@catbee/utils 0.0.4 → 0.0.6

package/build/src/servers/server.js

@@ -0,0 +1,958 @@
+"use strict";
+/*
+ * The MIT License
+ *
+ * Copyright (c) 2025 Catbee Technologies
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all
+ * copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressServer = void 0;
+const express_1 = __importDefault(require("express"));
+const https_1 = __importDefault(require("https"));
+const cors_1 = __importDefault(require("cors"));
+const helmet_1 = __importDefault(require("helmet"));
+const compression_1 = __importDefault(require("compression"));
+const cookie_parser_1 = __importDefault(require("cookie-parser"));
+const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+const http_status_codes_1 = require("../utils/http-status-codes");
+const response_utils_1 = require("../utils/response.utils");
+const middleware_utils_1 = require("../utils/middleware.utils");
+const env_utils_1 = require("../utils/env.utils");
+const logger_utils_1 = require("../utils/logger.utils");
+const exception_utils_1 = require("../utils/exception.utils");
+const prom_client_1 = __importStar(require("prom-client"));
+const exception_utils_2 = require("../utils/exception.utils");
+const fs_1 = __importDefault(require("fs"));
+const express_api_reference_1 = require("@scalar/express-api-reference");
+const config_1 = require("../config");
+const obj_utils_1 = require("../utils/obj.utils");
+const fs_utils_1 = require("../utils/fs.utils");
+const server_builder_1 = require("./server.builder");
+const validate_utils_1 = require("../utils/validate.utils");
+/**
+ * Production-ready Express server with enterprise features.
+ *
+ * Core Features:
+ * - Security: Helmet, CORS, rate limiting, timeouts
+ * - Monitoring: Request logs, metrics, health checks
+ * - Performance: Compression, caching, static files
+ * - Reliability: Graceful shutdown, error handling
+ * - Developer UX: OpenAPI docs, debugging tools
+ * - Extensibility: Hooks, middleware, custom routes
+ *
+ * Designed for microservices and production workloads.
+ * Includes K8s readiness probes and zero-downtime support.
+ */
+class ExpressServer {
+    /**
+     * Initializes server with intelligent defaults and security best practices.
+     * All settings can be customized via config and hooks.
+     *
+     * Default Security:
+     * - Secure headers (Helmet)
+     * - Rate limiting
+     * - Request timeouts
+     * - Body size limits
+     * - CORS protection
+     *
+     * Default Monitoring:
+     * - Request/Response logging
+     * - Prometheus metrics
+     * - Health checks
+     * - Request tracing
+     */
+    constructor(config, hooks = {}) {
+        var _a, _b, _c;
+        /** Prometheus client registry for metrics collection */
+        this.register = new prom_client_1.default.Registry();
+        /** HTTP server instance (null when not running) */
+        this.server = null;
+        /** Set of active WebSocket connections */
+        this.connections = new Set();
+        /** Flag indicating if the server is shutting down */
+        this.isShuttingDown = false;
+        /**
+         * Collection of registered health check functions.
+         * These are executed when the health check endpoint is accessed.
+         */
+        this.healthChecks = [];
+        if (ExpressServer.isBuiltServerConfig(config)) {
+            this.config = config;
+        }
+        else {
+            // Deep merge config with user overrides
+            this.config = (0, obj_utils_1.deepObjMerge)({}, config_1.defaultServerConfig, config);
+        }
+        if (!(0, validate_utils_1.isPort)(this.config.port)) {
+            throw new Error(`Port must be a valid number between 1 and 65535, got: ${this.config.port}`);
+        }
+        // Sanitize app name for metrics (replace invalid characters with underscore)
+        const safeAppName = (this.config.appName || 'express_app').toLowerCase().replace(/[^a-z0-9_]/g, '_');
+        if ((_a = this.config.metrics) === null || _a === void 0 ? void 0 : _a.enable) {
+            // Initialize Prometheus metrics with sanitized names
+            this.requestCounter = new prom_client_1.Counter({
+                name: `${safeAppName}_http_requests_total`,
+                help: 'Total HTTP requests',
+                labelNames: ['method', 'route', 'status'],
+                registers: [this.register]
+            });
+            this.routeTimings = new prom_client_1.Histogram({
+                name: `${safeAppName}_http_request_duration_seconds`,
+                help: 'Duration of HTTP requests by route',
+                labelNames: ['method', 'route', 'status'],
+                buckets: [0.1, 0.3, 0.5, 0.7, 1, 3, 5, 7, 10],
+                registers: [this.register]
+            });
+            this.requestSizes = new prom_client_1.Histogram({
+                name: `${safeAppName}_http_request_size_bytes`,
+                help: 'Size of HTTP request bodies',
+                labelNames: ['method', 'route'],
+                buckets: [100, 1000, 10000, 100000, 1000000],
+                registers: [this.register]
+            });
+            this.clientIPs = new prom_client_1.Counter({
+                name: `${safeAppName}_http_client_ip_total`,
+                help: 'Client IP request counter',
+                labelNames: ['ip', 'method'],
+                registers: [this.register]
+            });
+            // Default system metrics (CPU, memory, event loop lag, etc.)
