sashiko 0.0.0-stage → 0.1.0

package/dist/core/app.js

@@ -0,0 +1,199 @@
+import { randomUUID } from 'node:crypto';
+import http from 'node:http';
+import { performance } from 'node:perf_hooks';
+import { compileRoutes } from './compiler.js';
+import { compose } from './compose.js';
+import { Context } from './context.js';
+import '../shims/symbol-metadata.js';
+import { bodyParser } from './body-parser.js';
+import { assertSchemas, validateRequest } from './request-validation.js';
+import { sendError, sendResult } from './response.js';
+import { RouteTable } from './route-table.js';
+import { inject } from './inject.js';
+import { guardsMiddleware } from './guard.js';
+import { consoleLogger, silentLogger } from './logger.js';
+import { buildSecurityHeaders } from '../middlewares/security-headers.js';
+const SAFE_REQUEST_ID = /^[A-Za-z0-9._:-]{1,128}$/;
+export class SashikoApp {
+    middlewares = [];
+    router = new RouteTable();
+    errorHandlers = [];
+    applySecurityHeaders;
+    opts;
+    server;
+    /** Logger do app (F-06). Use para logs fora de uma requisição. */
+    log;
+    constructor(opts = {}) {
+        this.opts = opts;
+        this.log = opts.logger === false ? silentLogger : (opts.logger ?? consoleLogger());
+        if (opts.securityHeaders !== false)
+            this.applySecurityHeaders = buildSecurityHeaders(opts.securityHeaders);
+        this.use(bodyParser(opts.bodyLimit ?? 1024 * 1024));
+    }
+    use(mw) {
+        this.middlewares.push(mw);
+        return this;
+    }
+    onError(h) {
+        this.errorHandlers.push(h);
+        return this;
+    }
+    mount(ref, options = {}) {
+        const name = typeof ref === 'function' ? ref.name : ref.constructor.name;
+        for (const route of compileRoutes(ref, options)) {
+            if (this.opts.requireSchemas)
+                assertSchemas(name, route);
+            try {
+                this.router.on(route.method, route.path, route);
+            }
+            catch (err) {
+                throw new Error(`[sashiko] app.mount(${name}): ${route.method} ${route.path} is already registered. ` +
+                    `Use a different "prefix" to mount the same class twice.`, { cause: err });
+            }
+        }
+        return this;
+    }
+    async handle(ctx) {
+        // Antes de tudo, para valer inclusive em erros, 404 e preflight (S-04).
+        this.applySecurityHeaders?.(ctx.res);
+        try {
+            await compose(ctx, this.middlewares);
+            if (ctx.sent)
+                return;
+            const match = this.router.find(ctx.method, ctx.path);
+            if (!match) {
+                const allowed = this.router.allowedMethods(ctx.path);
+                if (allowed.length > 0) {
+                    ctx.res.setHeader('Allow', allowed.join(', '));
+                    // F-08: OPTIONS automático para qualquer path com rotas.
+                    if (ctx.method === 'OPTIONS')
+                        return void ctx.status(204).res.end();
+                    return void ctx.status(405).json({ error: 'Method Not Allowed', allowed });
+                }
+                return void ctx.status(404).json({ error: 'Not Found' });
+            }
+            ctx.params = match.params;
+            // F-01: @Use → @UseGuards → validação → handler. Guards antes da validação, para que
+            // quem não tem acesso receba 401/403 e não um 400 que revele a estrutura esperada.
+            const route = match;
+            const pipeline = [...route.middlewares];
+            if (route.guards.length > 0)
+                pipeline.push(guardsMiddleware(route.guards));
+            pipeline.push(async () => {
+                validateRequest(ctx, route.schemas);
+                const result = await route.handler(ctx);
+                if (!ctx.sent)
+                    sendResult(ctx, route.schemas.response, result);
+            });
+            await compose(ctx, pipeline);
+        }
+        catch (err) {
+            await this.runErrorHandlers(err, ctx);
+        }
+    }
+    /**
+     * Executa os `onError` do usuário. Se um deles lançar, o erro é logado e seguimos
+     * para a resposta padrão com o erro **original** — nunca deixamos a Promise rejeitar (B-08).
+     */
