@almadar/server 2.1.5 → 2.2.0

package/dist/middleware/authenticateFirebase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticateFirebase.d.ts","sourceRoot":"","sources":["../../src/middleware/authenticateFirebase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAwB1D,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,sDA0BzF;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"authenticateFirebase.d.ts","sourceRoot":"","sources":["../../src/middleware/authenticateFirebase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA2B1D,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,sDA6BzF;AAED,eAAe,oBAAoB,CAAC"}

package/dist/middleware/index.js

@@ -240,7 +240,52 @@ new Proxy({}, {
   }
 });
 
+// src/almadarLogger.ts
+var LEVEL_PRIORITY = { DEBUG: 0, INFO: 1, WARN: 2, ERROR: 3 };
+var ENV = typeof process !== "undefined" && process.env ? process.env : {};
+var NODE_ENV = ENV.NODE_ENV ?? "development";
+var CONFIGURED_LEVEL = (ENV.LOG_LEVEL ?? (NODE_ENV === "production" ? "info" : "debug")).toUpperCase();
+var MIN_PRIORITY = LEVEL_PRIORITY[CONFIGURED_LEVEL] ?? 0;
+var DEBUG_FILTER = (ENV.ALMADAR_DEBUG ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+function matchesNamespace(namespace) {
+  if (DEBUG_FILTER.length === 0) return true;
+  return DEBUG_FILTER.some((pattern) => {
+    if (pattern === "*" || pattern === "almadar:*") return true;
+    if (pattern.endsWith(":*")) return namespace.startsWith(pattern.slice(0, -1));
+    return namespace === pattern;
+  });
+}
+function createLogger(namespace) {
+  const nsAllowed = matchesNamespace(namespace);
+  const log = (level, message, data) => {
+    if (LEVEL_PRIORITY[level] < MIN_PRIORITY) return;
+    if (level === "DEBUG" && !nsAllowed) return;
+    const prefix = `[${namespace}]`;
+    switch (level) {
+      case "DEBUG":
+        console.debug(prefix, message, data ?? "");
+        break;
+      case "INFO":
+        console.info(prefix, message, data ?? "");
+        break;
+      case "WARN":
+        console.warn(prefix, message, data ?? "");
+        break;
+      case "ERROR":
+        console.error(prefix, message, data ?? "");
+        break;
+    }
+  };
+  return {
+    debug: (msg, data) => log("DEBUG", msg, data),
+    info: (msg, data) => log("INFO", msg, data),
+    warn: (msg, data) => log("WARN", msg, data),
+    error: (msg, data) => log("ERROR", msg, data)
+  };
+}
+
 // src/middleware/authenticateFirebase.ts
+var authLog = createLogger("almadar:server:auth");
 var BEARER_PREFIX = "Bearer ";
 var DEV_USER = {
   uid: "dev-user-001",
@@ -260,6 +305,7 @@ var DEV_USER = {
 async function authenticateFirebase(req, res, next) {
   const authorization = req.headers.authorization;
   if (env.NODE_ENV === "development" && (!authorization || !authorization.startsWith(BEARER_PREFIX))) {
+    authLog.debug("auth:devBypass", { uid: DEV_USER.uid });
     req.firebaseUser = DEV_USER;
     res.locals.firebaseUser = DEV_USER;
     return next();
@@ -270,10 +316,12 @@ async function authenticateFirebase(req, res, next) {
     }
     const token = authorization.slice(BEARER_PREFIX.length);
     const decodedToken = await getAuth().verifyIdToken(token);
+    authLog.info("auth:verified", { uid: decodedToken.uid, email: decodedToken.email });
     req.firebaseUser = decodedToken;
     res.locals.firebaseUser = decodedToken;
     return next();
   } catch (error) {
+    authLog.warn("auth:failed", { error: error instanceof Error ? error.message : String(error) });
     console.error("Firebase authentication failed:", error);
     return res.status(401).json({ error: "Unauthorized" });
   }

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/lib/env.ts","../../src/lib/logger.ts","../../src/middleware/errorHandler.ts","../../src/middleware/validation.ts","../../src/lib/db.ts","../../src/middleware/authenticateFirebase.ts"],"names":["ZodError"],"mappings":";;;;;AAIA,MAAA,CAAO,MAAA,EAAO;AAEd,IAAM,SAAA,GAAY,EAAE,MAAA,CAAO;AAAA,EACzB,QAAA,EAAU,CAAA,CAAE,IAAA,CAAK,CAAC,aAAA,EAAe,cAAc,MAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,aAAa,CAAA;AAAA,EAC7E,IAAA,EAAM,CAAA,CACH,MAAA,EAAO,CACP,OAAA,CAAQ,MAAM,CAAA,CACd,SAAA,CAAU,CAAC,GAAA,KAAQ,QAAA,CAAS,GAAA,EAAK,EAAE,CAAC,CAAA;AAAA,EACvC,WAAA,EAAa,CAAA,CACV,MAAA,EAAO,CACP,OAAA,CAAQ,uBAAuB,CAAA,CAC/B,SAAA,CAAU,CAAC,GAAA,KAAS,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,GAAI,GAAI,CAAA;AAAA;AAAA,EAGrF,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAGlC,mBAAA,EAAqB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACzC,qBAAA,EAAuB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3C,oBAAA,EAAsB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC1C,6BAAA,EAA+B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACnD,uBAAA,EAAyB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC7C,2BAAA,EAA6B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAGjD,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,MAAM,CAAA;AAAA;AAAA,EAGrC,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,OAAA,CAAQ,MAAM,CAAA,CAAE,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,KAAM,MAAM,CAAA;AAAA,EACvE,SAAA,EAAW,CAAA,CACR,MAAA,EAAO,CACP,UAAS,CACT,SAAA,CAAU,CAAC,CAAA,KAAO,CAAA,GAAI,QAAA,CAAS,CAAA,EAAG,EAAE,IAAI,MAAU;AACvD,CAAC,CAAA;AAED,IAAM,MAAA,GAAS,SAAA,CAAU,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,EAAA,OAAA,CAAQ,MAAM,uCAAA,EAAoC,MAAA,CAAO,KAAA,CAAM,OAAA,GAAU,WAAW,CAAA;AACpF,EAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACjD;AAEO,IAAM,MAAM,MAAA,CAAO,IAAA;;;AC1C1B,IAAM,MAAA,GAAS;AAAA,EACb,KAAA,EAAO,UAAA;AAAA;AAAA,EACP,IAAA,EAAM,UAAA;AAAA;AAAA,EACN,IAAA,EAAM,UAAA;AAAA;AAAA,EACN,KAAA,EAAO,UAAA;AAAA;AAAA,EACP,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,SAAA,GAAY,CAAC,KAAA,KAA6B;AAC9C,EAAA,MAAM,MAAA,GAAqB,CAAC,OAAA,EAAS,MAAA,EAAQ,QAAQ,OAAO,CAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,QAAA,KAAa,YAAA,GAAe,MAAA,GAAS,OAAA;AAC1D,EAAA,OAAO,OAAO,OAAA,CAAQ,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,QAAQ,CAAA;AACzD,CAAA;AAEA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAiB,OAAA,EAAiB,IAAA,KAA2B;AAClF,EAAA,MAAM,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACzC,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,GAAG,KAAK,CAAA,CAAA,EAAI,MAAM,WAAA,EAAa,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA;AAC9D,EAAA,MAAM,UAAU,IAAA,GAAO,CAAA,CAAA,EAAI,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA,GAAK,EAAA;AACpD,EAAA,OAAO,GAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI,OAAO,GAAG,OAAO,CAAA,CAAA;AACpD,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,KAAA,EAAO,CAAC,OAAA,EAAiB,IAAA,KAAmB;AAC1C,IAAA,IAAI,SAAA,CAAU,OAAO,CAAA,EAAG;AACtB,MAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,CAAc,OAAA,EAAS,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACnD;AAAA,EACF,CAAA;AAAA,EACA,IAAA,EAAM,CAAC,OAAA,EAAiB,IAAA,KAAmB;AACzC,IAAA,IAAI,SAAA,CAAU,MAAM,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,CAAc,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IAClD;AAAA,EACF,CAAA;AAAA,EACA,IAAA,EAAM,CAAC,OAAA,EAAiB,IAAA,KAAmB;AACzC,IAAA,IAAI,SAAA,CAAU,MAAM,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACnD;AAAA,EACF,CAAA;AAAA,EACA,KAAA,EAAO,CAAC,OAAA,EAAiB,IAAA,KAAmB;AAC1C,IAAA,IAAI,SAAA,CAAU,OAAO,CAAA,EAAG;AACtB,MAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,EAAS,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACrD;AAAA,EACF;AACF,CAAA;;;ACxCO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EAClC,WAAA,CACS,UAAA,EACA,OAAA,EACA,IAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAJN,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AAAA,EACd;AACF;AAKO,IAAM,aAAA,GAAN,cAA4B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,UAAkB,oBAAA,EAAsB;AAClD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,WAAW,CAAA;AAAA,EACjC;AACF;AAKO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC5C,WAAA,CAAY,UAAkB,mBAAA,EAAqB;AACjD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,kBAAkB,CAAA;AAAA,EACxC;AACF;AAKO,IAAM,iBAAA,GAAN,cAAgC,QAAA,CAAS;AAAA,EAC9C,WAAA,CAAY,UAAkB,cAAA,EAAgB;AAC5C,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,cAAc,CAAA;AAAA,EACpC;AACF;AAKO,IAAM,cAAA,GAAN,cAA6B,QAAA,CAAS;AAAA,EAC3C,WAAA,CAAY,UAAkB,WAAA,EAAa;AACzC,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,WAAW,CAAA;AAAA,EACjC;AACF;AAKO,IAAM,aAAA,GAAN,cAA4B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,UAAkB,mBAAA,EAAqB;AACjD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,UAAU,CAAA;AAAA,EAChC;AACF;AAKO,IAAM,YAAA,GAAe,CAC1B,GAAA,EACA,IAAA,EACA,KACA,KAAA,KACS;AACT,EAAA,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,EAAE,IAAA,EAAM,GAAA,CAAI,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,KAAA,EAAO,GAAA,CAAI,KAAA,EAAO,CAAA;AAGjF,EAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,MACnB,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,mBAAA;AAAA,MACP,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAC9B,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,QACrB,SAAS,CAAA,CAAE;AAAA,OACb,CAAE;AAAA,KACH,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,IAAA,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,UAAU,CAAA,CAAE,IAAA,CAAK;AAAA,MAC9B,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,GAAA,CAAI,OAAA;AAAA,MACX,MAAM,GAAA,CAAI;AAAA,KACX,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,GAAA,CAAI,SAAS,gBAAA,EAAkB;AACjE,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,MACnB,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,gBAAA;AAAA,MACP,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,IACnB,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,uBAAA;AAAA,IACP,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAKO,IAAM,eACX,CAAC,EAAA,KACD,CAAC,GAAA,EAAc,KAAe,IAAA,KAAuB;AACnD,EAAA,OAAA,CAAQ,OAAA,CAAQ,GAAG,GAAA,EAAK,GAAA,EAAK,IAAI,CAAC,CAAA,CAAE,MAAM,IAAI,CAAA;AAChD;AAKK,IAAM,eAAA,GAAkB,CAAC,GAAA,EAAc,GAAA,KAAwB;AACpE,EAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,IACnB,OAAA,EAAS,KAAA;AAAA,IACT,OAAO,CAAA,MAAA,EAAS,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,IAAI,CAAA,UAAA,CAAA;AAAA,IACtC,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AChIO,IAAM,eACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,IAAA,GAAO,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,IAAI,CAAA;AAC3C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,mBAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;AAKK,IAAM,gBACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,KAAA,GAAQ,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,KAAK,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,0BAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;AAKK,IAAM,iBACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,MAAM,CAAA;AAC/C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;ACQF,SAAS,MAAA,GAAwB;AAC/B,EAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,OAAO,MAAM,GAAA,EAAI;AACnB;AAKO,SAAS,YAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,GAAS,SAAA,EAAU;AAC5B;AAKO,SAAS,OAAA,GAA2B;AACzC,EAAA,OAAO,MAAA,GAAS,IAAA,EAAK;AACvB;AASkB,IAAI,KAAA,CAAM,EAAC,EAAgC;AAAA,EAC3D,GAAA,CAAI,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU;AAC3B,IAAA,MAAM,YAAY,YAAA,EAAa;AAC/B,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,MAAM,QAAQ,CAAA;AACnD,IAAA,OAAO,OAAO,KAAA,KAAU,UAAA,GAAa,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA,GAAI,KAAA;AAAA,EAC/D;AACF,CAAC;;;ACpHD,IAAM,aAAA,GAAgB,SAAA;AAGtB,IAAM,QAAA,GAA2B;AAAA,EAC/B,GAAA,EAAK,cAAA;AAAA,EACL,KAAA,EAAO,eAAA;AAAA,EACP,cAAA,EAAgB,IAAA;AAAA,EAChB,GAAA,EAAK,aAAA;AAAA,EACL,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,EACvC,KAAK,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAA,GAAI,IAAA;AAAA,EACrC,KAAK,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,EACjC,GAAA,EAAK,4CAAA;AAAA,EACL,GAAA,EAAK,cAAA;AAAA,EACL,QAAA,EAAU;AAAA,IACR,YAAY,EAAC;AAAA,IACb,gBAAA,EAAkB;AAAA;AAEtB,CAAA;AAEA,eAAsB,oBAAA,CAAqB,GAAA,EAAc,GAAA,EAAe,IAAA,EAAoB;AAC1F,EAAA,MAAM,aAAA,GAAgB,IAAI,OAAA,CAAQ,aAAA;AAGlC,EAAA,IAAI,GAAA,CAAI,aAAa,aAAA,KAAkB,CAAC,iBAAiB,CAAC,aAAA,CAAc,UAAA,CAAW,aAAa,CAAA,CAAA,EAAI;AAClG,IAAA,GAAA,CAAI,YAAA,GAAe,QAAA;AACnB,IAAA,GAAA,CAAI,OAAO,YAAA,GAAe,QAAA;AAC1B,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,aAAA,CAAc,UAAA,CAAW,aAAa,CAAA,EAAG;AAC9D,MAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,6CAA6C,CAAA;AAAA,IACpF;AAEA,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,KAAA,CAAM,aAAA,CAAc,MAAM,CAAA;AACtD,IAAA,MAAM,YAAA,GAAe,MAAM,OAAA,EAAQ,CAAE,cAAc,KAAK,CAAA;AAExD,IAAA,GAAA,CAAI,YAAA,GAAe,YAAA;AACnB,IAAA,GAAA,CAAI,OAAO,YAAA,GAAe,YAAA;AAE1B,IAAA,OAAO,IAAA,EAAK;AAAA,EACd,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,mCAAmC,KAAK,CAAA;AACtD,IAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,EACvD;AACF","file":"index.js","sourcesContent":["import { z } from 'zod';\nimport dotenv from 'dotenv';\n\n// Load environment variables\ndotenv.config();\n\nconst envSchema = z.object({\n  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),\n  PORT: z\n    .string()\n    .default('3030')\n    .transform((val) => parseInt(val, 10)),\n  CORS_ORIGIN: z\n    .string()\n    .default('http://localhost:5173')\n    .transform((val) => (val.includes(',') ? val.split(',').map((s) => s.trim()) : val)),\n  \n  // Database (Prisma/SQL) - optional\n  DATABASE_URL: z.string().optional(),\n  \n  // Firebase/Firestore configuration\n  FIREBASE_PROJECT_ID: z.string().optional(),\n  FIREBASE_CLIENT_EMAIL: z.string().optional(),\n  FIREBASE_PRIVATE_KEY: z.string().optional(),\n  FIREBASE_SERVICE_ACCOUNT_PATH: z.string().optional(),\n  FIRESTORE_EMULATOR_HOST: z.string().optional(),\n  FIREBASE_AUTH_EMULATOR_HOST: z.string().optional(),\n  \n  // API configuration\n  API_PREFIX: z.string().default('/api'),\n\n  // Mock data configuration\n  USE_MOCK_DATA: z.string().default('true').transform((v) => v === 'true'),\n  MOCK_SEED: z\n    .string()\n    .optional()\n    .transform((v) => (v ? parseInt(v, 10) : undefined)),\n});\n\nconst parsed = envSchema.safeParse(process.env);\n\nif (!parsed.success) {\n  console.error('❌ Invalid environment variables:', parsed.error.flatten().fieldErrors);\n  throw new Error('Invalid environment variables');\n}\n\nexport const env = parsed.data;\n","import { env } from './env.js';\n\ntype LogLevel = 'debug' | 'info' | 'warn' | 'error';\n\nconst colors = {\n  debug: '\\x1b[36m', // Cyan\n  info: '\\x1b[32m', // Green\n  warn: '\\x1b[33m', // Yellow\n  error: '\\x1b[31m', // Red\n  reset: '\\x1b[0m',\n};\n\nconst shouldLog = (level: LogLevel): boolean => {\n  const levels: LogLevel[] = ['debug', 'info', 'warn', 'error'];\n  const minLevel = env.NODE_ENV === 'production' ? 