stratal 0.0.19 → 0.0.21

package/dist/{index-DPFqRs8L.d.mts → index-ByOyTmqf.d.mts}

@@ -1,9 +1,9 @@
-import { t as Constructor } from "./types-DIWemRad.mjs";
-import { t as Macroable } from "./index-SHx31sBJ.mjs";
-import { t as StratalEnv } from "./env-CamWD-U1.mjs";
-import { t as index_d_exports } from "./index-DFhEeFfC.mjs";
-import { a as index_d_exports$1, b as MessageKeys, i as ZodError, o as z, t as OpenAPIHono, v as II18nService, x as MessageParams, y as MessageKeyPrefix } from "./index-B437eK7p.mjs";
-import { i as LoggerService, l as LogLevel } from "./index-CWRS7Ri3.mjs";
+import { t as Constructor } from "./types-cySNS_lp.mjs";
+import { t as Macroable } from "./index-7-hU3GTV.mjs";
+import { t as StratalEnv } from "./env-D1rcZ8_r.mjs";
+import { t as index_d_exports } from "./index-C1KvMncZ.mjs";
+import { C as MessageParams, S as MessageKeys, a as index_d_exports$1, b as II18nService, i as ZodError, o as z, t as OpenAPIHono, x as MessageKeyPrefix } from "./index-Bnpfq6uk.mjs";
+import { i as LoggerService, l as LogLevel } from "./index-DBd_2wv8.mjs";
 import { DependencyContainer, DependencyContainer as DependencyContainer$1, container as container$1, delay, inject as inject$1, injectable as injectable$1, instancePerContainerCachingFactory as instancePerContainerCachingFactory$1, singleton } from "tsyringe";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { SSEMessage, SSEStreamingApi, SSEStreamingApi as SSEStreamingApi$1 } from "hono/streaming";
@@ -316,6 +316,47 @@ interface SerializedRoute {
  * Serialized from `RouteRegistry.named()` on the server, consumed by `useRoute()` on the client.
  */
 type SerializedRoutes = Record<string, SerializedRoute>;
+/**
+ * Snapshot of the route bound to the current request — shared with the client
+ * so URL helpers can answer "which route am I on?", "what are its params?",
+ * and "which sticky defaults should I auto-apply?" without parsing the URL.
+ *
+ * Discriminated by `name`. When `StratalRouteMap` is augmented, narrowing on
+ * `name` strictly types `params` per route:
+ *
+ * ```ts
+ * if (route.name === 'users.show') {
+ *   route.params.id // typed as string
+ * }
+ * ```
+ */
+type CurrentRoute = { [K in RouteName]: {
+  name: K;
+  params: NonNullable<RouteParams<K>>;
+  defaults: Record<string, string>;
+} }[RouteName] | {
+  name: null;
+  params: Record<string, string>;
+  defaults: Record<string, string>;
+};
+/**
+ * All valid arguments to `current(name)` — strict route names plus dotted
+ * wildcard patterns like `'users.*'` derived from real route prefixes.
+ *
+ * When `StratalRouteMap` is augmented and contains `'admin.users.show'`,
+ * valid wildcards are `'admin.*'` and `'admin.users.*'`. When un-augmented,
+ * collapses to `string`. When augmented but no route name has a `.`
+ * separator, the wildcard alternative resolves to `never` and the union
+ * collapses to just `RouteName`.
+ */
+type RouteMatcher = keyof StratalRouteMap extends never ? string : RouteName | `${RoutePrefixes<RouteName>}.*`;
+/**
+ * Recursively split a dotted name into all its prefix segments.
+ *
+ * @example
+ * RoutePrefixes<'admin.users.show'> // 'admin' | 'admin.users'
+ */
+type RoutePrefixes<S extends string> = S extends `${infer Head}.${infer Rest}` ? Head | `${Head}.${RoutePrefixes<Rest>}` : never;
 //#endregion
 //#region src/di/tokens.d.ts
 /**
@@ -525,6 +566,7 @@ declare const ROUTE_METADATA_KEYS: {
   readonly WS_ON_MESSAGE: symbol;
   readonly WS_ON_CLOSE: symbol;
   readonly WS_ON_ERROR: symbol;
+  readonly RATE_LIMIT: symbol;
 };
 /**
  * Security scheme identifiers for OpenAPI
@@ -770,6 +812,15 @@ interface ControllerOptions {
    */
   domain?: string;
 }
+/**
+ * Trailing-slash handling for incoming requests.
+ *
+ * - `'ignore'` (default) — match both `/foo` and `/foo/` for the same route, no redirect.
+ * - `'always'`  — non-trailing requests redirect (308) to the trailing-slash form.
+ *                 Paths whose last segment contains `.` (e.g. `/api/openapi.json`) are skipped.
+ * - `'never'`   — trailing requests redirect (308) to the non-trailing form.