+            prom_client_1.default.collectDefaultMetrics({
+                register: this.register,
+                prefix: `${safeAppName}_`
+            });
+        }
+        // Health checks
+        if ((_b = config.healthCheck) === null || _b === void 0 ? void 0 : _b.checks) {
+            this.healthChecks.push(...config.healthCheck.checks);
+        }
+        // Logger
+        if (this.config.logger) {
+            const { name, level, prettyPrint: pretty, singleLine } = this.config.logger;
+            (0, config_1.setConfig)({
+                logger: {
+                    name: name !== null && name !== void 0 ? name : 'express_app',
+                    level: level !== null && level !== void 0 ? level : 'info',
+                    pretty: pretty !== null && pretty !== void 0 ? pretty : env_utils_1.Env.isDev(),
+                    singleLine: singleLine !== null && singleLine !== void 0 ? singleLine : false
+                }
+            });
+        }
+        // Set global prefix (normalize to empty string or "/prefix" without trailing slash)
+        this.globalPrefix = this.normalizePath((_c = this.config.globalPrefix) !== null && _c !== void 0 ? _c : '', false);
+        this.hooks = hooks;
+        this.app = (0, express_1.default)();
+        this.rootRouter = express_1.default.Router();
+        // Store initialization promise to prevent race conditions with start()
+        this.initPromise = this.initialize();
+    }
+    /**
+     * Execute a lifecycle hook safely with comprehensive error handling.
+     * Prevents hook failures from crashing the server while logging issues.
+     *
+     * @param hook Name of the lifecycle hook to execute
+     * @param args Arguments to pass to the hook function
+     */
+    async runHook(hook, ...args) {
+        try {
+            const fn = this.hooks[hook];
+            if (fn)
+                await fn.apply(null, args);
+        }
+        catch (err) {
+            (0, logger_utils_1.getLogger)().error({ err, hook }, `Error executing ${hook} hook:`);
+        }
+    }
+    /**
+     * Initialize the Express server with middleware and routes.
+     */
+    async initialize() {
+        await this.runHook('beforeInit', this);
+        // Set up middleware stack (order is critical)
+        await this.setupMiddleware();
+        // Set up default routes and error handling
+        await this.setupRoutes();
+        await this.runHook('afterInit', this);
+    }
+    /**
+     * Configure and register all middlewares in the optimal order.
+     *
+     * Middleware Order (CRITICAL - don't change without understanding implications):
+     * 1.  Basic server configuration (trust proxy, x-powered-by)
+     * 2.  Request ID generation (for tracing)
+     * 3.  Request context setup (for logging correlation)
+     * 4.  Timeout protection (prevents hanging requests)
+     * 5.  Response time tracking (for performance monitoring)
+     * 6.  Request logging (after ID/context setup)
+     * 7.  Custom request hooks
+     * 8.  Security middleware (rate limiting, CORS, Helmet)
+     * 9.  Response compression
+     * 10. Static file serving
+     * 11. Request parsing (body parsing, cookies)
+     * 12. API documentation (OpenAPI)
+     * 13. Global headers
+     * 14. Custom response hooks
+     */
+    async setupMiddleware() {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r;
+        if (this.config.https) {
+            await this.validateHttpsFiles();
+        }
+        // Basic middleware should be first
+        this.app.disable('x-powered-by');
+        if (this.config.trustProxy) {
+            this.app.set('trust proxy', true);
+        }
+        // Request ID generation - must be first for proper tracing
+        this.app.use((0, middleware_utils_1.requestId)({
+            headerName: (_a = this.config.requestId) === null || _a === void 0 ? void 0 : _a.headerName,
+            exposeHeader: (_b = this.config.requestId) === null || _b === void 0 ? void 0 : _b.exposeHeader,
+            generator: (_c = this.config.requestId) === null || _c === void 0 ? void 0 : _c.generator
+        }));
+        // Request context setup for logging correlation
+        this.app.use((0, middleware_utils_1.setupRequestContext)({
+            headerName: (_d = this.config.requestId) === null || _d === void 0 ? void 0 : _d.headerName,
+            autoLog: false
+        }));
+        // Early shutdown-awareness middleware (lets load balancers drain connections gracefully)
+        this.app.use((_req, res, next) => {
+            if (this.isShuttingDown) {
+                res.setHeader('Connection', 'close');
+                return res
+                    .status(http_status_codes_1.HttpStatusCodes.SERVICE_UNAVAILABLE)
+                    .json(new exception_utils_1.ServiceUnavailableException('Server is shutting down'));
+            }
+            next();
+            return;
+        });
+        // Security middleware should come early
+        if (this.config.helmet) {
+            if (typeof this.config.helmet === 'object') {
+                this.app.use((0, helmet_1.default)(this.config.helmet));
+            }
+            else {
+                this.app.use((0, helmet_1.default)());
+            }