'info' : 'debug';\n  return levels.indexOf(level) >= levels.indexOf(minLevel);\n};\n\nconst formatMessage = (level: LogLevel, message: string, meta?: unknown): string => {\n  const timestamp = new Date().toISOString();\n  const color = colors[level];\n  const prefix = `${color}[${level.toUpperCase()}]${colors.reset}`;\n  const metaStr = meta ? ` ${JSON.stringify(meta)}` : '';\n  return `${timestamp} ${prefix} ${message}${metaStr}`;\n};\n\nexport const logger = {\n  debug: (message: string, meta?: unknown) => {\n    if (shouldLog('debug')) {\n      console.log(formatMessage('debug', message, meta));\n    }\n  },\n  info: (message: string, meta?: unknown) => {\n    if (shouldLog('info')) {\n      console.log(formatMessage('info', message, meta));\n    }\n  },\n  warn: (message: string, meta?: unknown) => {\n    if (shouldLog('warn')) {\n      console.warn(formatMessage('warn', message, meta));\n    }\n  },\n  error: (message: string, meta?: unknown) => {\n    if (shouldLog('error')) {\n      console.error(formatMessage('error', message, meta));\n    }\n  },\n};\n","import { Request, Response, NextFunction } from 'express';\nimport { ZodError } from 'zod';\nimport { logger } from '../lib/logger.js';\n\n/**\n * Base application error class\n */\nexport class AppError extends Error {\n  constructor(\n    public statusCode: number,\n    public message: string,\n    public code?: string\n  ) {\n    super(message);\n    this.name = 'AppError';\n  }\n}\n\n/**\n * 404 Not Found error\n */\nexport class NotFoundError extends AppError {\n  constructor(message: string = 'Resource not found') {\n    super(404, message, 'NOT_FOUND');\n  }\n}\n\n/**\n * 400 Bad Request / Validation error\n */\nexport class ValidationError extends AppError {\n  constructor(message: string = 'Validation failed') {\n    super(400, message, 'VALIDATION_ERROR');\n  }\n}\n\n/**\n * 401 Unauthorized error\n */\nexport class UnauthorizedError extends AppError {\n  constructor(message: string = 'Unauthorized') {\n    super(401, message, 'UNAUTHORIZED');\n  }\n}\n\n/**\n * 403 Forbidden error\n */\nexport class ForbiddenError extends AppError {\n  constructor(message: string = 'Forbidden') {\n    super(403, message, 'FORBIDDEN');\n  }\n}\n\n/**\n * 409 Conflict error\n */\nexport class ConflictError extends AppError {\n  constructor(message: string = 'Resource conflict') {\n    super(409, message, 'CONFLICT');\n  }\n}\n\n/**\n * Global error handler middleware\n */\nexport const errorHandler = (\n  err: Error,\n  _req: Request,\n  res: Response,\n  _next: NextFunction\n): void => {\n  logger.error('Error:', { name: err.name, message: err.message, stack: err.stack });\n\n  // Zod validation errors\n  if (err instanceof ZodError) {\n    res.status(400).json({\n      success: false,\n      error: 'Validation failed',\n      code: 'VALIDATION_ERROR',\n      details: err.errors.map((e) => ({\n        path: e.path.join('.'),\n        message: e.message,\n      })),\n    });\n    return;\n  }\n\n  // Custom application errors\n  if (err instanceof AppError) {\n    res.status(err.statusCode).json({\n      success: false,\n      error: err.message,\n      code: err.code,\n    });\n    return;\n  }\n\n  // Firebase/Firestore errors\n  if (err.name === 'FirebaseError' || err.name === 'FirestoreError') {\n    res.status(500).json({\n      success: false,\n      error: 'Database error',\n      code: 'DATABASE_ERROR',\n    });\n    return;\n  }\n\n  // Unknown errors\n  res.status(500).json({\n    success: false,\n    error: 'Internal server error',\n    code: 'INTERNAL_ERROR',\n  });\n};\n\n/**\n * Async handler wrapper to catch errors in async route handlers\n */\nexport const asyncHandler =\n  (fn: (req: Request, res: Response, next: NextFunction) => Promise<unknown>) =>\n  (req: Request, res: Response, next: NextFunction) => {\n    Promise.resolve(fn(req, res, next)).catch(next);\n  };\n\n/**\n * 404 handler for unmatched routes\n */\nexport const notFoundHandler = (req: Request, res: Response): void => {\n  res.status(404).json({\n    success: false,\n    error: `Route ${req.method} ${req.path} not found`,\n    code: 'ROUTE_NOT_FOUND',\n  });\n};\n","import { Request, Response, NextFunction } from 'express';\nimport { AnyZodObject, ZodError } from 'zod';\n\n/**\n * Middleware to validate request body against a Zod schema\n */\nexport const validateBody =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.body = await schema.parseAsync(req.body);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Validation failed',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n\n/**\n * Middleware to validate request query parameters against a Zod schema\n */\nexport const validateQuery =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.query = await schema.parseAsync(req.query);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Invalid query parameters',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n\n/**\n * Middleware to validate request params against a Zod schema\n */\nexport const validateParams =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.params = await schema.parseAsync(req.params);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Invalid path parameters',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n","/**\n * Database Accessors & Initialization\n *\n * This module provides:\n * - `initializeFirebase()` — convenience function to init Firebase from env vars\n * - `getFirestore()`, `getAuth()` — accessors for Firebase services\n * - `db` — lazy Firestore proxy (no eager initialization)\n *\n * The consuming application MUST call `initializeFirebase()` or\n * `admin.initializeApp()` before using any Firebase-dependent features.\n */\n\nimport admin from 'firebase-admin';\n\n/**\n * Initialize Firebase Admin SDK from environment variables.\n *\n * Reads: FIREBASE_PROJECT_ID, FIREBASE_CLIENT_EMAIL, FIREBASE_PRIVATE_KEY,\n *        FIREBASE_SERVICE_ACCOUNT_PATH, FIRESTORE_EMULATOR_HOST\n *\n * Safe to call multiple times — returns existing app if already initialized.\n */\nexport function initializeFirebase(): admin.app.App {\n  // Already initialized — return existing app\n  if (admin.apps.length > 0) {\n    return admin.app();\n  }\n\n  const projectId = process.env.FIREBASE_PROJECT_ID;\n  const emulatorHost = process.env.FIRESTORE_EMULATOR_HOST;\n\n  // Emulator mode — no credentials needed\n  if (emulatorHost) {\n    const app = admin.initializeApp({\n      projectId: projectId || 'demo-project',\n    });\n    console.log(`Firebase Admin initialized for emulator: ${emulatorHost}`);\n    return app;\n  }\n\n  // Service account file\n  const serviceAccountPath = process.env.FIREBASE_SERVICE_ACCOUNT_PATH;\n  if (serviceAccountPath) {\n    // Dynamic require for JSON service account file at runtime\n    const serviceAccount = require(serviceAccountPath) as Record<string, unknown>;\n    return admin.initializeApp({\n      credential: admin.credential.cert(serviceAccount),\n      projectId,\n    });\n  }\n\n  // Inline credentials\n  const clientEmail = process.env.FIREBASE_CLIENT_EMAIL;\n  const privateKey = process.env.FIREBASE_PRIVATE_KEY;\n  if (projectId && clientEmail && privateKey) {\n    return admin.initializeApp({\n      credential: admin.credential.cert({\n        projectId,\n        clientEmail,\n        privateKey: privateKey.replace(/\\\\n/g, '\\n'),\n      }),\n      projectId,\n    });\n  }\n\n  // Application default credentials (Cloud Run, etc.)\n  if (projectId) {\n    return admin.initializeApp({\n      credential: admin.credential.applicationDefault(),\n      projectId,\n    });\n  }\n\n  throw new Error(\n    '@almadar/server: Cannot initialize Firebase — no credentials found. ' +\n    'Set FIREBASE_PROJECT_ID + FIREBASE_CLIENT_EMAIL + FIREBASE_PRIVATE_KEY, ' +\n    'or FIREBASE_SERVICE_ACCOUNT_PATH, or FIRESTORE_EMULATOR_HOST.'\n  );\n}\n\n/**\n * Get the initialized Firebase app.\n * Throws if Firebase Admin SDK has not been initialized.