veloce-ts 0.4.18 → 1.0.1

package/CHANGELOG.md

@@ -7,6 +7,126 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-06-26
+
+### Fixed
+
+- **GraphQL decorator pipeline wired up.** `@Resolver`, `@GQLQuery`, `@GQLMutation`, `@GQLSubscription`, and `@Arg` decorators now correctly connect to `GraphQLPlugin`. Previously the decorators wrote metadata using local symbols that `GraphQLSchemaBuilder` never read — the schema was always empty.
+
+  Pass resolver classes to the plugin via the new `resolvers` option:
+  ```typescript
+  app.usePlugin(new GraphQLPlugin({ resolvers: [UserResolver, PostResolver] }));
+  ```
+  Or register them with `app.include()` before calling `usePlugin()`:
+  ```typescript
+  app.include(UserResolver);
+  app.usePlugin(new GraphQLPlugin());
+  ```
+
+- **`PermissionManager.revokePermission()` bug fixed.** When called without a `resourceId`, the filter condition `resourceId ? p.resourceId !== resourceId : true` always returned `true` (kept all records, removed nothing). Now correctly removes all permissions for the user+resource pair when no `resourceId` is specified.
+
+- **`app.include()` now recognises `@Resolver` classes.** Previously silently ignored — now registers resolver metadata into `MetadataRegistry` so `GraphQLPlugin` can pick it up automatically.
+
+### Added
+
+- **89 new tests** (507 total, 0 failures) covering:
+  - GraphQL decorator metadata pipeline end-to-end
+  - `app.include()` + `resolvers: []` option merge
+  - `PermissionPlugin` construction, `PermissionManager` unit logic, management route auth guards
+  - `HealthCheckPlugin` `/health`, `/ready`, `/live` endpoints, custom check logic, `HealthCheckers` factory
+  - `OAuthPlugin` route behavior, `BaseOAuthProvider`/`GoogleOAuthProvider`/`GitHubOAuthProvider`, `OAuthStateManager`, `PKCEUtils`
+  - Logger (`createLogger`, `getLogger`, `initializeLogger`, `createChildLogger`, child context propagation)
+
+## [1.0.0] - 2026-06-26
+
+First stable release. Establishes a frozen public API with semver guarantees going forward.
+
+### Breaking Changes
+
+- **`FastAPITS` export removed.** Use `VeloceTS` or the `Veloce` alias instead.
+  ```typescript
+  // Before
+  import { FastAPITS } from 'veloce-ts';
+  // After
+  import { Veloce } from 'veloce-ts';
+  ```
+
+- **`WebSocketPlugin` throws on Node.js at install time** instead of silently returning 501 at request time. If you were catching the 501 response, catch the constructor error instead. WebSocket is supported on Bun and Deno only.
+  ```typescript
+  // Node.js — throws Error('WebSocketPlugin requires Bun or Deno runtime...')
+  app.usePlugin(new WebSocketPlugin({ ... }));
+  ```
+
+- **`@InjectDrizzleRepository` decorator removed.** It was a no-op stub. Remove any usages — the decorator did nothing at runtime.
+
+### Added
+
+- **`OAuthPlugin`, `PermissionPlugin`, `SessionPlugin`** now exported from the main `'veloce-ts'` barrel (previously only from `'veloce-ts/auth'`).
+- **`registerPrisma(app, client)`** — thin DI helper for Prisma, mirrors `registerDrizzle`. Exports `PRISMA_TOKEN`.
+- **`registerTypeORM(app, dataSource)`** — thin DI helper for TypeORM. Exports `TYPEORM_TOKEN`.
+
+### Fixed
+
+- **TypeScript errors** — 12 pre-existing errors resolved: route param casts in auth plugins, `PrismaDelegate` missing `createMany`, middleware spread type mismatch in `RouterCompiler`.
+- **RouterCompiler** dead `compiledRoutes` Map removed — it was write-only and shared the same class-name collision bug that was already fixed in `MetadataCompiler`.
+- **Branding** — "FastAPI-TS" replaced with "Veloce-TS" in all error messages and JSDoc across `src/adapters/hono.ts`, `src/orm/prisma/plugin.ts`, `src/orm/typeorm/plugin.ts`, `src/orm/typeorm/decorators.ts`, `src/orm/transaction-plugin.ts`.
+
+### Test coverage
+
+413 tests passing, 0 failures across 21 files. New files added:
+- `tests/websocket.test.ts` — 11 tests (decorator registration, plugin construction on Bun, upgrade route, auth guards)
+- `tests/graphql.test.ts` — 10 tests (plugin install, invalid JSON, GET/POST, playground, introspection)
+
+## [0.4.18] - 2026-06-25
+
+Full security & correctness audit across the framework core, auth layer, ORM integrations, and build pipeline. 375 tests passing, 0 failures.
+
+### Fixed
+
+**Auth / Security**
+- **RBAC plugin:** all 7 management routes (`/roles`, `/users/:id/roles`, etc.) now correctly require `requireAuth`. Previously they were publicly accessible.
