@konker.dev/neverthrow-r-middleware 0.0.2

package/dist/http/contrib/jwtAuthenticatorRsa.test.js

@@ -0,0 +1,88 @@
+import { errR, okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import * as helpers from '@konker.dev/neverthrow-r-auth-utils/helpers';
+import { TEST_JWT_NOW_MS } from '@konker.dev/neverthrow-r-auth-utils/test/fixtures/jwt';
+import { TEST_RSA_KEY_PUBLIC } from '@konker.dev/neverthrow-r-auth-utils/test/fixtures/test-jwt-rsa-keys';
+import { TEST_TOKEN_RSA, TEST_TOKEN_RSA_STRING_PAYLOAD, } from '@konker.dev/neverthrow-r-auth-utils/test/fixtures/test-jwt-tokens-rsa';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { makeRequestW } from '../RequestW.js';
+import { EMPTY_RESPONSE_W } from '../ResponseW.js';
+import { middleware as jwtAuthenticatorRsa } from './jwtAuthenticatorRsa.js';
+describe('jwtAuthenticatorRsa', () => {
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('authenticates a valid RSA JWT', async () => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+        const { logger } = recordingLogger();
+        const wrapped = jwtAuthenticatorRsa()((req) => okAsyncR({
+            ...EMPTY_RESPONSE_W,
+            body: req.userId,
+        }));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization: `Bearer ${TEST_TOKEN_RSA}` },
+            headersNormalizerRequestRaw: { Authorization: `Bearer ${TEST_TOKEN_RSA}` },
+        });
+        const result = await wrapped(input)({
+            logger,
+            issuer: 'test-iss',
+            rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+        });
+        expect(result.isOk() && result.value.body).toBe('test-sub');
+    });
+    it('returns a 401 HttpApiError for an invalid RSA JWT', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = jwtAuthenticatorRsa()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization: 'Bearer banana' },
+            headersNormalizerRequestRaw: { Authorization: 'Bearer banana' },
+        });
+        const result = await wrapped(input)({
+            logger,
+            issuer: 'test-iss',
+            rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+        });
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+    it('returns a 401 HttpApiError when the auth header is missing', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = jwtAuthenticatorRsa()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, {
+            headers: {},
+            headersNormalizerRequestRaw: {},
+        });
+        const result = await wrapped(input)({
+            logger,
+            issuer: 'test-iss',
+            rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+        });
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+    it('returns a 401 HttpApiError when RSA verification returns unverified', async () => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+        const { logger } = recordingLogger();
+        const wrapped = jwtAuthenticatorRsa()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization: `Bearer ${TEST_TOKEN_RSA_STRING_PAYLOAD}` },
+            headersNormalizerRequestRaw: { Authorization: `Bearer ${TEST_TOKEN_RSA_STRING_PAYLOAD}` },
+        });
+        const result = await wrapped(input)({
+            logger,
+            issuer: 'test-iss',
+            rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+        });
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+    it('stringifies non-Error bearer extraction failures for RSA auth', async () => {
+        vi.spyOn(helpers, 'extractBearerToken').mockReturnValue(errR('boom'));
+        const { logger } = recordingLogger();
+        const wrapped = jwtAuthenticatorRsa()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const result = await wrapped(makeRequestW(sampleRequestW, { headers: {}, headersNormalizerRequestRaw: {} }))({
+            logger,
+            issuer: 'test-iss',
+            rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+        });
+        expect(result.isErr() && result.error.message).toContain('boom');
+    });
+});
+//# sourceMappingURL=jwtAuthenticatorRsa.test.js.map

package/dist/http/contrib/jwtAuthenticatorRsa.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtAuthenticatorRsa.test.js","sourceRoot":"","sources":["../../../src/http/contrib/jwtAuthenticatorRsa.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,KAAK,OAAO,MAAM,6CAA6C,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AAC1G,OAAO,EACL,cAAc,EACd,6BAA6B,GAC9B,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE7E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5C,QAAQ,CAAY;YAClB,GAAG,gBAAgB;YACnB,IAAI,EAAE,GAAG,CAAC,MAAM;SACJ,CAAC,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,cAAc,EAAE,EAAE;YACtD,2BAA2B,EAAE,EAAE,aAAa,EAAE,UAAU,cAAc,EAAE,EAAE;SAC3E,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;YAC3C,2BAA2B,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE;YACX,2BAA2B,EAAE,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,6BAA6B,EAAE,EAAE;YACrE,2BAA2B,EAAE,EAAE,aAAa,EAAE,UAAU,6BAA6B,EAAE,EAAE;SAC1F,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAM,MAAM,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3G,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http/contrib/jwtDecoder.d.ts

