@geekmidas/constructs 0.0.22 → 0.2.0

package/src/endpoints/HonoEndpointAdaptor.ts

@@ -19,6 +19,7 @@ import {
 import { getEndpointsFromRoutes } from './helpers';
 import { parseHonoQuery } from './parseHonoQuery';
 
+import { withRlsContext } from '@geekmidas/db/rls';
 import { wrapError } from '@geekmidas/errors';
 import {
   type Service,
@@ -374,6 +375,19 @@ export class HonoEndpoint<
             logger.warn('No auditor storage service available');
           }
 
+          // Extract RLS context if configured and not bypassed
+          const rlsActive =
+            endpoint.rlsConfig && !endpoint.rlsBypass && rawDb !== undefined;
+          const rlsContext = rlsActive
+            ? await endpoint.rlsConfig!.extractor({
+                services,
+                session,
+                header,
+                cookie,
+                logger,
+              })
+            : undefined;
+
           // Execute handler with automatic audit transaction support
           const result = await executeWithAuditTransaction(
             auditContext,
@@ -383,49 +397,64 @@ export class HonoEndpoint<
                 auditContext?.storage?.databaseServiceName &&
                 auditContext.storage.databaseServiceName ===
                   endpoint.databaseService?.serviceName;
-              const db = sameDatabase
+              const baseDb = sameDatabase
                 ? (auditor?.getTransaction?.() ?? rawDb)
                 : rawDb;
 
-              const responseBuilder = new ResponseBuilder();
-              const response = await endpoint.handler(
-                {
-                  services,
-                  logger,
-                  body: c.req.valid('json'),
-                  query: c.req.valid('query'),
-                  params: c.req.valid('param'),
-                  session,
-                  header,
-                  cookie,
-                  auditor,
-                  db,
-                } as unknown as EndpointContext<
-                  TInput,
-                  TServices,
-                  TLogger,
-                  TSession,
-                  TAuditAction,
-                  TDatabase,
-                  TAuditStorage
-                >,
-                responseBuilder,
-              );
-
-              // Check if response has metadata
-              let data = response;
-              let metadata = responseBuilder.getMetadata();
+              // Helper to execute handler with given db
+              const executeHandler = async (db: TDatabase | undefined) => {
+                const responseBuilder = new ResponseBuilder();
+                const response = await endpoint.handler(
+                  {
+                    services,
+                    logger,
+                    body: c.req.valid('json'),
+                    query: c.req.valid('query'),
+                    params: c.req.valid('param'),
+                    session,
+                    header,
+                    cookie,
+                    auditor,
+                    db,
+                  } as unknown as EndpointContext<
+                    TInput,
+                    TServices,
+                    TLogger,
+                    TSession,
+                    TAuditAction,
+                    TDatabase,
+                    TAuditStorage
+                  >,
+                  responseBuilder,
+                );
+
+                // Check if response has metadata
+                let data = response;
+                let metadata = responseBuilder.getMetadata();
+
+                if (Endpoint.hasMetadata(response)) {
+                  data = response.data;
+                  metadata = response.metadata;
+                }
 
-              if (Endpoint.hasMetadata(response)) {
-                data = response.data;
-                metadata = response.metadata;
+                const output = endpoint.outputSchema
+                  ? await endpoint.parseOutput(data)
+                  : undefined;
+
+                return { output, metadata, responseBuilder };
+              };
+
+              // If RLS is active, wrap handler with RLS context
+              if (rlsActive && rlsContext && baseDb) {
+                return withRlsContext(
+                  baseDb as any,
+                  rlsContext,
+                  async (trx) => executeHandler(trx as TDatabase),
+                  { prefix: endpoint.rlsConfig!.prefix },
+                );
               }
 
-              const output = endpoint.outputSchema
-                ? await endpoint.parseOutput(data)
-                : undefined;
-
-              return { output, metadata, responseBuilder };
+              return executeHandler(baseDb as TDatabase | undefined);
             },
             // Process declarative audits after handler (inside transaction)
             async (result, auditor) => {
@@ -443,6 +472,8 @@ export class HonoEndpoint<
                 });
               }
             },
+            // Pass rawDb so storage can reuse existing transactions
+            { db: rawDb },
           );
 
           const { output, metadata } = result;

package/src/endpoints/TestEndpointAdaptor.ts

@@ -293,6 +293,8 @@ export class TestEndpointAdaptor<
           });
         }
       },
+      // Pass rawDb so storage can reuse existing transactions
+      { db: rawDb },
     );
 
     const { output, metadata } = result;

package/src/endpoints/index.ts

@@ -10,5 +10,12 @@ export {
 } from './Endpoint';
 export { EndpointBuilder } from './EndpointBuilder';
 export { type MappedAudit, type ActorExtractor } from './audit';
+export {
+  type RlsConfig,
+  type RlsContext,
+  type RlsContextExtractor,
+  RLS_BYPASS,
+  type RlsBypass,
+} from './rls';
 
 export const e = new EndpointFactory();

package/src/endpoints/processAudits.ts

@@ -5,7 +5,6 @@ import type {
   Auditor,
 } from '@geekmidas/audit';
 import { DefaultAuditor } from '@geekmidas/audit';
-import { withAuditableTransaction } from '@geekmidas/audit/kysely';
 import type { Logger } from '@geekmidas/logger';
 import type { InferStandardSchema } from '@geekmidas/schema';
 import type { Service, ServiceDiscovery } from '@geekmidas/services';
@@ -288,14 +287,34 @@ export async function createAuditContext<
   return { auditor, storage };
 }
 
+/**
+ * Options for executeWithAuditTransaction.
+ */
+export interface ExecuteWithAuditTransactionOptions {
+  /**
+   * Database connection to use for the transaction.
+   * If this is already a transaction, it will be reused instead of creating a nested one.
+   * If not provided, the storage's internal database is used.
+   */
+  db?: unknown;
+}
+
 /**
  * Execute a handler with automatic audit transaction support.
- * If the audit storage has a database (via getDatabase()), wraps execution
+ * If the audit storage provides a withTransaction method, wraps execution
  * in a transaction so audits are atomic with handler's database operations.
  *
+ * This is database-agnostic - each storage implementation provides its own
+ * transaction handling based on the underlying database (Kysely, Drizzle, etc.).
+ *
+ * If the db parameter is provided and is already a transaction, the storage
+ * will reuse it instead of creating a nested transaction (similar to
+ * packages/db/src/kysely.ts#withTransaction).
+ *
  * @param auditContext - The audit context from createAuditContext
  * @param handler - The handler function to execute (receives auditor)
  * @param onComplete - Called after handler with response, to process declarative audits
+ * @param options - Optional configuration including database connection
  * @returns The handler result
  */
 export async function executeWithAuditTransaction<
@@ -308,6 +327,7 @@ export async function executeWithAuditTransaction<
   auditContext: AuditExecutionContext<TAuditAction> | undefined,
   handler: (auditor?: Auditor<TAuditAction>) => Promise<T>,
   onComplete?: (response: T, auditor: Auditor<TAuditAction>) => Promise<void>,
+  options?: ExecuteWithAuditTransactionOptions,
 ): Promise<T> {
   // No audit context - just run handler
   if (!auditContext) {
@@ -316,25 +336,28 @@ export async function executeWithAuditTransaction<
 
   const { auditor, storage } = auditContext;
 
-  // Check if storage has a database for transactional execution
-  const db = storage.getDatabase?.();
-
-  if (db) {
+  // Check if storage provides a transaction wrapper
+  if (storage.withTransaction) {
     // Wrap in transaction - audits are atomic with handler operations
-    return withAuditableTransaction(db as any, auditor as any, async () => {
-      const response = await handler(auditor);
+    // The storage's withTransaction handles setTransaction and flush
+    // Pass db so existing transactions are reused
+    return storage.withTransaction(
+      auditor,
+      async () => {
+        const response = await handler(auditor);
 
-      // Process declarative audits within the transaction
-      if (onComplete) {
-        await onComplete(response, auditor);
-      }
+        // Process declarative audits within the transaction
+        if (onComplete) {
+          await onComplete(response, auditor);
+        }
 
-      // Audits are flushed by withAuditableTransaction before commit
-      return response;
-    });
+        return response;
+      },
+      options?.db,
+    );
   }
 
-  // No database - run handler and flush audits after
+  // No transaction support - run handler and flush audits after
   const response = await handler(auditor);
 
   if (onComplete) {

package/src/endpoints/rls.ts

@@ -0,0 +1,67 @@
+import type { Logger } from '@geekmidas/logger';
+import type { Service, ServiceRecord } from '@geekmidas/services';
+import type { CookieFn, HeaderFn } from './Endpoint';
+
+/**
+ * RLS context - key-value pairs to set as PostgreSQL session variables.
+ * Keys become `prefix.key` (e.g., `app.user_id`).
+ */
+export interface RlsContext {
+  [key: string]: string | number | boolean | null | undefined;
+}
+
+/**
+ * Function type for extracting RLS context from request context.
+ *
+ * @template TServices - Available service dependencies
+ * @template TSession - Session data type
+ * @template TLogger - Logger type
+ *
+ * @example
+ * ```ts
+ * const extractor: RlsContextExtractor<[], UserSession> = ({ session }) => ({
+ *   user_id: session.userId,
+ *   tenant_id: session.tenantId,
+ *   roles: session.roles.join(','),
+ * });
+ * ```
+ */
+export type RlsContextExtractor<
+  TServices extends Service[] = [],
+  TSession = unknown,
+  TLogger extends Logger = Logger,
+> = (ctx: {
+  services: ServiceRecord<TServices>;
+  session: TSession;
+  header: HeaderFn;
+  cookie: CookieFn;
+  logger: TLogger;
+}) => RlsContext | Promise<RlsContext>;
+
+/**
+ * Configuration for RLS on an endpoint or factory.
+ *
+ * @template TServices - Available service dependencies
+ * @template TSession - Session data type
+ * @template TLogger - Logger type
+ */
+export interface RlsConfig<
+  TServices extends Service[] = [],
+  TSession = unknown,
+  TLogger extends Logger = Logger,
+> {
+  /** Function to extract RLS context from request */
+  extractor: RlsContextExtractor<TServices, TSession, TLogger>;
+  /** Prefix for PostgreSQL session variables (default: 'app') */
+  prefix?: string;
+}
+
+/**
+ * Symbol used to bypass RLS for an endpoint.
+ */
+export const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');
+
+/**
+ * Type for RLS bypass marker.
+ */
+export type RlsBypass = typeof RLS_BYPASS;