+ */
+type TrailingSlashMode = 'ignore' | 'always' | 'never';
 /**
  * Versioning configuration for the application.
  * Enables URI-based API versioning when provided to Stratal config.
@@ -809,100 +860,6 @@ interface LocalePathConfig {
   defaultLocale: string | null;
 }
 //#endregion
-//#region src/router/hono-app.d.ts
-/**
- * HonoApp — extends OpenAPIHono with Stratal-specific setup
- *
- * - Request scope middleware (child container per request)
- * - Global middleware (CORS, logging, error handling)
- * - defaultHook for validation errors
- * - `use()` overload for Stratal middleware classes
- * - `configure()` for OpenAPI, routes, and 404
- */
-declare class HonoApp extends OpenAPIHono<RouterEnv> {
-  private configured;
-  private readonly _container;
-  private readonly _logger;
-  /**
-   * Reference to the original Hono `use` implementation.
-   * Captured in constructor after super() sets it as an instance property.
-   * Used by private methods to register middleware without going through the override.
-   */
-  private nativeUse;
-  constructor(container: Container, logger: LoggerService);
-  /**
-   * Apply global middleware (logger + error handler).
-   * Called by Application after locale middleware is applied by LocalePathService.
-   */
-  private applyGlobalMiddleware;
-  /**
-   * Configure OpenAPI endpoints, controller routes, and 404 handler.
-   * Called once by Application.initialize().
-   */
-  configure(): Promise<void>;
-  private setupRequestScope;
-  private handleException;
-}
-//#endregion
-//#region src/router/services/locale-path.service.d.ts
-/**
- * A resolved path with locale variant metadata.
- */
-interface ResolvedPath {
-  /** The fully resolved path (may include /:locale prefix) */
-  path: string;
-  /** Whether this path is a locale-prefixed variant */
-  isLocaleVariant: boolean;
-}
-/**
- * Resolves locale path variants for route paths.
- *
- * Computes `LocalePathConfig` from `I18nModuleOptions` and provides
- * path expansion for locale-prefixed route variants.
- *
- * Also applies language detection and default locale redirect middleware
- * to HonoApp when resolved from the container.
- *
- * Registered as a singleton in the container.
- */
-declare class LocalePathService {
-  private readonly honoApp;
-  private readonly _config;
-  private readonly _pathDetectionEnabled;
-  private readonly _prefixDefaultLocale;
-  constructor(container: Container, honoApp: HonoApp);
-  /** Whether path-based locale detection is enabled */
-  get enabled(): boolean;
-  /** The computed locale path config, or null if path detection is disabled */
-  get localePathConfig(): LocalePathConfig | null;
-  /** The prefixDefaultLocale setting (false, true, or 'redirect') */
-  get prefixDefaultLocale(): false | true | 'redirect';
-  /**
-   * Expand a path into primary + locale-prefixed variants.
-   *
-   * @param path - The base path to expand
-   * @returns Array of resolved paths with locale metadata
-   */
-  resolve(path: string): ResolvedPath[];
-  /**
-   * Build a Hono regex constraint from prefixed locales.
-   * e.g., `{en|de|fr}` — restricts `:locale` to only match known values.
-   */
-  private buildLocaleConstraint;
-  /**
-   * Apply Hono's languageDetector middleware and bridge the detected language
-   * to Stratal's LOCALE context variable.
-   */
-  private setupLanguageDetection;
-  /**
-   * Redirect requests that include the default locale prefix to the unprefixed path.
-   * For example, `/en/users` → 301 redirect to `/users`.
-   *
-   * Only active when `prefixDefaultLocale` is `'redirect'`.
-   */
-  private setupDefaultLocaleRedirect;
-}
-//#endregion
 //#region src/execution-context.d.ts
 interface StratalExecutionContext {
   waitUntil(promise: Promise<unknown>): void;
@@ -1648,6 +1605,100 @@ interface Middleware {
   handle(ctx: RouterContext, next: Next$1): Promise<Response | void>;
 }
 //#endregion
+//#region src/router/hono-app.d.ts
+/**
+ * HonoApp — extends OpenAPIHono with Stratal-specific setup
+ *
+ * - Request scope middleware (child container per request)
+ * - Global middleware (CORS, logging, error handling)
+ * - defaultHook for validation errors
+ * - `use()` overload for Stratal middleware classes
+ * - `configure()` for OpenAPI, routes, and 404
+ */
+declare class HonoApp extends OpenAPIHono<RouterEnv> {
+  private configured;
+  private readonly _container;
+  private readonly _logger;
+  /**
+   * Reference to the original Hono `use` implementation.
+   * Captured in constructor after super() sets it as an instance property.
+   * Used by private methods to register middleware without going through the override.
+   */
+  private nativeUse;
+  constructor(container: Container, logger: LoggerService, application: Application);
+  /**
+   * Apply global middleware (logger + error handler).
+   * Called by Application after locale middleware is applied by LocalePathService.
