]);
+      } catch (error) {
+        if (error instanceof ValidationError) {
+           const fieldErrors = error.errors.get('_errors') || [];
+            // If the child error has map errors (nested object), merge them
+            if (error.errors.size > 0 && !error.errors.has('_errors')) {
+               error.errors.forEach((msgs, path) => {
+                 errors.set(`${key}.${path}`, msgs);
+               });
+            } else {
+               errors.set(key, fieldErrors);
+            }
+        } else {
+          errors.set(key, ['Invalid value']);
+        }
+      }
+    }
+
+    if (errors.size > 0) {
+      throw new ValidationError(errors);
+    }
+
+    return result;
+  }
+
+  getJsonSchema(): Record<string, any> {
+    const properties: Record<string, any> = {};
+    const required: string[] = [];
+
+    for (const [key, schema] of Object.entries(this.shape)) {
+      properties[key] = schema.getJsonSchema();
+      if (!(schema as any).isOptional) {
+         // Actually we can check isOptional property
+         if (!(schema as any).isOptional) {
+           required.push(key);
+         }
+      }
+    }
+
+    return {
+      type: 'object',
+      properties,
+      required: required.length > 0 ? required : undefined,
+      description: this.description,
+    };
+  }
+}
+
+// ============================================
+// Array Schema
+// ============================================
+
+class ArraySchema<T extends Schema<any>> extends Schema<Infer<T>[]> {
+  constructor(private element: T) {
+    super();
+  }
+
+  parse(value: unknown): Infer<T>[] {
+    if (this.isOptional && (value === undefined || value === null)) {
+      return value as any;
+    }
+
+    if (!Array.isArray(value)) {
+      throw new ValidationError({ _errors: ['Expected array, received ' + typeof value] });
+    }
+
+    return value.map((item, index) => {
+      try {
+        return this.element.parse(item);
+      } catch (error) {
+        if (error instanceof ValidationError) {
+           throw new ValidationError({ [index]: error.errors.get('_errors') || ['Invalid Item'] });
+        }
+        throw error;
+      }
+    });
+  }
+
+  getJsonSchema(): Record<string, any> {
+    return {
+      type: 'array',
+      items: this.element.getJsonSchema(),
+      description: this.description,
+    };
+  }
+}
+
+// ============================================
+// Builder
+// ============================================
+
+export const z = {
+  string: () => new StringSchema(),
+  number: () => new NumberSchema(),
+  boolean: () => new BooleanSchema(),
+  object: <T extends Record<string, Schema<any>>>(shape: T) => new ObjectSchema(shape),
+  array: <T extends Schema<any>>(element: T) => new ArraySchema(element),
+};