stratal 0.0.18 → 0.0.20

package/dist/{errors-B7hCnXgB.mjs → errors-Da3Pz2X7.mjs}

@@ -1,4 +1,4 @@
-import { H as ApplicationError, k as ERROR_CODES } from "./errors--RBIvDXr.mjs";
+import { H as ApplicationError, k as ERROR_CODES } from "./errors-BdyV5PnY.mjs";
 //#region src/storage/errors/disk-not-configured.error.ts
 var DiskNotConfiguredError = class extends ApplicationError {
 	constructor(disk) {
@@ -48,10 +48,17 @@ var PresignedUrlInvalidExpiryError = class extends ApplicationError {
 	}
 };
 //#endregion
-//#region src/storage/errors/storage-provider-not-supported.error.ts
-var StorageProviderNotSupportedError = class extends ApplicationError {
-	constructor(provider) {
-		super("errors.storage.providerNotSupported", ERROR_CODES.SYSTEM.CONFIGURATION_ERROR, { provider });
+//#region src/storage/errors/r2-binding-not-found.error.ts
+var R2BindingNotFoundError = class extends ApplicationError {
+	constructor(binding) {
+		super("errors.storage.r2BindingNotFound", ERROR_CODES.SYSTEM.CONFIGURATION_ERROR, { binding });
+	}
+};
+//#endregion
+//#region src/storage/errors/r2-presigned-url-secret-missing.error.ts
+var R2PresignedUrlSecretMissingError = class extends ApplicationError {
+	constructor() {
+		super("errors.storage.r2PresignedUrlSecretMissing", ERROR_CODES.SYSTEM.CONFIGURATION_ERROR);
 	}
 };
 //#endregion
@@ -62,6 +69,6 @@ var StorageResponseBodyMissingError = class extends ApplicationError {
 	}
 };
 //#endregion
-export { InvalidDiskError as a, DiskNotConfiguredError as c, InvalidFileTypeError as i, StorageProviderNotSupportedError as n, FileTooLargeError as o, PresignedUrlInvalidExpiryError as r, FileNotFoundError as s, StorageResponseBodyMissingError as t };
+export { InvalidFileTypeError as a, FileNotFoundError as c, PresignedUrlInvalidExpiryError as i, DiskNotConfiguredError as l, R2PresignedUrlSecretMissingError as n, InvalidDiskError as o, R2BindingNotFoundError as r, FileTooLargeError as s, StorageResponseBodyMissingError as t };
 
-//# sourceMappingURL=errors-B7hCnXgB.mjs.map
+//# sourceMappingURL=errors-Da3Pz2X7.mjs.map

package/dist/errors-Da3Pz2X7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-Da3Pz2X7.mjs","names":[],"sources":["../src/storage/errors/disk-not-configured.error.ts","../src/storage/errors/file-not-found.error.ts","../src/storage/errors/file-too-large.error.ts","../src/storage/errors/invalid-disk.error.ts","../src/storage/errors/invalid-file-type.error.ts","../src/storage/errors/presigned-url-invalid-expiry.error.ts","../src/storage/errors/r2-binding-not-found.error.ts","../src/storage/errors/r2-presigned-url-secret-missing.error.ts","../src/storage/errors/storage-response-body-missing.error.ts"],"sourcesContent":["import { ApplicationError, ERROR_CODES } from '../../errors'\n\nexport class DiskNotConfiguredError extends ApplicationError {\n  constructor(disk: string) {\n    super('errors.storage.diskNotConfigured', ERROR_CODES.SYSTEM.CONFIGURATION_ERROR, { disk })\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class FileNotFoundError extends ApplicationError {\n  constructor(path: string) {\n    super('errors.storage.fileNotFound', ERROR_CODES.RESOURCE.NOT_FOUND, { path })\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class FileTooLargeError extends ApplicationError {\n  constructor(size: number, maxSize: number) {\n    super('errors.storage.fileTooLarge', ERROR_CODES.VALIDATION.INVALID_FORMAT, {\n      size,\n      maxSize,\n    })\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class InvalidDiskError extends ApplicationError {\n  constructor(disk: string) {\n    super('errors.storage.invalidDisk', ERROR_CODES.SYSTEM.CONFIGURATION_ERROR, { disk })\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class InvalidFileTypeError extends ApplicationError {\n  constructor(mimeType: string) {\n    super('errors.storage.invalidFileType', ERROR_CODES.VALIDATION.INVALID_FORMAT, {\n      mimeType,\n    })\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class PresignedUrlInvalidExpiryError extends ApplicationError {\n  constructor(expiresIn: number, min: number, max: number) {\n    super('errors.storage.presignedUrlInvalidExpiry', ERROR_CODES.VALIDATION.INVALID_FORMAT, {\n      expiresIn,\n      min,\n      max,\n    })\n  }\n}\n","import { ApplicationError, ERROR_CODES } from '../../errors'\n\nexport class R2BindingNotFoundError extends ApplicationError {\n  constructor(binding: string) {\n    super('errors.storage.r2BindingNotFound', ERROR_CODES.SYSTEM.CONFIGURATION_ERROR, { binding })\n  }\n}\n","import { ApplicationError, ERROR_CODES } from '../../errors'\n\nexport class R2PresignedUrlSecretMissingError extends ApplicationError {\n  constructor() {\n    super('errors.storage.r2PresignedUrlSecretMissing', ERROR_CODES.SYSTEM.CONFIGURATION_ERROR)\n  }\n}\n","import { ERROR_CODES } from '../../errors'\nimport { ApplicationError } from '../../errors'\n\nexport class StorageResponseBodyMissingError extends ApplicationError {\n  constructor(path: string) {\n    super(\n      'errors.storage.responseBodyMissing',\n      ERROR_CODES.SYSTEM.INFRASTRUCTURE_ERROR,\n      { path }\n    )\n  }\n}\n"],"mappings":";;AAEA,IAAa,yBAAb,cAA4C,iBAAiB;CAC3D,YAAY,MAAc;AACxB,QAAM,oCAAoC,YAAY,OAAO,qBAAqB,EAAE,MAAM,CAAC;;;;;ACD/F,IAAa,oBAAb,cAAuC,iBAAiB;CACtD,YAAY,MAAc;AACxB,QAAM,+BAA+B,YAAY,SAAS,WAAW,EAAE,MAAM,CAAC;;;;;ACFlF,IAAa,oBAAb,cAAuC,iBAAiB;CACtD,YAAY,MAAc,SAAiB;AACzC,QAAM,+BAA+B,YAAY,WAAW,gBAAgB;GAC1E;GACA;GACD,CAAC;;;;;ACLN,IAAa,mBAAb,cAAsC,iBAAiB;CACrD,YAAY,MAAc;AACxB,QAAM,8BAA8B,YAAY,OAAO,qBAAqB,EAAE,MAAM,CAAC;;;;;ACFzF,IAAa,uBAAb,cAA0C,iBAAiB;CACzD,YAAY,UAAkB;AAC5B,QAAM,kCAAkC,YAAY,WAAW,gBAAgB,EAC7E,UACD,CAAC;;;;;ACJN,IAAa,iCAAb,cAAoD,iBAAiB;CACnE,YAAY,WAAmB,KAAa,KAAa;AACvD,QAAM,4CAA4C,YAAY,WAAW,gBAAgB;GACvF;GACA;GACA;GACD,CAAC;;;;;ACPN,IAAa,yBAAb,cAA4C,iBAAiB;CAC3D,YAAY,SAAiB;AAC3B,QAAM,oCAAoC,YAAY,OAAO,qBAAqB,EAAE,SAAS,CAAC;;;;;ACFlG,IAAa,mCAAb,cAAsD,iBAAiB;CACrE,cAAc;AACZ,QAAM,8CAA8C,YAAY,OAAO,oBAAoB;;;;;ACD/F,IAAa,kCAAb,cAAqD,iBAAiB;CACpE,YAAY,MAAc;AACxB,QACE,sCACA,YAAY,OAAO,sBACnB,EAAE,MAAM,CACT"}

package/dist/events/index.d.mts

@@ -1,5 +1,5 @@
-import { t as Constructor } from "../types-CN0zONAZ.mjs";
-import { i as LoggerService } from "../index-BR23zDMy.mjs";
+import { t as Constructor } from "../types-cySNS_lp.mjs";
+import { i as LoggerService } from "../index-DBd_2wv8.mjs";
 
 //#region src/events/constants.d.ts
 /**

package/dist/events/index.mjs

@@ -1,2 +1,2 @@
-import { a as isListener, i as Listener, n as On, o as LISTENER_METADATA_KEYS, r as getListenerHandlers, t as EventRegistry } from "../events-UTJliZhl.mjs";
+import { a as isListener, i as Listener, n as On, o as LISTENER_METADATA_KEYS, r as getListenerHandlers, t as EventRegistry } from "../events-COKixqnG.mjs";
 export { EventRegistry, LISTENER_METADATA_KEYS, Listener, On, getListenerHandlers, isListener };

package/dist/{events-UTJliZhl.mjs → events-COKixqnG.mjs}

@@ -1,4 +1,4 @@
-import { a as __decorate, f as DI_TOKENS, o as __decorateParam, p as Transient, s as __decorateMetadata, u as LOGGER_TOKENS } from "./logger-c0ftIK4G.mjs";
+import { a as __decorate, f as DI_TOKENS, o as __decorateParam, p as Transient, s as __decorateMetadata, u as LOGGER_TOKENS } from "./logger-V6Ms3QnQ.mjs";
 import { inject } from "tsyringe";
 //#region src/events/constants.ts
 /**
@@ -187,4 +187,4 @@ EventRegistry = __decorate([
 //#endregion
 export { isListener as a, Listener as i, On as n, LISTENER_METADATA_KEYS as o, getListenerHandlers as r, EventRegistry as t };
 
