mastercontroller 1.3.15 → 1.3.17

package/MasterRouter.js

@@ -89,7 +89,9 @@ const ROUTER_CONFIG = {
                 const sanitizedValue = sanitizeRouteParam(paramName, paramValue);
 
                 requestParams[paramName] = sanitizedValue;
-                routePathList[i] = sanitizedValue;
+                // FIX: Use requestItem (original value) not sanitizedValue for route matching
+                // The route pattern should match against the actual request path
+                routePathList[i] = requestItem;
             }
         }
     }
@@ -408,9 +410,21 @@ function validateIdentifier(name, type) {
         throw new TypeError(`${type} name must be a non-empty string`);
     }
 
-    // Must be valid JavaScript identifier
-    if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(name)) {
-        throw new Error(`Invalid ${type} name: ${name}. Must be a valid identifier.`);
+    // Controllers can have forward slashes for nested structures (e.g., "api/health")
+    // Actions must be simple identifiers
+    if (type === 'controller') {
+        // Split on slash and validate each segment
+        const segments = name.split('/');
+        for (const segment of segments) {
+            if (!segment || !/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(segment)) {
+                throw new Error(`Invalid ${type} name: ${name}. Each segment must be a valid identifier.`);
+            }
+        }
+    } else {
+        // Actions must be simple identifiers (no slashes)
+        if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(name)) {
+            throw new Error(`Invalid ${type} name: ${name}. Must be a valid identifier.`);
+        }
     }
 }
 
@@ -903,7 +917,9 @@ class MasterRouter {
             }
 
             const $that = this;
-            const requestObject = Object.create(rr);
+            // FIX: Use direct reference instead of Object.create() to preserve request/response objects
+            // Object.create() puts properties on prototype, causing undefined access issues
+            const requestObject = rr;
 
             // CRITICAL FIX: Load scoped services into request-specific context
             // Pass requestObject so scoped services are stored per-request, not globally

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mastercontroller",
-  "version": "1.3.15",
+  "version": "1.3.17",
   "description": "Fortune 500 ready Node.js MVC framework with enterprise security, monitoring, and horizontal scaling",
   "main": "MasterControl.js",
   "license": "MIT",