package/dist/AmazonApiGatewayEndpointAdaptor-CacGag6F.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AmazonApiGatewayEndpointAdaptor-CacGag6F.mjs","names":["envParser: EnvironmentParser<{}>","endpoint: Endpoint<\n      TRoute,\n      TMethod,\n      TInput,\n      TOutSchema,\n      TServices,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction\n    >","event: Event<TEvent, TInput, TServices, TLogger, TSession>","metadata","output","result","lambdaResponse: AmazonApiGatewayEndpointHandlerResponse","setCookieHeaders: string[]"],"sources":["../src/endpoints/AmazonApiGatewayEndpointAdaptor.ts"],"sourcesContent":["import type { AuditStorage, AuditableAction } from '@geekmidas/audit';\nimport type { Logger } from '@geekmidas/logger';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport type { HttpMethod } from '../types';\nimport { Endpoint, type EndpointSchemas, ResponseBuilder } from './Endpoint';\n\nimport type { EnvironmentParser } from '@geekmidas/envkit';\nimport middy, { type MiddlewareObj } from '@middy/core';\nimport type {\n  APIGatewayProxyEvent,\n  APIGatewayProxyEventV2,\n  Context,\n} from 'aws-lambda';\nimport set from 'lodash.set';\n\nimport {\n  UnauthorizedError,\n  UnprocessableEntityError,\n  wrapError,\n} from '@geekmidas/errors';\nimport type { EventPublisher } from '@geekmidas/events';\nimport {\n  type Service,\n  ServiceDiscovery,\n  type ServiceRecord,\n} from '@geekmidas/services';\n\nimport type {\n  InferComposableStandardSchema,\n  InferStandardSchema,\n} from '@geekmidas/schema';\nimport { publishConstructEvents } from '../publisher';\nimport type { CookieFn, HeaderFn } from './Endpoint';\nimport type { MappedAudit } from './audit';\nimport {\n  createAuditContext,\n  executeWithAuditTransaction,\n} from './processAudits';\n\n// Helper function to publish events\n\nexport abstract class AmazonApiGatewayEndpoint<\n  THandler extends\n    | AmazonApiGatewayV1EndpointHandler\n    | AmazonApiGatewayV2EndpointHandler,\n  TEvent extends HandlerEvent<THandler>,\n  TRoute extends string,\n  TMethod extends HttpMethod,\n  TInput extends EndpointSchemas = {},\n  TOutSchema extends StandardSchemaV1 | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n> {\n  constructor(\n    protected envParser: EnvironmentParser<{}>,\n    protected readonly endpoint: Endpoint<\n      TRoute,\n      TMethod,\n      TInput,\n      TOutSchema,\n      TServices,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction\n    >,\n  ) {}\n\n  private error(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      onError: (req) => {\n        (req.event.logger || this.endpoint.logger).error(\n          req.error || {},\n          'Error processing request',\n        );\n        const wrappedError = wrapError(req.error);\n\n        // Set the response with the proper status code from the HttpError\n        req.response = {\n          statusCode: wrappedError.statusCode,\n          body: wrappedError.body,\n        };\n      },\n    };\n  }\n  abstract getInput(e: TEvent): GetInputResponse;\n\n  private input(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        try {\n          const { body, query, params } = this.getInput(req.event);\n          const headers = req.event.headers as Record<string, string>;\n          const header = Endpoint.createHeaders(headers);\n          const cookie = Endpoint.createCookies(headers.cookie);\n\n          set(req.event, 'body', await this.endpoint.parseInput(body, 'body'));\n\n          set(\n            req.event,\n            'query',\n            await this.endpoint.parseInput(query, 'query'),\n          );\n          set(\n            req.event,\n            'params',\n            await this.endpoint.parseInput(params, 'params'),\n          );\n          set(req.event, 'header', header);\n          set(req.event, 'cookie', cookie);\n        } catch (error) {\n          // Convert validation errors to 422 Unprocessable Entity\n          if (error && typeof error === 'object' && Array.isArray(error)) {\n            throw new UnprocessableEntityError('Validation failed', error);\n          }\n          throw error;\n        }\n      },\n    };\n  }\n\n  abstract getLoggerContext(data: TEvent, context: Context): LoggerContext;\n\n  private logger(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: (req) => {\n        req.event.logger = this.endpoint.logger.child({\n          route: this.endpoint.route,\n          host: req.event.headers?.host,\n          method: this.endpoint.method,\n          ...this.getLoggerContext(req.event, req.context),\n        }) as TLogger;\n      },\n    };\n  }\n  private services(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const serviceDiscovery = ServiceDiscovery.getInstance<\n          ServiceRecord<TServices>,\n          TLogger\n        >(logger, this.envParser);\n\n        const services = await serviceDiscovery.register(\n          this.endpoint.services,\n        );\n\n        req.event.services = services;\n      },\n    };\n  }\n\n  private authorize(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const services = req.event.services;\n        const header = req.event.header;\n        const cookie = req.event.cookie;\n        const session = req.event.session as TSession;\n\n        const isAuthorized = await this.endpoint.authorize({\n          header,\n          cookie,\n          services,\n          logger,\n          session,\n        });\n\n        if (!isAuthorized) {\n          logger.warn('Unauthorized access attempt');\n          throw new UnauthorizedError(\n            'Unauthorized access to the endpoint',\n            'You do not have permission to access this resource.',\n          );\n        }\n      },\n    };\n  }\n\n  private database(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        if (!this.endpoint.databaseService) {\n          return;\n        }\n\n        const logger = req.event.logger as TLogger;\n        const serviceDiscovery = ServiceDiscovery.getInstance<\n          ServiceRecord<TServices>,\n          TLogger\n        >(logger, this.envParser);\n\n        const db = await serviceDiscovery\n          .register([this.endpoint.databaseService])\n          .then(\n            (s) =>\n              s[this.endpoint.databaseService!.serviceName as keyof typeof s],\n          );\n\n        (req.event as any).db = db;\n      },\n    };\n  }\n\n  private session(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const services = req.event.services;\n        const db = (req.event as any).db;\n        req.event.session = (await this.endpoint.getSession({\n          logger,\n          services,\n          header: req.event.header,\n          cookie: req.event.cookie,\n          ...(db !== undefined && { db }),\n        } as any)) as TSession;\n      },\n    };\n  }\n\n  private events(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      after: async (req) => {\n        const event = req.event;\n        const response = (event as any)\n          .__response as InferStandardSchema<TOutSchema>;\n        const statusCode = req.response?.statusCode ?? this.endpoint.status;\n\n        // Only publish events on successful responses (2xx status codes)\n        // Note: Audits are processed inside the handler's transaction\n        if (Endpoint.isSuccessStatus(statusCode)) {\n          const logger = event.logger as TLogger;\n          const serviceDiscovery = ServiceDiscovery.getInstance<\n            ServiceRecord<TServices>,\n            TLogger\n          >(logger, this.envParser);\n\n          // Publish events\n          await publishConstructEvents(\n            this.endpoint,\n            response,\n            serviceDiscovery,\n            logger,\n          );\n        }\n      },\n    };\n  }\n\n  private async _handler(\n    event: Event<TEvent, TInput, TServices, TLogger, TSession>,\n  ) {\n    const input = this.endpoint.refineInput(event);\n    const logger = event.logger as TLogger;\n    const serviceDiscovery = ServiceDiscovery.getInstance<\n      ServiceRecord<TServices>,\n      TLogger\n    >(logger, this.envParser);\n\n    // Create audit context if audit storage is configured\n    const auditContext = await createAuditContext(\n      this.endpoint,\n      serviceDiscovery,\n      logger,\n      {\n        session: event.session,\n        header: event.header,\n        cookie: event.cookie,\n        services: event.services as Record<string, unknown>,\n      },\n    );\n\n    // Warn if declarative audits are configured but no audit storage\n    const audits = this.endpoint.audits as MappedAudit<\n      TAuditAction,\n      TOutSchema\n    >[];\n    if (!auditContext && audits?.length) {\n      logger.warn('No auditor storage service available');\n    }\n\n    // Get pre-resolved database from middleware\n    const rawDb = (event as any).db;\n\n    // Execute handler with automatic audit transaction support\n    const result = await executeWithAuditTransaction(\n      auditContext,\n      async (auditor) => {\n        // Use audit transaction as db only if the storage uses the same database service\n        const sameDatabase =\n          auditContext?.storage?.databaseServiceName &&\n          auditContext.storage.databaseServiceName ===\n            this.endpoint.databaseService?.serviceName;\n        const db = sameDatabase\n          ? (auditor?.getTransaction?.() ?? rawDb)\n          : rawDb;\n\n        const responseBuilder = new ResponseBuilder();\n        const response = await this.endpoint.handler(\n          {\n            header: event.header,\n            cookie: event.cookie,\n            logger: event.logger,\n            services: event.services,\n            session: event.session,\n            auditor,\n            db,\n            ...input,\n          } as any,\n          responseBuilder,\n        );\n\n        // Check if response has metadata\n        let data = response;\n        let metadata = responseBuilder.getMetadata();\n\n        if (Endpoint.hasMetadata(response)) {\n          data = response.data;\n          metadata = response.metadata;\n        }\n\n        const output = this.endpoint.outputSchema\n          ? await this.endpoint.parseOutput(data)\n          : undefined;\n\n        return { output, metadata, responseBuilder };\n      },\n      // Process declarative audits after handler (inside transaction)\n      async (result, auditor) => {\n        if (!audits?.length) return;\n\n        for (const audit of audits) {\n          if (audit.when && !audit.when(result.output as any)) {\n            continue;\n          }\n          const payload = audit.payload(result.output as any);\n          const entityId = audit.entityId?.(result.output as any);\n          auditor.audit(audit.type as any, payload as any, {\n            table: audit.table,\n            entityId,\n          });\n        }\n      },\n    );\n\n    const { output, metadata } = result;\n    const body = output !== undefined ? JSON.stringify(output) : undefined;\n\n    // Store response for middleware access\n    (event as any).__response = output;\n\n    // Build response with metadata\n    const lambdaResponse: AmazonApiGatewayEndpointHandlerResponse = {\n      statusCode: metadata.status ?? this.endpoint.status,\n      body,\n    };\n\n    // Add custom headers\n    if (metadata.headers && Object.keys(metadata.headers).length > 0) {\n      lambdaResponse.headers = { ...metadata.headers };\n    }\n\n    // Format cookies as Set-Cookie headers\n    if (metadata.cookies && metadata.cookies.size > 0) {\n      const setCookieHeaders: string[] = [];\n      for (const [name, { value, options }] of metadata.cookies) {\n        setCookieHeaders.push(\n          Endpoint.formatCookieHeader(name, value, options),\n        );\n      }\n\n      if (setCookieHeaders.length > 0) {\n        lambdaResponse.multiValueHeaders = {\n          ...lambdaResponse.multiValueHeaders,\n          'Set-Cookie': setCookieHeaders,\n        };\n      }\n    }\n\n    return lambdaResponse;\n  }\n\n  get handler() {\n    const handler = this._handler.bind(this);\n    return middy(handler)\n      .use(this.logger())\n      .use(this.error())\n      .use(this.services())\n      .use(this.input())\n      .use(this.database())\n      .use(this.session())\n      .use(this.authorize())\n      .use(this.events()) as unknown as THandler;\n  }\n}\n\nexport type Event<\n  TEvent extends APIGatewayProxyEvent | APIGatewayProxyEventV2,\n  TInput extends EndpointSchemas = {},\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = {\n  services: ServiceRecord<TServices>;\n  logger: TLogger;\n  header: HeaderFn;\n  cookie: CookieFn;\n  session: TSession;\n} & TEvent &\n  InferComposableStandardSchema<TInput>;\n\ntype Middleware<\n  TEvent extends APIGatewayProxyEvent | APIGatewayProxyEventV2,\n  TInput extends EndpointSchemas = {},\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = MiddlewareObj<Event<TEvent, TInput, TServices, TLogger, TSession>>;\n\nexport type AmazonApiGatewayEndpointHandlerResponse = {\n  statusCode: number;\n  body: string | undefined;\n  headers?: Record<string, string>;\n  multiValueHeaders?: Record<string, string[]>;\n};\n\nexport type LoggerContext = {\n  fn: {\n    name: string;\n    version: string;\n  };\n  req: {\n    id: string | undefined;\n    awsRequestId: string;\n    path: string;\n    ip: string | undefined;\n    userAgent: string | undefined;\n  };\n};\n\nexport type GetInputResponse = {\n  body: any;\n  query: any;\n  params: any;\n};\n\nexport type AmazonApiGatewayV1EndpointHandler = (\n  event: APIGatewayProxyEvent,\n  context: Context,\n) => Promise<AmazonApiGatewayEndpointHandlerResponse>;\n\nexport type AmazonApiGatewayV2EndpointHandler = (\n  event: APIGatewayProxyEventV2,\n  context: Context,\n) => Promise<AmazonApiGatewayEndpointHandlerResponse>;\n\nexport type HandlerEvent<T extends Function> = T extends (\n  event: infer E,\n  context: Context,\n) => any\n  ? E\n  : never;\n"],"mappings":";;;;;;;;;AAyCA,IAAsB,2BAAtB,MAoBE;CACA,YACYA,WACSC,UAcnB;EAfU;EACS;CAcjB;CAEJ,AAAQ,QAAwD;AAC9D,SAAO,EACL,SAAS,CAAC,QAAQ;AAChB,IAAC,IAAI,MAAM,UAAU,KAAK,SAAS,QAAQ,MACzC,IAAI,SAAS,CAAE,GACf,2BACD;GACD,MAAM,eAAe,UAAU,IAAI,MAAM;AAGzC,OAAI,WAAW;IACb,YAAY,aAAa;IACzB,MAAM,aAAa;GACpB;EACF,EACF;CACF;CAGD,AAAQ,QAAwD;AAC9D,SAAO,EACL,QAAQ,OAAO,QAAQ;AACrB,OAAI;IACF,MAAM,EAAE,MAAM,OAAO,QAAQ,GAAG,KAAK,SAAS,IAAI,MAAM;IACxD,MAAM,UAAU,IAAI,MAAM;IAC1B,MAAM,SAAS,SAAS,cAAc,QAAQ;IAC9C,MAAM,SAAS,SAAS,cAAc,QAAQ,OAAO;AAErD,QAAI,IAAI,OAAO,QAAQ,MAAM,KAAK,SAAS,WAAW,MAAM,OAAO,CAAC;AAEpE,QACE,IAAI,OACJ,SACA,MAAM,KAAK,SAAS,WAAW,OAAO,QAAQ,CAC/C;AACD,QACE,IAAI,OACJ,UACA,MAAM,KAAK,SAAS,WAAW,QAAQ,SAAS,CACjD;AACD,QAAI,IAAI,OAAO,UAAU,OAAO;AAChC,QAAI,IAAI,OAAO,UAAU,OAAO;GACjC,SAAQ,OAAO;AAEd,QAAI,gBAAgB,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC5D,OAAM,IAAI,yBAAyB,qBAAqB;AAE1D,UAAM;GACP;EACF,EACF;CACF;CAID,AAAQ,SAAyD;AAC/D,SAAO,EACL,QAAQ,CAAC,QAAQ;AACf,OAAI,MAAM,SAAS,KAAK,SAAS,OAAO,MAAM;IAC5C,OAAO,KAAK,SAAS;IACrB,MAAM,IAAI,MAAM,SAAS;IACzB,QAAQ,KAAK,SAAS;IACtB,GAAG,KAAK,iBAAiB,IAAI,OAAO,IAAI,QAAQ;GACjD,EAAC;EACH,EACF;CACF;CACD,AAAQ,WAA2D;AACjE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,mBAAmB,iBAAiB,YAGxC,QAAQ,KAAK,UAAU;GAEzB,MAAM,WAAW,MAAM,iBAAiB,SACtC,KAAK,SAAS,SACf;AAED,OAAI,MAAM,WAAW;EACtB,EACF;CACF;CAED,AAAQ,YAA4D;AAClE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,WAAW,IAAI,MAAM;GAC3B,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,UAAU,IAAI,MAAM;GAE1B,MAAM,eAAe,MAAM,KAAK,SAAS,UAAU;IACjD;IACA;IACA;IACA;IACA;GACD,EAAC;AAEF,QAAK,cAAc;AACjB,WAAO,KAAK,8BAA8B;AAC1C,UAAM,IAAI,kBACR,uCACA;GAEH;EACF,EACF;CACF;CAED,AAAQ,WAA2D;AACjE,SAAO,EACL,QAAQ,OAAO,QAAQ;AACrB,QAAK,KAAK,SAAS,gBACjB;GAGF,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,mBAAmB,iBAAiB,YAGxC,QAAQ,KAAK,UAAU;GAEzB,MAAM,KAAK,MAAM,iBACd,SAAS,CAAC,KAAK,SAAS,eAAgB,EAAC,CACzC,KACC,CAAC,MACC,EAAE,KAAK,SAAS,gBAAiB,aACpC;AAEH,GAAC,IAAI,MAAc,KAAK;EACzB,EACF;CACF;CAED,AAAQ,UAA0D;AAChE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,WAAW,IAAI,MAAM;GAC3B,MAAM,KAAM,IAAI,MAAc;AAC9B,OAAI,MAAM,UAAW,MAAM,KAAK,SAAS,WAAW;IAClD;IACA;IACA,QAAQ,IAAI,MAAM;IAClB,QAAQ,IAAI,MAAM;IAClB,GAAI,iBAAoB,EAAE,GAAI;GAC/B,EAAQ;EACV,EACF;CACF;CAED,AAAQ,SAAyD;AAC/D,SAAO,EACL,OAAO,OAAO,QAAQ;GACpB,MAAM,QAAQ,IAAI;GAClB,MAAM,WAAY,MACf;GACH,MAAM,aAAa,IAAI,UAAU,cAAc,KAAK,SAAS;AAI7D,OAAI,SAAS,gBAAgB,WAAW,EAAE;IACxC,MAAM,SAAS,MAAM;IACrB,MAAM,mBAAmB,iBAAiB,YAGxC,QAAQ,KAAK,UAAU;AAGzB,UAAM,uBACJ,KAAK,UACL,UACA,kBACA,OACD;GACF;EACF,EACF;CACF;CAED,MAAc,SACZC,OACA;EACA,MAAM,QAAQ,KAAK,SAAS,YAAY,MAAM;EAC9C,MAAM,SAAS,MAAM;EACrB,MAAM,mBAAmB,iBAAiB,YAGxC,QAAQ,KAAK,UAAU;EAGzB,MAAM,eAAe,MAAM,mBACzB,KAAK,UACL,kBACA,QACA;GACE,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,UAAU,MAAM;EACjB,EACF;EAGD,MAAM,SAAS,KAAK,SAAS;AAI7B,OAAK,gBAAgB,QAAQ,OAC3B,QAAO,KAAK,uCAAuC;EAIrD,MAAM,QAAS,MAAc;EAG7B,MAAM,SAAS,MAAM,4BACnB,cACA,OAAO,YAAY;GAEjB,MAAM,eACJ,cAAc,SAAS,uBACvB,aAAa,QAAQ,wBACnB,KAAK,SAAS,iBAAiB;GACnC,MAAM,KAAK,eACN,SAAS,kBAAkB,IAAI,QAChC;GAEJ,MAAM,kBAAkB,IAAI;GAC5B,MAAM,WAAW,MAAM,KAAK,SAAS,QACnC;IACE,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,UAAU,MAAM;IAChB,SAAS,MAAM;IACf;IACA;IACA,GAAG;GACJ,GACD,gBACD;GAGD,IAAI,OAAO;GACX,IAAIC,aAAW,gBAAgB,aAAa;AAE5C,OAAI,SAAS,YAAY,SAAS,EAAE;AAClC,WAAO,SAAS;AAChB,iBAAW,SAAS;GACrB;GAED,MAAMC,WAAS,KAAK,SAAS,eACzB,MAAM,KAAK,SAAS,YAAY,KAAK;AAGzC,UAAO;IAAE;IAAQ;IAAU;GAAiB;EAC7C,GAED,OAAOC,UAAQ,YAAY;AACzB,QAAK,QAAQ,OAAQ;AAErB,QAAK,MAAM,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,MAAM,KAAKA,SAAO,OAAc,CACjD;IAEF,MAAM,UAAU,MAAM,QAAQA,SAAO,OAAc;IACnD,MAAM,WAAW,MAAM,WAAWA,SAAO,OAAc;AACvD,YAAQ,MAAM,MAAM,MAAa,SAAgB;KAC/C,OAAO,MAAM;KACb;IACD,EAAC;GACH;EACF,EACF;EAED,MAAM,EAAE,QAAQ,UAAU,GAAG;EAC7B,MAAM,OAAO,oBAAuB,KAAK,UAAU,OAAO;AAG1D,EAAC,MAAc,aAAa;EAG5B,MAAMC,iBAA0D;GAC9D,YAAY,SAAS,UAAU,KAAK,SAAS;GAC7C;EACD;AAGD,MAAI,SAAS,WAAW,OAAO,KAAK,SAAS,QAAQ,CAAC,SAAS,EAC7D,gBAAe,UAAU,EAAE,GAAG,SAAS,QAAS;AAIlD,MAAI,SAAS,WAAW,SAAS,QAAQ,OAAO,GAAG;GACjD,MAAMC,mBAA6B,CAAE;AACrC,QAAK,MAAM,CAAC,MAAM,EAAE,OAAO,SAAS,CAAC,IAAI,SAAS,QAChD,kBAAiB,KACf,SAAS,mBAAmB,MAAM,OAAO,QAAQ,CAClD;AAGH,OAAI,iBAAiB,SAAS,EAC5B,gBAAe,oBAAoB;IACjC,GAAG,eAAe;IAClB,cAAc;GACf;EAEJ;AAED,SAAO;CACR;CAED,IAAI,UAAU;EACZ,MAAM,UAAU,KAAK,SAAS,KAAK,KAAK;AACxC,SAAO,MAAM,QAAQ,CAClB,IAAI,KAAK,QAAQ,CAAC,CAClB,IAAI,KAAK,OAAO,CAAC,CACjB,IAAI,KAAK,UAAU,CAAC,CACpB,IAAI,KAAK,OAAO,CAAC,CACjB,IAAI,KAAK,UAAU,CAAC,CACpB,IAAI,KAAK,SAAS,CAAC,CACnB,IAAI,KAAK,WAAW,CAAC,CACrB,IAAI,KAAK,QAAQ,CAAC;CACtB;AACF"}