+    async runErrorHandlers(err, ctx) {
+        for (const h of this.errorHandlers) {
+            try {
+                await h(err, ctx);
+            }
+            catch (handlerErr) {
+                ctx.log.error({ err: handlerErr, method: ctx.method, path: ctx.path }, 'onError handler failed');
+                break;
+            }
+            if (ctx.res.writableEnded)
+                return;
+        }
+        sendError(ctx, err);
+    }
+    /**
+     * Listener `(req, res)` do app, para usar com qualquer servidor do Node:
+     * `https.createServer(opts, app.callback())`, `http2` em modo compat, testes etc. (F-09).
+     */
+    callback() {
+        const rid = this.opts.requestId ?? {};
+        const header = rid.header === false ? undefined : (rid.header ?? 'x-request-id').toLowerCase();
+        const trust = rid.trustIncoming ?? true;
+        const generate = rid.generate ?? (() => randomUUID());
+        return (req, res) => {
+            const started = performance.now();
+            const incoming = header ? req.headers[header] : undefined;
+            const id = trust && typeof incoming === 'string' && SAFE_REQUEST_ID.test(incoming) ? incoming : generate();
+            if (header)
+                res.setHeader(header, id);
+            // Última barreira (B-08): nada que aconteça numa requisição pode virar unhandledRejection.
+            const fail = (err) => {
+                this.log.error({ err, reqId: id, method: req.method, url: req.url }, 'unhandled error while handling request');
+                if (!res.headersSent)
+                    res.statusCode = 500;
+                if (!res.writableEnded)
+                    res.end();
+            };
+            try {
+                const ctx = new Context(req, res, { queryMaxKeys: this.opts.queryMaxKeys, id, logger: this.log });
+                if (this.opts.logRequests) {
+                    res.once('finish', () => {
+                        const ms = Math.round((performance.now() - started) * 100) / 100;
+                        ctx.log.info({ method: ctx.method, path: ctx.path, status: res.statusCode, ms }, 'request completed');
+                    });
+                }
+                this.handle(ctx).catch(fail);
+            }
+            catch (err) {
+                fail(err);
+            }
+        };
+    }
+    /** Sobe o servidor HTTP e resolve quando ele está aceitando conexões (F-09). */
+    async listen(options = {}) {
+        if (this.server)
+            throw new Error('[sashiko] app is already listening; call app.close() first.');
+        const { port = 3000, host = '127.0.0.1' } = typeof options === 'number' ? { port: options } : options;
+        const server = http.createServer(this.callback());
+        const t = this.opts.timeouts ?? {};
+        server.requestTimeout = t.requestTimeout ?? 30_000;
+        server.headersTimeout = Math.min(t.headersTimeout ?? 10_000, server.requestTimeout || Infinity);
+        server.keepAliveTimeout = t.keepAliveTimeout ?? 5_000;
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(port, host, () => {
+                server.off('error', reject);
+                resolve();
+            });
+        });
+        this.server = server;
+        return server;
+    }
+    /**
+     * Para de aceitar conexões, encerra as ociosas e espera as requisições em andamento terminarem.
+     * Depois de `graceMs`, força o fechamento das restantes.
+     */
+    async close(graceMs = 10_000) {
+        const server = this.server;
+        if (!server)
+            return;
+        this.server = undefined;
+        const force = setTimeout(() => server.closeAllConnections(), graceMs);
+        force.unref();
+        try {
+            await new Promise((resolve, reject) => {
+                server.close((err) => (err ? reject(err) : resolve()));
+                server.closeIdleConnections();
+            });
+        }
+        finally {
+            clearTimeout(force);
+        }
+    }
+    /** Executa uma requisição em memória, sem rede. Ideal para testes (F-09). */
+    inject(opts) {
+        return inject(this.callback(), typeof opts === 'string' ? { url: opts } : opts);
+    }
+}
+export function createApp(opts) {
+    return new SashikoApp(opts);
+}
+//# sourceMappingURL=app.js.map