-//# sourceMappingURL=events-UTJliZhl.mjs.map
+//# sourceMappingURL=events-COKixqnG.mjs.map

package/dist/{events-UTJliZhl.mjs.map → events-COKixqnG.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"events-UTJliZhl.mjs","names":[],"sources":["../src/events/constants.ts","../src/events/decorators/listener.decorator.ts","../src/events/decorators/on.decorator.ts","../src/events/event-registry.ts"],"sourcesContent":["/**\n * Metadata keys for event listener decorators.\n *\n * Uses `Symbol.for()` (global symbol registry) so that both core and\n * framework packages can reference the same symbols without cross-imports.\n */\nexport const LISTENER_METADATA_KEYS = {\n  IS_LISTENER: Symbol.for('stratal:listener'),\n  EVENT_HANDLERS: Symbol.for('stratal:listener:handlers'),\n} as const\n","import { Transient } from '../../di/decorators'\nimport type { Constructor } from '../../types'\nimport { LISTENER_METADATA_KEYS } from '../constants'\n\n/**\n * Mark a class as an event listener.\n *\n * Applies `@Transient()` for DI and sets metadata so the module system\n * can auto-discover and wire listener handlers at bootstrap time.\n *\n * @example\n * ```typescript\n * @Listener()\n * export class UserCreatedListener {\n *   @On('after.User.create')\n *   async sendWelcomeEmail(context: EventContext<'after.User.create'>) {\n *     // ...\n *   }\n * }\n * ```\n */\nexport function Listener() {\n  return function <T extends Constructor>(target: T) {\n    Transient()(target)\n    Reflect.defineMetadata(LISTENER_METADATA_KEYS.IS_LISTENER, true, target)\n    return target\n  }\n}\n\n/**\n * Check if a class is decorated with `@Listener()`\n */\nexport function isListener(target: Constructor): boolean {\n  return Reflect.getMetadata(LISTENER_METADATA_KEYS.IS_LISTENER, target) === true\n}\n","import { LISTENER_METADATA_KEYS } from '../constants'\nimport type { EventName, EventOptions, ListenerHandlerMetadata } from '../types'\n\n/**\n * Register a method as an event handler within a `@Listener()` class.\n *\n * Accumulates handler metadata on the class so the framework can\n * auto-wire handlers with the EventRegistry at bootstrap time.\n *\n * @param event - Event name to listen for (fully typed with autocomplete)\n * @param options - Optional handler options (priority, blocking)\n *\n * @example\n * ```typescript\n * @Listener()\n * export class AuditListener {\n *   @On('after.User.create')\n *   async logCreate(context: EventContext<'after.User.create'>) { ... }\n *\n *   @On('after.User.delete', { priority: 10 })\n *   async logDelete(context: EventContext<'after.User.delete'>) { ... }\n * }\n * ```\n */\nexport function On<E extends EventName>(event: E, options?: EventOptions) {\n  return function (\n    target: object,\n    propertyKey: string,\n    _descriptor: PropertyDescriptor\n  ) {\n    const existingHandlers: ListenerHandlerMetadata[] =\n      (Reflect.getMetadata(LISTENER_METADATA_KEYS.EVENT_HANDLERS, target.constructor) as ListenerHandlerMetadata[] | undefined) ?? []\n\n    existingHandlers.push({\n      methodName: propertyKey,\n      event: event as string,\n      options,\n    })\n\n    Reflect.defineMetadata(\n      LISTENER_METADATA_KEYS.EVENT_HANDLERS,\n      existingHandlers,\n      target.constructor\n    )\n  }\n}\n\n/**\n * Get all `@On()` handler metadata from a listener class\n */\nexport function getListenerHandlers(target: object): ListenerHandlerMetadata[] {\n  const metadataTarget = typeof target === 'function' ? target : target.constructor\n  return (Reflect.getMetadata(LISTENER_METADATA_KEYS.EVENT_HANDLERS, metadataTarget) as ListenerHandlerMetadata[] | undefined) ?? []\n}\n","import { inject } from 'tsyringe'\nimport { Transient } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport { LOGGER_TOKENS, type LoggerService } from '../logger'\nimport type {\n  EventContext,\n  EventHandler,\n  EventName,\n  EventOptions,\n  IEventRegistry,\n  RegisteredHandler\n} from './types'\n\n@Transient()\nexport class EventRegistry implements IEventRegistry {\n  private handlers = new Map<string, RegisteredHandler[]>()\n\n  constructor(\n    @inject(DI_TOKENS.ExecutionContext) private readonly ctx: ExecutionContext,\n    @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService\n  ) { }\n\n  on<E extends EventName>(event: E, handler: EventHandler<E>, options?: EventOptions): void {\n    const registered: RegisteredHandler = {\n      handler: handler as EventHandler,\n      priority: options?.priority ?? 0,\n      blocking: options?.blocking\n    }\n\n    const existingHandlers = this.handlers.get(event) ?? []\n    existingHandlers.push(registered)\n    this.handlers.set(event, existingHandlers)\n\n    this.logger.debug('Event handler registered', {\n      event,\n      priority: registered.priority,\n      blocking: registered.blocking\n    })\n  }\n\n  async emit<E extends EventName>(\n    event: E,\n    context?: Partial<EventContext<E>>\n  ): Promise<void> {\n    // Build full context with caller-provided fields\n    const fullContext = {\n      ...context\n    } as EventContext<E>\n\n    // Find matching handlers using pattern matching\n    const matchingHandlers = this.findMatchingHandlers(event)\n\n    if (matchingHandlers.length === 0) {\n      return\n    }\n\n    // Sort by priority (higher first)\n    const sortedHandlers = [...matchingHandlers].sort(\n      (a, b) => b.priority - a.priority\n    )\n\n    // Determine if we should use waitUntil\n    const shouldUseWaitUntil = this.shouldUseWaitUntil(event, sortedHandlers)\n\n    // Execute handlers\n    const promises = sortedHandlers.map((registered) =>\n      this.executeHandler(registered.handler, fullContext, event)\n    )\n\n    if (shouldUseWaitUntil) {\n      // Non-blocking: use ctx.waitUntil\n      this.ctx.waitUntil(Promise.all(promises))\n    } else {\n      // Blocking: await all handlers\n      await Promise.all(promises)\n    }\n  }\n\n  off<E extends EventName>(event: E, handler: EventHandler<E>): void {\n    const existingHandlers = this.handlers.get(event)\n    if (!existingHandlers) return\n\n    const filtered = existingHandlers.filter((h) => h.handler !== handler)\n    if (filtered.length > 0) {\n      this.handlers.set(event, filtered)\n    } else {\n      this.handlers.delete(event)\n    }\n\n    this.logger.debug('Event handler unregistered', { event })\n  }\n\n  once<E extends EventName>(event: E, handler: EventHandler<E>, options?: EventOptions): void {\n    const wrappedHandler = (async (context: EventContext<E>) => {\n      await handler(context)\n      this.off(event, wrappedHandler)\n    }) as EventHandler<E>\n\n    this.on(event, wrappedHandler, options)\n  }\n\n  /**\n   * Find all handlers matching the event using pattern matching.\n   * Order: exact match -> model wildcard -> operation wildcard -> global wildcard\n   */\n  private findMatchingHandlers(event: string): RegisteredHandler[] {\n    const handlers: RegisteredHandler[] = []\n\n    const parts = event.split('.')\n\n    if (parts.length === 3) {\n      // Database event: \"phase.model.operation\"\n      const [phase, model, operation] = parts\n\n      // 1. Exact match: \"after.user.create\"\n      handlers.push(...(this.handlers.get(event) ?? []))\n\n      // 2. Model wildcard: \"after.user\"\n      handlers.push(...(this.handlers.get(`${phase}.${model}`) ?? []))\n\n      // 3. Operation wildcard: \"after.create\"\n      handlers.push(...(this.handlers.get(`${phase}.${operation}`) ?? []))\n\n      // 4. Global wildcard: \"after\"\n      handlers.push(...(this.handlers.get(phase) ?? []))\n    } else if (parts.length === 2) {\n      // Could be wildcard like \"after.user\" or custom event like \"auth.verified\"\n      handlers.push(...(this.handlers.get(event) ?? []))\n\n      if (parts[0] === 'before' || parts[0] === 'after') {\n        handlers.push(...(this.handlers.get(parts[0]) ?? []))\n      }\n    } else {\n      handlers.push(...(this.handlers.get(event) ?? []))\n    }\n\n    return handlers\n  }\n\n  /**\n   * Determine if we should use ctx.waitUntil (non-blocking) or await (blocking)\n   */\n  private shouldUseWaitUntil(\n    event: string,\n    handlers: RegisteredHandler[]\n  ): boolean {\n    const hasBlockingHandler = handlers.some((h) => h.blocking === true)\n    if (hasBlockingHandler) return false\n\n    const hasNonBlockingHandler = handlers.some((h) => h.blocking === false)\n    if (hasNonBlockingHandler) return true\n\n    const phase = event.split('.')[0]\n    if (phase === 'before') return false\n    if (phase === 'after') return true\n    return false // Custom events block by default\n  }\n\n  /**\n   * Execute a single handler with error isolation\n   */\n  private async executeHandler<E extends EventName>(\n    handler: EventHandler,\n    context: EventContext<E>,\n    event: string\n  ): Promise<void> {\n    try {\n      await handler(context as EventContext)\n    } catch (error) {\n      this.logger.error('Event handler error', {\n        event,\n        error: error instanceof Error ? error.message : String(error),\n        stack: error instanceof Error ? error.stack : undefined,\n      })\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAMA,MAAa,yBAAyB;CACpC,aAAa,OAAO,IAAI,mBAAmB;CAC3C,gBAAgB,OAAO,IAAI,4BAA4B;CACxD;;;;;;;;;;;;;;;;;;;;ACYD,SAAgB,WAAW;AACzB,QAAO,SAAiC,QAAW;AACjD,aAAW,CAAC,OAAO;AACnB,UAAQ,eAAe,uBAAuB,aAAa,MAAM,OAAO;AACxE,SAAO;;;;;;AAOX,SAAgB,WAAW,QAA8B;AACvD,QAAO,QAAQ,YAAY,uBAAuB,aAAa,OAAO,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;ACT7E,SAAgB,GAAwB,OAAU,SAAwB;AACxE,QAAO,SACL,QACA,aACA,aACA;EACA,MAAM,mBACH,QAAQ,YAAY,uBAAuB,gBAAgB,OAAO,YAAY,IAA8C,EAAE;AAEjI,mBAAiB,KAAK;GACpB,YAAY;GACL;GACP;GACD,CAAC;AAEF,UAAQ,eACN,uBAAuB,gBACvB,kBACA,OAAO,YACR;;;;;;AAOL,SAAgB,oBAAoB,QAA2C;CAC7E,MAAM,iBAAiB,OAAO,WAAW,aAAa,SAAS,OAAO;AACtE,QAAQ,QAAQ,YAAY,uBAAuB,gBAAgB,eAAe,IAA8C,EAAE;;;;;ACtC7H,IAAA,gBAAA,MAAM,cAAwC;CACnD,2BAAmB,IAAI,KAAkC;CAEzD,YACE,KACA,QACA;AAFqD,OAAA,MAAA;AACC,OAAA,SAAA;;CAGxD,GAAwB,OAAU,SAA0B,SAA8B;EACxF,MAAM,aAAgC;GAC3B;GACT,UAAU,SAAS,YAAY;GAC/B,UAAU,SAAS;GACpB;EAED,MAAM,mBAAmB,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE;AACvD,mBAAiB,KAAK,WAAW;AACjC,OAAK,SAAS,IAAI,OAAO,iBAAiB;AAE1C,OAAK,OAAO,MAAM,4BAA4B;GAC5C;GACA,UAAU,WAAW;GACrB,UAAU,WAAW;GACtB,CAAC;;CAGJ,MAAM,KACJ,OACA,SACe;EAEf,MAAM,cAAc,EAClB,GAAG,SACJ;EAGD,MAAM,mBAAmB,KAAK,qBAAqB,MAAM;AAEzD,MAAI,iBAAiB,WAAW,EAC9B;EAIF,MAAM,iBAAiB,CAAC,GAAG,iBAAiB,CAAC,MAC1C,GAAG,MAAM,EAAE,WAAW,EAAE,SAC1B;EAGD,MAAM,qBAAqB,KAAK,mBAAmB,OAAO,eAAe;EAGzE,MAAM,WAAW,eAAe,KAAK,eACnC,KAAK,eAAe,WAAW,SAAS,aAAa,MAAM,CAC5D;AAED,MAAI,mBAEF,MAAK,IAAI,UAAU,QAAQ,IAAI,SAAS,CAAC;MAGzC,OAAM,QAAQ,IAAI,SAAS;;CAI/B,IAAyB,OAAU,SAAgC;EACjE,MAAM,mBAAmB,KAAK,SAAS,IAAI,MAAM;AACjD,MAAI,CAAC,iBAAkB;EAEvB,MAAM,WAAW,iBAAiB,QAAQ,MAAM,EAAE,YAAY,QAAQ;AACtE,MAAI,SAAS,SAAS,EACpB,MAAK,SAAS,IAAI,OAAO,SAAS;MAElC,MAAK,SAAS,OAAO,MAAM;AAG7B,OAAK,OAAO,MAAM,8BAA8B,EAAE,OAAO,CAAC;;CAG5D,KAA0B,OAAU,SAA0B,SAA8B;EAC1F,MAAM,kBAAkB,OAAO,YAA6B;AAC1D,SAAM,QAAQ,QAAQ;AACtB,QAAK,IAAI,OAAO,eAAe;;AAGjC,OAAK,GAAG,OAAO,gBAAgB,QAAQ;;;;;;CAOzC,qBAA6B,OAAoC;EAC/D,MAAM,WAAgC,EAAE;EAExC,MAAM,QAAQ,MAAM,MAAM,IAAI;AAE9B,MAAI,MAAM,WAAW,GAAG;GAEtB,MAAM,CAAC,OAAO,OAAO,aAAa;AAGlC,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAGlD,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAE;AAGhE,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,YAAY,IAAI,EAAE,CAAE;AAGpE,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;aACzC,MAAM,WAAW,GAAG;AAE7B,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAElD,OAAI,MAAM,OAAO,YAAY,MAAM,OAAO,QACxC,UAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,GAAG,IAAI,EAAE,CAAE;QAGvD,UAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAGpD,SAAO;;;;;CAMT,mBACE,OACA,UACS;AAET,MAD2B,SAAS,MAAM,MAAM,EAAE,aAAa,KAAK,CAC5C,QAAO;AAG/B,MAD8B,SAAS,MAAM,MAAM,EAAE,aAAa,MAAM,CAC7C,QAAO;EAElC,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC;AAC/B,MAAI,UAAU,SAAU,QAAO;AAC/B,MAAI,UAAU,QAAS,QAAO;AAC9B,SAAO;;;;;CAMT,MAAc,eACZ,SACA,SACA,OACe;AACf,MAAI;AACF,SAAM,QAAQ,QAAwB;WAC/B,OAAO;AACd,QAAK,OAAO,MAAM,uBAAuB;IACvC;IACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC7D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ,KAAA;IAC/C,CAAC;;;;;CAhKP,WAAW;oBAKP,OAAO,UAAU,iBAAiB,CAAA;oBAClC,OAAO,cAAc,cAAc,CAAA"}