package/dist/AmazonApiGatewayEndpointAdaptor-DXssXsJi.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AmazonApiGatewayEndpointAdaptor-DXssXsJi.cjs","names":["envParser: EnvironmentParser<{}>","endpoint: Endpoint<\n      TRoute,\n      TMethod,\n      TInput,\n      TOutSchema,\n      TServices,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction\n    >","UnprocessableEntityError","UnauthorizedError","event: Event<TEvent, TInput, TServices, TLogger, TSession>","ResponseBuilder","metadata","output","result","lambdaResponse: AmazonApiGatewayEndpointHandlerResponse","setCookieHeaders: string[]"],"sources":["../src/endpoints/AmazonApiGatewayEndpointAdaptor.ts"],"sourcesContent":["import type { AuditStorage, AuditableAction } from '@geekmidas/audit';\nimport type { Logger } from '@geekmidas/logger';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport type { HttpMethod } from '../types';\nimport { Endpoint, type EndpointSchemas, ResponseBuilder } from './Endpoint';\n\nimport type { EnvironmentParser } from '@geekmidas/envkit';\nimport middy, { type MiddlewareObj } from '@middy/core';\nimport type {\n  APIGatewayProxyEvent,\n  APIGatewayProxyEventV2,\n  Context,\n} from 'aws-lambda';\nimport set from 'lodash.set';\n\nimport {\n  UnauthorizedError,\n  UnprocessableEntityError,\n  wrapError,\n} from '@geekmidas/errors';\nimport type { EventPublisher } from '@geekmidas/events';\nimport {\n  type Service,\n  ServiceDiscovery,\n  type ServiceRecord,\n} from '@geekmidas/services';\n\nimport type {\n  InferComposableStandardSchema,\n  InferStandardSchema,\n} from '@geekmidas/schema';\nimport { publishConstructEvents } from '../publisher';\nimport type { CookieFn, HeaderFn } from './Endpoint';\nimport type { MappedAudit } from './audit';\nimport {\n  createAuditContext,\n  executeWithAuditTransaction,\n} from './processAudits';\n\n// Helper function to publish events\n\nexport abstract class AmazonApiGatewayEndpoint<\n  THandler extends\n    | AmazonApiGatewayV1EndpointHandler\n    | AmazonApiGatewayV2EndpointHandler,\n  TEvent extends HandlerEvent<THandler>,\n  TRoute extends string,\n  TMethod extends HttpMethod,\n  TInput extends EndpointSchemas = {},\n  TOutSchema extends StandardSchemaV1 | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n> {\n  constructor(\n    protected envParser: EnvironmentParser<{}>,\n    protected readonly endpoint: Endpoint<\n      TRoute,\n      TMethod,\n      TInput,\n      TOutSchema,\n      TServices,\n      TLogger,\n      TSession,\n      TEventPublisher,\n      TEventPublisherServiceName,\n      TAuditStorage,\n      TAuditStorageServiceName,\n      TAuditAction\n    >,\n  ) {}\n\n  private error(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      onError: (req) => {\n        (req.event.logger || this.endpoint.logger).error(\n          req.error || {},\n          'Error processing request',\n        );\n        const wrappedError = wrapError(req.error);\n\n        // Set the response with the proper status code from the HttpError\n        req.response = {\n          statusCode: wrappedError.statusCode,\n          body: wrappedError.body,\n        };\n      },\n    };\n  }\n  abstract getInput(e: TEvent): GetInputResponse;\n\n  private input(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        try {\n          const { body, query, params } = this.getInput(req.event);\n          const headers = req.event.headers as Record<string, string>;\n          const header = Endpoint.createHeaders(headers);\n          const cookie = Endpoint.createCookies(headers.cookie);\n\n          set(req.event, 'body', await this.endpoint.parseInput(body, 'body'));\n\n          set(\n            req.event,\n            'query',\n            await this.endpoint.parseInput(query, 'query'),\n          );\n          set(\n            req.event,\n            'params',\n            await this.endpoint.parseInput(params, 'params'),\n          );\n          set(req.event, 'header', header);\n          set(req.event, 'cookie', cookie);\n        } catch (error) {\n          // Convert validation errors to 422 Unprocessable Entity\n          if (error && typeof error === 'object' && Array.isArray(error)) {\n            throw new UnprocessableEntityError('Validation failed', error);\n          }\n          throw error;\n        }\n      },\n    };\n  }\n\n  abstract getLoggerContext(data: TEvent, context: Context): LoggerContext;\n\n  private logger(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: (req) => {\n        req.event.logger = this.endpoint.logger.child({\n          route: this.endpoint.route,\n          host: req.event.headers?.host,\n          method: this.endpoint.method,\n          ...this.getLoggerContext(req.event, req.context),\n        }) as TLogger;\n      },\n    };\n  }\n  private services(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const serviceDiscovery = ServiceDiscovery.getInstance<\n          ServiceRecord<TServices>,\n          TLogger\n        >(logger, this.envParser);\n\n        const services = await serviceDiscovery.register(\n          this.endpoint.services,\n        );\n\n        req.event.services = services;\n      },\n    };\n  }\n\n  private authorize(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const services = req.event.services;\n        const header = req.event.header;\n        const cookie = req.event.cookie;\n        const session = req.event.session as TSession;\n\n        const isAuthorized = await this.endpoint.authorize({\n          header,\n          cookie,\n          services,\n          logger,\n          session,\n        });\n\n        if (!isAuthorized) {\n          logger.warn('Unauthorized access attempt');\n          throw new UnauthorizedError(\n            'Unauthorized access to the endpoint',\n            'You do not have permission to access this resource.',\n          );\n        }\n      },\n    };\n  }\n\n  private database(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        if (!this.endpoint.databaseService) {\n          return;\n        }\n\n        const logger = req.event.logger as TLogger;\n        const serviceDiscovery = ServiceDiscovery.getInstance<\n          ServiceRecord<TServices>,\n          TLogger\n        >(logger, this.envParser);\n\n        const db = await serviceDiscovery\n          .register([this.endpoint.databaseService])\n          .then(\n            (s) =>\n              s[this.endpoint.databaseService!.serviceName as keyof typeof s],\n          );\n\n        (req.event as any).db = db;\n      },\n    };\n  }\n\n  private session(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      before: async (req) => {\n        const logger = req.event.logger as TLogger;\n        const services = req.event.services;\n        const db = (req.event as any).db;\n        req.event.session = (await this.endpoint.getSession({\n          logger,\n          services,\n          header: req.event.header,\n          cookie: req.event.cookie,\n          ...(db !== undefined && { db }),\n        } as any)) as TSession;\n      },\n    };\n  }\n\n  private events(): Middleware<TEvent, TInput, TServices, TLogger> {\n    return {\n      after: async (req) => {\n        const event = req.event;\n        const response = (event as any)\n          .__response as InferStandardSchema<TOutSchema>;\n        const statusCode = req.response?.statusCode ?? this.endpoint.status;\n\n        // Only publish events on successful responses (2xx status codes)\n        // Note: Audits are processed inside the handler's transaction\n        if (Endpoint.isSuccessStatus(statusCode)) {\n          const logger = event.logger as TLogger;\n          const serviceDiscovery = ServiceDiscovery.getInstance<\n            ServiceRecord<TServices>,\n            TLogger\n          >(logger, this.envParser);\n\n          // Publish events\n          await publishConstructEvents(\n            this.endpoint,\n            response,\n            serviceDiscovery,\n            logger,\n          );\n        }\n      },\n    };\n  }\n\n  private async _handler(\n    event: Event<TEvent, TInput, TServices, TLogger, TSession>,\n  ) {\n    const input = this.endpoint.refineInput(event);\n    const logger = event.logger as TLogger;\n    const serviceDiscovery = ServiceDiscovery.getInstance<\n      ServiceRecord<TServices>,\n      TLogger\n    >(logger, this.envParser);\n\n    // Create audit context if audit storage is configured\n    const auditContext = await createAuditContext(\n      this.endpoint,\n      serviceDiscovery,\n      logger,\n      {\n        session: event.session,\n        header: event.header,\n        cookie: event.cookie,\n        services: event.services as Record<string, unknown>,\n      },\n    );\n\n    // Warn if declarative audits are configured but no audit storage\n    const audits = this.endpoint.audits as MappedAudit<\n      TAuditAction,\n      TOutSchema\n    >[];\n    if (!auditContext && audits?.length) {\n      logger.warn('No auditor storage service available');\n    }\n\n    // Get pre-resolved database from middleware\n    const rawDb = (event as any).db;\n\n    // Execute handler with automatic audit transaction support\n    const result = await executeWithAuditTransaction(\n      auditContext,\n      async (auditor) => {\n        // Use audit transaction as db only if the storage uses the same database service\n        const sameDatabase =\n          auditContext?.storage?.databaseServiceName &&\n          auditContext.storage.databaseServiceName ===\n            this.endpoint.databaseService?.serviceName;\n        const db = sameDatabase\n          ? (auditor?.getTransaction?.