@emmett-community/emmett-expressjs-with-openapi 0.3.0 → 0.5.0

package/dist/index.js

@@ -1,11 +1,15 @@
 import {
   registerHandlerModule
 } from "./chunk-5TC7YUZR.js";
+import {
+  safeLog
+} from "./chunk-PZBLPYJH.js";
 
 // src/index.ts
 import "express-async-errors";
 
 // src/application.ts
+import { trace, SpanStatusCode } from "@opentelemetry/api";
 import express, {
   Router
 } from "express";
@@ -15,7 +19,8 @@ import { createRequire } from "module";
 
 // src/middlewares/problemDetailsMiddleware.ts
 import { ProblemDocument } from "http-problem-details";
-var problemDetailsMiddleware = (mapError) => (error, request, response, _next) => {
+var problemDetailsMiddleware = (mapError, logger) => (error, request, response, _next) => {
+  safeLog.error(logger, "Request error", error);
   let problemDetails;
   if (mapError) problemDetails = mapError(error, request);
   problemDetails = problemDetails ?? defaultErrorToProblemDetailsMapping(error);
@@ -39,6 +44,7 @@ var defaultErrorToProblemDetailsMapping = (error) => {
 };
 
 // src/application.ts
+var tracer = trace.getTracer("@emmett-community/emmett-expressjs-with-openapi");
 var getApplication = async (options) => {
   const app = express();
   const {
@@ -49,8 +55,15 @@ var getApplication = async (options) => {
     disableUrlEncodingMiddleware,
     disableProblemDetailsMiddleware,
     pinoHttp,
-    openApiValidator
+    openApiValidator,
+    observability
   } = options;
+  const logger = observability?.logger;
+  safeLog.debug(logger, "Initializing Express application", {
+    hasApis: !!apis?.length,
+    hasOpenApiValidator: !!openApiValidator,
+    hasPinoHttp: !!pinoHttp
+  });
   const router = Router();
   app.set("etag", enableDefaultExpressEtag ?? false);
   if (pinoHttp !== void 0 && pinoHttp !== false) {
@@ -64,8 +77,9 @@ var getApplication = async (options) => {
       const options2 = pinoHttp === true ? void 0 : pinoHttp;
       const middleware = provider(options2);
       app.use(middleware);
-    } catch {
-      console.warn(
+    } catch (error) {
+      safeLog.warn(
+        logger,
         "Pino HTTP configuration provided but pino-http package is not installed. Install it with: npm install pino-http"
       );
       throw new Error(
@@ -86,20 +100,52 @@ var getApplication = async (options) => {
       activateESMResolver();
       const handlersBasePath = typeof openApiValidator.operationHandlers === "string" ? openApiValidator.operationHandlers : openApiValidator.operationHandlers.basePath;
       if (handlersBasePath) {
-        const { extractHandlerModules } = await import("./openapi-parser-CCYU636U.js");
-        const { importAndRegisterHandlers } = await import("./handler-importer-OJGFQON5.js");
-        try {
-          const modules = await extractHandlerModules(
-            openApiValidator.apiSpec,
-            handlersBasePath
-          );
-          const importedHandlers = await importAndRegisterHandlers(modules);
-          if (openApiValidator.initializeHandlers) {
-            await openApiValidator.initializeHandlers(importedHandlers);
+        const { extractHandlerModules } = await import("./openapi-parser-SFYDJEIN.js");
+        const { importAndRegisterHandlers } = await import("./handler-importer-V4EJZ2DG.js");
+        const modules = await tracer.startActiveSpan(
+          "emmett.openapi.parse_spec",
+          async (span) => {
+            try {
+              const result = await extractHandlerModules(
+                openApiValidator.apiSpec,
+                handlersBasePath,
+                logger
+              );
+              span.setAttribute("emmett.handlers.count", result.length);
+              span.setStatus({ code: SpanStatusCode.OK });
+              return result;
+            } catch (error) {
+              span.recordException(error);
+              span.setStatus({ code: SpanStatusCode.ERROR });
+              throw error;
+            } finally {
+              span.end();
+            }
           }
-        } catch (error) {
-          console.error("Failed to auto-import handler modules:", error);
-          throw error;
+        );
+        const importedHandlers = await tracer.startActiveSpan(
+          "emmett.http.import_handlers",
+          async (span) => {
+            try {
+              const result = await importAndRegisterHandlers(modules, logger);
+              span.setAttribute(
+                "emmett.handlers.count",
+                Object.keys(result).length
+              );
+              span.setStatus({ code: SpanStatusCode.OK });
+              return result;
+            } catch (error) {
+              safeLog.error(logger, "Failed to auto-import handler modules", error);
+              span.recordException(error);
+              span.setStatus({ code: SpanStatusCode.ERROR });
+              throw error;
+            } finally {
+              span.end();
+            }
+          }
+        );
+        if (openApiValidator.initializeHandlers) {
+          await openApiValidator.initializeHandlers(importedHandlers);
         }
       }
     } else {
@@ -135,8 +181,9 @@ var getApplication = async (options) => {
       } else {
         app.use(middleware);
       }
-    } catch {
-      console.warn(
+    } catch (error) {
+      safeLog.warn(
+        logger,
         "OpenAPI validator configuration provided but express-openapi-validator package is not installed. Install it with: npm install express-openapi-validator"
       );
       throw new Error(
@@ -151,14 +198,15 @@ var getApplication = async (options) => {
     app.use(router);
   }
   if (!disableProblemDetailsMiddleware)
-    app.use(problemDetailsMiddleware(mapError));
+    app.use(problemDetailsMiddleware(mapError, logger));
+  safeLog.info(logger, "Express application initialized");
   return app;
 };
 var startAPI = (app, options = { port: 3e3 }) => {
-  const { port } = options;
+  const { port, logger } = options;
   const server = http.createServer(app);
   server.on("listening", () => {
-    console.info("server up listening");
+    safeLog.info(logger, "Server up listening", { port });
   });
   return server.listen(port);
 };
@@ -212,10 +260,34 @@ var getETagValueFromIfMatch = (request) => {
 };
 
 // src/handler.ts
+import { trace as trace2, SpanStatusCode as SpanStatusCode2 } from "@opentelemetry/api";
+var tracer2 = trace2.getTracer("@emmett-community/emmett-expressjs-with-openapi");
 var on = (handle) => async (request, response, _next) => {
   const setResponse = await Promise.resolve(handle(request));
   return setResponse(response);
 };
+var tracedOn = (handle, options) => async (request, response, _next) => {
+  const spanName = options?.spanName ?? "emmett.http.handle_request";
+  return tracer2.startActiveSpan(spanName, async (span) => {
+    try {
+      span.setAttribute("http.method", request.method);
+      const route = (request.baseUrl ?? "") + (request.route?.path ?? request.path);
+      span.setAttribute("http.route", route);
+      const setResponse = await Promise.resolve(handle(request));
+      setResponse(response);
+      span.setAttribute("http.status_code", response.statusCode);
+      span.setStatus({
+        code: response.statusCode >= 400 ? SpanStatusCode2.ERROR : SpanStatusCode2.OK
+      });
+    } catch (error) {
+      span.recordException(error);
+      span.setStatus({ code: SpanStatusCode2.ERROR });
+      throw error;
+    } finally {
+      span.end();
+    }
+  });
+};
 var OK = (options) => (response) => {
   send(response, 200, options);
 };
@@ -494,12 +566,14 @@ export {
   isWeakETag,
   on,
   registerHandlerModule,
+  safeLog,
   send,
   sendAccepted,
   sendCreated,
   sendProblem,
   setETag,
   startAPI,
-  toWeakETag
+  toWeakETag,
+  tracedOn
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/application.ts","../src/middlewares/problemDetailsMiddleware.ts","../src/etag.ts","../src/handler.ts","../src/openapi/firebase-auth.ts","../src/openapi/index.ts","../src/responses.ts","../src/testing/apiE2ESpecification.ts","../src/testing/apiSpecification.ts"],"sourcesContent":["import 'express-async-errors';\n\nexport * from './application';\nexport * from './etag';\nexport * from './handler';\nexport * from './openapi';\nexport * from './responses';\nexport * from './testing';\nexport { registerHandlerModule } from './internal/esm-resolver';\n","import express, {\n  Router,\n  type Application,\n  type RequestHandler,\n} from 'express';\nimport 'express-async-errors';\nimport http from 'http';\nimport { createRequire } from 'node:module';\nimport { problemDetailsMiddleware } from './middlewares/problemDetailsMiddleware';\nimport type { OpenApiValidatorOptions } from './openapi';\nimport type { ErrorToProblemDetailsMapping } from './responses';\n\n// #region web-api-setup\nexport type WebApiSetup = (router: Router) => void;\n// #endregion web-api-setup\n\n/**\n * Options forwarded to pino-http. Typed loosely to avoid hard dependency.\n *\n * @see https://github.com/pinojs/pino-http\n */\nexport type PinoHttpOptions = Record<string, unknown>;\n\nexport type ApplicationOptions = {\n  apis?: WebApiSetup[];\n  mapError?: ErrorToProblemDetailsMapping;\n  enableDefaultExpressEtag?: boolean;\n  disableJsonMiddleware?: boolean;\n  disableUrlEncodingMiddleware?: boolean;\n  disableProblemDetailsMiddleware?: boolean;\n  /**\n   * Optional Pino HTTP logger configuration.\n   * When true, enables pino-http with defaults.\n   * When an object, forwards the options to pino-http.\n   * Requires the 'pino-http' package to be installed.\n   *\n   * @see https://github.com/pinojs/pino-http\n   * @example\n   * ```typescript\n   * const app = await getApplication({\n   *   pinoHttp: true,\n   * });\n   *\n   * const app = await getApplication({\n   *   pinoHttp: { autoLogging: false },\n   * });\n   * ```\n   */\n  pinoHttp?: boolean | PinoHttpOptions;\n  /**\n   * Optional OpenAPI validator configuration.\n   * When provided, enables request/response validation against an OpenAPI specification.\n   * Requires the 'express-openapi-validator' package to be installed.\n   *\n   * @see https://github.com/cdimascio/express-openapi-validator\n   * @example\n   * ```typescript\n   * import { getApplication, createOpenApiValidatorOptions } from '@event-driven-io/emmett-expressjs';\n   *\n   * type AppDeps = {\n   *   eventStore: EventStore;\n   *   messageBus: EventsPublisher;\n   * };\n   *\n   * const app = await getApplication({\n   *   openApiValidator: createOpenApiValidatorOptions<AppDeps>('./openapi.yaml', {\n   *     validateResponses: true,\n   *     operationHandlers: './handlers',\n   *     initializeHandlers: (deps) => {\n   *       initializeHandlers(deps.eventStore, deps.messageBus);\n   *     }\n   *   })\n   * });\n   * ```\n   */\n  openApiValidator?: OpenApiValidatorOptions;\n};\n\nexport const getApplication = async (options: ApplicationOptions) => {\n  const app: Application = express();\n\n  const {\n    apis,\n    mapError,\n    enableDefaultExpressEtag,\n    disableJsonMiddleware,\n    disableUrlEncodingMiddleware,\n    disableProblemDetailsMiddleware,\n    pinoHttp,\n    openApiValidator,\n  } = options;\n\n  const router = Router();\n\n  // disabling default etag behaviour\n  // to use etags in if-match and if-not-match headers\n  app.set('etag', enableDefaultExpressEtag ?? false);\n\n  // add Pino HTTP logger middleware if configured\n  if (pinoHttp !== undefined && pinoHttp !== false) {\n    try {\n      const require = createRequire(import.meta.url);\n      const mod = require('pino-http') as Record<string, unknown>;\n      const provider = (mod.default ?? mod) as unknown;\n\n      if (typeof provider !== 'function') {\n        throw new Error('Invalid pino-http module: missing default export');\n      }\n\n      const options = pinoHttp === true ? undefined : pinoHttp;\n      const middleware = (\n        provider as (opts?: PinoHttpOptions) => RequestHandler\n      )(options);\n      app.use(middleware);\n    } catch {\n      console.warn(\n        'Pino HTTP configuration provided but pino-http package is not installed. ' +\n          'Install it with: npm install pino-http',\n      );\n      throw new Error(\n        'pino-http package is required when pinoHttp option is used',\n      );\n    }\n  }\n\n  // add json middleware\n  if (!disableJsonMiddleware) app.use(express.json());\n\n  // enable url encoded urls and bodies\n  if (!disableUrlEncodingMiddleware)\n    app.use(\n      express.urlencoded({\n        extended: true,\n      }),\n    );\n\n  // add OpenAPI validator middleware if configured\n  if (openApiValidator) {\n    // Activate ESM resolver if operationHandlers are configured\n    // This ensures handler modules are loaded via ESM import() instead of CJS require(),\n    // preventing dual module loading issues when using TypeScript runtimes (tsx, ts-node)\n    if (openApiValidator.operationHandlers) {\n      const { activateESMResolver } = await import(\n        './internal/esm-resolver.js'\n      );\n      activateESMResolver();\n\n      // NEW: Auto-discover and import handler modules from OpenAPI spec\n      const handlersBasePath =\n        typeof openApiValidator.operationHandlers === 'string'\n          ? openApiValidator.operationHandlers\n          : openApiValidator.operationHandlers.basePath;\n\n      if (handlersBasePath) {\n        const { extractHandlerModules } = await import(\n          './internal/openapi-parser.js'\n        );\n        const { importAndRegisterHandlers } = await import(\n          './internal/handler-importer.js'\n        );\n\n        try {\n          // Parse OpenAPI spec to find handler modules\n          const modules = await extractHandlerModules(\n            openApiValidator.apiSpec,\n            handlersBasePath,\n          );\n\n          // Dynamically import and register all handler modules\n          const importedHandlers = await importAndRegisterHandlers(modules);\n\n          // Call user's initializeHandlers callback with imported modules\n          if (openApiValidator.initializeHandlers) {\n            await openApiValidator.initializeHandlers(importedHandlers);\n          }\n        } catch (error) {\n          console.error('Failed to auto-import handler modules:', error);\n          throw error;\n        }\n      }\n    } else {\n      // No operationHandlers, just call initializeHandlers if provided\n      if (openApiValidator.initializeHandlers) {\n        await openApiValidator.initializeHandlers();\n      }\n    }\n\n    try {\n      const require = createRequire(import.meta.url);\n      // express-openapi-validator exports a default with .middleware (ESM/CJS compatibility)\n      const mod = require('express-openapi-validator') as Record<\n        string,\n        unknown\n      >;\n      const provider = (mod.default ?? mod) as Record<string, unknown>;\n\n      if (typeof provider.middleware !