fastify-wrap 0.1.0

package/dist/src/common/exceptions/BaseException.js

@@ -0,0 +1,7 @@
+export class BaseException extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'BaseException';
+    }
+}
+//# sourceMappingURL=BaseException.js.map

package/dist/src/common/exceptions/BaseException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseException.js","sourceRoot":"","sources":["../../../../src/common/exceptions/BaseException.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/src/common/exceptions/BusinessException.d.ts

@@ -0,0 +1,5 @@
+import { BaseException } from './BaseException';
+export declare class BusinessException extends BaseException {
+    constructor(message: string);
+}
+//# sourceMappingURL=BusinessException.d.ts.map

package/dist/src/common/exceptions/BusinessException.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BusinessException.d.ts","sourceRoot":"","sources":["../../../../src/common/exceptions/BusinessException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,qBAAa,iBAAkB,SAAQ,aAAa;gBACtC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/src/common/exceptions/BusinessException.js

@@ -0,0 +1,8 @@
+import { BaseException } from './BaseException';
+export class BusinessException extends BaseException {
+    constructor(message) {
+        super(message);
+        this.name = 'BusinessException';
+    }
+}
+//# sourceMappingURL=BusinessException.js.map

package/dist/src/common/exceptions/BusinessException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BusinessException.js","sourceRoot":"","sources":["../../../../src/common/exceptions/BusinessException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,OAAO,iBAAkB,SAAQ,aAAa;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/src/common/exceptions/NotFoundException.d.ts

@@ -0,0 +1,5 @@
+import { BaseException } from './BaseException';
+export declare class NotFoundException extends BaseException {
+    constructor(message: string);
+}
+//# sourceMappingURL=NotFoundException.d.ts.map

package/dist/src/common/exceptions/NotFoundException.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotFoundException.d.ts","sourceRoot":"","sources":["../../../../src/common/exceptions/NotFoundException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,qBAAa,iBAAkB,SAAQ,aAAa;gBACtC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/src/common/exceptions/NotFoundException.js

@@ -0,0 +1,8 @@
+import { BaseException } from './BaseException';
+export class NotFoundException extends BaseException {
+    constructor(message) {
+        super(message);
+        this.name = 'NotFoundException';
+    }
+}
+//# sourceMappingURL=NotFoundException.js.map

package/dist/src/common/exceptions/NotFoundException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotFoundException.js","sourceRoot":"","sources":["../../../../src/common/exceptions/NotFoundException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,OAAO,iBAAkB,SAAQ,aAAa;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/src/common/exceptions/ServiceException.d.ts

@@ -0,0 +1,5 @@
+import { BaseException } from './BaseException';
+export declare class ServiceException extends BaseException {
+    constructor(message: string);
+}
+//# sourceMappingURL=ServiceException.d.ts.map

package/dist/src/common/exceptions/ServiceException.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceException.d.ts","sourceRoot":"","sources":["../../../../src/common/exceptions/ServiceException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,qBAAa,gBAAiB,SAAQ,aAAa;gBACrC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/src/common/exceptions/ServiceException.js

@@ -0,0 +1,8 @@
+import { BaseException } from './BaseException';
+export class ServiceException extends BaseException {
+    constructor(message) {
+        super(message);
+        this.name = 'ServiceException';
+    }
+}
+//# sourceMappingURL=ServiceException.js.map

package/dist/src/common/exceptions/ServiceException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceException.js","sourceRoot":"","sources":["../../../../src/common/exceptions/ServiceException.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,OAAO,gBAAiB,SAAQ,aAAa;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/src/common/exceptions/index.d.ts

@@ -0,0 +1,6 @@
+export { BaseException } from './BaseException';
+export { BusinessException } from './BusinessException';
+export { ServiceException } from './ServiceException';
+export { NotFoundException } from './NotFoundException';
+export { AuthException } from './AuthException';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/common/exceptions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/common/exceptions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/src/common/exceptions/index.js

