flowingts 0.0.0 → 0.19.0

package/dist/core/registry/framework-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-routes.d.ts","sourceRoot":"","sources":["../../../src/core/registry/framework-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAA6B,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5B,CAAC;AAEF,oFAAoF;AACpF,qBAAa,eAAe;IAKxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;IAEnC,YACmB,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,aAAa,EACtC;IAEJ,0GAA0G;IAC1G,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAShE;IAED,2GAA2G;IAC3G,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAiBzF;IAED,qGAAqG;IAC/F,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAiCjD;CACF"}

package/dist/core/registry/framework-routes.js

@@ -0,0 +1,83 @@
+import { randomBytes } from 'node:crypto';
+import { compose } from '../compose.js';
+import { kRawSend } from '../symbols.js';
+import { docsPage, generateOpenAPI } from '../../openapi/generate.js';
+import { canonicalPath } from '../../utils/path.js';
+/** Rotas servidas pelo próprio app: healthchecks e OpenAPI (documento e página). */
+export class FrameworkRoutes {
+    core;
+    registry;
+    health;
+    openapi;
+    constructor(core, registry) {
+        this.core = core;
+        this.registry = registry;
+    }
+    /** Paths servidos pelo próprio app (`health()`, `openapi()`), que encobririam uma rota GET do usuário. */
+    reservedPaths(except) {
+        const out = new Map();
+        if (except !== 'health')
+            for (const p of this.health?.paths ?? [])
+                out.set(p, 'app.health()');
+        const cfg = this.openapi;
+        if (cfg && except !== 'openapi') {
+            out.set(canonicalPath(cfg.path), 'app.openapi()');
+            if (cfg.docs)
+                out.set(canonicalPath(cfg.docs), 'app.openapi({ docs })');
+        }
+        return out;
+    }
+    /** Um path do framework não pode coincidir com uma rota GET/HEAD registrada nem com outro do framework. */
+    assertFreePaths(where, paths, kind) {
+        // `health()`/`openapi()` configuram o app, não o grupo: dentro de um `group()` em andamento, a
+        // configuração sobreviveria a um grupo desfeito e não enxergaria as rotas ainda pendentes.
+        if (this.registry.pending !== undefined) {
+            throw new Error(`[flowing] ${where}: cannot be called inside an app.group() callback; call it on the app, outside the group.`);
+        }
+        const reserved = this.reservedPaths(kind);
+        for (const path of paths) {
+            const other = reserved.get(path);
+            if (other)
+                throw new Error(`[flowing] ${where}: path "${path}" is already used by ${other}.`);
+            const route = this.registry.routes.find((r) => (r.method === 'GET' || r.method === 'HEAD') && canonicalPath(r.path) === path);
+            if (route) {
+                throw new Error(`[flowing] ${where}: path "${path}" would shadow ${route.owner}.${route.handlerName} (GET ${route.path}); choose another path.`);
+            }
+        }
+    }
+    /** Se a requisição é para `/openapi.json` ou `/docs` (quando ligados), responde e devolve `true`. */
+    async serveOpenAPI(ctx) {
+        const cfg = this.openapi;
+        if (!cfg || (ctx.method !== 'GET' && ctx.method !== 'HEAD'))
+            return false;
+        const path = canonicalPath(ctx.path);
+        const isSpec = path === canonicalPath(cfg.path);
+        if (!isSpec && !(cfg.docs && path === canonicalPath(cfg.docs)))
+            return false;
+        await compose(ctx, [
+            ...cfg.pipeline,
+            () => {
+                if (isSpec) {
+                    // Um documento por conjunto de rotas visíveis no host da requisição (F-35); a chave não usa o
+                    // hostname em si, então hosts arbitrários não fazem o cache crescer.
+                    const visible = this.registry.routesFor(ctx.hostname.toLowerCase());
+                    const key = visible.map((r) => this.registry.routes.indexOf(r)).join(',');
+                    let doc = cfg.cache.get(key);
+                    if (doc === undefined) {
+                        doc = JSON.stringify(generateOpenAPI(visible, cfg.opts, !this.core.opts.formatError, (s) => this.core.contracts.toJsonSchema(s)));
+                        cfg.cache.set(key, doc);
+                    }
+                    ctx[kRawSend](doc, 'application/json; charset=utf-8');
+                    return;
+                }
+                const nonce = randomBytes(16).toString('base64');
+                const { html, csp } = docsPage(cfg.path, cfg.opts.info?.title ?? 'API', nonce);
+                ctx.res.setHeader('Content-Security-Policy', csp);
+                ctx.res.setHeader('Cache-Control', 'no-store');
+                ctx[kRawSend](html, 'text/html; charset=utf-8');
+            },
+        ]);
+        return true;
+    }
+}
+//# sourceMappingURL=framework-routes.js.map