+- **Permission plugin:** all 7 permission management routes now correctly require `requireAuth`. Same gap as RBAC.
+- **JWT blacklist:** replaced the `Set<string>` with `Map<string, number>` (token → expiry timestamp). Provides O(1) lookup and enables `cleanupBlacklist()` to auto-purge expired entries without scanning the entire set.
+- **OAuth plugin:** `login()` returned 401 on valid credentials due to an inverted conditional; fixed. PKCE code TTL was set to `Date.now()` (milliseconds) instead of `Date.now() / 1000` (seconds), causing immediate expiry.
+- **Auth plugin:** removed 5 `console.log()` debug calls leaking tokens and user data to stdout in production builds.
+- **Auth service:** `hashPassword()` was gated by an incorrect production guard that blocked legitimate use; removed.
+
+**Core**
+- **MetadataCompiler:** cache key changed from `"ClassName:methodName"` to a WeakMap-based numeric class identity (`targetId:methodName`). Fixes 36 test failures when running Bun's shared-process test runner: classes with the same name in different test files no longer share a cache slot, so each app instance compiles its own routes with its own DI/JWT context.
+- **MetadataRegistry:** `getRouteMethods()` now walks the full prototype chain. Inherited route methods from a base controller were previously invisible to the router compiler.
+- **Application:** `createAdapter()` is now `async` and properly `await`ed. `listen()` is awaited. Timeout middleware and cache configuration now propagate correctly to the adapter.
+- **CacheManager:** added `static reset()` to clear all stores and registered names — required for test isolation between app instances in the same process.
+
+**ORM**
+- **Base repository:** `createMany()` now uses `Promise.all()` for parallel execution instead of sequential `await` in a loop.
+- **Prisma repository:** fixed double insert in `create()` — the entity was being saved twice.
+- **Drizzle transaction manager:** `commit()` was called inside `finally` block, running even after a successful commit. Moved to the normal path only.
+- **TypeORM transaction manager:** `QueryRunner` was not released on error, leaking database connections.
+- **Drizzle repository:** static `import` of `drizzle-orm` at module top level replaced with lazy `require()` via `getDrizzleOps()`. Fixes build failure when `drizzle-orm` is not installed (optional peer dep).
+- **TypeORM repository:** same fix — static `import` of `typeorm` replaced with lazy `getTypeORMOps()`.
+
+**Build**
+- **`build.ts`:** added `external` array to both `Bun.build()` calls covering all optional peer deps (`drizzle-orm`, `typeorm`, `prisma`, `@prisma/client`, `reflect-metadata`, `graphql`, `ioredis`, `express`, `hono`). Without this, `bun run build` failed when any optional dep was absent.
+
+**Other**
+- **GraphQL plugin:** `JSON.parse()` on the `variables` field now wrapped in try-catch; previously threw an unhandled exception on malformed JSON.
+- **Session store:** auto-cleanup interval registered on construction; SIGTERM/SIGINT handlers stop it on shutdown (prevents hanging processes).
+- **Rate limit middleware:** SIGTERM/SIGINT cleanup for the cleanup interval — same pattern.
+- **Validator:** removed dead `resultCache` WeakMap that accumulated entries without any code path reading from it.
+
+### Added
+
+**Tests**
+- `tests/fixes.test.ts` — 45 integration tests covering all 24 corrected bugs above (JWT blacklist Map behavior, RBAC/Permission auth guards, CacheManager.reset(), prototype chain routing, parallel createMany, MetadataCompiler class identity, lazy ORM imports, GraphQL JSON parse errors, session cleanup, functional route timeout/cache).
+- `tests/cache.test.ts` — 40 tests for `parseTTL`, `MemoryCacheStore` (CRUD, TTL expiry, LRU eviction, pattern deletion), and `CacheManager` (reset, named stores, generateKey, convenience functions).
+- `tests/session.test.ts` — 17 tests for `MemorySessionStore` (CRUD, touch, expiry with real-time wait, multi-session independence).
+
+**Total test count: 375 pass, 0 fail** (was 273 before this release).
+
+**Benchmarks**
+- `benchmarks/internal.bench.ts` — 14 in-process micro-benchmarks measuring: JWT sign/verify/decode, Map-based blacklist lookup (77 M ops/s), MetadataCompiler cache-miss vs cache-hit (5× faster on hit), Zod `safeParse` valid/invalid, CacheManager get/set, DIContainer singleton resolution, and full Hono stack dispatch (GET simple, GET with param, POST with Zod body).
+- Results saved to `benchmarks/results/internal-2026-06-25.txt`.
+
 ## [0.4.10] - 2026-05-12
 
