sashiko 0.0.0-stage → 0.2.0

package/dist/core/context.js

@@ -0,0 +1,121 @@
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { HttpError } from './errors.js';
+import { parseQuery } from '../utils/query.js';
+import { silentLogger } from './logger.js';
+/**
+ * Contexto da requisição. Passe os schemas da rota no genérico para tipar
+ * `params`, `query` e `body` a partir do `@Schema` (F-02):
+ *
+ * ```ts
+ * const create = { body: CreateUserSchema, response: { 201: UserSchema } } satisfies RouteSchemas;
+ * @Post('/') @Schema(create) createUser(ctx: Context<typeof create>) { ctx.body.name }
+ * ```
+ */
+export class Context {
+    req;
+    res;
+    method;
+    path;
+    url;
+    /** Id da requisição, também enviado no header `X-Request-Id` (F-06). */
+    id;
+    /** Logger da requisição, já com `reqId` (F-06). */
+    log;
+    /** Parâmetros de rota; tipados pelo schema `params` quando informado em `Context<S>`. */
+    params = {};
+    /** Query string; tipada pelo schema `query` (já com coerção e defaults aplicados). */
+    query;
+    /** Body; tipado pelo schema `body`. */
+    body = undefined;
+    state = {};
+    /** `true` quando o handler chamou `ctx.status()`. Usado para escolher o schema de resposta (B-05). */
+    statusExplicit = false;
+    streaming = false;
+    constructor(req, res, opts = {}) {
+        this.req = req;
+        this.res = res;
+        this.method = req.method ?? 'GET';
+        this.url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        this.path = this.url.pathname;
+        this.query = parseQuery(this.url.searchParams, opts.queryMaxKeys);
+        this.id = opts.id ?? '';
+        this.log = (opts.logger ?? silentLogger).child({ reqId: this.id });
+    }
+    /** IP do cliente conforme o socket. Sem `trustProxy`, `X-Forwarded-For` é ignorado (S-09). */
+    get ip() {
+        return this.req.socket.remoteAddress ?? '';
+    }
+    status(code) {
+        this.res.statusCode = code;
+        this.statusExplicit = true;
+        return this;
+    }
+    /**
+     * `true` quando a resposta já foi enviada (ou está sendo, no caso de streams).
+     * Depois disso o framework não escreve mais nada na resposta.
+     */
+    get sent() {
+        return this.streaming || this.res.writableEnded;
+    }
+    /** Lê um header da requisição (case-insensitive). Headers repetidos são unidos com `, `. */
+    get(name) {
+        const value = this.req.headers[name.toLowerCase()];
+        return Array.isArray(value) ? value.join(', ') : value;
+    }
+    /** Define um header da resposta. */
+    header(name, value) {
+        this.res.setHeader(name, value);
+        return this;
+    }
+    json(data) {
+        if (this.sent)
+            return this;
+        this.res.setHeader('Content-Type', 'application/json; charset=utf-8');
+        this.res.end(JSON.stringify(data));
+        return this;
+    }
+    /** Resposta em texto puro (`text/plain; charset=utf-8`). */
+    text(data) {
+        return this.send(data, 'text/plain; charset=utf-8');
+    }
+    /**
+     * Envia string, Buffer/Uint8Array ou stream (`Readable`). O `Content-Type` padrão é
+     * `application/octet-stream`; passe o tipo correto. Para HTML, faça o escape do conteúdo
+     * dinâmico antes: o framework não faz isso por você (S-02).
+     */
+    send(body, contentType) {
+        if (this.sent)
+            return this;
+        if (contentType)
+            this.res.setHeader('Content-Type', contentType);
+        else if (!this.res.hasHeader('Content-Type'))
+            this.res.setHeader('Content-Type', 'application/octet-stream');
+        if (body instanceof Readable) {
+            this.streaming = true;
+            pipeline(body, this.res).catch((err) => {
+                this.log.error({ err, method: this.method, path: this.path }, 'stream failed');
+                this.res.destroy(err);
+            });
+            return this;
+        }
+        this.res.end(body);
+        return this;
+    }
+    /**
+     * Redireciona (padrão 302). Não use `url` vinda do usuário sem validar: isso abre um
+     * open redirect. Prefira caminhos relativos ou uma lista de destinos permitidos.
+     */
+    redirect(url, status = 302) {
+        if (this.sent)
+            return this;
+        this.status(status);
+        this.res.setHeader('Location', url);
+        this.res.end();
+        return this;
+    }
+    throw(status, message, code) {
+        throw new HttpError(status, message, code);
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/core/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/core/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAoB,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AA0BxD;;;;;;;;GAQG;AACH,MAAM,OAAO,OAAO;IACT,GAAG,CAAkB;IACrB,GAAG,CAAiB;IACpB,MAAM,CAAS;IACf,IAAI,CAAS;IACb,GAAG,CAAM;IAClB,wEAAwE;IAC/D,EAAE,CAAS;IACpB,mDAAmD;IAC1C,GAAG,CAAS;IAErB,yFAAyF;IACzF,MAAM,GAAmB,EAAoB,CAAC;IAC9C,sFAAsF;IACtF,KAAK,CAAgB;IACrB,uCAAuC;IACvC,IAAI,GAAiB,SAAyB,CAAC;IAC/C,KAAK,GAAiB,EAAE,CAAC;IAEzB,sGAAsG;IACtG,cAAc,GAAG,KAAK,CAAC;IAEf,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,GAAoB,EAAE,GAAmB,EAAE,IAAI,GAAmB,EAAE;QAC9E,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAiC,CAAC;QAClG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,8FAA8F;IAC9F,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,4FAA4F;IAC5F,GAAG,CAAC,IAAY;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,CAAC;IAED,oCAAoC;IACpC,MAAM,CAAC,IAAY,EAAE,KAAyB;QAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAa;QAChB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,IAAoC,EAAE,WAAoB;QAC7D,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,WAAW;YAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAE7G,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;gBAC/E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,GAAW,EAAE,MAAM,GAAgC,GAAG;QAC7D,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,OAAe,EAAE,IAAa;QAClD,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/core/errors.d.ts