+        }
+        // CORS middleware should be early
+        if (this.config.cors) {
+            this.app.use((0, cors_1.default)(this.config.cors === true ? {} : this.config.cors));
+        }
+        // Global headers
+        this.app.use((_req, res, next) => {
+            var _a, _b, _c, _d;
+            if (this.config.globalHeaders) {
+                for (const key in this.config.globalHeaders) {
+                    const value = this.config.globalHeaders[key];
+                    res.setHeader(key, typeof value === 'function' ? value() : value);
+                }
+            }
+            if (this.config.isMicroservice) {
+                res.setHeader('X-Microservice', this.config.appName || 'express_app');
+            }
+            if ((_a = this.config.serviceVersion) === null || _a === void 0 ? void 0 : _a.enable) {
+                const version = typeof ((_b = this.config.serviceVersion) === null || _b === void 0 ? void 0 : _b.version) === 'function'
+                    ? this.config.serviceVersion.version()
+                    : (_c = this.config.serviceVersion) === null || _c === void 0 ? void 0 : _c.version;
+                res.setHeader(((_d = this.config.serviceVersion) === null || _d === void 0 ? void 0 : _d.headerName) || 'x-service-version', version || '0.0.0');
+            }
+            next();
+        });
+        // Global request timeout protection
+        if (this.config.requestTimeout) {
+            this.app.use((0, middleware_utils_1.timeout)(this.config.requestTimeout));
+        }
+        // Response time tracking for performance monitoring
+        if ((_e = this.config.responseTime) === null || _e === void 0 ? void 0 : _e.enable) {
+            this.app.use((0, middleware_utils_1.responseTime)({
+                addHeader: this.config.responseTime.addHeader,
+                logOnComplete: this.config.responseTime.logOnComplete
+            }));
+        }
+        // Rate limiting should be early to prevent unnecessary processing
+        if ((_f = this.config.rateLimit) === null || _f === void 0 ? void 0 : _f.enable) {
+            this.app.use((0, express_rate_limit_1.default)({
+                windowMs: (_g = this.config.rateLimit.windowMs) !== null && _g !== void 0 ? _g : 15 * 60 * 1000,
+                max: (_h = this.config.rateLimit.max) !== null && _h !== void 0 ? _h : 100,
+                handler: (req, res) => {
+                    var _a;
+                    const status = http_status_codes_1.HttpStatusCodes.TOO_MANY_REQUESTS;
+                    const response = (0, response_utils_1.createFinalErrorResponse)(req, status, ((_a = this.config.rateLimit) === null || _a === void 0 ? void 0 : _a.message) || 'Too many requests');
+                    res.status(status).json(response);
+                },
+                standardHeaders: (_j = this.config.rateLimit.standardHeaders) !== null && _j !== void 0 ? _j : true,
+                legacyHeaders: (_k = this.config.rateLimit.legacyHeaders) !== null && _k !== void 0 ? _k : false
+            }));
+        }
+        // Request logging with filtering
+        if ((_l = this.config.requestLogging) === null || _l === void 0 ? void 0 : _l.enable) {
+            this.app.use((req, res, next) => {
+                var _a, _b, _c, _d, _e, _f;
+                if (typeof ((_a = this.config.requestLogging) === null || _a === void 0 ? void 0 : _a.ignorePaths) === 'function') {
+                    const skip = (_c = (_b = this.config.requestLogging) === null || _b === void 0 ? void 0 : _b.ignorePaths) === null || _c === void 0 ? void 0 : _c.call(_b, req, res);
+                    if (skip)
+                        return next();
+                }
+                else if (Array.isArray((_d = this.config.requestLogging) === null || _d === void 0 ? void 0 : _d.ignorePaths)) {
+                    const skip = (_f = (_e = this.config.requestLogging) === null || _e === void 0 ? void 0 : _e.ignorePaths) === null || _f === void 0 ? void 0 : _f.includes(req.path);
+                    if (skip)
+                        return next();
+                }
+                const logger = (0, logger_utils_1.getLogger)();
+                const incomingRequestMetaData = {
+                    requestId: req.id,
+                    method: req.method,
+                    url: req.originalUrl || req.url,
+                    ip: req.ip
+                };
+                logger.info(incomingRequestMetaData, 'Incoming Request');
+                next();
+            });
+        }
+        // Custom request preprocessing hook
+        if (this.hooks.onRequest) {
+            this.app.use(this.hooks.onRequest);
+        }
+        // Response compression for better performance
+        if (this.config.compression) {
+            if (typeof this.config.compression === 'object') {
+                this.app.use((0, compression_1.default)(this.config.compression));
+            }
+            else {
+                this.app.use((0, compression_1.default)());
+            }
+        }
+        // Static file serving (do NOT normalize filesystem path; only normalize route)
+        if (this.config.staticFolders) {
+            this.config.staticFolders.forEach(folder => {