 ### Fixed
@@ -740,7 +860,10 @@ This release brings powerful performance optimization features to Veloce-TS:
 - CLI tooling
 - Testing utilities
 
-[Unreleased]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v0.4.0...HEAD
+[Unreleased]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v0.4.18...v1.0.0
+[0.4.18]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v0.4.10...v0.4.18
+[0.4.10]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v0.4.9...v0.4.10
 [0.4.0]: https://github.com/AlfredoMejia3001/veloce-ts/compare/v0.3.3...v0.4.0
 [0.3.3]: https://github.com/AlfredoMejia3001/veloce-ts/releases/tag/v0.3.3
 [0.3.2]: https://github.com/AlfredoMejia3001/veloce-ts/releases/tag/v0.3.2

package/MIGRATION.md

@@ -0,0 +1,109 @@
+# Migration Guide
+
+## 0.x → 1.0.0
+
+Three breaking changes. All have straightforward fixes.
+
+---
+
+### 1. Replace `FastAPITS` with `Veloce`
+
+`FastAPITS` is removed. It was deprecated in v0.4.1.
+
+```typescript
+// Before
+import { FastAPITS } from 'veloce-ts';
+const app = new FastAPITS({ title: 'My API' });
+
+// After
+import { Veloce } from 'veloce-ts';
+const app = new Veloce({ title: 'My API' });
+```
+
+`VeloceTS` is also valid if you prefer the full name:
+
+```typescript
+import { VeloceTS } from 'veloce-ts';
+const app = new VeloceTS({ title: 'My API' });
+```
+
+---
+
+### 2. WebSocketPlugin throws on Node.js at startup
+
+Previously `WebSocketPlugin` silently returned HTTP 501 on every upgrade request when running on Node.js. In 1.0.0 it throws at `app.usePlugin()` time.
+
+**If you run on Bun or Deno** — no change needed. WebSocket works the same.
+
+**If you run on Node.js** — remove `WebSocketPlugin` for now. Node.js WebSocket support is not yet implemented. Either:
+
+```typescript
+// Option A: guard by runtime
+const isBun = typeof Bun !== 'undefined';
+if (isBun) {
+  app.usePlugin(new WebSocketPlugin({ ... }));
+}
+
+// Option B: remove WebSocket until Node.js support lands
+```
+
+---
+
+### 3. Remove `@InjectDrizzleRepository` usages
+
+The decorator was a no-op stub that logged a warning and did nothing. Remove any imports or usages:
+
+```typescript
+// Remove this — it never worked
+import { InjectDrizzleRepository } from 'veloce-ts';
+
+@InjectDrizzleRepository()  // remove
+userRepo: UserRepository;
+```
+
+Use constructor injection with `@Depends` instead:
+
+```typescript
+import { Controller, Get, Depends } from 'veloce-ts';
+import { UserRepository } from './user.repository';
+
+@Controller('/users')
+class UserController {
+  @Get('/')
+  async list(@Depends(UserRepository) repo: UserRepository) {
+    return repo.findMany();
+  }
+}
+```
+
+---
+
+### New in 1.0.0 — no action required
+
+These additions are backwards-compatible:
+
+- `OAuthPlugin`, `PermissionPlugin`, `SessionPlugin` now importable directly from `'veloce-ts'` (still also available from `'veloce-ts/auth'`)
+- `registerPrisma(app, prismaClient)` — DI helper for Prisma
+- `registerTypeORM(app, dataSource)` — DI helper for TypeORM
+
+```typescript
+import { registerPrisma, registerTypeORM } from 'veloce-ts';
+
+// Prisma
+registerPrisma(app, prisma);
+
+// TypeORM
+registerTypeORM(app, dataSource);
+```
+
+---
+
+### Semver from 1.0.0 onwards
+
+Veloce-TS follows [Semantic Versioning](https://semver.org/) from this release:
+
+- **Patch** (1.0.x) — bug fixes, no API changes
+- **Minor** (1.x.0) — new features, backwards-compatible
+- **Major** (x.0.0) — breaking changes with migration guide
+
+Check [CHANGELOG.md](CHANGELOG.md) before upgrading.

package/README.md

@@ -83,6 +83,13 @@ Request tracing
 - Timeout management
 - Structured logging
 
+### 🛡️ **Battle-tested** (v0.4.18)
+Security & correctness audit
+- 375 tests, 0 failures
+- Auth routes secured (RBAC/Permissions)
+- JWT blacklist O(1) Map lookup
+- In-process benchmarks included
+
 </td>
 </tr>
 </table>
@@ -236,7 +243,7 @@ app.listen(3000);
 <summary><b>WebSocket Support</b></summary>
 
 ```typescript
-import { WebSocket, OnConnect, OnMessage, OnDisconnect } from 'veloce-ts';
+import { WebSocket, OnConnect, OnMessage, OnDisconnect, WebSocketConnection } from 'veloce-ts';
 import { z } from 'zod';
 
 const MessageSchema = z.object({
@@ -489,11 +496,32 @@ app.usePlugin(new OpenAPIPlugin({
   docsPath: '/docs',
 }));
 
-// GraphQL support
+// GraphQL support — pass resolver classes via the resolvers option
+import { Resolver, GQLQuery, GQLMutation, Arg } from 'veloce-ts/graphql';
+import { z } from 'zod';
+
+@Resolver('user')
+class UserResolver {
+  @GQLQuery('getUser')
+  async getUser(@Arg('id', z.string()) id: string) {
+    return { id, name: 'Alice' };
+  }
+
+  @GQLMutation('createUser')
+  async createUser(@Arg('name', z.string()) name: string) {
+    return { id: '1', name };
+  }
+}
+
 app.usePlugin(new GraphQLPlugin({
   path: '/graphql',
   playground: true,
+  resolvers: [UserResolver],   // pass all @Resolver classes here
 }));
+
+// Alternatively, register via app.include() before usePlugin():
+// app.include(UserResolver);
+// app.usePlugin(new GraphQLPlugin({ playground: true }));
 ```
 
 ## 🌐 Multi-Runtime Support
@@ -520,7 +548,7 @@ These are **known gaps today** so you can choose Veloce-TS with clear expectatio
 
 | Area | Limitation |
 |------|------------|
-| **WebSockets on Node.js** | The built-in WebSocket plugin responds with **501** on Node.js. WebSocket upgrades are supported on **Bun** and **Deno**; Node support is not wired up yet (e.g. no `ws`/HTTP upgrade bridge in core). |
+| **WebSockets on Node.js** | `WebSocketPlugin` throws at startup on Node.js with a clear error message directing you to Bun/Deno. WebSocket upgrades are supported on **Bun** and **Deno** only; Node.js support requires a `ws`/HTTP upgrade bridge not yet implemented. |
 | **GraphQL** | The GraphQL plugin and decorators are **still maturing**. Treat them as **experimental** for production unless you have validated your use case. |
 | **ORM integrations** | First-class **Drizzle** helpers exist for the DI container (`registerDrizzle`, `@InjectDB`). **Prisma** and **TypeORM** are **not yet** at the same level of documented, built-in integration—use them directly in your services today. |
 | **Pre-1.0** | APIs may change between minor versions. Check the [CHANGELOG](CHANGELOG.md) before upgrading. |
@@ -534,6 +562,8 @@ Directional priorities—not a release calendar. Items may ship in a different o
 3. **CLI scaffolding** — Lightweight **code generation** (e.g. controller + route + test skeleton), similar in spirit to Feathers’ `generate service`, kept maintainable and optional.
 4. **GraphQL** — Improve stability and docs **after** REST, caching, WebSockets-on-Node, and ORM stories are in better shape (lower priority than the items above).
 
+**Completed in v0.4.18:** Security audit of auth routes, JWT blacklist correctness, MetadataCompiler cache isolation fix, ORM lazy-loading for optional peer deps, 375-test suite, internal micro-benchmarks.
+
 For the latest shipped changes, see [CHANGELOG](CHANGELOG.md). Discussion and proposals: [GitHub Discussions](https://github.com/AlfredoMejia3001/veloce-ts/discussions).
 