@@ -0,0 +1,24 @@
+export interface HttpErrorOptions {
+    /**
+     * Se a mensagem pode ser enviada ao cliente.
+     * Padrão: `true` para 4xx e `false` para 5xx, para não vazar detalhes internos (S-05).
+     */
+    expose?: boolean;
+    cause?: unknown;
+    /** Dados extras enviados ao cliente junto da mensagem (ex.: erros de validação). */
+    details?: unknown;
+}
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly code: string | undefined;
+    readonly expose: boolean;
+    readonly details: unknown;
+    constructor(status: number, message: string, code?: string, options?: HttpErrorOptions);
+}
+export declare function isHttpError(err: unknown): err is HttpError;
+export declare const notFound: (msg?: string) => HttpError;
+export declare const badRequest: (msg?: string) => HttpError;
+export declare const unauthorized: (msg?: string) => HttpError;
+export declare const forbidden: (msg?: string) => HttpError;
+export declare const internal: (msg?: string) => HttpError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,EAOzF;CACF;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,eAAO,MAAM,QAAQ,6BAA8D,CAAC;AACpF,eAAO,MAAM,UAAU,6BAAkE,CAAC;AAC1F,eAAO,MAAM,YAAY,6BAAoE,CAAC;AAC9F,eAAO,MAAM,SAAS,6BAA8D,CAAC;AACrF,eAAO,MAAM,QAAQ,6BAAyE,CAAC"}