@@ -0,0 +1,6 @@
+export { BaseException } from './BaseException';
+export { BusinessException } from './BusinessException';
+export { ServiceException } from './ServiceException';
+export { NotFoundException } from './NotFoundException';
+export { AuthException } from './AuthException';
+//# sourceMappingURL=index.js.map

package/dist/src/common/exceptions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/common/exceptions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/src/common/migrate/index.d.ts

@@ -0,0 +1,3 @@
+/** Scans src/migrations/, executes unexecuted .sql files in order. */
+export declare function runMigrations(): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/common/migrate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/common/migrate/index.ts"],"names":[],"mappings":"AA6BA,sEAAsE;AACtE,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAoBnD"}

package/dist/src/common/migrate/index.js

@@ -0,0 +1,49 @@
+import { readdir, readFile } from 'node:fs/promises';
+import { join, extname } from 'node:path';
+import { db } from '../db/index';
+/** Creates the tracking table if it doesn't exist. */
+async function ensureTrackingTable() {
+    await db.execute(`CREATE TABLE IF NOT EXISTS migrations (
+    name VARCHAR(255) NOT NULL,
+    executed_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    PRIMARY KEY (name)
+  ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4`);
+}
+/** Returns the set of file names already recorded as executed. */
+async function executedFiles() {
+    const rows = await db.query('SELECT name FROM migrations');
+    return new Set(rows.map((r) => r.name));
+}
+/** Lists .sql files in alphabetical order. */
+async function sqlFiles(dir) {
+    try {
+        const names = await readdir(dir);
+        return names.filter((n) => extname(n) === '.sql').sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** Scans src/migrations/, executes unexecuted .sql files in order. */
+export async function runMigrations() {
+    const dir = join(process.cwd(), 'src/migrations');
+    const files = await sqlFiles(dir);
+    if (files.length === 0)
+        return;
+    await ensureTrackingTable();
+    const executed = await executedFiles();
+    for (const file of files) {
+        if (executed.has(file))
+            continue;
+        const sql = await readFile(join(dir, file), 'utf-8');
+        const statements = sql
+            .split(';')
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+        for (const stmt of statements) {
+            await db.execute(stmt);
+        }
+        await db.execute('INSERT INTO migrations (name) VALUES (?)', [file]);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/src/common/migrate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/common/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,sDAAsD;AACtD,KAAK,UAAU,mBAAmB;IAChC,MAAM,EAAE,CAAC,OAAO,CAAC;;;;0CAIuB,CAAC,CAAC;AAC5C,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,aAAa;IAC1B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAmB,6BAA6B,CAAC,CAAC;IAC7E,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,8CAA8C;AAC9C,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,GAAG,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAa,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,MAAM,mBAAmB,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAgB,MAAM,aAAa,EAAE,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAW,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAa,GAAG;aAC7B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,CAAC,0CAA0C,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/src/common/redis/index.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyInstance } from 'fastify';
+export declare function initRedis(fastify: FastifyInstance): void;
+export declare const redis: {
+    set(key: string, value: string, ttlSeconds?: number): Promise<void>;
+    get(key: string): Promise<string | null>;
+    del(key: string): Promise<void>;
+    exists(key: string): Promise<boolean>;
+    /**
+     * SET if Not eXists with TTL. Atomic.
+     * @returns true if set (key was new), false if key already existed.
+     */
+    setnx(key: string, value: string, ttlSeconds: number): Promise<boolean>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/src/common/redis/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/common/redis/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAK/C,wBAAgB,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAGxD;AASD,eAAO,MAAM,KAAK;aACD,MAAM,SAAS,MAAM,eAAe,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;aAS1D,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;aAI/B,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;gBAInB,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK3C;;;OAGG;eACc,MAAM,SAAS,MAAM,cAAc,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI9E,CAAC"}