package/dist/core/registry/framework-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-routes.js","sourceRoot":"","sources":["../../../src/core/registry/framework-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAmB,MAAM,eAAe,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAuB,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAWpD,oFAAoF;AACpF,MAAM,OAAO,eAAe;IAKP,IAAI;IACJ,QAAQ;IAL3B,MAAM,CAA2B;IACjC,OAAO,CAA4B;IAEnC,YACmB,IAAa,EACb,QAAuB;oBADvB,IAAI;wBACJ,QAAQ;IACxB,CAAC;IAEJ,0GAA0G;IAC1G,aAAa,CAAC,MAA6B;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,IAAI,MAAM,KAAK,QAAQ;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,IAAI,GAAG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2GAA2G;IAC3G,eAAe,CAAC,KAAa,EAAE,KAAwB,EAAE,IAA0B;QACjF,+FAA+F;QAC/F,2FAA2F;QAC3F,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,2FAA2F,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,WAAW,IAAI,wBAAwB,KAAK,GAAG,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAC9H,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,WAAW,IAAI,kBAAkB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,SAAS,KAAK,CAAC,IAAI,yBAAyB,CAChI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,YAAY,CAAC,GAAY;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1E,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,KAAK,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7E,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,GAAG,GAAG,CAAC,QAAQ;YACf,GAAG,EAAE;gBACH,IAAI,MAAM,EAAE,CAAC;oBACX,8FAA8F;oBAC9F,qEAAqE;oBACrE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC1E,IAAI,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;wBACtB,GAAG,GAAG,IAAI,CAAC,SAAS,CAClB,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAC5G,CAAC;wBACF,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC1B,CAAC;oBACD,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;oBACtD,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/E,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;YAClD,CAAC;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/registry/registry.d.ts

@@ -0,0 +1,58 @@
+import type { AppCore } from '../app/core.ts';
+import type { CompiledRoute } from '../compiler.ts';
+import { RouteTable } from '../route-table.ts';
+/** Uma rota validada e ainda não registrada (registro em duas fases). */
+export interface PendingRoute {
+    owner: string;
+    route: CompiledRoute;
+    hosts: (string | undefined)[];
+}
+/**
+ * Registro de rotas em duas fases (F-35): `stage()` valida tudo contra o roteador e contra o próprio lote,
+ * `commit()` registra e desfaz se algo falhar. Também sabe quais rotas responderiam num host (`routesFor`).
+ */
+export declare class RouteRegistry {
+    private readonly core;
+    /** Paths servidos pelo próprio app (health, openapi), que uma rota GET não pode encobrir. */
+    private readonly reservedPaths;
+    /** Chamado depois de cada commit com rotas (invalida o cache do OpenAPI). */
+    private readonly onCommit;
+    readonly router: RouteTable;
+    readonly routes: CompiledRoute[];
+    /** Registros pendentes de um `group()` em andamento. */
+    pending: PendingRoute[] | undefined;
+    private readonly warnedHosts;
+    constructor(core: AppCore, 
+    /** Paths servidos pelo próprio app (health, openapi), que uma rota GET não pode encobrir. */
+    reservedPaths: () => Map<string, string>, 
+    /** Chamado depois de cada commit com rotas (invalida o cache do OpenAPI). */
+    onCommit: () => void);
+    /**
+     * Primeira fase: valida as rotas (schemas obrigatórios, hosts alcançáveis, conflitos com o roteador e
+     * dentro do próprio lote). Dentro de um `group()`, acumula; fora, efetiva na hora.
+     */
+    stage(owner: string, routes: readonly CompiledRoute[]): void;
+    /**
+     * Segunda fase: registra o lote no roteador. Se algo ainda falhar (um conflito que o `has()` não prevê),
+     * desfaz o que já entrou, e nenhuma rota do lote fica registrada.
+     */
+    commit(batch: readonly PendingRoute[]): void;
+    /**
+     * Sem mistura de motores (F-27): todo schema da rota precisa ser do motor de contratos do app. Um schema TypeBox num
+     * app com `contracts.standard()` (ou um Zod no nativo) falharia em silêncio na validação; aqui o erro é no registro.
+     */
+    private checkContracts;
+    /**
+     * Um host de rota sem interseção com o `allowedHosts` nunca seria alcançado: o app responde 400 antes do
+     * roteamento (F-35). Comprovado: erro (ou aviso, com `unreachableHosts: 'warn'`). Sem como provar
+     * (RegExp em algum dos lados): aviso.
+     */
+    private checkReachableHosts;
+    /**
+     * Rotas que o roteador **executaria** num host (F-35): para cada método e path, só a vencedora pela mesma
+     * prioridade do roteador (exato → curinga mais específico → RegExp → sem host). Assim o OpenAPI documenta
+     * exatamente o handler que responde. Sem `hostname`, só as rotas sem host.
+     */
+    routesFor(hostname: string | undefined): CompiledRoute[];
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/registry/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/core/registry/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAkB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA0B/D,yEAAyE;AACzE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,qBAAa,aAAa;IAQtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,6FAA6F;IAC7F,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAX3B,QAAQ,CAAC,MAAM,aAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM;IACtC,wDAAwD;IACxD,OAAO,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IAEjD,YACmB,IAAI,EAAE,OAAO;IAC9B,6FAA6F;IAC5E,aAAa,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IACzD,6EAA6E;IAC5D,QAAQ,EAAE,MAAM,IAAI,EACnC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CAwC3D;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CA0B3C;IAED;;;OAGG;IACH,OAAO,CAAC,cAAc;IAsBtB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,EAAE,CAkBvD;CACF"}