@@ -0,0 +1,13 @@
+import type { Handler } from '../../handler.js';
+import type { WithLogger } from '../../lib/Logger.js';
+import type { HttpApiError } from '../HttpApiError.js';
+import type { Override, Rec } from '../RequestResponseHandler.js';
+import { type RequestW } from '../RequestW.js';
+import type { ResponseW } from '../ResponseW.js';
+import type { WithNormalizedInputHeaders } from './headersNormalizer/types.js';
+export declare const TAG = "jwtDecoder";
+export type WithUserId = {
+    readonly userId: string | undefined;
+};
+export declare const middleware: () => <I extends Rec, O extends Rec, E, R>(wrapped: Handler<RequestW<Override<I & WithNormalizedInputHeaders, WithUserId>>, R, ResponseW<O>, E>) => Handler<RequestW<I & WithNormalizedInputHeaders>, R & WithLogger, ResponseW<O>, E | HttpApiError>;
+//# sourceMappingURL=jwtDecoder.d.ts.map

package/dist/http/contrib/jwtDecoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtDecoder.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/jwtDecoder.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC,CAAC;AAEF,eAAO,MAAM,UAAU,SAEpB,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EACjC,SAAS,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,0BAA0B,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KACnG,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,0BAA0B,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAsBlG,CAAC"}

package/dist/http/contrib/jwtDecoder.js

@@ -0,0 +1,23 @@
+import { extractBearerToken } from '@konker.dev/neverthrow-r-auth-utils/helpers';
+import { jwtDecodeToken } from '@konker.dev/neverthrow-r-auth-utils/jwt';
+import { errAsync } from 'neverthrow';
+import { toHttpApiError } from '../HttpApiError.js';
+import { makeRequestW } from '../RequestW.js';
+export const TAG = 'jwtDecoder';
+export const middleware = () => (wrapped) => (i) => (r) => {
+    r.logger.debug(`[${TAG}] IN`);
+    const decoded = extractBearerToken(i.headers.authorization)(undefined)
+        .andThen((token) => jwtDecodeToken(token)(undefined))
+        .mapErr((e) => toHttpApiError(e, 401, `Invalid JWT credentials: ${e instanceof Error ? e.message : String(e)}`));
+    if (decoded.isErr()) {
+        r.logger.error(decoded.error);
+        return errAsync(decoded.error);
+    }
+    return wrapped(makeRequestW(i, {
+        userId: typeof decoded.value.sub === 'string' ? decoded.value.sub : undefined,
+    }))(r).map((res) => {
+        r.logger.debug(`[${TAG}] OUT`);
+        return res;
+    });
+};
+//# sourceMappingURL=jwtDecoder.js.map

package/dist/http/contrib/jwtDecoder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtDecoder.js","sourceRoot":"","sources":["../../../src/http/contrib/jwtDecoder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAKtC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAI7D,MAAM,CAAC,MAAM,GAAG,GAAG,YAAY,CAAC;AAMhC,MAAM,CAAC,MAAM,UAAU,GACrB,GAAG,EAAE,CACL,CACE,OAAoG,EACD,EAAE,CACvG,CAAC,CAAC,EAAE,EAAE,CACN,CAAC,CAAC,EAAE,EAAE;IACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;IAE9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC;SACnE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,4BAA4B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnH,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CACZ,YAAY,CAAC,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;KAC9E,CAAC,CACH,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/http/contrib/jwtDecoder.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=jwtDecoder.test.d.ts.map

package/dist/http/contrib/jwtDecoder.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtDecoder.test.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/jwtDecoder.test.ts"],"names":[],"mappings":""}