package/dist/src/common/redis/index.js

@@ -0,0 +1,41 @@
+let client = null;
+export function initRedis(fastify) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    client = fastify.redis;
+}
+function assertClient() {
+    if (!client) {
+        throw new Error('Redis not initialized. Did you call initRedis()?');
+    }
+    return client;
+}
+export const redis = {
+    async set(key, value, ttlSeconds) {
+        const c = assertClient();
+        if (ttlSeconds !== undefined) {
+            await c.set(key, value, 'EX', ttlSeconds);
+        }
+        else {
+            await c.set(key, value);
+        }
+    },
+    async get(key) {
+        return assertClient().get(key);
+    },
+    async del(key) {
+        await assertClient().del(key);
+    },
+    async exists(key) {
+        const result = await assertClient().exists(key);
+        return result === 1;
+    },
+    /**
+     * SET if Not eXists with TTL. Atomic.
+     * @returns true if set (key was new), false if key already existed.
+     */
+    async setnx(key, value, ttlSeconds) {
+        const reply = await assertClient().set(key, value, 'EX', ttlSeconds, 'NX');
+        return reply === 'OK';
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/src/common/redis/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/common/redis/index.ts"],"names":[],"mappings":"AAGA,IAAI,MAAM,GAAiB,IAAI,CAAC;AAEhC,MAAM,UAAU,SAAS,CAAC,OAAwB;IAChD,8DAA8D;IAC9D,MAAM,GAAI,OAAe,CAAC,KAAc,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,UAAmB;QACvD,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QACxD,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;CACF,CAAC"}

package/dist/src/common/scanner/auth-factory.d.ts

@@ -0,0 +1,42 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { AuthStrategy } from '../auth/AuthStrategy';
+import type { LoginMeta } from './decorators';
+export type AuthHook = (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+export interface AuthHookMeta {
+    isPublic: boolean;
+    loginMeta?: LoginMeta;
+}
+export interface AuthHookFactoryOptions {
+    signStrategy?: AuthStrategy;
+    loginStrategy?: AuthStrategy;
+}
+export interface AuthHookFactory {
+    /** Returns true if this factory should handle the given auth metadata */
+    accept(meta: AuthHookMeta): boolean;
+    /** Creates preValidation hooks for the route */
+    create(meta: AuthHookMeta, options: AuthHookFactoryOptions): AuthHook[];
+}
+/** Computes auth label string for logging */
+export declare function authLabel(meta: AuthHookMeta): string;
+/** No auth hooks for @Public routes */
+export declare class PublicAuthHookFactory implements AuthHookFactory {
+    accept(meta: AuthHookMeta): boolean;
+    create(): AuthHook[];
+}
+/** HMAC signature only — no module filtering */
+export declare class HmacAuthHookFactory implements AuthHookFactory {
+    accept(meta: AuthHookMeta): boolean;
+    create(_meta: AuthHookMeta, options: AuthHookFactoryOptions): AuthHook[];
+}
+/** HMAC signature + JWT login with module filtering */
+export declare class JwtAuthHookFactory implements AuthHookFactory {
+    accept(meta: AuthHookMeta): boolean;
+    create(meta: AuthHookMeta, options: AuthHookFactoryOptions): AuthHook[];
+}
+/** Registry that holds AuthHookFactory instances and delegates via first-match */
+export declare class AuthHookFactoryRegistry {
+    private factories;
+    register(factory: AuthHookFactory): void;
+    create(meta: AuthHookMeta, options: AuthHookFactoryOptions): AuthHook[];
+}
+//# sourceMappingURL=auth-factory.d.ts.map