== 'function') {\n        throw new Error(\n          'Invalid express-openapi-validator module: missing middleware export',\n        );\n      }\n\n      // Serve OpenAPI spec if configured\n      if (openApiValidator.serveSpec) {\n        if (typeof openApiValidator.apiSpec === 'string') {\n          // If apiSpec is a file path, serve it as a static file\n          app.use(\n            openApiValidator.serveSpec,\n            express.static(openApiValidator.apiSpec),\n          );\n        } else {\n          // If apiSpec is an object, serve it as JSON\n          app.get(openApiValidator.serveSpec, (_req, res) => {\n            res.json(openApiValidator.apiSpec);\n          });\n        }\n      }\n\n      const factory = provider.middleware as (\n        opts: OpenApiValidatorOptions,\n      ) => RequestHandler | RequestHandler[];\n      const middleware = factory(openApiValidator);\n      if (Array.isArray(middleware)) {\n        for (const m of middleware) app.use(m);\n      } else {\n        app.use(middleware);\n      }\n    } catch {\n      console.warn(\n        'OpenAPI validator configuration provided but express-openapi-validator package is not installed. ' +\n          'Install it with: npm install express-openapi-validator',\n      );\n      throw new Error(\n        'express-openapi-validator package is required when openApiValidator option is used',\n      );\n    }\n  }\n\n  // Register API routes if provided\n  if (apis) {\n    for (const api of apis) {\n      api(router);\n    }\n    app.use(router);\n  }\n\n  // add problem details middleware\n  if (!disableProblemDetailsMiddleware)\n    app.use(problemDetailsMiddleware(mapError));\n\n  return app;\n};\n\nexport type StartApiOptions = {\n  port?: number;\n};\n\nexport const startAPI = (\n  app: Application,\n  options: StartApiOptions = { port: 3000 },\n) => {\n  const { port } = options;\n  const server = http.createServer(app);\n\n  server.on('listening', () => {\n    console.info('server up listening');\n  });\n\n  return server.listen(port);\n};\n","import type { NextFunction, Request, Response } from 'express';\nimport { ProblemDocument } from 'http-problem-details';\nimport { sendProblem, type ErrorToProblemDetailsMapping } from '..';\n\nexport const problemDetailsMiddleware =\n  (mapError?: ErrorToProblemDetailsMapping) =>\n  (\n    error: Error,\n    request: Request,\n    response: Response,\n    _next: NextFunction,\n  ): void => {\n    let problemDetails: ProblemDocument | undefined;\n\n    if (mapError) problemDetails = mapError(error, request);\n\n    problemDetails =\n      problemDetails ?? defaultErrorToProblemDetailsMapping(error);\n\n    sendProblem(response, problemDetails.status, { problem: problemDetails });\n  };\n\nexport const defaultErrorToProblemDetailsMapping = (\n  error: Error,\n): ProblemDocument => {\n  let statusCode = 500;\n\n  // Prefer standard `status` code if present (e.g., express-openapi-validator)\n  const errObj = error as unknown as Record<string, unknown>;\n  const maybeStatus = errObj['status'];\n  if (\n    typeof maybeStatus === 'number' &&\n    maybeStatus >= 100 &&\n    maybeStatus < 600\n  ) {\n    statusCode = maybeStatus;\n  }\n\n  const maybeErrorCode = errObj['errorCode'];\n  if (\n    typeof maybeErrorCode === 'number' &&\n    maybeErrorCode >= 100 &&\n    maybeErrorCode < 600\n  ) {\n    statusCode = maybeErrorCode;\n  }\n\n  return new ProblemDocument({\n    detail: error.message,\n    status: statusCode,\n  });\n};\n","import { type Brand } from '@event-driven-io/emmett';\nimport type { Request, Response } from 'express';\n\n//////////////////////////////////////\n/// ETAG\n//////////////////////////////////////\n\nexport const HeaderNames = {\n  IF_MATCH: 'if-match',\n  IF_NOT_MATCH: 'if-not-match',\n  ETag: 'etag',\n};\n\nexport type WeakETag = Brand<`W/${string}`, 'ETag'>;\nexport type ETag = Brand<string, 'ETag'>;\n\nexport const WeakETagRegex = /W\\/\"(-?\\d+.*)\"/;\n\nexport const enum ETagErrors {\n  WRONG_WEAK_ETAG_FORMAT = 'WRONG_WEAK_ETAG_FORMAT',\n  MISSING_IF_MATCH_HEADER = 'MISSING_IF_MATCH_HEADER',\n  MISSING_IF_NOT_MATCH_HEADER = 'MISSING_IF_NOT_MATCH_HEADER',\n}\n\nexport const isWeakETag = (etag: ETag): etag is WeakETag => {\n  return WeakETagRegex.test(etag as string);\n};\n\nexport const getWeakETagValue = (etag: ETag): string => {\n  const result = WeakETagRegex.exec(etag as string);\n  if (result === null || result.length === 0) {\n    throw new Error(ETagErrors.WRONG_WEAK_ETAG_FORMAT);\n  }\n  return result[1]!;\n};\n\nexport const toWeakETag = (value: number | bigint | string): WeakETag => {\n  return `W/\"${value}\"` as WeakETag;\n};\n\nexport const getETagFromIfMatch = (request: Request): ETag => {\n  const etag = request.headers[HeaderNames.IF_MATCH];\n\n  if (etag === undefined) {\n    throw new Error(ETagErrors.MISSING_IF_MATCH_HEADER);\n  }\n\n  return etag as ETag;\n};\n\nexport const getETagFromIfNotMatch = (request: Request): ETag => {\n  const etag = request.headers[HeaderNames.IF_NOT_MATCH];\n\n  if (etag === undefined) {\n    throw new Error(ETagErrors.MISSING_IF_MATCH_HEADER);\n  }\n\n  return (Array.isArray(etag) ? etag[0] : etag) as ETag;\n};\n\nexport const setETag = (response: Response, etag: ETag): void => {\n  response.setHeader(HeaderNames.ETag, etag as string);\n};\n\nexport const getETagValueFromIfMatch = (request: Request): string => {\n  const eTagValue: ETag = getETagFromIfMatch(request);\n\n  return isWeakETag(eTagValue)\n    ? getWeakETagValue(eTagValue)\n    : (eTagValue as string);\n};\n","import { type NextFunction, type Request, type Response } from 'express';\nimport {\n  send,\n  sendAccepted,\n  sendCreated,\n  sendProblem,\n  type AcceptedHttpResponseOptions,\n  type CreatedHttpResponseOptions,\n  type HttpProblemResponseOptions,\n  type HttpResponseOptions,\n  type NoContentHttpResponseOptions,\n} from '.';\n\n// #region httpresponse-on\nexport type HttpResponse = (response: Response) => void;\n\nexport type HttpHandler<RequestType extends Request> = (\n  request: RequestType,\n) => Promise<HttpResponse> | HttpResponse;\n\nexport const on =\n  <RequestType extends Request>(handle: HttpHandler<RequestType>) =>\n  async (\n    request: RequestType,\n    response: Response,\n    _next: NextFunction,\n  ): Promise<void> => {\n    const setResponse = await Promise.resolve(handle(request));\n\n    return setResponse(response);\n  };\n// #endregion httpresponse-on\n\nexport const OK =\n  (options?: HttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    send(response, 200, options);\n  };\n\nexport const Created =\n  (options: CreatedHttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendCreated(response, options);\n  };\n\nexport const Accepted =\n  (options: AcceptedHttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendAccepted(response, options);\n  };\n\nexport const NoContent = (\n  options?: NoContentHttpResponseOptions,\n): HttpResponse => HttpResponse(204, options);\n\nexport const HttpResponse =\n  (statusCode: number, options?: HttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    send(response, statusCode, options);\n  };\n\n/////////////////////\n// ERRORS\n/////////////////////\n\nexport const BadRequest = (\n  options?: HttpProblemResponseOptions,\n): HttpResponse => HttpProblem(400, options);\n\nexport const Forbidden = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(403, options);\n\nexport const NotFound = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(404, options);\n\nexport const Conflict = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(409, options);\n\nexport const PreconditionFailed = (\n  options: HttpProblemResponseOptions,\n): HttpResponse => HttpProblem(412, options);\n\nexport const HttpProblem =\n  (statusCode: number, options?: HttpProblemResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendProblem(response, statusCode, options);\n  };\n","import type { SecurityHandlers } from './index';\n\ntype AuthClient = {\n  verifyIdToken: (token: string) => Promise<unknown>;\n};\n\nexport type FirebaseAuthSecurityOptions = {\n  /**\n   * Name of the OpenAPI security scheme to attach the handler to.\n   * Defaults to \"bearerAuth\".\n   */\n  securitySchemeName?: string;\n  /**\n   * Custom auth client for tests or alternate Firebase auth instances.\n   */\n  authClient?: AuthClient;\n  /**\n   * Token claim used for role-based checks when scopes are defined.\n   * Defaults to \"roles\".\n   */\n  roleClaim?: string;\n};\n\ntype FirebaseAuthModule = {\n  firebaseAuthMiddleware: (options?: { authClient?: AuthClient }) => (\n    req: unknown,\n    res: unknown,\n    next: () => void,\n  ) => Promise<void> | void;\n};\n\nconst loadFirebaseAuth = async (): Promise<FirebaseAuthModule> => {\n  try {\n    const mod = await import('@my-f-startup/firebase-auth-express');\n    const provider = (mod as unknown as Record<string, unknown>).default ?? mod;\n    const firebaseAuthMiddleware =\n      (provider as Record<string, unknown>).firebaseAuthMiddleware;\n\n    if (typeof firebaseAuthMiddleware !== 'function') {\n      throw new Error(\n        'Invalid @my-f-startup/firebase-auth-express module: missing firebaseAuthMiddleware export',\n      );\n    }\n\n    return provider as FirebaseAuthModule;\n  } catch (error) {\n    const message =\n      '@my-f-startup/firebase-auth-express is required for createFirebaseAuthSecurityHandlers. ' +\n      'Install it with: npm install @my-f-startup/firebase-auth-express';\n    throw new Error(message, { cause: error as Error });\n  }\n};\n\nconst createNullResponse = () => {\n  const res: Record<string, unknown> = {};\n  res.status = () => res;\n  res.json = () => res;\n  res.send = () => res;\n  res.end = () => res;\n  res.set = () => res;\n  return res;\n};\n\nconst runMiddleware = async (\n  middleware: (req: unknown, res: unknown, next: () => void) => Promise<void> | void,\n  req: unknown,\n): Promise<boolean> => {\n  return new Promise((resolve) => {\n    let nextCalled = false;\n    const res = createNullResponse();\n    const next = () => {\n      nextCalled = true;\n      resolve(true);\n    };\n\n    Promise.resolve(middleware(req, res, next))\n      .then(() => {\n        if (!nextCalled) resolve(false);\n      })\n      .catch(() => resolve(false));\n  });\n};\n\nexport const createFirebaseAuthSecurityHandlers = (\n  options: FirebaseAuthSecurityOptions = {},\n): SecurityHandlers => {\n  const securitySchemeName = options.securitySchemeName ?? 'bearerAuth';\n  const roleClaim = options.roleClaim ?? 'roles';\n\n  return {\n    [securitySchemeName]: async (req, scopes, _schema) => {\n      const { firebaseAuthMiddleware } = await loadFirebaseAuth();\n      const middleware = firebaseAuthMiddleware({\n        authClient: options.authClient,\n      });\n\n      const isAuthenticated = await runMiddleware(middleware, req);\n      if (!isAuthenticated) return false;\n\n      if (!scopes.length) return true;\n\n      const roles = (req as Record<string, any>)?.auth?.token?.[roleClaim];\n      if (!Array.isArray(roles)) return false;\n\n      return scopes.every((scope: string) => roles.includes(scope));\n    },\n  };\n};\n","/**\n * OpenAPI v3 Document type (to avoid requiring express-openapi-validator types directly)\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type OpenAPIV3Document = any;\n\n/**\n * Imported handler modules, keyed by module name.\n * Automatically populated by the framework when operationHandlers is configured.\n */\nexport type ImportedHandlerModules = Record<string, any>;\n\n/**\n * Security handlers for custom authentication/authorization logic.\n * Maps security scheme names to handler functions.\n *\n * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-security/\n */\n\nexport type SecurityHandlers = Record<\n  string,\n  (req: any, scopes: string[], schema: any) => boolean | Promise<boolean>\n>;\n\nexport * from './firebase-auth';\n\n/**\n * Configuration options for express-openapi-validator middleware.\n * This allows optional validation of API requests and responses against an OpenAPI specification.\n *\n * @see https://cdimascio.github.io/express-openapi-validator-documentation/\n */\nexport type OpenApiValidatorOptions = {\n  /**\n   * Path to the OpenAPI specification file (JSON or YAML)\n   * or an OpenAPI specification object.\n   */\n  apiSpec: string | OpenAPIV3Document;\n\n  /**\n   * Determines whether the validator should validate requests.\n   * Can be a boolean or an object with detailed request validation options.\n   * @default true\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-requests/\n   */\n  validateRequests?:\n    | boolean\n    | {\n        /**\n         * Allow unknown query parameters (not defined in the spec).\n         * @default false\n         */\n        allowUnknownQueryParameters?: boolean;\n        /**\n         * Coerce types in request parameters.\n         * @default true\n         */\n        coerceTypes?: boolean | 'array';\n        /**\n         * Remove additional properties not defined in the spec.\n         * @default false\n         */\n        removeAdditional?: boolean | 'all' | 'failing';\n      };\n\n  /**\n   * Determines whether the validator should validate responses.\n   * Can be a boolean or an object with detailed response validation options.\n   * @default false\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-responses/\n   */\n  validateResponses?:\n    | boolean\n    | {\n        /**\n         * Remove additional properties from responses not defined in the spec.\n         * @default false\n         */\n        removeAdditional?: boolean | 'all' | 'failing';\n        /**\n         * Coerce types in responses.\n         * @default true\n         */\n        coerceTypes?: boolean;\n        /**\n         * Callback to handle response validation errors.\n         */\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        onError?: (error: any, body: any, req: any) => void;\n      };\n\n  /**\n   * Determines whether the validator should validate security.\n   * Can be a boolean or an object with security handlers.\n   * @default true\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-security/\n   */\n  validateSecurity?:\n    | boolean\n    | {\n        /**\n         * Custom security handlers for authentication/authorization.\n         */\n        handlers?: SecurityHandlers;\n      };\n\n  /**\n   * Defines how the validator should validate formats.\n   * When true, uses ajv-formats for format validation.\n   * When false, format validation is disabled.\n   * Can also be 'fast' or 'full' for different validation modes.\n   * @default true\n   */\n  validateFormats?: boolean | 'fast' | 'full';\n\n  /**\n   * The base path to the operation handlers directory.\n   * When set to a path, automatically wires OpenAPI operations to handler functions\n   * based on operationId or x-eov-operation-id.\n   * When false, operation handlers are disabled (manual routing required).\n   * @default false\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/guide-operation-handlers/\n   */\n  operationHandlers?:\n    | string\n    | false\n    | {\n        /**\n         * Base path to operation handlers directory.