() ?? rawDb)\n          : rawDb;\n\n        const responseBuilder = new ResponseBuilder();\n        const response = await this.endpoint.handler(\n          {\n            header: event.header,\n            cookie: event.cookie,\n            logger: event.logger,\n            services: event.services,\n            session: event.session,\n            auditor,\n            db,\n            ...input,\n          } as any,\n          responseBuilder,\n        );\n\n        // Check if response has metadata\n        let data = response;\n        let metadata = responseBuilder.getMetadata();\n\n        if (Endpoint.hasMetadata(response)) {\n          data = response.data;\n          metadata = response.metadata;\n        }\n\n        const output = this.endpoint.outputSchema\n          ? await this.endpoint.parseOutput(data)\n          : undefined;\n\n        return { output, metadata, responseBuilder };\n      },\n      // Process declarative audits after handler (inside transaction)\n      async (result, auditor) => {\n        if (!audits?.length) return;\n\n        for (const audit of audits) {\n          if (audit.when && !audit.when(result.output as any)) {\n            continue;\n          }\n          const payload = audit.payload(result.output as any);\n          const entityId = audit.entityId?.(result.output as any);\n          auditor.audit(audit.type as any, payload as any, {\n            table: audit.table,\n            entityId,\n          });\n        }\n      },\n    );\n\n    const { output, metadata } = result;\n    const body = output !== undefined ? JSON.stringify(output) : undefined;\n\n    // Store response for middleware access\n    (event as any).__response = output;\n\n    // Build response with metadata\n    const lambdaResponse: AmazonApiGatewayEndpointHandlerResponse = {\n      statusCode: metadata.status ?? this.endpoint.status,\n      body,\n    };\n\n    // Add custom headers\n    if (metadata.headers && Object.keys(metadata.headers).length > 0) {\n      lambdaResponse.headers = { ...metadata.headers };\n    }\n\n    // Format cookies as Set-Cookie headers\n    if (metadata.cookies && metadata.cookies.size > 0) {\n      const setCookieHeaders: string[] = [];\n      for (const [name, { value, options }] of metadata.cookies) {\n        setCookieHeaders.push(\n          Endpoint.formatCookieHeader(name, value, options),\n        );\n      }\n\n      if (setCookieHeaders.length > 0) {\n        lambdaResponse.multiValueHeaders = {\n          ...lambdaResponse.multiValueHeaders,\n          'Set-Cookie': setCookieHeaders,\n        };\n      }\n    }\n\n    return lambdaResponse;\n  }\n\n  get handler() {\n    const handler = this._handler.bind(this);\n    return middy(handler)\n      .use(this.logger())\n      .use(this.error())\n      .use(this.services())\n      .use(this.input())\n      .use(this.database())\n      .use(this.session())\n      .use(this.authorize())\n      .use(this.events()) as unknown as THandler;\n  }\n}\n\nexport type Event<\n  TEvent extends APIGatewayProxyEvent | APIGatewayProxyEventV2,\n  TInput extends EndpointSchemas = {},\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = {\n  services: ServiceRecord<TServices>;\n  logger: TLogger;\n  header: HeaderFn;\n  cookie: CookieFn;\n  session: TSession;\n} & TEvent &\n  InferComposableStandardSchema<TInput>;\n\ntype Middleware<\n  TEvent extends APIGatewayProxyEvent | APIGatewayProxyEventV2,\n  TInput extends EndpointSchemas = {},\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = MiddlewareObj<Event<TEvent, TInput, TServices, TLogger, TSession>>;\n\nexport type AmazonApiGatewayEndpointHandlerResponse = {\n  statusCode: number;\n  body: string | undefined;\n  headers?: Record<string, string>;\n  multiValueHeaders?: Record<string, string[]>;\n};\n\nexport type LoggerContext = {\n  fn: {\n    name: string;\n    version: string;\n  };\n  req: {\n    id: string | undefined;\n    awsRequestId: string;\n    path: string;\n    ip: string | undefined;\n    userAgent: string | undefined;\n  };\n};\n\nexport type GetInputResponse = {\n  body: any;\n  query: any;\n  params: any;\n};\n\nexport type AmazonApiGatewayV1EndpointHandler = (\n  event: APIGatewayProxyEvent,\n  context: Context,\n) => Promise<AmazonApiGatewayEndpointHandlerResponse>;\n\nexport type AmazonApiGatewayV2EndpointHandler = (\n  event: APIGatewayProxyEventV2,\n  context: Context,\n) => Promise<AmazonApiGatewayEndpointHandlerResponse>;\n\nexport type HandlerEvent<T extends Function> = T extends (\n  event: infer E,\n  context: Context,\n) => any\n  ? E\n  : never;\n"],"mappings":";;;;;;;;;;AAyCA,IAAsB,2BAAtB,MAoBE;CACA,YACYA,WACSC,UAcnB;EAfU;EACS;CAcjB;CAEJ,AAAQ,QAAwD;AAC9D,SAAO,EACL,SAAS,CAAC,QAAQ;AAChB,IAAC,IAAI,MAAM,UAAU,KAAK,SAAS,QAAQ,MACzC,IAAI,SAAS,CAAE,GACf,2BACD;GACD,MAAM,eAAe,kCAAU,IAAI,MAAM;AAGzC,OAAI,WAAW;IACb,YAAY,aAAa;IACzB,MAAM,aAAa;GACpB;EACF,EACF;CACF;CAGD,AAAQ,QAAwD;AAC9D,SAAO,EACL,QAAQ,OAAO,QAAQ;AACrB,OAAI;IACF,MAAM,EAAE,MAAM,OAAO,QAAQ,GAAG,KAAK,SAAS,IAAI,MAAM;IACxD,MAAM,UAAU,IAAI,MAAM;IAC1B,MAAM,SAAS,0BAAS,cAAc,QAAQ;IAC9C,MAAM,SAAS,0BAAS,cAAc,QAAQ,OAAO;AAErD,4BAAI,IAAI,OAAO,QAAQ,MAAM,KAAK,SAAS,WAAW,MAAM,OAAO,CAAC;AAEpE,4BACE,IAAI,OACJ,SACA,MAAM,KAAK,SAAS,WAAW,OAAO,QAAQ,CAC/C;AACD,4BACE,IAAI,OACJ,UACA,MAAM,KAAK,SAAS,WAAW,QAAQ,SAAS,CACjD;AACD,4BAAI,IAAI,OAAO,UAAU,OAAO;AAChC,4BAAI,IAAI,OAAO,UAAU,OAAO;GACjC,SAAQ,OAAO;AAEd,QAAI,gBAAgB,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC5D,OAAM,IAAIC,4CAAyB,qBAAqB;AAE1D,UAAM;GACP;EACF,EACF;CACF;CAID,AAAQ,SAAyD;AAC/D,SAAO,EACL,QAAQ,CAAC,QAAQ;AACf,OAAI,MAAM,SAAS,KAAK,SAAS,OAAO,MAAM;IAC5C,OAAO,KAAK,SAAS;IACrB,MAAM,IAAI,MAAM,SAAS;IACzB,QAAQ,KAAK,SAAS;IACtB,GAAG,KAAK,iBAAiB,IAAI,OAAO,IAAI,QAAQ;GACjD,EAAC;EACH,EACF;CACF;CACD,AAAQ,WAA2D;AACjE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,mBAAmB,sCAAiB,YAGxC,QAAQ,KAAK,UAAU;GAEzB,MAAM,WAAW,MAAM,iBAAiB,SACtC,KAAK,SAAS,SACf;AAED,OAAI,MAAM,WAAW;EACtB,EACF;CACF;CAED,AAAQ,YAA4D;AAClE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,WAAW,IAAI,MAAM;GAC3B,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,UAAU,IAAI,MAAM;GAE1B,MAAM,eAAe,MAAM,KAAK,SAAS,UAAU;IACjD;IACA;IACA;IACA;IACA;GACD,EAAC;AAEF,QAAK,cAAc;AACjB,WAAO,KAAK,8BAA8B;AAC1C,UAAM,IAAIC,qCACR,uCACA;GAEH;EACF,EACF;CACF;CAED,AAAQ,WAA2D;AACjE,SAAO,EACL,QAAQ,OAAO,QAAQ;AACrB,QAAK,KAAK,SAAS,gBACjB;GAGF,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,mBAAmB,sCAAiB,YAGxC,QAAQ,KAAK,UAAU;GAEzB,MAAM,KAAK,MAAM,iBACd,SAAS,CAAC,KAAK,SAAS,eAAgB,EAAC,CACzC,KACC,CAAC,MACC,EAAE,KAAK,SAAS,gBAAiB,aACpC;AAEH,GAAC,IAAI,MAAc,KAAK;EACzB,EACF;CACF;CAED,AAAQ,UAA0D;AAChE,SAAO,EACL,QAAQ,OAAO,QAAQ;GACrB,MAAM,SAAS,IAAI,MAAM;GACzB,MAAM,WAAW,IAAI,MAAM;GAC3B,MAAM,KAAM,IAAI,MAAc;AAC9B,OAAI,MAAM,UAAW,MAAM,KAAK,SAAS,WAAW;IAClD;IACA;IACA,QAAQ,IAAI,MAAM;IAClB,QAAQ,IAAI,MAAM;IAClB,GAAI,iBAAoB,EAAE,GAAI;GAC/B,EAAQ;EACV,EACF;CACF;CAED,AAAQ,SAAyD;AAC/D,SAAO,EACL,OAAO,OAAO,QAAQ;GACpB,MAAM,QAAQ,IAAI;GAClB,MAAM,WAAY,MACf;GACH,MAAM,aAAa,IAAI,UAAU,cAAc,KAAK,SAAS;AAI7D,OAAI,0BAAS,gBAAgB,WAAW,EAAE;IACxC,MAAM,SAAS,MAAM;IACrB,MAAM,mBAAmB,sCAAiB,YAGxC,QAAQ,KAAK,UAAU;AAGzB,UAAM,yCACJ,KAAK,UACL,UACA,kBACA,OACD;GACF;EACF,EACF;CACF;CAED,MAAc,SACZC,OACA;EACA,MAAM,QAAQ,KAAK,SAAS,YAAY,MAAM;EAC9C,MAAM,SAAS,MAAM;EACrB,MAAM,mBAAmB,sCAAiB,YAGxC,QAAQ,KAAK,UAAU;EAGzB,MAAM,eAAe,MAAM,yCACzB,KAAK,UACL,kBACA,QACA;GACE,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,UAAU,MAAM;EACjB,EACF;EAGD,MAAM,SAAS,KAAK,SAAS;AAI7B,OAAK,gBAAgB,QAAQ,OAC3B,QAAO,KAAK,uCAAuC;EAIrD,MAAM,QAAS,MAAc;EAG7B,MAAM,SAAS,MAAM,kDACnB,cACA,OAAO,YAAY;GAEjB,MAAM,eACJ,cAAc,SAAS,uBACvB,aAAa,QAAQ,wBACnB,KAAK,SAAS,iBAAiB;GACnC,MAAM,KAAK,eACN,SAAS,kBAAkB,IAAI,QAChC;GAEJ,MAAM,kBAAkB,IAAIC;GAC5B,MAAM,WAAW,MAAM,KAAK,SAAS,QACnC;IACE,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,UAAU,MAAM;IAChB,SAAS,MAAM;IACf;IACA;IACA,GAAG;GACJ,GACD,gBACD;GAGD,IAAI,OAAO;GACX,IAAIC,aAAW,gBAAgB,aAAa;AAE5C,OAAI,0BAAS,YAAY,SAAS,EAAE;AAClC,WAAO,SAAS;AAChB,iBAAW,SAAS;GACrB;GAED,MAAMC,WAAS,KAAK,SAAS,eACzB,MAAM,KAAK,SAAS,YAAY,KAAK;AAGzC,UAAO;IAAE;IAAQ;IAAU;GAAiB;EAC7C,GAED,OAAOC,UAAQ,YAAY;AACzB,QAAK,QAAQ,OAAQ;AAErB,QAAK,MAAM,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,MAAM,KAAKA,SAAO,OAAc,CACjD;IAEF,MAAM,UAAU,MAAM,QAAQA,SAAO,OAAc;IACnD,MAAM,WAAW,MAAM,WAAWA,SAAO,OAAc;AACvD,YAAQ,MAAM,MAAM,MAAa,SAAgB;KAC/C,OAAO,MAAM;KACb;IACD,EAAC;GACH;EACF,EACF;EAED,MAAM,EAAE,QAAQ,UAAU,GAAG;EAC7B,MAAM,OAAO,oBAAuB,KAAK,UAAU,OAAO;AAG1D,EAAC,MAAc,aAAa;EAG5B,MAAMC,iBAA0D;GAC9D,YAAY,SAAS,UAAU,KAAK,SAAS;GAC7C;EACD;AAGD,MAAI,SAAS,WAAW,OAAO,KAAK,SAAS,QAAQ,CAAC,SAAS,EAC7D,gBAAe,UAAU,EAAE,GAAG,SAAS,QAAS;AAIlD,MAAI,SAAS,WAAW,SAAS,QAAQ,OAAO,GAAG;GACjD,MAAMC,mBAA6B,CAAE;AACrC,QAAK,MAAM,CAAC,MAAM,EAAE,OAAO,SAAS,CAAC,IAAI,SAAS,QAChD,kBAAiB,KACf,0BAAS,mBAAmB,MAAM,OAAO,QAAQ,CAClD;AAGH,OAAI,iBAAiB,SAAS,EAC5B,gBAAe,oBAAoB;IACjC,GAAG,eAAe;IAClB,cAAc;GACf;EAEJ;AAED,SAAO;CACR;CAED,IAAI,UAAU;EACZ,MAAM,UAAU,KAAK,SAAS,KAAK,KAAK;AACxC,SAAO,0BAAM,QAAQ,CAClB,IAAI,KAAK,QAAQ,CAAC,CAClB,IAAI,KAAK,OAAO,CAAC,CACjB,IAAI,KAAK,UAAU,CAAC,CACpB,IAAI,KAAK,OAAO,CAAC,CACjB,IAAI,KAAK,UAAU,CAAC,CACpB,IAAI,KAAK,SAAS,CAAC,CACnB,IAAI,KAAK,WAAW,CAAC,CACrB,IAAI,KAAK,QAAQ,CAAC;CACtB;AACF"}