package/dist/core/errors.js

@@ -0,0 +1,23 @@
+export class HttpError extends Error {
+    status;
+    code;
+    expose;
+    details;
+    constructor(status, message, code, options = {}) {
+        super(message, options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'HttpError';
+        this.status = status;
+        this.code = code;
+        this.expose = options.expose ?? status < 500;
+        this.details = options.details;
+    }
+}
+export function isHttpError(err) {
+    return err instanceof HttpError;
+}
+export const notFound = (msg = 'Not Found') => new HttpError(404, msg, 'NOT_FOUND');
+export const badRequest = (msg = 'Bad Request') => new HttpError(400, msg, 'BAD_REQUEST');
+export const unauthorized = (msg = 'Unauthorized') => new HttpError(401, msg, 'UNAUTHORIZED');
+export const forbidden = (msg = 'Forbidden') => new HttpError(403, msg, 'FORBIDDEN');
+export const internal = (msg = 'Internal Server Error') => new HttpError(500, msg, 'INTERNAL');
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,IAAI,CAAqB;IACzB,MAAM,CAAU;IAChB,OAAO,CAAU;IAE1B,YAAY,MAAc,EAAE,OAAe,EAAE,IAAa,EAAE,OAAO,GAAqB,EAAE;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,GAAG,GAAG,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,YAAY,SAAS,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAG,GAAG,aAAa,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,GAAG,cAAc,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAG,GAAG,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,uBAAuB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC"}

package/dist/core/guard.d.ts

@@ -0,0 +1,10 @@
+import type { Context } from './context.ts';
+import type { Middleware } from './compose.ts';
+/**
+ * Decide se a requisição pode seguir para o handler (F-01).
+ * Retorne `false` para responder 403, ou lance um `HttpError` (ex.: `unauthorized()`) para outro status.
+ */
+export type Guard = (ctx: Context) => boolean | Promise<boolean>;
+/** Executa os guards em ordem; o primeiro que negar interrompe a requisição. */
+export declare function guardsMiddleware(guards: readonly Guard[]): Middleware;
+//# sourceMappingURL=guard.d.ts.map

package/dist/core/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/core/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C;;;GAGG;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjE,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,GAAG,UAAU,CAOrE"}

package/dist/core/guard.js

@@ -0,0 +1,12 @@
+import { HttpError } from './errors.js';
+/** Executa os guards em ordem; o primeiro que negar interrompe a requisição. */
+export function guardsMiddleware(guards) {
+    return async (ctx, next) => {
+        for (const guard of guards) {
+            if (!(await guard(ctx)))
+                throw new HttpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/core/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/core/guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQxC,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,15 @@
+import '../shims/symbol-metadata.ts';
+export { createApp, SashikoApp, type AppOptions, type ListenOptions, type RequestIdOptions, type ServerTimeouts } from './app.ts';
+export type { InjectOptions, InjectResponse } from './inject.ts';
+export type { ManualRouteOptions, MethodSelector, MethodsSelector, MountOptions, RouterRef } from './compiler.ts';
+export { MountedGroup } from './mounted-group.ts';
+export type { Middleware } from './compose.ts';
+export type { Guard } from './guard.ts';
+export type { InferBody, InferHeaders, InferParams, InferQuery, InferResponse, InferSchema } from './infer.ts';
+export { consoleLogger, silentLogger, type ConsoleLoggerOptions, type Logger, type LogLevel } from './logger.ts';
+export { Context, type ContextOptions, type ContextState } from './context.ts';
+export { badRequest, forbidden, HttpError, internal, isHttpError, notFound, unauthorized, type HttpErrorOptions } from './errors.ts';
+export { ROUTER_METADATA, readOwnMetadata, type RouterMetadata, type MethodMetadata, type RouteSchemas } from './metadata.ts';
+export type { Handler } from './route-table.ts';
+export type { ValidationIssue, ValidationTarget } from '../schema/validation.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAClI,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/G,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrI,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAC9H,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,8 @@
+import '../shims/symbol-metadata.js';
+export { createApp, SashikoApp } from './app.js';
+export { MountedGroup } from './mounted-group.js';
+export { consoleLogger, silentLogger } from './logger.js';
+export { Context } from './context.js';
+export { badRequest, forbidden, HttpError, internal, isHttpError, notFound, unauthorized } from './errors.js';
+export { ROUTER_METADATA, readOwnMetadata } from './metadata.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAmF,MAAM,UAAU,CAAC;AAGlI,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAyD,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,OAAO,EAA0C,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAyB,MAAM,aAAa,CAAC;AACrI,OAAO,EAAE,eAAe,EAAE,eAAe,EAA+D,MAAM,eAAe,CAAC"}