package/dist/core/registry/registry.js

@@ -0,0 +1,208 @@
+import { uploadPlan } from '../uploads/receive.js';
+import { assertSchemas } from '../request-validation.js';
+import { RouteTable } from '../route-table.js';
+import { buildRouteProgram } from './route-program.js';
+import { hostRank, hostReachability, NO_HOST_RANK } from '../../utils/origin-match.js';
+import { canonicalPath } from '../../utils/path.js';
+import { kHooks } from '../symbols.js';
+import { isResponseContent } from '../metadata.js';
+/**
+ * O objeto guardado no roteador para um host: herda tudo da rota (inclusive o programa) e acrescenta o
+ * `RouteInfo` daquele host, para o `ctx.route` dizer qual regra venceu sem trabalho por requisição.
+ */
+function withInfo(route, hostKey) {
+    const label = hostKey === undefined ? undefined : route.hosts.find((h) => h.key === hostKey)?.label;
+    const info = {
+        method: route.method,
+        path: route.path,
+        owner: route.owner,
+        handler: route.handlerName,
+        ...(label === undefined ? {} : { host: label }),
+    };
+    // Não enumerável: fora do JSON e do `ctx.route` que o usuário inspeciona.
+    if (route.hooks)
+        Object.defineProperty(info, kHooks, { value: route.hooks });
+    Object.freeze(info);
+    return Object.create(route, { info: { value: info } });
+}
+/**
+ * Registro de rotas em duas fases (F-35): `stage()` valida tudo contra o roteador e contra o próprio lote,
+ * `commit()` registra e desfaz se algo falhar. Também sabe quais rotas responderiam num host (`routesFor`).
+ */
+export class RouteRegistry {
+    core;
+    reservedPaths;
+    onCommit;
+    router = new RouteTable();
+    routes = [];
+    /** Registros pendentes de um `group()` em andamento. */
+    pending;
+    warnedHosts = new Set();
+    constructor(core, 
+    /** Paths servidos pelo próprio app (health, openapi), que uma rota GET não pode encobrir. */
+    reservedPaths, 
+    /** Chamado depois de cada commit com rotas (invalida o cache do OpenAPI). */
+    onCommit) {
+        this.core = core;
+        this.reservedPaths = reservedPaths;
+        this.onCommit = onCommit;
+    }
+    /**
+     * Primeira fase: valida as rotas (schemas obrigatórios, hosts alcançáveis, conflitos com o roteador e
+     * dentro do próprio lote). Dentro de um `group()`, acumula; fora, efetiva na hora.
+     */
+    stage(owner, routes) {
+        const batch = this.pending ?? [];
+        // Checkpoint: dentro de um group(), um mount() que falha no meio não deixa parte dele no lote,
+        // mesmo que o callback capture o erro e siga em frente.
+        const mark = batch.length;
+        try {
+            for (const route of routes) {
+                // Rotas internas (static) não têm schema por natureza: o requireSchemas vale para as da aplicação.
+                if (this.core.opts.requireSchemas && !route.internal)
+                    assertSchemas(owner, route);
+                this.checkContracts(owner, route);
+                if (route.method === 'GET' || route.method === 'HEAD') {
+                    const reservedBy = this.reservedPaths().get(canonicalPath(route.path));
+                    if (reservedBy) {
+                        throw new Error(`[flowing] app.mount(${owner}): GET ${route.path} is served by ${reservedBy} and would never be reached; choose another path.`);
+                    }
+                }
+                this.checkReachableHosts(owner, route);
+                for (const host of route.hosts.length > 0 ? route.hosts.map((h) => h.key) : [undefined]) {
+                    const taken = this.router.has(route.method, route.path, host) ||
+                        batch.some((p) => p.route.method === route.method && canonicalPath(p.route.path) === canonicalPath(route.path) && p.hosts.includes(host));
+                    if (taken) {
+                        const where = host ? ` on host ${host}` : '';
+                        throw new Error(`[flowing] app.mount(${owner}): ${route.method} ${route.path}${where} is already registered. ` +
+                            `Use a different "prefix" or "host" to mount the same class twice.`);
+                    }
+                }
+                batch.push({ owner, route, hosts: route.hosts.length > 0 ? route.hosts.map((h) => h.key) : [undefined] });
+            }
+        }
+        catch (err) {
+            batch.length = mark;
+            throw err;
+        }
+        if (this.pending === undefined)
+            this.commit(batch);
+    }
+    /**
+     * Segunda fase: registra o lote no roteador. Se algo ainda falhar (um conflito que o `has()` não prevê),
+     * desfaz o que já entrou, e nenhuma rota do lote fica registrada.