+   */
+  private applyGlobalMiddleware;
+  /**
+   * Configure OpenAPI endpoints, controller routes, and 404 handler.
+   * Called once by Application.initialize().
+   */
+  configure(): Promise<void>;
+  private setupRequestScope;
+  private handleException;
+}
+//#endregion
+//#region src/router/services/locale-path.service.d.ts
+/**
+ * A resolved path with locale variant metadata.
+ */
+interface ResolvedPath {
+  /** The fully resolved path (may include /:locale prefix) */
+  path: string;
+  /** Whether this path is a locale-prefixed variant */
+  isLocaleVariant: boolean;
+}
+/**
+ * Resolves locale path variants for route paths.
+ *
+ * Computes `LocalePathConfig` from `I18nModuleOptions` and provides
+ * path expansion for locale-prefixed route variants.
+ *
+ * Also applies language detection and default locale redirect middleware
+ * to HonoApp when resolved from the container.
+ *
+ * Registered as a singleton in the container.
+ */
+declare class LocalePathService {
+  private readonly honoApp;
+  private readonly _config;
+  private readonly _pathDetectionEnabled;
+  private readonly _prefixDefaultLocale;
+  constructor(container: Container, honoApp: HonoApp);
+  /** Whether path-based locale detection is enabled */
+  get enabled(): boolean;
+  /** The computed locale path config, or null if path detection is disabled */
+  get localePathConfig(): LocalePathConfig | null;
+  /** The prefixDefaultLocale setting (false, true, or 'redirect') */
+  get prefixDefaultLocale(): false | true | 'redirect';
+  /**
+   * Expand a path into primary + locale-prefixed variants.
+   *
+   * @param path - The base path to expand
+   * @returns Array of resolved paths with locale metadata
+   */
+  resolve(path: string): ResolvedPath[];
+  /**
+   * Build a Hono regex constraint from prefixed locales.
+   * e.g., `{en|de|fr}` — restricts `:locale` to only match known values.
+   */
+  private buildLocaleConstraint;
+  /**
+   * Apply Hono's languageDetector middleware and bridge the detected language
+   * to Stratal's LOCALE context variable.
+   */
+  private setupLanguageDetection;
+  /**
+   * Redirect requests that include the default locale prefix to the unprefixed path.
+   * For example, `/en/users` → 301 redirect to `/users`.
+   *
+   * Only active when `prefixDefaultLocale` is `'redirect'`.
+   */
+  private setupDefaultLocaleRedirect;
+}
+//#endregion
 //#region src/router/router.internals.d.ts
 /**
  * Symbol keys for Router internal accessors.
@@ -1742,6 +1793,20 @@ declare class Router {
   name(prefix: string): this;
   /** Middleware applied to controllers in this scope */
   middleware(...middlewares: Constructor<Middleware>[]): this;
+  /**
+   * Apply a named rate limiter to controllers in this scope.
+   *
+   * The named limiter must be registered via `RateLimiterRegistry.for(name, ...)`
+   * (typically inside a module's `onInitialize` hook), and the user must
+   * import `RateLimiterModule.forRoot({ store: ... })` in their AppModule.
+   *
+   * @example
+   * ```typescript
+   * router.prefix('/uploads').throttle('uploads')
+   * router.group([AdminController], (admin) => admin.throttle('admin'))
+   * ```
+   */
+  throttle(name: string): this;
   /** API version for controllers in this scope */
   version(version: string | string[]): this;
   /** Hide/show routes in this scope from OpenAPI docs */
@@ -1892,6 +1957,114 @@ declare class ModuleRegistry {
   private collectIfListener;
 }
 //#endregion
+//#region src/router/services/versioning.service.d.ts
+/**
+ * Resolves version prefixes for route paths.
+ *
+ * Handles VERSION_NEUTRAL, multi-version arrays, default version fallback,
+ * and configurable prefix (default: 'v').
+ *
+ * Registered as a singleton in the container.
+ */
+declare class VersioningService {
+  private readonly options;
+  constructor(app: Application);
+  /** Whether versioning is enabled */
+  get enabled(): boolean;
+  /**
+   * Resolve versioned paths for a base path.
+   *
+   * @param basePath - The base path (e.g., '/users')
+   * @param version - Explicit version from controller/router config
+   * @returns Array of versioned path strings (e.g., ['/v1/users', '/v2/users'])
+   */
+  resolve(basePath: string, version?: string | string[] | typeof VERSION_NEUTRAL): string[];
+}
+//#endregion
+//#region src/router/route-registry.d.ts
+/**
+ * A single registered route in the application.
+ * Tracks both named and unnamed routes, HTTP and WebSocket.