\n */\nfunction getApp(): admin.app.App {\n  if (admin.apps.length === 0) {\n    throw new Error(\n      '@almadar/server: Firebase Admin SDK is not initialized. ' +\n      'Call initializeFirebase() or admin.initializeApp() before using @almadar/server.'\n    );\n  }\n  return admin.app();\n}\n\n/**\n * Get Firestore instance from the pre-initialized Firebase app.\n */\nexport function getFirestore(): admin.firestore.Firestore {\n  return getApp().firestore();\n}\n\n/**\n * Get Firebase Auth instance from the pre-initialized Firebase app.\n */\nexport function getAuth(): admin.auth.Auth {\n  return getApp().auth();\n}\n\n// Re-export admin for convenience\nexport { admin };\n\n/**\n * Lazy Firestore proxy — resolves on first property access, not at import time.\n * This prevents the \"Firebase not initialized\" error during module loading.\n */\nexport const db = new Proxy({} as admin.firestore.Firestore, {\n  get(_target, prop, receiver) {\n    const firestore = getFirestore();\n    const value = Reflect.get(firestore, prop, receiver);\n    return typeof value === 'function' ? value.bind(firestore) : value;\n  },\n});\n","import { NextFunction, Request, Response } from 'express';\nimport type { DecodedIdToken } from 'firebase-admin/auth';\nimport { getAuth } from '../lib/db.js';\nimport { env } from '../lib/env.js';\n\nconst BEARER_PREFIX = 'Bearer ';\n\n/** Fake dev user injected when NODE_ENV=development and no auth header is present */\nconst DEV_USER: DecodedIdToken = {\n  uid: 'dev-user-001',\n  email: 'dev@localhost',\n  email_verified: true,\n  aud: 'dev-project',\n  auth_time: Math.floor(Date.now() / 1000),\n  exp: Math.floor(Date.now() / 1000) + 3600,\n  iat: Math.floor(Date.now() / 1000),\n  iss: 'https://securetoken.google.com/dev-project',\n  sub: 'dev-user-001',\n  firebase: {\n    identities: {},\n    sign_in_provider: 'custom',\n  },\n};\n\nexport async function authenticateFirebase(req: Request, res: Response, next: NextFunction) {\n  const authorization = req.headers.authorization;\n\n  // Dev bypass: in development mode, skip auth if no token is provided\n  if (env.NODE_ENV === 'development' && (!authorization || !authorization.startsWith(BEARER_PREFIX))) {\n    req.firebaseUser = DEV_USER;\n    res.locals.firebaseUser = DEV_USER;\n    return next();\n  }\n\n  try {\n    if (!authorization || !authorization.startsWith(BEARER_PREFIX)) {\n      return res.status(401).json({ error: 'Authorization header missing or malformed' });\n    }\n\n    const token = authorization.slice(BEARER_PREFIX.length);\n    const decodedToken = await getAuth().verifyIdToken(token);\n\n    req.firebaseUser = decodedToken;\n    res.locals.firebaseUser = decodedToken;\n\n    return next();\n  } catch (error) {\n    console.error('Firebase authentication failed:', error);\n    return res.status(401).json({ error: 'Unauthorized' });\n  }\n}\n\nexport default authenticateFirebase;\n\n\n"]}
+{"version":3,"sources":["../../src/lib/env.ts","../../src/lib/logger.ts","../../src/middleware/errorHandler.ts","../../src/middleware/validation.ts","../../src/lib/db.ts","../../src/almadarLogger.ts","../../src/middleware/authenticateFirebase.ts"],"names":["ZodError"],"mappings":";;;;;AAIA,MAAA,CAAO,MAAA,EAAO;AAEd,IAAM,SAAA,GAAY,EAAE,MAAA,CAAO;AAAA,EACzB,QAAA,EAAU,CAAA,CAAE,IAAA,CAAK,CAAC,aAAA,EAAe,cAAc,MAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,aAAa,CAAA;AAAA,EAC7E,IAAA,EAAM,CAAA,CACH,MAAA,EAAO,CACP,OAAA,CAAQ,MAAM,CAAA,CACd,SAAA,CAAU,CAAC,GAAA,KAAQ,QAAA,CAAS,GAAA,EAAK,EAAE,CAAC,CAAA;AAAA,EACvC,WAAA,EAAa,CAAA,CACV,MAAA,EAAO,CACP,OAAA,CAAQ,uBAAuB,CAAA,CAC/B,SAAA,CAAU,CAAC,GAAA,KAAS,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,GAAI,GAAI,CAAA;AAAA;AAAA,EAGrF,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAGlC,mBAAA,EAAqB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACzC,qBAAA,EAAuB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3C,oBAAA,EAAsB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC1C,6BAAA,EAA+B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACnD,uBAAA,EAAyB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC7C,2BAAA,EAA6B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAGjD,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,MAAM,CAAA;AAAA;AAAA,EAGrC,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,OAAA,CAAQ,MAAM,CAAA,CAAE,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,KAAM,MAAM,CAAA;AAAA,EACvE,SAAA,EAAW,CAAA,CACR,MAAA,EAAO,CACP,UAAS,CACT,SAAA,CAAU,CAAC,CAAA,KAAO,CAAA,GAAI,QAAA,CAAS,CAAA,EAAG,EAAE,IAAI,MAAU;AACvD,CAAC,CAAA;AAED,IAAM,MAAA,GAAS,SAAA,CAAU,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAA;AAE9C,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,EAAA,OAAA,CAAQ,MAAM,uCAAA,EAAoC,MAAA,CAAO,KAAA,CAAM,OAAA,GAAU,WAAW,CAAA;AACpF,EAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACjD;AAEO,IAAM,MAAM,MAAA,CAAO,IAAA;;;AC1C1B,IAAM,MAAA,GAAS;AAAA,EACb,KAAA,EAAO,UAAA;AAAA;AAAA,EACP,IAAA,EAAM,UAAA;AAAA;AAAA,EACN,IAAA,EAAM,UAAA;AAAA;AAAA,EACN,KAAA,EAAO,UAAA;AAAA;AAAA,EACP,KAAA,EAAO;AACT,CAAA;AAEA,IAAM,SAAA,GAAY,CAAC,KAAA,KAA6B;AAC9C,EAAA,MAAM,MAAA,GAAqB,CAAC,OAAA,EAAS,MAAA,EAAQ,QAAQ,OAAO,CAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,QAAA,KAAa,YAAA,GAAe,MAAA,GAAS,OAAA;AAC1D,EAAA,OAAO,OAAO,OAAA,CAAQ,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,QAAQ,CAAA;AACzD,CAAA;AAEA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAiB,OAAA,EAAiB,IAAA,KAA2B;AAClF,EAAA,MAAM,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACzC,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,GAAG,KAAK,CAAA,CAAA,EAAI,MAAM,WAAA,EAAa,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,CAAA;AAC9D,EAAA,MAAM,UAAU,IAAA,GAAO,CAAA,CAAA,EAAI,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA,GAAK,EAAA;AACpD,EAAA,OAAO,GAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI,OAAO,GAAG,OAAO,CAAA,CAAA;AACpD,CAAA;AAEO,IAAM,MAAA,GAAS;AAAA,EACpB,KAAA,EAAO,CAAC,OAAA,EAAiB,IAAA,KAAmB;AAC1C,IAAA,IAAI,SAAA,CAAU,OAAO,CAAA,EAAG;AACtB,MAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,CAAc,OAAA,EAAS,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACnD;AAAA,EACF,CAAA;AAAA,EACA,IAAA,EAAM,CAAC,OAAA,EAAiB,IAAA,KAAmB;AACzC,IAAA,IAAI,SAAA,CAAU,MAAM,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,CAAc,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IAClD;AAAA,EACF,CAAA;AAAA,EACA,IAAA,EAAM,CAAC,OAAA,EAAiB,IAAA,KAAmB;AACzC,IAAA,IAAI,SAAA,CAAU,MAAM,CAAA,EAAG;AACrB,MAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACnD;AAAA,EACF,CAAA;AAAA,EACA,KAAA,EAAO,CAAC,OAAA,EAAiB,IAAA,KAAmB;AAC1C,IAAA,IAAI,SAAA,CAAU,OAAO,CAAA,EAAG;AACtB,MAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,EAAS,OAAA,EAAS,IAAI,CAAC,CAAA;AAAA,IACrD;AAAA,EACF;AACF,CAAA;;;ACxCO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EAClC,WAAA,CACS,UAAA,EACA,OAAA,EACA,IAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAJN,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AAAA,EACd;AACF;AAKO,IAAM,aAAA,GAAN,cAA4B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,UAAkB,oBAAA,EAAsB;AAClD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,WAAW,CAAA;AAAA,EACjC;AACF;AAKO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC5C,WAAA,CAAY,UAAkB,mBAAA,EAAqB;AACjD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,kBAAkB,CAAA;AAAA,EACxC;AACF;AAKO,IAAM,iBAAA,GAAN,cAAgC,QAAA,CAAS;AAAA,EAC9C,WAAA,CAAY,UAAkB,cAAA,EAAgB;AAC5C,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,cAAc,CAAA;AAAA,EACpC;AACF;AAKO,IAAM,cAAA,GAAN,cAA6B,QAAA,CAAS;AAAA,EAC3C,WAAA,CAAY,UAAkB,WAAA,EAAa;AACzC,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,WAAW,CAAA;AAAA,EACjC;AACF;AAKO,IAAM,aAAA,GAAN,cAA4B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,UAAkB,mBAAA,EAAqB;AACjD,IAAA,KAAA,CAAM,GAAA,EAAK,SAAS,UAAU,CAAA;AAAA,EAChC;AACF;AAKO,IAAM,YAAA,GAAe,CAC1B,GAAA,EACA,IAAA,EACA,KACA,KAAA,KACS;AACT,EAAA,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,EAAE,IAAA,EAAM,GAAA,CAAI,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,KAAA,EAAO,GAAA,CAAI,KAAA,EAAO,CAAA;AAGjF,EAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,MACnB,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,mBAAA;AAAA,MACP,IAAA,EAAM,kBAAA;AAAA,MACN,OAAA,EAAS,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAC9B,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,QACrB,SAAS,CAAA,CAAE;AAAA,OACb,CAAE;AAAA,KACH,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,eAAe,QAAA,EAAU;AAC3B,IAAA,GAAA,CAAI,MAAA,CAAO,GAAA,CAAI,UAAU,CAAA,CAAE,IAAA,CAAK;AAAA,MAC9B,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,GAAA,CAAI,OAAA;AAAA,MACX,MAAM,GAAA,CAAI;AAAA,KACX,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,GAAA,CAAI,SAAS,gBAAA,EAAkB;AACjE,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,MACnB,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,gBAAA;AAAA,MACP,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA;AAAA,EACF;AAGA,EAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,IACnB,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,uBAAA;AAAA,IACP,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAKO,IAAM,eACX,CAAC,EAAA,KACD,CAAC,GAAA,EAAc,KAAe,IAAA,KAAuB;AACnD,EAAA,OAAA,CAAQ,OAAA,CAAQ,GAAG,GAAA,EAAK,GAAA,EAAK,IAAI,CAAC,CAAA,CAAE,MAAM,IAAI,CAAA;AAChD;AAKK,IAAM,eAAA,GAAkB,CAAC,GAAA,EAAc,GAAA,KAAwB;AACpE,EAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,IACnB,OAAA,EAAS,KAAA;AAAA,IACT,OAAO,CAAA,MAAA,EAAS,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,IAAI,CAAA,UAAA,CAAA;AAAA,IACtC,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AChIO,IAAM,eACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,IAAA,GAAO,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,IAAI,CAAA;AAC3C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,mBAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;AAKK,IAAM,gBACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,KAAA,GAAQ,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,KAAK,CAAA;AAC7C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,0BAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;AAKK,IAAM,iBACX,CAAC,MAAA,KAAyB,OAAO,GAAA,EAAc,KAAe,IAAA,KAAsC;AAClG,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,IAAI,MAAM,CAAA;AAC/C,IAAA,IAAA,EAAK;AAAA,EACP,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiBA,QAAAA,EAAU;AAC7B,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,QACnB,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,IAAA,EAAM,kBAAA;AAAA,QACN,OAAA,EAAS,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAChC,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAAA,UACrB,SAAS,CAAA,CAAE;AAAA,SACb,CAAE;AAAA,OACH,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,CAAA;AAAA,EACZ;AACF;ACQF,SAAS,MAAA,GAAwB;AAC/B,EAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,OAAO,MAAM,GAAA,EAAI;AACnB;AAKO,SAAS,YAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,GAAS,SAAA,EAAU;AAC5B;AAKO,SAAS,OAAA,GAA2B;AACzC,EAAA,OAAO,MAAA,GAAS,IAAA,EAAK;AACvB;AASkB,IAAI,KAAA,CAAM,EAAC,EAAgC;AAAA,EAC3D,GAAA,CAAI,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU;AAC3B,IAAA,MAAM,YAAY,YAAA,EAAa;AAC/B,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,MAAM,QAAQ,CAAA;AACnD,IAAA,OAAO,OAAO,KAAA,KAAU,UAAA,GAAa,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA,GAAI,KAAA;AAAA,EAC/D;AACF,CAAC;;;AC7GD,IAAM,cAAA,GAA2C,EAAE,KAAA,EAAO,CAAA,EAAG,MAAM,CAAA,EAAG,IAAA,EAAM,CAAA,EAAG,KAAA,EAAO,CAAA,EAAE;AAExF,IAAM,GAAA,GAA0C,OAAO,OAAA,KAAY,WAAA,IAAe,QAAQ,GAAA,GAAM,OAAA,CAAQ,MAAM,EAAC;AAE/G,IAAM,QAAA,GAAW,IAAI,QAAA,IAAY,aAAA;AACjC,IAAM,oBACJ,GAAA,CAAI,SAAA,KAAc,aAAa,YAAA,GAAe,MAAA,GAAS,UACvD,WAAA,EAAY;AACd,IAAM,YAAA,GAAe,cAAA,CAAe,gBAAgB,CAAA,IAAK,CAAA;AAEzD,IAAM,YAAA,GAAA,CAAgB,GAAA,CAAI,aAAA,IAAiB,EAAA,EACxC,MAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,EAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AAE/C,SAAS,iBAAiB,SAAA,EAA4B;AACpD,EAAA,IAAI,YAAA,CAAa,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AACtC,EAAA,OAAO,YAAA,CAAa,KAAK,CAAA,OAAA,KAAW;AAClC,IAAA,IAAI,OAAA,KAAY,GAAA,IAAO,OAAA,KAAY,WAAA,EAAa,OAAO,IAAA;AACvD,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,EAAG,OAAO,SAAA,CAAU,UAAA,CAAW,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAC5E,IAAA,OAAO,SAAA,KAAc,OAAA;AAAA,EACvB,CAAC,CAAA;AACH;AASO,SAAS,aAAa,SAAA,EAA2B;AACtD,EAAA,MAAM,SAAA,GAAY,iBAAiB,SAAS,CAAA;AAE5C,EAAA,MAAM,GAAA,GAAM,CAAC,KAAA,EAAiB,OAAA,EAAiB,IAAA,KAAmC;AAChF,IAAA,IAAI,cAAA,CAAe,KAAK,CAAA,GAAI,YAAA,EAAc;AAC1C,IAAA,IAAI,KAAA,KAAU,OAAA,IAAW,CAAC,SAAA,EAAW;AAErC,IAAA,MAAM,MAAA,GAAS,IAAI,SAAS,CAAA,CAAA,CAAA;AAE5B,IAAA,QAAQ,KAAA;AAAO,MACb,KAAK,OAAA;AAAS,QAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,IAAA,IAAQ,EAAE,CAAA;AAAG,QAAA;AAAA,MAC1D,KAAK,MAAA;AAAS,QAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,IAAA,IAAQ,EAAE,CAAA;AAAG,QAAA;AAAA,MACzD,KAAK,MAAA;AAAS,QAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,IAAA,IAAQ,EAAE,CAAA;AAAG,QAAA;AAAA,MACzD,KAAK,OAAA;AAAS,QAAA,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,OAAA,EAAS,IAAA,IAAQ,EAAE,CAAA;AAAG,QAAA;AAAA;AAC5D,EACF,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,OAAO,CAAC,GAAA,EAAa,SAAmC,GAAA,CAAI,OAAA,EAAS,KAAK,IAAI,CAAA;AAAA,IAC9E,MAAO,CAAC,GAAA,EAAa,SAAmC,GAAA,CAAI,MAAA,EAAQ,KAAK,IAAI,CAAA;AAAA,IAC7E,MAAO,CAAC,GAAA,EAAa,SAAmC,GAAA,CAAI,MAAA,EAAQ,KAAK,IAAI,CAAA;AAAA,IAC7E,OAAO,CAAC,GAAA,EAAa,SAAmC,GAAA,CAAI,OAAA,EAAS,KAAK,IAAI;AAAA,GAChF;AACF;;;AC1DA,IAAM,OAAA,GAAU,aAAa,qBAAqB,CAAA;AAElD,IAAM,aAAA,GAAgB,SAAA;AAGtB,IAAM,QAAA,GAA2B;AAAA,EAC/B,GAAA,EAAK,cAAA;AAAA,EACL,KAAA,EAAO,eAAA;AAAA,EACP,cAAA,EAAgB,IAAA;AAAA,EAChB,GAAA,EAAK,aAAA;AAAA,EACL,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,EACvC,KAAK,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAA,GAAI,IAAA;AAAA,EACrC,KAAK,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,EACjC,GAAA,EAAK,4CAAA;AAAA,EACL,GAAA,EAAK,cAAA;AAAA,EACL,QAAA,EAAU;AAAA,IACR,YAAY,EAAC;AAAA,IACb,gBAAA,EAAkB;AAAA;AAEtB,CAAA;AAEA,eAAsB,oBAAA,CAAqB,GAAA,EAAc,GAAA,EAAe,IAAA,EAAoB;AAC1F,EAAA,MAAM,aAAA,GAAgB,IAAI,OAAA,CAAQ,aAAA;AAGlC,EAAA,IAAI,GAAA,CAAI,aAAa,aAAA,KAAkB,CAAC,iBAAiB,CAAC,aAAA,CAAc,UAAA,CAAW,aAAa,CAAA,CAAA,EAAI;AAClG,IAAA,OAAA,CAAQ,MAAM,gBAAA,EAAkB,EAAE,GAAA,EAAK,QAAA,CAAS,KAAK,CAAA;AACrD,IAAA,GAAA,CAAI,YAAA,GAAe,QAAA;AACnB,IAAA,GAAA,CAAI,OAAO,YAAA,GAAe,QAAA;AAC1B,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,aAAA,CAAc,UAAA,CAAW,aAAa,CAAA,EAAG;AAC9D,MAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,6CAA6C,CAAA;AAAA,IACpF;AAEA,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,KAAA,CAAM,aAAA,CAAc,MAAM,CAAA;AACtD,IAAA,MAAM,YAAA,GAAe,MAAM,OAAA,EAAQ,CAAE,cAAc,KAAK,CAAA;AAExD,IAAA,OAAA,CAAQ,IAAA,CAAK,iBAAiB,EAAE,GAAA,EAAK,aAAa,GAAA,EAAK,KAAA,EAAO,YAAA,CAAa,KAAA,EAAO,CAAA;AAClF,IAAA,GAAA,CAAI,YAAA,GAAe,YAAA;AACnB,IAAA,GAAA,CAAI,OAAO,YAAA,GAAe,YAAA;AAE1B,IAAA,OAAO,IAAA,EAAK;AAAA,EACd,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAe,EAAE,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAA,EAAG,CAAA;AAC7F,IAAA,OAAA,CAAQ,KAAA,CAAM,mCAAmC,KAAK,CAAA;AACtD,IAAA,OAAO,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,EACvD;AACF","file":"index.js","sourcesContent":["import { z } from 'zod';\nimport dotenv from 'dotenv';\n\n// Load environment variables\ndotenv.config();\n\nconst