 ## 📖 Documentation

package/dist/cjs/src/adapters/hono.js

@@ -1,3 +1,3 @@
-var P=Object.create;var{getPrototypeOf:Q,defineProperty:H,getOwnPropertyNames:K,getOwnPropertyDescriptor:U}=Object,L=Object.prototype.hasOwnProperty;function M(x){return this[x]}var V,W,N=(x,z,A)=>{var D=x!=null&&typeof x==="object";if(D){var B=z?V??=new WeakMap:W??=new WeakMap,C=B.get(x);if(C)return C}A=x!=null?P(Q(x)):{};let E=z||!x||!x.__esModule?H(A,"default",{value:x,enumerable:!0}):A;for(let F of K(x))if(!L.call(E,F))H(E,F,{get:M.bind(x,F),enumerable:!0});if(D)B.set(x,E);return E},X=(x)=>{var z=(J??=new WeakMap).get(x),A;if(z)return z;if(z=H({},"__esModule",{value:!0}),x&&typeof x==="object"||typeof x==="function"){for(var D of K(x))if(!L.call(z,D))H(z,D,{get:M.bind(x,D),enumerable:!(A=U(x,D))||A.enumerable})}return J.set(x,z),z},J,R=(x,z)=>()=>(z||x((z={exports:{}}).exports,z),z.exports);var Y=(x)=>x;function Z(x,z){this[x]=Y.bind(null,z)}var $=(x,z)=>{for(var A in z)H(x,A,{get:z[A],enumerable:!0,configurable:!0,set:Z.bind(z,A)})};var T=(x,z)=>()=>(x&&(z=x(x=0)),z);var y={};$(y,{HonoAdapter:()=>O});module.exports=X(y);class O{hono;name="hono";runtime;constructor(x){this.hono=x;this.runtime=j()}listen(x,z){switch(this.runtime){case"bun":return this.listenBun(x,z);case"deno":return this.listenDeno(x,z);case"node":return this.listenNode(x,z);case"workerd":throw Error("Cloudflare Workers do not support listen(). Deploy using wrangler or export the handler with getHandler().");default:throw Error(`Unsupported runtime: ${this.runtime}. FastAPI-TS supports Bun, Node.js, Deno, and Cloudflare Workers.`)}}getHandler(){return this.hono.fetch}getRuntime(){return this.runtime}listenBun(x,z){let A=this.hono,D=Bun.serve({port:x,fetch(B,C){return A.fetch(B,{server:C,upgrade:C.upgrade.bind(C)})},websocket:{open(B){let{manager:C,metadata:E}=B.data??{};if(!C||!E)return;let F=C.handleConnectionBun(B,E);B.data._connection=F},message(B,C){let{manager:E,metadata:F,_connection:G}=B.data??{};if(!E||!F||!G)return;E.handleMessageBun(C,G,F)},close(B,C,E){let{manager:F,metadata:G,_connection:I}=B.data??{};if(!F||!G||!I)return;F.handleDisconnectBun(I,G)},error(B,C){console.error("[WS] Bun WebSocket error:",C)}}});if(z)z();return{port:x,close:async()=>{D.stop()},...D}}listenDeno(x,z){let A=new AbortController;return Deno.serve({port:x,signal:A.signal,onListen:z},this.hono.fetch),{port:x,close:async()=>{A.abort()}}}listenNode(x,z){try{let{serve:A}=(()=>{throw new Error("Cannot require module "+"@hono/node-server");})(),D=A({fetch:this.hono.fetch,port:x},z);return{port:x,close:async()=>{return new Promise((B)=>{D.close(()=>B())})},...D}}catch(A){throw Error("Node.js adapter requires @hono/node-server package. Install it with: npm install @hono/node-server")}}}var j=()=>{if(typeof Bun<"u")return"bun";if(typeof Deno<"u")return"deno";if(typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers")return"workerd";if(typeof process<"u"&&process.versions&&process.versions.node)return"node";return"unknown"};f();
+var P=Object.create;var{getPrototypeOf:Q,defineProperty:H,getOwnPropertyNames:K,getOwnPropertyDescriptor:U}=Object,L=Object.prototype.hasOwnProperty;function M(x){return this[x]}var V,W,N=(x,z,A)=>{var D=x!=null&&typeof x==="object";if(D){var B=z?V??=new WeakMap:W??=new WeakMap,C=B.get(x);if(C)return C}A=x!=null?P(Q(x)):{};let E=z||!x||!x.__esModule?H(A,"default",{value:x,enumerable:!0}):A;for(let F of K(x))if(!L.call(E,F))H(E,F,{get:M.bind(x,F),enumerable:!0});if(D)B.set(x,E);return E},X=(x)=>{var z=(J??=new WeakMap).get(x),A;if(z)return z;if(z=H({},"__esModule",{value:!0}),x&&typeof x==="object"||typeof x==="function"){for(var D of K(x))if(!L.call(z,D))H(z,D,{get:M.bind(x,D),enumerable:!(A=U(x,D))||A.enumerable})}return J.set(x,z),z},J,R=(x,z)=>()=>(z||x((z={exports:{}}).exports,z),z.exports);var Y=(x)=>x;function Z(x,z){this[x]=Y.bind(null,z)}var $=(x,z)=>{for(var A in z)H(x,A,{get:z[A],enumerable:!0,configurable:!0,set:Z.bind(z,A)})};var T=(x,z)=>()=>(x&&(z=x(x=0)),z);var y={};$(y,{HonoAdapter:()=>O});module.exports=X(y);class O{hono;name="hono";runtime;constructor(x){this.hono=x;this.runtime=j()}listen(x,z){switch(this.runtime){case"bun":return this.listenBun(x,z);case"deno":return this.listenDeno(x,z);case"node":return this.listenNode(x,z);case"workerd":throw Error("Cloudflare Workers do not support listen(). Deploy using wrangler or export the handler with getHandler().");default:throw Error(`Unsupported runtime: ${this.runtime}. Veloce-TS supports Bun, Node.js, Deno, and Cloudflare Workers.`)}}getHandler(){return this.hono.fetch}getRuntime(){return this.runtime}listenBun(x,z){let A=this.hono,D=Bun.serve({port:x,fetch(B,C){return A.fetch(B,{server:C,upgrade:C.upgrade.bind(C)})},websocket:{open(B){let{manager:C,metadata:E}=B.data??{};if(!C||!E)return;let F=C.handleConnectionBun(B,E);B.data._connection=F},message(B,C){let{manager:E,metadata:F,_connection:G}=B.data??{};if(!E||!F||!G)return;E.handleMessageBun(C,G,F)},close(B,C,E){let{manager:F,metadata:G,_connection:I}=B.data??{};if(!F||!G||!I)return;F.handleDisconnectBun(I,G)},error(B,C){console.error("[WS] Bun WebSocket error:",C)}}});if(z)z();return{port:x,close:async()=>{D.stop()},...D}}listenDeno(x,z){let A=new AbortController;return Deno.serve({port:x,signal:A.signal,onListen:z},this.hono.fetch),{port:x,close:async()=>{A.abort()}}}listenNode(x,z){try{let{serve:A}=(()=>{throw new Error("Cannot require module "+"@hono/node-server");})(),D=A({fetch:this.hono.fetch,port:x},z);return{port:x,close:async()=>{return new Promise((B)=>{D.close(()=>B())})},...D}}catch(A){throw Error("Node.js adapter requires @hono/node-server package. Install it with: npm install @hono/node-server")}}}var j=()=>{if(typeof Bun<"u")return"bun";if(typeof Deno<"u")return"deno";if(typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers")return"workerd";if(typeof process<"u"&&process.versions&&process.versions.node)return"node";return"unknown"};f();
 