package/dist/core/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/core/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAqC,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,OAAO,EAAmB,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,6BAA6B,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAA2C,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAA+B,MAAM,oCAAoC,CAAC;AAoDvG,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,MAAM,OAAO,UAAU;IACb,WAAW,GAAiB,EAAE,CAAC;IAC/B,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAC1B,aAAa,GAA6D,EAAE,CAAC;IAC7E,oBAAoB,CAAmD;IAC9D,IAAI,CAAa;IAC1B,MAAM,CAA0B;IACxC,kEAAkE;IACzD,GAAG,CAAS;IAErB,YAAY,IAAI,GAAe,EAAE;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK;YAAE,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3G,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,GAAG,CAAC,EAAc;QAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,CAAuD;QAC7D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAcD,KAAK,CAAC,GAAc,EAAE,OAAO,GAAiB,EAAE;QAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc;gBAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,MAAM,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,0BAA0B;oBACrF,yDAAyD,EACzD,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,GAAY;QACvB,wEAAwE;QACxE,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI;gBAAE,OAAO;YAErB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/C,yDAAyD;oBACzD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;wBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACpE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAE1B,qFAAqF;YACrF,mFAAmF;YACnF,MAAM,KAAK,GAAG,KAAK,CAAC;YACpB,MAAM,QAAQ,GAAiB,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,IAAI;oBAAE,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAAC,GAAY,EAAE,GAAY;QACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBACjG,MAAM;YACR,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa;gBAAE,OAAO;QACpC,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/F,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QAEtD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,EAAE,GAAG,KAAK,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3G,IAAI,MAAM;gBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAEtC,2FAA2F;YAC3F,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE;gBAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,wCAAwC,CAAC,CAAC;gBAC/G,IAAI,CAAC,GAAG,CAAC,WAAW;oBAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YACpC,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1B,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;wBACjE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;oBACxG,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAM,CAAC,OAAO,GAA2B,EAAE;QAC/C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAChG,MAAM,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,WAAW,EAAE,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAEtG,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC;QACnD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,MAAM,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,CAAC;QAChG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAEtD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,CAAC,CAAC;QACtE,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACvD,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,IAA4B;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC;CAEF;AAED,MAAM,UAAU,SAAS,CAAC,IAAiB;IACzC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/core/body-parser.d.ts

@@ -0,0 +1,4 @@
+import type { Middleware } from './compose.ts';
+/** Lê e parseia o body JSON, respeitando `limit` em bytes. Registrado pelo app como primeiro middleware. */
+export declare function bodyParser(limit: number): Middleware;
+//# sourceMappingURL=body-parser.d.ts.map

package/dist/core/body-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.d.ts","sourceRoot":"","sources":["../../src/core/body-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,4GAA4G;AAC5G,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CA4BpD"}

package/dist/core/body-parser.js

@@ -0,0 +1,38 @@
+import { isJsonContentType } from '../utils/content-type.js';
+/** Lê e parseia o body JSON, respeitando `limit` em bytes. Registrado pelo app como primeiro middleware. */
+export function bodyParser(limit) {
+    return async (ctx, next) => {
+        if (ctx.method === 'GET' || ctx.method === 'HEAD')
+            return next();
+        if (!isJsonContentType(ctx.req.headers['content-type']))
+            return next();
+        // B-12: rejeita cedo pelo Content-Length e fecha a conexão ao exceder,
+        // para o cliente não continuar enviando um corpo que será descartado.
+        const tooLarge = () => {
+            ctx.res.setHeader('Connection', 'close');
+            return ctx.throw(413, 'Payload too large');
+        };
+        const declared = Number(ctx.req.headers['content-length']);
+        if (Number.isFinite(declared) && declared > limit)
+            tooLarge();
+        const chunks = [];
+        let size = 0;
+        for await (const chunk of ctx.req) {
+            size += chunk.length;
+            if (size > limit)
+                tooLarge();
+            chunks.push(chunk);
+        }
+        const raw = Buffer.concat(chunks).toString('utf8');
+        if (raw) {
+            try {
+                ctx.body = JSON.parse(raw);
+            }
+            catch {
+                ctx.throw(400, 'Invalid JSON');
+            }
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=body-parser.js.map