+     */
+    commit(batch) {
+        const done = [];
+        try {
+            for (const { owner, route, hosts } of batch) {
+                route.run ??= buildRouteProgram(route, this.core.serializers, this.core.uploads);
+                for (const host of hosts) {
+                    try {
+                        this.router.on(route.method, route.path, withInfo(route, host), host);
+                    }
+                    catch (err) {
+                        throw new Error(`[flowing] app.mount(${owner}): ${route.method} ${route.path} conflicts with a registered route.`, {
+                            cause: err,
+                        });
+                    }
+                    done.push({ method: route.method, path: route.path, host });
+                }
+            }
+        }
+        catch (err) {
+            for (const r of done.reverse())
+                this.router.off(r.method, r.path, r.host);
+            throw err;
+        }
+        for (const { route } of batch) {
+            this.routes.push(route);
+            // O observer só liga a observação do fim se algum hook (global ou de rota) precisar dela.
+            if (route.hooks?.onResponse.length)
+                this.core.scopedOnResponse++;
+        }
+        if (batch.length > 0)
+            this.onCommit();
+    }
+    /**
+     * Sem mistura de motores (F-27): todo schema da rota precisa ser do motor de contratos do app. Um schema TypeBox num
+     * app com `contracts.standard()` (ou um Zod no nativo) falharia em silêncio na validação; aqui o erro é no registro.
+     */
+    checkContracts(owner, route) {
+        const engine = this.core.contracts;
+        const { response, files, ...input } = route.schemas;
+        // Valida as regras de arquivo no registro: uma rota que amplia um limite global falha aqui (F-46).
+        if (files)
+            uploadPlan(files, this.core.uploads, `app.mount(${owner}): ${route.method} ${route.path}`);
+        const parts = Object.entries(input).filter(([, s]) => s !== undefined);
+        for (const [status, entry] of Object.entries(response ?? {})) {
+            const schema = isResponseContent(entry) ? entry.schema : entry;
+            if (schema !== undefined)
+                parts.push([`response ${status}`, schema]);
+        }
+        for (const [part, schema] of parts) {
+            if (engine.owns(schema))
+                continue;
+            const hint = engine.kind === 'native'
+                ? 'it looks like a Standard Schema (Zod, Valibot, ArkType); use createApp({ contracts: contracts.standard() })'
+                : 'it is not a Standard Schema; with contracts.standard(), every schema must be one (Zod, Valibot, ArkType)';
+            throw new Error(`[flowing] app.mount(${owner}): ${route.method} ${route.path}: the ${part} schema does not match the app's contracts: ${hint}.`);
+        }
+    }
+    /**
+     * Um host de rota sem interseção com o `allowedHosts` nunca seria alcançado: o app responde 400 antes do
+     * roteamento (F-35). Comprovado: erro (ou aviso, com `unreachableHosts: 'warn'`). Sem como provar
+     * (RegExp em algum dos lados): aviso.
+     */
+    checkReachableHosts(owner, route) {
+        const mode = this.core.opts.unreachableHosts ?? 'error';
+        const allowed = this.core.opts.allowedHosts;
+        if (mode === 'off' || !allowed)
+            return;
+        for (const host of route.hosts) {
+            const verdict = hostReachability(host, allowed);
+            if (verdict === 'yes')
+                continue;
+            const where = `app.mount(${owner}): ${route.method} ${route.path} uses host ${host.label}`;
+            if (verdict === 'no' && mode === 'error') {
+                throw new Error(`[flowing] ${where}, which no allowedHosts rule accepts; the route is unreachable. Add it to allowedHosts, or set unreachableHosts: 'warn'.`);
+            }
+            const key = `${owner} ${host.key}`;
+            if (this.warnedHosts.has(key))
+                continue;
+            this.warnedHosts.add(key);
+            this.core.log.warn({ host: host.label }, verdict === 'no'
+                ? `[flowing] ${where}, which no allowedHosts rule accepts; the route is unreachable.`
+                : `[flowing] ${where}; could not verify it against allowedHosts (RegExp).`);
+        }
+    }
+    /**
+     * Rotas que o roteador **executaria** num host (F-35): para cada método e path, só a vencedora pela mesma
+     * prioridade do roteador (exato → curinga mais específico → RegExp → sem host). Assim o OpenAPI documenta
+     * exatamente o handler que responde. Sem `hostname`, só as rotas sem host.