package/dist/core/infer.d.ts

@@ -0,0 +1,36 @@
+import type { RouteSchemas } from './metadata.ts';
+/**
+ * Inferência estrutural de tipos a partir de schemas (F-02), sem importar nenhuma biblioteca:
+ * - TypeBox: lê o campo fantasma `static` (o mesmo que `Static<T>` usa).
+ * - Standard Schema (Zod, Valibot, ArkType): lê `~standard.types.output` (prepara a F-27).
+ * Qualquer outro schema cai no `Fallback`.
+ */
+export type InferSchema<T, Fallback = unknown> = [
+    NonNullable<T>
+] extends [never] ? Fallback : NonNullable<T> extends {
+    '~standard': {
+        types?: {
+            output: infer O;
+        } | undefined;
+    };
+} ? O : NonNullable<T> extends {
+    static: unknown;
+} ? (NonNullable<T> & {
+    params: [];
+})['static'] : Fallback;
+/** Tipo de `ctx.params` para os schemas `S`. */
+export type InferParams<S extends RouteSchemas> = InferSchema<S['params'], Record<string, string>>;
+/** Tipo de `ctx.query` para os schemas `S`. */
+export type InferQuery<S extends RouteSchemas> = InferSchema<S['query'], Record<string, string | string[]>>;
+/** Tipo de `ctx.body` para os schemas `S`. */
+export type InferBody<S extends RouteSchemas> = InferSchema<S['body'], unknown>;
+/** Tipo dos headers validados para os schemas `S`. */
+export type InferHeaders<S extends RouteSchemas> = InferSchema<S['headers'], Record<string, string | string[] | undefined>>;
+/**
+ * União dos tipos de resposta declarados (ou de um status específico).
+ * Útil para anotar o retorno do handler: `create(ctx): InferResponse<typeof create, 201>`.
+ */
+export type InferResponse<S extends RouteSchemas, Status extends number = number> = S['response'] extends Record<number, unknown> ? {
+    [K in keyof S['response'] & Status]: InferSchema<S['response'][K]>;
+}[keyof S['response'] & Status] : unknown;
+//# sourceMappingURL=infer.d.ts.map

package/dist/core/infer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infer.d.ts","sourceRoot":"","sources":["../../src/core/infer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,IAC3C;IAAC,WAAW,CAAC,CAAC,CAAC;CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,QAAQ,GACzC,WAAW,CAAC,CAAC,CAAC,SAAS;IAAE,WAAW,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,CAAA;CAAE,GAAG,CAAC,GACvF,WAAW,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG;IAAE,MAAM,EAAE,EAAE,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,GACxF,QAAQ,CAAC;AAEb,gDAAgD;AAChD,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACnG,+CAA+C;AAC/C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5G,8CAA8C;AAC9C,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AAChF,sDAAsD;AACtD,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAE5H;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,YAAY,EAAE,MAAM,SAAS,MAAM,GAAG,MAAM,IAC9E,CAAC,CAAC,UAAU,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,GACpG,OAAO,CAAC"}

package/dist/core/infer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=infer.js.map

package/dist/core/infer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infer.js","sourceRoot":"","sources":["../../src/core/infer.ts"],"names":[],"mappings":""}