package/dist/http/contrib/jwtDecoder.test.js

@@ -0,0 +1,76 @@
+import { errR, okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import * as helpers from '@konker.dev/neverthrow-r-auth-utils/helpers';
+import { TEST_JWT_NOW_MS } from '@konker.dev/neverthrow-r-auth-utils/test/fixtures/jwt';
+import { TEST_TOKEN, TEST_TOKEN_MISSING_SUBJECT, } from '@konker.dev/neverthrow-r-auth-utils/test/fixtures/test-jwt-tokens';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { makeRequestW } from '../RequestW.js';
+import { EMPTY_RESPONSE_W } from '../ResponseW.js';
+import { middleware as jwtDecoder } from './jwtDecoder.js';
+describe('jwtDecoder', () => {
+    const authorization = `Bearer ${TEST_TOKEN}`;
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('extracts the userId from a valid JWT', async () => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+        const { logger } = recordingLogger();
+        const wrapped = jwtDecoder()((req) => okAsyncR({
+            ...EMPTY_RESPONSE_W,
+            body: req.userId,
+        }));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization },
+            headersNormalizerRequestRaw: { Authorization: authorization },
+        });
+        const result = await wrapped(input)({ logger });
+        expect(result.isOk() && result.value.body).toBe('test-sub');
+    });
+    it('returns a 401 HttpApiError for an invalid JWT', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = jwtDecoder()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization: 'Bearer banana' },
+            headersNormalizerRequestRaw: { Authorization: 'Bearer banana' },
+        });
+        const result = await wrapped(input)({ logger });
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+    it('returns a 401 HttpApiError when the auth header is missing', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = jwtDecoder()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, {
+            headers: {},
+            headersNormalizerRequestRaw: {},
+        });
+        const result = await wrapped(input)({ logger });
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+    it('returns userId undefined when the decoded token has no object sub', async () => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+        const { logger } = recordingLogger();
+        const wrapped = jwtDecoder()((req) => okAsyncR({
+            ...EMPTY_RESPONSE_W,
+            body: req.userId,
+        }));
+        const input = makeRequestW(sampleRequestW, {
+            headers: { authorization: `Bearer ${TEST_TOKEN_MISSING_SUBJECT}` },
+            headersNormalizerRequestRaw: { Authorization: `Bearer ${TEST_TOKEN_MISSING_SUBJECT}` },
+        });
+        const result = await wrapped(input)({ logger });
+        expect(result.isOk()).toBe(true);
+        if (result.isOk()) {
+            expect(result.value.body).toBeUndefined();
+        }
+    });
+    it('stringifies non-Error bearer extraction failures', async () => {
+        vi.spyOn(helpers, 'extractBearerToken').mockReturnValue(errR('boom'));
+        const { logger } = recordingLogger();
+        const wrapped = jwtDecoder()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const result = await wrapped(makeRequestW(sampleRequestW, { headers: {}, headersNormalizerRequestRaw: {} }))({
+            logger,
+        });
+        expect(result.isErr() && result.error.message).toContain('boom');
+    });
+});
+//# sourceMappingURL=jwtDecoder.test.js.map

package/dist/http/contrib/jwtDecoder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtDecoder.test.js","sourceRoot":"","sources":["../../../src/http/contrib/jwtDecoder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,KAAK,OAAO,MAAM,6CAA6C,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AACxF,OAAO,EACL,UAAU,EACV,0BAA0B,GAC3B,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE3D,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,aAAa,GAAG,UAAU,UAAU,EAAE,CAAC;IAE7C,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,QAAQ,CAAY;YAClB,GAAG,gBAAgB;YACnB,IAAI,EAAE,GAAG,CAAC,MAAM;SACJ,CAAC,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE;YAC1B,2BAA2B,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;YAC3C,2BAA2B,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE;SAChE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE;YACX,2BAA2B,EAAE,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,QAAQ,CAAY;YAClB,GAAG,gBAAgB;YACnB,IAAI,EAAE,GAAG,CAAC,MAAM;SACJ,CAAC,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,0BAA0B,EAAE,EAAE;YAClE,2BAA2B,EAAE,EAAE,aAAa,EAAE,UAAU,0BAA0B,EAAE,EAAE;SACvF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAM,MAAM,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3G,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http/contrib/pathParametersValidator.d.ts

@@ -0,0 +1,12 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import type { WithLogger } from '../../lib/Logger.js';
+import type { MiddlewareError } from '../../lib/MiddlewareError.js';
+import type { Override, Rec, RequestResponseHandler } from '../RequestResponseHandler.js';
+import { type RequestW } from '../RequestW.js';
+export declare const TAG = "pathParametersValidator";
+export type WithValidatedPathParameters<V> = {
+    readonly pathParameters: V;
+    readonly pathParametersValidatorRaw: RequestW['pathParameters'];
+};
+export declare const middleware: <V>(schema: StandardSchemaV1<unknown, V>) => <I extends Rec, O extends Rec, E, R>(wrapped: RequestResponseHandler<Override<I, WithValidatedPathParameters<V>>, R, O, E>) => RequestResponseHandler<I, R & WithLogger, O, E | MiddlewareError>;
+//# sourceMappingURL=pathParametersValidator.d.ts.map