\n         */\n        basePath?: string;\n        /**\n         * Resolver function to map operationId to handler module path.\n         */\n        resolver?: (\n          handlersPath: string,\n          route: string,\n          apiDoc: OpenAPIV3Document,\n        ) => string;\n      };\n\n  /**\n   * Paths or pattern to ignore during validation.\n   * @default undefined\n   */\n  ignorePaths?: RegExp | ((path: string) => boolean);\n\n  /**\n   * Validate the OpenAPI specification itself.\n   * @default true\n   */\n  validateApiSpec?: boolean;\n\n  /**\n   * $ref parser configuration for handling OpenAPI references.\n   * @default undefined\n   */\n  $refParser?: {\n    mode: 'bundle' | 'dereference';\n  };\n\n  /**\n   * Serve the OpenAPI specification at a specific path.\n   * When set to a string, the spec will be served at that path.\n   * When false, the spec will not be served.\n   * @default false\n   * @example '/api-docs/openapi.json'\n   */\n  serveSpec?: string | false;\n\n  /**\n   * File upload configuration options.\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-file-uploads/\n   */\n  fileUploader?:\n    | boolean\n    | {\n        /**\n         * Destination directory for uploaded files.\n         */\n        dest?: string;\n        /**\n         * File size limit in bytes.\n         */\n        limits?: {\n          fileSize?: number;\n          files?: number;\n        };\n      };\n\n  /**\n   * Optional callback to initialize operation handlers with dependencies.\n   * Called before the OpenAPI validator middleware is configured.\n   *\n   * The framework automatically imports handler modules referenced in your\n   * OpenAPI spec (via x-eov-operation-handler) and passes them as the first parameter.\n   *\n   * @param handlers - Auto-imported handler modules, keyed by module name\n   * @returns void or a Promise that resolves when initialization is complete\n   *\n   * @example\n   * ```typescript\n   * // With automatic import (recommended)\n   * initializeHandlers: async (handlers) => {\n   *   handlers.shoppingCarts.initializeHandlers(eventStore, messageBus, getUnitPrice, getCurrentTime);\n   * }\n   *\n   * // Manual import (still supported for backward compatibility)\n   * import * as handlersModule from './handlers/shoppingCarts';\n   * import { registerHandlerModule } from '@emmett-community/emmett-expressjs-with-openapi';\n   * initializeHandlers: () => {\n   *   const handlersPath = path.join(__dirname, './handlers/shoppingCarts');\n   *   registerHandlerModule(handlersPath, handlersModule);\n   *   handlersModule.initializeHandlers(eventStore, messageBus, getUnitPrice, getCurrentTime);\n   * }\n   * ```\n   */\n  initializeHandlers?: (\n    handlers?: ImportedHandlerModules,\n  ) => void | Promise<void>;\n};\n\n/**\n * Helper function to create OpenAPI validator configuration with sensible defaults.\n *\n * @param apiSpec - Path to OpenAPI spec file or OpenAPI document object\n * @param options - Additional validator options\n * @returns Complete OpenApiValidatorOptions configuration\n *\n * @example\n * ```typescript\n * // Basic usage with default options\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml');\n *\n * // With response validation enabled\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   validateResponses: true\n * });\n *\n * // With custom security handlers\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   validateSecurity: {\n *     handlers: {\n *       bearerAuth: async (req, scopes) => {\n *         // Custom authentication logic\n *         return true;\n *       }\n *     }\n *   }\n * });\n *\n * // Serving the spec at /api-docs\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   serveSpec: '/api-docs/openapi.json'\n * });\n *\n * // With dependency injection for operation handlers\n * type ShoppingCartDeps = {\n *   eventStore: EventStore;\n *   messageBus: EventsPublisher;\n *   getUnitPrice: (productId: string) => Promise<number>;\n *   getCurrentTime: () => Date;\n * };\n *\n * const validatorOptions = createOpenApiValidatorOptions<ShoppingCartDeps>(\n *   './openapi.yaml',\n *   {\n *     operationHandlers: './handlers',\n *     initializeHandlers: (deps) => {\n *       initializeHandlers(\n *         deps.eventStore,\n *         deps.messageBus,\n *         deps.getUnitPrice,\n *         deps.getCurrentTime\n *       );\n *     }\n *   }\n * );\n *\n * const app = getApplication({\n *   apis: [myApi],\n *   openApiValidator: validatorOptions\n * });\n * ```\n */\nexport const createOpenApiValidatorOptions = (\n  apiSpec: string | OpenAPIV3Document,\n  options?: Partial<Omit<OpenApiValidatorOptions, 'apiSpec'>>,\n): OpenApiValidatorOptions => {\n  return {\n    apiSpec,\n    validateRequests: options?.validateRequests ?? true,\n    validateResponses: options?.validateResponses ?? false,\n    validateSecurity: options?.validateSecurity ?? true,\n    validateFormats: options?.validateFormats ?? true,\n    operationHandlers: options?.operationHandlers,\n    ignorePaths: options?.ignorePaths,\n    validateApiSpec: options?.validateApiSpec ?? true,\n    $refParser: options?.$refParser,\n    serveSpec: options?.serveSpec ?? false,\n    fileUploader: options?.fileUploader,\n    initializeHandlers: options?.initializeHandlers,\n  };\n};\n\n/**\n * Type guard to check if express-openapi-validator is available\n */\nexport const isOpenApiValidatorAvailable = async (): Promise<boolean> => {\n  try {\n    await import('express-openapi-validator');\n    return true;\n  } catch {\n    return false;\n  }\n};\n","import { type Request, type Response } from 'express';\nimport { ProblemDocument } from 'http-problem-details';\nimport { setETag, type ETag } from './etag';\n\nexport type ErrorToProblemDetailsMapping = (\n  error: Error,\n  request: Request,\n) => ProblemDocument | undefined;\n\nexport type HttpResponseOptions = {\n  body?: unknown;\n  location?: string;\n  eTag?: ETag;\n};\nexport const DefaultHttpResponseOptions: HttpResponseOptions = {};\n\nexport type HttpProblemResponseOptions = {\n  location?: string;\n  eTag?: ETag;\n} & Omit<HttpResponseOptions, 'body'> &\n  (\n    | {\n        problem: ProblemDocument;\n      }\n    | { problemDetails: string }\n  );\nexport const DefaultHttpProblemResponseOptions: HttpProblemResponseOptions = {\n  problemDetails: 'Error occured!',\n};\n\nexport type CreatedHttpResponseOptions = (\n  | {\n      createdId: string;\n    }\n  | {\n      createdId?: string;\n      url: string;\n    }\n) &\n  HttpResponseOptions;\n\nexport const sendCreated = (\n  response: Response,\n  { eTag, ...options }: CreatedHttpResponseOptions,\n): void =>\n  send(response, 201, {\n    location:\n      'url' in options\n        ? options.url\n        : `${response.req.url}/${options.createdId}`,\n    body: 'createdId' in options ? { id: options.createdId } : undefined,\n    eTag,\n  });\n\nexport type AcceptedHttpResponseOptions = {\n  location: string;\n} & HttpResponseOptions;\n\nexport const sendAccepted = (\n  response: Response,\n  options: AcceptedHttpResponseOptions,\n): void => send(response, 202, options);\n\nexport type NoContentHttpResponseOptions = Omit<HttpResponseOptions, 'body'>;\n\nexport const send = (\n  response: Response,\n  statusCode: number,\n  options?: HttpResponseOptions,\n): void => {\n  const { location, body, eTag } = options ?? DefaultHttpResponseOptions;\n  // HEADERS\n  if (eTag) setETag(response, eTag);\n  if (location) response.setHeader('Location', location);\n\n  if (body) {\n    response.statusCode = statusCode;\n    response.send(body);\n  } else {\n    response.sendStatus(statusCode);\n  }\n};\n\nexport const sendProblem = (\n  response: Response,\n  statusCode: number,\n  options?: HttpProblemResponseOptions,\n): void => {\n  options = options ?? DefaultHttpProblemResponseOptions;\n\n  const { location, eTag } = options;\n\n  const problemDetails =\n    'problem' in options\n      ? options.problem\n      : new ProblemDocument({\n          detail: options.problemDetails,\n          status: statusCode,\n        });\n\n  // HEADERS\n  if (eTag) setETag(response, eTag);\n  if (location) response.setHeader('Location', location);\n\n  response.setHeader('Content-Type', 'application/problem+json');\n\n  response.statusCode = statusCode;\n  response.json(problemDetails);\n};\n","import supertest, { type Response } from 'supertest';\n\nimport type { EventStore } from '@event-driven-io/emmett';\nimport assert from 'assert';\nimport type { Application } from 'express';\nimport type { TestRequest } from './apiSpecification';\n\nexport type E2EResponseAssert = (response: Response) => boolean | void;\n\nexport type ApiE2ESpecificationAssert = [E2EResponseAssert];\n\nexport type ApiE2ESpecification = (...givenRequests: TestRequest[]) => {\n  when: (setupRequest: TestRequest) => {\n    then: (verify: ApiE2ESpecificationAssert) => Promise<void>;\n  };\n};\n\nexport const ApiE2ESpecification = {\n  for: <Store extends EventStore = EventStore>(\n    getEventStore: () => Store,\n    getApplication: (eventStore: Store) => Application | Promise<Application>,\n  ): ApiE2ESpecification => {\n    {\n      return (...givenRequests: TestRequest[]) => {\n        const eventStore = getEventStore();\n\n        return {\n          when: (setupRequest: TestRequest) => {\n            const handle = async () => {\n              const application = await Promise.resolve(getApplication(eventStore));\n\n              for (const requestFn of givenRequests) {\n                await requestFn(supertest(application));\n              }\n\n              return setupRequest(supertest(application));\n            };\n\n            return {\n              then: async (\n                verify: ApiE2ESpecificationAssert,\n              ): Promise<void> => {\n                const response = await handle();\n\n                verify.forEach((assertion) => {\n                  const succeeded = assertion(response);\n\n                  if (succeeded === false) assert.fail();\n                });\n              },\n            };\n          },\n        };\n      };\n    }\n  },\n};\n","import {\n  WrapEventStore,\n  assertEqual,\n  assertFails,\n  assertMatches,\n  type Event,\n  type EventStore,\n  type TestEventStream,\n} from '@event-driven-io/emmett';\nimport { type Application } from 'express';\nimport type { ProblemDocument } from 'http-problem-details';\nimport type { Response, Test } from 'supertest';\nimport supertest from 'supertest';\nimport type TestAgent from 'supertest/lib/agent';\n\n////////////////////////////////\n/////////// Setup\n////////////////////////////////\n\nexport type TestRequest = (request: TestAgent<supertest.Test>) => Test;\n\nexport const existingStream = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\n////////////////////////////////\n/////////// Asserts\n////////////////////////////////\n\nexport type ResponseAssert = (response: Response) => boolean | void;\n\nexport type ApiSpecificationAssert<EventType extends Event = Event> =\n  | TestEventStream<EventType>[]\n  | ResponseAssert\n  | [ResponseAssert, ...TestEventStream<EventType>[]];\n\nexport const expect = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\nexport const expectNewEvents = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\nexport const expectResponse =\n  <Body = unknown>(\n    statusCode: number,\n    options?: { body?: Body; headers?: { [index: string]: string } },\n  ) =>\n  (response: Response): void => {\n    const { body, headers } = options ?? {};\n    assertEqual(statusCode, response.statusCode, \"Response code doesn't match\");\n    if (body) assertMatches(response.body, body);\n    if (headers) assertMatches(response.headers, headers);\n  };\n\nexport const expectError = (\n  errorCode: number,\n  problemDetails?: Partial<ProblemDocument>,\n) =>\n  expectResponse(\n    errorCode,\n    problemDetails ? { body: problemDetails } : undefined,\n  );\n\n////////////////////////////////\n/////////// Api Specification\n////////////////////////////////\n\nexport type ApiSpecification<EventType extends Event = Event> = (\n  ...givenStreams: TestEventStream<EventType>[]\n) => {\n  when: (setupRequest: TestRequest) => {\n    then: (verify: ApiSpecificationAssert<EventType>) => Promise<void>;\n  };\n};\n\nexport const ApiSpecification = {\n  for: <\n    EventType extends Event = Event,\n    Store extends EventStore<import('@event-driven-io/emmett').ReadEventMetadataWithGlobalPosition> = EventStore<import('@event-driven-io/emmett').ReadEventMetadataWithGlobalPosition>\n  >(\n    getEventStore: () => Store,\n    getApplication: (eventStore: Store) => Application | Promise<Application>,\n  ): ApiSpecification<EventType> => {\n    {\n      return (...givenStreams: TestEventStream<EventType>[]) => {\n        const eventStore = WrapEventStore(getEventStore());\n\n        return {\n          when: (setupRequest: TestRequest) => {\n            const handle = async () => {\n              const application = await Promise.resolve(getApplication(eventStore));\n\n              for (const [streamName, events] of givenStreams) {\n                await eventStore.setup(streamName, events);\n              }\n\n              return setupRequest(supertest(application));\n            };\n\n            return {\n              then: async (\n                verify: ApiSpecificationAssert<EventType>,\n              ): Promise<void> => {\n                const response = await handle();\n\n                if (typeof verify === 'function') {\n                  const succeeded = verify(response);\n\n                  if (succeeded === false) assertFails();\n                } else if (Array.isArray(verify)) {\n                  const [first, ...rest] = verify;\n\n                  if (typeof first === 'function') {\n                    const succeeded = first(response);\n\n                    if (succeeded === false) assertFails();\n                  }\n\n                  const events = typeof first === 'function' ? rest : verify;\n\n                  assertMatches(\n                    Array.from(eventStore.appendedEvents.values()),\n                    events,\n                  );\n                }\n              },\n            };\n          },\n        };\n      };\n    }\n  },\n};\n"],"mappings":";;;;;AAAA,OAAO;;;ACAP,OAAO;AAAA,EACL;AAAA,OAGK;AACP,OAAO;AACP,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACN9B,SAAS,uBAAuB;AAGzB,IAAM,2BACX,CAAC,aACD,CACE,OACA,SACA,UACA,UACS;AACT,MAAI;AAEJ,MAAI,SAAU,kBAAiB,SAAS,OAAO,OAAO;AAEtD,mBACE,kBAAkB,oCAAoC,KAAK;AAE7D,cAAY,UAAU,eAAe,QAAQ,EAAE,SAAS,eAAe,CAAC;AAC1E;AAEK,IAAM,sCAAsC,CACjD,UACoB;AACpB,MAAI,aAAa;AAGjB,QAAM,SAAS;AACf,QAAM,cAAc,OAAO,QAAQ;AACnC,MACE,OAAO,gBAAgB,YACvB,eAAe,OACf,cAAc,KACd;AACA,iBAAa;AAAA,EACf;AAEA,QAAM,iBAAiB,OAAO,WAAW;AACzC,MACE,OAAO,mBAAmB,YAC1B,kBAAkB,OAClB,iBAAiB,KACjB;AACA,iBAAa;AAAA,EACf;AAEA,SAAO,IAAI,gBAAgB;AAAA,IACzB,QAAQ,MAAM;AAAA,IACd,QAAQ;AAAA,EACV,CAAC;AACH;;;AD2BO,IAAM,iBAAiB,OAAO,YAAgC;AACnE,QAAM,MAAmB,QAAQ;AAEjC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,SAAS,OAAO;AAItB,MAAI,IAAI,QAAQ,4BAA4B,KAAK;AAGjD,MAAI,aAAa,UAAa,aAAa,OAAO;AAChD,QAAI;AACF,YAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,YAAM,MAAMA,SAAQ,WAAW;AAC/B,YAAM,WAAY,IAAI,WAAW;AAEjC,UAAI,OAAO,aAAa,YAAY;AAClC,cAAM,IAAI,MAAM,kDAAkD;AAAA,MACpE;AAEA,YAAMC,WAAU,aAAa,OAAO,SAAY;AAChD,YAAM,aACJ,SACAA,QAAO;AACT,UAAI,IAAI,UAAU;AAAA,IACpB,QAAQ;AACN,cAAQ;AAAA,QACN;AAAA,MAEF;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,CAAC,sBAAuB,KAAI,IAAI,QAAQ,KAAK,CAAC;AAGlD,MAAI,CAAC;AACH,QAAI;AAAA,MACF,QAAQ,WAAW;AAAA,QACjB,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAGF,MAAI,kBAAkB;AAIpB,QAAI,iBAAiB,mBAAmB;AACtC,YAAM,EAAE,oBAAoB,IAAI,MAAM,OACpC,4BACF;AACA,0BAAoB;AAGpB,YAAM,mBACJ,OAAO,iBAAiB,sBAAsB,WAC1C,iBAAiB,oBACjB,iBAAiB,kBAAkB;AAEzC,UAAI,kBAAkB;AACpB,cAAM,EAAE,sBAAsB,IAAI,MAAM,OACtC,8BACF;AACA,cAAM,EAAE,0BAA0B,IAAI,MAAM,OAC1C,gCACF;AAEA,YAAI;AAEF,gBAAM,UAAU,MAAM;AAAA,YACpB,iBAAiB;AAAA,YACjB;AAAA,UACF;AAGA,gBAAM,mBAAmB,MAAM,0BAA0B,OAAO;AAGhE,cAAI,iBAAiB,oBAAoB;AACvC,kBAAM,iBAAiB,mBAAmB,gBAAgB;AAAA,UAC5D;AAAA,QACF,SAAS,OAAO;AACd,kBAAQ,MAAM,0CAA0C,KAAK;AAC7D,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF,OAAO;AAEL,UAAI,iBAAiB,oBAAoB;AACvC,cAAM,iBAAiB,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI;AACF,YAAMD,WAAU,cAAc,YAAY,GAAG;AAE7C,YAAM,MAAMA,SAAQ,2BAA2B;AAI/C,YAAM,WAAY,IAAI,WAAW;AAEjC,UAAI,OAAO,SAAS,eAAe,YAAY;AAC7C,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAGA,UAAI,iBAAiB,WAAW;AAC9B,YAAI,OAAO,iBAAiB,YAAY,UAAU;AAEhD,cAAI;AAAA,YACF,iBAAiB;AAAA,YACjB,QAAQ,OAAO,iBAAiB,OAAO;AAAA,UACzC;AAAA,QACF,OAAO;AAEL,cAAI,IAAI,iBAAiB,WAAW,CAAC,MAAM,QAAQ;AACjD,gBAAI,KAAK,iBAAiB,OAAO;AAAA,UACnC,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,UAAU,SAAS;AAGzB,YAAM,aAAa,QAAQ,gBAAgB;AAC3C,UAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,mBAAW,KAAK,WAAY,KAAI,IAAI,CAAC;AAAA,MACvC,OAAO;AACL,YAAI,IAAI,UAAU;AAAA,MACpB;AAAA,IACF,QAAQ;AACN,cAAQ;AAAA,QACN;AAAA,MAEF;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,MAAM;AACR,eAAW,OAAO,MAAM;AACtB,UAAI,MAAM;AAAA,IACZ;AACA,QAAI,IAAI,MAAM;AAAA,EAChB;AAGA,MAAI,CAAC;AACH,QAAI,IAAI,yBAAyB,QAAQ,CAAC;AAE5C,SAAO;AACT;AAMO,IAAM,WAAW,CACtB,KACA,UAA2B,EAAE,MAAM,IAAK,MACrC;AACH,QAAM,EAAE,KAAK,IAAI;AACjB,QAAM,SAAS,KAAK,aAAa,GAAG;AAEpC,SAAO,GAAG,aAAa,MAAM;AAC3B,YAAQ,KAAK,qBAAqB;AAAA,EACpC,CAAC;AAED,SAAO,OAAO,OAAO,IAAI;AAC3B;;;AEtQO,IAAM,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,cAAc;AAAA,EACd,MAAM;AACR;AAKO,IAAM,gBAAgB;AAEtB,IAAW,aAAX,kBAAWE,gBAAX;AACL,EAAAA,YAAA,4BAAyB;AACzB,EAAAA,YAAA,6BAA0B;AAC1B,EAAAA,YAAA,iCAA8B;AAHd,SAAAA;AAAA,GAAA;AAMX,IAAM,aAAa,CAAC,SAAiC;AAC1D,SAAO,cAAc,KAAK,IAAc;AAC1C;AAEO,IAAM,mBAAmB,CAAC,SAAuB;AACtD,QAAM,SAAS,cAAc,KAAK,IAAc;AAChD,MAAI,WAAW,QAAQ,OAAO,WAAW,GAAG;AAC1C,UAAM,IAAI,MAAM,qDAAiC;AAAA,EACnD;AACA,SAAO,OAAO,CAAC;AACjB;AAEO,IAAM,aAAa,CAAC,UAA8C;AACvE,SAAO,MAAM,KAAK;AACpB;AAEO,IAAM,qBAAqB,CAAC,YAA2B;AAC5D,QAAM,OAAO,QAAQ,QAAQ,YAAY,QAAQ;AAEjD,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI,MAAM,uDAAkC;AAAA,EACpD;AAEA,SAAO;AACT;AAEO,IAAM,wBAAwB,CAAC,YAA2B;AAC/D,QAAM,OAAO,QAAQ,QAAQ,YAAY,YAAY;AAErD,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI,MAAM,uDAAkC;AAAA,EACpD;AAEA,SAAQ,MAAM,QAAQ,IAAI,IAAI,KAAK,CAAC,IAAI;AAC1C;AAEO,IAAM,UAAU,CAAC,UAAoB,SAAqB;AAC/D,WAAS,UAAU,YAAY,MAAM,IAAc;AACrD;AAEO,IAAM,0BAA0B,CAAC,YAA6B;AACnE,QAAM,YAAkB,mBAAmB,OAAO;AAElD,SAAO,WAAW,SAAS,IACvB,iBAAiB,SAAS,IACzB;AACP;;;AClDO,IAAM,KACX,CAA8B,WAC9B,OACE,SACA,UACA,UACkB;AAClB,QAAM,cAAc,MAAM,QAAQ,QAAQ,OAAO,OAAO,CAAC;AAEzD,SAAO,YAAY,QAAQ;AAC7B;AAGK,IAAM,KACX,CAAC,YACD,CAAC,aAAuB;AACtB,OAAK,UAAU,KAAK,OAAO;AAC7B;AAEK,IAAM,UACX,CAAC,YACD,CAAC,aAAuB;AACtB,cAAY,UAAU,OAAO;AAC/B;AAEK,IAAM,WACX,CAAC,YACD,CAAC,aAAuB;AACtB,eAAa,UAAU,OAAO;AAChC;AAEK,IAAM,YAAY,CACvB,YACiB,aAAa,KAAK,OAAO;AAErC,IAAM,eACX,CAAC,YAAoB,YACrB,CAAC,aAAuB;AACtB,OAAK,UAAU,YAAY,OAAO;AACpC;AAMK,IAAM,aAAa,CACxB,YACiB,YAAY,KAAK,OAAO;AAEpC,IAAM,YAAY,CAAC,YACxB,YAAY,KAAK,OAAO;AAEnB,IAAM,WAAW,CAAC,YACvB,YAAY,KAAK,OAAO;AAEnB,IAAM,WAAW,CAAC,YACvB,YAAY,KAAK,OAAO;AAEnB,IAAM,qBAAqB,CAChC,YACiB,YAAY,KAAK,OAAO;AAEpC,IAAM,cACX,CAAC,YAAoB,YACrB,CAAC,aAAuB;AACtB,cAAY,UAAU,YAAY,OAAO;AAC3C;;;ACvDF,IAAM,mBAAmB,YAAyC;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,qCAAqC;AAC9D,UAAM,WAAY,IAA2C,WAAW;AACxE,UAAM,yBACH,SAAqC;AAExC,QAAI,OAAO,2BAA2B,YAAY;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UACJ;AAEF,UAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAe,CAAC;AAAA,EACpD;AACF;AAEA,IAAM,qBAAqB,MAAM;AAC/B,QAAM,MAA+B,CAAC;AACtC,MAAI,SAAS,MAAM;AACnB,MAAI,OAAO,MAAM;AACjB,MAAI,OAAO,MAAM;AACjB,MAAI,MAAM,MAAM;AAChB,MAAI,MAAM,MAAM;AAChB,SAAO;AACT;AAEA,IAAM,gBAAgB,OACpB,YACA,QACqB;AACrB,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,aAAa;AACjB,UAAM,MAAM,mBAAmB;AAC/B,UAAM,OAAO,MAAM;AACjB,mBAAa;AACb,cAAQ,IAAI;AAAA,IACd;AAEA,YAAQ,QAAQ,WAAW,KAAK,KAAK,IAAI,CAAC,EACvC,KAAK,MAAM;AACV,UAAI,CAAC,WAAY,SAAQ,KAAK;AAAA,IAChC,CAAC,EACA,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,EAC/B,CAAC;AACH;AAEO,IAAM,qCAAqC,CAChD,UAAuC,CAAC,MACnB;AACrB,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,QAAM,YAAY,QAAQ,aAAa;AAEvC,SAAO;AAAA,IACL,CAAC,kBAAkB,GAAG,OAAO,KAAK,QAAQ,YAAY;AACpD,YAAM,EAAE,uBAAuB,IAAI,MAAM,iBAAiB;AAC1D,YAAM,aAAa,uBAAuB;AAAA,QACxC,YAAY,QAAQ;AAAA,MACtB,CAAC;AAED,YAAM,kBAAkB,MAAM,cAAc,YAAY,GAAG;AAC3D,UAAI,CAAC,gBAAiB,QAAO;AAE7B,UAAI,CAAC,OAAO,OAAQ,QAAO;AAE3B,YAAM,QAAS,KAA6B,MAAM,QAAQ,SAAS;AACnE,UAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAElC,aAAO,OAAO,MAAM,CAAC,UAAkB,MAAM,SAAS,KAAK,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;;;ACkLO,IAAM,gCAAgC,CAC3C,SACA,YAC4B;AAC5B,SAAO;AAAA,IACL;AAAA,IACA,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C,mBAAmB,SAAS,qBAAqB;AAAA,IACjD,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,mBAAmB,SAAS;AAAA,IAC5B,aAAa,SAAS;AAAA,IACtB,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,YAAY,SAAS;AAAA,IACrB,WAAW,SAAS,aAAa;AAAA,IACjC,cAAc,SAAS;AAAA,IACvB,oBAAoB,SAAS;AAAA,EAC/B;AACF;AAKO,IAAM,8BAA8B,YAA8B;AACvE,MAAI;AACF,UAAM,OAAO,2BAA2B;AACxC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC1TA,SAAS,mBAAAC,wBAAuB;AAazB,IAAM,6BAAkD,CAAC;AAYzD,IAAM,oCAAgE;AAAA,EAC3E,gBAAgB;AAClB;AAaO,IAAM,cAAc,CACzB,UACA,EAAE,MAAM,GAAG,QAAQ,MAEnB,KAAK,UAAU,KAAK;AAAA,EAClB,UACE,SAAS,UACL,QAAQ,MACR,GAAG,SAAS,IAAI,GAAG,IAAI,QAAQ,SAAS;AAAA,EAC9C,MAAM,eAAe,UAAU,EAAE,IAAI,QAAQ,UAAU,IAAI;AAAA,EAC3D;AACF,CAAC;AAMI,IAAM,eAAe,CAC1B,UACA,YACS,KAAK,UAAU,KAAK,OAAO;AAI/B,IAAM,OAAO,CAClB,UACA,YACA,YACS;AACT,QAAM,EAAE,UAAU,MAAM,KAAK,IAAI,WAAW;AAE5C,MAAI,KAAM,SAAQ,UAAU,IAAI;AAChC,MAAI,SAAU,UAAS,UAAU,YAAY,QAAQ;AAErD,MAAI,MAAM;AACR,aAAS,aAAa;AACtB,aAAS,KAAK,IAAI;AAAA,EACpB,OAAO;AACL,aAAS,WAAW,UAAU;AAAA,EAChC;AACF;AAEO,IAAM,cAAc,CACzB,UACA,YACA,YACS;AACT,YAAU,WAAW;AAErB,QAAM,EAAE,UAAU,KAAK,IAAI;AAE3B,QAAM,iBACJ,aAAa,UACT,QAAQ,UACR,IAAIC,iBAAgB;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,QAAQ;AAAA,EACV,CAAC;AAGP,MAAI,KAAM,SAAQ,UAAU,IAAI;AAChC,MAAI,SAAU,UAAS,UAAU,YAAY,QAAQ;AAErD,WAAS,UAAU,gBAAgB,0BAA0B;AAE7D,WAAS,aAAa;AACtB,WAAS,KAAK,cAAc;AAC9B;;;AC5GA,OAAO,eAAkC;AAGzC,OAAO,YAAY;AAcZ,IAAM,sBAAsB;AAAA,EACjC,KAAK,CACH,eACAC,oBACwB;AACxB;AACE,aAAO,IAAI,kBAAiC;AAC1C,cAAM,aAAa,cAAc;AAEjC,eAAO;AAAA,UACL,MAAM,CAAC,iBAA8B;AACnC,kBAAM,SAAS,YAAY;AACzB,oBAAM,cAAc,MAAM,QAAQ,QAAQA,gBAAe,UAAU,CAAC;AAEpE,yBAAW,aAAa,eAAe;AACrC,sBAAM,UAAU,UAAU,WAAW,CAAC;AAAA,cACxC;AAEA,qBAAO,aAAa,UAAU,WAAW,CAAC;AAAA,YAC5C;AAEA,mBAAO;AAAA,cACL,MAAM,OACJ,WACkB;AAClB,sBAAM,WAAW,MAAM,OAAO;AAE9B,uBAAO,QAAQ,CAAC,cAAc;AAC5B,wBAAM,YAAY,UAAU,QAAQ;AAEpC,sBAAI,cAAc,MAAO,QAAO,KAAK;AAAA,gBACvC,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACxDA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAIP,OAAOC,gBAAe;AASf,IAAM,iBAAiB,CAC5B,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAaO,IAAM,SAAS,CACpB,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAEO,IAAM,kBAAkB,CAC7B,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAEO,IAAM,iBACX,CACE,YACA,YAEF,CAAC,aAA6B;AAC5B,QAAM,EAAE,MAAM,QAAQ,IAAI,WAAW,CAAC;AACtC,cAAY,YAAY,SAAS,YAAY,6BAA6B;AAC1E,MAAI,KAAM,eAAc,SAAS,MAAM,IAAI;AAC3C,MAAI,QAAS,eAAc,SAAS,SAAS,OAAO;AACtD;AAEK,IAAM,cAAc,CACzB,WACA,mBAEA;AAAA,EACE;AAAA,EACA,iBAAiB,EAAE,MAAM,eAAe,IAAI;AAC9C;AAcK,IAAM,mBAAmB;AAAA,EAC9B,KAAK,CAIH,eACAC,oBACgC;AAChC;AACE,aAAO,IAAI,iBAA+C;AACxD,cAAM,aAAa,eAAe,cAAc,CAAC;AAEjD,eAAO;AAAA,UACL,MAAM,CAAC,iBAA8B;AACnC,kBAAM,SAAS,YAAY;AACzB,oBAAM,cAAc,MAAM,QAAQ,QAAQA,gBAAe,UAAU,CAAC;AAEpE,yBAAW,CAAC,YAAY,MAAM,KAAK,cAAc;AAC/C,sBAAM,WAAW,MAAM,YAAY,MAAM;AAAA,cAC3C;AAEA,qBAAO,aAAaD,WAAU,WAAW,CAAC;AAAA,YAC5C;AAEA,mBAAO;AAAA,cACL,MAAM,OACJ,WACkB;AAClB,sBAAM,WAAW,MAAM,OAAO;AAE9B,oBAAI,OAAO,WAAW,YAAY;AAChC,wBAAM,YAAY,OAAO,QAAQ;AAEjC,sBAAI,cAAc,MAAO,aAAY;AAAA,gBACvC,WAAW,MAAM,QAAQ,MAAM,GAAG;AAChC,wBAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AAEzB,sBAAI,OAAO,UAAU,YAAY;AAC/B,0BAAM,YAAY,MAAM,QAAQ;AAEhC,wBAAI,cAAc,MAAO,aAAY;AAAA,kBACvC;AAEA,wBAAM,SAAS,OAAO,UAAU,aAAa,OAAO;AAEpD;AAAA,oBACE,MAAM,KAAK,WAAW,eAAe,OAAO,CAAC;AAAA,oBAC7C;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["require","options","ETagErrors","ProblemDocument","ProblemDocument","getApplication","supertest","getApplication"]}
+{"version":3,"sources":["../src/index.ts","../src/application.ts","../src/middlewares/problemDetailsMiddleware.ts","../src/etag.ts","../src/handler.ts","../src/openapi/firebase-auth.ts","../src/openapi/index.ts","../src/responses.ts","../src/testing/apiE2ESpecification.ts","../src/testing/apiSpecification.ts"],"sourcesContent":["import 'express-async-errors';\n\nexport * from './application';\nexport * from './etag';\nexport * from './handler';\nexport * from './observability';\nexport * from './openapi';\nexport * from './responses';\nexport * from './testing';\nexport { registerHandlerModule } from './internal/esm-resolver';\n","import { trace, SpanStatusCode } from '@opentelemetry/api';\nimport express, {\n  Router,\n  type Application,\n  type RequestHandler,\n} from 'express';\nimport 'express-async-errors';\nimport http from 'http';\nimport { createRequire } from 'node:module';\nimport { problemDetailsMiddleware } from './middlewares/problemDetailsMiddleware';\nimport { type Logger, type ObservabilityOptions, safeLog } from './observability';\nimport type { OpenApiValidatorOptions } from './openapi';\nimport type { ErrorToProblemDetailsMapping } from './responses';\n\nconst tracer = trace.getTracer('@emmett-community/emmett-expressjs-with-openapi');\n\n// #region web-api-setup\nexport type WebApiSetup = (router: Router) => void;\n// #endregion web-api-setup\n\n/**\n * Options forwarded to pino-http. Typed loosely to avoid hard dependency.\n *\n * @see https://github.com/pinojs/pino-http\n */\nexport type PinoHttpOptions = Record<string, unknown>;\n\nexport type ApplicationOptions = {\n  apis?: WebApiSetup[];\n  mapError?: ErrorToProblemDetailsMapping;\n  enableDefaultExpressEtag?: boolean;\n  disableJsonMiddleware?: boolean;\n  disableUrlEncodingMiddleware?: boolean;\n  disableProblemDetailsMiddleware?: boolean;\n  /**\n   * Optional Pino HTTP logger configuration.\n   * When true, enables pino-http with defaults.\n   * When an object, forwards the options to pino-http.\n   * Requires the 'pino-http' package to be installed.\n   *\n   * @see https://github.com/pinojs/pino-http\n   * @example\n   * ```typescript\n   * const app = await getApplication({\n   *   pinoHttp: true,\n   * });\n   *\n   * const app = await getApplication({\n   *   pinoHttp: { autoLogging: false },\n   * });\n   * ```\n   */\n  pinoHttp?: boolean | PinoHttpOptions;\n  /**\n   * Optional OpenAPI validator configuration.\n   * When provided, enables request/response validation against an OpenAPI specification.\n   * Requires the 'express-openapi-validator' package to be installed.\n   *\n   * @see https://github.com/cdimascio/express-openapi-validator\n   * @example\n   * ```typescript\n   * import { getApplication, createOpenApiValidatorOptions } from '@event-driven-io/emmett-expressjs';\n   *\n   * type AppDeps = {\n   *   eventStore: EventStore;\n   *   messageBus: EventsPublisher;\n   * };\n   *\n   * const app = await getApplication({\n   *   openApiValidator: createOpenApiValidatorOptions<AppDeps>('./openapi.yaml', {\n   *     validateResponses: true,\n   *     operationHandlers: './handlers',\n   *     initializeHandlers: (deps) => {\n   *       initializeHandlers(deps.eventStore, deps.messageBus);\n   *     }\n   *   })\n   * });\n   * ```\n   */\n  openApiValidator?: OpenApiValidatorOptions;\n  /**\n   * Optional observability configuration for logging.\n   * When not provided, the library operates silently (no logs).\n   *\n   * @example\n   * ```typescript\n   * import pino from 'pino';\n   *\n   * const logger = pino();\n   *\n   * const app = await getApplication({\n   *   observability: { logger },\n   * });\n   * ```\n   */\n  observability?: ObservabilityOptions;\n};\n\nexport const getApplication = async (options: ApplicationOptions) => {\n  const app: Application = express();\n\n  const {\n    apis,\n    mapError,\n    enableDefaultExpressEtag,\n    disableJsonMiddleware,\n    disableUrlEncodingMiddleware,\n    disableProblemDetailsMiddleware,\n    pinoHttp,\n    openApiValidator,\n    observability,\n  } = options;\n\n  const logger = observability?.logger;\n\n  safeLog.debug(logger, 'Initializing Express application', {\n    hasApis: !!apis?.length,\n    hasOpenApiValidator: !!openApiValidator,\n    hasPinoHttp: !!pinoHttp,\n  });\n\n  const router = Router();\n\n  // disabling default etag behaviour\n  // to use etags in if-match and if-not-match headers\n  app.set('etag', enableDefaultExpressEtag ?? false);\n\n  // add Pino HTTP logger middleware if configured\n  if (pinoHttp !== undefined && pinoHttp !== false) {\n    try {\n      const require = createRequire(import.meta.url);\n      const mod = require('pino-http') as Record<string, unknown>;\n      const provider = (mod.default ?? mod) as unknown;\n\n      if (typeof provider !