+{"version":3,"file":"events-COKixqnG.mjs","names":[],"sources":["../src/events/constants.ts","../src/events/decorators/listener.decorator.ts","../src/events/decorators/on.decorator.ts","../src/events/event-registry.ts"],"sourcesContent":["/**\n * Metadata keys for event listener decorators.\n *\n * Uses `Symbol.for()` (global symbol registry) so that both core and\n * framework packages can reference the same symbols without cross-imports.\n */\nexport const LISTENER_METADATA_KEYS = {\n  IS_LISTENER: Symbol.for('stratal:listener'),\n  EVENT_HANDLERS: Symbol.for('stratal:listener:handlers'),\n} as const\n","import { Transient } from '../../di/decorators'\nimport type { Constructor } from '../../types'\nimport { LISTENER_METADATA_KEYS } from '../constants'\n\n/**\n * Mark a class as an event listener.\n *\n * Applies `@Transient()` for DI and sets metadata so the module system\n * can auto-discover and wire listener handlers at bootstrap time.\n *\n * @example\n * ```typescript\n * @Listener()\n * export class UserCreatedListener {\n *   @On('after.User.create')\n *   async sendWelcomeEmail(context: EventContext<'after.User.create'>) {\n *     // ...\n *   }\n * }\n * ```\n */\nexport function Listener() {\n  return function <T extends Constructor>(target: T) {\n    Transient()(target)\n    Reflect.defineMetadata(LISTENER_METADATA_KEYS.IS_LISTENER, true, target)\n    return target\n  }\n}\n\n/**\n * Check if a class is decorated with `@Listener()`\n */\nexport function isListener(target: Constructor): boolean {\n  return Reflect.getMetadata(LISTENER_METADATA_KEYS.IS_LISTENER, target) === true\n}\n","import { LISTENER_METADATA_KEYS } from '../constants'\nimport type { EventName, EventOptions, ListenerHandlerMetadata } from '../types'\n\n/**\n * Register a method as an event handler within a `@Listener()` class.\n *\n * Accumulates handler metadata on the class so the framework can\n * auto-wire handlers with the EventRegistry at bootstrap time.\n *\n * @param event - Event name to listen for (fully typed with autocomplete)\n * @param options - Optional handler options (priority, blocking)\n *\n * @example\n * ```typescript\n * @Listener()\n * export class AuditListener {\n *   @On('after.User.create')\n *   async logCreate(context: EventContext<'after.User.create'>) { ... }\n *\n *   @On('after.User.delete', { priority: 10 })\n *   async logDelete(context: EventContext<'after.User.delete'>) { ... }\n * }\n * ```\n */\nexport function On<E extends EventName>(event: E, options?: EventOptions) {\n  return function (\n    target: object,\n    propertyKey: string,\n    _descriptor: PropertyDescriptor\n  ) {\n    const existingHandlers: ListenerHandlerMetadata[] =\n      (Reflect.getMetadata(LISTENER_METADATA_KEYS.EVENT_HANDLERS, target.constructor) as ListenerHandlerMetadata[] | undefined) ?? []\n\n    existingHandlers.push({\n      methodName: propertyKey,\n      event: event as string,\n      options,\n    })\n\n    Reflect.defineMetadata(\n      LISTENER_METADATA_KEYS.EVENT_HANDLERS,\n      existingHandlers,\n      target.constructor\n    )\n  }\n}\n\n/**\n * Get all `@On()` handler metadata from a listener class\n */\nexport function getListenerHandlers(target: object): ListenerHandlerMetadata[] {\n  const metadataTarget = typeof target === 'function' ? target : target.constructor\n  return (Reflect.getMetadata(LISTENER_METADATA_KEYS.EVENT_HANDLERS, metadataTarget) as ListenerHandlerMetadata[] | undefined) ?? []\n}\n","import { inject } from 'tsyringe'\nimport { Transient } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport { LOGGER_TOKENS, type LoggerService } from '../logger'\nimport type {\n  EventContext,\n  EventHandler,\n  EventName,\n  EventOptions,\n  IEventRegistry,\n  RegisteredHandler\n} from './types'\n\n@Transient()\nexport class EventRegistry implements IEventRegistry {\n  private handlers = new Map<string, RegisteredHandler[]>()\n\n  constructor(\n    @inject(DI_TOKENS.ExecutionContext) private readonly ctx: ExecutionContext,\n    @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService\n  ) { }\n\n  on<E extends EventName>(event: E, handler: EventHandler<E>, options?: EventOptions): void {\n    const registered: RegisteredHandler = {\n      handler: handler as EventHandler,\n      priority: options?.priority ?? 0,\n      blocking: options?.blocking\n    }\n\n    const existingHandlers = this.handlers.get(event) ?? []\n    existingHandlers.push(registered)\n    this.handlers.set(event, existingHandlers)\n\n    this.logger.debug('Event handler registered', {\n      event,\n      priority: registered.priority,\n      blocking: registered.blocking\n    })\n  }\n\n  async emit<E extends EventName>(\n    event: E,\n    context?: Partial<EventContext<E>>\n  ): Promise<void> {\n    // Build full context with caller-provided fields\n    const fullContext = {\n      ...context\n    } as EventContext<E>\n\n    // Find matching handlers using pattern matching\n    const matchingHandlers = this.findMatchingHandlers(event)\n\n    if (matchingHandlers.length === 0) {\n      return\n    }\n\n    // Sort by priority (higher first)\n    const sortedHandlers = [...matchingHandlers].sort(\n      (a, b) => b.priority - a.priority\n    )\n\n    // Determine if we should use waitUntil\n    const shouldUseWaitUntil = this.shouldUseWaitUntil(event, sortedHandlers)\n\n    // Execute handlers\n    const promises = sortedHandlers.map((registered) =>\n      this.executeHandler(registered.handler, fullContext, event)\n    )\n\n    if (shouldUseWaitUntil) {\n      // Non-blocking: use ctx.waitUntil\n      this.ctx.waitUntil(Promise.all(promises))\n    } else {\n      // Blocking: await all handlers\n      await Promise.all(promises)\n    }\n  }\n\n  off<E extends EventName>(event: E, handler: EventHandler<E>): void {\n    const existingHandlers = this.handlers.get(event)\n    if (!existingHandlers) return\n\n    const filtered = existingHandlers.filter((h) => h.handler !== handler)\n    if (filtered.length > 0) {\n      this.handlers.set(event, filtered)\n    } else {\n      this.handlers.delete(event)\n    }\n\n    this.logger.debug('Event handler unregistered', { event })\n  }\n\n  once<E extends EventName>(event: E, handler: EventHandler<E>, options?: EventOptions): void {\n    const wrappedHandler = (async (context: EventContext<E>) => {\n      await handler(context)\n      this.off(event, wrappedHandler)\n    }) as EventHandler<E>\n\n    this.on(event, wrappedHandler, options)\n  }\n\n  /**\n   * Find all handlers matching the event using pattern matching.\n   * Order: exact match -> model wildcard -> operation wildcard -> global wildcard\n   */\n  private findMatchingHandlers(event: string): RegisteredHandler[] {\n    const handlers: RegisteredHandler[] = []\n\n    const parts = event.split('.')\n\n    if (parts.length === 3) {\n      // Database event: \"phase.model.operation\"\n      const [phase, model, operation] = parts\n\n      // 1. Exact match: \"after.user.create\"\n      handlers.push(...(this.handlers.get(event) ?? []))\n\n      // 2. Model wildcard: \"after.user\"\n      handlers.push(...(this.handlers.get(`${phase}.${model}`) ?? []))\n\n      // 3. Operation wildcard: \"after.create\"\n      handlers.push(...(this.handlers.get(`${phase}.${operation}`) ?? []))\n\n      // 4. Global wildcard: \"after\"\n      handlers.push(...(this.handlers.get(phase) ?? []))\n    } else if (parts.length === 2) {\n      // Could be wildcard like \"after.user\" or custom event like \"auth.verified\"\n      handlers.push(...(this.handlers.get(event) ?? []))\n\n      if (parts[0] === 'before' || parts[0] === 'after') {\n        handlers.push(...(this.handlers.get(parts[0]) ?? []))\n      }\n    } else {\n      handlers.push(...(this.handlers.get(event) ?? []))\n    }\n\n    return handlers\n  }\n\n  /**\n   * Determine if we should use ctx.waitUntil (non-blocking) or await (blocking)\n   */\n  private shouldUseWaitUntil(\n    event: string,\n    handlers: RegisteredHandler[]\n  ): boolean {\n    const hasBlockingHandler = handlers.some((h) => h.blocking === true)\n    if (hasBlockingHandler) return false\n\n    const hasNonBlockingHandler = handlers.some((h) => h.blocking === false)\n    if (hasNonBlockingHandler) return true\n\n    const phase = event.split('.')[0]\n    if (phase === 'before') return false\n    if (phase === 'after') return true\n    return false // Custom events block by default\n  }\n\n  /**\n   * Execute a single handler with error isolation\n   */\n  private async executeHandler<E extends EventName>(\n    handler: EventHandler,\n    context: EventContext<E>,\n    event: string\n  ): Promise<void> {\n    try {\n      await handler(context as EventContext)\n    } catch (error) {\n      this.logger.error('Event handler error', {\n        event,\n        error: error instanceof Error ? error.message : String(error),\n        stack: error instanceof Error ? error.stack : undefined,\n      })\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAMA,MAAa,yBAAyB;CACpC,aAAa,OAAO,IAAI,mBAAmB;CAC3C,gBAAgB,OAAO,IAAI,4BAA4B;CACxD;;;;;;;;;;;;;;;;;;;;ACYD,SAAgB,WAAW;AACzB,QAAO,SAAiC,QAAW;AACjD,aAAW,CAAC,OAAO;AACnB,UAAQ,eAAe,uBAAuB,aAAa,MAAM,OAAO;AACxE,SAAO;;;;;;AAOX,SAAgB,WAAW,QAA8B;AACvD,QAAO,QAAQ,YAAY,uBAAuB,aAAa,OAAO,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;ACT7E,SAAgB,GAAwB,OAAU,SAAwB;AACxE,QAAO,SACL,QACA,aACA,aACA;EACA,MAAM,mBACH,QAAQ,YAAY,uBAAuB,gBAAgB,OAAO,YAAY,IAA8C,EAAE;AAEjI,mBAAiB,KAAK;GACpB,YAAY;GACL;GACP;GACD,CAAC;AAEF,UAAQ,eACN,uBAAuB,gBACvB,kBACA,OAAO,YACR;;;;;;AAOL,SAAgB,oBAAoB,QAA2C;CAC7E,MAAM,iBAAiB,OAAO,WAAW,aAAa,SAAS,OAAO;AACtE,QAAQ,QAAQ,YAAY,uBAAuB,gBAAgB,eAAe,IAA8C,EAAE;;;;;ACtC7H,IAAA,gBAAA,MAAM,cAAwC;CACnD,2BAAmB,IAAI,KAAkC;CAEzD,YACE,KACA,QACA;AAFqD,OAAA,MAAA;AACC,OAAA,SAAA;;CAGxD,GAAwB,OAAU,SAA0B,SAA8B;EACxF,MAAM,aAAgC;GAC3B;GACT,UAAU,SAAS,YAAY;GAC/B,UAAU,SAAS;GACpB;EAED,MAAM,mBAAmB,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE;AACvD,mBAAiB,KAAK,WAAW;AACjC,OAAK,SAAS,IAAI,OAAO,iBAAiB;AAE1C,OAAK,OAAO,MAAM,4BAA4B;GAC5C;GACA,UAAU,WAAW;GACrB,UAAU,WAAW;GACtB,CAAC;;CAGJ,MAAM,KACJ,OACA,SACe;EAEf,MAAM,cAAc,EAClB,GAAG,SACJ;EAGD,MAAM,mBAAmB,KAAK,qBAAqB,MAAM;AAEzD,MAAI,iBAAiB,WAAW,EAC9B;EAIF,MAAM,iBAAiB,CAAC,GAAG,iBAAiB,CAAC,MAC1C,GAAG,MAAM,EAAE,WAAW,EAAE,SAC1B;EAGD,MAAM,qBAAqB,KAAK,mBAAmB,OAAO,eAAe;EAGzE,MAAM,WAAW,eAAe,KAAK,eACnC,KAAK,eAAe,WAAW,SAAS,aAAa,MAAM,CAC5D;AAED,MAAI,mBAEF,MAAK,IAAI,UAAU,QAAQ,IAAI,SAAS,CAAC;MAGzC,OAAM,QAAQ,IAAI,SAAS;;CAI/B,IAAyB,OAAU,SAAgC;EACjE,MAAM,mBAAmB,KAAK,SAAS,IAAI,MAAM;AACjD,MAAI,CAAC,iBAAkB;EAEvB,MAAM,WAAW,iBAAiB,QAAQ,MAAM,EAAE,YAAY,QAAQ;AACtE,MAAI,SAAS,SAAS,EACpB,MAAK,SAAS,IAAI,OAAO,SAAS;MAElC,MAAK,SAAS,OAAO,MAAM;AAG7B,OAAK,OAAO,MAAM,8BAA8B,EAAE,OAAO,CAAC;;CAG5D,KAA0B,OAAU,SAA0B,SAA8B;EAC1F,MAAM,kBAAkB,OAAO,YAA6B;AAC1D,SAAM,QAAQ,QAAQ;AACtB,QAAK,IAAI,OAAO,eAAe;;AAGjC,OAAK,GAAG,OAAO,gBAAgB,QAAQ;;;;;;CAOzC,qBAA6B,OAAoC;EAC/D,MAAM,WAAgC,EAAE;EAExC,MAAM,QAAQ,MAAM,MAAM,IAAI;AAE9B,MAAI,MAAM,WAAW,GAAG;GAEtB,MAAM,CAAC,OAAO,OAAO,aAAa;AAGlC,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAGlD,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAE;AAGhE,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,YAAY,IAAI,EAAE,CAAE;AAGpE,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;aACzC,MAAM,WAAW,GAAG;AAE7B,YAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAElD,OAAI,MAAM,OAAO,YAAY,MAAM,OAAO,QACxC,UAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,GAAG,IAAI,EAAE,CAAE;QAGvD,UAAS,KAAK,GAAI,KAAK,SAAS,IAAI,MAAM,IAAI,EAAE,CAAE;AAGpD,SAAO;;;;;CAMT,mBACE,OACA,UACS;AAET,MAD2B,SAAS,MAAM,MAAM,EAAE,aAAa,KACzC,CAAE,QAAO;AAG/B,MAD8B,SAAS,MAAM,MAAM,EAAE,aAAa,MACzC,CAAE,QAAO;EAElC,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC;AAC/B,MAAI,UAAU,SAAU,QAAO;AAC/B,MAAI,UAAU,QAAS,QAAO;AAC9B,SAAO;;;;;CAMT,MAAc,eACZ,SACA,SACA,OACe;AACf,MAAI;AACF,SAAM,QAAQ,QAAwB;WAC/B,OAAO;AACd,QAAK,OAAO,MAAM,uBAAuB;IACvC;IACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC7D,OAAO,iBAAiB,QAAQ,MAAM,QAAQ,KAAA;IAC/C,CAAC;;;;;CAhKP,WAAW;oBAKP,OAAO,UAAU,iBAAiB,CAAA;oBAClC,OAAO,cAAc,cAAc,CAAA"}