package/dist/core/body-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.js","sourceRoot":"","sources":["../../src/core/body-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,4GAA4G;AAC5G,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QACjE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAEvE,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,GAAU,EAAE;YAC3B,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK;YAAE,QAAQ,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,KAAK;gBAAE,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YACnC,MAAM,CAAC;gBAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/compiler.d.ts

@@ -0,0 +1,28 @@
+import type { Guard } from './guard.ts';
+import type { Middleware } from './compose.ts';
+import type { RouteDefinition } from './route-table.ts';
+export interface CompiledRoute extends RouteDefinition {
+    method: string;
+    path: string;
+}
+/** Classe com construtor sem argumentos **ou** instância já construída (B-10). */
+export type RouterRef = (new () => object) | object;
+/** Nomes dos métodos de uma instância (para `only`/`except`). */
+export type MethodNames<T> = {
+    [K in keyof T]: T[K] extends (...args: never[]) => unknown ? K : never;
+}[keyof T] & string;
+/** Opções de `app.mount()`, aplicadas no ponto de composição (F-28). */
+export interface MountOptions<T = object> {
+    /** Substitui o prefixo definido no `@Router`. */
+    prefix?: string;
+    /** Registra só estes métodos de rota. Não pode ser usado junto com `except`. */
+    only?: readonly MethodNames<T>[];
+    /** Registra todos os métodos de rota, exceto estes. */
+    except?: readonly MethodNames<T>[];
+    /** Middlewares para todas as rotas registradas; rodam antes dos `@Use` da classe. */
+    middlewares?: readonly Middleware[];
+    /** Guards para todas as rotas registradas; rodam antes dos `@UseGuards` da classe. */
+    guards?: readonly Guard[];
+}
+export declare function compileRoutes(ref: RouterRef, opts?: MountOptions): CompiledRoute[];
+//# sourceMappingURL=compiler.d.ts.map

package/dist/core/compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/core/compiler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kFAAkF;AAClF,MAAM,MAAM,SAAS,GAAG,CAAC,UAAU,MAAM,CAAC,GAAG,MAAM,CAAC;AAEpD,iEAAiE;AACjE,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,GAAG,CAAC,GAAG,KAAK;CAAE,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC;AAE1H,wEAAwE;AACxE,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,MAAM;IACtC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,IAAI,CAAC,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACjC,uDAAuD;IACvD,MAAM,CAAC,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,qFAAqF;IACrF,WAAW,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC,sFAAsF;IACtF,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;CAC3B;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,GAAE,YAAiB,GAAG,aAAa,EAAE,CAoCtF"}

