weifuwu 0.25.0 → 0.25.1

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export type { Context, Handler, Middleware, ErrorHandler } from './types.ts';
+export { HttpError } from './types.ts';
 export { currentTraceId, currentTrace, runWithTrace, traceElapsed, trace } from './trace.ts';
 export type { TraceContext, TraceInjected, TraceOptions } from './trace.ts';
 export { loadEnv, isDev, isProd, isBundled, getPublicEnv, env } from './env.ts';

package/dist/index.js

@@ -4,6 +4,16 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// types.ts
+var HttpError = class extends Error {
+  status;
+  constructor(message, status) {
+    super(message);
+    this.name = "HttpError";
+    this.status = status;
+  }
+};
+
 // trace.ts
 import crypto2 from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -110,14 +120,6 @@ function env() {
 
 // serve.ts
 import http from "node:http";
-var HttpError = class extends Error {
-  status;
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-    this.name = "HttpError";
-  }
-};
 var DEFAULT_MAX_BODY = 10 * 1024 * 1024;
 async function readBody(req, maxSize) {
   const limit = maxSize ?? DEFAULT_MAX_BODY;
@@ -1271,7 +1273,7 @@ function parseBody(text2, ct) {
   return text2;
 }
 function validate(schemas) {
-  return async (req, ctx, next) => {
+  const mw = async (req, ctx, next) => {
     const parsed = {};
     const issues = [];
     if (schemas?.params) {
@@ -1358,6 +1360,8 @@ function validate(schemas) {
     ctx.parsed = { ...ctx.parsed, ...parsed };
     return next(req, ctx);
   };
+  mw.__meta = { injects: ["parsed"], depends: [] };
+  return mw;
 }
 
 // cookie.ts
@@ -1461,7 +1465,7 @@ function detectMimeFromExtension(filename) {
 }
 function upload(options) {
   const saveDir = options?.dir;
-  return async (req, ctx, next) => {
+  const mw = async (req, ctx, next) => {
     const ct = req.headers.get("content-type") ?? "";
     if (!ct.includes("multipart/form-data")) return next(req, ctx);
     try {
@@ -1517,6 +1521,8 @@ function upload(options) {
     ctx.parsed = { ...ctx.parsed, files, fields };
     return next(req, ctx);
   };
+  mw.__meta = { injects: ["parsed"], depends: [] };
+  return mw;
 }
 
 // rate-limit.ts
@@ -1601,7 +1607,7 @@ function rateLimit(options) {
     return addRateLimitHeaders(res, max, remaining, reset);
   };
   mw.__meta = { injects: [], depends: [] };
-  mw.close = () => {
+  mw.close = async () => {
     if (interval) clearInterval(interval);
     hits.clear();
   };
@@ -1728,7 +1734,7 @@ import crypto3 from "node:crypto";
 function requestId(options) {
   const header = options?.header ?? "X-Request-ID";
   const gen = options?.generator ?? (() => crypto3.randomUUID());
-  return async (req, ctx, next) => {
+  const mw = async (req, ctx, next) => {
     const existing = req.headers.get(header);
     const id2 = existing ?? gen();
     ctx.requestId = id2;
@@ -1738,6 +1744,8 @@ function requestId(options) {
     h.set(header, id2);
     return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h });
   };
+  mw.__meta = { injects: ["requestId"], depends: [] };
+  return mw;
 }
 