+ */
+interface RegisteredRoute {
+  /** Route name for URL generation (undefined = unnamed, still tracked) */
+  name?: string;
+  /** HTTP method or 'ws' for WebSocket gateways */
+  method: HttpMethod | 'ws';
+  /** Primary path in Hono-style :param format */
+  path: string;
+  /** Locale-prefixed path variants (e.g., '/:locale/users/:id') */
+  localePaths?: string[];
+  /** Parameter names extracted from path */
+  paramNames: string[];
+  /** Domain pattern (e.g., '{tenant}.example.com') */
+  domain?: string;
+  /** Parameter names extracted from domain */
+  domainParamNames: string[];
+  /** Controller class name */
+  controller: string;
+  /** Controller method name */
+  action: string;
+  /** Whether the route is hidden from OpenAPI docs */
+  hidden: boolean;
+  /** Middleware class names applied to this route */
+  middleware: string[];
+  /** Whether this is a locale-prefixed variant */
+  isLocaleVariant?: boolean;
+}
+/**
+ * Input for registering a route. The registry auto-extracts param names
+ * and expands versioned/locale paths via injected services.
+ */
+type RouteRegistrationInput = Omit<RegisteredRoute, 'paramNames' | 'domainParamNames' | 'path' | 'localePaths' | 'isLocaleVariant'> & {
+  /** Base path before versioning/locale expansion */basePath: string; /** Version from controller/router config (used by VersioningService). Accepts VERSION_NEUTRAL symbol. */
+  version?: string | string[] | typeof VERSION_NEUTRAL; /** Pre-computed param names (optional, auto-extracted if omitted) */
+  paramNames?: string[]; /** Pre-computed domain param names (optional, auto-extracted if omitted) */
+  domainParamNames?: string[];
+};
+/**
+ * Central registry for all application routes.
+ * Single source of truth — used by `route:list`, `route:types`, and URL generation.
+ *
+ * Routes are automatically expanded via VersioningService and LocalePathService
+ * during registration, and sorted by specificity when retrieved via `all()`.
+ *
+ * Registered as a singleton in the container.
+ */
+declare class RouteRegistry {
+  private readonly versioningService;
+  private readonly localePathService;
+  private readonly routes;
+  private readonly namedRoutes;
+  private _sortedCache;
+  private _routeToNameCache;
+  constructor(versioningService: VersioningService, localePathService: LocalePathService);
+  /**
+   * Register a route. Expands via VersioningService + LocalePathService.
+   * Named routes must have unique names.
+   *
+   * @returns Array of expanded RegisteredRoute entries (primary + locale variants)
+   * @throws DuplicateRouteNameError if a named route with the same name already exists
+   */
+  register(input: RouteRegistrationInput): RegisteredRoute[];
+  /** Get a named route by name */
+  get(name: string): RegisteredRoute | undefined;
+  /** Check if a named route exists */
+  has(name: string): boolean;
+  /**
+   * Resolve a Hono-style route path pattern (e.g. as exposed by `c.req.routePath`)
+   * back to its registered name, scoped to the request's HTTP method. Locale variant
+   * paths resolve to the canonical primary route name. Method matching is
+   * case-insensitive; routes registered with `'all'` resolve under any verb.
+   */
+  findNameByRoute(method: string, path: string): string | undefined;
+  private buildRouteToNameCache;
+  /** Get all routes sorted by specificity (static > param > wildcard, locale variant before its primary) */
+  all(): RegisteredRoute[];
+  /** Get only named routes */
+  named(): RegisteredRoute[];
+}
+//#endregion
 //#region src/router/router-resolver.d.ts
 /**
  * Resolved configuration for a single controller.
@@ -2181,10 +2354,13 @@ declare function getPathSpecificityScore(path: string): number;
  *
  * 1. Static paths before parameterized before wildcards
  * 2. More segments = more specific (tie-breaker)
- * 3. Primary paths before locale-prefixed variants
+ * 3. Locale-prefixed variants before their primary (so a locale-prefixed
+ *    request matches the variant first; a primary catch-all would otherwise
+ *    swallow the locale prefix into its param)
  */
 declare function sortRoutesBySpecificity<T extends {
   path: string;
+  isLocaleVariant?: boolean;
 }>(routes: T[]): T[];
 //#endregion
 //#region src/router/utils/route-name.d.ts
@@ -2864,6 +3040,16 @@ interface ApplicationConfig {
    * When provided, enables URI-based versioning for controllers.
    */
   versioning?: VersioningOptions;
+  /**
+   * Trailing-slash handling for incoming requests.
+   *
+   * Defaults to `'ignore'` — both `/foo` and `/foo/` resolve to the same route.
+   *
+   * - `'ignore'` — match both, no redirect.
+   * - `'always'` — non-trailing requests redirect (308) to the trailing-slash form.
+   * - `'never'`  — trailing requests redirect (308) to the non-trailing form.
+   */
+  trailingSlash?: TrailingSlashMode;
   /**
    * Custom exception handler class.