+     */
+    routesFor(hostname) {
+        const best = new Map();
+        for (const [seq, route] of this.routes.entries()) {
+            let rank = route.hosts.length === 0 ? NO_HOST_RANK : -1;
+            if (rank === -1 && hostname !== undefined) {
+                for (const h of route.hosts) {
+                    if (!h.test(hostname))
+                        continue;
+                    // Desempate pela ordem de registro, a mesma que o roteador usa em cada path.
+                    const r = hostRank(h, seq);
+                    if (rank === -1 || r < rank)
+                        rank = r;
+                }
+            }
+            if (rank === -1)
+                continue;
+            const key = `${route.method} ${canonicalPath(route.path)}`;
+            const current = best.get(key);
+            if (!current || rank < current.rank)
+                best.set(key, { route, rank });
+        }
+        return this.routes.filter((r) => best.get(`${r.method} ${canonicalPath(r.path)}`)?.route === r);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/registry/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/core/registry/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAkB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAoB,EAAE,OAA2B;IACjE,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC;IACpG,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KACnC,CAAC;IACf,0EAA0E;IAC1E,IAAI,KAAK,CAAC,KAAK;QAAE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAkB,CAAC;AAC1E,CAAC;AASD;;;GAGG;AACH,MAAM,OAAO,aAAa;IAQL,IAAI;IAEJ,aAAa;IAEb,QAAQ;IAXlB,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAC1B,MAAM,GAAoB,EAAE,CAAC;IACtC,wDAAwD;IACxD,OAAO,CAA6B;IACnB,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjD,YACmB,IAAa;IAC9B,6FAA6F;IAC5E,aAAwC;IACzD,6EAA6E;IAC5D,QAAoB;oBAJpB,IAAI;6BAEJ,aAAa;wBAEb,QAAQ;IACxB,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,KAAa,EAAE,MAAgC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACjC,+FAA+F;QAC/F,wDAAwD;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,mGAAmG;gBACnG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAAE,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAClF,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBACvE,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,UAAU,KAAK,CAAC,IAAI,iBAAiB,UAAU,mDAAmD,CAC/H,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxF,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;wBAC/C,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC9H,CAAC;oBACJ,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7C,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK,0BAA0B;4BAC5F,mEAAmE,CACtE,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAA8B;QACnC,MAAM,IAAI,GAAiE,EAAE,CAAC;QAC9E,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;gBAC3C,KAA2C,CAAC,GAAG,KAAK,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;oBACxE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,qCAAqC,EAAE;4BACjH,KAAK,EAAE,GAAG;yBACX,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,0FAA0F;YAC1F,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,KAAa,EAAE,KAAoB;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QACpD,mGAAmG;QACnG,IAAI,KAAK;YAAE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,KAAK,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtG,MAAM,KAAK,GAAwB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAClC,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,QAAQ;gBACtB,CAAC,CAAC,6GAA6G;gBAC/G,CAAC,CAAC,0GAA0G,CAAC;YACjH,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,+CAA+C,IAAI,GAAG,CAChI,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,KAAa,EAAE,KAAoB;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QAC5C,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,KAAK;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,aAAa,KAAK,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3F,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,0HAA0H,CAC7I,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChB,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EACpB,OAAO,KAAK,IAAI;gBACd,CAAC,CAAC,aAAa,KAAK,iEAAiE;gBACrF,CAAC,CAAC,aAAa,KAAK,sDAAsD,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,QAA4B;QACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkD,CAAC;QACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAC5B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAChC,6EAA6E;oBAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC3B,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI;wBAAE,IAAI,GAAG,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,OAAO,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC;CACF"}