 // sse.ts
@@ -1833,6 +1841,7 @@ var TestRequest = class {
   }
   /** Shortcut: set ctx.user */
   withUser(user2) {
+    ;
     this.ctxMixin.user = user2;
     return this;
   }
@@ -3749,6 +3758,7 @@ var BUILTIN_PROVIDERS = {
     tokenUrl: "https://oauth2.googleapis.com/token",
     userUrl: "https://www.googleapis.com/oauth2/v2/userinfo",
     scope: "openid email profile",
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     parseUser: (data) => ({
       id: data.id,
       email: data.email,
@@ -3761,6 +3771,7 @@ var BUILTIN_PROVIDERS = {
     tokenUrl: "https://github.com/login/oauth/access_token",
     userUrl: "https://api.github.com/user",
     scope: "read:user user:email",
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     parseUser: (data) => ({
       id: String(data.id),
       email: data.email ?? "",
@@ -3857,8 +3868,9 @@ function registerOAuthLoginRoutes(router, deps, providers) {
     const state = crypto5.randomUUID();
     const redirectUri = new URL(req.url);
     redirectUri.pathname = redirectUri.pathname.replace(/\/[^/]+$/, "/") + providerName + "/callback";
-    if (ctx.session) {
-      ctx.session.oauthState = { state, provider: providerName };
+    const sess = ctx.session;
+    if (sess) {
+      sess.oauthState = { state, provider: providerName };
     }
     const scope = config.scope ?? meta.scope;
     const params = new URLSearchParams({
@@ -3885,11 +3897,12 @@ function registerOAuthLoginRoutes(router, deps, providers) {
     if (!code || !state) {
       return Response.json({ error: "Missing code or state parameter" }, { status: 400 });
     }
-    const savedState = ctx.session?.oauthState;
+    const sess = ctx.session;
+    const savedState = sess?.oauthState;
     if (!savedState || savedState.state !== state || savedState.provider !== providerName) {
       return Response.json({ error: "Invalid state \u2014 possible CSRF attack" }, { status: 403 });
     }
-    if (ctx.session) delete ctx.session.oauthState;
+    if (sess) delete sess.oauthState;
     const redirectUri = url.origin + url.pathname.replace(/\/callback$/, "");
     let tokenRes;
     try {
@@ -3947,9 +3960,10 @@ function registerOAuthLoginRoutes(router, deps, providers) {
       return Response.json({ error: "Failed to create/link user" }, { status: 500 });
     }
     const token = signToken(user2);
-    if (ctx.session) {
-      ctx.session.userId = user2.id;
-      ctx.session.role = user2.role;
+    const sess2 = ctx.session;
+    if (sess2) {
+      sess2.userId = user2.id;
+      sess2.role = user2.role;
     }
     const accept = req.headers.get("accept") ?? "";
     if (accept.includes("application/json")) {
@@ -4147,9 +4161,7 @@ function user(options) {
     const { email, password, name } = RegisterSchema.parse(data);
     const existing = await findByEmail(email);
     if (existing) {
-      const err = new Error("Email already registered");
-      err.status = 409;
-      throw err;
+      throw new HttpError("Email already registered", 409);
     }
     const hashed = hashPassword(password);
     const row = await _users.insert({ email, password: hashed, name });
@@ -4162,14 +4174,10 @@ function user(options) {
     const { data: rows } = await _users.readMany({ email });