    *
@@ -3003,105 +3189,6 @@ declare class Application {
   private initializeExceptionHandler;
 }
 //#endregion
-//#region src/router/services/versioning.service.d.ts
-/**
- * Resolves version prefixes for route paths.
- *
- * Handles VERSION_NEUTRAL, multi-version arrays, default version fallback,
- * and configurable prefix (default: 'v').
- *
- * Registered as a singleton in the container.
- */
-declare class VersioningService {
-  private readonly options;
-  constructor(app: Application);
-  /** Whether versioning is enabled */
-  get enabled(): boolean;
-  /**
-   * Resolve versioned paths for a base path.
-   *
-   * @param basePath - The base path (e.g., '/users')
-   * @param version - Explicit version from controller/router config
-   * @returns Array of versioned path strings (e.g., ['/v1/users', '/v2/users'])
-   */
-  resolve(basePath: string, version?: string | string[] | typeof VERSION_NEUTRAL): string[];
-}
-//#endregion
-//#region src/router/route-registry.d.ts
-/**
- * A single registered route in the application.
- * Tracks both named and unnamed routes, HTTP and WebSocket.
- */
-interface RegisteredRoute {
-  /** Route name for URL generation (undefined = unnamed, still tracked) */
-  name?: string;
-  /** HTTP method or 'ws' for WebSocket gateways */
-  method: HttpMethod | 'ws';
-  /** Primary path in Hono-style :param format */
-  path: string;
-  /** Locale-prefixed path variants (e.g., '/:locale/users/:id') */
-  localePaths?: string[];
-  /** Parameter names extracted from path */
-  paramNames: string[];
-  /** Domain pattern (e.g., '{tenant}.example.com') */
-  domain?: string;
-  /** Parameter names extracted from domain */
-  domainParamNames: string[];
-  /** Controller class name */
-  controller: string;
-  /** Controller method name */
-  action: string;
-  /** Whether the route is hidden from OpenAPI docs */
-  hidden: boolean;
-  /** Middleware class names applied to this route */
-  middleware: string[];
-  /** Whether this is a locale-prefixed variant */
-  isLocaleVariant?: boolean;
-}
-/**
- * Input for registering a route. The registry auto-extracts param names
- * and expands versioned/locale paths via injected services.
- */
-type RouteRegistrationInput = Omit<RegisteredRoute, 'paramNames' | 'domainParamNames' | 'path' | 'localePaths' | 'isLocaleVariant'> & {
-  /** Base path before versioning/locale expansion */basePath: string; /** Version from controller/router config (used by VersioningService). Accepts VERSION_NEUTRAL symbol. */
-  version?: string | string[] | typeof VERSION_NEUTRAL; /** Pre-computed param names (optional, auto-extracted if omitted) */
-  paramNames?: string[]; /** Pre-computed domain param names (optional, auto-extracted if omitted) */
-  domainParamNames?: string[];
-};
-/**
- * Central registry for all application routes.
- * Single source of truth — used by `route:list`, `route:types`, and URL generation.
- *
- * Routes are automatically expanded via VersioningService and LocalePathService
- * during registration, and sorted by specificity when retrieved via `all()`.
- *
- * Registered as a singleton in the container.
- */
-declare class RouteRegistry {
-  private readonly versioningService;
-  private readonly localePathService;
-  private readonly routes;
-  private readonly namedRoutes;
-  private _sortedCache;
-  constructor(versioningService: VersioningService, localePathService: LocalePathService);
-  /**
-   * Register a route. Expands via VersioningService + LocalePathService.
-   * Named routes must have unique names.
-   *
-   * @returns Array of expanded RegisteredRoute entries (primary + locale variants)
-   * @throws DuplicateRouteNameError if a named route with the same name already exists
-   */
-  register(input: RouteRegistrationInput): RegisteredRoute[];
-  /** Get a named route by name */
-  get(name: string): RegisteredRoute | undefined;
-  /** Check if a named route exists */
-  has(name: string): boolean;
-  /** Get all routes sorted by specificity (static > param > wildcard, primary before locale) */
-  all(): RegisteredRoute[];
-  /** Get only named routes */
-  named(): RegisteredRoute[];
-}
-//#endregion
 //#region src/router/uri.d.ts
 /**
  * Options for URL generation methods.
@@ -3150,7 +3237,8 @@ declare class Uri {
   private readonly registry;
   private readonly routerContext;
   private _defaults;
-  constructor(registry: RouteRegistry, routerContext: RouterContext);
+  private readonly trailingSlash;
+  constructor(registry: RouteRegistry, routerContext: RouterContext, application: Application);
   /**
    * Set default URL parameters for this request.
    * Applied to all subsequent `route()` calls — explicit params override defaults.
@@ -3158,6 +3246,14 @@ declare class Uri {
    * @param params - Default parameters (e.g., `{ locale: 'en' }`)
    */
   defaults(params: Record<string, string>): void;
+  /**
+   * Read the currently configured default URL parameters.