package/dist/{gateway-context-BdBFoQd8.mjs → gateway-context-CdJjpUCW.mjs}

@@ -1,66 +1,5 @@
-import { H as ApplicationError, f as ROUTE_METADATA_KEYS, k as ERROR_CODES, s as RouterContext } from "./errors--RBIvDXr.mjs";
-import { p as Transient } from "./logger-c0ftIK4G.mjs";
-//#region src/router/decorators/controller.decorator.ts
-const CONTROLLER_ROUTE_KEY = ROUTE_METADATA_KEYS.CONTROLLER_ROUTE;
-/**
-* Base controller decorator for route registration
-*
-* This is the core controller decorator that handles:
-* - Transient scope registration (request-scoped)
-* - Route metadata storage
-* - Controller options (tags, security schemes, hideFromDocs)
-*
-* @param route - Base route for this controller (e.g., '/api/v1/users')
-* @param options - Optional configuration (tags, security schemes, hideFromDocs)
-*
-* @example
-* ```typescript
-* import { Controller } from 'stratal/router'
-*
-* @Controller('/api/v1/users', { tags: ['Users'] })
-* export class UsersController implements IController {
-*   // All routes accessible
-* }
-* ```
-*/
-function Controller(route, options) {
-	return function(target) {
-		Transient()(target);
-		Reflect.defineMetadata(CONTROLLER_ROUTE_KEY, route, target);
-		if (options) Reflect.defineMetadata(ROUTE_METADATA_KEYS.CONTROLLER_OPTIONS, options, target);
-		return target;
-	};
-}
-/**
-* Get the route from controller class metadata
-*
-* @param target - Controller class or instance
-* @returns Route string or undefined if not set
-*/
-function getControllerRoute(target) {
-	const metadataTarget = typeof target === "function" ? target : target.constructor;
-	return Reflect.getMetadata(CONTROLLER_ROUTE_KEY, metadataTarget);
-}
-/**
-* Get the options from controller class metadata
-*
-* @param target - Controller class or instance
-* @returns Controller options or undefined if not set
-*/
-function getControllerOptions(target) {
-	const metadataTarget = typeof target === "function" ? target : target.constructor;
-	return Reflect.getMetadata(ROUTE_METADATA_KEYS.CONTROLLER_OPTIONS, metadataTarget);
-}
-/**
-* Get the version from controller class metadata
-*
-* @param target - Controller class or instance
-* @returns Version string, array, VERSION_NEUTRAL symbol, or undefined if not set
-*/
-function getControllerVersion(target) {
-	return getControllerOptions(target)?.version;
-}
-//#endregion
+import { H as ApplicationError, f as ROUTE_METADATA_KEYS, k as ERROR_CODES, s as RouterContext } from "./errors-BdyV5PnY.mjs";
+import { t as Controller } from "./controller.decorator-DQzenvSN.mjs";
 //#region src/websocket/decorators/gateway.decorator.ts
 const GATEWAY_MARKER_KEY = ROUTE_METADATA_KEYS.GATEWAY_MARKER;
 /**
@@ -250,12 +189,8 @@ var GatewayContext = class extends RouterContext {
 	get readyState() {
 		return this.ws.readyState;
 	}
-	/**
-	* Get route parameter value from the raw request (no OpenAPI validation)
-	*
-	* @param key - Parameter name (e.g., 'id' for /ws/chat/:id)
-	*/
 	param(key) {
+		if (key === void 0) return this.c.req.param() ?? {};
 		return this.c.req.param(key);
 	}
 	/**
@@ -277,6 +212,6 @@ var GatewayContext = class extends RouterContext {
 	}
 };
 //#endregion
-export { OnMessage as a, getWsOnMessageMethod as c, isGateway as d, Controller as f, getControllerVersion as h, OnError as i, WebSocketDuplicateEventHandlerError as l, getControllerRoute as m, WebSocketBodyNotAvailableError as n, getWsOnCloseMethod as o, getControllerOptions as p, OnClose as r, getWsOnErrorMethod as s, GatewayContext as t, Gateway as u };
+export { OnMessage as a, getWsOnMessageMethod as c, isGateway as d, OnError as i, WebSocketDuplicateEventHandlerError as l, WebSocketBodyNotAvailableError as n, getWsOnCloseMethod as o, OnClose as r, getWsOnErrorMethod as s, GatewayContext as t, Gateway as u };
 