package/dist/core/compiler.js

@@ -0,0 +1,50 @@
+import { readOwnMetadata } from './metadata.js';
+import { joinPaths } from '../utils/path.js';
+export function compileRoutes(ref, opts = {}) {
+    const isClass = typeof ref === 'function';
+    const Class = (isClass ? ref : ref.constructor);
+    const meta = readOwnMetadata(Class);
+    if (!meta?.isRouter) {
+        throw new Error(`[sashiko] Class ${Class.name} is not decorated with @Router('/prefix'). ` +
+            `Add it to register the class with app.mount().`);
+    }
+    const routeNames = [...meta.methods].filter(([, m]) => m.method && m.path).map(([name]) => String(name));
+    const selected = selectRoutes(Class.name, routeNames, opts);
+    // Instâncias permitem injetar dependências pelo construtor: app.mount(new UserRoutes(repo))
+    const instance = isClass ? new Class() : ref;
+    const prefix = opts.prefix ?? meta.prefix;
+    const routes = [];
+    for (const [name, methodMeta] of meta.methods) {
+        if (!methodMeta.method || !methodMeta.path || !selected.has(String(name)))
+            continue;
+        const fn = instance[name];
+        if (typeof fn !== 'function')
+            continue;
+        routes.push({
+            method: methodMeta.method,
+            path: joinPaths(prefix, methodMeta.path),
+            handler: (ctx) => fn.call(instance, ctx),
+            schemas: methodMeta.schemas,
+            // Ordem: composição (app.mount) → classe → método (F-01, F-28)
+            middlewares: [...(opts.middlewares ?? []), ...meta.middlewares, ...methodMeta.middlewares],
+            guards: [...(opts.guards ?? []), ...meta.guards, ...methodMeta.guards],
+        });
+    }
+    return routes;
+}
+function selectRoutes(className, names, opts) {
+    if (opts.only && opts.except) {
+        throw new Error(`[sashiko] app.mount(${className}): use either "only" or "except", not both.`);
+    }
+    const listed = opts.only ?? opts.except ?? [];
+    const unknown = listed.filter((n) => !names.includes(n));
+    if (unknown.length > 0) {
+        throw new Error(`[sashiko] app.mount(${className}): ${unknown.map((n) => `"${n}"`).join(', ')} ` +
+            `is not a route method. Available: ${names.join(', ') || '(none)'}.`);
+    }
+    if (opts.only)
+        return new Set(opts.only);
+    const except = new Set(opts.except ?? []);
+    return new Set(names.filter((n) => !except.has(n)));
+}
+//# sourceMappingURL=compiler.js.map

package/dist/core/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../src/core/compiler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA2B7C,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,IAAI,GAAiB,EAAE;IACnE,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAqB,CAAC;IACpE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,CAAC,IAAI,6CAA6C;YAC1E,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAE5D,4FAA4F;IAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACpF,MAAM,EAAE,GAAI,QAA6C,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,OAAO,EAAE,KAAK,UAAU;YAAE,SAAS;QAEvC,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;YACxC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;YACjD,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,+DAA+D;YAC/D,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;YAC1F,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAe,EAAE,IAAkB;IAC1E,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,6CAA6C,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uBAAuB,SAAS,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChF,qCAAqC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/core/compose.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from './context.ts';
+export type Middleware = (ctx: Context, next: () => Promise<void>) => Promise<void> | void;
+export declare function compose(ctx: Context, fns: Middleware[]): Promise<void>;
+//# sourceMappingURL=compose.d.ts.map

package/dist/core/compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../src/core/compose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE3F,wBAAsB,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E"}

package/dist/core/compose.js

@@ -0,0 +1,11 @@
+export async function compose(ctx, fns) {
+    let i = 0;
+    const dispatch = async () => {
+        if (i >= fns.length)
+            return;
+        const fn = fns[i++];
+        await fn(ctx, dispatch);
+    };
+    await dispatch();
+}
+//# sourceMappingURL=compose.js.map

package/dist/core/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../src/core/compose.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAY,EAAE,GAAiB;IAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,CAAE,CAAC;QACrB,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,QAAQ,EAAE,CAAC;AACnB,CAAC"}