     const row = rows[0];
     if (!row) {
-      const err = new Error("Invalid email or password");
-      err.status = 401;
-      throw err;
+      throw new HttpError("Invalid email or password", 401);
     }
     if (!verifyPassword(password, row.password)) {
-      const err = new Error("Invalid email or password");
-      err.status = 401;
-      throw err;
+      throw new HttpError("Invalid email or password", 401);
     }
     const userData = row;
     const token = signToken(userData);
@@ -4359,7 +4367,7 @@ function user(options) {
     return null;
   }
   function middleware() {
-    return async (req, ctx, next) => {
+    const mw = async (req, ctx, next) => {
       const userData = await resolveUser(req, ctx);
       if (userData) {
         ctx.user = userData;
@@ -4370,9 +4378,11 @@ function user(options) {
         headers: headerName.toLowerCase() === "authorization" ? { "WWW-Authenticate": "Bearer" } : void 0
       });
     };
+    mw.__meta = { injects: ["user"], depends: [] };
+    return mw;
   }
   function middlewareOptional(_opts) {
-    return async (req, ctx, next) => {
+    const mw = async (req, ctx, next) => {
       const userData = await resolveUser(req, ctx);
       if (userData) {
         ;
@@ -4380,6 +4390,8 @@ function user(options) {
       }
       return next(req, ctx);
     };
+    mw.__meta = { injects: ["user"], depends: [] };
+    return mw;
   }
   async function parseBody2(req) {
     const ct = req.headers.get("content-type") || "";
@@ -4404,8 +4416,9 @@ function user(options) {
         if (err instanceof z2.ZodError) {
           return Response.json({ error: "Validation failed", issues: err.issues }, { status: 400 });
         }
-        const status = err.status ?? 500;
-        return Response.json({ error: err.message }, { status });
+        const status = err instanceof HttpError ? err.status : 500;
+        const message = err instanceof Error ? err.message : String(err);
+        return Response.json({ error: message }, { status });
       }
     });
     r.post("/login", async (req, ctx) => {
@@ -4426,8 +4439,9 @@ function user(options) {
         if (err instanceof z2.ZodError) {
           return Response.json({ error: "Validation failed", issues: err.issues }, { status: 400 });
         }
-        const status = err.status ?? 500;
-        return Response.json({ error: err.message }, { status });
+        const status = err instanceof HttpError ? err.status : 500;
+        const message = err instanceof Error ? err.message : String(err);
+        return Response.json({ error: message }, { status });
       }
     });
   }
@@ -4446,7 +4460,8 @@ function user(options) {
         if (err instanceof z2.ZodError) {
           return Response.json({ error: "Validation failed", issues: err.issues }, { status: 400 });
         }
-        return Response.json({ error: err.message }, { status: 500 });
+        const message = err instanceof Error ? err.message : String(err);
+        return Response.json({ error: message }, { status: 500 });
       }
     });
     r.delete("/api-keys/:id", middleware(), async (req, ctx) => {
@@ -4522,7 +4537,7 @@ function user(options) {
   return mod;
 }
 