+                var _a;
+                this.app.use(this.normalizePath((_a = folder.path) !== null && _a !== void 0 ? _a : '/'), express_1.default.static(folder.directory, {
+                    maxAge: folder.maxAge || 0,
+                    etag: folder.etag !== false,
+                    immutable: folder.immutable === true,
+                    lastModified: folder.lastModified !== false,
+                    cacheControl: folder.cacheControl !== false
+                }));
+                (0, logger_utils_1.getLogger)().info(`Serving static folder: ${folder.directory} at path ${folder.path || '/'}`);
+            });
+        }
+        // Request body parsing with size limits
+        if (this.config.bodyParser) {
+            if (this.config.bodyParser.json) {
+                this.app.use(express_1.default.json(this.config.bodyParser.json));
+            }
+            if (this.config.bodyParser.urlencoded) {
+                this.app.use(express_1.default.urlencoded(this.config.bodyParser.urlencoded));
+            }
+        }
+        // Cookie parser middleware
+        if (this.config.cookieParser) {
+            if (typeof this.config.cookieParser === 'object') {
+                this.app.use((0, cookie_parser_1.default)(undefined, this.config.cookieParser));
+            }
+            else {
+                this.app.use((0, cookie_parser_1.default)());
+            }
+        }
+        // OpenAPI docs via @scalar/express-api-reference
+        if ((_m = this.config.openApi) === null || _m === void 0 ? void 0 : _m.enable) {
+            try {
+                const openApiMountPath = this.normalizePath((_o = this.config.openApi.mountPath) !== null && _o !== void 0 ? _o : '/docs', this.config.openApi.withGlobalPrefix);
+                const openApiFilePath = this.config.openApi.filePath;
+                if (!openApiFilePath) {
+                    throw new Error('OpenAPI file path is required');
+                }
+                const isOpenApiFilePathExists = await (0, fs_utils_1.fileExists)(openApiFilePath);
+                if (!isOpenApiFilePathExists) {
+                    throw new Error(`OpenAPI spec file not found at ${openApiFilePath}`);
+                }
+                if ((_p = this.config.openApi) === null || _p === void 0 ? void 0 : _p.verbose) {
+                    (0, logger_utils_1.getLogger)().info(`Mounting OpenAPI docs at ${openApiMountPath}`);
+                    (0, logger_utils_1.getLogger)().info(`Using OpenAPI spec file at ${openApiFilePath}`);
+                }
+                this.app.use(openApiMountPath, (0, express_api_reference_1.apiReference)({
+                    spec: {
+                        content: await fs_1.default.promises.readFile(openApiFilePath, 'utf8')
+                    }
+                }));
+                if ((_q = this.config.openApi) === null || _q === void 0 ? void 0 : _q.verbose) {
+                    (0, logger_utils_1.getLogger)().info(`Mounted OpenAPI docs at ${openApiMountPath}`);
+                }
+            }
+            catch (err) {
+                (0, logger_utils_1.getLogger)().error({ err }, 'Failed to mount OpenAPI docs');
+            }
+        }
+        // Custom response preprocessing hook (apply global prefix if set)
+        if (this.hooks.onResponse) {
+            this.app.use(this.globalPrefix, this.hooks.onResponse);
+        }
+        if ((_r = this.config.metrics) === null || _r === void 0 ? void 0 : _r.enable) {
+            // Add metrics tracking middleware
+            this.app.use((req, res, next) => {
+                var _a, _b;
+                const start = process.hrtime();
+                // Track client IPs
+                (_a = this.clientIPs) === null || _a === void 0 ? void 0 : _a.inc({ ip: req.ip, method: req.method });
+                // Track request sizes (parse safely)
+                const cl = req.headers['content-length'];
+                if (cl) {
+                    const size = Number(cl);
+                    if (!Number.isNaN(size) && size >= 0) {
+                        const route = this.normalizeRouteForMetrics(req, res);
+                        (_b = this.requestSizes) === null || _b === void 0 ? void 0 : _b.observe({ method: req.method, route }, size);
+                    }
+                }
+                res.once('finish', () => {
+                    var _a, _b;
+                    const [seconds, nanoseconds] = process.hrtime(start);
+                    const finalRoute = this.normalizeRouteForMetrics(req, res);
+                    (_a = this.requestCounter) === null || _a === void 0 ? void 0 : _a.inc({
+                        method: req.method,
+                        route: finalRoute,
+                        status: res.statusCode.toString()
+                    });
+                    (_b = this.routeTimings) === null || _b === void 0 ? void 0 : _b.observe({
+                        method: req.method,
+                        route: finalRoute,
+                        status: res.statusCode.toString()
+                    }, seconds + nanoseconds / 1e9);
+                });
+                next();
+            });
+        }
+    }
+    /**
+     * Configure server routes and error handling.