-//# sourceMappingURL=gateway-context-BdBFoQd8.mjs.map
+//# sourceMappingURL=gateway-context-CdJjpUCW.mjs.map

package/dist/gateway-context-CdJjpUCW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-context-CdJjpUCW.mjs","names":[],"sources":["../src/websocket/decorators/gateway.decorator.ts","../src/websocket/errors/websocket-duplicate-event-handler.error.ts","../src/websocket/decorators/ws-event.decorator.ts","../src/websocket/errors/websocket-body-not-available.error.ts","../src/websocket/gateway-context.ts"],"sourcesContent":["import { ROUTE_METADATA_KEYS } from '../../router/constants'\nimport { Controller } from '../../router/decorators/controller.decorator'\nimport { type Constructor } from '../../types'\nimport type { GatewayOptions } from '../../websocket/types'\n\nconst GATEWAY_MARKER_KEY = ROUTE_METADATA_KEYS.GATEWAY_MARKER\n\n/**\n * Gateway decorator for WebSocket route registration\n *\n * Marks a class as a WebSocket gateway and stores route metadata.\n * Reuses the same metadata key as @Controller for middleware compatibility —\n * `getControllerRoute()`, `forRoutes()`, and the entire middleware system work\n * with zero changes.\n *\n * @param route - WebSocket route path (e.g., '/ws/chat')\n *\n * @example\n * ```typescript\n * import { type GatewayContext, Gateway, OnMessage, OnClose } from 'stratal/websocket'\n *\n * @Gateway('/ws/chat')\n * class ChatGateway {\n *   @OnMessage()\n *   handleMessage(evt: MessageEvent, ctx: GatewayContext) {\n *     ctx.send('ack')\n *   }\n *\n *   @OnClose()\n *   handleClose(evt: CloseEvent, ctx: GatewayContext) {\n *     console.log('closed')\n *   }\n * }\n * ```\n */\nexport function Gateway(route: string, options?: GatewayOptions) {\n  return function <T extends Constructor>(target: T) {\n    Controller(route, options)(target)\n    Reflect.defineMetadata(GATEWAY_MARKER_KEY, true, target)\n    return target\n  }\n}\n\n/**\n * Check if a class is a WebSocket gateway\n *\n * @param target - Class constructor or instance\n * @returns true if the class is decorated with @Gateway\n */\nexport function isGateway(target: object): boolean {\n  const metadataTarget = typeof target === 'function' ? target : (target as { constructor: object }).constructor\n  return Reflect.getMetadata(GATEWAY_MARKER_KEY, metadataTarget) === true\n}\n","import { ApplicationError, ERROR_CODES } from '../../errors'\n\nexport class WebSocketDuplicateEventHandlerError extends ApplicationError {\n  constructor(decorator: string, existingMethod: string) {\n    super(\n      'errors.websocketDuplicateEventHandler',\n      ERROR_CODES.SYSTEM.WEBSOCKET_DUPLICATE_EVENT_HANDLER,\n      { decorator, existingMethod }\n    )\n  }\n}\n","import { ROUTE_METADATA_KEYS } from '../../router/constants'\nimport type { Constructor } from '../../types'\nimport { WebSocketDuplicateEventHandlerError } from '../errors/websocket-duplicate-event-handler.error'\n\nconst WS_ON_MESSAGE_KEY = ROUTE_METADATA_KEYS.WS_ON_MESSAGE\nconst WS_ON_CLOSE_KEY = ROUTE_METADATA_KEYS.WS_ON_CLOSE\nconst WS_ON_ERROR_KEY = ROUTE_METADATA_KEYS.WS_ON_ERROR\n\n/**\n * Define a single-handler metadata key on the prototype.\n * Throws if a different method already owns this key (prevents silent override).\n */\nfunction defineSingleHandlerMetadata(key: string | symbol, propertyKey: string | symbol, target: object, decoratorName: string): void {\n  const existing = Reflect.getMetadata(key, target) as string | symbol | undefined\n  if (existing !== undefined && existing !== propertyKey) {\n    throw new WebSocketDuplicateEventHandlerError(decoratorName, String(existing))\n  }\n  Reflect.defineMetadata(key, propertyKey, target)\n}\n\n/**\n * Marks a method as the WebSocket message handler\n *\n * @example\n * ```typescript\n * @Gateway('/ws/chat')\n * class ChatGateway {\n *   @OnMessage()\n *   handleMessage(evt: MessageEvent, ctx: GatewayContext) {\n *     ctx.send(evt.data)\n *   }\n * }\n * ```\n */\nexport function OnMessage(): MethodDecorator {\n  // `_target` is the class prototype (method decorator convention).\n  // The getter functions below read from `target.prototype` symmetrically.\n  return (_target: object, propertyKey: string | symbol) => {\n    defineSingleHandlerMetadata(WS_ON_MESSAGE_KEY, propertyKey, _target, 'OnMessage')\n  }\n}\n\n/**\n * Marks a method as the WebSocket close handler\n *\n * @example\n * ```typescript\n * @Gateway('/ws/chat')\n * class ChatGateway {\n *   @OnClose()\n *   handleClose(evt: CloseEvent, ctx: GatewayContext) {\n *     console.log('closed')\n *   }\n * }\n * ```\n */\nexport function OnClose(): MethodDecorator {\n  return (_target: object, propertyKey: string | symbol) => {\n    defineSingleHandlerMetadata(WS_ON_CLOSE_KEY, propertyKey, _target, 'OnClose')\n  }\n}\n\n/**\n * Marks a method as the WebSocket error handler\n *\n * @example\n * ```typescript\n * @Gateway('/ws/chat')\n * class ChatGateway {\n *   @OnError()\n *   handleError(evt: Event, ctx: GatewayContext) {\n *     console.error('WebSocket error', evt)\n *   }\n * }\n * ```\n */\nexport function OnError(): MethodDecorator {\n  return (_target: object, propertyKey: string | symbol) => {\n    defineSingleHandlerMetadata(WS_ON_ERROR_KEY, propertyKey, _target, 'OnError')\n  }\n}\n\n/**\n * Get the method name decorated with @OnMessage\n */\nexport function getWsOnMessageMethod(target: Constructor): string | undefined {\n  return Reflect.getMetadata(WS_ON_MESSAGE_KEY, target.prototype as object) as string | undefined\n}\n\n/**\n * Get the method name decorated with @OnClose\n */\nexport function getWsOnCloseMethod(target: Constructor): string | undefined {\n  return Reflect.getMetadata(WS_ON_CLOSE_KEY, target.prototype as object) as string | undefined\n}\n\n/**\n * Get the method name decorated with @OnError\n */\nexport function getWsOnErrorMethod(target: Constructor): string | undefined {\n  return Reflect.getMetadata(WS_ON_ERROR_KEY, target.prototype as object) as string | undefined\n}\n","import { ApplicationError, ERROR_CODES } from '../../errors'\n\nexport class WebSocketBodyNotAvailableError extends ApplicationError {\n  constructor() {\n    super(\n      'errors.websocketBodyNotAvailable',\n      ERROR_CODES.SYSTEM.WEBSOCKET_BODY_NOT_AVAILABLE\n    )\n  }\n}\n","import type { Context } from 'hono'\nimport type { WSContext, WSReadyState } from 'hono/ws'\nimport type { ContextQueryResult } from '../router/router-context'\nimport { RouterContext } from '../router/router-context'\nimport type { RouterEnv } from '../router/types'\nimport { WebSocketBodyNotAvailableError } from './errors/websocket-body-not-available.error'\n\n/**\n * WebSocket gateway context\n *\n * Extends RouterContext with WebSocket-specific methods.\n * Inherits `getContainer()`, `param()`, `query()`, `header()`, `getLocale()`\n * from RouterContext. HTTP response methods (`json()`, `redirect()`, etc.) are\n * inherited but harmless post-upgrade.\n *\n * @example\n * ```typescript\n * @OnMessage()\n * handleMessage(evt: MessageEvent, ctx: GatewayContext) {\n *   ctx.send('ack')           // convenience method\n *   ctx.header('Authorization') // upgrade request headers\n * }\n * ```\n */\nexport class GatewayContext extends RouterContext {\n  constructor(c: Context<RouterEnv>, public readonly ws: WSContext) {\n    super(c)\n  }\n\n  /** Send data through the WebSocket connection */\n  send(data: string | ArrayBuffer | Uint8Array<ArrayBuffer>): void {\n    this.ws.send(data)\n  }\n\n  /** Close the WebSocket connection */\n  close(code?: number, reason?: string): void {\n    this.ws.close(code, reason)\n  }\n\n  /** Current WebSocket ready state */\n  get readyState(): WSReadyState {\n    return this.ws.readyState\n  }\n\n  /**\n   * Get route parameter value(s) from the raw request — WebSocket gateways are\n   * not OpenAPI-registered, so reads come straight from Hono's matcher.\n   *\n   * - With a key → single string value.\n   * - With no args → full `Record<string, string>` (or `{}` when none).\n   *\n   * @param key - Parameter name (e.g., 'id' for /ws/chat/:id)\n   */\n  override param(): Record<string, string>\n  override param(key: string): string\n  override param(key?: string): string | Record<string, string> {\n    if (key === undefined) return this.c.req.param() ?? {}\n    return this.c.req.param(key)!\n  }\n\n  /**\n   * Get query parameter value from the raw request (no OpenAPI validation)\n   *\n   * @param key - Query parameter name\n   */\n  override query<R extends Record<string, unknown> | undefined = undefined, K extends string | undefined = undefined>(key?: K): ContextQueryResult<R, K> {\n    if (key) {\n      return this.c.req.query(key) as ContextQueryResult<R, K>\n    }\n    return this.c.req.query() as ContextQueryResult<R, K>\n  }\n\n  /**\n   * Request body is not available in WebSocket gateways\n   *\n   * @throws WebSocketBodyNotAvailableError always — WebSocket upgrade requests do not have a body\n   */\n  override body<T>(): Promise<T> {\n    throw new WebSocketBodyNotAvailableError()\n  }\n}\n"],"mappings":";;;AAKA,MAAM,qBAAqB,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8B/C,SAAgB,QAAQ,OAAe,SAA0B;AAC/D,QAAO,SAAiC,QAAW;AACjD,aAAW,OAAO,QAAQ,CAAC,OAAO;AAClC,UAAQ,eAAe,oBAAoB,MAAM,OAAO;AACxD,SAAO;;;;;;;;;AAUX,SAAgB,UAAU,QAAyB;CACjD,MAAM,iBAAiB,OAAO,WAAW,aAAa,SAAU,OAAmC;AACnG,QAAO,QAAQ,YAAY,oBAAoB,eAAe,KAAK;;;;ACjDrE,IAAa,sCAAb,cAAyD,iBAAiB;CACxE,YAAY,WAAmB,gBAAwB;AACrD,QACE,yCACA,YAAY,OAAO,mCACnB;GAAE;GAAW;GAAgB,CAC9B;;;;;ACJL,MAAM,oBAAoB,oBAAoB;AAC9C,MAAM,kBAAkB,oBAAoB;AAC5C,MAAM,kBAAkB,oBAAoB;;;;;AAM5C,SAAS,4BAA4B,KAAsB,aAA8B,QAAgB,eAA6B;CACpI,MAAM,WAAW,QAAQ,YAAY,KAAK,OAAO;AACjD,KAAI,aAAa,KAAA,KAAa,aAAa,YACzC,OAAM,IAAI,oCAAoC,eAAe,OAAO,SAAS,CAAC;AAEhF,SAAQ,eAAe,KAAK,aAAa,OAAO;;;;;;;;;;;;;;;;AAiBlD,SAAgB,YAA6B;AAG3C,SAAQ,SAAiB,gBAAiC;AACxD,8BAA4B,mBAAmB,aAAa,SAAS,YAAY;;;;;;;;;;;;;;;;;AAkBrF,SAAgB,UAA2B;AACzC,SAAQ,SAAiB,gBAAiC;AACxD,8BAA4B,iBAAiB,aAAa,SAAS,UAAU;;;;;;;;;;;;;;;;;AAkBjF,SAAgB,UAA2B;AACzC,SAAQ,SAAiB,gBAAiC;AACxD,8BAA4B,iBAAiB,aAAa,SAAS,UAAU;;;;;;AAOjF,SAAgB,qBAAqB,QAAyC;AAC5E,QAAO,QAAQ,YAAY,mBAAmB,OAAO,UAAoB;;;;;AAM3E,SAAgB,mBAAmB,QAAyC;AAC1E,QAAO,QAAQ,YAAY,iBAAiB,OAAO,UAAoB;;;;;AAMzE,SAAgB,mBAAmB,QAAyC;AAC1E,QAAO,QAAQ,YAAY,iBAAiB,OAAO,UAAoB;;;;AClGzE,IAAa,iCAAb,cAAoD,iBAAiB;CACnE,cAAc;AACZ,QACE,oCACA,YAAY,OAAO,6BACpB;;;;;;;;;;;;;;;;;;;;;;ACiBL,IAAa,iBAAb,cAAoC,cAAc;CAChD,YAAY,GAAuB,IAA+B;AAChE,QAAM,EAAE;AADyC,OAAA,KAAA;;;CAKnD,KAAK,MAA4D;AAC/D,OAAK,GAAG,KAAK,KAAK;;;CAIpB,MAAM,MAAe,QAAuB;AAC1C,OAAK,GAAG,MAAM,MAAM,OAAO;;;CAI7B,IAAI,aAA2B;AAC7B,SAAO,KAAK,GAAG;;CAcjB,MAAe,KAA+C;AAC5D,MAAI,QAAQ,KAAA,EAAW,QAAO,KAAK,EAAE,IAAI,OAAO,IAAI,EAAE;AACtD,SAAO,KAAK,EAAE,IAAI,MAAM,IAAI;;;;;;;CAQ9B,MAAoH,KAAmC;AACrJ,MAAI,IACF,QAAO,KAAK,EAAE,IAAI,MAAM,IAAI;AAE9B,SAAO,KAAK,EAAE,IAAI,OAAO;;;;;;;CAQ3B,OAA+B;AAC7B,QAAM,IAAI,gCAAgC"}