-// redis/index.ts
+// redis/client.ts
 import { Redis as IORedis } from "ioredis";
 function redis(opts) {
   const options = typeof opts === "string" ? { url: opts } : opts ?? {};
@@ -4718,15 +4733,12 @@ function createMemoryQueue(opts) {
     running = true;
     poll();
   };
-  mw.stop = function stop2() {
+  mw.close = async function close() {
     running = false;
     if (pollTimer) {
       clearTimeout(pollTimer);
       pollTimer = null;
     }
-  };
-  mw.close = async function close() {
-    mw.stop();
     while (inflight > 0) await new Promise((r) => setTimeout(r, 50));
   };
   mw.jobs = async function(limit) {
@@ -4891,15 +4903,12 @@ function createPgQueue(opts) {
     running = true;
     poll();
   };
-  mw.stop = function stop2() {
+  mw.close = async function close() {
     running = false;
     if (pollTimer) {
       clearTimeout(pollTimer);
       pollTimer = null;
     }
-  };
-  mw.close = async function close() {
-    mw.stop();
     while (inflight > 0) await new Promise((r) => setTimeout(r, 50));
   };
   mw.jobs = async function jobs(limit) {
@@ -5058,16 +5067,13 @@ function createRedisQueue(opts) {
     running = true;
     poll();
   };
-  mw.stop = function stop2() {
+  mw.close = async function close() {
     running = false;
     epoch++;
     if (pollTimer) {
       clearTimeout(pollTimer);
       pollTimer = null;
     }
-  };
-  mw.close = async function close() {
-    mw.stop();
     while (inflight > 0) await new Promise((r) => setTimeout(r, 50));
     redis2.disconnect();
   };
@@ -6065,7 +6071,7 @@ function tenant(options) {
     );
   }
   function middleware() {
-    return async (req, ctx, next) => {
+    const mw = async (req, ctx, next) => {
       const user2 = ctx.user;
       if (!user2) {
         return new Response("Unauthorized", { status: 401 });
@@ -6101,6 +6107,8 @@ function tenant(options) {
       ctx.tenant = { id: member.id, name: member.name, role: member.role };
       return next(req, ctx);
     };
+    mw.__meta = { injects: ["tenant"], depends: ["user"] };
+    return mw;
   }
   const r = buildRouter(sql2, usersTable);
   const mod = r;
@@ -6179,17 +6187,13 @@ function buildRouter2(deps) {
     if (!body.input && !body.messages) {
       return Response.json({ error: "input or messages is required" }, { status: 400 });
     }
-    try {
-      const result = await runner.run(id2, body);
-      if ("stream" in result) {
-        return new Response(result.stream, {
-          headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache" }
-        });
-      }
-      return Response.json(result);
-    } catch (err) {
-      return Response.json({ error: err.message }, { status: 500 });
+    const result = await runner.run(id2, body);
+    if ("stream" in result) {
+      return new Response(result.stream, {
+        headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache" }
+      });
     }
+    return Response.json(result);
   });
   r.get("/agents/:id/runs", async (_req, ctx) => {
     const agentId = parseInt(ctx.params.id, 10);
@@ -6220,13 +6224,26 @@ function buildRouter2(deps) {
       { orderBy: { created_at: "desc" } }
     );
     const total = rows.length;
-    const success = rows.filter((r2) => r2.status === "success" || r2.status === "stream").length;
+    const success = rows.filter(
+      (r2) => r2.status === "success" || r2.status === "stream"
+    ).length;
     const error = rows.filter((r2) => r2.status === "error").length;
-    const totalTokensIn = rows.reduce((sum, r2) => sum + (r2.tokens_in || 0), 0);
-    const totalTokensOut = rows.reduce((sum, r2) => sum + (r2.tokens_out || 0), 0);
-    const totalElapsed = rows.reduce((sum, r2) => sum + (r2.elapsed_ms || 0), 0);
+    const totalTokensIn = rows.reduce(
+      (sum, r2) => sum + (r2.tokens_in || 0),
+      0
+    );
+    const totalTokensOut = rows.reduce(
+      (sum, r2) => sum + (r2.tokens_out || 0),
+      0
+    );
+    const totalElapsed = rows.reduce(
+      (sum, r2) => sum + (r2.elapsed_ms || 0),
+      0
+    );
     const avgElapsed = total > 0 ? Math.round(totalElapsed / total) : 0;
-    const sorted = [...rows].sort((a, b) => (a.elapsed_ms || 0) - (b.elapsed_ms || 0));
+    const sorted = [...rows].sort(
+      (a, b) => (a.elapsed_ms || 0) - (b.elapsed_ms || 0)
+    );
     const p95Idx = Math.ceil(sorted.length * 0.95) - 1;
     const p95Elapsed = sorted.length > 0 ? sorted[p95Idx]?.elapsed_ms || 0 : 0;
     return Response.json({
@@ -6252,7 +6269,10 @@ function buildRouter2(deps) {