-//# debugId=8E5D9DB50BF1ED1264756E2164756E21
+//# debugId=17A66C4D10DC90CF64756E2164756E21

package/dist/cjs/src/adapters/hono.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["..\\..\\src\\adapters\\hono.ts"],
   "sourcesContent": [
-    "/**\r\n * @module veloce-ts/adapters/hono\r\n * @description {@link HonoAdapter}: detecta runtime (Bun/Node/Deno/Workers) y expone `listen` sobre la instancia Hono.\r\n */\r\nimport type { Hono } from 'hono';\r\nimport type { Adapter, ServerInstance } from './base';\r\n\r\n// Type declarations for runtime globals\r\ndeclare const Deno: any;\r\ndeclare const Bun: any;\r\n\r\n/**\r\n * Runtime detection utilities\r\n */\r\nconst detectRuntime = (): 'bun' | 'deno' | 'node' | 'workerd' | 'unknown' => {\r\n  // Check for Bun\r\n  if (typeof Bun !== 'undefined') {\r\n    return 'bun';\r\n  }\r\n\r\n  // Check for Deno\r\n  if (typeof Deno !== 'undefined') {\r\n    return 'deno';\r\n  }\r\n\r\n  // Check for Cloudflare Workers\r\n  if (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') {\r\n    return 'workerd';\r\n  }\r\n\r\n  // Check for Node.js\r\n  if (typeof process !== 'undefined' && process.versions && process.versions.node) {\r\n    return 'node';\r\n  }\r\n\r\n  return 'unknown';\r\n};\r\n\r\n/**\r\n * HonoAdapter - Adapts Hono.js to work across multiple runtimes\r\n * Automatically detects the runtime and uses the appropriate server implementation\r\n */\r\nexport class HonoAdapter implements Adapter {\r\n  name = 'hono';\r\n  private runtime: ReturnType<typeof detectRuntime>;\r\n\r\n  constructor(private hono: Hono) {\r\n    this.runtime = detectRuntime();\r\n  }\r\n\r\n  /**\r\n   * Start the server on the specified port\r\n   * Automatically uses the appropriate server for the detected runtime\r\n   */\r\n  listen(port: number, callback?: () => void): ServerInstance {\r\n    switch (this.runtime) {\r\n      case 'bun':\r\n        return this.listenBun(port, callback);\r\n      \r\n      case 'deno':\r\n        return this.listenDeno(port, callback);\r\n      \r\n      case 'node':\r\n        return this.listenNode(port, callback);\r\n      \r\n      case 'workerd':\r\n        throw new Error(\r\n          'Cloudflare Workers do not support listen(). Deploy using wrangler or export the handler with getHandler().'\r\n        );\r\n      \r\n      default:\r\n        throw new Error(\r\n          `Unsupported runtime: ${this.runtime}. FastAPI-TS supports Bun, Node.js, Deno, and Cloudflare Workers.`\r\n        );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get the Hono fetch handler\r\n   * This can be used directly in serverless environments or for custom server setups\r\n   */\r\n  getHandler() {\r\n    return this.hono.fetch;\r\n  }\r\n\r\n  /**\r\n   * Get the detected runtime\r\n   */\r\n  getRuntime(): string {\r\n    return this.runtime;\r\n  }\r\n\r\n  /**\r\n   * Start server using Bun's native server\r\n   * Passes the Bun server instance as `env` to Hono so WebSocketPlugin\r\n   * can call server.upgrade() from within route handlers.\r\n   */\r\n  private listenBun(port: number, callback?: () => void): ServerInstance {\r\n    const hono = this.hono;\r\n    const server = Bun.serve({\r\n      port,\r\n      fetch(req: Request, bunServer: any) {\r\n        // Pass the Bun server as `env` so c.env.upgrade() works in handlers,\r\n        // and expose the server itself so `getConnInfo` (hono/bun) can read the\r\n        // trusted peer IP — needed for IP-based rate limiting that must not\r\n        // trust client-supplied X-Forwarded-For headers.\r\n        return hono.fetch(req, { server: bunServer, upgrade: bunServer.upgrade.bind(bunServer) });\r\n      },\r\n      websocket: {\r\n        open(ws: any) {\r\n          const { manager, metadata } = ws.data ?? {};\r\n          if (!manager || !metadata) return;\r\n          const connection = manager.handleConnectionBun(ws, metadata);\r\n          ws.data._connection = connection;\r\n        },\r\n        message(ws: any, message: string | Buffer) {\r\n          const { manager, metadata, _connection } = ws.data ?? {};\r\n          if (!manager || !metadata || !