package/dist/guards/index.d.mts

@@ -1,6 +1,6 @@
-import { Cr as Container, V as RouterContext } from "../index-BrmS34sa.mjs";
-import { t as Constructor } from "../types-CN0zONAZ.mjs";
-import { i as LoggerService } from "../index-BR23zDMy.mjs";
+import { Dr as Container, V as RouterContext } from "../index-D0US0X14.mjs";
+import { t as Constructor } from "../types-cySNS_lp.mjs";
+import { i as LoggerService } from "../index-DBd_2wv8.mjs";
 
 //#region src/guards/types.d.ts
 /**
@@ -44,11 +44,20 @@ type Guard = GuardClass | CanActivate;
  */
 interface AuthGuardOptions {
   /**
-   * Required permissions (scopes) for authorization
+   * Required permissions for authorization as `"resource:action"` strings.
    * If provided, permission check is performed after authentication.
    * If omitted, only authentication is required.
+   *
+   * Multiple permissions are combined with AND logic (all must be satisfied).
+   *
+   * @example
+   * ```typescript
+   * @UseGuards(AuthGuard({ permissions: 'posts:update' }))
+   * @UseGuards(AuthGuard({ permissions: ['posts:update', 'posts:delete'] }))
+   * @UseGuards(AuthGuard({ permissions: 'admin:access' }))
+   * ```
    */
-  scopes?: string[];
+  permissions?: string | string[];
 }
 /**
  * Metadata stored by `@UseGuards` decorator

package/dist/guards/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/guards/types.ts","../../src/guards/use-guards.decorator.ts","../../src/guards/guard-execution.service.ts"],"mappings":";;;;;;;;AAqBA;;;;;;;;;;AAaA;;;;;UAbiB,WAAA;EAmBA;;;;AAKjB;;EAjBE,WAAA,CAAY,OAAA,EAAS,aAAA,aAA0B,OAAA;AAAA;;AA6BjD;;KAvBY,UAAA,GAAa,WAAA,CAAY,WAAA;;;AA8BrC;;KAxBY,KAAA,GAAQ,UAAA,GAAa,WAAA;;;;UAKhB,gBAAA;;ACYjB;;;;EDNE,MAAA;AAAA;;;;UAMe,aAAA;EACf,MAAA,EAAQ,KAAA;AAAA;;;ACmBV;cDba,kBAAA;;;;;;;AA3Cb;;;;;;;;;;AAaA;;;;;AAMA;;;;;AAKA;;;;;AAYA;;;;;AAOA;;;;;;;;ACPA;;;;;;;;;;;;;iBAAgB,SAAA,CAAA,GAAa,MAAA,EAAQ,KAAA,KAAU,cAAA,GAAiB,eAAA;AAoBhE;;;;;AAWA;AAXA,iBAAgB,mBAAA,CAAoB,MAAA,WAAiB,aAAA;;;;;;;;iBAWrC,eAAA,CAAgB,MAAA,UAAgB,WAAA,oBAA+B,aAAA;;;;ADnE/E;;;;;cEVa,qBAAA;EAAA,iBACkB,MAAA;cAAA,MAAA,EAAQ,aAAA;EFgBiB;;AAMxD;;;;;AAMA;;EEjBQ,aAAA,CACJ,MAAA,EAAQ,KAAA,IACR,OAAA,EAAS,aAAA,EACT,SAAA,EAAW,SAAA,GACV,OAAA;EFae;;AAKpB;;;;;EALoB,QE2BV,YAAA;EFVoB;;;EAAA,QEuBpB,eAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/guards/types.ts","../../src/guards/use-guards.decorator.ts","../../src/guards/guard-execution.service.ts"],"mappings":";;;;;;;;AAqBA;;;;;;;;;;AAaA;;;;;UAbiB,WAAA;EAmBA;;;;AAKjB;;EAjBE,WAAA,CAAY,OAAA,EAAS,aAAA,aAA0B,OAAA;AAAA;;AAsCjD;;KAhCY,UAAA,GAAa,WAAA,CAAY,WAAA;;;AAuCrC;;KAjCY,KAAA,GAAQ,UAAA,GAAa,WAAA;;;;UAKhB,gBAAA;;ACYjB;;;;;;;;;;;;;EDGE,WAAA;AAAA;;;;UAMe,aAAA;EACf,MAAA,EAAQ,KAAA;AAAA;;;;cAMG,kBAAA;;;;;;;AApDb;;;;;;;;;;AAaA;;;;;AAMA;;;;;AAKA;;;;;AAqBA;;;;;AAOA;;;;;;;;AChBA;;;;;;;;;;;;;iBAAgB,SAAA,CAAA,GAAa,MAAA,EAAQ,KAAA,KAAU,cAAA,GAAiB,eAAA;AAoBhE;;;;;AAWA;AAXA,iBAAgB,mBAAA,CAAoB,MAAA,WAAiB,aAAA;;;;;;;;iBAWrC,eAAA,CAAgB,MAAA,UAAgB,WAAA,oBAA+B,aAAA;;;;ADnE/E;;;;;cEVa,qBAAA;EAAA,iBACkB,MAAA;cAAA,MAAA,EAAQ,aAAA;EFgBiB;;AAMxD;;;;;AAMA;;EEjBQ,aAAA,CACJ,MAAA,EAAQ,KAAA,IACR,OAAA,EAAS,aAAA,EACT,SAAA,EAAW,SAAA,GACV,OAAA;EFae;;AAKpB;;;;;EALoB,QE2BV,YAAA;EFDoB;;;EAAA,QEcpB,eAAA;AAAA"}

package/dist/guards/index.mjs

@@ -1,2 +1,2 @@
-import { a as GUARD_METADATA_KEY, i as getMethodGuards, n as UseGuards, r as getControllerGuards, t as GuardExecutionService } from "../guards-MtDgcHnF.mjs";
+import { a as GUARD_METADATA_KEY, i as getMethodGuards, n as UseGuards, r as getControllerGuards, t as GuardExecutionService } from "../guards-DUk_Kzst.mjs";
 export { GUARD_METADATA_KEY, GuardExecutionService, UseGuards, getControllerGuards, getMethodGuards };

package/dist/{guards-MtDgcHnF.mjs → guards-DUk_Kzst.mjs}

@@ -148,4 +148,4 @@ var GuardExecutionService = class {
 //#endregion
 export { GUARD_METADATA_KEY as a, getMethodGuards as i, UseGuards as n, getControllerGuards as r, GuardExecutionService as t };
 
-//# sourceMappingURL=guards-MtDgcHnF.mjs.map
+//# sourceMappingURL=guards-DUk_Kzst.mjs.map