package/dist/http/contrib/pathParametersValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathParametersValidator.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/pathParametersValidator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG7D,eAAO,MAAM,GAAG,4BAA4B,CAAC;AAE7C,MAAM,MAAM,2BAA2B,CAAC,CAAC,IAAI;IAC3C,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;CACjE,CAAC;AAKF,eAAO,MAAM,UAAU,GACpB,CAAC,EAAE,QAAQ,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,MACvC,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EACjC,SAAS,sBAAsB,CAAC,QAAQ,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KACpF,sBAAsB,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,CAAC,GAAG,eAAe,CAgBhE,CAAC"}

package/dist/http/contrib/pathParametersValidator.js

@@ -0,0 +1,15 @@
+import { andThenAsync, mapAsync, mapErrAsync } from '@konker.dev/neverthrow-r/async';
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { pipe } from '@konker.dev/neverthrow-r/pipe';
+import { andThenParseAsyncR } from '@konker.dev/neverthrow-r-schema/async';
+import { tapLogger } from '../../lib/Logger.js';
+import { middlewareError } from '../../lib/MiddlewareError.js';
+import { makeRequestW } from '../RequestW.js';
+import { makeResponseW } from '../ResponseW.js';
+export const TAG = 'pathParametersValidator';
+const toMiddlewareError = (error) => middlewareError(error.message, error.cause === undefined ? error.issues : [error.cause, ...error.issues]);
+export const middleware = (schema) => (wrapped) => (i) => pipe(okAsyncR(i.pathParameters), tapLogger('debug', `[${TAG}] IN`), andThenParseAsyncR(schema, { message: 'Path parameters validation failed' }), mapErrAsync(toMiddlewareError), mapAsync((validatedPathParameters) => makeRequestW(i, {
+    pathParameters: validatedPathParameters,
+    pathParametersValidatorRaw: i.pathParameters,
+})), andThenAsync(wrapped), mapAsync((res) => makeResponseW(res)), tapLogger('debug', `[${TAG}] OUT`));
+//# sourceMappingURL=pathParametersValidator.js.map

package/dist/http/contrib/pathParametersValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathParametersValidator.js","sourceRoot":"","sources":["../../../src/http/contrib/pathParametersValidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAK3E,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG,yBAAyB,CAAC;AAO7C,MAAM,iBAAiB,GAAG,CAAC,KAA4B,EAAmB,EAAE,CAC1E,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5G,MAAM,CAAC,MAAM,UAAU,GACrB,CAAI,MAAoC,EAAE,EAAE,CAC5C,CACE,OAAqF,EAClB,EAAE,CACvE,CAAC,CAAc,EAAE,EAAE,CACjB,IAAI,CACF,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,EAC1B,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,EACjC,kBAAkB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,EAC5E,WAAW,CAAC,iBAAiB,CAAC,EAC9B,QAAQ,CAAC,CAAC,uBAAuB,EAAE,EAAE,CACnC,YAAY,CAAC,CAAC,EAAE;IACd,cAAc,EAAE,uBAAuB;IACvC,0BAA0B,EAAE,CAAC,CAAC,cAAc;CAC7C,CAAC,CACH,EACD,YAAY,CAAC,OAAO,CAAC,EACrB,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EACrC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,CACnC,CAAC"}

package/dist/http/contrib/pathParametersValidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pathParametersValidator.test.d.ts.map

package/dist/http/contrib/pathParametersValidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathParametersValidator.test.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/pathParametersValidator.test.ts"],"names":[],"mappings":""}

package/dist/http/contrib/pathParametersValidator.test.js

@@ -0,0 +1,46 @@
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { makeRequestW } from '../RequestW.js';
+import { EMPTY_RESPONSE_W } from '../ResponseW.js';
+import { middleware as pathParametersValidator } from './pathParametersValidator.js';
+describe('pathParametersValidator', () => {
+    const schema = z.object({
+        slug: z.literal('hello'),
+        page: z.coerce.number(),
+    });
+    it('validates and replaces path parameters', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = pathParametersValidator(schema)((req) => okAsyncR({
+            ...EMPTY_RESPONSE_W,
+            body: req.pathParameters,
+        }));
+        const input = makeRequestW(sampleRequestW, { pathParameters: { slug: 'hello', page: '2' } });
+        const result = await wrapped(input)({ logger });
+        expect(result.isOk() && result.value.body).toEqual({ slug: 'hello', page: 2 });
+    });
+    it('returns a MiddlewareError when path parameters fail validation', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = pathParametersValidator(schema)(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, { pathParameters: { slug: 'nope', page: '2' } });
+        const result = await wrapped(input)({ logger });
+        expect(result.isErr() && result.error.message).toBe('Path parameters validation failed');
+    });
+    it('keeps a thrown validator cause in internal details', async () => {
+        const schema = {
+            '~standard': {
+                version: 1,
+                vendor: 'fixture',
+                validate: () => {
+                    throw new Error('validator exploded');
+                },
+            },
+        };
+        const { logger } = recordingLogger();
+        const wrapped = pathParametersValidator(schema)(() => okAsyncR(EMPTY_RESPONSE_W));
+        const result = await wrapped(makeRequestW(sampleRequestW, { pathParameters: { slug: 'x' } }))({ logger });
+        expect(result.isErr() && result.error.internal?.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=pathParametersValidator.test.js.map

