@peac/middleware-express 0.10.9 → 0.10.10

package/LICENSE

@@ -175,7 +175,7 @@ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
 END OF TERMS AND CONDITIONS
 
-Copyright 2025 PEAC Protocol Contributors
+Copyright 2025-2026 PEAC Protocol Contributors
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

package/dist/index.cjs

@@ -0,0 +1,130 @@
+'use strict';
+
+var middlewareCore = require('@peac/middleware-core');
+
+// src/middleware.ts
+var PEAC_CONTEXT_KEY = Symbol("peac-context");
+function hasPeacContext(req) {
+  return PEAC_CONTEXT_KEY in req;
+}
+function getReceiptFromResponse(res) {
+  const receipt = res.getHeader("PEAC-Receipt");
+  return typeof receipt === "string" ? receipt : void 0;
+}
+function buildRequestContext(req) {
+  return {
+    method: req.method,
+    path: req.path,
+    headers: req.headers,
+    body: req.body,
+    timestamp: Date.now()
+  };
+}
+function peacMiddleware(config) {
+  middlewareCore.validateConfig(config);
+  return async function peacReceiptMiddleware(req, res, next) {
+    if (config.skip?.(req)) {
+      next();
+      return;
+    }
+    const requestContext = buildRequestContext(req);
+    req[PEAC_CONTEXT_KEY] = requestContext;
+    const enhancedConfig = {
+      ...config,
+      claimsGenerator: async (ctx) => {
+        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
+        return {
+          ...baseClaims,
+          // Override audience if custom extractor provided
+          ...config.audienceExtractor && { aud: config.audienceExtractor(req) },
+          // Add subject if extractor provided
+          ...config.subjectExtractor && { sub: config.subjectExtractor(req) }
+        };
+      }
+    };
+    const originalJson = res.json.bind(res);
+    res.json = function jsonWithReceipt(body) {
+      middlewareCore.createReceipt(enhancedConfig, requestContext, {
+        statusCode: res.statusCode,
+        headers: res.getHeaders(),
+        body
+      }).then((result) => {
+        for (const [key, value] of Object.entries(result.headers)) {
+          res.setHeader(key, value);
+        }
+        if (result.bodyWrapper) {
+          return originalJson(result.bodyWrapper);
+        }
+        return originalJson(body);
+      }).catch((error) => {
+        if (config.onError) {
+          config.onError(error, req, res);
+        } else {
+          console.error("[PEAC] Receipt generation failed:", error.message);
+        }
+        return originalJson(body);
+      });
+      return res;
+    };
+    next();
+  };
+}
+function peacMiddlewareSync(config) {
+  middlewareCore.validateConfig(config);
+  return async function peacReceiptMiddlewareSync(req, res, next) {
+    if (config.skip?.(req)) {
+      next();
+      return;
+    }
+    const requestContext = buildRequestContext(req);
+    req[PEAC_CONTEXT_KEY] = requestContext;
+    const enhancedConfig = {
+      ...config,
+      claimsGenerator: async (ctx) => {
+        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
+        return {
+          ...baseClaims,
+          ...config.audienceExtractor && { aud: config.audienceExtractor(req) },
+          ...config.subjectExtractor && { sub: config.subjectExtractor(req) }
+        };
+      }
+    };
+    const originalJson = res.json.bind(res);
+    res.json = function jsonWithReceiptSync(body) {
+      const syncWrapper = async () => {
+        try {
+          const result = await middlewareCore.createReceipt(enhancedConfig, requestContext, {
+            statusCode: res.statusCode,
+            headers: res.getHeaders(),
+            body
+          });
+          for (const [key, value] of Object.entries(result.headers)) {
+            res.setHeader(key, value);
+          }
+          if (result.bodyWrapper) {
+            originalJson(result.bodyWrapper);
+          } else {
+            originalJson(body);