package/dist/core/inject.d.ts

@@ -0,0 +1,27 @@
+import http from 'node:http';
+export interface InjectOptions {
+    method?: string;
+    /** Caminho com query string, ex.: `/users?limit=10`. */
+    url: string;
+    headers?: Record<string, string>;
+    /** Objetos são enviados como JSON (com `content-type` automático); strings e Buffers vão crus. */
+    body?: unknown;
+    /** IP simulado do cliente (`ctx.ip`). Padrão: `127.0.0.1`. */
+    remoteAddress?: string;
+}
+export interface InjectResponse {
+    status: number;
+    headers: http.OutgoingHttpHeaders;
+    /** Corpo como texto. */
+    body: string;
+    json<T = unknown>(): T;
+}
+type Listener = (req: http.IncomingMessage, res: http.ServerResponse) => void;
+/**
+ * Executa uma requisição direto no listener do app, sem abrir porta nem usar a rede (F-09).
+ * Cria `IncomingMessage`/`ServerResponse` reais sobre um socket desconectado e captura o que
+ * o app escreve na resposta.
+ */
+export declare function inject(listener: Listener, opts: InjectOptions): Promise<InjectResponse>;
+export {};
+//# sourceMappingURL=inject.d.ts.map

package/dist/core/inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.d.ts","sourceRoot":"","sources":["../../src/core/inject.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kGAAkG;IAClG,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAClC,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC;CACxB;AAED,KAAK,QAAQ,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC;AAE9E;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAgEvF"}

package/dist/core/inject.js

@@ -0,0 +1,72 @@
+import http from 'node:http';
+import { Socket } from 'node:net';
+/**
+ * Executa uma requisição direto no listener do app, sem abrir porta nem usar a rede (F-09).
+ * Cria `IncomingMessage`/`ServerResponse` reais sobre um socket desconectado e captura o que
+ * o app escreve na resposta.
+ */
+export function inject(listener, opts) {
+    return new Promise((resolve, reject) => {
+        const socket = new Socket();
+        Object.defineProperty(socket, 'remoteAddress', { value: opts.remoteAddress ?? '127.0.0.1' });
+        const req = new http.IncomingMessage(socket);
+        req.method = (opts.method ?? 'GET').toUpperCase();
+        req.url = opts.url;
+        req.httpVersion = '1.1';
+        req.httpVersionMajor = 1;
+        req.httpVersionMinor = 1;
+        const headers = { host: 'localhost' };
+        for (const [k, v] of Object.entries(opts.headers ?? {}))
+            headers[k.toLowerCase()] = v;
+        let payload;
+        if (opts.body !== undefined) {
+            if (typeof opts.body === 'string' || Buffer.isBuffer(opts.body)) {
+                payload = Buffer.from(opts.body);
+            }
+            else {
+                payload = Buffer.from(JSON.stringify(opts.body));
+                headers['content-type'] ??= 'application/json';
+            }
+            headers['content-length'] = String(payload.length);
+        }
+        req.headers = headers;
+        if (payload)
+            req.push(payload);
+        req.push(null);
+        const res = new http.ServerResponse(req);
+        const chunks = [];
+        const noBody = req.method === 'HEAD';
+        const collect = (chunk, encoding) => {
+            if (noBody || chunk === undefined || chunk === null || typeof chunk === 'function')
+                return;
+            chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk), (typeof encoding === 'string' ? encoding : 'utf8')));
+        };
+        // Sem socket conectado, o 'finish' não dispara: interceptamos write/end para capturar o corpo
+        // e chamamos os originais para manter headersSent/writableEnded corretos.
+        const write = res.write.bind(res);
+        const end = res.end.bind(res);
+        res.write = ((chunk, encoding, cb) => {
+            collect(chunk, encoding);
+            return write(chunk, encoding, cb);
+        });
+        res.end = ((chunk, encoding, cb) => {
+            collect(chunk, encoding);
+            const out = end(chunk, encoding, cb);
+            const body = Buffer.concat(chunks).toString('utf8');
+            resolve({
+                status: res.statusCode,
+                headers: res.getHeaders(),
+                body,
+                json: () => JSON.parse(body),
+            });
+            return out;
+        });
+        try {
+            listener(req, res);
+        }
+        catch (err) {
+            reject(err);
+        }
+    });
+}
+//# sourceMappingURL=inject.js.map