_connection) return;\r\n          manager.handleMessageBun(message, _connection, metadata);\r\n        },\r\n        close(ws: any, code: number, reason: string) {\r\n          const { manager, metadata, _connection } = ws.data ?? {};\r\n          if (!manager || !metadata || !_connection) return;\r\n          manager.handleDisconnectBun(_connection, metadata);\r\n        },\r\n        error(ws: any, error: Error) {\r\n          console.error('[WS] Bun WebSocket error:', error);\r\n        },\r\n      },\r\n    });\r\n\r\n    if (callback) {\r\n      callback();\r\n    }\r\n\r\n    return {\r\n      port,\r\n      close: async () => {\r\n        server.stop();\r\n      },\r\n      ...server\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Start server using Deno's native server\r\n   */\r\n  private listenDeno(port: number, callback?: () => void): ServerInstance {\r\n    // Deno.serve returns a promise, so we handle it appropriately\r\n    const ac = new AbortController();\r\n    \r\n    Deno.serve(\r\n      {\r\n        port,\r\n        signal: ac.signal,\r\n        onListen: callback\r\n      },\r\n      this.hono.fetch\r\n    );\r\n\r\n    // Return an object with a close method for consistency\r\n    return {\r\n      port,\r\n      close: async () => {\r\n        ac.abort();\r\n      },\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Start server using Node.js adapter\r\n   * Requires @hono/node-server package\r\n   */\r\n  private listenNode(port: number, callback?: () => void): ServerInstance {\r\n    try {\r\n      // Dynamically import @hono/node-server\r\n      // This is a peer dependency that users need to install for Node.js support\r\n      const { serve } = require('@hono/node-server');\r\n      \r\n      const server = serve(\r\n        {\r\n          fetch: this.hono.fetch,\r\n          port,\r\n        },\r\n        callback\r\n      );\r\n\r\n      return {\r\n        port,\r\n        close: async () => {\r\n          return new Promise<void>((resolve) => {\r\n            server.close(() => resolve());\r\n          });\r\n        },\r\n        ...server\r\n      };\r\n    } catch (error) {\r\n      throw new Error(\r\n        'Node.js adapter requires @hono/node-server package. Install it with: npm install @hono/node-server'\r\n      );\r\n    }\r\n  }\r\n}\r\n"
+    "/**\r\n * @module veloce-ts/adapters/hono\r\n * @description {@link HonoAdapter}: detecta runtime (Bun/Node/Deno/Workers) y expone `listen` sobre la instancia Hono.\r\n */\r\nimport type { Hono } from 'hono';\r\nimport type { Adapter, ServerInstance } from './base';\r\n\r\n// Type declarations for runtime globals\r\ndeclare const Deno: any;\r\ndeclare const Bun: any;\r\n\r\n/**\r\n * Runtime detection utilities\r\n */\r\nconst detectRuntime = (): 'bun' | 'deno' | 'node' | 'workerd' | 'unknown' => {\r\n  // Check for Bun\r\n  if (typeof Bun !== 'undefined') {\r\n    return 'bun';\r\n  }\r\n\r\n  // Check for Deno\r\n  if (typeof Deno !== 'undefined') {\r\n    return 'deno';\r\n  }\r\n\r\n  // Check for Cloudflare Workers\r\n  if (typeof navigator !== 'undefined' && navigator.userAgent === 'Cloudflare-Workers') {\r\n    return 'workerd';\r\n  }\r\n\r\n  // Check for Node.js\r\n  if (typeof process !== 'undefined' && process.versions && process.versions.node) {\r\n    return 'node';\r\n  }\r\n\r\n  return 'unknown';\r\n};\r\n\r\n/**\r\n * HonoAdapter - Adapts Hono.js to work across multiple runtimes\r\n * Automatically detects the runtime and uses the appropriate server implementation\r\n */\r\nexport class HonoAdapter implements Adapter {\r\n  name = 'hono';\r\n  private runtime: ReturnType<typeof detectRuntime>;\r\n\r\n  constructor(private hono: Hono) {\r\n    this.runtime = detectRuntime();\r\n  }\r\n\r\n  /**\r\n   * Start the server on the specified port\r\n   * Automatically uses the appropriate server for the detected runtime\r\n   */\r\n  listen(port: number, callback?: () => void): ServerInstance {\r\n    switch (this.runtime) {\r\n      case 'bun':\r\n        return this.listenBun(port, callback);\r\n      \r\n      case 'deno':\r\n        return this.listenDeno(port, callback);\r\n      \r\n      case 'node':\r\n        return this.listenNode(port, callback);\r\n      \r\n      case 'workerd':\r\n        throw new Error(\r\n          'Cloudflare Workers do not support listen(). Deploy using wrangler or export the handler with getHandler().'