package/dist/guards-DUk_Kzst.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards-DUk_Kzst.mjs","names":[],"sources":["../src/guards/types.ts","../src/guards/use-guards.decorator.ts","../src/guards/guard-execution.service.ts"],"sourcesContent":["import type { RouterContext } from '../router'\nimport type { Constructor } from '../types'\n\n/**\n * Interface for guards that control access to routes\n *\n * Guards are executed after middlewares but before route handlers.\n * They determine if a request should be allowed to proceed.\n *\n * @example\n * ```typescript\n * class RoleGuard implements CanActivate {\n *   constructor(private readonly role: string) {}\n *\n *   async canActivate(context: RouterContext): Promise<boolean> {\n *     const user = context.getUser()\n *     return user?.roles.includes(this.role) ?? false\n *   }\n * }\n * ```\n */\nexport interface CanActivate {\n  /**\n   * Determine if the request should be allowed\n   *\n   * @param context - Router context with request/response helpers\n   * @returns true to allow, false to deny (throws 403)\n   */\n  canActivate(context: RouterContext): boolean | Promise<boolean>\n}\n\n/**\n * Type for guard class constructors\n */\nexport type GuardClass = Constructor<CanActivate>\n\n/**\n * Guard can be a class constructor or an instance\n * Instances are used for factory-created guards with configuration\n */\nexport type Guard = GuardClass | CanActivate\n\n/**\n * Options for AuthGuard factory\n */\nexport interface AuthGuardOptions {\n  /**\n   * Required permissions for authorization as `\"resource:action\"` strings.\n   * If provided, permission check is performed after authentication.\n   * If omitted, only authentication is required.\n   *\n   * Multiple permissions are combined with AND logic (all must be satisfied).\n   *\n   * @example\n   * ```typescript\n   * @UseGuards(AuthGuard({ permissions: 'posts:update' }))\n   * @UseGuards(AuthGuard({ permissions: ['posts:update', 'posts:delete'] }))\n   * @UseGuards(AuthGuard({ permissions: 'admin:access' }))\n   * ```\n   */\n  permissions?: string | string[]\n}\n\n/**\n * Metadata stored by `@UseGuards` decorator\n */\nexport interface GuardMetadata {\n  guards: Guard[]\n}\n\n/**\n * Metadata key for guard storage\n */\nexport const GUARD_METADATA_KEY = Symbol.for('stratal:guards')\n","import { GUARD_METADATA_KEY, type Guard, type GuardMetadata } from './types'\n\n/**\n * UseGuards Decorator\n *\n * Applies one or more guards to a controller or method.\n * Guards are executed in order and all must pass for the request to proceed.\n *\n * **Execution Order:**\n * 1. Request → Global Middlewares → Route Middlewares\n * 2. **Guards (controller-level, then method-level)**\n * 3. Route Handler\n *\n * **Guard Resolution:**\n * - Guard classes are resolved from the request-scoped DI container\n * - Guard instances (from factory functions) are used directly\n *\n * @param guards - Guard classes or instances to apply\n *\n * @example Authentication only\n * ```typescript\n * @Controller('/api/v1/profile')\n * @UseGuards(AuthGuard())\n * export class ProfileController {\n *   show() { } // Requires authentication\n * }\n * ```\n *\n * @example Authentication with permissions\n * ```typescript\n * @Controller('/api/v1/students')\n * @UseGuards(AuthGuard({ scopes: ['students:read'] }))\n * export class StudentsController {\n *   index() { } // Requires 'students:read' permission\n * }\n * ```\n *\n * @example Method-level guards\n * ```typescript\n * @Controller('/api/v1/students')\n * @UseGuards(AuthGuard()) // Controller-level: auth only\n * export class StudentsController {\n *   index() { } // Auth only (inherited)\n *\n *   @UseGuards(AuthGuard({ scopes: ['students:create'] }))\n *   create() { } // Auth + 'students:create' permission\n * }\n * ```\n *\n * @example Multiple guards\n * ```typescript\n * @UseGuards(AuthGuard(), RateLimitGuard(), CustomGuard())\n * export class SecureController {\n *   // All guards must pass\n * }\n * ```\n */\nexport function UseGuards(...guards: Guard[]): ClassDecorator & MethodDecorator {\n  return (target: object, propertyKey?: string | symbol) => {\n    const metadata: GuardMetadata = { guards }\n\n    if (propertyKey !== undefined) {\n      // Method decorator - store on method\n      Reflect.defineMetadata(GUARD_METADATA_KEY, metadata, target, propertyKey)\n    } else {\n      // Class decorator - store on class\n      Reflect.defineMetadata(GUARD_METADATA_KEY, metadata, target)\n    }\n  }\n}\n\n/**\n * Get controller-level guard metadata\n *\n * @param target - Controller class\n * @returns Guard metadata or undefined if not decorated\n */\nexport function getControllerGuards(target: object): GuardMetadata | undefined {\n  return Reflect.getMetadata(GUARD_METADATA_KEY, target) as GuardMetadata | undefined\n}\n\n/**\n * Get method-level guard metadata\n *\n * @param target - Controller prototype\n * @param propertyKey - Method name\n * @returns Guard metadata or undefined if not decorated\n */\nexport function getMethodGuards(target: object, propertyKey: string | symbol): GuardMetadata | undefined {\n  return Reflect.getMetadata(GUARD_METADATA_KEY, target, propertyKey) as GuardMetadata | undefined\n}\n","import type { Container } from '../di'\nimport type { LoggerService } from '../logger'\nimport type { RouterContext } from '../router'\nimport type { CanActivate, Guard } from './types'\n\n/**\n * Guard Execution Service\n *\n * Executes guards for a route and determines if the request should proceed.\n * Guards are executed in order; all must pass for the request to proceed.\n */\nexport class GuardExecutionService {\n  constructor(private readonly logger: LoggerService) { }\n\n  /**\n   * Execute all guards for a route\n   *\n   * @param guards - Array of guards (classes or instances)\n   * @param context - Router context\n   * @param container - Request-scoped DI container\n   * @returns true if all guards pass\n   * @throws Error from first failing guard\n   */\n  async executeGuards(\n    guards: Guard[],\n    context: RouterContext,\n    container: Container\n  ): Promise<boolean> {\n    if (guards.length === 0) {\n      return true\n    }\n\n    this.logger.debug('Executing guards', {\n      guardCount: guards.length,\n      path: context.c.req.path,\n      method: context.c.req.method,\n    })\n\n    for (const guard of guards) {\n      const guardInstance = this.resolveGuard(guard, container)\n      const canActivate = await guardInstance.canActivate(context)\n\n      if (!canActivate) {\n        this.logger.debug('Guard denied access', {\n          // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- guard.constructor may be null at runtime\n          guard: guard.constructor?.name || 'AnonymousGuard',\n          path: context.c.req.path,\n        })\n        return false\n      }\n    }\n\n    this.logger.debug('All guards passed', {\n      guardCount: guards.length,\n      path: context.c.req.path,\n    })\n\n    return true\n  }\n\n  /**\n   * Resolve a guard to an instance\n   *\n   * @param guard - Guard class or instance\n   * @param container - Request-scoped DI container\n   * @returns Guard instance\n   */\n  private resolveGuard(guard: Guard, container: Container): CanActivate {\n    // If already an instance (has canActivate method), use directly\n    if (this.isGuardInstance(guard)) {\n      return guard\n    }\n\n    // Otherwise, resolve from container\n    return container.resolve<CanActivate>(guard)\n  }\n\n  /**\n   * Type guard to check if value is a guard instance\n   */\n  private isGuardInstance(guard: Guard): guard is CanActivate {\n    return (\n      typeof guard === 'object' &&\n      // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- typeof null === 'object', null check is required\n      guard !== null &&\n      'canActivate' in guard &&\n      typeof guard.canActivate === 'function'\n    )\n  }\n}\n"],"mappings":";;;;AAyEA,MAAa,qBAAqB,OAAO,IAAI,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AChB9D,SAAgB,UAAU,GAAG,QAAmD;AAC9E,SAAQ,QAAgB,gBAAkC;EACxD,MAAM,WAA0B,EAAE,QAAQ;AAE1C,MAAI,gBAAgB,KAAA,EAElB,SAAQ,eAAe,oBAAoB,UAAU,QAAQ,YAAY;MAGzE,SAAQ,eAAe,oBAAoB,UAAU,OAAO;;;;;;;;;AAWlE,SAAgB,oBAAoB,QAA2C;AAC7E,QAAO,QAAQ,YAAY,oBAAoB,OAAO;;;;;;;;;AAUxD,SAAgB,gBAAgB,QAAgB,aAAyD;AACvG,QAAO,QAAQ,YAAY,oBAAoB,QAAQ,YAAY;;;;;;;;;;AC9ErE,IAAa,wBAAb,MAAmC;CACjC,YAAY,QAAwC;AAAvB,OAAA,SAAA;;;;;;;;;;;CAW7B,MAAM,cACJ,QACA,SACA,WACkB;AAClB,MAAI,OAAO,WAAW,EACpB,QAAO;AAGT,OAAK,OAAO,MAAM,oBAAoB;GACpC,YAAY,OAAO;GACnB,MAAM,QAAQ,EAAE,IAAI;GACpB,QAAQ,QAAQ,EAAE,IAAI;GACvB,CAAC;AAEF,OAAK,MAAM,SAAS,OAIlB,KAAI,CAAC,MAHiB,KAAK,aAAa,OAAO,UACR,CAAC,YAAY,QAAQ,EAE1C;AAChB,QAAK,OAAO,MAAM,uBAAuB;IAEvC,OAAO,MAAM,aAAa,QAAQ;IAClC,MAAM,QAAQ,EAAE,IAAI;IACrB,CAAC;AACF,UAAO;;AAIX,OAAK,OAAO,MAAM,qBAAqB;GACrC,YAAY,OAAO;GACnB,MAAM,QAAQ,EAAE,IAAI;GACrB,CAAC;AAEF,SAAO;;;;;;;;;CAUT,aAAqB,OAAc,WAAmC;AAEpE,MAAI,KAAK,gBAAgB,MAAM,CAC7B,QAAO;AAIT,SAAO,UAAU,QAAqB,MAAM;;;;;CAM9C,gBAAwB,OAAoC;AAC1D,SACE,OAAO,UAAU,YAEjB,UAAU,QACV,iBAAiB,SACjB,OAAO,MAAM,gBAAgB"}

package/dist/http-method.decorator-DXwxAfb_.mjs

@@ -0,0 +1,96 @@
+import { f as ROUTE_METADATA_KEYS } from "./errors-BdyV5PnY.mjs";
+import { i as z } from "./validation-DtJwAv7O.mjs";
+//#region src/router/decorators/http-method.decorator.ts
+/**
+* Creates an HTTP method decorator factory for the given HTTP method.
+*
+* The returned decorator stores {@link ExplicitRouteMetadata} on the method and
+* tracks the method name under {@link ROUTE_METADATA_KEYS.DECORATED_METHODS}
+* on the controller prototype so they can be discovered at registration time.
+*/
+function createHttpMethodDecorator(method) {
+	return function(path, config) {
+		return function(target, propertyKey, descriptor) {
+			const metadata = {
+				type: "explicit",
+				method,
+				path,
+				config: config ?? { response: z.any() }
+			};
+			Reflect.defineMetadata(ROUTE_METADATA_KEYS.ROUTE_CONFIG, metadata, target, propertyKey);
+			const existing = Reflect.getOwnMetadata(ROUTE_METADATA_KEYS.DECORATED_METHODS, target) ?? [];
+			existing.push(propertyKey);
+			Reflect.defineMetadata(ROUTE_METADATA_KEYS.DECORATED_METHODS, existing, target);
+			return descriptor;
+		};
+	};
+}
+/**
+* Registers a GET route on the controller method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration (response schema, body, params, etc.)
+*
+* @example
+* ```typescript
+* @Controller('/api/v1/users')
+* class UsersController {
+*   @Get('/', { response: z.array(userSchema), summary: 'List users' })
+*   async list(ctx: RouterContext) { ... }
+*
+*   @Get('/:id', { params: z.object({ id: z.string().uuid() }), response: userSchema })
+*   async getUser(ctx: RouterContext) { ... }
+* }
+* ```
+*/
+const Get = createHttpMethodDecorator("get");
+/**
+* Registers a POST route on the controller method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration (response schema, body, params, etc.)
+*
+* @example
+* ```typescript
+* @Controller('/api/v1/users')
+* class UsersController {
+*   @Post('/', { body: createUserSchema, response: userSchema, statusCode: 201 })
+*   async createUser(ctx: RouterContext) { ... }
+* }
+* ```
+*/
+const Post = createHttpMethodDecorator("post");
+/**
+* Registers a PUT route on the controller method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration
+*/
+const Put = createHttpMethodDecorator("put");
+/**
+* Registers a PATCH route on the controller method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration
+*/
+const Patch = createHttpMethodDecorator("patch");
+/**
+* Registers a DELETE route on the controller method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration
+*/
+const Delete = createHttpMethodDecorator("delete");
+/**
+* Registers an ALL (any HTTP method) route on the controller method.
+* Routes using @All are registered without OpenAPI validation
+* since OpenAPI does not support a catch-all HTTP method.
+*
+* @param path - Route path relative to the controller base path
+* @param config - Optional route configuration
+*/
+const All = createHttpMethodDecorator("all");
+//#endregion
+export { Post as a, Patch as i, Delete as n, Put as o, Get as r, All as t };
+
+//# sourceMappingURL=http-method.decorator-DXwxAfb_.mjs.map