envSchema = z.object({\n  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),\n  PORT: z\n    .string()\n    .default('3030')\n    .transform((val) => parseInt(val, 10)),\n  CORS_ORIGIN: z\n    .string()\n    .default('http://localhost:5173')\n    .transform((val) => (val.includes(',') ? val.split(',').map((s) => s.trim()) : val)),\n  \n  // Database (Prisma/SQL) - optional\n  DATABASE_URL: z.string().optional(),\n  \n  // Firebase/Firestore configuration\n  FIREBASE_PROJECT_ID: z.string().optional(),\n  FIREBASE_CLIENT_EMAIL: z.string().optional(),\n  FIREBASE_PRIVATE_KEY: z.string().optional(),\n  FIREBASE_SERVICE_ACCOUNT_PATH: z.string().optional(),\n  FIRESTORE_EMULATOR_HOST: z.string().optional(),\n  FIREBASE_AUTH_EMULATOR_HOST: z.string().optional(),\n  \n  // API configuration\n  API_PREFIX: z.string().default('/api'),\n\n  // Mock data configuration\n  USE_MOCK_DATA: z.string().default('true').transform((v) => v === 'true'),\n  MOCK_SEED: z\n    .string()\n    .optional()\n    .transform((v) => (v ? parseInt(v, 10) : undefined)),\n});\n\nconst parsed = envSchema.safeParse(process.env);\n\nif (!parsed.success) {\n  console.error('❌ Invalid environment variables:', parsed.error.flatten().fieldErrors);\n  throw new Error('Invalid environment variables');\n}\n\nexport const env = parsed.data;\n","import { env } from './env.js';\n\ntype LogLevel = 'debug' | 'info' | 'warn' | 'error';\n\nconst colors = {\n  debug: '\\x1b[36m', // Cyan\n  info: '\\x1b[32m', // Green\n  warn: '\\x1b[33m', // Yellow\n  error: '\\x1b[31m', // Red\n  reset: '\\x1b[0m',\n};\n\nconst shouldLog = (level: LogLevel): boolean => {\n  const levels: LogLevel[] = ['debug', 'info', 'warn', 'error'];\n  const minLevel = env.NODE_ENV === 'production' ? 'info' : 'debug';\n  return levels.indexOf(level) >= levels.indexOf(minLevel);\n};\n\nconst formatMessage = (level: LogLevel, message: string, meta?: unknown): string => {\n  const timestamp = new Date().toISOString();\n  const color = colors[level];\n  const prefix = `${color}[${level.toUpperCase()}]${colors.reset}`;\n  const metaStr = meta ? ` ${JSON.stringify(meta)}` : '';\n  return `${timestamp} ${prefix} ${message}${metaStr}`;\n};\n\nexport const logger = {\n  debug: (message: string, meta?: unknown) => {\n    if (shouldLog('debug')) {\n      console.log(formatMessage('debug', message, meta));\n    }\n  },\n  info: (message: string, meta?: unknown) => {\n    if (shouldLog('info')) {\n      console.log(formatMessage('info', message, meta));\n    }\n  },\n  warn: (message: string, meta?: unknown) => {\n    if (shouldLog('warn')) {\n      console.warn(formatMessage('warn', message, meta));\n    }\n  },\n  error: (message: string, meta?: unknown) => {\n    if (shouldLog('error')) {\n      console.error(formatMessage('error', message, meta));\n    }\n  },\n};\n","import { Request, Response, NextFunction } from 'express';\nimport { ZodError } from 'zod';\nimport { logger } from '../lib/logger.js';\n\n/**\n * Base application error class\n */\nexport class AppError extends Error {\n  constructor(\n    public statusCode: number,\n    public message: string,\n    public code?: string\n  ) {\n    super(message);\n    this.name = 'AppError';\n  }\n}\n\n/**\n * 404 Not Found error\n */\nexport class NotFoundError extends AppError {\n  constructor(message: string = 'Resource not found') {\n    super(404, message, 'NOT_FOUND');\n  }\n}\n\n/**\n * 400 Bad Request / Validation error\n */\nexport class ValidationError extends AppError {\n  constructor(message: string = 'Validation failed') {\n    super(400, message, 'VALIDATION_ERROR');\n  }\n}\n\n/**\n * 401 Unauthorized error\n */\nexport class UnauthorizedError extends AppError {\n  constructor(message: string = 'Unauthorized') {\n    super(401, message, 'UNAUTHORIZED');\n  }\n}\n\n/**\n * 403 Forbidden error\n */\nexport class ForbiddenError extends AppError {\n  constructor(message: string = 'Forbidden') {\n    super(403, message, 'FORBIDDEN');\n  }\n}\n\n/**\n * 409 Conflict error\n */\nexport class ConflictError extends AppError {\n  constructor(message: string = 'Resource conflict') {\n    super(409, message, 'CONFLICT');\n  }\n}\n\n/**\n * Global error handler middleware\n */\nexport const errorHandler = (\n  err: Error,\n  _req: Request,\n  res: Response,\n  _next: NextFunction\n): void => {\n  logger.error('Error:', { name: err.name, message: err.message, stack: err.stack });\n\n  // Zod validation errors\n  if (err instanceof ZodError) {\n    res.status(400).json({\n      success: false,\n      error: 'Validation failed',\n      code: 'VALIDATION_ERROR',\n      details: err.errors.map((e) => ({\n        path: e.path.join('.'),\n        message: e.message,\n      })),\n    });\n    return;\n  }\n\n  // Custom application errors\n  if (err instanceof AppError) {\n    res.status(err.statusCode).json({\n      success: false,\n      error: err.message,\n      code: err.code,\n    });\n    return;\n  }\n\n  // Firebase/Firestore errors\n  if (err.name === 'FirebaseError' || err.name === 'FirestoreError') {\n    res.status(500).json({\n      success: false,\n      error: 'Database error',\n      code: 'DATABASE_ERROR',\n    });\n    return;\n  }\n\n  // Unknown errors\n  res.status(500).json({\n    success: false,\n    error: 'Internal server error',\n    code: 'INTERNAL_ERROR',\n  });\n};\n\n/**\n * Async handler wrapper to catch errors in async route handlers\n */\nexport const asyncHandler =\n  (fn: (req: Request, res: Response, next: NextFunction) => Promise<unknown>) =>\n  (req: Request, res: Response, next: NextFunction) => {\n    Promise.resolve(fn(req, res, next)).catch(next);\n  };\n\n/**\n * 404 handler for unmatched routes\n */\nexport const notFoundHandler = (req: Request, res: Response): void => {\n  res.status(404).json({\n    success: false,\n    error: `Route ${req.method} ${req.path} not found`,\n    code: 'ROUTE_NOT_FOUND',\n  });\n};\n","import { Request, Response, NextFunction } from 'express';\nimport { AnyZodObject, ZodError } from 'zod';\n\n/**\n * Middleware to validate request body against a Zod schema\n */\nexport const validateBody =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.body = await schema.parseAsync(req.body);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Validation failed',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n\n/**\n * Middleware to validate request query parameters against a Zod schema\n */\nexport const validateQuery =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.query = await schema.parseAsync(req.query);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Invalid query parameters',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n\n/**\n * Middleware to validate request params against a Zod schema\n */\nexport const validateParams =\n  (schema: AnyZodObject) => async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      req.params = await schema.parseAsync(req.params);\n      next();\n    } catch (error) {\n      if (error instanceof ZodError) {\n        res.status(400).json({\n          success: false,\n          error: 'Invalid path parameters',\n          code: 'VALIDATION_ERROR',\n          details: error.errors.map((e) => ({\n            path: e.path.join('.'),\n            message: e.message,\n          })),\n        });\n        return;\n      }\n      next(error);\n    }\n  };\n","/**\n * Database Accessors & Initialization\n *\n * This module provides:\n * - `initializeFirebase()` — convenience function to init Firebase from env vars\n * - `getFirestore()`, `getAuth()` — accessors for Firebase services\n * - `db` — lazy Firestore proxy (no eager initialization)\n *\n * The consuming application MUST call `initializeFirebase()` or\n * `admin.initializeApp()` before using any Firebase-dependent features.