== 'function') {\n        throw new Error('Invalid pino-http module: missing default export');\n      }\n\n      const options = pinoHttp === true ? undefined : pinoHttp;\n      const middleware = (\n        provider as (opts?: PinoHttpOptions) => RequestHandler\n      )(options);\n      app.use(middleware);\n    } catch (error) {\n      safeLog.warn(\n        logger,\n        'Pino HTTP configuration provided but pino-http package is not installed. Install it with: npm install pino-http',\n      );\n      throw new Error(\n        'pino-http package is required when pinoHttp option is used',\n      );\n    }\n  }\n\n  // add json middleware\n  if (!disableJsonMiddleware) app.use(express.json());\n\n  // enable url encoded urls and bodies\n  if (!disableUrlEncodingMiddleware)\n    app.use(\n      express.urlencoded({\n        extended: true,\n      }),\n    );\n\n  // add OpenAPI validator middleware if configured\n  if (openApiValidator) {\n    // Activate ESM resolver if operationHandlers are configured\n    // This ensures handler modules are loaded via ESM import() instead of CJS require(),\n    // preventing dual module loading issues when using TypeScript runtimes (tsx, ts-node)\n    if (openApiValidator.operationHandlers) {\n      const { activateESMResolver } = await import(\n        './internal/esm-resolver.js'\n      );\n      activateESMResolver();\n\n      // NEW: Auto-discover and import handler modules from OpenAPI spec\n      const handlersBasePath =\n        typeof openApiValidator.operationHandlers === 'string'\n          ? openApiValidator.operationHandlers\n          : openApiValidator.operationHandlers.basePath;\n\n      if (handlersBasePath) {\n        const { extractHandlerModules } = await import(\n          './internal/openapi-parser.js'\n        );\n        const { importAndRegisterHandlers } = await import(\n          './internal/handler-importer.js'\n        );\n\n        // Parse OpenAPI spec to find handler modules\n        const modules = await tracer.startActiveSpan(\n          'emmett.openapi.parse_spec',\n          async (span) => {\n            try {\n              const result = await extractHandlerModules(\n                openApiValidator.apiSpec,\n                handlersBasePath,\n                logger,\n              );\n              span.setAttribute('emmett.handlers.count', result.length);\n              span.setStatus({ code: SpanStatusCode.OK });\n              return result;\n            } catch (error) {\n              span.recordException(error as Error);\n              span.setStatus({ code: SpanStatusCode.ERROR });\n              throw error;\n            } finally {\n              span.end();\n            }\n          },\n        );\n\n        // Dynamically import and register all handler modules\n        const importedHandlers = await tracer.startActiveSpan(\n          'emmett.http.import_handlers',\n          async (span) => {\n            try {\n              const result = await importAndRegisterHandlers(modules, logger);\n              span.setAttribute(\n                'emmett.handlers.count',\n                Object.keys(result).length,\n              );\n              span.setStatus({ code: SpanStatusCode.OK });\n              return result;\n            } catch (error) {\n              safeLog.error(logger, 'Failed to auto-import handler modules', error);\n              span.recordException(error as Error);\n              span.setStatus({ code: SpanStatusCode.ERROR });\n              throw error;\n            } finally {\n              span.end();\n            }\n          },\n        );\n\n        // Call user's initializeHandlers callback with imported modules\n        if (openApiValidator.initializeHandlers) {\n          await openApiValidator.initializeHandlers(importedHandlers);\n        }\n      }\n    } else {\n      // No operationHandlers, just call initializeHandlers if provided\n      if (openApiValidator.initializeHandlers) {\n        await openApiValidator.initializeHandlers();\n      }\n    }\n\n    try {\n      const require = createRequire(import.meta.url);\n      // express-openapi-validator exports a default with .middleware (ESM/CJS compatibility)\n      const mod = require('express-openapi-validator') as Record<\n        string,\n        unknown\n      >;\n      const provider = (mod.default ?? mod) as Record<string, unknown>;\n\n      if (typeof provider.middleware !== 'function') {\n        throw new Error(\n          'Invalid express-openapi-validator module: missing middleware export',\n        );\n      }\n\n      // Serve OpenAPI spec if configured\n      if (openApiValidator.serveSpec) {\n        if (typeof openApiValidator.apiSpec === 'string') {\n          // If apiSpec is a file path, serve it as a static file\n          app.use(\n            openApiValidator.serveSpec,\n            express.static(openApiValidator.apiSpec),\n          );\n        } else {\n          // If apiSpec is an object, serve it as JSON\n          app.get(openApiValidator.serveSpec, (_req, res) => {\n            res.json(openApiValidator.apiSpec);\n          });\n        }\n      }\n\n      const factory = provider.middleware as (\n        opts: OpenApiValidatorOptions,\n      ) => RequestHandler | RequestHandler[];\n      const middleware = factory(openApiValidator);\n      if (Array.isArray(middleware)) {\n        for (const m of middleware) app.use(m);\n      } else {\n        app.use(middleware);\n      }\n    } catch (error) {\n      safeLog.warn(\n        logger,\n        'OpenAPI validator configuration provided but express-openapi-validator package is not installed. Install it with: npm install express-openapi-validator',\n      );\n      throw new Error(\n        'express-openapi-validator package is required when openApiValidator option is used',\n      );\n    }\n  }\n\n  // Register API routes if provided\n  if (apis) {\n    for (const api of apis) {\n      api(router);\n    }\n    app.use(router);\n  }\n\n  // add problem details middleware\n  if (!disableProblemDetailsMiddleware)\n    app.use(problemDetailsMiddleware(mapError, logger));\n\n  safeLog.info(logger, 'Express application initialized');\n\n  return app;\n};\n\nexport type StartApiOptions = {\n  port?: number;\n  /**\n   * Optional logger for lifecycle events.\n   */\n  logger?: Logger;\n};\n\nexport const startAPI = (\n  app: Application,\n  options: StartApiOptions = { port: 3000 },\n) => {\n  const { port, logger } = options;\n  const server = http.createServer(app);\n\n  server.on('listening', () => {\n    safeLog.info(logger, 'Server up listening', { port });\n  });\n\n  return server.listen(port);\n};\n","import type { NextFunction, Request, Response } from 'express';\nimport { ProblemDocument } from 'http-problem-details';\nimport { sendProblem, type ErrorToProblemDetailsMapping } from '..';\nimport { type Logger, safeLog } from '../observability';\n\nexport const problemDetailsMiddleware =\n  (mapError?: ErrorToProblemDetailsMapping, logger?: Logger) =>\n  (\n    error: Error,\n    request: Request,\n    response: Response,\n    _next: NextFunction,\n  ): void => {\n    safeLog.error(logger, 'Request error', error);\n\n    let problemDetails: ProblemDocument | undefined;\n\n    if (mapError) problemDetails = mapError(error, request);\n\n    problemDetails =\n      problemDetails ?? defaultErrorToProblemDetailsMapping(error);\n\n    sendProblem(response, problemDetails.status, { problem: problemDetails });\n  };\n\nexport const defaultErrorToProblemDetailsMapping = (\n  error: Error,\n): ProblemDocument => {\n  let statusCode = 500;\n\n  // Prefer standard `status` code if present (e.g., express-openapi-validator)\n  const errObj = error as unknown as Record<string, unknown>;\n  const maybeStatus = errObj['status'];\n  if (\n    typeof maybeStatus === 'number' &&\n    maybeStatus >= 100 &&\n    maybeStatus < 600\n  ) {\n    statusCode = maybeStatus;\n  }\n\n  const maybeErrorCode = errObj['errorCode'];\n  if (\n    typeof maybeErrorCode === 'number' &&\n    maybeErrorCode >= 100 &&\n    maybeErrorCode < 600\n  ) {\n    statusCode = maybeErrorCode;\n  }\n\n  return new ProblemDocument({\n    detail: error.message,\n    status: statusCode,\n  });\n};\n","import { type Brand } from '@event-driven-io/emmett';\nimport type { Request, Response } from 'express';\n\n//////////////////////////////////////\n/// ETAG\n//////////////////////////////////////\n\nexport const HeaderNames = {\n  IF_MATCH: 'if-match',\n  IF_NOT_MATCH: 'if-not-match',\n  ETag: 'etag',\n};\n\nexport type WeakETag = Brand<`W/${string}`, 'ETag'>;\nexport type ETag = Brand<string, 'ETag'>;\n\nexport const WeakETagRegex = /W\\/\"(-?\\d+.*)\"/;\n\nexport const enum ETagErrors {\n  WRONG_WEAK_ETAG_FORMAT = 'WRONG_WEAK_ETAG_FORMAT',\n  MISSING_IF_MATCH_HEADER = 'MISSING_IF_MATCH_HEADER',\n  MISSING_IF_NOT_MATCH_HEADER = 'MISSING_IF_NOT_MATCH_HEADER',\n}\n\nexport const isWeakETag = (etag: ETag): etag is WeakETag => {\n  return WeakETagRegex.test(etag as string);\n};\n\nexport const getWeakETagValue = (etag: ETag): string => {\n  const result = WeakETagRegex.exec(etag as string);\n  if (result === null || result.length === 0) {\n    throw new Error(ETagErrors.WRONG_WEAK_ETAG_FORMAT);\n  }\n  return result[1]!;\n};\n\nexport const toWeakETag = (value: number | bigint | string): WeakETag => {\n  return `W/\"${value}\"` as WeakETag;\n};\n\nexport const getETagFromIfMatch = (request: Request): ETag => {\n  const etag = request.headers[HeaderNames.IF_MATCH];\n\n  if (etag === undefined) {\n    throw new Error(ETagErrors.MISSING_IF_MATCH_HEADER);\n  }\n\n  return etag as ETag;\n};\n\nexport const getETagFromIfNotMatch = (request: Request): ETag => {\n  const etag = request.headers[HeaderNames.IF_NOT_MATCH];\n\n  if (etag === undefined) {\n    throw new Error(ETagErrors.MISSING_IF_MATCH_HEADER);\n  }\n\n  return (Array.isArray(etag) ? etag[0] : etag) as ETag;\n};\n\nexport const setETag = (response: Response, etag: ETag): void => {\n  response.setHeader(HeaderNames.ETag, etag as string);\n};\n\nexport const getETagValueFromIfMatch = (request: Request): string => {\n  const eTagValue: ETag = getETagFromIfMatch(request);\n\n  return isWeakETag(eTagValue)\n    ? getWeakETagValue(eTagValue)\n    : (eTagValue as string);\n};\n","import { trace, SpanStatusCode } from '@opentelemetry/api';\nimport { type NextFunction, type Request, type Response } from 'express';\nimport {\n  send,\n  sendAccepted,\n  sendCreated,\n  sendProblem,\n  type AcceptedHttpResponseOptions,\n  type CreatedHttpResponseOptions,\n  type HttpProblemResponseOptions,\n  type HttpResponseOptions,\n  type NoContentHttpResponseOptions,\n} from '.';\n\nconst tracer = trace.getTracer('@emmett-community/emmett-expressjs-with-openapi');\n\n// #region httpresponse-on\nexport type HttpResponse = (response: Response) => void;\n\nexport type HttpHandler<RequestType extends Request> = (\n  request: RequestType,\n) => Promise<HttpResponse> | HttpResponse;\n\nexport const on =\n  <RequestType extends Request>(handle: HttpHandler<RequestType>) =>\n  async (\n    request: RequestType,\n    response: Response,\n    _next: NextFunction,\n  ): Promise<void> => {\n    const setResponse = await Promise.resolve(handle(request));\n\n    return setResponse(response);\n  };\n// #endregion httpresponse-on\n\n/**\n * Options for the traced handler wrapper.\n */\nexport type TracedHandlerOptions = {\n  /**\n   * Custom span name. Defaults to 'emmett.http.handle_request'.\n   */\n  spanName?: string;\n};\n\n/**\n * Wraps an HTTP handler with OpenTelemetry tracing.\n * Creates a span that captures request method, route, and response status.\n *\n * If OpenTelemetry is not initialized by the application, spans are no-ops\n * with zero overhead.\n *\n * @example\n * ```typescript\n * router.post('/carts', tracedOn(async (req) => {\n *   // Your handler logic\n *   return Created({ createdId: cartId });\n * }));\n * ```\n */\nexport const tracedOn =\n  <RequestType extends Request>(\n    handle: HttpHandler<RequestType>,\n    options?: TracedHandlerOptions,\n  ) =>\n  async (\n    request: RequestType,\n    response: Response,\n    _next: NextFunction,\n  ): Promise<void> => {\n    const spanName = options?.spanName ?? 'emmett.http.handle_request';\n\n    return tracer.startActiveSpan(spanName, async (span) => {\n      try {\n        span.setAttribute('http.method', request.method);\n\n        const route =\n          (request.baseUrl ?? '') +\n          ((request.route as { path?: string })?.path ?? request.path);\n        span.setAttribute('http.route', route);\n\n        const setResponse = await Promise.resolve(handle(request));\n        setResponse(response);\n\n        span.setAttribute('http.status_code', response.statusCode);\n        span.setStatus({\n          code:\n            response.statusCode >= 400 ? SpanStatusCode.ERROR : SpanStatusCode.OK,\n        });\n      } catch (error) {\n        span.recordException(error as Error);\n        span.setStatus({ code: SpanStatusCode.ERROR });\n        throw error;\n      } finally {\n        span.end();\n      }\n    });\n  };\n\nexport const OK =\n  (options?: HttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    send(response, 200, options);\n  };\n\nexport const Created =\n  (options: CreatedHttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendCreated(response, options);\n  };\n\nexport const Accepted =\n  (options: AcceptedHttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendAccepted(response, options);\n  };\n\nexport const NoContent = (\n  options?: NoContentHttpResponseOptions,\n): HttpResponse => HttpResponse(204, options);\n\nexport const HttpResponse =\n  (statusCode: number, options?: HttpResponseOptions): HttpResponse =>\n  (response: Response) => {\n    send(response, statusCode, options);\n  };\n\n/////////////////////\n// ERRORS\n/////////////////////\n\nexport const BadRequest = (\n  options?: HttpProblemResponseOptions,\n): HttpResponse => HttpProblem(400, options);\n\nexport const Forbidden = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(403, options);\n\nexport const NotFound = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(404, options);\n\nexport const Conflict = (options?: HttpProblemResponseOptions): HttpResponse =>\n  HttpProblem(409, options);\n\nexport const PreconditionFailed = (\n  options: HttpProblemResponseOptions,\n): HttpResponse => HttpProblem(412, options);\n\nexport const HttpProblem =\n  (statusCode: number, options?: HttpProblemResponseOptions): HttpResponse =>\n  (response: Response) => {\n    sendProblem(response, statusCode, options);\n  };\n","import type { SecurityHandlers } from './index';\n\ntype AuthClient = {\n  verifyIdToken: (token: string) => Promise<unknown>;\n};\n\nexport type FirebaseAuthSecurityOptions = {\n  /**\n   * Name of the OpenAPI security scheme to attach the handler to.\n   * Defaults to \"bearerAuth\".\n   */\n  securitySchemeName?: string;\n  /**\n   * Custom auth client for tests or alternate Firebase auth instances.\n   */\n  authClient?: AuthClient;\n  /**\n   * Token claim used for role-based checks when scopes are defined.\n   * Defaults to \"roles\".\n   */\n  roleClaim?: string;\n};\n\ntype FirebaseAuthModule = {\n  firebaseAuthMiddleware: (options?: { authClient?: AuthClient }) => (\n    req: unknown,\n    res: unknown,\n    next: () => void,\n  ) => Promise<void> | void;\n};\n\nconst loadFirebaseAuth = async (): Promise<FirebaseAuthModule> => {\n  try {\n    const mod = await import('@my-f-startup/firebase-auth-express');\n    const provider = (mod as unknown as Record<string, unknown>).default ?? mod;\n    const firebaseAuthMiddleware =\n      (provider as Record<string, unknown>).firebaseAuthMiddleware;\n\n    if (typeof firebaseAuthMiddleware !