+   *
+   * Used by frameworks that need to share these with the client (e.g. the
+   * Inertia adapter ships them as a shared prop so `route()` calls in the
+   * browser auto-fill the same sticky params as the server).
+   */
+  getDefaults(): Record<string, string>;
   /**
    * Generate a URL from a named route.
    *
@@ -3280,6 +3376,11 @@ declare class RouterContext<T extends RouterEnv = RouterEnv> extends Macroable {
    * Access for advanced use cases not covered by helper methods
    */
   constructor(c: Context<T>);
+  /**
+   * Cloudflare-provided request properties (geo, TLS, bot management, etc.).
+   * Always available on Cloudflare Workers requests via `c.req.raw.cf`.
+   */
+  get cf(): CfProperties;
   /**
    * Get request-scoped DI container
    * Contains request-specific services and context (AuthContext)
@@ -3309,10 +3410,20 @@ declare class RouterContext<T extends RouterEnv = RouterEnv> extends Macroable {
    */
   json(data: object | null, status?: ContentfulStatusCode): Response;
   /**
-   * Get route parameter value
+   * Get route parameter value(s).
+   *
+   * Reads the validated, Zod-coerced param record from `c.req.valid('param')`,
+   * which is what `@hono/zod-openapi` populates for every route registered
+   * via `app.openapi(...)`. Bare `c.req.param()` returns `undefined` for those
+   * routes — always go through the validated record.
+   *
+   * - With a key → returns the single string value.
+   * - With no args → returns the full `Record<string, string>` (or `{}` when
+   *   the matched route has no path params).
    *
    * @param key - Parameter name (e.g., 'id' for /users/:id)
    */
+  param(): Record<string, string>;
   param(key: string): string;
   /**
    * Get query parameter value
@@ -3914,7 +4025,8 @@ declare const ERROR_CODES: {
     /** Generic resource not found */readonly NOT_FOUND: 4000; /** Route/endpoint not found */
     readonly ROUTE_NOT_FOUND: 4004; /** Resource conflict or duplicate */
     readonly CONFLICT: 4100; /** Resource already exists */
-    readonly ALREADY_EXISTS: 4101;
+    readonly ALREADY_EXISTS: 4101; /** Rate limit exceeded */
+    readonly TOO_MANY_REQUESTS: 4290;
   };
   /**
    * Validation Errors (1000-1999)
@@ -4314,5 +4426,5 @@ declare class StratalNotInitializedError extends ApplicationError {
   constructor();
 }
 //#endregion
-export { SSEMessage as $, VersioningOptions as $n, ModuleRegistry as $t, LocaleNotSupportedError as A, ContextCallback as An, instancePerContainerCachingFactory$1 as Ar, Route as At, ContextQueryResult as B, ControllerOptions as Bn, WhenOptions as Br, getControllerOptions as Bt, DetectionStrategy as C, OnInitialize as Cn, Container as Cr, commonErrorSchemas as Ct, buildDetectorOptions as D, ValueProvider as Dn, delay as Dr, successMessageSchema as Dt, ResolvedI18nOptions as E, RegistryEntry as En, container$1 as Er, paginationQuerySchema as Et, QueueExceptionContext as F, RespondCallback as Fn, ConditionalBindingUse as Fr, Get as Ft, buildRouteUrl as G, RouteBodyObject as Gn, extractParamNames as Gt, SignedUriOptions as H, ExplicitRouteMetadata as Hn, ErrorResponse as Hr, getControllerVersion as Ht, createCliExceptionContext as I, StratalExecutionContext as In, PredicateContainer as Ir, Patch as It, RouteRegistry as J, RouteResponse as Jn, sortRoutesBySpecificity as Jt, RegisteredRoute as K, RouteConfig as Kn, generateConventionRouteName as Kt, createCronExceptionContext as L, LocalePathService as Ln, ContainerLike as Lr, Post as Lt, CronExceptionContext as M, RenderableCallback as Mn, ConditionalBindingBuilder as Mr, getRouteMetadata as Mt, ExceptionContext as N, Reportable as Nn, ConditionalBindingBuilderImpl as Nr, All as Nt, resolveI18nOptions as O, ExceptionHandler as On, inject$1 as Or, uuidParamSchema as Ot, HttpExceptionContext as P, ReportableCallback as Pn, ConditionalBindingGive as Pr, Delete as Pt, ApplicationOptions as Q, SecurityScheme as Qn, RouteRegistrationService as Qt, createHttpExceptionContext as R, ResolvedPath as Rn, ExtensionDecorator as Rr, Put as Rt, I18nModule as S, OnException as Sn, StratalRouteMap as