+     * Sets up in following order:
+     *
+     * 1. Built-in routes (health, metrics)
+     * 2. Application routes
+     * 3. 404 handler
+     * 4. Error handler
+     */
+    async setupRoutes() {
+        var _a, _b, _c, _d, _e;
+        // Health check endpoint
+        const healthCheckPath = this.normalizePath(((_a = this.config.healthCheck) === null || _a === void 0 ? void 0 : _a.path) || '/healthz', (_b = this.config.healthCheck) === null || _b === void 0 ? void 0 : _b.withGlobalPrefix);
+        this.app.get(healthCheckPath, async (_req, res) => {
+            var _a;
+            try {
+                if (!this.healthChecks.length) {
+                    return res.status(http_status_codes_1.HttpStatusCodes.OK).json(new response_utils_1.SuccessResponse('OK'));
+                }
+                const checkResults = await Promise.allSettled(this.healthChecks.map(async ({ name, check }) => {
+                    try {
+                        const status = await Promise.resolve(check());
+                        return { name, status, error: null };
+                    }
+                    catch (error) {
+                        return { name, status: false, error: error.message };
+                    }
+                }));
+                const results = checkResults.map(result => {
+                    if (result.status === 'fulfilled')
+                        return result.value;
+                    return { name: 'unknown', status: false, error: result.reason };
+                });
+                const allOk = results.every(r => r.status);
+                const status = allOk ? http_status_codes_1.HttpStatusCodes.OK : http_status_codes_1.HttpStatusCodes.SERVICE_UNAVAILABLE;
+                const response = new response_utils_1.SuccessResponse(allOk ? 'OK' : 'Service unavailable');
+                if (!allOk)
+                    response.error = true;
+                if ((_a = this.config.healthCheck) === null || _a === void 0 ? void 0 : _a.detailed)
+                    response.data = { checks: results };
+                return res.status(status).json(response);
+            }
+            catch (_b) {
+                return res
+                    .status(http_status_codes_1.HttpStatusCodes.INTERNAL_SERVER_ERROR)
+                    .json(new exception_utils_1.InternalServerErrorException('Health check failed'));
+            }
+        });
+        // Metrics endpoint
+        if ((_c = this.config.metrics) === null || _c === void 0 ? void 0 : _c.enable) {
+            const metricsPath = this.normalizePath((_d = this.config.metrics.path) !== null && _d !== void 0 ? _d : '/metrics', (_e = this.config.metrics) === null || _e === void 0 ? void 0 : _e.withGlobalPrefix);
+            this.app.get(metricsPath, async (_req, res) => {
+                res.set('Content-Type', this.register.contentType);
+                res.end(await this.register.metrics());
+            });
+        }
+        // Application routes
+        const routerToUse = this.externalRouter || this.rootRouter;
+        this.app.use(this.globalPrefix, routerToUse);
+        // 404 handler (must be after all other routes)
+        this.app.use((req, res) => {
+            const status = http_status_codes_1.HttpStatusCodes.NOT_FOUND;
+            const response = (0, response_utils_1.createFinalErrorResponse)(req, status, `Route ${req.method.toUpperCase()} ${req.path} not found`);
+            res.status(status).json(response);
+        });
+        // Global error handler (must be the last middleware)
+        this.app.use((err, req, res, next) => {
+            var _a;
+            // Check if this is a 404 error that should be handled with special logging rules
+            const isNotFoundError = err instanceof exception_utils_2.NotFoundException;
+            const shouldSkipLogging = !this.hooks.onError &&
+                isNotFoundError &&
+                ((_a = this.config.requestLogging) === null || _a === void 0 ? void 0 : _a.enable) &&
+                this.config.requestLogging.skipNotFoundRoutes === true;
+            if (this.hooks.onError) {
+                // Use custom error handler if provided
+                this.hooks.onError(err, req, res, next);
+            }
+            else {
+                // Default error handler with logging
+                const errorHandlerMiddleware = (0, middleware_utils_1.errorHandler)({
+                    logErrors: !shouldSkipLogging,
+                    includeDetails: env_utils_1.Env.isDev() // Only show stack traces in development
+                });
+                errorHandlerMiddleware(err, req, res, next);
+            }
+        });
+    }
+    /**
+     * Register a new health check function for monitoring service dependencies.