package/dist/core/context.d.ts

@@ -0,0 +1,84 @@
+import type { IncomingMessage, OutgoingHttpHeader, ServerResponse } from 'node:http';
+import { Readable } from 'node:stream';
+import { type Logger } from './logger.ts';
+import type { InferBody, InferParams, InferQuery } from './infer.ts';
+import type { RouteSchemas } from './metadata.ts';
+/**
+ * Estado por requisição, compartilhado entre middlewares, guards e handlers.
+ * Estenda com declaration merging para ter tipos (F-01):
+ *
+ * ```ts
+ * declare module 'sashiko' {
+ *   interface ContextState { user?: { id: string; role: 'admin' | 'user' } }
+ * }
+ * ```
+ */
+export interface ContextState {
+    [key: string]: unknown;
+}
+export interface ContextOptions {
+    queryMaxKeys?: number | undefined;
+    /** Id da requisição; o app gera ou reaproveita o header recebido (F-06). */
+    id?: string | undefined;
+    /** Logger do app; o contexto cria um filho com o `reqId`. */
+    logger?: Logger | undefined;
+}
+/**
+ * Contexto da requisição. Passe os schemas da rota no genérico para tipar
+ * `params`, `query` e `body` a partir do `@Schema` (F-02):
+ *
+ * ```ts
+ * const create = { body: CreateUserSchema, response: { 201: UserSchema } } satisfies RouteSchemas;
+ * @Post('/') @Schema(create) createUser(ctx: Context<typeof create>) { ctx.body.name }
+ * ```
+ */
+export declare class Context<S extends RouteSchemas = RouteSchemas> {
+    readonly req: IncomingMessage;
+    readonly res: ServerResponse;
+    readonly method: string;
+    readonly path: string;
+    readonly url: URL;
+    /** Id da requisição, também enviado no header `X-Request-Id` (F-06). */
+    readonly id: string;
+    /** Logger da requisição, já com `reqId` (F-06). */
+    readonly log: Logger;
+    /** Parâmetros de rota; tipados pelo schema `params` quando informado em `Context<S>`. */
+    params: InferParams<S>;
+    /** Query string; tipada pelo schema `query` (já com coerção e defaults aplicados). */
+    query: InferQuery<S>;
+    /** Body; tipado pelo schema `body`. */
+    body: InferBody<S>;
+    state: ContextState;
+    /** `true` quando o handler chamou `ctx.status()`. Usado para escolher o schema de resposta (B-05). */
+    statusExplicit: boolean;
+    private streaming;
+    constructor(req: IncomingMessage, res: ServerResponse, opts?: ContextOptions);
+    /** IP do cliente conforme o socket. Sem `trustProxy`, `X-Forwarded-For` é ignorado (S-09). */
+    get ip(): string;
+    status(code: number): this;
+    /**
+     * `true` quando a resposta já foi enviada (ou está sendo, no caso de streams).
+     * Depois disso o framework não escreve mais nada na resposta.
+     */
+    get sent(): boolean;
+    /** Lê um header da requisição (case-insensitive). Headers repetidos são unidos com `, `. */
+    get(name: string): string | undefined;
+    /** Define um header da resposta. */
+    header(name: string, value: OutgoingHttpHeader): this;
+    json(data: unknown): this;
+    /** Resposta em texto puro (`text/plain; charset=utf-8`). */
+    text(data: string): this;
+    /**
+     * Envia string, Buffer/Uint8Array ou stream (`Readable`). O `Content-Type` padrão é
+     * `application/octet-stream`; passe o tipo correto. Para HTML, faça o escape do conteúdo
+     * dinâmico antes: o framework não faz isso por você (S-02).
+     */
+    send(body: string | Uint8Array | Readable, contentType?: string): this;
+    /**
+     * Redireciona (padrão 302). Não use `url` vinda do usuário sem validar: isso abre um
+     * open redirect. Prefira caminhos relativos ou uma lista de destinos permitidos.
+     */
+    redirect(url: string, status?: 301 | 302 | 303 | 307 | 308): this;
+    throw(status: number, message: string, code?: string): never;
+}
+//# sourceMappingURL=context.d.ts.map

package/dist/core/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/core/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvC,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,4EAA4E;IAC5E,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,qBAAa,OAAO,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY;IACxD,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,yFAAyF;IACzF,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAwB;IAC9C,sFAAsF;IACtF,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACrB,uCAAuC;IACvC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAA6B;IAC/C,KAAK,EAAE,YAAY,CAAM;IAEzB,sGAAsG;IACtG,cAAc,UAAS;IAEvB,OAAO,CAAC,SAAS,CAAS;IAE1B,YAAY,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,GAAE,cAAmB,EAS/E;IAED,8FAA8F;IAC9F,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIzB;IAED;;;OAGG;IACH,IAAI,IAAI,IAAI,OAAO,CAElB;IAED,4FAA4F;IAC5F,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpC;IAED,oCAAoC;IACpC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAGpD;IAED,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAKxB;IAED,4DAA4D;IAC5D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEvB;IAED;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAerE;IAED;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAS,GAAG,IAAI,CAMrE;IAED,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAE3D;CACF"}