package/dist/http/contrib/pathParametersValidator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathParametersValidator.test.js","sourceRoot":"","sources":["../../../src/http/contrib/pathParametersValidator.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAEjE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,IAAI,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAErF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;KACxB,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CACtD,QAAQ,CAAY;YAClB,GAAG,gBAAgB;YACnB,IAAI,EAAE,GAAG,CAAC,cAAc;SACZ,CAAC,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAsC;YAChD,WAAW,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACxC,CAAC;aACF;SACF,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1G,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http/contrib/pathTokenAuthorizer.d.ts

@@ -0,0 +1,13 @@
+import type { Handler } from '../../handler.js';
+import type { WithLogger } from '../../lib/Logger.js';
+import { HttpApiError } from '../HttpApiError.js';
+import type { Rec } from '../Rec.js';
+import { type RequestW } from '../RequestW.js';
+import type { ResponseW } from '../ResponseW.js';
+export declare const TAG = "pathTokenAuthorizer";
+export type PathTokenAuthorizerDeps = {
+    readonly secretTokenEnvName: string;
+    readonly pathParamName: string;
+};
+export declare const middleware: () => <I extends Rec, O extends Rec, E, R>(wrapped: Handler<RequestW<I>, R, ResponseW<O>, E>) => Handler<RequestW<I>, R & WithLogger & PathTokenAuthorizerDeps, ResponseW<O>, E | HttpApiError>;
+//# sourceMappingURL=pathTokenAuthorizer.d.ts.map

package/dist/http/contrib/pathTokenAuthorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathTokenAuthorizer.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/pathTokenAuthorizer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,eAAO,MAAM,GAAG,wBAAwB,CAAC;AAEzC,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,UAAU,SAEpB,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EACjC,SAAS,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAChD,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,GAAG,uBAAuB,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAiB/F,CAAC"}

package/dist/http/contrib/pathTokenAuthorizer.js

@@ -0,0 +1,19 @@
+import { errAsync } from 'neverthrow';
+import { HttpApiError } from '../HttpApiError.js';
+import {} from '../RequestW.js';
+export const TAG = 'pathTokenAuthorizer';
+export const middleware = () => (wrapped) => (i) => (r) => {
+    r.logger.debug(`[${TAG}] IN`);
+    const secret = process.env[r.secretTokenEnvName];
+    const actual = i.pathParameters?.[r.pathParamName];
+    if (!secret || actual !== secret) {
+        const error = new HttpApiError({ statusCode: 401, message: 'Invalid token' });
+        r.logger.error(error);
+        return errAsync(error);
+    }
+    return wrapped(i)(r).map((res) => {
+        r.logger.debug(`[${TAG}] OUT`);
+        return res;
+    });
+};
+//# sourceMappingURL=pathTokenAuthorizer.js.map

package/dist/http/contrib/pathTokenAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathTokenAuthorizer.js","sourceRoot":"","sources":["../../../src/http/contrib/pathTokenAuthorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAItC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAG/C,MAAM,CAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAOzC,MAAM,CAAC,MAAM,UAAU,GACrB,GAAG,EAAE,CACL,CACE,OAAiD,EAC+C,EAAE,CACpG,CAAC,CAAC,EAAE,EAAE,CACN,CAAC,CAAC,EAAE,EAAE;IACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,QAAQ,CAA6B,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/http/contrib/pathTokenAuthorizer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pathTokenAuthorizer.test.d.ts.map

package/dist/http/contrib/pathTokenAuthorizer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathTokenAuthorizer.test.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/pathTokenAuthorizer.test.ts"],"names":[],"mappings":""}

