mastercontroller 1.3.27 → 1.3.29

package/MasterAction.js

@@ -109,7 +109,12 @@ class MasterAction{
 				return;
 			}
 
-			this.__response.writeHead(HTTP_STATUS.OK, {
+			// Use status field from data as HTTP status code if it's a valid 4xx/5xx code
+			const httpStatus = (data && typeof data.status === 'number' && data.status >= 400 && data.status <= 599)
+				? data.status
+				: HTTP_STATUS.OK;
+
+			this.__response.writeHead(httpStatus, {
 				'Content-Type': 'application/json',
 				'Content-Length': byteSize
 			});

package/MasterRouter.js

@@ -816,6 +816,7 @@ class MasterRouter {
              control.__currentRoute = currentRoute;
              control.__response = requestObject.response;
              control.__request = requestObject.request;
+             control.state = requestObject.state || {};
              const _callEmit = new EventEmitter();
 
              _callEmit.once(EVENT_NAMES.CONTROLLER, function(){
@@ -853,7 +854,12 @@ class MasterRouter {
                                     }
                                     return value;
                                 });
-                                requestObject.response.writeHead(200, {
+                                // Use status field from return value as HTTP status code if it's a valid 4xx/5xx code
+                                const httpStatus = (returnValue && typeof returnValue.status === 'number' && returnValue.status >= 400 && returnValue.status <= 599)
+                                    ? returnValue.status
+                                    : 200;
+
+                                requestObject.response.writeHead(httpStatus, {
                                     'Content-Type': 'application/json',
                                     'Content-Length': Buffer.byteLength(json, 'utf8')
                                 });

package/README.md

@@ -268,7 +268,7 @@ Middleware receives a context object:
         formData: {},       // POST body data
         periodId: '123'     // Route parameters (e.g., /period/:periodId)
     },
-    state: {},              // Custom state to share between middleware
+    state: {},              // Custom state shared between middleware and controllers (this.state)
     master: master,         // Framework instance
     isStatic: false         // Is this a static file request?
 }
@@ -718,10 +718,30 @@ console.log(JSON.stringify(snapshot));
 
 ### Use Cases
 
-**Share data between middleware and controllers:**
+**Share data between middleware and controllers via `state`:**
+```javascript
+// In middleware — set state on ctx
+master.pipeline.use(async (ctx, next) => {
+    const token = ctx.request.headers.authorization?.replace('Bearer ', '');
+    ctx.state.user = await validateToken(token);
+    ctx.state.requestStart = Date.now();
+    await next();
+});
+
+// In controller — access state via this.state
+async index() {
+    const user = this.state.user;       // Set by auth middleware
+    const start = this.state.requestStart;
+    return this.returnJson({ user, loadTime: Date.now() - start });
+}
+```
+
+`this.state` in controllers is the same object reference as `ctx.state` in middleware — mutations in either direction are shared within the request lifecycle.
+
+**Share data using temp (key-value store):**
 ```javascript
 // In middleware
-master.use(async (ctx, next) => {
+master.pipeline.use(async (ctx, next) => {
     ctx.temp.add('requestStart', Date.now());
     await next();
     const duration = Date.now() - ctx.temp.get('requestStart');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mastercontroller",
-  "version": "1.3.27",
+  "version": "1.3.29",
   "description": "Fortune 500 ready Node.js MVC framework with enterprise security, monitoring, and horizontal scaling",
   "main": "MasterControl.js",
   "license": "MIT",