package/dist/core/inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.js","sourceRoot":"","sources":["../../src/core/inject.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAuBlC;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,QAAkB,EAAE,IAAmB;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7C,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;QACxB,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC;QAEzB,MAAM,OAAO,GAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC9D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QAEtF,IAAI,OAA2B,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjD,OAAO,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACtB,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEf,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,QAAkB,EAAE,EAAE;YACrD,IAAI,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO;YAC3F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAmB,CAAC,CAAC,CAAC;QACjJ,CAAC,CAAC;QAEF,8FAA8F;QAC9F,0EAA0E;QAC1E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAiC,CAAC;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAA6C,CAAC;QAC1E,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,QAAkB,EAAE,EAAY,EAAE,EAAE;YAChE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC,CAAqB,CAAC;QACvB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAe,EAAE,QAAkB,EAAE,EAAY,EAAE,EAAE;YAC/D,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC;gBACN,MAAM,EAAE,GAAG,CAAC,UAAU;gBACtB,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE;gBACzB,IAAI;gBACJ,IAAI,EAAE,GAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM;aACrC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACb,CAAC,CAAmB,CAAC;QAErB,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Contrato de logger compatível com o pino (F-06): `logger.info({ reqId }, 'mensagem')`.
+ * Para usar o pino, basta passar a instância: `createApp({ logger: pino() })`.
+ */
+export interface Logger {
+    debug(obj: object, msg?: string): void;
+    debug(msg: string): void;
+    info(obj: object, msg?: string): void;
+    info(msg: string): void;
+    warn(obj: object, msg?: string): void;
+    warn(msg: string): void;
+    error(obj: object, msg?: string): void;
+    error(msg: string): void;
+    child(bindings: Record<string, unknown>): Logger;
+}
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'silent';
+export interface ConsoleLoggerOptions {
+    /** Padrão: `info`. */
+    level?: LogLevel;
+}
+/**
+ * Logger padrão sobre o `console`, sem dependências. Formato: `[sashiko] mensagem { ...dados }`.
+ * Não registra headers nem body: dados sensíveis só entram se você os passar (S-11).
+ */
+export declare function consoleLogger(opts?: ConsoleLoggerOptions, bindings?: Record<string, unknown>): Logger;
+/** Logger que descarta tudo (`createApp({ logger: false })`). */
+export declare const silentLogger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/core/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;CAClD;AAED,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAItE,MAAM,WAAW,oBAAoB;IACnC,sBAAsB;IACtB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,oBAAyB,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAc7G;AAED,iEAAiE;AACjE,eAAO,MAAM,YAAY,EAAE,MAG1B,CAAC"}

package/dist/core/logger.js

@@ -0,0 +1,27 @@
+const LEVELS = { debug: 10, info: 20, warn: 30, error: 40, silent: 99 };
+/**
+ * Logger padrão sobre o `console`, sem dependências. Formato: `[sashiko] mensagem { ...dados }`.
+ * Não registra headers nem body: dados sensíveis só entram se você os passar (S-11).
+ */
+export function consoleLogger(opts = {}, bindings = {}) {
+    const min = LEVELS[opts.level ?? 'info'];
+    const emit = (level) => (objOrMsg, msg) => {
+        if (LEVELS[level] < min)
+            return;
+        const [data, text] = typeof objOrMsg === 'string' ? [{}, objOrMsg] : [objOrMsg, msg ?? ''];
+        console[level](`[sashiko] ${text}`, { ...bindings, ...data });
+    };
+    return {
+        debug: emit('debug'),
+        info: emit('info'),
+        warn: emit('warn'),
+        error: emit('error'),
+        child: (extra) => consoleLogger(opts, { ...bindings, ...extra }),
+    };
+}
+/** Logger que descarta tudo (`createApp({ logger: false })`). */
+export const silentLogger = {
+    debug() { }, info() { }, warn() { }, error() { },
+    child: () => silentLogger,
+};
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,GAA6B,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAOlG;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI,GAAyB,EAAE,EAAE,QAAQ,GAA4B,EAAE;IACnG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,KAAkC,EAAE,EAAE,CAAC,CAAC,QAAyB,EAAE,GAAY,EAAE,EAAE;QAC/F,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG;YAAE,OAAO;QAChC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,IAAI,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,KAAK,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC;IAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY;CAC1B,CAAC"}