+     *
+     * Health checks are executed when the health endpoint is accessed and
+     * help determine if the service is ready to handle requests.
+     *
+     * Examples:
+     * - Database connectivity
+     * - External service availability
+     * - File system access
+     * - Memory/CPU usage checks
+     *
+     * @param name Unique identifier for the check (used in detailed responses)
+     * @param check Function returning boolean or Promise<boolean> indicating health
+     * @returns This instance for method chaining
+     */
+    registerHealthCheck(name, check) {
+        this.healthChecks.push({ name, check });
+        return this;
+    }
+    /**
+     * Get the underlying Express application instance.
+     * Use this for advanced Express features not exposed by this wrapper.
+     *
+     * @returns The raw Express app instance
+     */
+    getApp() {
+        return this.app;
+    }
+    /**
+     * Get the active HTTP/HTTPS server instance.
+     * Returns null if the server is not currently running.
+     *
+     * @returns The HTTP/HTTPS server instance or null
+     */
+    getServer() {
+        return this.server;
+    }
+    /**
+     * Start the HTTP server and begin listening for requests.
+     *
+     * This method:
+     * - Executes beforeStart hooks
+     * - Binds to the configured host/port
+     * - Sets up error handling for startup failures
+     * - Executes afterStart hooks on success
+     * - Logs startup information
+     *
+     * @returns Promise resolving to the running HTTP server instance
+     * @throws Error if server fails to start or port is already in use
+     */
+    async start() {
+        // Ensure initialization (middleware + routes) completed before starting
+        await this.initPromise;
+        await this.runHook('beforeStart', this.app);
+        return new Promise((resolve, reject) => {
+            try {
+                // Prepare listen arguments with optional host parameter
+                const listenArgs = [
+                    this.config.port,
+                    this.config.host,
+                    async () => {
+                        var _a, _b, _c;
+                        const protocol = this.config.https ? 'https' : 'http';
+                        const url = `${protocol}://${this.config.host}:${this.config.port}`;
+                        (0, logger_utils_1.getLogger)().info(`Server running on ${url}`);
+                        if ((_a = this.config.healthCheck) === null || _a === void 0 ? void 0 : _a.path) {
+                            (0, logger_utils_1.getLogger)().info(`Health check available at ${url}${this.normalizePath(this.config.healthCheck.path, this.config.healthCheck.withGlobalPrefix)}`);
+                        }
+                        if (((_b = this.config.metrics) === null || _b === void 0 ? void 0 : _b.enable) && this.config.metrics.path) {
+                            (0, logger_utils_1.getLogger)().info(`Metrics available at ${url}${this.normalizePath(this.config.metrics.path, this.config.metrics.withGlobalPrefix)}`);
+                        }
+                        if ((_c = this.config.openApi) === null || _c === void 0 ? void 0 : _c.enable) {
+                            (0, logger_utils_1.getLogger)().info(`API docs available at ${url}${this.normalizePath(this.config.openApi.mountPath, this.config.openApi.withGlobalPrefix)}`);
+                        }
+                        if (this.server)
+                            await this.runHook('afterStart', this.server);
+                        resolve(this.server);
+                    }
+                ];
+                if (this.config.https) {
+                    const httpsOptions = Object.assign(Object.assign({}, this.config.https), { key: fs_1.default.readFileSync(this.config.https.key), cert: fs_1.default.readFileSync(this.config.https.cert) });
+                    if (this.config.https.ca) {
+                        httpsOptions.ca = fs_1.default.readFileSync(this.config.https.ca);
+                    }
+                    if (this.config.https.passphrase) {
+                        httpsOptions.passphrase = this.config.https.passphrase;
+                    }
+                    this.server = https_1.default.createServer(httpsOptions, this.app).listen(...listenArgs);
+                }
+                else {
+                    // Start the HTTP server
+                    this.server = this.app.listen(...listenArgs);
+                }
+                // Track connections
+                this.server.on('connection', (conn) => {
+                    this.connections.add(conn);
+                    conn.on('close', () => this.connections.delete(conn));
+                });
+                // Handle server startup errors (port in use, permission denied, etc.)
+                this.server.on('error', err => {
+                    (0, logger_utils_1.getLogger)().error({ err }, 'Server failed to start');
+                    reject(err);
+                });
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    }
+    /**
+     * Stop the HTTP server gracefully.