       const doc = await runner.addKnowledge(agentId, body.title || "", body.content);
       return Response.json(doc, { status: 201 });
     } catch (err) {
-      return Response.json({ error: err.message }, { status: 500 });
+      return Response.json(
+        { error: err instanceof Error ? err.message : String(err) },
+        { status: 500 }
+      );
     }
   });
   r.get("/agents/:id/knowledge", async (_req, ctx) => {
@@ -6294,6 +6314,7 @@ function chunkContent(content, chunkSize, overlap) {
 // agent/run.ts
 function hasKnowledgeDocs(sql2, agentId) {
   return sql2`SELECT 1 FROM "_knowledge_documents" WHERE agent_id = ${agentId} LIMIT 1`.then(
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     (r) => r.length > 0
   );
 }
@@ -6304,7 +6325,12 @@ async function searchKnowledge(sql2, provider, agentId, query, limit = 5) {
     `SELECT id, title, content, metadata, embedding <=> $1::vector AS _score FROM "_knowledge_documents" WHERE agent_id = $2 ORDER BY embedding <=> $1::vector LIMIT $3`,
     [vec, agentId, limit]
   );
-  return docs.map((d) => ({ id: d.id, title: d.title, content: d.content, score: d._score }));
+  return docs.map((d) => ({
+    id: d.id,
+    title: d.title,
+    content: d.content,
+    score: d._score
+  }));
 }
 async function loadAgent(agents, agentId) {
   const row = await agents.read(agentId);
@@ -7734,11 +7760,12 @@ function buildHeadPayload(opts) {
     flash: ctx.flash,
     loaderData
   };
-  if (ctx.user && typeof ctx.user === "object") {
+  const rawUser = ctx.user;
+  if (rawUser && typeof rawUser === "object") {
     const safeUser = {};
     for (const k of ["id", "name", "email", "role", "avatar"]) {
-      if (k in ctx.user) {
-        safeUser[k] = ctx.user[k];
+      if (k in rawUser) {
+        safeUser[k] = rawUser[k];
       }
     }
     ctxData.user = safeUser;
@@ -9250,17 +9277,17 @@ async function buildRouter4(deps) {
       FROM "_opencode_messages"
       WHERE session_id = ${sessionId}
     `;
-    const stats = rows[0] || {
+    const raw = rows[0] || {
       message_count: 0,
       total_tokens_in: 0,
       total_tokens_out: 0
     };
     return Response.json({
       session_id: sessionId,
-      message_count: stats.message_count,
-      tokens_in: stats.total_tokens_in,
-      tokens_out: stats.total_tokens_out,
-      tokens_total: stats.total_tokens_in + stats.total_tokens_out
+      message_count: raw.message_count,
+      tokens_in: raw.total_tokens_in,
+      tokens_out: raw.total_tokens_out,
+      tokens_total: Number(raw.total_tokens_in) + Number(raw.total_tokens_out)
     });
   });
   try {
@@ -9316,8 +9343,13 @@ function createWSHandler2(deps) {
               client.mountPath
             );
             ws.send(JSON.stringify({ type: "session_created", session: session2 }));
-          } catch (e) {
-            ws.send(JSON.stringify({ type: "error", error: e.message }));
+          } catch (err) {
+            ws.send(
+              JSON.stringify({
+                type: "error",
+                error: err instanceof Error ? err.message : String(err)
+              })
+            );
           }
           break;
         }
@@ -9371,9 +9403,9 @@ function createWSHandler2(deps) {
                 break;
               }
             }
-          } catch (e) {
-            if (e.name !== "AbortError") {
-              ws.send(JSON.stringify({ type: "error", error: e.message }));
+          } catch (err) {
+            if (err instanceof Error && err.name !== "AbortError") {
+              ws.send(JSON.stringify({ type: "error", error: err.message }));
             }
           }
           break;
@@ -9856,6 +9888,7 @@ function theme(options) {
     };
     return next(req, ctx);
   };
+  mw.__meta = { injects: ["theme"], depends: [] };
   class ThemeRouter extends Router {
     middleware() {
       return mw;
@@ -9957,6 +9990,7 @@ function i18n(options) {
     };
     return next(req, ctx);
   };
+  mw.__meta = { injects: ["i18n"], depends: [] };
   class I18nRouter extends Router {
     middleware() {
       return mw;
@@ -10001,7 +10035,7 @@ function makeSetFlash(name, location) {
 }
 function flash(options) {
   const name = options?.name ?? "flash";
-  return async (req, ctx, next) => {
+  const mw = async (req, ctx, next) => {
     const raw = getCookies(req)[name] ?? null;
     const referer = req.headers.get("referer") || "/";
     let value = void 0;
@@ -10024,6 +10058,8 @@ function flash(options) {
     }
     return res;
   };
+  mw.__meta = { injects: ["flash"], depends: [] };
+  return mw;
 }
 