package/dist/core/metadata.d.ts

@@ -0,0 +1,59 @@
+import type { Middleware } from './compose.ts';
+import type { Guard } from './guard.ts';
+export declare const ROUTER_METADATA: unique symbol;
+export interface RouteSchemas {
+    params?: object;
+    body?: object;
+    query?: object;
+    headers?: object;
+    response?: Record<number, object>;
+}
+export interface MethodMetadata {
+    method?: string;
+    path?: string;
+    schemas: RouteSchemas;
+    handlerName?: string | symbol;
+    /** `@Middlewares` no método (F-01). */
+    middlewares: Middleware[];
+    /** `@Guards` no método (F-01). */
+    guards: Guard[];
+}
+export interface RouterMetadata {
+    /** `true` apenas quando a própria classe recebeu `@Router` (não herda). */
+    isRouter: boolean;
+    prefix: string;
+    methods: Map<string | symbol, MethodMetadata>;
+    /** `@Middlewares` na classe: valem para todas as rotas da classe (F-01). */
+    middlewares: Middleware[];
+    /** `@Guards` na classe (F-01). */
+    guards: Guard[];
+}
+/**
+ * Retorna a metadata **própria** da classe.
+ *
+ * Em subclasses, `context.metadata` herda do pai via protótipo. Ler a chave direto
+ * devolveria o objeto do pai, e qualquer escrita o corromperia (B-09). Por isso
+ * clonamos a metadata herdada na primeira escrita (copy-on-write): a subclasse
+ * herda as rotas do pai, mas nunca altera a classe base.
+ */
+export declare function getOrCreateMetadata(meta: DecoratorMetadataObject): RouterMetadata;
+/** Lê a metadata própria de uma classe já decorada, sem criar nem herdar. */
+export declare function readOwnMetadata(Class: object): RouterMetadata | undefined;
+/**
+ * Ponto de entrada dos decorators: valida o ambiente e devolve a metadata própria da classe.
+ *
+ * - R-02: com `experimentalDecorators`, o TypeScript chama o decorator com
+ *   `(target, propertyKey, descriptor)` em vez de `(value, context)`.
+ * - R-01: sem `Symbol.metadata`, o `context.metadata` chega `undefined` e não há onde guardar as rotas.
+ *
+ * Nos dois casos, falhamos cedo com uma mensagem que diz como resolver.
+ */
+export declare function metadataFor(context: unknown, decorator: string): RouterMetadata;
+/**
+ * Junta schemas vindos de `@Get(path, schemas)` e de `@Schema(...)` no mesmo método.
+ * Partes diferentes se combinam; a mesma parte declarada duas vezes é erro, para não haver
+ * dúvida sobre qual vale.
+ */
+export declare function mergeSchemas(method: MethodMetadata, schemas: RouteSchemas, where: string): void;
+export declare function getOrCreateMethod(meta: RouterMetadata, name: string | symbol): MethodMetadata;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/core/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/core/metadata.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,eAAO,MAAM,eAAe,eAA+B,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,uCAAuC;IACvC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,kCAAkC;IAClC,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,kCAAkC;IAClC,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,cAAc,CAoBjF;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAKzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc,CAe/E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAW/F;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,CAO7F"}