\n */\n\nimport admin from 'firebase-admin';\n\n/**\n * Initialize Firebase Admin SDK from environment variables.\n *\n * Reads: FIREBASE_PROJECT_ID, FIREBASE_CLIENT_EMAIL, FIREBASE_PRIVATE_KEY,\n *        FIREBASE_SERVICE_ACCOUNT_PATH, FIRESTORE_EMULATOR_HOST\n *\n * Safe to call multiple times — returns existing app if already initialized.\n */\nexport function initializeFirebase(): admin.app.App {\n  // Already initialized — return existing app\n  if (admin.apps.length > 0) {\n    return admin.app();\n  }\n\n  const projectId = process.env.FIREBASE_PROJECT_ID;\n  const emulatorHost = process.env.FIRESTORE_EMULATOR_HOST;\n\n  // Emulator mode — no credentials needed\n  if (emulatorHost) {\n    const app = admin.initializeApp({\n      projectId: projectId || 'demo-project',\n    });\n    console.log(`Firebase Admin initialized for emulator: ${emulatorHost}`);\n    return app;\n  }\n\n  // Service account file\n  const serviceAccountPath = process.env.FIREBASE_SERVICE_ACCOUNT_PATH;\n  if (serviceAccountPath) {\n    // Dynamic require for JSON service account file at runtime\n    const serviceAccount = require(serviceAccountPath) as Record<string, unknown>;\n    return admin.initializeApp({\n      credential: admin.credential.cert(serviceAccount),\n      projectId,\n    });\n  }\n\n  // Inline credentials\n  const clientEmail = process.env.FIREBASE_CLIENT_EMAIL;\n  const privateKey = process.env.FIREBASE_PRIVATE_KEY;\n  if (projectId && clientEmail && privateKey) {\n    return admin.initializeApp({\n      credential: admin.credential.cert({\n        projectId,\n        clientEmail,\n        privateKey: privateKey.replace(/\\\\n/g, '\\n'),\n      }),\n      projectId,\n    });\n  }\n\n  // Application default credentials (Cloud Run, etc.)\n  if (projectId) {\n    return admin.initializeApp({\n      credential: admin.credential.applicationDefault(),\n      projectId,\n    });\n  }\n\n  throw new Error(\n    '@almadar/server: Cannot initialize Firebase — no credentials found. ' +\n    'Set FIREBASE_PROJECT_ID + FIREBASE_CLIENT_EMAIL + FIREBASE_PRIVATE_KEY, ' +\n    'or FIREBASE_SERVICE_ACCOUNT_PATH, or FIRESTORE_EMULATOR_HOST.'\n  );\n}\n\n/**\n * Get the initialized Firebase app.\n * Throws if Firebase Admin SDK has not been initialized.\n */\nfunction getApp(): admin.app.App {\n  if (admin.apps.length === 0) {\n    throw new Error(\n      '@almadar/server: Firebase Admin SDK is not initialized. ' +\n      'Call initializeFirebase() or admin.initializeApp() before using @almadar/server.'\n    );\n  }\n  return admin.app();\n}\n\n/**\n * Get Firestore instance from the pre-initialized Firebase app.\n */\nexport function getFirestore(): admin.firestore.Firestore {\n  return getApp().firestore();\n}\n\n/**\n * Get Firebase Auth instance from the pre-initialized Firebase app.\n */\nexport function getAuth(): admin.auth.Auth {\n  return getApp().auth();\n}\n\n// Re-export admin for convenience\nexport { admin };\n\n/**\n * Lazy Firestore proxy — resolves on first property access, not at import time.\n * This prevents the \"Firebase not initialized\" error during module loading.\n */\nexport const db = new Proxy({} as admin.firestore.Firestore, {\n  get(_target, prop, receiver) {\n    const firestore = getFirestore();\n    const value = Reflect.get(firestore, prop, receiver);\n    return typeof value === 'function' ? value.bind(firestore) : value;\n  },\n});\n","/**\n * Almadar Structured Logger (Server copy)\n *\n * Namespace-based logging with level gating.\n * Duplicated from @almadar/ui/lib/logger because @almadar/server\n * does not depend on @almadar/ui.\n *\n * @packageDocumentation\n */\n\ntype LogLevel = 'DEBUG' | 'INFO' | 'WARN' | 'ERROR';\n\nconst LEVEL_PRIORITY: Record<LogLevel, number> = { DEBUG: 0, INFO: 1, WARN: 2, ERROR: 3 };\n\nconst ENV: Record<string, string | undefined> = typeof process !== 'undefined' && process.env ? process.env : {};\n\nconst NODE_ENV = ENV.NODE_ENV ?? 'development';\nconst CONFIGURED_LEVEL = (\n  ENV.LOG_LEVEL ?? (NODE_ENV === 'production' ? 'info' : 'debug')\n).toUpperCase() as LogLevel;\nconst MIN_PRIORITY = LEVEL_PRIORITY[CONFIGURED_LEVEL] ?? 0;\n\nconst DEBUG_FILTER = (ENV.ALMADAR_DEBUG ?? '')\n  .split(',').map(s => s.trim()).filter(Boolean);\n\nfunction matchesNamespace(namespace: string): boolean {\n  if (DEBUG_FILTER.length === 0) return true;\n  return DEBUG_FILTER.some(pattern => {\n    if (pattern === '*' || pattern === 'almadar:*') return true;\n    if (pattern.endsWith(':*')) return namespace.startsWith(pattern.slice(0, -1));\n    return namespace === pattern;\n  });\n}\n\nexport interface Logger {\n  debug: (msg: string, data?: Record<string, unknown>) => void;\n  info: (msg: string, data?: Record<string, unknown>) => void;\n  warn: (msg: string, data?: Record<string, unknown>) => void;\n  error: (msg: string, data?: Record<string, unknown>) => void;\n}\n\nexport function createLogger(namespace: string): Logger {\n  const nsAllowed = matchesNamespace(namespace);\n\n  const log = (level: LogLevel, message: string, data?: Record<string, unknown>) => {\n    if (LEVEL_PRIORITY[level] < MIN_PRIORITY) return;\n    if (level === 'DEBUG' && !nsAllowed) return;\n\n    const prefix = `[${namespace}]`;\n\n    switch (level) {\n      case 'DEBUG': console.debug(prefix, message, data ?? ''); break;\n      case 'INFO':  console.info(prefix, message, data ?? ''); break;\n      case 'WARN':  console.warn(prefix, message, data ?? ''); break;\n      case 'ERROR': console.error(prefix, message, data ?? ''); break;\n    }\n  };\n\n  return {\n    debug: (msg: string, data?: Record<string, unknown>) => log('DEBUG', msg, data),\n    info:  (msg: string, data?: Record<string, unknown>) => log('INFO', msg, data),\n    warn:  (msg: string, data?: Record<string, unknown>) => log('WARN', msg, data),\n    error: (msg: string, data?: Record<string, unknown>) => log('ERROR', msg, data),\n  };\n}\n","import { NextFunction, Request, Response } from 'express';\nimport type { DecodedIdToken } from 'firebase-admin/auth';\nimport { getAuth } from '../lib/db.js';\nimport { env } from '../lib/env.js';\nimport { createLogger } from '../almadarLogger.js';\n\nconst authLog = createLogger('almadar:server:auth');\n\nconst BEARER_PREFIX = 'Bearer ';\n\n/** Fake dev user injected when NODE_ENV=development and no auth header is present */\nconst DEV_USER: DecodedIdToken = {\n  uid: 'dev-user-001',\n  email: 'dev@localhost',\n  email_verified: true,\n  aud: 'dev-project',\n  auth_time: Math.floor(Date.now() / 1000),\n  exp: Math.floor(Date.now() / 1000) + 3600,\n  iat: Math.floor(Date.now() / 1000),\n  iss: 'https://securetoken.google.com/dev-project',\n  sub: 'dev-user-001',\n  firebase: {\n    identities: {},\n    sign_in_provider: 'custom',\n  },\n};\n\nexport async function authenticateFirebase(req: Request, res: Response, next: NextFunction) {\n  const authorization = req.headers.authorization;\n\n  // Dev bypass: in development mode, skip auth if no token is provided\n  if (env.NODE_ENV === 'development' && (!authorization || !authorization.startsWith(BEARER_PREFIX))) {\n    authLog.debug('auth:devBypass', { uid: DEV_USER.uid });\n    req.firebaseUser = DEV_USER;\n    res.locals.firebaseUser = DEV_USER;\n    return next();\n  }\n\n  try {\n    if (!authorization || !authorization.startsWith(BEARER_PREFIX)) {\n      return res.status(401).json({ error: 'Authorization header missing or malformed' });\n    }\n\n    const token = authorization.slice(BEARER_PREFIX.length);\n    const decodedToken = await getAuth().verifyIdToken(token);\n\n    authLog.info('auth:verified', { uid: decodedToken.uid, email: decodedToken.email });\n    req.firebaseUser = decodedToken;\n    res.locals.firebaseUser = decodedToken;\n\n    return next();\n  } catch (error) {\n    authLog.warn('auth:failed', { error: error instanceof Error ? error.message : String(error) });\n    console.error('Firebase authentication failed:', error);\n    return res.status(401).json({ error: 'Unauthorized' });\n  }\n}\n\nexport default authenticateFirebase;\n\n\n"]}