package/dist/http/contrib/pathTokenAuthorizer.test.js

@@ -0,0 +1,29 @@
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { describe, expect, it } from 'vitest';
+import { recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { makeRequestW } from '../RequestW.js';
+import { EMPTY_RESPONSE_W } from '../ResponseW.js';
+import { middleware as pathTokenAuthorizer } from './pathTokenAuthorizer.js';
+describe('pathTokenAuthorizer', () => {
+    it('authorizes when the path token matches the configured env var', async () => {
+        const oldEnv = process.env;
+        process.env = { ...oldEnv, TEST_SECRET_TOKEN: 'secret-token' };
+        const { logger } = recordingLogger();
+        const wrapped = pathTokenAuthorizer()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, { pathParameters: { token: 'secret-token' } });
+        const result = await wrapped(input)({ logger, pathParamName: 'token', secretTokenEnvName: 'TEST_SECRET_TOKEN' });
+        process.env = oldEnv;
+        expect(result.isOk()).toBe(true);
+    });
+    it('returns a 401 HttpApiError when the token does not match', async () => {
+        const oldEnv = process.env;
+        process.env = { ...oldEnv, TEST_SECRET_TOKEN: 'secret-token' };
+        const { logger } = recordingLogger();
+        const wrapped = pathTokenAuthorizer()(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, { pathParameters: { token: 'bad-token' } });
+        const result = await wrapped(input)({ logger, pathParamName: 'token', secretTokenEnvName: 'TEST_SECRET_TOKEN' });
+        process.env = oldEnv;
+        expect(result.isErr() && result.error.statusCode).toBe(401);
+    });
+});
+//# sourceMappingURL=pathTokenAuthorizer.test.js.map

package/dist/http/contrib/pathTokenAuthorizer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathTokenAuthorizer.test.js","sourceRoot":"","sources":["../../../src/http/contrib/pathTokenAuthorizer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE7E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjH,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;QAErB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjH,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;QAErB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http/contrib/queryStringValidator.d.ts

@@ -0,0 +1,12 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import type { WithLogger } from '../../lib/Logger.js';
+import type { MiddlewareError } from '../../lib/MiddlewareError.js';
+import type { Override, Rec, RequestResponseHandler } from '../RequestResponseHandler.js';
+import { type RequestW } from '../RequestW.js';
+export declare const TAG = "queryStringValidator";
+export type WithValidatedQueryStringParameters<V> = {
+    readonly queryStringParameters: V;
+    readonly queryStringValidatorRaw: RequestW['queryStringParameters'];
+};
+export declare const middleware: <V>(schema: StandardSchemaV1<unknown, V>) => <I extends Rec, O extends Rec, E, R>(wrapped: RequestResponseHandler<Override<I, WithValidatedQueryStringParameters<V>>, R, O, E>) => RequestResponseHandler<I, R & WithLogger, O, E | MiddlewareError>;
+//# sourceMappingURL=queryStringValidator.d.ts.map

package/dist/http/contrib/queryStringValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryStringValidator.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/queryStringValidator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG7D,eAAO,MAAM,GAAG,yBAAyB,CAAC;AAE1C,MAAM,MAAM,kCAAkC,CAAC,CAAC,IAAI;IAClD,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CACrE,CAAC;AAKF,eAAO,MAAM,UAAU,GACpB,CAAC,EAAE,QAAQ,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,MACvC,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EACjC,SAAS,sBAAsB,CAAC,QAAQ,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3F,sBAAsB,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,CAAC,GAAG,eAAe,CAgBhE,CAAC"}

package/dist/http/contrib/queryStringValidator.js

@@ -0,0 +1,15 @@
+import { andThenAsync, mapAsync, mapErrAsync } from '@konker.dev/neverthrow-r/async';
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { pipe } from '@konker.dev/neverthrow-r/pipe';
+import { andThenParseAsyncR } from '@konker.dev/neverthrow-r-schema/async';
+import { tapLogger } from '../../lib/Logger.js';
+import { middlewareError } from '../../lib/MiddlewareError.js';
+import { makeRequestW } from '../RequestW.js';
+import { makeResponseW } from '../ResponseW.js';
+export const TAG = 'queryStringValidator';
+const toMiddlewareError = (error) => middlewareError(error.message, error.cause === undefined ? error.issues : [error.cause, ...error.issues]);
+export const middleware = (schema) => (wrapped) => (i) => pipe(okAsyncR(i.queryStringParameters), tapLogger('debug', `[${TAG}] IN`), andThenParseAsyncR(schema, { message: 'Query string validation failed' }), mapErrAsync(toMiddlewareError), mapAsync((validatedQueryStringParameters) => makeRequestW(i, {
+    queryStringParameters: validatedQueryStringParameters,
+    queryStringValidatorRaw: i.queryStringParameters,
+})), andThenAsync(wrapped), mapAsync((res) => makeResponseW(res)), tapLogger('debug', `[${TAG}] OUT`));
+//# sourceMappingURL=queryStringValidator.js.map