package/dist/Authorizer-BTmly8ps.d.cts

@@ -1,29 +0,0 @@
-//#region src/endpoints/Authorizer.d.ts
-/**
- * Represents an authorizer configuration for endpoints
- */
-interface Authorizer {
-  /**
-   * Unique identifier for the authorizer
-   */
-  name: string;
-  /**
-   * Type of authorizer (e.g., 'iam', 'jwt', 'custom')
-   */
-  type?: string;
-  /**
-   * Description of what this authorizer does
-   */
-  description?: string;
-  /**
-   * Additional metadata specific to the authorizer type
-   */
-  metadata?: Record<string, any>;
-}
-/**
- * Helper to create an authorizer configuration
- */
-declare function createAuthorizer(name: string, options?: Omit<Authorizer, 'name'>): Authorizer;
-//#endregion
-export { Authorizer, createAuthorizer };
-//# sourceMappingURL=Authorizer-BTmly8ps.d.cts.map

package/dist/Authorizer-pmPvIVgv.d.mts

@@ -1,29 +0,0 @@
-//#region src/endpoints/Authorizer.d.ts
-/**
- * Represents an authorizer configuration for endpoints
- */
-interface Authorizer {
-  /**
-   * Unique identifier for the authorizer
-   */
-  name: string;
-  /**
-   * Type of authorizer (e.g., 'iam', 'jwt', 'custom')
-   */
-  type?: string;
-  /**
-   * Description of what this authorizer does
-   */
-  description?: string;
-  /**
-   * Additional metadata specific to the authorizer type
-   */
-  metadata?: Record<string, any>;
-}
-/**
- * Helper to create an authorizer configuration
- */
-declare function createAuthorizer(name: string, options?: Omit<Authorizer, 'name'>): Authorizer;
-//#endregion
-export { Authorizer, createAuthorizer };
-//# sourceMappingURL=Authorizer-pmPvIVgv.d.mts.map