== 'function') {\n      throw new Error(\n        'Invalid @my-f-startup/firebase-auth-express module: missing firebaseAuthMiddleware export',\n      );\n    }\n\n    return provider as FirebaseAuthModule;\n  } catch (error) {\n    const message =\n      '@my-f-startup/firebase-auth-express is required for createFirebaseAuthSecurityHandlers. ' +\n      'Install it with: npm install @my-f-startup/firebase-auth-express';\n    throw new Error(message, { cause: error as Error });\n  }\n};\n\nconst createNullResponse = () => {\n  const res: Record<string, unknown> = {};\n  res.status = () => res;\n  res.json = () => res;\n  res.send = () => res;\n  res.end = () => res;\n  res.set = () => res;\n  return res;\n};\n\nconst runMiddleware = async (\n  middleware: (req: unknown, res: unknown, next: () => void) => Promise<void> | void,\n  req: unknown,\n): Promise<boolean> => {\n  return new Promise((resolve) => {\n    let nextCalled = false;\n    const res = createNullResponse();\n    const next = () => {\n      nextCalled = true;\n      resolve(true);\n    };\n\n    Promise.resolve(middleware(req, res, next))\n      .then(() => {\n        if (!nextCalled) resolve(false);\n      })\n      .catch(() => resolve(false));\n  });\n};\n\nexport const createFirebaseAuthSecurityHandlers = (\n  options: FirebaseAuthSecurityOptions = {},\n): SecurityHandlers => {\n  const securitySchemeName = options.securitySchemeName ?? 'bearerAuth';\n  const roleClaim = options.roleClaim ?? 'roles';\n\n  return {\n    [securitySchemeName]: async (req, scopes, _schema) => {\n      const { firebaseAuthMiddleware } = await loadFirebaseAuth();\n      const middleware = firebaseAuthMiddleware({\n        authClient: options.authClient,\n      });\n\n      const isAuthenticated = await runMiddleware(middleware, req);\n      if (!isAuthenticated) return false;\n\n      if (!scopes.length) return true;\n\n      const roles = (req as Record<string, any>)?.auth?.token?.[roleClaim];\n      if (!Array.isArray(roles)) return false;\n\n      return scopes.every((scope: string) => roles.includes(scope));\n    },\n  };\n};\n","/**\n * OpenAPI v3 Document type (to avoid requiring express-openapi-validator types directly)\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type OpenAPIV3Document = any;\n\n/**\n * Imported handler modules, keyed by module name.\n * Automatically populated by the framework when operationHandlers is configured.\n */\nexport type ImportedHandlerModules = Record<string, any>;\n\n/**\n * Security handlers for custom authentication/authorization logic.\n * Maps security scheme names to handler functions.\n *\n * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-security/\n */\n\nexport type SecurityHandlers = Record<\n  string,\n  (req: any, scopes: string[], schema: any) => boolean | Promise<boolean>\n>;\n\nexport * from './firebase-auth';\n\n/**\n * Configuration options for express-openapi-validator middleware.\n * This allows optional validation of API requests and responses against an OpenAPI specification.\n *\n * @see https://cdimascio.github.io/express-openapi-validator-documentation/\n */\nexport type OpenApiValidatorOptions = {\n  /**\n   * Path to the OpenAPI specification file (JSON or YAML)\n   * or an OpenAPI specification object.\n   */\n  apiSpec: string | OpenAPIV3Document;\n\n  /**\n   * Determines whether the validator should validate requests.\n   * Can be a boolean or an object with detailed request validation options.\n   * @default true\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-requests/\n   */\n  validateRequests?:\n    | boolean\n    | {\n        /**\n         * Allow unknown query parameters (not defined in the spec).\n         * @default false\n         */\n        allowUnknownQueryParameters?: boolean;\n        /**\n         * Coerce types in request parameters.\n         * @default true\n         */\n        coerceTypes?: boolean | 'array';\n        /**\n         * Remove additional properties not defined in the spec.\n         * @default false\n         */\n        removeAdditional?: boolean | 'all' | 'failing';\n      };\n\n  /**\n   * Determines whether the validator should validate responses.\n   * Can be a boolean or an object with detailed response validation options.\n   * @default false\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-responses/\n   */\n  validateResponses?:\n    | boolean\n    | {\n        /**\n         * Remove additional properties from responses not defined in the spec.\n         * @default false\n         */\n        removeAdditional?: boolean | 'all' | 'failing';\n        /**\n         * Coerce types in responses.\n         * @default true\n         */\n        coerceTypes?: boolean;\n        /**\n         * Callback to handle response validation errors.\n         */\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        onError?: (error: any, body: any, req: any) => void;\n      };\n\n  /**\n   * Determines whether the validator should validate security.\n   * Can be a boolean or an object with security handlers.\n   * @default true\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-validate-security/\n   */\n  validateSecurity?:\n    | boolean\n    | {\n        /**\n         * Custom security handlers for authentication/authorization.\n         */\n        handlers?: SecurityHandlers;\n      };\n\n  /**\n   * Defines how the validator should validate formats.\n   * When true, uses ajv-formats for format validation.\n   * When false, format validation is disabled.\n   * Can also be 'fast' or 'full' for different validation modes.\n   * @default true\n   */\n  validateFormats?: boolean | 'fast' | 'full';\n\n  /**\n   * The base path to the operation handlers directory.\n   * When set to a path, automatically wires OpenAPI operations to handler functions\n   * based on operationId or x-eov-operation-id.\n   * When false, operation handlers are disabled (manual routing required).\n   * @default false\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/guide-operation-handlers/\n   */\n  operationHandlers?:\n    | string\n    | false\n    | {\n        /**\n         * Base path to operation handlers directory.\n         */\n        basePath?: string;\n        /**\n         * Resolver function to map operationId to handler module path.\n         */\n        resolver?: (\n          handlersPath: string,\n          route: string,\n          apiDoc: OpenAPIV3Document,\n        ) => string;\n      };\n\n  /**\n   * Paths or pattern to ignore during validation.\n   * @default undefined\n   */\n  ignorePaths?: RegExp | ((path: string) => boolean);\n\n  /**\n   * Validate the OpenAPI specification itself.\n   * @default true\n   */\n  validateApiSpec?: boolean;\n\n  /**\n   * $ref parser configuration for handling OpenAPI references.\n   * @default undefined\n   */\n  $refParser?: {\n    mode: 'bundle' | 'dereference';\n  };\n\n  /**\n   * Serve the OpenAPI specification at a specific path.\n   * When set to a string, the spec will be served at that path.\n   * When false, the spec will not be served.\n   * @default false\n   * @example '/api-docs/openapi.json'\n   */\n  serveSpec?: string | false;\n\n  /**\n   * File upload configuration options.\n   * @see https://cdimascio.github.io/express-openapi-validator-documentation/usage-file-uploads/\n   */\n  fileUploader?:\n    | boolean\n    | {\n        /**\n         * Destination directory for uploaded files.\n         */\n        dest?: string;\n        /**\n         * File size limit in bytes.\n         */\n        limits?: {\n          fileSize?: number;\n          files?: number;\n        };\n      };\n\n  /**\n   * Optional callback to initialize operation handlers with dependencies.\n   * Called before the OpenAPI validator middleware is configured.\n   *\n   * The framework automatically imports handler modules referenced in your\n   * OpenAPI spec (via x-eov-operation-handler) and passes them as the first parameter.\n   *\n   * @param handlers - Auto-imported handler modules, keyed by module name\n   * @returns void or a Promise that resolves when initialization is complete\n   *\n   * @example\n   * ```typescript\n   * // With automatic import (recommended)\n   * initializeHandlers: async (handlers) => {\n   *   handlers.shoppingCarts.initializeHandlers(eventStore, messageBus, getUnitPrice, getCurrentTime);\n   * }\n   *\n   * // Manual import (still supported for backward compatibility)\n   * import * as handlersModule from './handlers/shoppingCarts';\n   * import { registerHandlerModule } from '@emmett-community/emmett-expressjs-with-openapi';\n   * initializeHandlers: () => {\n   *   const handlersPath = path.join(__dirname, './handlers/shoppingCarts');\n   *   registerHandlerModule(handlersPath, handlersModule);\n   *   handlersModule.initializeHandlers(eventStore, messageBus, getUnitPrice, getCurrentTime);\n   * }\n   * ```\n   */\n  initializeHandlers?: (\n    handlers?: ImportedHandlerModules,\n  ) => void | Promise<void>;\n};\n\n/**\n * Helper function to create OpenAPI validator configuration with sensible defaults.\n *\n * @param apiSpec - Path to OpenAPI spec file or OpenAPI document object\n * @param options - Additional validator options\n * @returns Complete OpenApiValidatorOptions configuration\n *\n * @example\n * ```typescript\n * // Basic usage with default options\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml');\n *\n * // With response validation enabled\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   validateResponses: true\n * });\n *\n * // With custom security handlers\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   validateSecurity: {\n *     handlers: {\n *       bearerAuth: async (req, scopes) => {\n *         // Custom authentication logic\n *         return true;\n *       }\n *     }\n *   }\n * });\n *\n * // Serving the spec at /api-docs\n * const validatorOptions = createOpenApiValidatorOptions('./openapi.yaml', {\n *   serveSpec: '/api-docs/openapi.json'\n * });\n *\n * // With dependency injection for operation handlers\n * type ShoppingCartDeps = {\n *   eventStore: EventStore;\n *   messageBus: EventsPublisher;\n *   getUnitPrice: (productId: string) => Promise<number>;\n *   getCurrentTime: () => Date;\n * };\n *\n * const validatorOptions = createOpenApiValidatorOptions<ShoppingCartDeps>(\n *   './openapi.yaml',\n *   {\n *     operationHandlers: './handlers',\n *     initializeHandlers: (deps) => {\n *       initializeHandlers(\n *         deps.eventStore,\n *         deps.messageBus,\n *         deps.getUnitPrice,\n *         deps.getCurrentTime\n *       );\n *     }\n *   }\n * );\n *\n * const app = getApplication({\n *   apis: [myApi],\n *   openApiValidator: validatorOptions\n * });\n * ```\n */\nexport const createOpenApiValidatorOptions = (\n  apiSpec: string | OpenAPIV3Document,\n  options?: Partial<Omit<OpenApiValidatorOptions, 'apiSpec'>>,\n): OpenApiValidatorOptions => {\n  return {\n    apiSpec,\n    validateRequests: options?.validateRequests ?? true,\n    validateResponses: options?.validateResponses ?? false,\n    validateSecurity: options?.validateSecurity ?? true,\n    validateFormats: options?.validateFormats ?? true,\n    operationHandlers: options?.operationHandlers,\n    ignorePaths: options?.ignorePaths,\n    validateApiSpec: options?.validateApiSpec ?? true,\n    $refParser: options?.$refParser,\n    serveSpec: options?.serveSpec ?? false,\n    fileUploader: options?.fileUploader,\n    initializeHandlers: options?.initializeHandlers,\n  };\n};\n\n/**\n * Type guard to check if express-openapi-validator is available\n */\nexport const isOpenApiValidatorAvailable = async (): Promise<boolean> => {\n  try {\n    await import('express-openapi-validator');\n    return true;\n  } catch {\n    return false;\n  }\n};\n","import { type Request, type Response } from 'express';\nimport { ProblemDocument } from 'http-problem-details';\nimport { setETag, type ETag } from './etag';\n\nexport type ErrorToProblemDetailsMapping = (\n  error: Error,\n  request: Request,\n) => ProblemDocument | undefined;\n\nexport type HttpResponseOptions = {\n  body?: unknown;\n  location?: string;\n  eTag?: ETag;\n};\nexport const DefaultHttpResponseOptions: HttpResponseOptions = {};\n\nexport type HttpProblemResponseOptions = {\n  location?: string;\n  eTag?: ETag;\n} & Omit<HttpResponseOptions, 'body'> &\n  (\n    | {\n        problem: ProblemDocument;\n      }\n    | { problemDetails: string }\n  );\nexport const DefaultHttpProblemResponseOptions: HttpProblemResponseOptions = {\n  problemDetails: 'Error occured!',\n};\n\nexport type CreatedHttpResponseOptions = (\n  | {\n      createdId: string;\n    }\n  | {\n      createdId?: string;\n      url: string;\n    }\n) &\n  HttpResponseOptions;\n\nexport const sendCreated = (\n  response: Response,\n  { eTag, ...options }: CreatedHttpResponseOptions,\n): void =>\n  send(response, 201, {\n    location:\n      'url' in options\n        ? options.url\n        : `${response.req.url}/${options.createdId}`,\n    body: 'createdId' in options ? { id: options.createdId } : undefined,\n    eTag,\n  });\n\nexport type AcceptedHttpResponseOptions = {\n  location: string;\n} & HttpResponseOptions;\n\nexport const sendAccepted = (\n  response: Response,\n  options: AcceptedHttpResponseOptions,\n): void => send(response, 202, options);\n\nexport type NoContentHttpResponseOptions = Omit<HttpResponseOptions, 'body'>;\n\nexport const send = (\n  response: Response,\n  statusCode: number,\n  options?: HttpResponseOptions,\n): void => {\n  const { location, body, eTag } = options ?? DefaultHttpResponseOptions;\n  // HEADERS\n  if (eTag) setETag(response, eTag);\n  if (location) response.setHeader('Location', location);\n\n  if (body) {\n    response.statusCode = statusCode;\n    response.send(body);\n  } else {\n    response.sendStatus(statusCode);\n  }\n};\n\nexport const sendProblem = (\n  response: Response,\n  statusCode: number,\n  options?: HttpProblemResponseOptions,\n): void => {\n  options = options ?? DefaultHttpProblemResponseOptions;\n\n  const { location, eTag } = options;\n\n  const problemDetails =\n    'problem' in options\n      ? options.problem\n      : new ProblemDocument({\n          detail: options.problemDetails,\n          status: statusCode,\n        });\n\n  // HEADERS\n  if (eTag) setETag(response, eTag);\n  if (location) response.setHeader('Location', location);\n\n  response.setHeader('Content-Type', 'application/problem+json');\n\n  response.statusCode = statusCode;\n  response.json(problemDetails);\n};\n","import supertest, { type Response } from 'supertest';\n\nimport type { EventStore } from '@event-driven-io/emmett';\nimport assert from 'assert';\nimport type { Application } from 'express';\nimport type { TestRequest } from './apiSpecification';\n\nexport type E2EResponseAssert = (response: Response) => boolean | void;\n\nexport type ApiE2ESpecificationAssert = [E2EResponseAssert];\n\nexport type ApiE2ESpecification = (...givenRequests: TestRequest[]) => {\n  when: (setupRequest: TestRequest) => {\n    then: (verify: ApiE2ESpecificationAssert) => Promise<void>;\n  };\n};\n\nexport const ApiE2ESpecification = {\n  for: <Store extends EventStore = EventStore>(\n    getEventStore: () => Store,\n    getApplication: (eventStore: Store) => Application | Promise<Application>,\n  ): ApiE2ESpecification => {\n    {\n      return (...givenRequests: TestRequest[]) => {\n        const eventStore = getEventStore();\n\n        return {\n          when: (setupRequest: TestRequest) => {\n            const handle = async () => {\n              const application = await Promise.resolve(getApplication(eventStore));\n\n              