+     *
+     * This method:
+     * - Executes beforeStop hooks
+     * - Stops accepting new connections
+     * - Waits for existing connections to finish
+     * - Closes the server
+     * - Executes afterStop hooks
+     * - Logs shutdown information
+     *
+     * Graceful shutdown ensures:
+     * - No requests are dropped
+     * - Resources are properly cleaned up
+     * - Monitoring systems are notified
+     */
+    async stop(force = false) {
+        if (!this.server) {
+            (0, logger_utils_1.getLogger)().warn('Stop called but server is not running');
+            return;
+        }
+        if (this.isShuttingDown) {
+            (0, logger_utils_1.getLogger)().warn('Stop called while shutdown is already in progress');
+            return;
+        }
+        this.isShuttingDown = true;
+        await this.runHook('beforeStop', this.server);
+        const shutdownTimeout = 10000; // 10s max wait
+        const serverClosePromise = new Promise((resolve, reject) => {
+            this.server.close(async (err) => {
+                if (err) {
+                    (0, logger_utils_1.getLogger)().error({ err }, 'Error while closing server');
+                    reject(err);
+                    return;
+                }
+                this.server = null;
+                this.isShuttingDown = false;
+                (0, logger_utils_1.getLogger)().info('Server stopped gracefully');
+                await this.runHook('afterStop');
+                resolve();
+            });
+        });
+        const timeoutPromise = new Promise((_, reject) => setTimeout(() => reject(new Error('Shutdown timeout')), shutdownTimeout));
+        try {
+            await Promise.race([serverClosePromise, timeoutPromise]);
+        }
+        catch (err) {
+            (0, logger_utils_1.getLogger)().error({ err }, 'Graceful shutdown timed out');
+            if (force) {
+                (0, logger_utils_1.getLogger)().warn('Forcing connection destroy due to shutdown timeout');
+            }
+        }
+        finally {
+            // Always clean up connections
+            await this.destroyConnections();
+        }
+    }
+    /**
+     * Enable graceful shutdown on OS signals for production deployment.
+     *
+     * This is essential for:
+     * - Container orchestration (Docker, Kubernetes)
+     * - Process managers (PM2, systemd)
+     * - Load balancer health checks
+     * - Zero-downtime deployments
+     *
+     * @param signals Array of process signals to listen for (default: SIGINT, SIGTERM)
+     */
+    enableGracefulShutdown(signals = ['SIGINT', 'SIGTERM']) {
+        signals.forEach(signal => {
+            process.on(signal, async () => {
+                (0, logger_utils_1.getLogger)().info(`Received ${signal}, initiating graceful shutdown...`);
+                try {
+                    await this.stop();
+                    process.exit(0);
+                }
+                catch (err) {
+                    (0, logger_utils_1.getLogger)().error({ err }, 'Error during graceful shutdown, forcing stop...');
+                    try {
+                        await this.stop(true); // fallback to forced shutdown
+                        process.exit(1);
+                    }
+                    catch (forceError) {
+                        (0, logger_utils_1.getLogger)().fatal({ forceError }, 'Forced shutdown failed, exiting hard');
+                        process.exit(1);
+                    }
+                }
+            });
+        });
+    }
+    /**
+     * Set an externally created base router.
+     * This will override the internal rootRouter.
+     */
+    setBaseRouter(router) {
+        this.externalRouter = router;
+    }
+    /**
+     * Create and register a new router (only used if not injecting one externally - use `setBaseRouter` instead).
+     */
+    createRouter(prefix = '') {
+        const router = express_1.default.Router();
+        const path = this.normalizePath(prefix, true);
+        this.rootRouter.use(path, router);
+        return router;
+    }
+    /**
+     * Register a new route handler with support for multiple HTTP methods.
+     * The route is automatically registered under the globalPrefix if set.
+     *
+     * @param methods Array of HTTP methods (get, post, put, delete, etc.)
+     * @param path Route path with Express path patterns support
+     * @param handlers One or more Express request handlers (middleware + final handler)
+     * @returns This instance for method chaining
+     */
+    registerRoute(methods, path, ...handlers) {
+        const fullPath = this.normalizePath(path, true);
+        const methodMap = {
+            get: this.app.get.bind(this.app),
+            post: this.app.post.bind(this.app),
+            put: this.app.put.bind(this.app),
+            delete: this.app.delete.bind(this.app),
+            patch: this.app.patch.bind(this.app),
+            options: this.app.options.bind(this.app),
+            head: this.app.head.bind(this.app)
+        };
+        methods.forEach(m => {
+            const fn = methodMap[m];
+            if (fn) {
+                fn(fullPath, ...handlers);
+            }
+            else {
+                throw new Error(`Unsupported HTTP method: ${m}`);
+            }
+        });
+        return this;
+    }
+    /**
+     * Register custom middleware with optional path restriction.