package/dist/Endpoint-CA-byrDr.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"Endpoint-CA-byrDr.cjs","names":["Function","endpoints: Endpoint<any, any, any, any, any, any>[]","options?: OpenApiSchemaOptions","input: unknown","key: K","body: unknown","status: number","headers: Record<string, string>","key?: string","cookieHeader: string | undefined","name?: string","name: string","value: string","options?: CookieOptions","ctx: EndpointContext<TInput, TServices, TLogger, TSession>","ctx: EndpointContext<\n      TInput,\n      TServices,\n      TLogger,\n      TSession,\n      TAuditAction,\n      TDatabase,\n      TAuditStorage\n    >","response: ResponseBuilder","obj: any","ConstructType","response: T | ResponseWithMetadata<T>","componentCollector?: ComponentCollector","operation: OpenAPIV3_1.OperationObject","pathParameters: OpenAPIV3_1.ParameterObject[]","queryParameters: OpenAPIV3_1.ParameterObject[]","routeObject: any","key: string","options?: Pick<CookieOptions, 'domain' | 'path'>","code: SuccessStatus","data: T"],"sources":["../src/endpoints/Endpoint.ts"],"sourcesContent":["import type { AuditStorage, AuditableAction, Auditor } from '@geekmidas/audit';\nimport type {\n  EventPublisher,\n  ExtractPublisherMessage,\n  MappedEvent,\n} from '@geekmidas/events';\nimport type { Logger } from '@geekmidas/logger';\nimport type { RateLimitConfig } from '@geekmidas/rate-limit';\nimport type {\n  InferComposableStandardSchema,\n  InferStandardSchema,\n} from '@geekmidas/schema';\nimport {\n  convertSchemaWithComponents,\n  convertStandardSchemaToJsonSchema,\n} from '@geekmidas/schema/conversion';\nimport {\n  type ComponentCollector,\n  type OpenApiSchemaOptions,\n  buildOpenApiSchema,\n} from '@geekmidas/schema/openapi';\nimport type { Service, ServiceRecord } from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport pick from 'lodash.pick';\nimport set from 'lodash.set';\nimport type { OpenAPIV3_1 } from 'openapi-types';\nimport { ConstructType } from '../Construct';\nimport { Function, type FunctionHandler } from '../functions';\nimport type { HttpMethod, LowerHttpMethod, RemoveUndefined } from '../types';\nimport type { Authorizer } from './Authorizer';\nimport type { ActorExtractor, MappedAudit } from './audit';\n\n/**\n * Represents an HTTP endpoint that can handle requests with type-safe input/output validation,\n * dependency injection, session management, and authorization.\n *\n * @template TRoute - The route path string with parameter placeholders (e.g., '/users/:id')\n * @template TMethod - The HTTP method (GET, POST, PUT, DELETE, PATCH)\n * @template TInput - The input schema definition for body, query, and path parameters\n * @template OutSchema - The output schema for response validation\n * @template TServices - Array of service dependencies to inject\n * @template TLogger - The logger instance type\n * @template TSession - The session data type\n *\n * @extends Function - Base function construct for handler execution\n *\n * @example\n * ```typescript\n * const endpoint = new Endpoint({\n *   route: '/users/:id',\n *   method: 'GET',\n *   input: { params: userIdSchema },\n *   output: userSchema,\n *   fn: async ({ params }) => getUserById(params.id)\n * });\n * ```\n */\nexport class Endpoint<\n  TRoute extends string,\n  TMethod extends HttpMethod,\n  TInput extends EndpointSchemas = {},\n  OutSchema extends StandardSchemaV1 | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n> extends Function<\n  TInput,\n  TServices,\n  TLogger,\n  OutSchema,\n  TEventPublisher,\n  TEventPublisherServiceName,\n  TAuditStorage,\n  TAuditStorageServiceName,\n  TDatabase,\n  TDatabaseServiceName,\n  TAuditAction,\n  FunctionHandler<\n    TInput,\n    TServices,\n    TLogger,\n    OutSchema,\n    TDatabase,\n    TAuditStorage,\n    TAuditAction\n  >\n> {\n  operationId?: string;\n  /** The route path pattern with parameter placeholders */\n  route: TRoute;\n  /** The HTTP method for this endpoint */\n  method: TMethod;\n  /** Optional description for OpenAPI documentation */\n  description?: string;\n  /** Optional tags for OpenAPI documentation */\n  tags?: string[];\n  /** The HTTP success status code to return (default: 200) */\n  public readonly status: SuccessStatus;\n  /** Default headers to apply to all responses */\n  public readonly defaultHeaders: Record<string, string> = {};\n  /** Function to extract session data from the request context */\n  public getSession: SessionFn<TServices, TLogger, TSession, TDatabase> = () =>\n    ({}) as TSession;\n  /** Function to determine if the request is authorized */\n  public authorize: AuthorizeFn<TServices, TLogger, TSession> = () => true;\n  /** Optional rate limiting configuration */\n  public rateLimit?: RateLimitConfig;\n  /** Optional authorizer for this endpoint */\n  public authorizer?: Authorizer;\n  /** Optional actor extractor for audit records */\n  public actorExtractor?: ActorExtractor<TServices, TSession, TLogger>;\n  /** Declarative audit definitions */\n  public audits: MappedAudit<TAuditAction, OutSchema>[] = [];\n  /** Database service for this endpoint */\n  public declare databaseService?: Service<TDatabaseServiceName, TDatabase>;\n  /** The endpoint handler function */\n  private endpointFn!: EndpointHandler<\n    TInput,\n    TServices,\n    TLogger,\n    OutSchema,\n    TSession,\n    TDatabase,\n    TAuditStorage,\n    TAuditAction\n  >;\n\n  /**\n   * Builds a complete OpenAPI 3.1 schema from an array of endpoints.\n   *\n   * @param endpoints - Array of endpoint instances to document\n   * @param options - Optional configuration for OpenAPI generation\n   * @returns OpenAPI 3.1 specification object\n   *\n   * @example\n   * ```typescript\n   * const schema = await Endpoint.buildOpenApiSchema([\n   *   getUserEndpoint,\n   *   createUserEndpoint\n   * ], {\n   *   title: 'User API',\n   *   version: '1.0.0'\n   * });\n   * ```\n   */\n  static async buildOpenApiSchema(\n    endpoints: Endpoint<any, any, any, any, any, any>[],\n    options?: OpenApiSchemaOptions,\n  ) {\n    return buildOpenApiSchema(endpoints, options);\n  }\n\n  /**\n   * Gets the full path including HTTP method and route.\n   * @returns Formatted string like 'GET /users/{id}'\n   */\n  get fullPath() {\n    return `${this.method} ${this._path}` as const;\n  }\n\n  /**\n   * Parses and validates input data for a specific input type (body, query, params).\n   *\n   * @param input - The raw input data to validate\n   * @param key - The input type key ('body', 'query', or 'params')\n   * @returns The validated input data for the specified key\n   * @throws {UnprocessableEntityError} When validation fails\n   */\n  async parseInput<K extends keyof TInput>(\n    input: unknown,\n    key: K,\n  ): Promise<InferComposableStandardSchema<TInput[K]>> {\n    const schema = this.input?.[key];\n    return Endpoint.parseSchema(schema as StandardSchemaV1, input) as Promise<\n      InferComposableStandardSchema<TInput[K]>\n    >;\n  }\n\n  /**\n   * Parses and validates the request body against the body schema.\n   *\n   * @param body - The raw request body to validate\n   * @returns The validated body data\n   * @throws {UnprocessableEntityError} When body validation fails\n   */\n  async parseBody(body: unknown): Promise<InferStandardSchema<TInput['body']>> {\n    return this.parseInput(body, 'body') as Promise<\n      InferStandardSchema<TInput['body']>\n    >;\n  }\n\n  static isSuccessStatus(status: number): boolean {\n    return status >= 200 && status < 300;\n  }\n\n  /**\n   * Creates a case-insensitive header lookup function from a headers object.\n   *\n   * @param headers - Object containing header key-value pairs\n   * @returns Function to retrieve header values by case-insensitive key, or all headers\n   *\n   * @example\n   * ```typescript\n   * const headerFn = Endpoint.createHeaders({ 'Content-Type': 'application/json' });\n   * headerFn('content-type'); // Returns 'application/json'\n   * headerFn(); // Returns { 'content-type': 'application/json' }\n   * ```\n   */\n  static createHeaders(headers: Record<string, string>): HeaderFn {\n    const headerMap = new Map<string, string>();\n    for (const [k, v] of Object.entries(headers)) {\n      const key = k.toLowerCase();\n      headerMap.set(key, v);\n    }\n\n    function get(): Record<string, string>;\n    function get(key: string): string | undefined;\n    function get(key?: string): string | undefined | Record<string, string> {\n      if (key === undefined) {\n        // Return all headers as plain object\n        return Object.fromEntries(headerMap.entries());\n      }\n      return headerMap.get(key.toLowerCase());\n    }\n\n    return get;\n  }\n\n  /**\n   * Parses cookie string and creates a cookie lookup function.\n   *\n   * @param cookieHeader - The Cookie header value\n   * @returns Function to retrieve cookie values by name, or all cookies\n   *\n   * @example\n   * ```typescript\n   * const cookieFn = Endpoint.createCookies('session=abc123; theme=dark');\n   * cookieFn('session'); // Returns 'abc123'\n   * cookieFn(); // Returns { session: 'abc123', theme: 'dark' }\n   * ```\n   */\n  static createCookies(cookieHeader: string | undefined): CookieFn {\n    const cookieMap = new Map<string, string>();\n\n    if (cookieHeader) {\n      // Parse cookie string: \"name1=value1; name2=value2\"\n      const cookies = cookieHeader.split(';');\n      for (const cookie of cookies) {\n        const [name, ...valueParts] = cookie.trim().split('=');\n        if (name) {\n          const value = valueParts.join('='); // Handle values with = in them\n          cookieMap.set(name, decodeURIComponent(value));\n        }\n      }\n    }\n\n    function get(): Record<string, string>;\n    function get(name: string): string | undefined;\n    function get(name?: string): string | undefined | Record<string, string> {\n      if (name === undefined) {\n        // Return all cookies as plain object\n        return Object.fromEntries(cookieMap.entries());\n      }\n      return cookieMap.get(name);\n    }\n\n    return get;\n  }\n\n  /**\n   * Formats a cookie as a Set-Cookie header string.\n   *\n   * @param name - Cookie name\n   * @param value - Cookie value\n   * @param options - Cookie options (httpOnly, secure, sameSite, etc.)\n   * @returns Formatted Set-Cookie header string\n   *\n   * @example\n   * ```typescript\n   * const header = Endpoint.formatCookieHeader('session', 'abc123', {\n   *   httpOnly: true,\n   *   secure: true,\n   *   sameSite: 'strict',\n   *   maxAge: 3600\n   * });\n   * // Returns: \"session=abc123; Max-Age=3600; HttpOnly; Secure; SameSite=Strict\"\n   * ```\n   */\n  static formatCookieHeader(\n    name: string,\n    value: string,\n    options?: CookieOptions,\n  ): string {\n    let cookie = `${name}=${value}`;\n\n    if (options) {\n      if (options.domain) cookie += `; Domain=${options.domain}`;\n      if (options.path) cookie += `; Path=${options.path}`;\n      if (options.expires)\n        cookie += `; Expires=${options.expires.toUTCString()}`;\n      if (options.maxAge !== undefined) cookie += `; Max-Age=${options.maxAge}`;\n      if (options.httpOnly) cookie += '; HttpOnly';\n      if (options.secure) cookie += '; Secure';\n      if (options.sameSite) {\n        cookie += `; SameSite=${options.sameSite.charAt(0).toUpperCase() + options.sameSite.slice(1)}`;\n      }\n    }\n\n    return cookie;\n  }\n\n  /**\n   * Extracts and refines input data from the endpoint context.\n   *\n   * @param ctx - The endpoint execution context\n   * @returns Object containing only the input data (body, query, params)\n   * @internal\n   */\n  refineInput(\n    ctx: EndpointContext<TInput, TServices, TLogger, TSession>,\n  ): InferComposableStandardSchema<TInput> {\n    const input = pick(ctx, [\n      'body',\n      'query',\n      'params',\n    ]) as InferComposableStandardSchema<TInput>;\n\n    return input;\n  }\n\n  handler = (\n    ctx: EndpointContext<\n      TInput,\n      TServices,\n      TLogger,\n      TSession,\n      TAuditAction,\n      TDatabase,\n      TAuditStorage\n    >,\n    response: ResponseBuilder,\n  ): OutSchema extends StandardSchemaV1\n    ?\n        | InferStandardSchema<OutSchema>\n        | ResponseWithMetadata<InferStandardSchema<OutSchema>>\n        | Promise<InferStandardSchema<OutSchema>>\n        | Promise<ResponseWithMetadata<InferStandardSchema<OutSchema>>>\n    :\n        | any\n        | ResponseWithMetadata<any>\n        | Promise<any>\n        | Promise<ResponseWithMetadata<any>> => {\n    // Apply default headers to response builder\n    for (const [key, value] of Object.entries(this.defaultHeaders)) {\n      response.header(key, value);\n    }\n\n    // Build context object, conditionally including auditor and db\n    const handlerCtx = {\n      ...this.refineInput(ctx),\n      services: ctx.services,\n      logger: ctx.logger,\n      header: ctx.header,\n      cookie: ctx.cookie,\n      session: ctx.session,\n      // These are conditionally present based on configuration\n      ...('auditor' in ctx && { auditor: ctx.auditor }),\n      ...('db' in ctx && { db: ctx.db }),\n    } as EndpointContext<\n      TInput,\n      TServices,\n      TLogger,\n      TSession,\n      TAuditAction,\n      TDatabase,\n      TAuditStorage\n    >;\n\n    return this.endpointFn(handlerCtx, response);\n  };\n\n  /**\n   * Type guard to check if an object is an Endpoint instance.\n   *\n   * @param obj - The object to check\n   * @returns True if the object is an Endpoint\n   */\n  static isEndpoint(obj: any): obj is Endpoint<any, any, any, any> {\n    return Boolean(\n      obj &&\n        (obj as Function).__IS_FUNCTION__ === true &&\n        obj.type === ConstructType.Endpoint,\n    );\n  }\n\n  /**\n   * Helper to check if response has metadata\n   */\n  static hasMetadata<T>(\n    response: T | ResponseWithMetadata<T>,\n  ): response is ResponseWithMetadata<T> {\n    return (\n      response !== null &&\n      typeof response === 'object' &&\n      'data' in response &&\n      'metadata' in response\n    );\n  }\n\n  /**\n   * Converts Express-style route params to OpenAPI format.\n   * @returns Route with ':param' converted to '{param}'\n   * @internal\n   */\n  get _path() {\n    return this.route.replace(/:(\\w+)/g, '{$1}') as ConvertRouteParams<TRoute>;\n  }\n\n  /**\n   * Generates OpenAPI 3.1 schema for this endpoint.