package/dist/http/contrib/queryStringValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryStringValidator.js","sourceRoot":"","sources":["../../../src/http/contrib/queryStringValidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAK3E,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG,sBAAsB,CAAC;AAO1C,MAAM,iBAAiB,GAAG,CAAC,KAA4B,EAAmB,EAAE,CAC1E,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5G,MAAM,CAAC,MAAM,UAAU,GACrB,CAAI,MAAoC,EAAE,EAAE,CAC5C,CACE,OAA4F,EACzB,EAAE,CACvE,CAAC,CAAc,EAAE,EAAE,CACjB,IAAI,CACF,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,EACjC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,EACjC,kBAAkB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,EACzE,WAAW,CAAC,iBAAiB,CAAC,EAC9B,QAAQ,CAAC,CAAC,8BAA8B,EAAE,EAAE,CAC1C,YAAY,CAAC,CAAC,EAAE;IACd,qBAAqB,EAAE,8BAA8B;IACrD,uBAAuB,EAAE,CAAC,CAAC,qBAAqB;CACjD,CAAC,CACH,EACD,YAAY,CAAC,OAAO,CAAC,EACrB,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EACrC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,CACnC,CAAC"}

package/dist/http/contrib/queryStringValidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=queryStringValidator.test.d.ts.map

package/dist/http/contrib/queryStringValidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryStringValidator.test.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/queryStringValidator.test.ts"],"names":[],"mappings":""}

package/dist/http/contrib/queryStringValidator.test.js

@@ -0,0 +1,46 @@
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { makeRequestW } from '../RequestW.js';
+import { EMPTY_RESPONSE_W } from '../ResponseW.js';
+import { middleware as queryStringValidator } from './queryStringValidator.js';
+describe('queryStringValidator', () => {
+    const schema = z.object({
+        foo: z.literal('bar'),
+        page: z.coerce.number(),
+    });
+    it('validates and replaces query string parameters', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = queryStringValidator(schema)((req) => okAsyncR({
+            ...EMPTY_RESPONSE_W,
+            body: req.queryStringParameters,
+        }));
+        const input = makeRequestW(sampleRequestW, { queryStringParameters: { foo: 'bar', page: '3' } });
+        const result = await wrapped(input)({ logger });
+        expect(result.isOk() && result.value.body).toEqual({ foo: 'bar', page: 3 });
+    });
+    it('returns a MiddlewareError when query string validation fails', async () => {
+        const { logger } = recordingLogger();
+        const wrapped = queryStringValidator(schema)(() => okAsyncR(EMPTY_RESPONSE_W));
+        const input = makeRequestW(sampleRequestW, { queryStringParameters: { foo: 'nope', page: '3' } });
+        const result = await wrapped(input)({ logger });
+        expect(result.isErr() && result.error.message).toBe('Query string validation failed');
+    });
+    it('keeps a thrown validator cause in internal details', async () => {
+        const schema = {
+            '~standard': {
+                version: 1,
+                vendor: 'fixture',
+                validate: () => {
+                    throw new Error('validator exploded');
+                },
+            },
+        };
+        const { logger } = recordingLogger();
+        const wrapped = queryStringValidator(schema)(() => okAsyncR(EMPTY_RESPONSE_W));
+        const result = await wrapped(makeRequestW(sampleRequestW, { queryStringParameters: { foo: 'x' } }))({ logger });
+        expect(result.isErr() && result.error.internal?.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=queryStringValidator.test.js.map

package/dist/http/contrib/queryStringValidator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queryStringValidator.test.js","sourceRoot":"","sources":["../../../src/http/contrib/queryStringValidator.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAEjE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAE/E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;KACxB,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CACnD,QAAQ,CAAY;YAClB,GAAG,gBAAgB;YACnB,IAAI,EAAE,GAAG,CAAC,qBAAqB;SACnB,CAAC,CAChB,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAsC;YAChD,WAAW,EAAE;gBACX,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACxC,CAAC;aACF;SACF,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAY,gBAAgB,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http/contrib/requestResponseLogger.d.ts