package/dist/core/context.js

@@ -0,0 +1,121 @@
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { HttpError } from './errors.js';
+import { parseQuery } from '../utils/query.js';
+import { silentLogger } from './logger.js';
+/**
+ * Contexto da requisição. Passe os schemas da rota no genérico para tipar
+ * `params`, `query` e `body` a partir do `@Schema` (F-02):
+ *
+ * ```ts
+ * const create = { body: CreateUserSchema, response: { 201: UserSchema } } satisfies RouteSchemas;
+ * @Post('/') @Schema(create) createUser(ctx: Context<typeof create>) { ctx.body.name }
+ * ```
+ */
+export class Context {
+    req;
+    res;
+    method;
+    path;
+    url;
+    /** Id da requisição, também enviado no header `X-Request-Id` (F-06). */
+    id;
+    /** Logger da requisição, já com `reqId` (F-06). */
+    log;
+    /** Parâmetros de rota; tipados pelo schema `params` quando informado em `Context<S>`. */
+    params = {};
+    /** Query string; tipada pelo schema `query` (já com coerção e defaults aplicados). */
+    query;
+    /** Body; tipado pelo schema `body`. */
+    body = undefined;
+    state = {};
+    /** `true` quando o handler chamou `ctx.status()`. Usado para escolher o schema de resposta (B-05). */
+    statusExplicit = false;
+    streaming = false;
+    constructor(req, res, opts = {}) {
+        this.req = req;
+        this.res = res;
+        this.method = req.method ?? 'GET';
+        this.url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        this.path = this.url.pathname;
+        this.query = parseQuery(this.url.searchParams, opts.queryMaxKeys);
+        this.id = opts.id ?? '';
+        this.log = (opts.logger ?? silentLogger).child({ reqId: this.id });
+    }
+    /** IP do cliente conforme o socket. Sem `trustProxy`, `X-Forwarded-For` é ignorado (S-09). */
+    get ip() {
+        return this.req.socket.remoteAddress ?? '';
+    }
+    status(code) {
+        this.res.statusCode = code;
+        this.statusExplicit = true;
+        return this;
+    }
+    /**
+     * `true` quando a resposta já foi enviada (ou está sendo, no caso de streams).
+     * Depois disso o framework não escreve mais nada na resposta.
+     */
+    get sent() {
+        return this.streaming || this.res.writableEnded;
+    }
+    /** Lê um header da requisição (case-insensitive). Headers repetidos são unidos com `, `. */
+    get(name) {
+        const value = this.req.headers[name.toLowerCase()];
+        return Array.isArray(value) ? value.join(', ') : value;
+    }
+    /** Define um header da resposta. */
+    header(name, value) {
+        this.res.setHeader(name, value);
+        return this;
+    }
+    json(data) {
+        if (this.sent)
+            return this;
+        this.res.setHeader('Content-Type', 'application/json; charset=utf-8');
+        this.res.end(JSON.stringify(data));
+        return this;
+    }
+    /** Resposta em texto puro (`text/plain; charset=utf-8`). */
+    text(data) {
+        return this.send(data, 'text/plain; charset=utf-8');
+    }
+    /**
+     * Envia string, Buffer/Uint8Array ou stream (`Readable`). O `Content-Type` padrão é
+     * `application/octet-stream`; passe o tipo correto. Para HTML, faça o escape do conteúdo
+     * dinâmico antes: o framework não faz isso por você (S-02).
+     */
+    send(body, contentType) {
+        if (this.sent)
+            return this;
+        if (contentType)
+            this.res.setHeader('Content-Type', contentType);
+        else if (!this.res.hasHeader('Content-Type'))
+            this.res.setHeader('Content-Type', 'application/octet-stream');
+        if (body instanceof Readable) {
+            this.streaming = true;
+            pipeline(body, this.res).catch((err) => {
+                this.log.error({ err, method: this.method, path: this.path }, 'stream failed');
+                this.res.destroy(err);
+            });
+            return this;
+        }
+        this.res.end(body);
+        return this;
+    }
+    /**
+     * Redireciona (padrão 302). Não use `url` vinda do usuário sem validar: isso abre um
+     * open redirect. Prefira caminhos relativos ou uma lista de destinos permitidos.
+     */
+    redirect(url, status = 302) {
+        if (this.sent)
+            return this;
+        this.status(status);
+        this.res.setHeader('Location', url);
+        this.res.end();
+        return this;
+    }
+    throw(status, message, code) {
+        throw new HttpError(status, message, code);
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/core/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/core/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAoB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AA0BxD;;;;;;;;GAQG;AACH,MAAM,OAAO,OAAO;IACT,GAAG,CAAkB;IACrB,GAAG,CAAiB;IACpB,MAAM,CAAS;IACf,IAAI,CAAS;IACb,GAAG,CAAM;IAClB,wEAAwE;IAC/D,EAAE,CAAS;IACpB,mDAAmD;IAC1C,GAAG,CAAS;IAErB,yFAAyF;IACzF,MAAM,GAAmB,EAAoB,CAAC;IAC9C,sFAAsF;IACtF,KAAK,CAAgB;IACrB,uCAAuC;IACvC,IAAI,GAAiB,SAAyB,CAAC;IAC/C,KAAK,GAAiB,EAAE,CAAC;IAEzB,sGAAsG;IACtG,cAAc,GAAG,KAAK,CAAC;IAEf,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,GAAoB,EAAE,GAAmB,EAAE,IAAI,GAAmB,EAAE;QAC9E,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAiC,CAAC;QAClG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,8FAA8F;IAC9F,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,4FAA4F;IAC5F,GAAG,CAAC,IAAY;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,CAAC;IAED,oCAAoC;IACpC,MAAM,CAAC,IAAY,EAAE,KAAyB;QAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAa;QAChB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,IAAoC,EAAE,WAAoB;QAC7D,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,WAAW;YAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAE7G,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;gBAC/E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,GAAW,EAAE,MAAM,GAAgC,GAAG;QAC7D,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,OAAe,EAAE,IAAa;QAClD,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/core/errors.d.ts