package/dist/services/DataService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DataService.d.ts","sourceRoot":"","sources":["../../src/services/DataService.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAIhE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAMlC,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,uCAAuC;IACvC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClG,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,mEAAmE;IACnE,QAAQ,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;CACtE;AAyYD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAa/D"}
+{"version":3,"file":"DataService.d.ts","sourceRoot":"","sources":["../../src/services/DataService.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAKhE,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAG5E,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAMlC,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,uCAAuC;IACvC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClG,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,mEAAmE;IACnE,QAAQ,CAAC,CAAC,SAAS,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;CACtE;AA0ZD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAa/D"}

package/dist/services/index.js

@@ -406,6 +406,50 @@ var db = new Proxy({}, {
   }
 });
 
+// src/almadarLogger.ts
+var LEVEL_PRIORITY = { DEBUG: 0, INFO: 1, WARN: 2, ERROR: 3 };
+var ENV = typeof process !== "undefined" && process.env ? process.env : {};
+var NODE_ENV = ENV.NODE_ENV ?? "development";
+var CONFIGURED_LEVEL = (ENV.LOG_LEVEL ?? (NODE_ENV === "production" ? "info" : "debug")).toUpperCase();
+var MIN_PRIORITY = LEVEL_PRIORITY[CONFIGURED_LEVEL] ?? 0;
+var DEBUG_FILTER = (ENV.ALMADAR_DEBUG ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+function matchesNamespace(namespace) {
+  if (DEBUG_FILTER.length === 0) return true;
+  return DEBUG_FILTER.some((pattern) => {
+    if (pattern === "*" || pattern === "almadar:*") return true;
+    if (pattern.endsWith(":*")) return namespace.startsWith(pattern.slice(0, -1));
+    return namespace === pattern;
+  });
+}
+function createLogger(namespace) {
+  const nsAllowed = matchesNamespace(namespace);
+  const log = (level, message, data) => {
+    if (LEVEL_PRIORITY[level] < MIN_PRIORITY) return;
+    if (level === "DEBUG" && !nsAllowed) return;
+    const prefix = `[${namespace}]`;
+    switch (level) {
+      case "DEBUG":
+        console.debug(prefix, message, data ?? "");
+        break;
+      case "INFO":
+        console.info(prefix, message, data ?? "");
+        break;
+      case "WARN":
+        console.warn(prefix, message, data ?? "");
+        break;
+      case "ERROR":
+        console.error(prefix, message, data ?? "");
+        break;
+    }
+  };
+  return {
+    debug: (msg, data) => log("DEBUG", msg, data),
+    info: (msg, data) => log("INFO", msg, data),
+    warn: (msg, data) => log("WARN", msg, data),
+    error: (msg, data) => log("ERROR", msg, data)
+  };
+}
+
 // src/utils/queryFilters.ts
 function applyFiltersToQuery(collection, filters) {
   let query = collection;
@@ -420,6 +464,7 @@ function applyFiltersToQuery(collection, filters) {
 }
 
 // src/services/DataService.ts
+var dataLog = createLogger("almadar:server:data");
 function applyFilterCondition(value, operator, filterValue) {
   if (value === null || value === void 0) {
     return operator === "!=" ? filterValue !== null : false;
@@ -451,7 +496,9 @@ function applyFilterCondition(value, operator, filterValue) {
 }
 var MockDataServiceAdapter = class {
   async list(collection) {
-    return getMockDataService().list(collection);
+    const result = getMockDataService().list(collection);
+    dataLog.debug("list", { entity: collection, count: result.length });
+    return result;
   }
   async listPaginated(collection, options = {}) {
     const {
@@ -503,16 +550,24 @@ var MockDataServiceAdapter = class {
     return { data, total, page, pageSize, totalPages };
   }
   async getById(collection, id) {
-    return getMockDataService().getById(collection, id);
+    const result = getMockDataService().getById(collection, id);
+    dataLog.debug("getById", { entity: collection, id, found: result !== null });
+    return result;
   }
   async create(collection, data) {
-    return getMockDataService().create(collection, data);
+    const result = getMockDataService().create(collection, data);
+    dataLog.info("create", { entity: collection, id: result.id });
+    return result;
   }
   async update(collection, id, data) {
-    return getMockDataService().update(collection, id, data);
+    const result = getMockDataService().update(collection, id, data);
+    dataLog.info("update", { entity: collection, id, found: result !== null });
+    return result;
   }
   async delete(collection, id) {
-    return getMockDataService().delete(collection, id);
+    const result = getMockDataService().delete(collection, id);
+    dataLog.info("delete", { entity: collection, id, success: result });
+    return result;
   }
   async query(collection, filters) {
     let items = getMockDataService().list(collection);
@@ -550,10 +605,12 @@ var MockDataServiceAdapter = class {
 var FirebaseDataService = class {
   async list(collection) {
     const snapshot = await db.collection(collection).get();
-    return snapshot.docs.map((doc) => ({
+    const items = snapshot.docs.map((doc) => ({
       id: doc.id,
       ...doc.data()
     }));
+    dataLog.debug("list", { entity: collection, count: items.length });
+    return items;
   }
   async listPaginated(collection, options = {}) {
     const {
@@ -608,6 +665,7 @@ var FirebaseDataService = class {
   }
   async getById(collection, id) {
     const doc = await db.collection(collection).doc(id).get();
+    dataLog.debug("getById", { entity: collection, id, found: doc.exists });
     if (!doc.exists) {
       return null;
     }
@@ -620,6 +678,7 @@ var FirebaseDataService = class {
       createdAt: now,
       updatedAt: now
     });
+    dataLog.info("create", { entity: collection, id: docRef.id });
     return {
       ...data,
       id: docRef.id,
@@ -638,6 +697,7 @@ var FirebaseDataService = class {
       ...data,
       updatedAt: now
     });
+    dataLog.info("update", { entity: collection, id });
     return {
       ...doc.data(),
       ...data,
@@ -649,9 +709,11 @@ var FirebaseDataService = class {
     const docRef = db.collection(collection).doc(id);
     const doc = await docRef.get();
     if (!doc.exists) {
+      dataLog.debug("delete", { entity: collection, id, found: false });
       return false;
     }
     await docRef.delete();
+    dataLog.info("delete", { entity: collection, id, success: true });
     return true;
   }
   async query(collection, filters) {