for (const requestFn of givenRequests) {\n                await requestFn(supertest(application));\n              }\n\n              return setupRequest(supertest(application));\n            };\n\n            return {\n              then: async (\n                verify: ApiE2ESpecificationAssert,\n              ): Promise<void> => {\n                const response = await handle();\n\n                verify.forEach((assertion) => {\n                  const succeeded = assertion(response);\n\n                  if (succeeded === false) assert.fail();\n                });\n              },\n            };\n          },\n        };\n      };\n    }\n  },\n};\n","import {\n  WrapEventStore,\n  assertEqual,\n  assertFails,\n  assertMatches,\n  type Event,\n  type EventStore,\n  type TestEventStream,\n} from '@event-driven-io/emmett';\nimport { type Application } from 'express';\nimport type { ProblemDocument } from 'http-problem-details';\nimport type { Response, Test } from 'supertest';\nimport supertest from 'supertest';\nimport type TestAgent from 'supertest/lib/agent';\n\n////////////////////////////////\n/////////// Setup\n////////////////////////////////\n\nexport type TestRequest = (request: TestAgent<supertest.Test>) => Test;\n\nexport const existingStream = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\n////////////////////////////////\n/////////// Asserts\n////////////////////////////////\n\nexport type ResponseAssert = (response: Response) => boolean | void;\n\nexport type ApiSpecificationAssert<EventType extends Event = Event> =\n  | TestEventStream<EventType>[]\n  | ResponseAssert\n  | [ResponseAssert, ...TestEventStream<EventType>[]];\n\nexport const expect = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\nexport const expectNewEvents = <EventType extends Event = Event>(\n  streamId: string,\n  events: EventType[],\n): TestEventStream<EventType> => {\n  return [streamId, events];\n};\n\nexport const expectResponse =\n  <Body = unknown>(\n    statusCode: number,\n    options?: { body?: Body; headers?: { [index: string]: string } },\n  ) =>\n  (response: Response): void => {\n    const { body, headers } = options ?? {};\n    assertEqual(statusCode, response.statusCode, \"Response code doesn't match\");\n    if (body) assertMatches(response.body, body);\n    if (headers) assertMatches(response.headers, headers);\n  };\n\nexport const expectError = (\n  errorCode: number,\n  problemDetails?: Partial<ProblemDocument>,\n) =>\n  expectResponse(\n    errorCode,\n    problemDetails ? { body: problemDetails } : undefined,\n  );\n\n////////////////////////////////\n/////////// Api Specification\n////////////////////////////////\n\nexport type ApiSpecification<EventType extends Event = Event> = (\n  ...givenStreams: TestEventStream<EventType>[]\n) => {\n  when: (setupRequest: TestRequest) => {\n    then: (verify: ApiSpecificationAssert<EventType>) => Promise<void>;\n  };\n};\n\nexport const ApiSpecification = {\n  for: <\n    EventType extends Event = Event,\n    Store extends EventStore<import('@event-driven-io/emmett').ReadEventMetadataWithGlobalPosition> = EventStore<import('@event-driven-io/emmett').ReadEventMetadataWithGlobalPosition>\n  >(\n    getEventStore: () => Store,\n    getApplication: (eventStore: Store) => Application | Promise<Application>,\n  ): ApiSpecification<EventType> => {\n    {\n      return (...givenStreams: TestEventStream<EventType>[]) => {\n        const eventStore = WrapEventStore(getEventStore());\n\n        return {\n          when: (setupRequest: TestRequest) => {\n            const handle = async () => {\n              const application = await Promise.resolve(getApplication(eventStore));\n\n              for (const [streamName, events] of givenStreams) {\n                await eventStore.setup(streamName, events);\n              }\n\n              return setupRequest(supertest(application));\n            };\n\n            return {\n              then: async (\n                verify: ApiSpecificationAssert<EventType>,\n              ): Promise<void> => {\n                const response = await handle();\n\n                if (typeof verify === 'function') {\n                  const succeeded = verify(response);\n\n                  if (succeeded === false) assertFails();\n                } else if (Array.isArray(verify)) {\n                  const [first, ...rest] = verify;\n\n                  if (typeof first === 'function') {\n                    const succeeded = first(response);\n\n                    if (succeeded === false) assertFails();\n                  }\n\n                  const events = typeof first === 'function' ? rest : verify;\n\n                  assertMatches(\n                    Array.from(eventStore.appendedEvents.values()),\n                    events,\n                  );\n                }\n              },\n            };\n          },\n        };\n      };\n    }\n  },\n};\n"],"mappings":";;;;;;;;AAAA,OAAO;;;ACAP,SAAS,OAAO,sBAAsB;AACtC,OAAO;AAAA,EACL;AAAA,OAGK;AACP,OAAO;AACP,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACP9B,SAAS,uBAAuB;AAIzB,IAAM,2BACX,CAAC,UAAyC,WAC1C,CACE,OACA,SACA,UACA,UACS;AACT,UAAQ,MAAM,QAAQ,iBAAiB,KAAK;AAE5C,MAAI;AAEJ,MAAI,SAAU,kBAAiB,SAAS,OAAO,OAAO;AAEtD,mBACE,kBAAkB,oCAAoC,KAAK;AAE7D,cAAY,UAAU,eAAe,QAAQ,EAAE,SAAS,eAAe,CAAC;AAC1E;AAEK,IAAM,sCAAsC,CACjD,UACoB;AACpB,MAAI,aAAa;AAGjB,QAAM,SAAS;AACf,QAAM,cAAc,OAAO,QAAQ;AACnC,MACE,OAAO,gBAAgB,YACvB,eAAe,OACf,cAAc,KACd;AACA,iBAAa;AAAA,EACf;AAEA,QAAM,iBAAiB,OAAO,WAAW;AACzC,MACE,OAAO,mBAAmB,YAC1B,kBAAkB,OAClB,iBAAiB,KACjB;AACA,iBAAa;AAAA,EACf;AAEA,SAAO,IAAI,gBAAgB;AAAA,IACzB,QAAQ,MAAM;AAAA,IACd,QAAQ;AAAA,EACV,CAAC;AACH;;;ADxCA,IAAM,SAAS,MAAM,UAAU,iDAAiD;AAoFzE,IAAM,iBAAiB,OAAO,YAAgC;AACnE,QAAM,MAAmB,QAAQ;AAEjC,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,SAAS,eAAe;AAE9B,UAAQ,MAAM,QAAQ,oCAAoC;AAAA,IACxD,SAAS,CAAC,CAAC,MAAM;AAAA,IACjB,qBAAqB,CAAC,CAAC;AAAA,IACvB,aAAa,CAAC,CAAC;AAAA,EACjB,CAAC;AAED,QAAM,SAAS,OAAO;AAItB,MAAI,IAAI,QAAQ,4BAA4B,KAAK;AAGjD,MAAI,aAAa,UAAa,aAAa,OAAO;AAChD,QAAI;AACF,YAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,YAAM,MAAMA,SAAQ,WAAW;AAC/B,YAAM,WAAY,IAAI,WAAW;AAEjC,UAAI,OAAO,aAAa,YAAY;AAClC,cAAM,IAAI,MAAM,kDAAkD;AAAA,MACpE;AAEA,YAAMC,WAAU,aAAa,OAAO,SAAY;AAChD,YAAM,aACJ,SACAA,QAAO;AACT,UAAI,IAAI,UAAU;AAAA,IACpB,SAAS,OAAO;AACd,cAAQ;AAAA,QACN;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,CAAC,sBAAuB,KAAI,IAAI,QAAQ,KAAK,CAAC;AAGlD,MAAI,CAAC;AACH,QAAI;AAAA,MACF,QAAQ,WAAW;AAAA,QACjB,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAGF,MAAI,kBAAkB;AAIpB,QAAI,iBAAiB,mBAAmB;AACtC,YAAM,EAAE,oBAAoB,IAAI,MAAM,OACpC,4BACF;AACA,0BAAoB;AAGpB,YAAM,mBACJ,OAAO,iBAAiB,sBAAsB,WAC1C,iBAAiB,oBACjB,iBAAiB,kBAAkB;AAEzC,UAAI,kBAAkB;AACpB,cAAM,EAAE,sBAAsB,IAAI,MAAM,OACtC,8BACF;AACA,cAAM,EAAE,0BAA0B,IAAI,MAAM,OAC1C,gCACF;AAGA,cAAM,UAAU,MAAM,OAAO;AAAA,UAC3B;AAAA,UACA,OAAO,SAAS;AACd,gBAAI;AACF,oBAAM,SAAS,MAAM;AAAA,gBACnB,iBAAiB;AAAA,gBACjB;AAAA,gBACA;AAAA,cACF;AACA,mBAAK,aAAa,yBAAyB,OAAO,MAAM;AACxD,mBAAK,UAAU,EAAE,MAAM,eAAe,GAAG,CAAC;AAC1C,qBAAO;AAAA,YACT,SAAS,OAAO;AACd,mBAAK,gBAAgB,KAAc;AACnC,mBAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;AAC7C,oBAAM;AAAA,YACR,UAAE;AACA,mBAAK,IAAI;AAAA,YACX;AAAA,UACF;AAAA,QACF;AAGA,cAAM,mBAAmB,MAAM,OAAO;AAAA,UACpC;AAAA,UACA,OAAO,SAAS;AACd,gBAAI;AACF,oBAAM,SAAS,MAAM,0BAA0B,SAAS,MAAM;AAC9D,mBAAK;AAAA,gBACH;AAAA,gBACA,OAAO,KAAK,MAAM,EAAE;AAAA,cACtB;AACA,mBAAK,UAAU,EAAE,MAAM,eAAe,GAAG,CAAC;AAC1C,qBAAO;AAAA,YACT,SAAS,OAAO;AACd,sBAAQ,MAAM,QAAQ,yCAAyC,KAAK;AACpE,mBAAK,gBAAgB,KAAc;AACnC,mBAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;AAC7C,oBAAM;AAAA,YACR,UAAE;AACA,mBAAK,IAAI;AAAA,YACX;AAAA,UACF;AAAA,QACF;AAGA,YAAI,iBAAiB,oBAAoB;AACvC,gBAAM,iBAAiB,mBAAmB,gBAAgB;AAAA,QAC5D;AAAA,MACF;AAAA,IACF,OAAO;AAEL,UAAI,iBAAiB,oBAAoB;AACvC,cAAM,iBAAiB,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI;AACF,YAAMD,WAAU,cAAc,YAAY,GAAG;AAE7C,YAAM,MAAMA,SAAQ,2BAA2B;AAI/C,YAAM,WAAY,IAAI,WAAW;AAEjC,UAAI,OAAO,SAAS,eAAe,YAAY;AAC7C,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAGA,UAAI,iBAAiB,WAAW;AAC9B,YAAI,OAAO,iBAAiB,YAAY,UAAU;AAEhD,cAAI;AAAA,YACF,iBAAiB;AAAA,YACjB,QAAQ,OAAO,iBAAiB,OAAO;AAAA,UACzC;AAAA,QACF,OAAO;AAEL,cAAI,IAAI,iBAAiB,WAAW,CAAC,MAAM,QAAQ;AACjD,gBAAI,KAAK,iBAAiB,OAAO;AAAA,UACnC,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,UAAU,SAAS;AAGzB,YAAM,aAAa,QAAQ,gBAAgB;AAC3C,UAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,mBAAW,KAAK,WAAY,KAAI,IAAI,CAAC;AAAA,MACvC,OAAO;AACL,YAAI,IAAI,UAAU;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ;AAAA,QACN;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,MAAM;AACR,eAAW,OAAO,MAAM;AACtB,UAAI,MAAM;AAAA,IACZ;AACA,QAAI,IAAI,MAAM;AAAA,EAChB;AAGA,MAAI,CAAC;AACH,QAAI,IAAI,yBAAyB,UAAU,MAAM,CAAC;AAEpD,UAAQ,KAAK,QAAQ,iCAAiC;AAEtD,SAAO;AACT;AAUO,IAAM,WAAW,CACtB,KACA,UAA2B,EAAE,MAAM,IAAK,MACrC;AACH,QAAM,EAAE,MAAM,OAAO,IAAI;AACzB,QAAM,SAAS,KAAK,aAAa,GAAG;AAEpC,SAAO,GAAG,aAAa,MAAM;AAC3B,YAAQ,KAAK,QAAQ,uBAAuB,EAAE,KAAK,CAAC;AAAA,EACtD,CAAC;AAED,SAAO,OAAO,OAAO,IAAI;AAC3B;;;AEzUO,IAAM,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,cAAc;AAAA,EACd,MAAM;AACR;AAKO,IAAM,gBAAgB;AAEtB,IAAW,aAAX,kBAAWE,gBAAX;AACL,EAAAA,YAAA,4BAAyB;AACzB,EAAAA,YAAA,6BAA0B;AAC1B,EAAAA,YAAA,iCAA8B;AAHd,SAAAA;AAAA,GAAA;AAMX,IAAM,aAAa,CAAC,SAAiC;AAC1D,SAAO,cAAc,KAAK,IAAc;AAC1C;AAEO,IAAM,mBAAmB,CAAC,SAAuB;AACtD,QAAM,SAAS,cAAc,KAAK,IAAc;AAChD,MAAI,WAAW,QAAQ,OAAO,WAAW,GAAG;AAC1C,UAAM,IAAI,MAAM,qDAAiC;AAAA,EACnD;AACA,SAAO,OAAO,CAAC;AACjB;AAEO,IAAM,aAAa,CAAC,UAA8C;AACvE,SAAO,MAAM,KAAK;AACpB;AAEO,IAAM,qBAAqB,CAAC,YAA2B;AAC5D,QAAM,OAAO,QAAQ,QAAQ,YAAY,QAAQ;AAEjD,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI,MAAM,uDAAkC;AAAA,EACpD;AAEA,SAAO;AACT;AAEO,IAAM,wBAAwB,CAAC,YAA2B;AAC/D,QAAM,OAAO,QAAQ,QAAQ,YAAY,YAAY;AAErD,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI,MAAM,uDAAkC;AAAA,EACpD;AAEA,SAAQ,MAAM,QAAQ,IAAI,IAAI,KAAK,CAAC,IAAI;AAC1C;AAEO,IAAM,UAAU,CAAC,UAAoB,SAAqB;AAC/D,WAAS,UAAU,YAAY,MAAM,IAAc;AACrD;AAEO,IAAM,0BAA0B,CAAC,YAA6B;AACnE,QAAM,YAAkB,mBAAmB,OAAO;AAElD,SAAO,WAAW,SAAS,IACvB,iBAAiB,SAAS,IACzB;AACP;;;ACtEA,SAAS,SAAAC,QAAO,kBAAAC,uBAAsB;AActC,IAAMC,UAASC,OAAM,UAAU,iDAAiD;AASzE,IAAM,KACX,CAA8B,WAC9B,OACE,SACA,UACA,UACkB;AAClB,QAAM,cAAc,MAAM,QAAQ,QAAQ,OAAO,OAAO,CAAC;AAEzD,SAAO,YAAY,QAAQ;AAC7B;AA4BK,IAAM,WACX,CACE,QACA,YAEF,OACE,SACA,UACA,UACkB;AAClB,QAAM,WAAW,SAAS,YAAY;AAEtC,SAAOD,QAAO,gBAAgB,UAAU,OAAO,SAAS;AACtD,QAAI;AACF,WAAK,aAAa,eAAe,QAAQ,MAAM;AAE/C,YAAM,SACH,QAAQ,WAAW,OAClB,QAAQ,OAA6B,QAAQ,QAAQ;AACzD,WAAK,aAAa,cAAc,KAAK;AAErC,YAAM,cAAc,MAAM,QAAQ,QAAQ,OAAO,OAAO,CAAC;AACzD,kBAAY,QAAQ;AAEpB,WAAK,aAAa,oBAAoB,SAAS,UAAU;AACzD,WAAK,UAAU;AAAA,QACb,MACE,SAAS,cAAc,MAAME,gBAAe,QAAQA,gBAAe;AAAA,MACvE,CAAC;AAAA,IACH,SAAS,OAAO;AACd,WAAK,gBAAgB,KAAc;AACnC,WAAK,UAAU,EAAE,MAAMA,gBAAe,MAAM,CAAC;AAC7C,YAAM;AAAA,IACR,UAAE;AACA,WAAK,IAAI;AAAA,IACX;AAAA,EACF,CAAC;AACH;AAEK,IAAM,KACX,CAAC,YACD,CAAC,aAAuB;AACtB,OAAK,UAAU,KAAK,OAAO;AAC7B;AAEK,IAAM,UACX,CAAC,YACD,CAAC,aAAuB;AACtB,cAAY,UAAU,OAAO;AAC/B;AAEK,IAAM,WACX,CAAC,YACD,CAAC,aAAuB;AACtB,eAAa,UAAU,OAAO;AAChC;AAEK,IAAM,YAAY,CACvB,YACiB,aAAa,KAAK,OAAO;AAErC,IAAM,eACX,CAAC,YAAoB,YACrB,CAAC,aAAuB;AACtB,OAAK,UAAU,YAAY,OAAO;AACpC;AAMK,IAAM,aAAa,CACxB,YACiB,YAAY,KAAK,OAAO;AAEpC,IAAM,YAAY,CAAC,YACxB,YAAY,KAAK,OAAO;AAEnB,IAAM,WAAW,CAAC,YACvB,YAAY,KAAK,OAAO;AAEnB,IAAM,WAAW,CAAC,YACvB,YAAY,KAAK,OAAO;AAEnB,IAAM,qBAAqB,CAChC,YACiB,YAAY,KAAK,OAAO;AAEpC,IAAM,cACX,CAAC,YAAoB,YACrB,CAAC,aAAuB;AACtB,cAAY,UAAU,YAAY,OAAO;AAC3C;;;AC1HF,IAAM,mBAAmB,YAAyC;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,qCAAqC;AAC9D,UAAM,WAAY,IAA2C,WAAW;AACxE,UAAM,yBACH,SAAqC;AAExC,QAAI,OAAO,2BAA2B,YAAY;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UACJ;AAEF,UAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAe,CAAC;AAAA,EACpD;AACF;AAEA,IAAM,qBAAqB,MAAM;AAC/B,QAAM,MAA+B,CAAC;AACtC,MAAI,SAAS,MAAM;AACnB,MAAI,OAAO,MAAM;AACjB,MAAI,OAAO,MAAM;AACjB,MAAI,MAAM,MAAM;AAChB,MAAI,MAAM,MAAM;AAChB,SAAO;AACT;AAEA,IAAM,gBAAgB,OACpB,YACA,QACqB;AACrB,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,aAAa;AACjB,UAAM,MAAM,mBAAmB;AAC/B,UAAM,OAAO,MAAM;AACjB,mBAAa;AACb,cAAQ,IAAI;AAAA,IACd;AAEA,YAAQ,QAAQ,WAAW,KAAK,KAAK,IAAI,CAAC,EACvC,KAAK,MAAM;AACV,UAAI,CAAC,WAAY,SAAQ,KAAK;AAAA,IAChC,CAAC,EACA,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,EAC/B,CAAC;AACH;AAEO,IAAM,qCAAqC,CAChD,UAAuC,CAAC,MACnB;AACrB,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,QAAM,YAAY,QAAQ,aAAa;AAEvC,SAAO;AAAA,IACL,CAAC,kBAAkB,GAAG,OAAO,KAAK,QAAQ,YAAY;AACpD,YAAM,EAAE,uBAAuB,IAAI,MAAM,iBAAiB;AAC1D,YAAM,aAAa,uBAAuB;AAAA,QACxC,YAAY,QAAQ;AAAA,MACtB,CAAC;AAED,YAAM,kBAAkB,MAAM,cAAc,YAAY,GAAG;AAC3D,UAAI,CAAC,gBAAiB,QAAO;AAE7B,UAAI,CAAC,OAAO,OAAQ,QAAO;AAE3B,YAAM,QAAS,KAA6B,MAAM,QAAQ,SAAS;AACnE,UAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAElC,aAAO,OAAO,MAAM,CAAC,UAAkB,MAAM,SAAS,KAAK,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;;;ACkLO,IAAM,gCAAgC,CAC3C,SACA,YAC4B;AAC5B,SAAO;AAAA,IACL;AAAA,IACA,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C,mBAAmB,SAAS,qBAAqB;AAAA,IACjD,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,mBAAmB,SAAS;AAAA,IAC5B,aAAa,SAAS;AAAA,IACtB,iBAAiB,SAAS,mBAAmB;AAAA,IAC7C,YAAY,SAAS;AAAA,IACrB,WAAW,SAAS,aAAa;AAAA,IACjC,cAAc,SAAS;AAAA,IACvB,oBAAoB,SAAS;AAAA,EAC/B;AACF;AAKO,IAAM,8BAA8B,YAA8B;AACvE,MAAI;AACF,UAAM,OAAO,2BAA2B;AACxC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC1TA,SAAS,mBAAAC,wBAAuB;AAazB,IAAM,6BAAkD,CAAC;AAYzD,IAAM,oCAAgE;AAAA,EAC3E,gBAAgB;AAClB;AAaO,IAAM,cAAc,CACzB,UACA,EAAE,MAAM,GAAG,QAAQ,MAEnB,KAAK,UAAU,KAAK;AAAA,EAClB,UACE,SAAS,UACL,QAAQ,MACR,GAAG,SAAS,IAAI,GAAG,IAAI,QAAQ,SAAS;AAAA,EAC9C,MAAM,eAAe,UAAU,EAAE,IAAI,QAAQ,UAAU,IAAI;AAAA,EAC3D;AACF,CAAC;AAMI,IAAM,eAAe,CAC1B,UACA,YACS,KAAK,UAAU,KAAK,OAAO;AAI/B,IAAM,OAAO,CAClB,UACA,YACA,YACS;AACT,QAAM,EAAE,UAAU,MAAM,KAAK,IAAI,WAAW;AAE5C,MAAI,KAAM,SAAQ,UAAU,IAAI;AAChC,MAAI,SAAU,UAAS,UAAU,YAAY,QAAQ;AAErD,MAAI,MAAM;AACR,aAAS,aAAa;AACtB,aAAS,KAAK,IAAI;AAAA,EACpB,OAAO;AACL,aAAS,WAAW,UAAU;AAAA,EAChC;AACF;AAEO,IAAM,cAAc,CACzB,UACA,YACA,YACS;AACT,YAAU,WAAW;AAErB,QAAM,EAAE,UAAU,KAAK,IAAI;AAE3B,QAAM,iBACJ,aAAa,UACT,QAAQ,UACR,IAAIC,iBAAgB;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,QAAQ;AAAA,EACV,CAAC;AAGP,MAAI,KAAM,SAAQ,UAAU,IAAI;AAChC,MAAI,SAAU,UAAS,UAAU,YAAY,QAAQ;AAErD,WAAS,UAAU,gBAAgB,0BAA0B;AAE7D,WAAS,aAAa;AACtB,WAAS,KAAK,cAAc;AAC9B;;;AC5GA,OAAO,eAAkC;AAGzC,OAAO,YAAY;AAcZ,IAAM,sBAAsB;AAAA,EACjC,KAAK,CACH,eACAC,oBACwB;AACxB;AACE,aAAO,IAAI,kBAAiC;AAC1C,cAAM,aAAa,cAAc;AAEjC,eAAO;AAAA,UACL,MAAM,CAAC,iBAA8B;AACnC,kBAAM,SAAS,YAAY;AACzB,oBAAM,cAAc,MAAM,QAAQ,QAAQA,gBAAe,UAAU,CAAC;AAEpE,yBAAW,aAAa,eAAe;AACrC,sBAAM,UAAU,UAAU,WAAW,CAAC;AAAA,cACxC;AAEA,qBAAO,aAAa,UAAU,WAAW,CAAC;AAAA,YAC5C;AAEA,mBAAO;AAAA,cACL,MAAM,OACJ,WACkB;AAClB,sBAAM,WAAW,MAAM,OAAO;AAE9B,uBAAO,QAAQ,CAAC,cAAc;AAC5B,wBAAM,YAAY,UAAU,QAAQ;AAEpC,sBAAI,cAAc,MAAO,QAAO,KAAK;AAAA,gBACvC,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACxDA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAIP,OAAOC,gBAAe;AASf,IAAM,iBAAiB,CAC5B,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAaO,IAAM,SAAS,CACpB,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAEO,IAAM,kBAAkB,CAC7B,UACA,WAC+B;AAC/B,SAAO,CAAC,UAAU,MAAM;AAC1B;AAEO,IAAM,iBACX,CACE,YACA,YAEF,CAAC,aAA6B;AAC5B,QAAM,EAAE,MAAM,QAAQ,IAAI,WAAW,CAAC;AACtC,cAAY,YAAY,SAAS,YAAY,6BAA6B;AAC1E,MAAI,KAAM,eAAc,SAAS,MAAM,IAAI;AAC3C,MAAI,QAAS,eAAc,SAAS,SAAS,OAAO;AACtD;AAEK,IAAM,cAAc,CACzB,WACA,mBAEA;AAAA,EACE;AAAA,EACA,iBAAiB,EAAE,MAAM,eAAe,IAAI;AAC9C;AAcK,IAAM,mBAAmB;AAAA,EAC9B,KAAK,CAIH,eACAC,oBACgC;AAChC;AACE,aAAO,IAAI,iBAA+C;AACxD,cAAM,aAAa,eAAe,cAAc,CAAC;AAEjD,eAAO;AAAA,UACL,MAAM,CAAC,iBAA8B;AACnC,kBAAM,SAAS,YAAY;AACzB,oBAAM,cAAc,MAAM,QAAQ,QAAQA,gBAAe,UAAU,CAAC;AAEpE,yBAAW,CAAC,YAAY,MAAM,KAAK,cAAc;AAC/C,sBAAM,WAAW,MAAM,YAAY,MAAM;AAAA,cAC3C;AAEA,qBAAO,aAAaD,WAAU,WAAW,CAAC;AAAA,YAC5C;AAEA,mBAAO;AAAA,cACL,MAAM,OACJ,WACkB;AAClB,sBAAM,WAAW,MAAM,OAAO;AAE9B,oBAAI,OAAO,WAAW,YAAY;AAChC,wBAAM,YAAY,OAAO,QAAQ;AAEjC,sBAAI,cAAc,MAAO,aAAY;AAAA,gBACvC,WAAW,MAAM,QAAQ,MAAM,GAAG;AAChC,wBAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AAEzB,sBAAI,OAAO,UAAU,YAAY;AAC/B,0BAAM,YAAY,MAAM,QAAQ;AAEhC,wBAAI,cAAc,MAAO,aAAY;AAAA,kBACvC;AAEA,wBAAM,SAAS,OAAO,UAAU,aAAa,OAAO;AAEpD;AAAA,oBACE,MAAM,KAAK,WAAW,eAAe,OAAO,CAAC;AAAA,oBAC7C;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":["require","options","ETagErrors","trace","SpanStatusCode","tracer","trace","SpanStatusCode","ProblemDocument","ProblemDocument","getApplication","supertest","getApplication"]}