+          }
+        } catch (error) {
+          if (config.onError) {
+            config.onError(error, req, res);
+          } else {
+            console.error("[PEAC] Receipt generation failed:", error.message);
+          }
+          originalJson(body);
+        }
+      };
+      syncWrapper();
+      return res;
+    };
+    next();
+  };
+}
+
+exports.getReceiptFromResponse = getReceiptFromResponse;
+exports.hasPeacContext = hasPeacContext;
+exports.peacMiddleware = peacMiddleware;
+exports.peacMiddlewareSync = peacMiddlewareSync;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":["validateConfig","createReceipt"],"mappings":";;;;;AAoCA,IAAM,gBAAA,GAAmB,OAAO,cAAc,CAAA;AAYvC,SAAS,eAAe,GAAA,EAA6C;AAC1E,EAAA,OAAO,gBAAA,IAAoB,GAAA;AAC7B;AAQO,SAAS,uBAAuB,GAAA,EAAmC;AACxE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,SAAA,CAAU,cAAc,CAAA;AAC5C,EAAA,OAAO,OAAO,OAAA,KAAY,QAAA,GAAW,OAAA,GAAU,MAAA;AACjD;AAKA,SAAS,oBAAoB,GAAA,EAA8B;AACzD,EAAA,OAAO;AAAA,IACL,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,SAAA,EAAW,KAAK,GAAA;AAAI,GACtB;AACF;AAiCO,SAAS,eAAe,MAAA,EAAiD;AAE9E,EAAAA,6BAAA,CAAe,MAAM,CAAA;AAErB,EAAA,OAAO,eAAe,qBAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AAEf,IAAA,IAAI,MAAA,CAAO,IAAA,GAAO,GAAG,CAAA,EAAG;AACtB,MAAA,IAAA,EAAK;AACL,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,oBAAoB,GAAG,CAAA;AAC9C,IAAC,GAAA,CAA+B,gBAAgB,CAAA,GAAI,cAAA;AAGpD,IAAA,MAAM,cAAA,GAAmC;AAAA,MACvC,GAAG,MAAA;AAAA,MACH,eAAA,EAAiB,OAAO,GAAA,KAAQ;AAC9B,QAAA,MAAM,UAAA,GAAa,OAAO,eAAA,GAAkB,MAAM,OAAO,eAAA,CAAgB,GAAG,IAAI,EAAC;AAEjF,QAAA,OAAO;AAAA,UACL,GAAG,UAAA;AAAA;AAAA,UAEH,GAAI,OAAO,iBAAA,IAAqB,EAAE,KAAK,MAAA,CAAO,iBAAA,CAAkB,GAAG,CAAA,EAAE;AAAA;AAAA,UAErE,GAAI,OAAO,gBAAA,IAAoB,EAAE,KAAK,MAAA,CAAO,gBAAA,CAAiB,GAAG,CAAA;AAAE,SACrE;AAAA,MACF;AAAA,KACF;AAGA,IAAA,MAAM,YAAA,GAAe,GAAA,CAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAGtC,IAAA,GAAA,CAAI,IAAA,GAAO,SAAS,eAAA,CAAgB,IAAA,EAAyB;AAE3D,MAAAC,4BAAA,CAAc,gBAAgB,cAAA,EAAgB;AAAA,QAC5C,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB,OAAA,EAAS,IAAI,UAAA,EAAW;AAAA,QACxB;AAAA,OACD,CAAA,CACE,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,QAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,QAC1B;AAGA,QAAA,IAAI,OAAO,WAAA,EAAa;AACtB,UAAA,OAAO,YAAA,CAAa,OAAO,WAAW,CAAA;AAAA,QACxC;AAEA,QAAA,OAAO,aAAa,IAAI,CAAA;AAAA,MAC1B,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAiB;AAEvB,QAAA,IAAI,OAAO,OAAA,EAAS;AAClB,UAAA,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,GAAG,CAAA;AAAA,QAChC,CAAA,MAAO;AAEL,UAAA,OAAA,CAAQ,KAAA,CAAM,mCAAA,EAAqC,KAAA,CAAM,OAAO,CAAA;AAAA,QAClE;AAGA,QAAA,OAAO,aAAa,IAAI,CAAA;AAAA,MAC1B,CAAC,CAAA;AAIH,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAEA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAYO,SAAS,mBAAmB,MAAA,EAAiD;AAElF,EAAAD,6BAAA,CAAe,MAAM,CAAA;AAErB,EAAA,OAAO,eAAe,yBAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AAEf,IAAA,IAAI,MAAA,CAAO,IAAA,GAAO,GAAG,CAAA,EAAG;AACtB,MAAA,IAAA,EAAK;AACL,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,oBAAoB,GAAG,CAAA;AAC9C,IAAC,GAAA,CAA+B,gBAAgB,CAAA,GAAI,cAAA;AAGpD,IAAA,MAAM,cAAA,GAAmC;AAAA,MACvC,GAAG,MAAA;AAAA,MACH,eAAA,EAAiB,OAAO,GAAA,KAAQ;AAC9B,QAAA,MAAM,UAAA,GAAa,OAAO,eAAA,GAAkB,MAAM,OAAO,eAAA,CAAgB,GAAG,IAAI,EAAC;AAEjF,QAAA,OAAO;AAAA,UACL,GAAG,UAAA;AAAA,UACH,GAAI,OAAO,iBAAA,IAAqB,EAAE,KAAK,MAAA,CAAO,iBAAA,CAAkB,GAAG,CAAA,EAAE;AAAA,UACrE,GAAI,OAAO,gBAAA,IAAoB,EAAE,KAAK,MAAA,CAAO,gBAAA,CAAiB,GAAG,CAAA;AAAE,SACrE;AAAA,MACF;AAAA,KACF;AAGA,IAAA,MAAM,YAAA,GAAe,GAAA,CAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAGtC,IAAA,GAAA,CAAI,IAAA,GAAO,SAAS,mBAAA,CAAoB,IAAA,EAAyB;AAG/D,MAAA,MAAM,cAAc,YAA2B;AAC7C,QAAA,IAAI;AACF,UAAA,MAAM,MAAA,GAAS,MAAMC,4BAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB;AAAA,YACjE,YAAY,GAAA,CAAI,UAAA;AAAA,YAChB,OAAA,EAAS,IAAI,UAAA,EAAW;AAAA,YACxB;AAAA,WACD,CAAA;AAGD,UAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACzD,YAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,UAC1B;AAGA,UAAA,IAAI,OAAO,WAAA,EAAa;AACtB,YAAA,YAAA,CAAa,OAAO,WAAW,CAAA;AAAA,UACjC,CAAA,MAAO;AACL,YAAA,YAAA,CAAa,IAAI,CAAA;AAAA,UACnB;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,OAAO,OAAA,EAAS;AAClB,YAAA,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAgB,GAAA,EAAK,GAAG,CAAA;AAAA,UACzC,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,KAAA,CAAM,mCAAA,EAAsC,KAAA,CAAgB,OAAO,CAAA;AAAA,UAC7E;AACA,UAAA,YAAA,CAAa,IAAI,CAAA;AAAA,QACnB;AAAA,MACF,CAAA;AAGA,MAAA,WAAA,EAAY;AACZ,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAEA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF","file":"index.cjs","sourcesContent":["/**\n * Express.js Middleware for PEAC Receipt Issuance\n *\n * Intercepts responses and adds PEAC receipts automatically.\n *\n * @packageDocumentation\n */\n\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport {\n  createReceipt,\n  validateConfig,\n  type MiddlewareConfig,\n  type RequestContext,\n} from '@peac/middleware-core';\n\n/**\n * Express-specific middleware configuration\n */\nexport interface ExpressMiddlewareConfig extends MiddlewareConfig {\n  /** Skip receipt generation for certain routes */\n  skip?: (req: Request) => boolean;\n\n  /** Custom audience extraction from request */\n  audienceExtractor?: (req: Request) => string;\n\n  /** Custom subject extraction from request */\n  subjectExtractor?: (req: Request) => string | undefined;\n\n  /** Error handler for receipt generation failures */\n  onError?: (error: Error, req: Request, res: Response) => void;\n}\n\n/**\n * Symbol to store PEAC context on request\n */\nconst PEAC_CONTEXT_KEY = Symbol('peac-context');\n\n/**\n * Request with PEAC context attached\n */\nexport interface RequestWithPeacContext extends Request {\n  [PEAC_CONTEXT_KEY]?: RequestContext;\n}\n\n/**\n * Check if a request has PEAC context\n */\nexport function hasPeacContext(req: Request): req is RequestWithPeacContext {\n  return PEAC_CONTEXT_KEY in req;\n}\n\n/**\n * Get the PEAC receipt from a response (for testing/debugging)\n *\n * @param res - Express response object\n * @returns Receipt JWS if present, undefined otherwise\n */\nexport function getReceiptFromResponse(res: Response): string | undefined {\n  const receipt = res.getHeader('PEAC-Receipt');\n  return typeof receipt === 'string' ? receipt : undefined;\n}\n\n/**\n * Convert Express request to RequestContext\n */\nfunction buildRequestContext(req: Request): RequestContext {\n  return {\n    method: req.method,\n    path: req.path,\n    headers: req.headers as Record<string, string | string[] | undefined>,\n    body: req.body,\n    timestamp: Date.now(),\n  };\n}\n\n/**\n * Express middleware that adds PEAC receipts to responses\n *\n * The middleware intercepts `res.json()` and `res.send()` to inject\n * PEAC receipts into responses. For header transport (default), the\n * receipt is added as a `PEAC-Receipt` header. For body transport,\n * the response is wrapped in a `{ data, peac_receipt }` structure.\n *\n * @param config - Middleware configuration\n * @returns Express request handler\n *\n * @example\n * ```typescript\n * import express from 'express';\n * import { peacMiddleware } from '@peac/middleware-express';\n *\n * const app = express();\n *\n * // Add PEAC middleware\n * app.use(peacMiddleware({\n *   issuer: 'https://api.example.com',\n *   signingKey: privateKey,\n *   keyId: 'prod-2026-02',\n * }));\n *\n * app.get('/api/data', (req, res) => {\n *   res.json({ items: [1, 2, 3] });\n *   // PEAC-Receipt header automatically added\n * });\n * ```\n */\nexport function peacMiddleware(config: ExpressMiddlewareConfig): RequestHandler {\n  // Validate configuration at initialization\n  validateConfig(config);\n\n  return async function peacReceiptMiddleware(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    // Check if we should skip this request\n    if (config.skip?.