\n   *\n   * @returns OpenAPI route definition with operation details\n   */\n  async toOpenApi3Route(\n    componentCollector?: ComponentCollector,\n  ): Promise<EndpointOpenApiSchema<TRoute, TMethod>> {\n    const operation: OpenAPIV3_1.OperationObject = {\n      operationId: this.operationId,\n      ...(this.description && { description: this.description }),\n      ...(this.tags && this.tags.length > 0 && { tags: this.tags }),\n      responses: {\n        '200': {\n          description: 'Successful response',\n        } as OpenAPIV3_1.ResponseObject,\n      },\n    };\n\n    // Add response schema\n    if (this.outputSchema) {\n      const responseSchema = await convertSchemaWithComponents(\n        this.outputSchema,\n        componentCollector,\n      );\n      if (responseSchema) {\n        set(\n          operation,\n          ['responses', '200', 'content', 'application/json', 'schema'],\n          responseSchema,\n        );\n      }\n    }\n\n    // Separate path and query parameters\n    const pathParameters: OpenAPIV3_1.ParameterObject[] = [];\n    const queryParameters: OpenAPIV3_1.ParameterObject[] = [];\n\n    // Since the EndpointBuilder doesn't have body/search/params methods yet,\n    // and the input is a composite type, we need to check if input exists\n    // and has the expected shape\n    if (this.input && typeof this.input === 'object') {\n      // Add request body for methods that support it\n      if (\n        ['POST', 'PUT', 'PATCH'].includes(this.method) &&\n        'body' in this.input &&\n        this.input.body\n      ) {\n        const bodySchema = await convertSchemaWithComponents(\n          this.input.body as StandardSchemaV1,\n          componentCollector,\n        );\n        if (bodySchema) {\n          set(operation, ['requestBody'], {\n            required: true,\n            content: {\n              'application/json': {\n                schema: bodySchema,\n              },\n            },\n          });\n        }\n      }\n\n      // Add path parameters\n      if ('params' in this.input && this.input.params) {\n        const paramsSchema = await convertStandardSchemaToJsonSchema(\n          this.input.params as StandardSchemaV1,\n        );\n        if (\n          paramsSchema &&\n          paramsSchema.type === 'object' &&\n          paramsSchema.properties\n        ) {\n          for (const [name, schema] of Object.entries(\n            paramsSchema.properties,\n          )) {\n            pathParameters.push({\n              name,\n              in: 'path',\n              required: paramsSchema.required?.includes(name) ?? true,\n              schema: schema as any,\n            });\n          }\n        }\n      }\n\n      // Add query parameters\n      if ('query' in this.input && this.input.query) {\n        const querySchema = await convertStandardSchemaToJsonSchema(\n          this.input.query,\n        );\n        if (\n          querySchema &&\n          querySchema.type === 'object' &&\n          querySchema.properties\n        ) {\n          for (const [name, schema] of Object.entries(querySchema.properties)) {\n            queryParameters.push({\n              name,\n              in: 'query',\n              required: querySchema.required?.includes(name) ?? false,\n              schema: schema as any,\n            });\n          }\n        }\n      }\n    }\n\n    // Only add query parameters to the operation\n    if (queryParameters.length > 0) {\n      operation.parameters = queryParameters;\n    }\n\n    // Build the route object with path parameters at the route level\n    const routeObject: any = {};\n    if (pathParameters.length > 0) {\n      routeObject.parameters = pathParameters;\n    }\n    routeObject[this.method.toLowerCase()] = operation;\n\n    return {\n      [this._path]: routeObject,\n    } as EndpointOpenApiSchema<TRoute, TMethod>;\n  }\n\n  /**\n   * Creates a new Endpoint instance.\n   *\n   * @param options - Configuration options for the endpoint\n   * @param options.fn - The handler function to execute\n   * @param options.method - HTTP method\n   * @param options.route - Route path with parameter placeholders\n   * @param options.description - Optional description for documentation\n   * @param options.input - Input schemas for validation\n   * @param options.logger - Logger instance\n   * @param options.output - Output schema for response validation\n   * @param options.services - Service dependencies\n   * @param options.timeout - Execution timeout in milliseconds\n   * @param options.getSession - Session extraction function\n   * @param options.authorize - Authorization check function\n   * @param options.status - Success HTTP status code (default: 200)\n   * @param options.authorizer - Optional authorizer configuration\n   */\n  constructor({\n    fn,\n    method,\n    route,\n    description,\n    tags,\n    input,\n    logger,\n    output: outputSchema,\n    services,\n    timeout,\n    memorySize,\n    getSession,\n    authorize,\n    rateLimit,\n    status = SuccessStatus.OK,\n    publisherService,\n    events,\n    authorizer,\n    auditorStorageService,\n    actorExtractor,\n    audits,\n    databaseService,\n  }: EndpointOptions<\n    TRoute,\n    TMethod,\n    TInput,\n    OutSchema,\n    TServices,\n    TLogger,\n    TSession,\n    OutSchema,\n    TEventPublisher,\n    TEventPublisherServiceName,\n    TAuditStorage,\n    TAuditStorageServiceName,\n    TAuditAction,\n    TDatabase,\n    TDatabaseServiceName\n  >) {\n    super(\n      fn as unknown as FunctionHandler<TInput, TServices, TLogger, OutSchema>,\n      timeout,\n      ConstructType.Endpoint,\n      input,\n      outputSchema,\n      services,\n      logger,\n      publisherService,\n      events,\n      memorySize,\n      auditorStorageService,\n    );\n\n    this.route = route;\n    this.method = method;\n    this.description = description;\n    this.tags = tags;\n    this.status = status;\n    this.endpointFn = fn;\n\n    if (getSession) {\n      this.getSession = getSession;\n    }\n\n    if (authorize) {\n      this.authorize = authorize;\n    }\n\n    if (rateLimit) {\n      this.rateLimit = rateLimit;\n    }\n\n    if (authorizer) {\n      this.authorizer = authorizer;\n    }\n\n    if (actorExtractor) {\n      this.actorExtractor = actorExtractor;\n    }\n\n    if (audits) {\n      this.audits = audits;\n    }\n\n    if (databaseService) {\n      this.databaseService = databaseService;\n    }\n  }\n}\n\n/**\n * Defines the input schema structure for an endpoint.\n *\n * @template TBody - Schema for request body validation\n * @template TSearch - Schema for query string validation\n * @template TParams - Schema for URL path parameters validation\n *\n * @example\n * ```typescript\n * type UserInput = EndpointInput<\n *   typeof createUserBodySchema,\n *   typeof userQuerySchema,\n *   typeof userParamsSchema\n * >;\n * ```\n */\nexport type EndpointInput<\n  TBody extends StandardSchemaV1 | undefined = undefined,\n  TSearch extends StandardSchemaV1 | undefined = undefined,\n  TParams extends StandardSchemaV1 | undefined = undefined,\n> = RemoveUndefined<{\n  body: TBody;\n  search: TSearch;\n  params: TParams;\n}>;\n\n/**\n * Configuration options for creating an Endpoint instance.\n *\n * @template TRoute - The route path string\n * @template TMethod - The HTTP method\n * @template TInput - Input schema definitions\n * @template TOutput - Output schema definition\n * @template TServices - Service dependencies array\n * @template TLogger - Logger type\n * @template TSession - Session data type\n */\nexport interface EndpointOptions<\n  TRoute extends string,\n  TMethod extends HttpMethod,\n  TInput extends EndpointSchemas = {},\n  TOutput extends StandardSchemaV1 | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  OutSchema extends StandardSchemaV1 | undefined = undefined,\n  TEventPublisher extends EventPublisher<any> | undefined = undefined,\n  TEventPublisherServiceName extends string = string,\n  TAuditStorage extends AuditStorage | undefined = undefined,\n  TAuditStorageServiceName extends string = string,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TDatabase = undefined,\n  TDatabaseServiceName extends string = string,\n> {\n  /** The route path with parameter placeholders */\n  route: TRoute;\n  /** The HTTP method for this endpoint */\n  method: TMethod;\n  /** The handler function that implements the endpoint logic */\n  fn: EndpointHandler<\n    TInput,\n    TServices,\n    TLogger,\n    TOutput,\n    TSession,\n    TDatabase,\n    TAuditStorage,\n    TAuditAction\n  >;\n  /** Optional authorization check function */\n  authorize: AuthorizeFn<TServices, TLogger, TSession> | undefined;\n  /** Optional description for documentation */\n  description: string | undefined;\n  /** Optional tags for OpenAPI documentation */\n  tags?: string[];\n  /** Optional execution timeout in milliseconds */\n  timeout: number | undefined;\n  /** Optional memory size in MB for serverless deployments */\n  memorySize: number | undefined;\n  /** Input validation schemas */\n  input: TInput | undefined;\n  /** Output validation schema */\n  output: TOutput | undefined;\n  /** Service dependencies to inject */\n  services: TServices;\n  /** Logger instance */\n  logger: TLogger;\n  /** Optional session extraction function */\n  getSession: SessionFn<TServices, TLogger, TSession, TDatabase> | undefined;\n  /** Optional rate limiting configuration */\n  rateLimit?: RateLimitConfig;\n  /** Success HTTP status code */\n  status: SuccessStatus | undefined;\n  /**\n   * Event publisher service for publishing events from this endpoint\n   */\n  publisherService?: Service<TEventPublisherServiceName, TEventPublisher>;\n\n  events?: MappedEvent<TEventPublisher, OutSchema>[];\n  /** Optional authorizer configuration */\n  authorizer?: Authorizer;\n  /**\n   * Auditor storage service for persisting audit records from this endpoint\n   */\n  auditorStorageService?: Service<TAuditStorageServiceName, TAuditStorage>;\n  /** Optional actor extractor function for audit records */\n  actorExtractor?: ActorExtractor<TServices, TSession, TLogger>;\n  /** Declarative audit definitions */\n  audits?: MappedAudit<TAuditAction, OutSchema>[];\n  /** Database service for this endpoint */\n  databaseService?: Service<TDatabaseServiceName, TDatabase>;\n}\n\n/**\n * Defines the possible input schema types for an endpoint.\n * Each property represents a different part of the HTTP request.\n */\nexport type EndpointSchemas = Partial<{\n  /** Schema for URL path parameters (e.g., /users/:id) */\n  params: StandardSchemaV1;\n  /** Schema for query string parameters */\n  query: StandardSchemaV1;\n  /** Schema for request body (POST, PUT, PATCH) */\n  body: StandardSchemaV1;\n}>;\n\nexport type AuthorizeContext<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = {\n  services: ServiceRecord<TServices>;\n  logger: TLogger;\n  header: HeaderFn;\n  cookie: CookieFn;\n  session: TSession;\n};\n/**\n * Function type for endpoint authorization checks.\n *\n * @template TServices - Available service dependencies\n * @template TLogger - Logger type\n * @template TSession - Session data type\n *\n * @param ctx - Context containing services, logger, headers, and session\n * @returns Boolean indicating if the request is authorized\n *\n * @example\n * ```typescript\n * const authorize: AuthorizeFn = ({ session }) => {\n *   return session.userId !== undefined;\n * };\n * ```\n */\nexport type AuthorizeFn<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = (\n  ctx: AuthorizeContext<TServices, TLogger, TSession>,\n) => Promise<boolean> | boolean;\n\n/**\n * Base session context without database\n */\ntype BaseSessionContext<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n> = {\n  services: ServiceRecord<TServices>;\n  logger: TLogger;\n  header: HeaderFn;\n  cookie: CookieFn;\n};\n\n/**\n * Conditional database context for session - only present when database service is configured\n */\ntype SessionDatabaseContext<TDatabase = undefined> = TDatabase extends undefined\n  ? {}\n  : {\n      /**\n       * Database instance for session extraction.\n       * Available when a database service is configured via `.database()`.\n       * Useful for looking up user data from the database based on auth tokens.\n       */\n      db: TDatabase;\n    };\n\nexport type SessionContext<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TDatabase = undefined,\n> = BaseSessionContext<TServices, TLogger> & SessionDatabaseContext<TDatabase>;\n/**\n * Function type for extracting session data from a request.\n *\n * @template TServices - Available service dependencies\n * @template TLogger - Logger type\n * @template TSession - Session data type to extract\n * @template TDatabase - Database type (when database service is configured)\n *\n * @param ctx - Context containing services, logger, headers, and optionally database\n * @returns The extracted session data\n *\n * @example\n * ```typescript\n * // Without database\n * const getSession: SessionFn<Services, Logger, UserSession> = async ({ header, services }) => {\n *   const token = header('authorization');\n *   return await services.auth.verifyToken(token);\n * };\n *\n * // With database\n * const getSession: SessionFn<Services, Logger, UserSession, Database> = async ({ header, db }) => {\n *   const token = header('authorization');\n *   const user = await db.selectFrom('users').where('token', '=', token).executeTakeFirst();\n *   return { userId: user?.id };\n * };\n * ```\n */\nexport type SessionFn<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TDatabase = undefined,\n> = (\n  ctx: SessionContext<TServices, TLogger, TDatabase>,\n) => Promise<TSession> | TSession;\n\n/**\n * Utility type that converts Express-style route parameters to OpenAPI format.\n * Transforms ':param' syntax to '{param}' syntax.\n *\n * @template T - The route string to convert\n *\n * @example\n * ```typescript\n * type Route1 = ConvertRouteParams<'/users/:id'>; // '/users/{id}'\n * type Route2 = ConvertRouteParams<'/users/:userId/posts/:postId'>; // '/users/{userId}/posts/{postId}'\n * ```\n */\nexport type ConvertRouteParams<T extends string> =\n  T extends `${infer Start}:${infer Param}/${infer Rest}`\n    ? `${Start}{${Param}}/${ConvertRouteParams<Rest>}`\n    : T extends `${infer Start}:${infer Param}`\n      ? `${Start}{${Param}}`\n      : T;\n\n/**\n * Type representing the OpenAPI schema structure for an endpoint.