Sr, parseDomainPattern as St, LanguageDetectionOptions as T, Provider as Tn, DependencyContainer$1 as Tr, paginatedResponseSchema as Tt, Uri as U, LocalePathConfig as Un, isErrorResponse as Ur, createMiddlewareChain as Ut, RouterContext as V, ConventionRouteMetadata as Vn, Environment as Vr, getControllerRoute as Vt, UriOptions as W, RouteBody as Wn, extractDomainParamNames as Wt, Application as X, RouterEnv as Xn, route as Xt, VersioningService as Y, RouteResponseObject as Yn, toOpenAPIPath as Yt, ApplicationConfig as Z, RouterVariables as Zn, ROUTER_TOKENS as Zt, Messages as _, FactoryProvider as _n, DI_TOKENS as _r, SignedUrlOptions as _t, InternalError as a, IController as an, containerStorage as ar, MiddlewareNextCalledMultipleTimesError as at, messages as b, ModuleContext as bn, SerializedRoute as br, VerifySignatureMiddleware as bt, getHttpStatus as c, CommandResult as cn, RequestScopeOperationNotAllowedError as cr, ResponseValidationError as ct, ApplicationError as d, ParsedSignature as dn, INJECT_PARAM_METADATA_KEY as dr, SchemaValidationError as dt, RouteConfigurable as en, HTTP_METHODS as er, SSEStreamingApi$1 as et, ERROR_CODES as f, Quarry as fn, InjectParam as fr, RouteNotFoundError as ft, MessageRegistry as g, ExistingProvider as gn, DIToken as gr, ControllerRegistrationError as gt, MessageLoaderService as h, DynamicModule as hn, CONTAINER_TOKEN as hr, HonoAppAlreadyConfiguredError as ht, isApplicationError as i, Next$1 as in, VERSION_NEUTRAL as ir, InvalidSignatureError as it, CliExceptionContext as j, LogSeverity as jn, singleton as jr, getRouteDecoratedMethods as jt, TranslationMissingError as k, ApplicationErrorConstructor as kn, injectable$1 as kr, validationErrorResponseSchema as kt, resolveHttpStatus as l, ParsedArgument as ln, ConditionalBindingFallbackError as lr, RouteNameNotFoundError as lt, I18nContextMiddleware as m, ClassProvider as mn, getMethodInjections as mr, OpenAPIRouteRegistrationError as mt, RequestContainerNotInitializedError as n, RouterGroupConfig as nn, ROUTE_METADATA_KEYS as nr, DomainMismatchError as nt, HttpException as o, CommandInput as on, getContainer as or, MissingEnvironmentVariableError as ot, ErrorCode as p, AsyncModuleOptions as pn, ParamInjection as pr, OpenAPIValidationError as pt, RouteRegistrationInput as q, RouteMetadata as qn, getPathSpecificityScore as qt, ContainerNotInitializedError as r, Middleware as rn, SECURITY_SCHEMES as rr, DuplicateRouteNameError as rt, abort as s, CommandInternals as sn, runWithContainer as sr, MissingRouteParamError as st, StratalNotInitializedError as t, Router as tn, ROUTER_CONTEXT_KEYS as tr, StreamingApi$1 as tt, DefaultExceptionHandler as u, ParsedOption as un, Transient as ur, RouterUseScopeError as ut, getLocales as v, InjectionToken$2 as vn, RouteName as vr, signUrl as vt, I18nModuleOptions as w, OnShutdown as wn, ContainerOptions as wr, errorResponseSchema as wt, I18N_TOKENS as x, ModuleOptions as xn, SerializedRoutes as xr, createDomainMiddleware as xt, getMessages as y, ModuleClass as yn, RouteParams as yr, verifySignedUrl as yt, createQueueExceptionContext as z, HonoApp as zn, Scope as zr, Controller as zt };
-//# sourceMappingURL=index-DPFqRs8L.d.mts.map
+export { DuplicateRouteNameError as $, TrailingSlashMode as $n, ModuleRegistry as $t, LocaleNotSupportedError as A, ValueProvider as An, container$1 as Ar, Delete as At, ContextQueryResult as B, ControllerOptions as Bn, PredicateContainer as Br, extractDomainParamNames as Bt, DetectionStrategy as C, ModuleContext as Cn, RoutePrefixes as Cr, successMessageSchema as Ct, buildDetectorOptions as D, OnShutdown as Dn, Container as Dr, getRouteDecoratedMethods as Dt, ResolvedI18nOptions as E, OnInitialize as En, StratalRouteMap as Er, Route as Et, QueueExceptionContext as F, RenderableCallback as Fn, singleton as Fr, Controller as Ft, buildRouteUrl as G, RouteBodyObject as Gn, Environment as Gr, toOpenAPIPath as Gt, SignedUriOptions as H, ExplicitRouteMetadata as Hn, ExtensionDecorator as Hr, generateConventionRouteName as Ht, createCliExceptionContext as I, Reportable as In, ConditionalBindingBuilder as Ir, getControllerOptions