package/dist/core/registry/route-program.d.ts

@@ -0,0 +1,16 @@
+import { type Step } from '../compose.ts';
+import type { Context } from '../context.ts';
+import { type Serializer } from '../response/pipeline.ts';
+import type { RouteDefinition } from '../route-table.ts';
+import { type UploadSettings } from '../uploads/receive.ts';
+/** A função completa de uma rota, montada uma vez no registro. */
+export type RouteProgram = (ctx: Context) => Step;
+/**
+ * Builder (F-39): monta, no registro, o programa de cada rota. Antes, a cada requisição, o app criava o
+ * array do pipeline, o middleware de guards, a closure final e o objeto de resposta.
+ *
+ * Ordem (F-01): middlewares da rota → guards → validação → handler → resposta. Os guards vêm antes da
+ * validação, para quem não tem acesso receber 401/403, e não um 400 que revele o formato esperado.
+ */
+export declare function buildRouteProgram(route: RouteDefinition, serializers: ReadonlyMap<string, Serializer>, uploads: UploadSettings): RouteProgram;
+//# sourceMappingURL=route-program.d.ts.map

package/dist/core/registry/route-program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-program.d.ts","sourceRoot":"","sources":["../../../src/core/registry/route-program.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,IAAI,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EAA4B,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAmC,KAAK,cAAc,EAAc,MAAM,uBAAuB,CAAC;AAEzG,kEAAkE;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5C,OAAO,EAAE,cAAc,GACtB,YAAY,CA4Cd"}

package/dist/core/registry/route-program.js

@@ -0,0 +1,62 @@
+import { compileChain, isPromiseLike } from '../compose.js';
+import { guardsMiddleware } from '../guard.js';
+import { validateRequest } from '../request-validation.js';
+import { responsePlan, sendResult } from '../response/pipeline.js';
+import { kBindResponse, kFiles, kPendingSend, kPhase } from '../symbols.js';
+import { receiveUploads, uploadPlan } from '../uploads/receive.js';
+/**
+ * Builder (F-39): monta, no registro, o programa de cada rota. Antes, a cada requisição, o app criava o
+ * array do pipeline, o middleware de guards, a closure final e o objeto de resposta.
+ *
+ * Ordem (F-01): middlewares da rota → guards → validação → handler → resposta. Os guards vêm antes da
+ * validação, para quem não tem acesso receber 401/403, e não um 400 que revele o formato esperado.
+ */
+export function buildRouteProgram(route, serializers, uploads) {
+    const { schemas, handler } = route;
+    // Só rotas com `files` pagam pelo upload (F-46); as demais seguem o caminho de sempre.
+    const upload = schemas.files ? uploadPlan(schemas.files, uploads, 'route') : undefined;
+    const plan = responsePlan(schemas.response, serializers);
+    const send = (ctx, result) => {
+        ctx[kPhase] = 'response';
+        if (!ctx.sent)
+            sendResult(ctx, plan.response, result, plan.serializers, 'auto', plan.defaultStatus);
+    };
+    const finish = (ctx, result) => {
+        // Um sendFile() sem await no handler: espera o envio pendente antes de responder.
+        const pending = ctx[kPendingSend];
+        if (pending)
+            return pending.then(() => send(ctx, result));
+        send(ctx, result);
+        return undefined;
+    };
+    // Síncrono quando o handler é síncrono: Promise só se o handler devolver uma (F-41).
+    const terminal = (ctx) => {
+        ctx[kPhase] = 'validation';
+        // Assíncrona só com um schema de validação assíncrona (Standard Schema); o nativo é sempre síncrono.
+        if (upload)
+            return receive(ctx, upload);
+        const validating = validateRequest(ctx, schemas);
+        return validating ? resume(validating, ctx) : run(ctx);
+    };
+    // Upload (F-46): recebe e confere os arquivos, põe os campos de texto no body e só então valida o contrato.
+    const receive = (ctx, plan) => receiveUploads(ctx, plan).then((received) => {
+        ctx.body = received.fields;
+        ctx[kFiles] = received.files;
+        const validating = validateRequest(ctx, schemas);
+        return validating ? resume(validating, ctx) : run(ctx);
+    });
+    // Separado do `terminal`: um callback ali capturaria o `ctx` e o V8 alocaria um contexto em toda requisição (F-41).
+    const resume = (validating, ctx) => validating.then(() => run(ctx));
+    const run = (ctx) => {
+        // F-32: a partir daqui, ctx.json/send/text passam pelo mesmo pipeline do `return`.
+        ctx[kBindResponse](plan);
+        ctx[kPhase] = 'handler';
+        const result = handler(ctx);
+        if (isPromiseLike(result))
+            return Promise.resolve(result).then((value) => finish(ctx, value));
+        return finish(ctx, result);
+    };
+    const layers = route.guards.length > 0 ? [...route.middlewares, guardsMiddleware(route.guards)] : route.middlewares;
+    return layers.length === 0 ? terminal : compileChain(layers, terminal);
+}
+//# sourceMappingURL=route-program.js.map

package/dist/core/registry/route-program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-program.js","sourceRoot":"","sources":["../../../src/core/registry/route-program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAa,MAAM,eAAe,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAmB,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAwC,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAKzG;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,WAA4C,EAC5C,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACnC,uFAAuF;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,MAAe,EAAQ,EAAE;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACtG,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,MAAe,EAAQ,EAAE;QACrD,kFAAkF;QAClF,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,qFAAqF;IACrF,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAQ,EAAE;QACtC,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC;QAC3B,qGAAqG;QACrG,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,4GAA4G;IAC5G,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,IAAgB,EAAiB,EAAE,CAChE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1C,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAe,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACL,oHAAoH;IACpH,MAAM,MAAM,GAAG,CAAC,UAAyB,EAAE,GAAY,EAAiB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3G,MAAM,GAAG,GAAG,CAAC,GAAY,EAAQ,EAAE;QACjC,mFAAmF;QACnF,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9F,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IACpH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC"}