package/dist/src/common/scanner/auth-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.d.ts","sourceRoot":"","sources":["../../../../src/common/scanner/auth-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG9C,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEvF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;IACpC,gDAAgD;IAChD,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,GAAG,QAAQ,EAAE,CAAC;CACzE;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAQpD;AAED,uCAAuC;AACvC,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;IAGnC,MAAM,IAAI,QAAQ,EAAE;CAGrB;AAED,gDAAgD;AAChD,qBAAa,mBAAoB,YAAW,eAAe;IACzD,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;IAGnC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,GAAG,QAAQ,EAAE;CAYzE;AAED,uDAAuD;AACvD,qBAAa,kBAAmB,YAAW,eAAe;IACxD,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;IAGnC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,GAAG,QAAQ,EAAE;CA0BxE;AAED,kFAAkF;AAClF,qBAAa,uBAAuB;IAClC,OAAO,CAAC,SAAS,CAAyB;IAE1C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIxC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,GAAG,QAAQ,EAAE;CAQxE"}

package/dist/src/common/scanner/auth-factory.js

@@ -0,0 +1,86 @@
+/** Computes auth label string for logging */
+export function authLabel(meta) {
+    if (meta.isPublic)
+        return 'public';
+    if (meta.loginMeta) {
+        return meta.loginMeta.module
+            ? `HMAC+JWT(${meta.loginMeta.module})`
+            : 'HMAC+JWT';
+    }
+    return 'HMAC';
+}
+/** No auth hooks for @Public routes */
+export class PublicAuthHookFactory {
+    accept(meta) {
+        return meta.isPublic;
+    }
+    create() {
+        return [];
+    }
+}
+/** HMAC signature only — no module filtering */
+export class HmacAuthHookFactory {
+    accept(meta) {
+        return !meta.isPublic && !meta.loginMeta;
+    }
+    create(_meta, options) {
+        const signAuth = options.signStrategy;
+        if (!signAuth) {
+            throw new Error('Route requires signature auth but no signStrategy configured');
+        }
+        return [
+            async (request, reply) => {
+                const user = await signAuth.authenticate(request, reply);
+                request.user = user;
+            },
+        ];
+    }
+}
+/** HMAC signature + JWT login with module filtering */
+export class JwtAuthHookFactory {
+    accept(meta) {
+        return !meta.isPublic && !!meta.loginMeta;
+    }
+    create(meta, options) {
+        const signAuth = options.signStrategy;
+        const loginAuth = options.loginStrategy;
+        if (!signAuth) {
+            throw new Error('Route requires signature auth but no signStrategy configured');
+        }
+        if (!loginAuth) {
+            throw new Error('Route requires login but no loginStrategy configured');
+        }
+        const moduleName = meta.loginMeta?.module;
+        const hooks = [
+            async (request, reply) => {
+                const user = await signAuth.authenticate(request, reply, moduleName);
+                request.user = user;
+            },
+            async (request, reply) => {
+                const user = await loginAuth.authenticate(request, reply, moduleName);
+                const loginMeta = meta.loginMeta;
+                if (loginMeta.module && user.type !== loginMeta.module) {
+                    reply.status(403).send({ error: '权限不足' });
+                }
+                request.user = user;
+            },
+        ];
+        return hooks;
+    }
+}
+/** Registry that holds AuthHookFactory instances and delegates via first-match */
+export class AuthHookFactoryRegistry {
+    factories = [];
+    register(factory) {
+        this.factories.push(factory);
+    }
+    create(meta, options) {
+        for (const factory of this.factories) {
+            if (factory.accept(meta)) {
+                return factory.create(meta, options);
+            }
+        }
+        throw new Error(`No AuthHookFactory found for meta: isPublic=${meta.isPublic}, hasLogin=${!!meta.loginMeta}`);
+    }
+}
+//# sourceMappingURL=auth-factory.js.map