package/dist/{openapi-parser-NFUD7ZGZ.cjs → openapi-parser-HMWO3IPV.cjs}

@@ -1,10 +1,17 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }require('./chunk-GS7T56RP.cjs');
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+var _chunkFSPH5TRTcjs = require('./chunk-FSPH5TRT.cjs');
+require('./chunk-GS7T56RP.cjs');
 
 // src/internal/openapi-parser.ts
 var _promises = require('fs/promises');
 var _path = require('path'); var _path2 = _interopRequireDefault(_path);
-async function extractHandlerModules(apiSpec, handlersBasePath) {
-  const spec = typeof apiSpec === "string" ? await loadOpenApiSpec(apiSpec) : apiSpec;
+async function extractHandlerModules(apiSpec, handlersBasePath, logger) {
+  _chunkFSPH5TRTcjs.safeLog.debug(logger, "Extracting handler modules from OpenAPI spec", {
+    apiSpec: typeof apiSpec === "string" ? apiSpec : "<object>",
+    handlersBasePath
+  });
+  const spec = typeof apiSpec === "string" ? await loadOpenApiSpec(apiSpec, logger) : apiSpec;
   if (!spec.paths || typeof spec.paths !== "object") {
     throw new Error('Invalid OpenAPI specification: missing or invalid "paths" field');
   }
@@ -35,22 +42,34 @@ async function extractHandlerModules(apiSpec, handlersBasePath) {
       }
     }
   }
-  return Array.from(handlersMap.values());
+  const modules = Array.from(handlersMap.values());
+  _chunkFSPH5TRTcjs.safeLog.debug(logger, "Extracted handler modules", {
+    count: modules.length,
+    modules: modules.map((m) => m.moduleName)
+  });
+  return modules;
 }
-async function loadOpenApiSpec(filePath) {
+async function loadOpenApiSpec(filePath, logger) {
+  _chunkFSPH5TRTcjs.safeLog.debug(logger, "Loading OpenAPI spec file", { filePath });
   try {
     const content = await _promises.readFile.call(void 0, filePath, "utf-8");
     const ext = _path2.default.extname(filePath).toLowerCase();
+    let parsed;
     if (ext === ".json") {
-      return JSON.parse(content);
+      parsed = JSON.parse(content);
     } else if (ext === ".yaml" || ext === ".yml") {
       const yaml = await Promise.resolve().then(() => _interopRequireWildcard(require("yaml")));
-      return yaml.parse(content);
+      parsed = yaml.parse(content);
     } else {
       throw new Error(
         `Unsupported OpenAPI file format: ${ext}. Use .json, .yaml, or .yml`
       );
     }
+    _chunkFSPH5TRTcjs.safeLog.debug(logger, "OpenAPI spec loaded successfully", {
+      filePath,
+      format: ext
+    });
+    return parsed;
   } catch (error) {
     if (error.code === "ENOENT") {
       throw new Error(`OpenAPI specification file not found: ${filePath}`);
@@ -72,4 +91,4 @@ function resolveHandlerPath(basePath, relativePath) {
 
 
 exports.extractHandlerModules = extractHandlerModules;
-//# sourceMappingURL=openapi-parser-NFUD7ZGZ.cjs.map
+//# sourceMappingURL=openapi-parser-HMWO3IPV.cjs.map

package/dist/openapi-parser-HMWO3IPV.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/emmett-expressjs-with-openapi/emmett-expressjs-with-openapi/dist/openapi-parser-HMWO3IPV.cjs","../src/internal/openapi-parser.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B;AACA;ACKA,uCAAyB;AACzB,wEAAiB;AAqBjB,MAAA,SAAsB,qBAAA,CACpB,OAAA,EACA,gBAAA,EACA,MAAA,EAC8B;AAC9B,EAAA,yBAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,8CAAA,EAAgD;AAAA,IACpE,OAAA,EAAS,OAAO,QAAA,IAAY,SAAA,EAAW,QAAA,EAAU,UAAA;AAAA,IACjD;AAAA,EACF,CAAC,CAAA;AAGD,EAAA,MAAM,KAAA,EACJ,OAAO,QAAA,IAAY,SAAA,EAAW,MAAM,eAAA,CAAgB,OAAA,EAAS,MAAM,EAAA,EAAI,OAAA;AAGzE,EAAA,GAAA,CAAI,CAAC,IAAA,CAAK,MAAA,GAAS,OAAO,IAAA,CAAK,MAAA,IAAU,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,KAAA,CAAM,iEAAiE,CAAA;AAAA,EACnF;AAGA,EAAA,MAAM,YAAA,kBAAc,IAAI,GAAA,CAA+B,CAAA;AAEvD,EAAA,IAAA,CAAA,MAAW,CAAC,OAAA,EAAS,QAAQ,EAAA,GAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,EAAG;AAC5D,IAAA,GAAA,CAAI,CAAC,SAAA,GAAY,OAAO,SAAA,IAAa,QAAA,EAAU,QAAA;AAE/C,IAAA,IAAA,CAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,EAAA,GAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG;AAC1D,MAAA,GAAA,CAAI,OAAA,IAAW,aAAA,GAAgB,OAAA,IAAW,SAAA,EAAW,QAAA;AACrD,MAAA,GAAA,CAAI,CAAC,UAAA,GAAa,OAAO,UAAA,IAAc,QAAA,EAAU,QAAA;AAEjD,MAAA,MAAM,YAAA,EAAe,SAAA,CAAkB,yBAAyB,CAAA;AAChE,MAAA,MAAM,YAAA,EACH,SAAA,CAAkB,oBAAoB,EAAA,GACtC,SAAA,CAAkB,WAAA;AAErB,MAAA,GAAA,CAAI,YAAA,GAAe,OAAO,YAAA,IAAgB,QAAA,EAAU;AAClD,QAAA,MAAM,aAAA,EAAe,kBAAA;AAAA,UACnB,gBAAA;AAAA,UACA;AAAA,QACF,CAAA;AAEA,QAAA,GAAA,CAAI,CAAC,WAAA,CAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AACjC,UAAA,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa;AAAA,YAC3B,UAAA,EAAY,WAAA;AAAA,YACZ,YAAA,EAAc,WAAA;AAAA,YACd,YAAA;AAAA,YACA,YAAA,EAAc,CAAC;AAAA,UACjB,CAAC,CAAA;AAAA,QACH;AAEA,QAAA,GAAA,CAAI,WAAA,EAAa;AACf,UAAA,WAAA,CAAY,GAAA,CAAI,WAAW,CAAA,CAAG,YAAA,CAAa,IAAA,CAAK,WAAW,CAAA;AAAA,QAC7D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,EAAU,KAAA,CAAM,IAAA,CAAK,WAAA,CAAY,MAAA,CAAO,CAAC,CAAA;AAE/C,EAAA,yBAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,2BAAA,EAA6B;AAAA,IACjD,KAAA,EAAO,OAAA,CAAQ,MAAA;AAAA,IACf,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,EAAA,GAAM,CAAA,CAAE,UAAU;AAAA,EAC1C,CAAC,CAAA;AAED,EAAA,OAAO,OAAA;AACT;AAKA,MAAA,SAAe,eAAA,CACb,QAAA,EACA,MAAA,EAC0B;AAC1B,EAAA,yBAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,2BAAA,EAA6B,EAAE,SAAS,CAAC,CAAA;AAC/D,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,EAAU,MAAM,gCAAA,QAAS,EAAU,OAAO,CAAA;AAChD,IAAA,MAAM,IAAA,EAAM,cAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA,CAAE,WAAA,CAAY,CAAA;AAE/C,IAAA,IAAI,MAAA;AACJ,IAAA,GAAA,CAAI,IAAA,IAAQ,OAAA,EAAS;AACnB,MAAA,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAAA,IAC7B,EAAA,KAAA,GAAA,CAAW,IAAA,IAAQ,QAAA,GAAW,IAAA,IAAQ,MAAA,EAAQ;AAE5C,MAAA,MAAM,KAAA,EAAO,MAAM,4DAAA,CAAO,MAAM,GAAA;AAChC,MAAA,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAAA,IAC7B,EAAA,KAAO;AACL,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,GAAG,CAAA,2BAAA;AAAA,MACzC,CAAA;AAAA,IACF;AAEA,IAAA,yBAAA,CAAQ,KAAA,CAAM,MAAA,EAAQ,kCAAA,EAAoC;AAAA,MACxD,QAAA;AAAA,MACA,MAAA,EAAQ;AAAA,IACV,CAAC,CAAA;AAED,IAAA,OAAO,MAAA;AAAA,EACT,EAAA,MAAA,CAAS,KAAA,EAAO;AACd,IAAA,GAAA,CAAK,KAAA,CAAgC,KAAA,IAAS,QAAA,EAAU;AACtD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sCAAA,EAAyC,QAAQ,CAAA,CAAA;AACnE,IAAA;AACM,IAAA;AACR,EAAA;AACF;AAQU;AAEsC,EAAA;AAGQ,EAAA;AAGZ,EAAA;AACE,EAAA;AAChC,IAAA;AAC8B,MAAA;AACxC,IAAA;AACF,EAAA;AAEO,EAAA;AACT;ADrEwE;AACA;AACA","file":"/home/runner/work/emmett-expressjs-with-openapi/emmett-expressjs-with-openapi/dist/openapi-parser-HMWO3IPV.cjs","sourcesContent":[null,"/**\n * OpenAPI Parser for handler module discovery.\n *\n * INTERNAL MODULE - Not part of public API.\n *\n * Parses OpenAPI specifications to extract handler module paths from\n * x-eov-operation-handler fields, enabling automatic handler discovery\n * and registration.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport type { OpenAPIV3 } from 'express-openapi-validator/dist/framework/types';\nimport { type Logger, safeLog } from '../observability';\n\ntype OpenApiDocument = OpenAPIV3.DocumentV3 | OpenAPIV3.DocumentV3_1;\n\nexport type HandlerModuleInfo = {\n  moduleName: string; // e.g., \"shoppingCarts\"\n  relativePath: string; // from x-eov-operation-handler\n  absolutePath: string; // resolved full path\n  operationIds: string[]; // operations using this handler\n};\n\n/**\n * Extract handler modules from OpenAPI specification.\n *\n * @param apiSpec - OpenAPI spec (file path or object)\n * @param handlersBasePath - Base path for handler modules\n * @param logger - Optional logger for debug output\n * @returns Array of handler module information\n */\nexport async function extractHandlerModules(\n  apiSpec: string | OpenApiDocument,\n  handlersBasePath: string,\n  logger?: Logger,\n): Promise<HandlerModuleInfo[]> {\n  safeLog.debug(logger, 'Extracting handler modules from OpenAPI spec', {\n    apiSpec: typeof apiSpec === 'string' ? apiSpec : '<object>',\n    handlersBasePath,\n  });\n\n  // Load spec if it's a file path\n  const spec =\n    typeof apiSpec === 'string' ? await loadOpenApiSpec(apiSpec, logger) : apiSpec;\n\n  // Validate spec structure\n  if (!spec.paths || typeof spec.paths !== 'object') {\n    throw new Error('Invalid OpenAPI specification: missing or invalid \"paths\" field');\n  }\n\n  // Extract handler modules from spec\n  const handlersMap = new Map<string, HandlerModuleInfo>();\n\n  for (const [pathKey, pathItem] of Object.entries(spec.paths)) {\n    if (!pathItem || typeof pathItem !== 'object') continue;\n\n    for (const [method, operation] of Object.entries(pathItem)) {\n      if (method === 'parameters' || method === 'servers') continue;\n      if (!operation || typeof operation !== 'object') continue;\n\n      const handlerName = (operation as any)['x-eov-operation-handler'];\n      const operationId =\n        (operation as any)['x-eov-operation-id'] ||\n        (operation as any).operationId;\n\n      if (handlerName && typeof handlerName === 'string') {\n        const absolutePath = resolveHandlerPath(\n          handlersBasePath,\n          handlerName,\n        );\n\n        if (!handlersMap.has(handlerName)) {\n          handlersMap.set(handlerName, {\n            moduleName: handlerName,\n            relativePath: handlerName,\n            absolutePath,\n            operationIds: [],\n          });\n        }\n\n        if (operationId) {\n          handlersMap.get(handlerName)!.operationIds.push(operationId);\n        }\n      }\n    }\n  }\n\n  const modules = Array.from(handlersMap.values());\n\n  safeLog.debug(logger, 'Extracted handler modules', {\n    count: modules.length,\n    modules: modules.map((m) => m.moduleName),\n  });\n\n  return modules;\n}\n\n/**\n * Load OpenAPI specification from file.\n */\nasync function loadOpenApiSpec(\n  filePath: string,\n  logger?: Logger,\n): Promise<OpenApiDocument> {\n  safeLog.debug(logger, 'Loading OpenAPI spec file', { filePath });\n  try {\n    const content = await readFile(filePath, 'utf-8');\n    const ext = path.extname(filePath).toLowerCase();\n\n    let parsed: OpenApiDocument;\n    if (ext === '.json') {\n      parsed = JSON.parse(content);\n    } else if (ext === '.yaml' || ext === '.yml') {\n      // Dynamic import to avoid bundling yaml if not needed\n      const yaml = await import('yaml');\n      parsed = yaml.parse(content);\n    } else {\n      throw new Error(\n        `Unsupported OpenAPI file format: ${ext}. Use .json, .yaml, or .yml`,\n      );\n    }\n\n    safeLog.debug(logger, 'OpenAPI spec loaded successfully', {\n      filePath,\n      format: ext,\n    });\n\n    return parsed;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') {\n      throw new Error(`OpenAPI specification file not found: ${filePath}`);\n    }\n    throw error;\n  }\n}\n\n/**\n * Resolve handler module path, preventing path traversal attacks.\n */\nfunction resolveHandlerPath(\n  basePath: string,\n  relativePath: string,\n): string {\n  // Normalize to prevent path traversal\n  const normalized = path.normalize(relativePath);\n\n  // Resolve absolute path\n  const absolutePath = path.resolve(basePath, normalized);\n\n  // Ensure path is within basePath (no escape via ../)\n  const resolvedBase = path.resolve(basePath);\n  if (!absolutePath.startsWith(resolvedBase)) {\n    throw new Error(\n      `Invalid handler path: \"${relativePath}\" escapes base directory`,\n    );\n  }\n\n  return absolutePath;\n}\n"]}

package/dist/{openapi-parser-CCYU636U.js → openapi-parser-SFYDJEIN.js}

@@ -1,8 +1,16 @@
+import {
+  safeLog
+} from "./chunk-PZBLPYJH.js";
+
 // src/internal/openapi-parser.ts
 import { readFile } from "fs/promises";
 import path from "path";
-async function extractHandlerModules(apiSpec, handlersBasePath) {
-  const spec = typeof apiSpec === "string" ? await loadOpenApiSpec(apiSpec) : apiSpec;
+async function extractHandlerModules(apiSpec, handlersBasePath, logger) {
+  safeLog.debug(logger, "Extracting handler modules from OpenAPI spec", {
+    apiSpec: typeof apiSpec === "string" ? apiSpec : "<object>",
+    handlersBasePath
+  });
+  const spec = typeof apiSpec === "string" ? await loadOpenApiSpec(apiSpec, logger) : apiSpec;
   if (!spec.paths || typeof spec.paths !== "object") {
     throw new Error('Invalid OpenAPI specification: missing or invalid "paths" field');
   }
@@ -33,22 +41,34 @@ async function extractHandlerModules(apiSpec, handlersBasePath) {
       }
     }
   }
-  return Array.from(handlersMap.values());
+  const modules = Array.from(handlersMap.values());
+  safeLog.debug(logger, "Extracted handler modules", {
+    count: modules.length,
+    modules: modules.map((m) => m.moduleName)
+  });
+  return modules;
 }
-async function loadOpenApiSpec(filePath) {
+async function loadOpenApiSpec(filePath, logger) {
+  safeLog.debug(logger, "Loading OpenAPI spec file", { filePath });
   try {
     const content = await readFile(filePath, "utf-8");
     const ext = path.extname(filePath).toLowerCase();
+    let parsed;
     if (ext === ".json") {
-      return JSON.parse(content);
+      parsed = JSON.parse(content);
     } else if (ext === ".yaml" || ext === ".yml") {
       const yaml = await import("yaml");
-      return yaml.parse(content);
+      parsed = yaml.parse(content);
     } else {
       throw new Error(
         `Unsupported OpenAPI file format: ${ext}. Use .json, .yaml, or .yml`
       );
     }
+    safeLog.debug(logger, "OpenAPI spec loaded successfully", {
+      filePath,
+      format: ext
+    });
+    return parsed;
   } catch (error) {
     if (error.code === "ENOENT") {
       throw new Error(`OpenAPI specification file not found: ${filePath}`);
@@ -70,4 +90,4 @@ function resolveHandlerPath(basePath, relativePath) {
 export {
   extractHandlerModules
 };
-//# sourceMappingURL=openapi-parser-CCYU636U.js.map
+//# sourceMappingURL=openapi-parser-SFYDJEIN.js.map