(req)) {\n      next();\n      return;\n    }\n\n    // Build and store request context\n    const requestContext = buildRequestContext(req);\n    (req as RequestWithPeacContext)[PEAC_CONTEXT_KEY] = requestContext;\n\n    // Enhance config with Express-specific extractors\n    const enhancedConfig: MiddlewareConfig = {\n      ...config,\n      claimsGenerator: async (ctx) => {\n        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};\n\n        return {\n          ...baseClaims,\n          // Override audience if custom extractor provided\n          ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),\n          // Add subject if extractor provided\n          ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),\n        };\n      },\n    };\n\n    // Store original json method\n    const originalJson = res.json.bind(res);\n\n    // Override res.json to inject receipt\n    res.json = function jsonWithReceipt(body: unknown): Response {\n      // Generate receipt asynchronously\n      createReceipt(enhancedConfig, requestContext, {\n        statusCode: res.statusCode,\n        headers: res.getHeaders() as Record<string, string | string[] | undefined>,\n        body,\n      })\n        .then((result) => {\n          // Add headers from receipt result\n          for (const [key, value] of Object.entries(result.headers)) {\n            res.setHeader(key, value);\n          }\n\n          // If body transport, use wrapped body\n          if (result.bodyWrapper) {\n            return originalJson(result.bodyWrapper);\n          }\n\n          return originalJson(body);\n        })\n        .catch((error: Error) => {\n          // Handle errors without breaking the response\n          if (config.onError) {\n            config.onError(error, req, res);\n          } else {\n            // Log but don't fail the response\n            console.error('[PEAC] Receipt generation failed:', error.message);\n          }\n\n          // Send original body on error\n          return originalJson(body);\n        });\n\n      // Return response for chaining (synchronous return)\n      // The actual response will be sent by the promise chain\n      return res;\n    };\n\n    next();\n  };\n}\n\n/**\n * Create middleware with synchronous receipt generation (blocking)\n *\n * This variant waits for receipt generation before sending the response.\n * Use this when you need to guarantee the receipt is in the response,\n * but be aware it adds latency.\n *\n * @param config - Middleware configuration\n * @returns Express request handler\n */\nexport function peacMiddlewareSync(config: ExpressMiddlewareConfig): RequestHandler {\n  // Validate configuration at initialization\n  validateConfig(config);\n\n  return async function peacReceiptMiddlewareSync(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    // Check if we should skip this request\n    if (config.skip?.(req)) {\n      next();\n      return;\n    }\n\n    // Build and store request context\n    const requestContext = buildRequestContext(req);\n    (req as RequestWithPeacContext)[PEAC_CONTEXT_KEY] = requestContext;\n\n    // Enhance config with Express-specific extractors\n    const enhancedConfig: MiddlewareConfig = {\n      ...config,\n      claimsGenerator: async (ctx) => {\n        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};\n\n        return {\n          ...baseClaims,\n          ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),\n          ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),\n        };\n      },\n    };\n\n    // Store original json method\n    const originalJson = res.json.bind(res);\n\n    // Override res.json to inject receipt synchronously\n    res.json = function jsonWithReceiptSync(body: unknown): Response {\n      // We can't make this truly sync due to crypto operations,\n      // but we can make it blocking by using a sync wrapper\n      const syncWrapper = async (): Promise<void> => {\n        try {\n          const result = await createReceipt(enhancedConfig, requestContext, {\n            statusCode: res.statusCode,\n            headers: res.getHeaders() as Record<string, string | string[] | undefined>,\n            body,\n          });\n\n          // Add headers\n          for (const [key, value] of Object.entries(result.headers)) {\n            res.setHeader(key, value);\n          }\n\n          // Send response\n          if (result.bodyWrapper) {\n            originalJson(result.bodyWrapper);\n          } else {\n            originalJson(body);\n          }\n        } catch (error) {\n          if (config.onError) {\n            config.onError(error as Error, req, res);\n          } else {\n            console.error('[PEAC] Receipt generation failed:', (error as Error).message);\n          }\n          originalJson(body);\n        }\n      };\n\n      // Execute synchronously by blocking\n      syncWrapper();\n      return res;\n    };\n\n    next();\n  };\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,125 @@
+import { validateConfig, createReceipt } from '@peac/middleware-core';
+
+// src/middleware.ts
+var PEAC_CONTEXT_KEY = Symbol("peac-context");
+function hasPeacContext(req) {
+  return PEAC_CONTEXT_KEY in req;
+}
+function getReceiptFromResponse(res) {
+  const receipt = res.getHeader("PEAC-Receipt");
+  return typeof receipt === "string" ? receipt : void 0;
+}
+function buildRequestContext(req) {
+  return {
+    method: req.method,
+    path: req.path,
+    headers: req.headers,
+    body: req.body,
+    timestamp: Date.now()
+  };
+}
+function peacMiddleware(config) {
+  validateConfig(config);
+  return async function peacReceiptMiddleware(req, res, next) {
+    if (config.skip?.(req)) {
+      next();
+      return;
+    }
+    const requestContext = buildRequestContext(req);
+    req[PEAC_CONTEXT_KEY] = requestContext;
+    const enhancedConfig = {
+      ...config,
+      claimsGenerator: async (ctx) => {
+        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
+        return {
+          ...baseClaims,
+          // Override audience if custom extractor provided
+          ...config.audienceExtractor && { aud: config.audienceExtractor(req) },
+          // Add subject if extractor provided
+          ...config.subjectExtractor && { sub: config.subjectExtractor(req) }
+        };
+      }
+    };
+    const originalJson = res.json.bind(res);
+    res.json = function jsonWithReceipt(body) {
+      createReceipt(enhancedConfig, requestContext, {
+        statusCode: res.statusCode,
+        headers: res.getHeaders(),
+        body
+      }).then((result) => {
+        for (const [key, value] of Object.entries(result.headers)) {
+          res.setHeader(key, value);
+        }
+        if (result.bodyWrapper) {
+          return originalJson(result.bodyWrapper);
+        }
+        return originalJson(body);
+      }).catch((error) => {
+        if (config.onError) {
+          config.onError(error, req, res);
+        } else {
+          console.error("[PEAC] Receipt generation failed:", error.message);
+        }
+        return originalJson(body);
+      });
+      return res;
+    };
+    next();
+  };
+}
+function peacMiddlewareSync(config) {
+  validateConfig(config);
+  return async function peacReceiptMiddlewareSync(req, res, next) {
+    if (config.skip?.(req)) {
+      next();
+      return;
+    }
+    const requestContext = buildRequestContext(req);
+    req[PEAC_CONTEXT_KEY] = requestContext;
+    const enhancedConfig = {
+      ...config,
+      claimsGenerator: async (ctx) => {