package/dist/src/common/scanner/auth-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-factory.js","sourceRoot":"","sources":["../../../../src/common/scanner/auth-factory.ts"],"names":[],"mappings":"AAwBA,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM;YAC1B,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG;YACtC,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uCAAuC;AACvC,MAAM,OAAO,qBAAqB;IAChC,MAAM,CAAC,IAAkB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,MAAM;QACJ,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,gDAAgD;AAChD,MAAM,OAAO,mBAAmB;IAC9B,MAAM,CAAC,IAAkB;QACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,MAAM,CAAC,KAAmB,EAAE,OAA+B;QACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,OAAO;YACL,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAS,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC9D,OAA2C,CAAC,IAAI,GAAG,IAAI,CAAC;YAC3D,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,OAAO,kBAAkB;IAC7B,MAAM,CAAC,IAAkB;QACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,IAAkB,EAAE,OAA+B;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,UAAU,GAAuB,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QAC9D,MAAM,KAAK,GAAe;YACxB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAS,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC1E,OAA2C,CAAC,IAAI,GAAG,IAAI,CAAC;YAC3D,CAAC;YACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAS,MAAM,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAU,CAAC;gBAClC,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;oBACvD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBACA,OAA2C,CAAC,IAAI,GAAG,IAAI,CAAC;YAC3D,CAAC;SACF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,OAAO,uBAAuB;IAC1B,SAAS,GAAsB,EAAE,CAAC;IAE1C,QAAQ,CAAC,OAAwB;QAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,IAAkB,EAAE,OAA+B;QACxD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,QAAQ,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAChH,CAAC;CACF"}

package/dist/src/common/scanner/decorators.d.ts

@@ -0,0 +1,123 @@
+import 'reflect-metadata';
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { User } from '../../types';
+export declare const CONTROLLER_PREFIX: unique symbol;
+export declare const ROUTES: unique symbol;
+export declare const LOGIN_META: unique symbol;
+export declare const PUBLIC_META: unique symbol;
+export declare const VALID_META: unique symbol;
+export declare const STREAM_META: unique symbol;
+export declare const RPC_META: unique symbol;
+export declare const FILE_META: unique symbol;
+export declare const MULTIPART_META: unique symbol;
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';
+export interface RouteMeta {
+    method: HttpMethod;
+    path: string;
+    handlerName: string;
+}
+export interface LoginMeta {
+    /** Required module (subsystem) that the token must belong to, e.g. 'admin', 'bd'. Checks against user.type. */
+    module?: string;
+}
+export interface ValidMeta {
+    schema: Record<string, unknown>;
+}
+/**
+ * Marks a class as a controller and sets the route prefix.
+ */
+export declare function Controller(prefix: string): ClassDecorator;
+export interface RpcMeta {
+    /** Controller name segment in URL path. Defaults to the exported class name. */
+    name?: string;
+}
+/**
+ * Marks a controller class as RPC-style.
+ *
+ * RPC controllers differ from regular controllers:
+ * - All routes must use POST (JSON body)
+ * - URL must not contain path parameters (e.g. /user/:id)
+ * - Handler methods receive (body, user) instead of (request, reply)
+ * - Routes are auto-derived from module directory, controller name, and method name
+ *
+ * URL pattern: `/{module}/{controller}/{method}`
+ * - Module: folder name under src/modules/, overridable via route.config.ts
+ * - Controller: set via the `name` argument (defaults to class name)
+ * - Method name stays as-is in code
+ *
+ * Does not require @Controller — @Rpc() on its own is sufficient.
+ *
+ * @example
+ * ```ts
+ * @Rpc('users')
+ * class UserRpc {
+ *   list(body: { page: number }, user: User) { ... }
+ *   // → POST /{module}/users/list
+ * }
+ * ```
+ */
+export declare function Rpc(name?: string): ClassDecorator;
+/** RPC handler: receives parsed body and authenticated user */
+export type RpcHandler<B = unknown, R = unknown> = (body: B, user: User) => R;
+/** Normal controller handler: receives Fastify request and reply */
+export type Handler = (request: FastifyRequest, reply: FastifyReply) => unknown;
+export declare const Get: (path: string) => MethodDecorator;
+export declare const Post: (path: string) => MethodDecorator;
+export declare const Put: (path: string) => MethodDecorator;
+export declare const Delete: (path: string) => MethodDecorator;
+/**
+ * Requires login authentication for the route.
+ * Can be used as method decorator (on individual methods) or class decorator
+ * (applies to all methods in the controller, overridable by method-level @Login or @Public).
+ * @param module Required module (subsystem) e.g. 'admin', 'bd', 'merchant'. Checks against user.type in JWT.
+ */
+export declare function Login(module?: string): MethodDecorator & ClassDecorator;
+/**
+ * Explicitly marks a route as public (no authentication).
+ */
+export declare function Public(): MethodDecorator;
+/**
+ * Attaches a JSON Schema for Fastify validation.
+ * @param schema A Fastify route schema object (body/query/params/headers).
+ */
+export declare function Valid(schema: Record<string, unknown>): MethodDecorator;
+/**
+ * Marks a route that streams content as a downloadable file.
+ * The controller method must return `StreamResponse { name, content }`.
+ *
+ * @param description Optional OpenAPI description for the response.
+ */
+export declare function Stream(description?: string): MethodDecorator;
+/**
+ * Response type for stream download endpoints.
+ * @property name - The filename sent to the client (Content-Disposition)
+ * @property content - Raw content as string or Buffer, sent directly
+ */
+export interface StreamResponse {
+    name: string;
+    content: string | Buffer;
+}
+/**
+ * Marks a route that sends a file from the server filesystem as download.
+ * The controller method must return `FileResponse { name, path }`.
+ * The framework reads the file at `path` and sends it with the given filename.
+ *
+ * @param description Optional OpenAPI description for the response.
+ */
+export declare function File(description?: string): MethodDecorator;
+/**
+ * Response type for file download endpoints.
+ * @property name - The filename sent to the client (Content-Disposition)
+ * @property path - Absolute path on the server filesystem
+ */
+export interface FileResponse {
+    name: string;
+    path: string;
+}
+/**
+ * Marks a route that handles multipart/form-data file upload.
+ * No @Body is required — the file cannot be validated as JSON Schema.
+ * This is a pure marker; the framework does not attach any runtime behavior.
+ */
+export declare function Multipart(): MethodDecorator;
+//# sourceMappingURL=decorators.d.ts.map