\r\n        );\r\n      \r\n      default:\r\n        throw new Error(\r\n          `Unsupported runtime: ${this.runtime}. Veloce-TS supports Bun, Node.js, Deno, and Cloudflare Workers.`\r\n        );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get the Hono fetch handler\r\n   * This can be used directly in serverless environments or for custom server setups\r\n   */\r\n  getHandler() {\r\n    return this.hono.fetch;\r\n  }\r\n\r\n  /**\r\n   * Get the detected runtime\r\n   */\r\n  getRuntime(): string {\r\n    return this.runtime;\r\n  }\r\n\r\n  /**\r\n   * Start server using Bun's native server\r\n   * Passes the Bun server instance as `env` to Hono so WebSocketPlugin\r\n   * can call server.upgrade() from within route handlers.\r\n   */\r\n  private listenBun(port: number, callback?: () => void): ServerInstance {\r\n    const hono = this.hono;\r\n    const server = Bun.serve({\r\n      port,\r\n      fetch(req: Request, bunServer: any) {\r\n        // Pass the Bun server as `env` so c.env.upgrade() works in handlers,\r\n        // and expose the server itself so `getConnInfo` (hono/bun) can read the\r\n        // trusted peer IP — needed for IP-based rate limiting that must not\r\n        // trust client-supplied X-Forwarded-For headers.\r\n        return hono.fetch(req, { server: bunServer, upgrade: bunServer.upgrade.bind(bunServer) });\r\n      },\r\n      websocket: {\r\n        open(ws: any) {\r\n          const { manager, metadata } = ws.data ?? {};\r\n          if (!manager || !metadata) return;\r\n          const connection = manager.handleConnectionBun(ws, metadata);\r\n          ws.data._connection = connection;\r\n        },\r\n        message(ws: any, message: string | Buffer) {\r\n          const { manager, metadata, _connection } = ws.data ?? {};\r\n          if (!manager || !metadata || !_connection) return;\r\n          manager.handleMessageBun(message, _connection, metadata);\r\n        },\r\n        close(ws: any, code: number, reason: string) {\r\n          const { manager, metadata, _connection } = ws.data ?? {};\r\n          if (!manager || !metadata || !_connection) return;\r\n          manager.handleDisconnectBun(_connection, metadata);\r\n        },\r\n        error(ws: any, error: Error) {\r\n          console.error('[WS] Bun WebSocket error:', error);\r\n        },\r\n      },\r\n    });\r\n\r\n    if (callback) {\r\n      callback();\r\n    }\r\n\r\n    return {\r\n      port,\r\n      close: async () => {\r\n        server.stop();\r\n      },\r\n      ...server\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Start server using Deno's native server\r\n   */\r\n  private listenDeno(port: number, callback?: () => void): ServerInstance {\r\n    // Deno.serve returns a promise, so we handle it appropriately\r\n    const ac = new AbortController();\r\n    \r\n    Deno.serve(\r\n      {\r\n        port,\r\n        signal: ac.signal,\r\n        onListen: callback\r\n      },\r\n      this.hono.fetch\r\n    );\r\n\r\n    // Return an object with a close method for consistency\r\n    return {\r\n      port,\r\n      close: async () => {\r\n        ac.abort();\r\n      },\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Start server using Node.js adapter\r\n   * Requires @hono/node-server package\r\n   */\r\n  private listenNode(port: number, callback?: () => void): ServerInstance {\r\n    try {\r\n      // Dynamically import @hono/node-server\r\n      // This is a peer dependency that users need to install for Node.js support\r\n      const { serve } = require('@hono/node-server');\r\n      \r\n      const server = serve(\r\n        {\r\n          fetch: this.hono.fetch,\r\n          port,\r\n        },\r\n        callback\r\n      );\r\n\r\n      return {\r\n        port,\r\n        close: async () => {\r\n          return new Promise<void>((resolve) => {\r\n            server.close(() => resolve());\r\n          });\r\n        },\r\n        ...server\r\n      };\r\n    } catch (error) {\r\n      throw new Error(\r\n        'Node.js adapter requires @hono/node-server package. Install it with: npm install @hono/node-server'\r\n      );\r\n    }\r\n  }\r\n}\r\n"