+        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
+        return {
+          ...baseClaims,
+          ...config.audienceExtractor && { aud: config.audienceExtractor(req) },
+          ...config.subjectExtractor && { sub: config.subjectExtractor(req) }
+        };
+      }
+    };
+    const originalJson = res.json.bind(res);
+    res.json = function jsonWithReceiptSync(body) {
+      const syncWrapper = async () => {
+        try {
+          const result = await createReceipt(enhancedConfig, requestContext, {
+            statusCode: res.statusCode,
+            headers: res.getHeaders(),
+            body
+          });
+          for (const [key, value] of Object.entries(result.headers)) {
+            res.setHeader(key, value);
+          }
+          if (result.bodyWrapper) {
+            originalJson(result.bodyWrapper);
+          } else {
+            originalJson(body);
+          }
+        } catch (error) {
+          if (config.onError) {
+            config.onError(error, req, res);
+          } else {
+            console.error("[PEAC] Receipt generation failed:", error.message);
+          }
+          originalJson(body);
+        }
+      };
+      syncWrapper();
+      return res;
+    };
+    next();
+  };
+}
+
+export { getReceiptFromResponse, hasPeacContext, peacMiddleware, peacMiddlewareSync };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":[],"mappings":";;;AAoCA,IAAM,gBAAA,GAAmB,OAAO,cAAc,CAAA;AAYvC,SAAS,eAAe,GAAA,EAA6C;AAC1E,EAAA,OAAO,gBAAA,IAAoB,GAAA;AAC7B;AAQO,SAAS,uBAAuB,GAAA,EAAmC;AACxE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,SAAA,CAAU,cAAc,CAAA;AAC5C,EAAA,OAAO,OAAO,OAAA,KAAY,QAAA,GAAW,OAAA,GAAU,MAAA;AACjD;AAKA,SAAS,oBAAoB,GAAA,EAA8B;AACzD,EAAA,OAAO;AAAA,IACL,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,SAAA,EAAW,KAAK,GAAA;AAAI,GACtB;AACF;AAiCO,SAAS,eAAe,MAAA,EAAiD;AAE9E,EAAA,cAAA,CAAe,MAAM,CAAA;AAErB,EAAA,OAAO,eAAe,qBAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AAEf,IAAA,IAAI,MAAA,CAAO,IAAA,GAAO,GAAG,CAAA,EAAG;AACtB,MAAA,IAAA,EAAK;AACL,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,oBAAoB,GAAG,CAAA;AAC9C,IAAC,GAAA,CAA+B,gBAAgB,CAAA,GAAI,cAAA;AAGpD,IAAA,MAAM,cAAA,GAAmC;AAAA,MACvC,GAAG,MAAA;AAAA,MACH,eAAA,EAAiB,OAAO,GAAA,KAAQ;AAC9B,QAAA,MAAM,UAAA,GAAa,OAAO,eAAA,GAAkB,MAAM,OAAO,eAAA,CAAgB,GAAG,IAAI,EAAC;AAEjF,QAAA,OAAO;AAAA,UACL,GAAG,UAAA;AAAA;AAAA,UAEH,GAAI,OAAO,iBAAA,IAAqB,EAAE,KAAK,MAAA,CAAO,iBAAA,CAAkB,GAAG,CAAA,EAAE;AAAA;AAAA,UAErE,GAAI,OAAO,gBAAA,IAAoB,EAAE,KAAK,MAAA,CAAO,gBAAA,CAAiB,GAAG,CAAA;AAAE,SACrE;AAAA,MACF;AAAA,KACF;AAGA,IAAA,MAAM,YAAA,GAAe,GAAA,CAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAGtC,IAAA,GAAA,CAAI,IAAA,GAAO,SAAS,eAAA,CAAgB,IAAA,EAAyB;AAE3D,MAAA,aAAA,CAAc,gBAAgB,cAAA,EAAgB;AAAA,QAC5C,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB,OAAA,EAAS,IAAI,UAAA,EAAW;AAAA,QACxB;AAAA,OACD,CAAA,CACE,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,QAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,QAC1B;AAGA,QAAA,IAAI,OAAO,WAAA,EAAa;AACtB,UAAA,OAAO,YAAA,CAAa,OAAO,WAAW,CAAA;AAAA,QACxC;AAEA,QAAA,OAAO,aAAa,IAAI,CAAA;AAAA,MAC1B,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,KAAA,KAAiB;AAEvB,QAAA,IAAI,OAAO,OAAA,EAAS;AAClB,UAAA,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,GAAA,EAAK,GAAG,CAAA;AAAA,QAChC,CAAA,MAAO;AAEL,UAAA,OAAA,CAAQ,KAAA,CAAM,mCAAA,EAAqC,KAAA,CAAM,OAAO,CAAA;AAAA,QAClE;AAGA,QAAA,OAAO,aAAa,IAAI,CAAA;AAAA,MAC1B,CAAC,CAAA;AAIH,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAEA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF;AAYO,SAAS,mBAAmB,MAAA,EAAiD;AAElF,EAAA,cAAA,CAAe,MAAM,CAAA;AAErB,EAAA,OAAO,eAAe,yBAAA,CACpB,GAAA,EACA,GAAA,EACA,IAAA,EACe;AAEf,IAAA,IAAI,MAAA,CAAO,IAAA,GAAO,GAAG,CAAA,EAAG;AACtB,MAAA,IAAA,EAAK;AACL,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,cAAA,GAAiB,oBAAoB,GAAG,CAAA;AAC9C,IAAC,GAAA,CAA+B,gBAAgB,CAAA,GAAI,cAAA;AAGpD,IAAA,MAAM,cAAA,GAAmC;AAAA,MACvC,GAAG,MAAA;AAAA,MACH,eAAA,EAAiB,OAAO,GAAA,KAAQ;AAC9B,QAAA,MAAM,UAAA,GAAa,OAAO,eAAA,GAAkB,MAAM,OAAO,eAAA,CAAgB,GAAG,IAAI,EAAC;AAEjF,QAAA,OAAO;AAAA,UACL,GAAG,UAAA;AAAA,UACH,GAAI,OAAO,iBAAA,IAAqB,EAAE,KAAK,MAAA,CAAO,iBAAA,CAAkB,GAAG,CAAA,EAAE;AAAA,UACrE,GAAI,OAAO,gBAAA,IAAoB,EAAE,KAAK,MAAA,CAAO,gBAAA,CAAiB,GAAG,CAAA;AAAE,SACrE;AAAA,MACF;AAAA,KACF;AAGA,IAAA,MAAM,YAAA,GAAe,GAAA,CAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAGtC,IAAA,GAAA,CAAI,IAAA,GAAO,SAAS,mBAAA,CAAoB,IAAA,EAAyB;AAG/D,MAAA,MAAM,cAAc,YAA2B;AAC7C,QAAA,IAAI;AACF,UAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,cAAA,EAAgB,cAAA,EAAgB;AAAA,YACjE,YAAY,GAAA,CAAI,UAAA;AAAA,YAChB,OAAA,EAAS,IAAI,UAAA,EAAW;AAAA,YACxB;AAAA,WACD,CAAA;AAGD,UAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACzD,YAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,UAC1B;AAGA,UAAA,IAAI,OAAO,WAAA,EAAa;AACtB,YAAA,YAAA,CAAa,OAAO,WAAW,CAAA;AAAA,UACjC,CAAA,MAAO;AACL,YAAA,YAAA,CAAa,IAAI,CAAA;AAAA,UACnB;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,OAAO,OAAA,EAAS;AAClB,YAAA,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAgB,GAAA,EAAK,GAAG,CAAA;AAAA,UACzC,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,KAAA,CAAM,mCAAA,EAAsC,KAAA,CAAgB,OAAO,CAAA;AAAA,UAC7E;AACA,UAAA,YAAA,CAAa,IAAI,CAAA;AAAA,QACnB;AAAA,MACF,CAAA;AAGA,MAAA,WAAA,EAAY;AACZ,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAEA,IAAA,IAAA,EAAK;AAAA,EACP,CAAA;AACF","file":"index.mjs","sourcesContent":["/**\n * Express.js Middleware for PEAC Receipt Issuance\n *\n * Intercepts responses and adds PEAC receipts automatically.\n *\n * @packageDocumentation\n */\n\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport {\n  createReceipt,\n  validateConfig,\n  type MiddlewareConfig,\n  type RequestContext,\n} from '@peac/middleware-core';\n\n/**\n * Express-specific middleware configuration\n */\nexport interface ExpressMiddlewareConfig extends MiddlewareConfig {\n  /** Skip receipt generation for certain routes */\n  skip?: (req: Request) => boolean;\n\n  /** Custom audience extraction from request */\n  audienceExtractor?: (req: Request) => string;\n\n  /** Custom subject extraction from request */\n  subjectExtractor?: (req: Request) => string | undefined;\n\n  /** Error handler for receipt generation failures */\n  onError?: (error: Error, req: Request, res: Response) => void;\n}\n\n/**\n * Symbol to store PEAC context on request\n */\nconst PEAC_CONTEXT_KEY = Symbol('peac-context');\n\n/**\n * Request with PEAC context attached\n */\nexport interface RequestWithPeacContext extends Request {\n  [PEAC_CONTEXT_KEY]?: RequestContext;\n}\n\n/**\n * Check if a request has PEAC context\n */\nexport function hasPeacContext(req: Request): req is RequestWithPeacContext {\n  return PEAC_CONTEXT_KEY in req;\n}\n\n/**\n * Get the PEAC receipt from a response (for testing/debugging)\n *\n * @param res - Express response object\n * @returns Receipt JWS if present, undefined otherwise\n */\nexport function getReceiptFromResponse(res: Response): string | undefined {\n  const receipt = res.getHeader('PEAC-Receipt');\n  return typeof receipt === 'string' ? receipt : undefined;\n}\n\n/**\n * Convert Express request to RequestContext\n */\nfunction buildRequestContext(req: Request): RequestContext {\n  return {\n    method: req.method,\n    path: req.path,\n    headers: req.headers as Record<string, string | string[] | undefined>,\n    body: req.body,\n    timestamp: Date.now(),\n  };\n}\n\n/**\n * Express middleware that adds PEAC receipts to responses\n *\n * The middleware intercepts `res.json()` and `res.send()` to inject\n * PEAC receipts into responses. For header transport (default), the\n * receipt is added as a `PEAC-Receipt` header. For body transport,\n * the response is wrapped in a `{ data, peac_receipt }` structure.