package/dist/src/common/scanner/decorators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorators.d.ts","sourceRoot":"","sources":["../../../../src/common/scanner/decorators.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGxC,eAAO,MAAM,iBAAiB,eAA8B,CAAC;AAC7D,eAAO,MAAM,MAAM,eAA8B,CAAC;AAClD,eAAO,MAAM,UAAU,eAAwB,CAAC;AAChD,eAAO,MAAM,WAAW,eAAyB,CAAC;AAClD,eAAO,MAAM,UAAU,eAAwB,CAAC;AAChD,eAAO,MAAM,WAAW,eAAyB,CAAC;AAClD,eAAO,MAAM,QAAQ,eAA2B,CAAC;AACjD,eAAO,MAAM,SAAS,eAAuB,CAAC;AAC9C,eAAO,MAAM,cAAc,eAA4B,CAAC;AAExD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAG3D,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAIzD;AAED,MAAM,WAAW,OAAO;IACtB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAKjD;AAED,+DAA+D;AAC/D,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC;AAE9E,oEAAoE;AACpE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;AAahF,eAAO,MAAM,GAAG,SAVA,MAAM,KAAG,eAUqB,CAAC;AAC/C,eAAO,MAAM,IAAI,SAXD,MAAM,KAAG,eAWuB,CAAC;AACjD,eAAO,MAAM,GAAG,SAZA,MAAM,KAAG,eAYqB,CAAC;AAC/C,eAAO,MAAM,MAAM,SAbH,MAAM,KAAG,eAa2B,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,eAAe,GAAG,cAAc,CAUvE;AAED;;GAEG;AACH,wBAAgB,MAAM,IAAI,eAAe,CAIxC;AAED;;;GAGG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAMtE;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,eAAe,CAsB5D;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,eAAe,CAsB1D;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,eAAe,CAI3C"}