package/dist/core/request-validation.d.ts

@@ -0,0 +1,15 @@
+import type { Context } from './context.ts';
+import type { RouteSchemas } from './metadata.ts';
+/** Valida cada parte da requisição que tiver schema; o primeiro erro vira 400 com detalhes (B-02/B-03). */
+/**
+ * Valida headers, params, query e body pelo motor dos contratos do app (F-27), nessa ordem. Síncrono no motor nativo;
+ * com Standard Schema, vira assíncrono só quando um schema valida de forma assíncrona. O valor validado substitui
+ * `ctx.params`, `ctx.query` e `ctx.body` (o motor pode converter e aplicar padrões); os headers não são trocados.
+ */
+export declare function validateRequest(ctx: Context, schemas: RouteSchemas): Promise<void> | undefined;
+export declare function assertSchemas(owner: string, route: {
+    method: string;
+    path: string;
+    schemas: RouteSchemas;
+}): void;
+//# sourceMappingURL=request-validation.d.ts.map

package/dist/core/request-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-validation.d.ts","sourceRoot":"","sources":["../../src/core/request-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAclD,2GAA2G;AAC3G;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAE9F;AAoCD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAQjH"}

package/dist/core/request-validation.js

@@ -0,0 +1,67 @@
+import { HttpError } from './errors.js';
+import { isPromiseLike } from './compose.js';
+import { kContracts, kFiles } from './symbols.js';
+const VALIDATION_ORDER = ['headers', 'params', 'query', 'body'];
+const TARGET_LABEL = {
+    headers: 'Invalid headers',
+    params: 'Invalid params',
+    query: 'Invalid query',
+    body: 'Invalid body',
+};
+/** Valida cada parte da requisição que tiver schema; o primeiro erro vira 400 com detalhes (B-02/B-03). */
+/**
+ * Valida headers, params, query e body pelo motor dos contratos do app (F-27), nessa ordem. Síncrono no motor nativo;
+ * com Standard Schema, vira assíncrono só quando um schema valida de forma assíncrona. O valor validado substitui
+ * `ctx.params`, `ctx.query` e `ctx.body` (o motor pode converter e aplicar padrões); os headers não são trocados.
+ */
+export function validateRequest(ctx, schemas) {
+    return validateFrom(ctx, schemas, 0);
+}
+function validateFrom(ctx, schemas, start) {
+    const engine = ctx[kContracts];
+    for (let i = start; i < VALIDATION_ORDER.length; i++) {
+        const target = VALIDATION_ORDER[i];
+        const schema = schemas[target];
+        if (!schema)
+            continue;
+        const data = target === 'headers' ? { ...ctx.req.headers } : ctx[target];
+        // Body de formulário (F-46): tudo chega como texto, então valida com coerção, como a query.
+        const result = engine.check(schema, data, target === 'body' && ctx[kFiles] !== undefined ? 'query' : target);
+        if (isPromiseLike(result))
+            return resumeAsync(ctx, schemas, i, data, result);
+        apply(ctx, target, data, result);
+    }
+    return undefined;
+}
+/**
+ * O resto da validação depois de um schema assíncrono. Fica fora do laço de propósito: um callback que captura
+ * variáveis do laço faria o V8 alocar um contexto em toda requisição, mesmo no caminho síncrono (F-41).
+ */
+function resumeAsync(ctx, schemas, i, data, pending) {
+    return Promise.resolve(pending).then((r) => {
+        apply(ctx, VALIDATION_ORDER[i], data, r);
+        return validateFrom(ctx, schemas, i + 1);
+    });
+}
+function apply(ctx, target, data, result) {
+    if (!result.ok)
+        throw new HttpError(400, TARGET_LABEL[target], 'VALIDATION_ERROR', { details: result.issues });
+    if (target === 'headers' || result.value === data)
+        return;
+    if (target === 'body')
+        ctx.body = result.value;
+    else if (target === 'query')
+        ctx.query = result.value;
+    else
+        ctx.params = result.value;
+}
+export function assertSchemas(owner, route) {
+    const where = `${owner}: ${route.method} ${route.path}`;
+    if (['POST', 'PUT', 'PATCH'].includes(route.method) && !route.schemas.body && !route.schemas.files) {
+        throw new Error(`[flowing] requireSchemas: ${where} has no body schema.`);
+    }
+    if (!route.schemas.response || Object.keys(route.schemas.response).length === 0) {
+        throw new Error(`[flowing] requireSchemas: ${where} has no response schema.`);
+    }
+}
+//# sourceMappingURL=request-validation.js.map