@@ -0,0 +1,24 @@
+export interface HttpErrorOptions {
+    /**
+     * Se a mensagem pode ser enviada ao cliente.
+     * Padrão: `true` para 4xx e `false` para 5xx, para não vazar detalhes internos (S-05).
+     */
+    expose?: boolean;
+    cause?: unknown;
+    /** Dados extras enviados ao cliente junto da mensagem (ex.: erros de validação). */
+    details?: unknown;
+}
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly code: string | undefined;
+    readonly expose: boolean;
+    readonly details: unknown;
+    constructor(status: number, message: string, code?: string, options?: HttpErrorOptions);
+}
+export declare function isHttpError(err: unknown): err is HttpError;
+export declare const notFound: (msg?: string) => HttpError;
+export declare const badRequest: (msg?: string) => HttpError;
+export declare const unauthorized: (msg?: string) => HttpError;
+export declare const forbidden: (msg?: string) => HttpError;
+export declare const internal: (msg?: string) => HttpError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,EAOzF;CACF;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,eAAO,MAAM,QAAQ,6BAA8D,CAAC;AACpF,eAAO,MAAM,UAAU,6BAAkE,CAAC;AAC1F,eAAO,MAAM,YAAY,6BAAoE,CAAC;AAC9F,eAAO,MAAM,SAAS,6BAA8D,CAAC;AACrF,eAAO,MAAM,QAAQ,6BAAyE,CAAC"}