 // seo.ts
@@ -10206,7 +10242,7 @@ function csrf(options) {
   const headerName = options?.header ?? "x-csrf-token";
   const bodyKey = options?.key ?? "_csrf";
   const excluded = new Set(options?.excludeMethods ?? ["GET", "HEAD", "OPTIONS"]);
-  return async (req, ctx, next) => {
+  const mw = async (req, ctx, next) => {
     const method = req.method.toUpperCase();
     if (excluded.has(method)) {
       let token = getCookies(req)[cookieName];
@@ -10243,6 +10279,8 @@ function csrf(options) {
     }
     return next(req, ctx);
   };
+  mw.__meta = { injects: ["csrf"], depends: [] };
+  return mw;
 }
 
 // logdb/rest.ts
@@ -11880,6 +11918,7 @@ function s3(options) {
   mw.url = url;
   mw.list = list;
   mw.client = client;
+  mw.__meta = { injects: ["s3"], depends: [] };
   return mw;
 }
 
@@ -12142,6 +12181,7 @@ function permissions(options) {
   mw.requireRole = requireRole;
   mw.requirePermission = requirePermission;
   mw.migrate = migrate;
+  mw.__meta = { injects: ["permissions"], depends: ["user"] };
   return mw;
 }
 
@@ -12615,6 +12655,7 @@ function notifier(opts) {
 }
 export {
   DEFAULT_MAX_BODY,
+  HttpError,
   MIGRATIONS_TABLE,
   MemoryCache,
   MemoryStore,

package/dist/opencode/rest.d.ts

@@ -1,8 +1,9 @@
 import { Router } from '../router.ts';
 import type { LanguageModel } from 'ai';
+import type { SqlClient } from '../vendor.ts';
 import type { SkillDef, SkillRegistry, OpencodePermissions, PendingQuestion } from './types.ts';
 interface RestDeps {
-    sql: any;
+    sql: SqlClient;
     model: LanguageModel;
     workspace: string;
     systemPrompt?: string;

package/dist/opencode/ws.d.ts

@@ -1,9 +1,9 @@
-import type { WebSocket } from '../vendor.ts';
+import type { WebSocket, SqlClient } from '../vendor.ts';
 import type { LanguageModel } from 'ai';
 import type { Context } from '../types.ts';
 import type { PendingQuestion, SkillDef, SkillRegistry, OpencodePermissions } from './types.ts';
 interface WsDeps {
-    sql: any;
+    sql: SqlClient;
     model: LanguageModel;
     workspace: string;
     systemPrompt?: string;

package/dist/queue/types.d.ts

@@ -43,7 +43,6 @@ export interface Queue extends Middleware<Context, Context & QueueInjected>, Clo
     }): Promise<string>;
     process<T>(type: string, handler: (job: QueueJob<T>) => Promise<void>): void;
     run(): Promise<void>;
-    stop(): void;
     stats(): {
         running: boolean;
         inflight: number;