   ],
-  "mappings": "ihCA0CO,MAAM,CAA+B,CAItB,KAHpB,KAAO,OACC,QAER,WAAW,CAAS,EAAY,CAAZ,YAClB,KAAK,QAAU,EAAc,EAO/B,MAAM,CAAC,EAAc,EAAuC,CAC1D,OAAQ,KAAK,aACN,MACH,OAAO,KAAK,UAAU,EAAM,CAAQ,MAEjC,OACH,OAAO,KAAK,WAAW,EAAM,CAAQ,MAElC,OACH,OAAO,KAAK,WAAW,EAAM,CAAQ,MAElC,UACH,MAAU,MACR,4GACF,UAGA,MAAU,MACR,wBAAwB,KAAK,0EAC/B,GAQN,UAAU,EAAG,CACX,OAAO,KAAK,KAAK,MAMnB,UAAU,EAAW,CACnB,OAAO,KAAK,QAQN,SAAS,CAAC,EAAc,EAAuC,CACrE,IAAM,EAAO,KAAK,KACZ,EAAS,IAAI,MAAM,CACvB,OACA,KAAK,CAAC,EAAc,EAAgB,CAKlC,OAAO,EAAK,MAAM,EAAK,CAAE,OAAQ,EAAW,QAAS,EAAU,QAAQ,KAAK,CAAS,CAAE,CAAC,GAE1F,UAAW,CACT,IAAI,CAAC,EAAS,CACZ,IAAQ,UAAS,YAAa,EAAG,MAAQ,CAAC,EAC1C,GAAI,CAAC,GAAW,CAAC,EAAU,OAC3B,IAAM,EAAa,EAAQ,oBAAoB,EAAI,CAAQ,EAC3D,EAAG,KAAK,YAAc,GAExB,OAAO,CAAC,EAAS,EAA0B,CACzC,IAAQ,UAAS,WAAU,eAAgB,EAAG,MAAQ,CAAC,EACvD,GAAI,CAAC,GAAW,CAAC,GAAY,CAAC,EAAa,OAC3C,EAAQ,iBAAiB,EAAS,EAAa,CAAQ,GAEzD,KAAK,CAAC,EAAS,EAAc,EAAgB,CAC3C,IAAQ,UAAS,WAAU,eAAgB,EAAG,MAAQ,CAAC,EACvD,GAAI,CAAC,GAAW,CAAC,GAAY,CAAC,EAAa,OAC3C,EAAQ,oBAAoB,EAAa,CAAQ,GAEnD,KAAK,CAAC,EAAS,EAAc,CAC3B,QAAQ,MAAM,4BAA6B,CAAK,EAEpD,CACF,CAAC,EAED,GAAI,EACF,EAAS,EAGX,MAAO,CACL,OACA,MAAO,SAAY,CACjB,EAAO,KAAK,MAEX,CACL,EAMM,UAAU,CAAC,EAAc,EAAuC,CAEtE,IAAM,EAAK,IAAI,gBAYf,OAVA,KAAK,MACH,CACE,OACA,OAAQ,EAAG,OACX,SAAU,CACZ,EACA,KAAK,KAAK,KACZ,EAGO,CACL,OACA,MAAO,SAAY,CACjB,EAAG,MAAM,EAEb,EAOM,UAAU,CAAC,EAAc,EAAuC,CACtE,GAAI,CAGF,IAAQ,kFAEF,EAAS,EACb,CACE,MAAO,KAAK,KAAK,MACjB,MACF,EACA,CACF,EAEA,MAAO,CACL,OACA,MAAO,SAAY,CACjB,OAAO,IAAI,QAAc,CAAC,IAAY,CACpC,EAAO,MAAM,IAAM,EAAQ,CAAC,EAC7B,MAEA,CACL,EACA,MAAO,EAAO,CACd,MAAU,MACR,oGACF,GAGN,KA5LM,EAAgB,IAAuD,CAE3E,GAAI,OAAO,IAAQ,IACjB,MAAO,MAIT,GAAI,OAAO,KAAS,IAClB,MAAO,OAIT,GAAI,OAAO,UAAc,KAAe,UAAU,YAAc,qBAC9D,MAAO,UAIT,GAAI,OAAO,QAAY,KAAe,QAAQ,UAAY,QAAQ,SAAS,KACzE,MAAO,OAGT,MAAO",
-  "debugId": "8E5D9DB50BF1ED1264756E2164756E21",
+  "mappings": "ihCA0CO,MAAM,CAA+B,CAItB,KAHpB,KAAO,OACC,QAER,WAAW,CAAS,EAAY,CAAZ,YAClB,KAAK,QAAU,EAAc,EAO/B,MAAM,CAAC,EAAc,EAAuC,CAC1D,OAAQ,KAAK,aACN,MACH,OAAO,KAAK,UAAU,EAAM,CAAQ,MAEjC,OACH,OAAO,KAAK,WAAW,EAAM,CAAQ,MAElC,OACH,OAAO,KAAK,WAAW,EAAM,CAAQ,MAElC,UACH,MAAU,MACR,4GACF,UAGA,MAAU,MACR,wBAAwB,KAAK,yEAC/B,GAQN,UAAU,EAAG,CACX,OAAO,KAAK,KAAK,MAMnB,UAAU,EAAW,CACnB,OAAO,KAAK,QAQN,SAAS,CAAC,EAAc,EAAuC,CACrE,IAAM,EAAO,KAAK,KACZ,EAAS,IAAI,MAAM,CACvB,OACA,KAAK,CAAC,EAAc,EAAgB,CAKlC,OAAO,EAAK,MAAM,EAAK,CAAE,OAAQ,EAAW,QAAS,EAAU,QAAQ,KAAK,CAAS,CAAE,CAAC,GAE1F,UAAW,CACT,IAAI,CAAC,EAAS,CACZ,IAAQ,UAAS,YAAa,EAAG,MAAQ,CAAC,EAC1C,GAAI,CAAC,GAAW,CAAC,EAAU,OAC3B,IAAM,EAAa,EAAQ,oBAAoB,EAAI,CAAQ,EAC3D,EAAG,KAAK,YAAc,GAExB,OAAO,CAAC,EAAS,EAA0B,CACzC,IAAQ,UAAS,WAAU,eAAgB,EAAG,MAAQ,CAAC,EACvD,GAAI,CAAC,GAAW,CAAC,GAAY,CAAC,EAAa,OAC3C,EAAQ,iBAAiB,EAAS,EAAa,CAAQ,GAEzD,KAAK,CAAC,EAAS,EAAc,EAAgB,CAC3C,IAAQ,UAAS,WAAU,eAAgB,EAAG,MAAQ,CAAC,EACvD,GAAI,CAAC,GAAW,CAAC,GAAY,CAAC,EAAa,OAC3C,EAAQ,oBAAoB,EAAa,CAAQ,GAEnD,KAAK,CAAC,EAAS,EAAc,CAC3B,QAAQ,MAAM,4BAA6B,CAAK,EAEpD,CACF,CAAC,EAED,GAAI,EACF,EAAS,EAGX,MAAO,CACL,OACA,MAAO,SAAY,CACjB,EAAO,KAAK,MAEX,CACL,EAMM,UAAU,CAAC,EAAc,EAAuC,CAEtE,IAAM,EAAK,IAAI,gBAYf,OAVA,KAAK,MACH,CACE,OACA,OAAQ,EAAG,OACX,SAAU,CACZ,EACA,KAAK,KAAK,KACZ,EAGO,CACL,OACA,MAAO,SAAY,CACjB,EAAG,MAAM,EAEb,EAOM,UAAU,CAAC,EAAc,EAAuC,CACtE,GAAI,CAGF,IAAQ,kFAEF,EAAS,EACb,CACE,MAAO,KAAK,KAAK,MACjB,MACF,EACA,CACF,EAEA,MAAO,CACL,OACA,MAAO,SAAY,CACjB,OAAO,IAAI,QAAc,CAAC,IAAY,CACpC,EAAO,MAAM,IAAM,EAAQ,CAAC,EAC7B,MAEA,CACL,EACA,MAAO,EAAO,CACd,MAAU,MACR,oGACF,GAGN,KA5LM,EAAgB,IAAuD,CAE3E,GAAI,OAAO,IAAQ,IACjB,MAAO,MAIT,GAAI,OAAO,KAAS,IAClB,MAAO,OAIT,GAAI,OAAO,UAAc,KAAe,UAAU,YAAc,qBAC9D,MAAO,UAIT,GAAI,OAAO,QAAY,KAAe,QAAQ,UAAY,QAAQ,SAAS,KACzE,MAAO,OAGT,MAAO",
+  "debugId": "17A66C4D10DC90CF64756E2164756E21",
   "names": []
 }