as It, ApplicationOptions as J, RouteResponse as Jn, RouteRegistrationService as Jt, Application as K, RouteConfig as Kn, ErrorResponse as Kr, route as Kt, createCronExceptionContext as L, ReportableCallback as Ln, ConditionalBindingBuilderImpl as Lr, getControllerRoute as Lt, CronExceptionContext as M, ApplicationErrorConstructor as Mn, inject$1 as Mr, Patch as Mt, ExceptionContext as N, ContextCallback as Nn, injectable$1 as Nr, Post as Nt, resolveI18nOptions as O, Provider as On, ContainerOptions as Or, getRouteMetadata as Ot, HttpExceptionContext as P, LogSeverity as Pn, instancePerContainerCachingFactory$1 as Pr, Put as Pt, DomainMismatchError as Q, SecurityScheme as Qn, VersioningService as Qt, createHttpExceptionContext as R, RespondCallback as Rn, ConditionalBindingGive as Rr, getControllerVersion as Rt, I18nModule as S, ModuleClass as Sn, RouteParams as Sr, paginationQuerySchema as St, LanguageDetectionOptions as T, OnException as Tn, SerializedRoutes as Tr, validationErrorResponseSchema as Tt, Uri as U, LocalePathConfig as Un, Scope as Ur, getPathSpecificityScore as Ut, RouterContext as V, ConventionRouteMetadata as Vn, ContainerLike as Vr, extractParamNames as Vt, UriOptions as W, RouteBody as Wn, WhenOptions as Wr, sortRoutesBySpecificity as Wt, SSEStreamingApi$1 as X, RouterEnv as Xn, RouteRegistrationInput as Xt, SSEMessage as Y, RouteResponseObject as Yn, RegisteredRoute as Yt, StreamingApi$1 as Z, RouterVariables as Zn, RouteRegistry as Zt, Messages as _, ClassProvider as _n, DIToken as _r, createDomainMiddleware as _t, InternalError as a, HonoApp as an, VERSION_NEUTRAL as ar, RouteNameNotFoundError as at, messages as b, FactoryProvider as bn, RouteMatcher as br, errorResponseSchema as bt, getHttpStatus as c, IController as cn, runWithContainer as cr, RouteNotFoundError as ct, ApplicationError as d, CommandResult as dn, Transient as dr, HonoAppAlreadyConfiguredError as dt, RouteConfigurable as en, VersioningOptions as er, InvalidSignatureError as et, ERROR_CODES as f, ParsedArgument as fn, INJECT_PARAM_METADATA_KEY as fr, ControllerRegistrationError as ft, MessageRegistry as g, AsyncModuleOptions as gn, CONTAINER_TOKEN as gr, VerifySignatureMiddleware as gt, MessageLoaderService as h, Quarry as hn, getMethodInjections as hr, verifySignedUrl as ht, isApplicationError as i, ResolvedPath as in, SECURITY_SCHEMES as ir, ResponseValidationError as it, CliExceptionContext as j, ExceptionHandler as jn, delay as jr, Get as jt, TranslationMissingError as k, RegistryEntry as kn, DependencyContainer$1 as kr, All as kt, resolveHttpStatus as l, CommandInput as ln, RequestScopeOperationNotAllowedError as lr, OpenAPIValidationError as lt, I18nContextMiddleware as m, ParsedSignature as mn, ParamInjection as mr, signUrl as mt, RequestContainerNotInitializedError as n, RouterGroupConfig as nn, ROUTER_CONTEXT_KEYS as nr, MissingEnvironmentVariableError as nt, HttpException as o, Middleware as on, containerStorage as or, RouterUseScopeError as ot, ErrorCode as p, ParsedOption as pn, InjectParam as pr, SignedUrlOptions as pt, ApplicationConfig as q, RouteMetadata as qn, isErrorResponse as qr, ROUTER_TOKENS as qt, ContainerNotInitializedError as r, LocalePathService as rn, ROUTE_METADATA_KEYS as rr, MissingRouteParamError as rt, abort as s, Next$1 as sn, getContainer as sr, SchemaValidationError as st, StratalNotInitializedError as t, Router as tn, HTTP_METHODS as tr, MiddlewareNextCalledMultipleTimesError as tt, DefaultExceptionHandler as u, CommandInternals as un, ConditionalBindingFallbackError as ur, OpenAPIRouteRegistrationError as ut, getLocales as v, DynamicModule as vn, DI_TOKENS as vr, parseDomainPattern as vt, I18nModuleOptions as w, ModuleOptions as wn, SerializedRoute as wr, uuidParamSchema as wt, I18N_TOKENS as x, InjectionToken$2 as xn, RouteName as xr, paginatedResponseSchema as xt, getMessages as y, ExistingProvider as yn, CurrentRoute as yr, commonErrorSchemas as yt, createQueueExceptionContext as z, StratalExecutionContext as zn, ConditionalBindingUse as zr, createMiddlewareChain as zt };
+//# sourceMappingURL=index-ByOyTmqf.d.mts.map