package/dist/rate-limit.d.ts

@@ -1,5 +1,5 @@
 import type { Redis } from './vendor.ts';
-import type { Context, Middleware } from './types.ts';
+import type { Context, Middleware, Closeable } from './types.ts';
 /** Options for {@link rateLimit}. */
 export interface RateLimitOptions {
     /** Maximum requests within the window (default: 100). */
@@ -17,6 +17,14 @@ export interface RateLimitOptions {
     /** Redis key prefix (default: `'ratelimit:'`). */
     prefix?: string;
 }
+/** Rate limit module — middleware + stats. */
+export interface RateLimitModule extends Middleware<Context, Context>, Closeable {
+    stats(): {
+        store: string;
+        entries?: number;
+        maxEntries: number;
+    };
+}
 /**
  * Rate limiting middleware (in-memory or Redis-backed).
  *
@@ -34,7 +42,4 @@ export interface RateLimitOptions {
  * app.use(rateLimit({ store: 'redis', redis: new Redis(), max: 100 }))
  * ```
  */
-export declare function rateLimit(options?: RateLimitOptions): Middleware<Context, Context> & {
-    close: () => void;
-    stop?: () => void;
-};
+export declare function rateLimit(options?: RateLimitOptions): RateLimitModule;

package/dist/redis/client.d.ts

@@ -0,0 +1,2 @@
+import type { RedisOptions, RedisClient } from './types.ts';
+export declare function redis(opts?: string | RedisOptions): RedisClient;

package/dist/redis/index.d.ts

@@ -1,3 +1,2 @@
-import type { RedisOptions, RedisClient } from './types.ts';
-export { redis as default };
-export declare function redis(opts?: string | RedisOptions): RedisClient;
+export { redis } from './client.ts';
+export type { RedisOptions, RedisClient, RedisInjected } from './types.ts';

package/dist/serve.d.ts

@@ -1,6 +1,6 @@
 import { type IncomingMessage, type ServerResponse } from 'node:http';
 import type { Duplex } from 'node:stream';
-import type { Handler } from './types.ts';
+import { type Handler } from './types.ts';
 export interface ServeOptions {
     port?: number;
     hostname?: string;

package/dist/session.d.ts

@@ -80,6 +80,10 @@ export declare class MemoryStore implements SessionStore {
     /** Testing only: return approximate count. */
     get size(): number;
 }
+/**
+ * Redis-backed session store.
+ * Pass to `session({ store: new RedisStore({ redis }) })`.
+ */
 export declare class RedisStore implements SessionStore {
     private redis;
     private prefix;
@@ -90,6 +94,22 @@ export declare class RedisStore implements SessionStore {
     destroy(sid: string): Promise<void>;
     close(): Promise<void>;
 }
+/**
+ * Session middleware. Injects `ctx.session` with a persistent key-value store
+ * scoped to the request. Data is automatically saved to the store on response.
+ *
+ * Defaults to memory store. Use `{ store: 'redis', redis }` for multi-process setups.
+ *
+ * ```ts
+ * import { session } from 'weifuwu'
+ * app.use(session())
+ *
+ * app.get('/visit', (req, ctx) => {
+ *   ctx.session.count = (ctx.session.count ?? 0) + 1
+ *   return Response.json({ visits: ctx.session.count })
+ * })
+ * ```
+ */
 export declare function session(options?: SessionOptions): Middleware<Context, Context & SessionInjected> & {
     close: () => Promise<void>;
     store: SessionStore;

package/dist/types.d.ts

@@ -19,3 +19,16 @@ export interface Closeable {
     /** Release all resources. Call once when shutting down. */
     close(): Promise<void>;
 }
+/**
+ * HTTP error with an explicit status code.
+ * Throw from a handler or middleware to return a non-200 response.
+ *
+ * ```ts
+ * if (!resource) throw new HttpError('Not found', 404)
+ * serve() catches it and returns the status code.
+ * ```
+ */
+export declare class HttpError extends Error {
+    status: number;
+    constructor(message: string, status: number);
+}

package/dist/user/client.d.ts

@@ -1,4 +1,9 @@
-import type { UserOptions, UserModule } from './types.ts';
+import type { UserOptions, UserData, UserModule } from './types.ts';
+declare module '../types.ts' {
+    interface Context {
+        user: UserData;
+    }
+}
 /**
  * User authentication module — local register/login, JWT verification, OAuth2 server, social login.
  * Supports DB-less auth via tokens/verify/proxy options.

package/dist/validate.d.ts

@@ -11,4 +11,20 @@ export interface ValidationSchemas {
     params?: ZodSchema;
     headers?: ZodSchema;
 }
+/**
+ * Request validation middleware using Zod schemas.
+ *
+ * Validates `params`, `query`, `body`, and/or `headers` against schemas.
+ * Returns 422 with error details on mismatch.
+ * Injects `ctx.parsed` with validated-and-transformed values.
+ *
+ * ```ts
+ * import { z } from 'zod'
+ *
+ * app.get('/users/:id', validate({
+ *   params: z.object({ id: z.string() }),
+ *   query: z.object({ include: z.string().optional() }),
+ * }), handler)
+ * ```
+ */
 export declare function validate(schemas?: ValidationSchemas): Middleware;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "weifuwu",
   "type": "module",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Web-standard HTTP framework for Node.js — (req, ctx) => Response",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",