\n *\n * @template TRoute - The route path\n * @template TMethod - The HTTP method\n *\n * @example\n * ```typescript\n * type Schema = EndpointOpenApiSchema<'/users/:id', 'GET'>;\n * // Results in: { '/users/{id}': { get: OperationObject, parameters?: ParameterObject[] } }\n * ```\n */\nexport type EndpointOpenApiSchema<\n  TRoute extends string,\n  TMethod extends HttpMethod,\n> = {\n  [key in ConvertRouteParams<TRoute>]: {\n    [key in LowerHttpMethod<TMethod>]: OpenAPIV3_1.OperationObject<{}>;\n  } & {\n    parameters?: OpenAPIV3_1.ParameterObject[];\n  };\n};\n\nexport type SingleHeaderFn = (key: string) => string | undefined;\nexport type MultiHeaderFn = () => EndpointHeaders;\n/**\n * Type representing HTTP headers as a Map.\n */\nexport type EndpointHeaders = Map<string, string>;\n\n/**\n * Function type for retrieving HTTP header values.\n * Supports two calling patterns:\n * - `header(key)` - Get a single header value (case-insensitive)\n * - `header()` - Get all headers as a plain object\n *\n * @example\n * ```typescript\n * // Get single header\n * const contentType = header('content-type');\n *\n * // Get all headers\n * const allHeaders = header();\n * // { 'content-type': 'application/json', 'host': 'example.com', ... }\n * ```\n */\nexport interface HeaderFn {\n  (): Record<string, string>;\n  (key: string): string | undefined;\n}\n\n/**\n * Function type for retrieving cookie values.\n * Supports two calling patterns:\n * - `cookie(name)` - Get a single cookie value\n * - `cookie()` - Get all cookies as a plain object\n *\n * @example\n * ```typescript\n * // Get single cookie\n * const sessionId = cookie('session');\n *\n * // Get all cookies\n * const allCookies = cookie();\n * // { session: 'abc123', theme: 'dark', ... }\n * ```\n */\nexport interface CookieFn {\n  (): Record<string, string>;\n  (name: string): string | undefined;\n}\n\n/**\n * Cookie options matching standard Set-Cookie attributes\n */\nexport interface CookieOptions {\n  domain?: string;\n  path?: string;\n  expires?: Date;\n  maxAge?: number;\n  httpOnly?: boolean;\n  secure?: boolean;\n  sameSite?: 'strict' | 'lax' | 'none';\n}\n\n/**\n * Response metadata that handlers can set\n */\nexport interface ResponseMetadata {\n  headers?: Record<string, string>;\n  cookies?: Map<string, { value: string; options?: CookieOptions }>;\n  status?: SuccessStatus;\n}\n\n/**\n * Return type for handlers that want to set response metadata\n */\nexport interface ResponseWithMetadata<T> {\n  data: T;\n  metadata: ResponseMetadata;\n}\n\n/**\n * Response builder for fluent API in handlers\n */\nexport class ResponseBuilder {\n  private metadata: ResponseMetadata = {\n    headers: {},\n    cookies: new Map(),\n  };\n\n  header(key: string, value: string): this {\n    this.metadata.headers![key] = value;\n    return this;\n  }\n\n  cookie(name: string, value: string, options?: CookieOptions): this {\n    this.metadata.cookies!.set(name, { value, options });\n    return this;\n  }\n\n  deleteCookie(\n    name: string,\n    options?: Pick<CookieOptions, 'domain' | 'path'>,\n  ): this {\n    this.metadata.cookies!.set(name, {\n      value: '',\n      options: { ...options, maxAge: 0, expires: new Date(0) },\n    });\n    return this;\n  }\n\n  status(code: SuccessStatus): this {\n    this.metadata.status = code;\n    return this;\n  }\n\n  send<T>(data: T): ResponseWithMetadata<T> {\n    return { data, metadata: this.metadata };\n  }\n\n  getMetadata(): ResponseMetadata {\n    return this.metadata;\n  }\n}\n\n/**\n * Base context properties that are always available\n */\ntype BaseEndpointContext<\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n> = {\n  /** Injected service instances */\n  services: ServiceRecord<TServices>;\n  /** Logger instance for this request */\n  logger: TLogger;\n  /** Function to retrieve request headers */\n  header: HeaderFn;\n  /** Function to retrieve request cookies */\n  cookie: CookieFn;\n  /** Session data extracted by getSession */\n  session: TSession;\n};\n\n/**\n * Conditional auditor context - only present when audit storage is configured\n */\ntype AuditorContext<\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TAuditStorage = undefined,\n> = TAuditStorage extends undefined\n  ? {}\n  : {\n      /**\n       * Auditor instance for recording audit events.\n       * Only present when audit storage is configured on the endpoint.\n       * When a transactional database is used for audit storage,\n       * the auditor is pre-configured with the transaction context.\n       */\n      auditor: Auditor<TAuditAction>;\n    };\n\n/**\n * Conditional database context - only present when database service is configured\n */\ntype DatabaseContext<TDatabase = undefined> = TDatabase extends undefined\n  ? {}\n  : {\n      /**\n       * Database instance for this request.\n       * When audit storage is configured and uses the same database,\n       * this will be the transaction for ACID compliance.\n       * Otherwise, it's the raw database connection.\n       */\n      db: TDatabase;\n    };\n\n/**\n * The execution context provided to endpoint handlers.\n * Contains all parsed input data, services, logger, headers, cookies, and session.\n *\n * @template Input - The input schemas (body, query, params)\n * @template TServices - Available service dependencies\n * @template TLogger - Logger type\n * @template TSession - Session data type\n * @template TAuditAction - Audit action types (when auditor is configured)\n * @template TDatabase - Database type (when database service is configured)\n * @template TAuditStorage - Audit storage type (determines if auditor is present)\n */\nexport type EndpointContext<\n  Input extends EndpointSchemas | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  TSession = unknown,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n  TDatabase = undefined,\n  TAuditStorage = undefined,\n> = BaseEndpointContext<TServices, TLogger, TSession> &\n  InferComposableStandardSchema<Input> &\n  AuditorContext<TAuditAction, TAuditStorage> &\n  DatabaseContext<TDatabase>;\n\n/**\n * Handler function type for endpoint implementations.\n *\n * @template TInput - Input schemas for validation\n * @template TServices - Available service dependencies\n * @template TLogger - Logger type\n * @template OutSchema - Output schema for response validation\n * @template TSession - Session data type\n *\n * @param ctx - The endpoint execution context\n * @param response - Response builder for setting cookies, headers, and status\n * @returns The response data (validated if OutSchema is provided) or ResponseWithMetadata\n *\n * @example\n * ```typescript\n * // Simple response\n * const handler: EndpointHandler<Input, [UserService], Logger, UserSchema> =\n *   async ({ params, services }) => {\n *     return await services.users.findById(params.id);\n *   };\n *\n * // With response builder\n * const handler: EndpointHandler<Input, [UserService], Logger, UserSchema> =\n *   async ({ params, services }, response) => {\n *     const user = await services.users.findById(params.id);\n *     return response.header('X-User-Id', user.id).send(user);\n *   };\n * ```\n */\nexport type EndpointHandler<\n  TInput extends EndpointSchemas | undefined = undefined,\n  TServices extends Service[] = [],\n  TLogger extends Logger = Logger,\n  OutSchema extends StandardSchemaV1 | undefined = undefined,\n  TSession = unknown,\n  TDatabase = undefined,\n  TAuditStorage = undefined,\n  TAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n    string,\n    unknown\n  >,\n> = (\n  ctx: EndpointContext<\n    TInput,\n    TServices,\n    TLogger,\n    TSession,\n    TAuditAction,\n    TDatabase,\n    TAuditStorage\n  >,\n  response: ResponseBuilder,\n) => OutSchema extends StandardSchemaV1\n  ?\n      | InferStandardSchema<OutSchema>\n      | ResponseWithMetadata<InferStandardSchema<OutSchema>>\n      | Promise<InferStandardSchema<OutSchema>>\n      | Promise<ResponseWithMetadata<InferStandardSchema<OutSchema>>>\n  :\n      | unknown\n      | ResponseWithMetadata<unknown>\n      | Promise<unknown>\n      | Promise<ResponseWithMetadata<unknown>>;\n\n/**\n * HTTP success status codes that can be returned by endpoints.\n */\nexport enum SuccessStatus {\n  /** Standard response for successful HTTP requests */\n  OK = 200,\n  /** Request has been fulfilled and resulted in a new resource being created */\n  Created = 201,\n  /** Request has been accepted for processing, but processing is not complete */\n  Accepted = 202,\n  /** Server successfully processed the request but is not returning any content */\n  NoContent = 204,\n  /** Server successfully processed the request and is not returning any content, client should reset the document view */\n  ResetContent = 205,\n  /** Server is delivering only part of the resource due to a range header */\n  PartialContent = 206,\n}\n\nexport type EndpointOutput<T> = T extends Endpoint<\n  any,\n  any,\n  any,\n  infer OutSchema,\n  any,\n  any,\n  any,\n  any\n>\n  ? InferStandardSchema<OutSchema>\n  : never;\n\nexport type EndpointEvent<T> = T extends Endpoint<\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  any,\n  infer TEventPublisher\n>\n  ? ExtractPublisherMessage<TEventPublisher>\n  : never;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,IAAa,WAAb,MAAa,iBAkBHA,0BAqBR;CACA;;CAEA;;CAEA;;CAEA;;CAEA;;CAEA,AAAgB;;CAEhB,AAAgB,iBAAyC,CAAE;;CAE3D,AAAO,aAAiE,OACrE,CAAE;;CAEL,AAAO,YAAuD,MAAM;;CAEpE,AAAO;;CAEP,AAAO;;CAEP,AAAO;;CAEP,AAAO,SAAiD,CAAE;;CAI1D,AAAQ;;;;;;;;;;;;;;;;;;;CA6BR,aAAa,mBACXC,WACAC,SACA;AACA,SAAO,mDAAmB,WAAW,QAAQ;CAC9C;;;;;CAMD,IAAI,WAAW;AACb,UAAQ,EAAE,KAAK,OAAO,GAAG,KAAK,MAAM;CACrC;;;;;;;;;CAUD,MAAM,WACJC,OACAC,KACmD;EACnD,MAAM,SAAS,KAAK,QAAQ;AAC5B,SAAO,SAAS,YAAY,QAA4B,MAAM;CAG/D;;;;;;;;CASD,MAAM,UAAUC,MAA6D;AAC3E,SAAO,KAAK,WAAW,MAAM,OAAO;CAGrC;CAED,OAAO,gBAAgBC,QAAyB;AAC9C,SAAO,UAAU,OAAO,SAAS;CAClC;;;;;;;;;;;;;;CAeD,OAAO,cAAcC,SAA2C;EAC9D,MAAM,4BAAY,IAAI;AACtB,OAAK,MAAM,CAAC,GAAG,EAAE,IAAI,OAAO,QAAQ,QAAQ,EAAE;GAC5C,MAAM,MAAM,EAAE,aAAa;AAC3B,aAAU,IAAI,KAAK,EAAE;EACtB;EAID,SAAS,IAAIC,KAA2D;AACtE,OAAI,eAEF,QAAO,OAAO,YAAY,UAAU,SAAS,CAAC;AAEhD,UAAO,UAAU,IAAI,IAAI,aAAa,CAAC;EACxC;AAED,SAAO;CACR;;;;;;;;;;;;;;CAeD,OAAO,cAAcC,cAA4C;EAC/D,MAAM,4BAAY,IAAI;AAEtB,MAAI,cAAc;GAEhB,MAAM,UAAU,aAAa,MAAM,IAAI;AACvC,QAAK,MAAM,UAAU,SAAS;IAC5B,MAAM,CAAC,MAAM,GAAG,WAAW,GAAG,OAAO,MAAM,CAAC,MAAM,IAAI;AACtD,QAAI,MAAM;KACR,MAAM,QAAQ,WAAW,KAAK,IAAI;AAClC,eAAU,IAAI,MAAM,mBAAmB,MAAM,CAAC;IAC/C;GACF;EACF;EAID,SAAS,IAAIC,MAA4D;AACvE,OAAI,gBAEF,QAAO,OAAO,YAAY,UAAU,SAAS,CAAC;AAEhD,UAAO,UAAU,IAAI,KAAK;EAC3B;AAED,SAAO;CACR;;;;;;;;;;;;;;;;;;;;CAqBD,OAAO,mBACLC,MACAC,OACAC,SACQ;EACR,IAAI,UAAU,EAAE,KAAK,GAAG,MAAM;AAE9B,MAAI,SAAS;AACX,OAAI,QAAQ,OAAQ,YAAW,WAAW,QAAQ,OAAO;AACzD,OAAI,QAAQ,KAAM,YAAW,SAAS,QAAQ,KAAK;AACnD,OAAI,QAAQ,QACV,YAAW,YAAY,QAAQ,QAAQ,aAAa,CAAC;AACvD,OAAI,QAAQ,kBAAsB,YAAW,YAAY,QAAQ,OAAO;AACxE,OAAI,QAAQ,SAAU,WAAU;AAChC,OAAI,QAAQ,OAAQ,WAAU;AAC9B,OAAI,QAAQ,SACV,YAAW,aAAa,QAAQ,SAAS,OAAO,EAAE,CAAC,aAAa,GAAG,QAAQ,SAAS,MAAM,EAAE,CAAC;EAEhG;AAED,SAAO;CACR;;;;;;;;CASD,YACEC,KACuC;EACvC,MAAM,QAAQ,yBAAK,KAAK;GACtB;GACA;GACA;EACD,EAAC;AAEF,SAAO;CACR;CAED,UAAU,CACRC,KASAC,aAW4C;AAE5C,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,KAAK,eAAe,CAC5D,UAAS,OAAO,KAAK,MAAM;EAI7B,MAAM,aAAa;GACjB,GAAG,KAAK,YAAY,IAAI;GACxB,UAAU,IAAI;GACd,QAAQ,IAAI;GACZ,QAAQ,IAAI;GACZ,QAAQ,IAAI;GACZ,SAAS,IAAI;GAEb,GAAI,aAAa,OAAO,EAAE,SAAS,IAAI,QAAS;GAChD,GAAI,QAAQ,OAAO,EAAE,IAAI,IAAI,GAAI;EAClC;AAUD,SAAO,KAAK,WAAW,YAAY,SAAS;CAC7C;;;;;;;CAQD,OAAO,WAAWC,KAA+C;AAC/D,SAAO,QACL,OACG,IAAiB,oBAAoB,QACtC,IAAI,SAASC,gCAAc,SAC9B;CACF;;;;CAKD,OAAO,YACLC,UACqC;AACrC,SACE,aAAa,eACN,aAAa,YACpB,UAAU,YACV,cAAc;CAEjB;;;;;;CAOD,IAAI,QAAQ;AACV,SAAO,KAAK,MAAM,QAAQ,WAAW,OAAO;CAC7C;;;;;;CAOD,MAAM,gBACJC,oBACiD;EACjD,MAAMC,YAAyC;GAC7C,aAAa,KAAK;GAClB,GAAI,KAAK,eAAe,EAAE,aAAa,KAAK,YAAa;GACzD,GAAI,KAAK,QAAQ,KAAK,KAAK,SAAS,KAAK,EAAE,MAAM,KAAK,KAAM;GAC5D,WAAW,EACT,OAAO,EACL,aAAa,sBACd,EACF;EACF;AAGD,MAAI,KAAK,cAAc;GACrB,MAAM,iBAAiB,MAAM,+DAC3B,KAAK,cACL,mBACD;AACD,OAAI,eACF,yBACE,WACA;IAAC;IAAa;IAAO;IAAW;IAAoB;GAAS,GAC7D,eACD;EAEJ;EAGD,MAAMC,iBAAgD,CAAE;EACxD,MAAMC,kBAAiD,CAAE;AAKzD,MAAI,KAAK,gBAAgB,KAAK,UAAU,UAAU;AAEhD,OACE;IAAC;IAAQ;IAAO;GAAQ,EAAC,SAAS,KAAK,OAAO,IAC9C,UAAU,KAAK,SACf,KAAK,MAAM,MACX;IACA,MAAM,aAAa,MAAM,+DACvB,KAAK,MAAM,MACX,mBACD;AACD,QAAI,WACF,yBAAI,WAAW,CAAC,aAAc,GAAE;KAC9B,UAAU;KACV,SAAS,EACP,oBAAoB,EAClB,QAAQ,WACT,EACF;IACF,EAAC;GAEL;AAGD,OAAI,YAAY,KAAK,SAAS,KAAK,MAAM,QAAQ;IAC/C,MAAM,eAAe,MAAM,qEACzB,KAAK,MAAM,OACZ;AACD,QACE,gBACA,aAAa,SAAS,YACtB,aAAa,WAEb,MAAK,MAAM,CAAC,MAAM,OAAO,IAAI,OAAO,QAClC,aAAa,WACd,CACC,gBAAe,KAAK;KAClB;KACA,IAAI;KACJ,UAAU,aAAa,UAAU,SAAS,KAAK,IAAI;KAC3C;IACT,EAAC;GAGP;AAGD,OAAI,WAAW,KAAK,SAAS,KAAK,MAAM,OAAO;IAC7C,MAAM,cAAc,MAAM,qEACxB,KAAK,MAAM,MACZ;AACD,QACE,eACA,YAAY,SAAS,YACrB,YAAY,WAEZ,MAAK,MAAM,CAAC,MAAM,OAAO,IAAI,OAAO,QAAQ,YAAY,WAAW,CACjE,iBAAgB,KAAK;KACnB;KACA,IAAI;KACJ,UAAU,YAAY,UAAU,SAAS,KAAK,IAAI;KAC1C;IACT,EAAC;GAGP;EACF;AAGD,MAAI,gBAAgB,SAAS,EAC3B,WAAU,aAAa;EAIzB,MAAMC,cAAmB,CAAE;AAC3B,MAAI,eAAe,SAAS,EAC1B,aAAY,aAAa;AAE3B,cAAY,KAAK,OAAO,aAAa,IAAI;AAEzC,SAAO,GACJ,KAAK,QAAQ,YACf;CACF;;;;;;;;;;;;;;;;;;;CAoBD,YAAY,EACV,IACA,QACA,OACA,aACA,MACA,OACA,QACA,QAAQ,cACR,UACA,SACA,YACA,YACA,WACA,WACA,SAAS,cAAc,IACvB,kBACA,QACA,YACA,uBACA,gBACA,QACA,iBAiBD,EAAE;AACD,QACE,IACA,SACAN,gCAAc,UACd,OACA,cACA,UACA,QACA,kBACA,QACA,YACA,sBACD;AAED,OAAK,QAAQ;AACb,OAAK,SAAS;AACd,OAAK,cAAc;AACnB,OAAK,OAAO;AACZ,OAAK,SAAS;AACd,OAAK,aAAa;AAElB,MAAI,WACF,MAAK,aAAa;AAGpB,MAAI,UACF,MAAK,YAAY;AAGnB,MAAI,UACF,MAAK,YAAY;AAGnB,MAAI,WACF,MAAK,aAAa;AAGpB,MAAI,eACF,MAAK,iBAAiB;AAGxB,MAAI,OACF,MAAK,SAAS;AAGhB,MAAI,gBACF,MAAK,kBAAkB;CAE1B;AACF;;;;AAuWD,IAAa,kBAAb,MAA6B;CAC3B,AAAQ,WAA6B;EACnC,SAAS,CAAE;EACX,yBAAS,IAAI;CACd;CAED,OAAOO,KAAab,OAAqB;AACvC,OAAK,SAAS,QAAS,OAAO;AAC9B,SAAO;CACR;CAED,OAAOD,MAAcC,OAAeC,SAA+B;AACjE,OAAK,SAAS,QAAS,IAAI,MAAM;GAAE;GAAO;EAAS,EAAC;AACpD,SAAO;CACR;CAED,aACEF,MACAe,SACM;AACN,OAAK,SAAS,QAAS,IAAI,MAAM;GAC/B,OAAO;GACP,SAAS;IAAE,GAAG;IAAS,QAAQ;IAAG,yBAAS,IAAI,KAAK;GAAI;EACzD,EAAC;AACF,SAAO;CACR;CAED,OAAOC,MAA2B;AAChC,OAAK,SAAS,SAAS;AACvB,SAAO;CACR;CAED,KAAQC,MAAkC;AACxC,SAAO;GAAE;GAAM,UAAU,KAAK;EAAU;CACzC;CAED,cAAgC;AAC9B,SAAO,KAAK;CACb;AACF;;;;AAyJD,IAAY,0DAAL;;AAEL;;AAEA;;AAEA;;AAEA;;AAEA;;AAEA;;AACD"}