Your invoice is attached.
',\n});\n```\n\nDrivers: `smtp` or `console` (logs to stdout).\n\n## Rate Limiting\n\nRate limiting is available as a middleware factory:\n\n```js\n// api/_middleware.js\nimport { createRateLimitMiddleware, MemoryRateLimitStore } from 'arcway';\n\nconst store = new MemoryRateLimitStore();\n\nexport default createRateLimitMiddleware(\n {\n max: 100, // 100 requests\n windowMs: 60_000, // per minute\n },\n store,\n);\n```\n\nThe middleware uses a sliding window algorithm. By default, it keys on the client IP from `X-Forwarded-For` or `X-Real-IP` headers.\n\nResponse headers are added automatically:\n\n- `X-RateLimit-Limit` — configured maximum\n- `X-RateLimit-Remaining` — remaining requests in window\n- `X-RateLimit-Reset` — Unix timestamp when window resets\n- `Retry-After` — seconds until retry (on 429 responses only)\n\nStores: `MemoryRateLimitStore` (built-in) or `RedisRateLimitStore`.\n\n## Sessions\n\nConfigure sessions in `arcway.config.js`:\n\n```js\nexport default {\n session: {\n password: 'at-least-32-characters-long-secret!',\n cookieName: 'arcway.session',\n ttl: 86400,\n },\n};\n```\n\nSet session data from a route handler by returning `session`:\n\n```js\nexport const POST = {\n handler: async (ctx) => {\n const user = await authenticate(ctx.req.body);\n return {\n data: user,\n session: { userId: user.id, role: user.role },\n };\n },\n};\n```\n\nRead session in subsequent requests via `ctx.req.session`. Clear by returning `session: null`.\n\n## Testing\n\nArcway provides `Arcway.test()` for integration testing with an in-memory SQLite database:\n\n```js\nimport { describe, it, expect, beforeAll, afterAll } from 'vitest';\nimport { Arcway } from 'arcway';\n\ndescribe('users API', () => {\n let app;\n\n beforeAll(async () => {\n app = await Arcway.test({ rootDir: './my-app' });\n });\n\n afterAll(() => app.shutdown());\n\n it('creates a user', async () => {\n const res = await app.request('POST', '/users', {\n body: { name: 'Alice', email: 'alice@test.com' },\n });\n expect(res.status).toBe(201);\n expect(res.body.data.name).toBe('Alice');\n });\n\n it('lists users', async () => {\n const res = await app.request('GET', '/users');\n expect(res.status).toBe(200);\n expect(res.body.data).toHaveLength(1);\n });\n});\n```\n\n`Arcway.test()` boots the full application with SQLite in-memory, random port, and MCP disabled. It returns:\n\n- `app.request(method, path, opts)` — make HTTP requests\n- `app.db` — direct database access for setup/assertions\n- `app.run(fn)` — execute a function with infrastructure context\n- `app.shutdown()` — clean up\n\n### Unit Test Stubs\n\nFor unit testing without booting the full app:\n\n```js\nimport { createTestContext } from 'arcway';\n\nconst { ctx, db, cleanup } = await createTestContext('mytest', {\n migrationsDir: './migrations',\n});\n\n// ctx has: { db, events, queue, cache, files, mail, log }\n// All infrastructure is stubbed in-memory\n\nawait cleanup();\n```\n\nIndividual stubs are also available:\n\n```js\nimport {\n createEventStub,\n createQueueStub,\n createCacheStub,\n createFilesStub,\n createMailStub,\n createLoggerStub,\n} from 'arcway';\n```\n\n## Seeds\n\nSeed files live in `seeds/` and run in alphabetical order:\n\n```js\n// seeds/001_users.js\nexport default async function seed(db) {\n await db('users')\n .insert([\n { id: 1, name: 'Alice', email: 'alice@test.com' },\n { id: 2, name: 'Bob', email: 'bob@test.com' },\n ])\n .onConflict('id')\n .merge();\n}\n```\n\nRun with `arcway seed`. Migrations execute first to ensure the schema is current.\n\n## OpenAPI Generation\n\n`arcway docs` generates an OpenAPI 3.0 spec from route schemas:\n\n```bash\narcway docs openapi.json\n```\n\nRoutes with `meta` and `schema` fields produce documented endpoints:\n\n```js\nexport const GET = {\n schema: {\n query: type({ id: /^\\d+$/ }),\n },\n meta: {\n summary: 'Get user by ID',\n description: 'Returns a single user record.',\n tags: ['users'],\n },\n handler: async (ctx) => { /* ... */ },\n};\n```\n\n## Pages (SSR)\n\nArcway supports server-side rendered React pages with file-based routing:\n\n```\npages/\n├── _layout.jsx # Root layout (wraps all pages)\n├── index.jsx # / route\n├── about.jsx # /about route\n├── blog/\n│ ├── _layout.jsx # Blog layout (wraps blog pages)\n│ ├── index.jsx # /blog route\n│ └── [slug].jsx # /blog/:slug route\n└── _404.jsx # Custom 404 page\n```\n\nPages are React components with automatic hydration, layout nesting, and client-side navigation.\n\n## Boot Sequence\n\nWhen `arcway dev` or `arcway start` runs, the framework:\n\n1. Loads environment files (`.env`, `.env.local`, `.env.{mode}`)\n2. Loads `arcway.config.js`\n3. Connects to the database and runs migrations\n4. Initializes Redis, queue, cache, file, and mail drivers\n5. Creates event bus and registers listeners\n6. Discovers and registers jobs\n7. Discovers routes and middleware\n8. Builds pages (if `pages/` exists)\n9. Creates and starts HTTP server\n10. Starts job runner (cron scheduler + continuous jobs)\n\nGraceful shutdown reverses the process: stops the job runner, drains connections, and closes the server.\n","readmeFilename":"README.md"}