@@ -0,0 +1,5 @@
+import type { WithLogger } from '../../lib/Logger.js';
+import type { Rec, RequestResponseHandler } from '../RequestResponseHandler.js';
+export declare const TAG = "requestResponseLogger";
+export declare const middleware: () => <I extends Rec, O extends Rec, E, R>(wrapped: RequestResponseHandler<I, R, O, E>) => RequestResponseHandler<I, R & WithLogger, O, E>;
+//# sourceMappingURL=requestResponseLogger.d.ts.map

package/dist/http/contrib/requestResponseLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResponseLogger.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/requestResponseLogger.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGhF,eAAO,MAAM,GAAG,0BAA0B,CAAC;AAE3C,eAAO,MAAM,UAAU,SAEpB,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EACjC,SAAS,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC1C,sBAAsB,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,CAAC,CAS9C,CAAC"}

package/dist/http/contrib/requestResponseLogger.js

@@ -0,0 +1,8 @@
+import { andThenAsync } from '@konker.dev/neverthrow-r/async';
+import { okAsyncR } from '@konker.dev/neverthrow-r/constructors';
+import { pipe } from '@konker.dev/neverthrow-r/pipe';
+import { tapLogger, tapLoggerWith } from '../../lib/Logger.js';
+import {} from '../RequestW.js';
+export const TAG = 'requestResponseLogger';
+export const middleware = () => (wrapped) => (i) => pipe(okAsyncR(i), tapLogger('debug', `[${TAG}] IN`), tapLoggerWith('info', (req) => [`[${TAG}] REQUEST`, req]), andThenAsync(wrapped), tapLoggerWith('info', (res) => [`[${TAG}] RESPONSE`, res]), tapLogger('debug', `[${TAG}] OUT`));
+//# sourceMappingURL=requestResponseLogger.js.map

package/dist/http/contrib/requestResponseLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResponseLogger.js","sourceRoot":"","sources":["../../../src/http/contrib/requestResponseLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAGrD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,MAAM,GAAG,GAAG,uBAAuB,CAAC;AAE3C,MAAM,CAAC,MAAM,UAAU,GACrB,GAAG,EAAE,CACL,CACE,OAA2C,EACM,EAAE,CACrD,CAAC,CAAc,EAAE,EAAE,CACjB,IAAI,CACF,QAAQ,CAAC,CAAC,CAAC,EACX,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,EACjC,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,WAAW,EAAE,GAAG,CAAC,CAAC,EACzD,YAAY,CAAC,OAAO,CAAC,EACrB,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,YAAY,EAAE,GAAG,CAAC,CAAC,EAC1D,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,CACnC,CAAC"}

package/dist/http/contrib/requestResponseLogger.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=requestResponseLogger.test.d.ts.map

package/dist/http/contrib/requestResponseLogger.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResponseLogger.test.d.ts","sourceRoot":"","sources":["../../../src/http/contrib/requestResponseLogger.test.ts"],"names":[],"mappings":""}

package/dist/http/contrib/requestResponseLogger.test.js

@@ -0,0 +1,18 @@
+import { describe, expect, it } from 'vitest';
+import { echoHandler, recordingLogger, sampleRequestW } from '../../test/test-common.js';
+import { middleware as requestResponseLogger, TAG } from './requestResponseLogger.js';
+describe('requestResponseLogger', () => {
+    it('emits IN/REQUEST/RESPONSE/OUT in order', async () => {
+        const { calls, logger } = recordingLogger();
+        const wrapped = requestResponseLogger()(echoHandler());
+        const result = await wrapped(sampleRequestW)({ logger });
+        expect(result.isOk() && result.value.statusCode).toBe(200);
+        expect(calls.map((c) => ({ level: c.level, label: c.args[0] }))).toEqual([
+            { level: 'debug', label: `[${TAG}] IN` },
+            { level: 'info', label: `[${TAG}] REQUEST` },
+            { level: 'info', label: `[${TAG}] RESPONSE` },
+            { level: 'debug', label: `[${TAG}] OUT` },
+        ]);
+    });
+});
+//# sourceMappingURL=requestResponseLogger.test.js.map

package/dist/http/contrib/requestResponseLogger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResponseLogger.test.js","sourceRoot":"","sources":["../../../src/http/contrib/requestResponseLogger.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,UAAU,IAAI,qBAAqB,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAEtF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,MAAM,EAAE;YACxC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,WAAW,EAAE;YAC5C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,YAAY,EAAE;YAC7C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}