+     *
+     * Use this for:
+     * - Adding authentication to specific routes
+     * - Custom logging or validation
+     * - Request transformation
+     * - Third-party middleware integration
+     *
+     * @param path Optional path prefix or middleware function if no path
+     * @param middleware Middleware handler (required if path is provided)
+     * @returns This instance for method chaining
+     */
+    registerMiddleware(path, middleware) {
+        if (typeof path === 'string') {
+            const normalizedPath = this.normalizePath(path);
+            if (normalizedPath) {
+                this.app.use(normalizedPath, middleware);
+            }
+            else {
+                this.app.use(middleware);
+            }
+        }
+        else {
+            this.app.use(path);
+        }
+        return this;
+    }
+    /**
+     * Register one or more middleware functions to be applied globally.
+     * This is a simpler alternative to registerMiddleware when you just want
+     * to add middleware without path restrictions.
+     *
+     * @param middlewares One or more Express middleware functions
+     * @returns This instance for method chaining
+     */
+    useMiddleware(...middlewares) {
+        middlewares.forEach(middleware => {
+            this.app.use(middleware);
+        });
+        return this;
+    }
+    /**
+     * Get Prometheus registry (to add custom counters/histograms)
+     *
+     * @return {*}  {client.Registry}
+     */
+    getMetricsRegistry() {
+        return this.register;
+    }
+    /**
+     * Get server configuration
+     *
+     * @return {*}  {ServerConfig}
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * Wait until server initialization (middleware + routes) has completed.
+     * Useful for integration tests that inspect app before starting.
+     */
+    async waitUntilReady() {
+        await this.initPromise;
+    }
+    normalizePath(path, withGlobalPrefix = false) {
+        const sanitize = (p) => {
+            return ('/' +
+                p
+                    .trim()
+                    .replace(/^\/+/, '') // remove leading slashes
+                    .replace(/\/{2,}/g, '/') // collapse multiple slashes
+                    .replace(/\/+$/, '')); // remove trailing slash
+        };
+        // Resolve global prefix if enabled
+        const prefix = withGlobalPrefix && this.globalPrefix ? sanitize(this.globalPrefix) : '';
+        // If path is invalid, default to prefix or root
+        if (typeof path !== 'string' || !path.trim()) {
+            return prefix || '/';
+        }
+        return sanitize(prefix + '/' + path);
+    }
+    normalizeRouteForMetrics(req, res) {
+        var _a;
+        // Prevent high cardinality metrics by normalizing routes
+        if ((_a = req === null || req === void 0 ? void 0 : req.route) === null || _a === void 0 ? void 0 : _a.path) {
+            // Use Express route pattern instead of actual URL
+            return req.route.path;
+        }
+        // Group common patterns
+        if (res.statusCode === 404)
+            return '/404';
+        const path = (req.path || 'unknown').split('?')[0];
+        // Replace IDs and UUIDs with placeholders
+        return path
+            .replace(/\/[0-9]+/g, '/:id')
+            .replace(/\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/g, '/:uuid');
+    }
+    /**
+     * Destroy all active connections (gracefully if possible).
+     * If a connection does not close cleanly, it will be force-destroyed.
+     */
+    async destroyConnections() {
+        const total = this.connections.size;
+        if (total === 0) {
+            (0, logger_utils_1.getLogger)().debug('No active connections to close');
+            return;
+        }
+        const timeoutMs = 5000;
+        await Promise.race([
+            Promise.all(Array.from(this.connections).map(conn => new Promise(resolve => {
+                conn.end(() => {
+                    if (!conn.destroyed)
+                        conn.destroy();
+                    resolve();
+                });
+                conn.on('error', () => {
+                    conn.destroy();
+                    resolve();
+                });
+            }))),
+            new Promise(resolve => setTimeout(resolve, timeoutMs))
+        ]);
+        this.connections.clear();
+        (0, logger_utils_1.getLogger)().info(`Closed ${total} active connections`);
+    }
+    async validateHttpsFiles() {
+        if (!(await (0, fs_utils_1.fileExists)(this.config.https.key))) {
+            throw new Error(`HTTPS key file not found: ${this.config.https.key}`);
+        }
+        if (!(await (0, fs_utils_1.fileExists)(this.config.https.cert))) {
+            throw new Error(`HTTPS cert file not found: ${this.config.https.cert}`);
+        }
+        if (this.config.https.ca && !(await (0, fs_utils_1.fileExists)(this.config.https.ca))) {
+            throw new Error(`HTTPS CA file not found: ${this.config.https.ca}`);
+        }
+    }
+    static isBuiltServerConfig(config) {
+        if (config[server_builder_1.BUILD_MARKER]) {
+            return true;
+        }
+        return false;
+    }
+}
+exports.ExpressServer = ExpressServer;
+//# sourceMappingURL=server.js.map