package/dist/http-method.decorator-DXwxAfb_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-method.decorator-DXwxAfb_.mjs","names":[],"sources":["../src/router/decorators/http-method.decorator.ts"],"sourcesContent":["import { z } from '../../i18n/validation'\nimport { ROUTE_METADATA_KEYS } from '../constants'\nimport type { ExplicitRouteMetadata, HttpMethod, RouteConfig } from '../types'\n\n/**\n * Creates an HTTP method decorator factory for the given HTTP method.\n *\n * The returned decorator stores {@link ExplicitRouteMetadata} on the method and\n * tracks the method name under {@link ROUTE_METADATA_KEYS.DECORATED_METHODS}\n * on the controller prototype so they can be discovered at registration time.\n */\nfunction createHttpMethodDecorator(method: HttpMethod) {\n  return function (path: string, config?: RouteConfig) {\n    return function (\n      target: object,\n      propertyKey: string,\n      descriptor: PropertyDescriptor\n    ) {\n      const metadata: ExplicitRouteMetadata = {\n        type: 'explicit',\n        method,\n        path,\n        config: config ?? { response: z.any() },\n      }\n\n      Reflect.defineMetadata(\n        ROUTE_METADATA_KEYS.ROUTE_CONFIG,\n        metadata,\n        target,\n        propertyKey\n      )\n\n      // Track this method as decorated on the prototype\n      const existing: string[] =\n        (Reflect.getOwnMetadata(ROUTE_METADATA_KEYS.DECORATED_METHODS, target) as string[] | undefined) ?? []\n      existing.push(propertyKey)\n      Reflect.defineMetadata(ROUTE_METADATA_KEYS.DECORATED_METHODS, existing, target)\n\n      return descriptor\n    }\n  }\n}\n\n/**\n * Registers a GET route on the controller method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration (response schema, body, params, etc.)\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * class UsersController {\n *   @Get('/', { response: z.array(userSchema), summary: 'List users' })\n *   async list(ctx: RouterContext) { ... }\n *\n *   @Get('/:id', { params: z.object({ id: z.string().uuid() }), response: userSchema })\n *   async getUser(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport const Get = createHttpMethodDecorator('get')\n\n/**\n * Registers a POST route on the controller method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration (response schema, body, params, etc.)\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * class UsersController {\n *   @Post('/', { body: createUserSchema, response: userSchema, statusCode: 201 })\n *   async createUser(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport const Post = createHttpMethodDecorator('post')\n\n/**\n * Registers a PUT route on the controller method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration\n */\nexport const Put = createHttpMethodDecorator('put')\n\n/**\n * Registers a PATCH route on the controller method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration\n */\nexport const Patch = createHttpMethodDecorator('patch')\n\n/**\n * Registers a DELETE route on the controller method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration\n */\nexport const Delete = createHttpMethodDecorator('delete')\n\n/**\n * Registers an ALL (any HTTP method) route on the controller method.\n * Routes using @All are registered without OpenAPI validation\n * since OpenAPI does not support a catch-all HTTP method.\n *\n * @param path - Route path relative to the controller base path\n * @param config - Optional route configuration\n */\nexport const All = createHttpMethodDecorator('all')\n"],"mappings":";;;;;;;;;;AAWA,SAAS,0BAA0B,QAAoB;AACrD,QAAO,SAAU,MAAc,QAAsB;AACnD,SAAO,SACL,QACA,aACA,YACA;GACA,MAAM,WAAkC;IACtC,MAAM;IACN;IACA;IACA,QAAQ,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE;IACxC;AAED,WAAQ,eACN,oBAAoB,cACpB,UACA,QACA,YACD;GAGD,MAAM,WACH,QAAQ,eAAe,oBAAoB,mBAAmB,OAAO,IAA6B,EAAE;AACvG,YAAS,KAAK,YAAY;AAC1B,WAAQ,eAAe,oBAAoB,mBAAmB,UAAU,OAAO;AAE/E,UAAO;;;;;;;;;;;;;;;;;;;;;;AAuBb,MAAa,MAAM,0BAA0B,MAAM;;;;;;;;;;;;;;;;AAiBnD,MAAa,OAAO,0BAA0B,OAAO;;;;;;;AAQrD,MAAa,MAAM,0BAA0B,MAAM;;;;;;;AAQnD,MAAa,QAAQ,0BAA0B,QAAQ;;;;;;;AAQvD,MAAa,SAAS,0BAA0B,SAAS;;;;;;;;;AAUzD,MAAa,MAAM,0BAA0B,MAAM"}

package/dist/i18n/index.d.mts

@@ -1,3 +1,3 @@
-import { A as LocaleNotSupportedError, C as DetectionStrategy, D as buildDetectorOptions, E as ResolvedI18nOptions, O as resolveI18nOptions, S as I18nModule, T as LanguageDetectionOptions, _ as Messages, b as messages, g as MessageRegistry, h as MessageLoaderService, k as TranslationMissingError, m as I18nContextMiddleware, v as getLocales, w as I18nModuleOptions, x as I18N_TOKENS, y as getMessages } from "../index-BrmS34sa.mjs";
-import { S as SystemMessageKeys, _ as II18nService, b as MessageParams, g as DeepKeys, h as AppMessages, m as AppMessageKeys, v as MessageKeyPrefix, x as Prefixes, y as MessageKeys } from "../index-Dfpd_ypO.mjs";
-export { AppMessageKeys, AppMessages, DeepKeys, DetectionStrategy, I18N_TOKENS, I18nContextMiddleware, I18nModule, I18nModuleOptions, II18nService, LanguageDetectionOptions, LocaleNotSupportedError, MessageKeyPrefix, MessageKeys, MessageLoaderService, MessageParams, MessageRegistry, Messages, Prefixes, ResolvedI18nOptions, SystemMessageKeys, TranslationMissingError, buildDetectorOptions, getLocales, getMessages, messages, resolveI18nOptions };
+import { A as LocaleNotSupportedError, C as DetectionStrategy, D as buildDetectorOptions, E as ResolvedI18nOptions, O as resolveI18nOptions, S as I18nModule, T as LanguageDetectionOptions, _ as Messages, b as messages, g as MessageRegistry, h as MessageLoaderService, k as TranslationMissingError, m as I18nContextMiddleware, v as getLocales, w as I18nModuleOptions, x as I18N_TOKENS, y as getMessages } from "../index-D0US0X14.mjs";
+import { C as MessageParams, S as MessageKeys, T as SystemMessageKeys, _ as AppMessageNamespaces, b as II18nService, g as AppMessageKeys, v as AppMessages, w as Prefixes, x as MessageKeyPrefix, y as DeepKeys } from "../index-Bnpfq6uk.mjs";
+export { AppMessageKeys, AppMessageNamespaces, AppMessages, DeepKeys, DetectionStrategy, I18N_TOKENS, I18nContextMiddleware, I18nModule, I18nModuleOptions, II18nService, LanguageDetectionOptions, LocaleNotSupportedError, MessageKeyPrefix, MessageKeys, MessageLoaderService, MessageParams, MessageRegistry, Messages, Prefixes, ResolvedI18nOptions, SystemMessageKeys, TranslationMissingError, buildDetectorOptions, getLocales, getMessages, messages, resolveI18nOptions };

package/dist/i18n/index.mjs

@@ -1,3 +1,3 @@
-import { w as I18N_TOKENS } from "../errors--RBIvDXr.mjs";
-import { B as MessageRegistry, G as buildDetectorOptions, H as getLocales, J as LocaleNotSupportedError, K as resolveI18nOptions, U as getMessages, V as MessageLoaderService, W as messages, X as I18nContextMiddleware, q as TranslationMissingError, t as I18nModule } from "../i18n.module-BpLLLCTg.mjs";
+import { w as I18N_TOKENS } from "../errors-BdyV5PnY.mjs";
+import { B as LocaleNotSupportedError, F as getMessages, H as I18nContextMiddleware, I as messages, L as buildDetectorOptions, M as MessageRegistry, N as MessageLoaderService, P as getLocales, R as resolveI18nOptions, t as I18nModule, z as TranslationMissingError } from "../i18n.module-BBlNNlcG.mjs";
 export { I18N_TOKENS, I18nContextMiddleware, I18nModule, LocaleNotSupportedError, MessageLoaderService, MessageRegistry, TranslationMissingError, buildDetectorOptions, getLocales, getMessages, messages, resolveI18nOptions };

package/dist/i18n/messages/en/index.d.mts

@@ -1,2 +1,2 @@
-import { a as errors, i as emails, n as zodI18n, o as common, r as validation } from "../../../index-BDh9J2KD.mjs";
+import { a as errors, i as emails, n as zodI18n, o as common, r as validation } from "../../../index-C1KvMncZ.mjs";
 export { common, emails, errors, validation, zodI18n };

package/dist/i18n/messages/en/index.mjs

@@ -1,2 +1,2 @@
-import { a as errors, i as emails, n as zodI18n, o as common, r as validation } from "../../../en-3QnZwP-u.mjs";
+import { a as errors, i as emails, n as zodI18n, o as common, r as validation } from "../../../en-DSH_bhh6.mjs";
 export { common, emails, errors, validation, zodI18n };

package/dist/i18n/utils/index.mjs

@@ -1,2 +1,2 @@
-import { t as setupI18nCompiler } from "../../setup-BRIN-iYT.mjs";
+import { t as setupI18nCompiler } from "../../setup-CefZKV_e.mjs";
 export { setupI18nCompiler };

package/dist/i18n/validation/index.d.mts

@@ -1,4 +1,4 @@
-import { c as runWithErrorMapContext, d as LocaleProvider, f as ZodCustomIssue, i as ZodError, l as ErrorMapContext, n as OpenAPIObject, o as z, p as withI18n, r as PathItemObject, s as backendErrorMap, t as OpenAPIHono, u as I18nErrorMetadata } from "../../index-Dfpd_ypO.mjs";
+import { c as runWithErrorMapContext, d as LocaleProvider, f as ZodCustomIssue, h as withI18n, i as ZodError, l as ErrorMapContext, m as cuid2, n as OpenAPIObject, o as z, p as CUID2_REGEX, r as PathItemObject, s as backendErrorMap, t as OpenAPIHono, u as I18nErrorMetadata } from "../../index-Bnpfq6uk.mjs";
 export * from "@hono/zod-openapi";
 export * from "zod";
-export { ErrorMapContext, I18nErrorMetadata, LocaleProvider, OpenAPIHono, OpenAPIObject, PathItemObject, ZodCustomIssue, ZodError, backendErrorMap, runWithErrorMapContext, withI18n, z };
+export { CUID2_REGEX, ErrorMapContext, I18nErrorMetadata, LocaleProvider, OpenAPIHono, OpenAPIObject, PathItemObject, ZodCustomIssue, ZodError, backendErrorMap, cuid2, runWithErrorMapContext, withI18n, z };

package/dist/i18n/validation/index.mjs

@@ -1,3 +1,3 @@
-import { a as withI18n, i as z, n as ZodError, o as backendErrorMap, s as runWithErrorMapContext, t as OpenAPIHono } from "../../validation-B4bePOa_.mjs";
+import { a as CUID2_REGEX, c as backendErrorMap, i as z, l as runWithErrorMapContext, n as ZodError, o as cuid2, s as withI18n, t as OpenAPIHono } from "../../validation-DtJwAv7O.mjs";
 export * from "@hono/zod-openapi";
-export { OpenAPIHono, ZodError, backendErrorMap, runWithErrorMapContext, withI18n, z };
+export { CUID2_REGEX, OpenAPIHono, ZodError, backendErrorMap, cuid2, runWithErrorMapContext, withI18n, z };