package/dist/core/metadata.js

@@ -0,0 +1,83 @@
+export const ROUTER_METADATA = Symbol.for('sashiko:router');
+/**
+ * Retorna a metadata **própria** da classe.
+ *
+ * Em subclasses, `context.metadata` herda do pai via protótipo. Ler a chave direto
+ * devolveria o objeto do pai, e qualquer escrita o corromperia (B-09). Por isso
+ * clonamos a metadata herdada na primeira escrita (copy-on-write): a subclasse
+ * herda as rotas do pai, mas nunca altera a classe base.
+ */
+export function getOrCreateMetadata(meta) {
+    if (Object.hasOwn(meta, ROUTER_METADATA)) {
+        return meta[ROUTER_METADATA];
+    }
+    const inherited = meta[ROUTER_METADATA];
+    const own = {
+        isRouter: false,
+        prefix: '',
+        methods: new Map([...(inherited?.methods ?? [])].map(([name, m]) => [
+            name,
+            { ...m, schemas: { ...m.schemas }, middlewares: [...m.middlewares], guards: [...m.guards] },
+        ])),
+        // A subclasse herda os middlewares/guards de classe do pai e pode acrescentar os seus.
+        middlewares: [...(inherited?.middlewares ?? [])],
+        guards: [...(inherited?.guards ?? [])],
+    };
+    meta[ROUTER_METADATA] = own;
+    return own;
+}
+/** Lê a metadata própria de uma classe já decorada, sem criar nem herdar. */
+export function readOwnMetadata(Class) {
+    if (!Object.hasOwn(Class, Symbol.metadata))
+        return undefined;
+    const meta = Class[Symbol.metadata];
+    if (!meta || !Object.hasOwn(meta, ROUTER_METADATA))
+        return undefined;
+    return meta[ROUTER_METADATA];
+}
+/**
+ * Ponto de entrada dos decorators: valida o ambiente e devolve a metadata própria da classe.
+ *
+ * - R-02: com `experimentalDecorators`, o TypeScript chama o decorator com
+ *   `(target, propertyKey, descriptor)` em vez de `(value, context)`.
+ * - R-01: sem `Symbol.metadata`, o `context.metadata` chega `undefined` e não há onde guardar as rotas.
+ *
+ * Nos dois casos, falhamos cedo com uma mensagem que diz como resolver.
+ */
+export function metadataFor(context, decorator) {
+    if (typeof context !== 'object' || context === null || !('kind' in context)) {
+        throw new Error(`[sashiko] @${decorator} received legacy decorator arguments. Sashiko uses standard (TC39) ` +
+            `decorators: remove "experimentalDecorators" (and "emitDecoratorMetadata") from your tsconfig.json.`);
+    }
+    const meta = context.metadata;
+    if (!meta) {
+        throw new Error(`[sashiko] @${decorator}: decorator metadata is unavailable (Symbol.metadata is not defined). ` +
+            `Import 'sashiko' before declaring routers, or use TypeScript >= 5.2 / a runtime with decorator metadata.`);
+    }
+    return getOrCreateMetadata(meta);
+}
+/**
+ * Junta schemas vindos de `@Get(path, schemas)` e de `@Schema(...)` no mesmo método.
+ * Partes diferentes se combinam; a mesma parte declarada duas vezes é erro, para não haver
+ * dúvida sobre qual vale.
+ */
+export function mergeSchemas(method, schemas, where) {
+    for (const key of Object.keys(schemas)) {
+        if (schemas[key] === undefined)
+            continue;
+        if (method.schemas[key] !== undefined) {
+            throw new Error(`[sashiko] ${where}: schema "${key}" is declared twice for ${String(method.handlerName)}. ` +
+                `Declare each part either in the HTTP decorator or in @Schema, not both.`);
+        }
+    }
+    method.schemas = { ...method.schemas, ...schemas };
+}
+export function getOrCreateMethod(meta, name) {
+    let m = meta.methods.get(name);
+    if (!m) {
+        m = { schemas: {}, handlerName: name, middlewares: [], guards: [] };
+        meta.methods.set(name, m);
+    }
+    return m;
+}
+//# sourceMappingURL=metadata.js.map