package/dist/core/request-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-validation.js","sourceRoot":"","sources":["../../src/core/request-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,gBAAgB,GAAgC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC7F,MAAM,YAAY,GAAqC;IACrD,OAAO,EAAE,iBAAiB;IAC1B,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF,2GAA2G;AAC3G;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,OAAqB;IACjE,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,OAAqB,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzE,4FAA4F;QAC5F,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7G,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7E,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAY,EAAE,OAAqB,EAAE,CAAS,EAAE,IAAa,EAAE,OAAiC;IACnH,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,GAAY,EAAE,MAAwB,EAAE,IAAa,EAAE,MAAmB;IACvF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/G,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO;IAC1D,IAAI,MAAM,KAAK,MAAM;QAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;SAC1C,IAAI,MAAM,KAAK,OAAO;QAAG,GAA0B,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;;QACxE,GAA2B,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,KAA8D;IACzG,MAAM,KAAK,GAAG,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,sBAAsB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,0BAA0B,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/core/response/pipeline.d.ts

@@ -0,0 +1,51 @@
+import type { Context } from '../context.ts';
+import { type ErrorFormatter, type ProblemDetails } from '../errors.ts';
+import { type RouteSchemas } from '../metadata.ts';
+/** Converte dados num corpo de resposta para um content type (F-31). */
+export type Serializer = (data: unknown) => string | Uint8Array;
+/**
+ * Como o corpo chegou ao pipeline (F-32): `auto` (`return` e `ctx.send()`), `json` (`ctx.json()`,
+ * sempre JSON) ou `text` (`ctx.text()`, sempre texto).
+ */
+export type SendMode = 'auto' | 'json' | 'text';
+/**
+ * Envia o retorno do handler.
+ *
+ * Status (B-05): sem `ctx.status()` e com um único 2xx declarado, esse 2xx vira o padrão. Com schemas
+ * de resposta declarados, um status sem schema correspondente vira 500 em vez de enviar o objeto
+ * sem filtro (S-07). Respostas sem corpo (`undefined`) dispensam schema.
+ *
+ * Content type (F-31), em ordem de prioridade:
+ * 1. o `Content-Type` definido pelo handler;
+ * 2. o `contentType` declarado no schema de resposta (com negociação pelo `Accept` se houver vários);
+ * 3. schema de resposta sem `contentType` → JSON;
+ * 4. sem schema, o tipo do valor: string → `text/plain`, Buffer/Uint8Array/stream → `application/octet-stream`,
+ *    o resto → JSON.
+ */
+/**
+ * O que cada rota sabe sobre a resposta, decidido no registro (Strategy, F-39): schemas, serializadores e o
+ * status padrão (o único 2xx declarado, quando não há 200). O mesmo objeto serve a todas as requisições.
+ */
+export interface ResponsePlan {
+    readonly response: RouteSchemas['response'];
+    readonly serializers: ReadonlyMap<string, Serializer>;
+    readonly defaultStatus: number | undefined;
+}
+/** Status padrão de uma rota (B-05): com um único 2xx declarado e sem 200, é esse 2xx. */
+export declare function defaultStatusFor(response: RouteSchemas['response']): number | undefined;
+export declare function responsePlan(response: RouteSchemas['response'], serializers: ReadonlyMap<string, Serializer>): ResponsePlan;
+export declare function sendResult(ctx: Context, response: RouteSchemas['response'], result: unknown, serializers?: ReadonlyMap<string, Serializer>, mode?: SendMode, defaultStatus?: number | undefined): void;
+/** Monta um Problem Details (RFC 9457). Sem `type`, usa `about:blank` e a frase do status como título. */
+export declare function problem(status: number, detail?: string, extra?: {
+    code?: string | undefined;
+    details?: unknown;
+    type?: string | undefined;
+}): ProblemDetails;
+/** Escreve um problema (status + corpo), sem passar pelo schema da rota (F-32). */
+export declare function sendProblem(ctx: Context, body: ProblemDetails, format?: ErrorFormatter): void;
+/**
+ * Resposta de erro padrão, no formato Problem Details (F-15). Só mensagens marcadas como `expose`
+ * chegam ao cliente; o resto vira 500 genérico e o erro original é logado no servidor (S-05).
+ */
+export declare function sendError(ctx: Context, err: unknown, format?: ErrorFormatter): void;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/core/response/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../../src/core/response/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EAAa,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAItE,wEAAwE;AACxE,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,GAAG,UAAU,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAIhD;;;;;;;;;;;;;GAaG;AACH;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,SAAS,CAMvF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,YAAY,CAE3H;AAID,wBAAgB,UAAU,CACxB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAClC,MAAM,EAAE,OAAO,EACf,WAAW,GAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAqB,EAChE,IAAI,GAAE,QAAiB,EACvB,aAAa,GAAE,MAAM,GAAG,SAAsC,GAC7D,IAAI,CAmCN;AAwFD,0GAA0G;AAC1G,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GACtF,cAAc,CAMhB;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAa7F;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAanF"}