\n *\n * @param config - Middleware configuration\n * @returns Express request handler\n *\n * @example\n * ```typescript\n * import express from 'express';\n * import { peacMiddleware } from '@peac/middleware-express';\n *\n * const app = express();\n *\n * // Add PEAC middleware\n * app.use(peacMiddleware({\n *   issuer: 'https://api.example.com',\n *   signingKey: privateKey,\n *   keyId: 'prod-2026-02',\n * }));\n *\n * app.get('/api/data', (req, res) => {\n *   res.json({ items: [1, 2, 3] });\n *   // PEAC-Receipt header automatically added\n * });\n * ```\n */\nexport function peacMiddleware(config: ExpressMiddlewareConfig): RequestHandler {\n  // Validate configuration at initialization\n  validateConfig(config);\n\n  return async function peacReceiptMiddleware(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    // Check if we should skip this request\n    if (config.skip?.(req)) {\n      next();\n      return;\n    }\n\n    // Build and store request context\n    const requestContext = buildRequestContext(req);\n    (req as RequestWithPeacContext)[PEAC_CONTEXT_KEY] = requestContext;\n\n    // Enhance config with Express-specific extractors\n    const enhancedConfig: MiddlewareConfig = {\n      ...config,\n      claimsGenerator: async (ctx) => {\n        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};\n\n        return {\n          ...baseClaims,\n          // Override audience if custom extractor provided\n          ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),\n          // Add subject if extractor provided\n          ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),\n        };\n      },\n    };\n\n    // Store original json method\n    const originalJson = res.json.bind(res);\n\n    // Override res.json to inject receipt\n    res.json = function jsonWithReceipt(body: unknown): Response {\n      // Generate receipt asynchronously\n      createReceipt(enhancedConfig, requestContext, {\n        statusCode: res.statusCode,\n        headers: res.getHeaders() as Record<string, string | string[] | undefined>,\n        body,\n      })\n        .then((result) => {\n          // Add headers from receipt result\n          for (const [key, value] of Object.entries(result.headers)) {\n            res.setHeader(key, value);\n          }\n\n          // If body transport, use wrapped body\n          if (result.bodyWrapper) {\n            return originalJson(result.bodyWrapper);\n          }\n\n          return originalJson(body);\n        })\n        .catch((error: Error) => {\n          // Handle errors without breaking the response\n          if (config.onError) {\n            config.onError(error, req, res);\n          } else {\n            // Log but don't fail the response\n            console.error('[PEAC] Receipt generation failed:', error.message);\n          }\n\n          // Send original body on error\n          return originalJson(body);\n        });\n\n      // Return response for chaining (synchronous return)\n      // The actual response will be sent by the promise chain\n      return res;\n    };\n\n    next();\n  };\n}\n\n/**\n * Create middleware with synchronous receipt generation (blocking)\n *\n * This variant waits for receipt generation before sending the response.\n * Use this when you need to guarantee the receipt is in the response,\n * but be aware it adds latency.\n *\n * @param config - Middleware configuration\n * @returns Express request handler\n */\nexport function peacMiddlewareSync(config: ExpressMiddlewareConfig): RequestHandler {\n  // Validate configuration at initialization\n  validateConfig(config);\n\n  return async function peacReceiptMiddlewareSync(\n    req: Request,\n    res: Response,\n    next: NextFunction\n  ): Promise<void> {\n    // Check if we should skip this request\n    if (config.skip?.(req)) {\n      next();\n      return;\n    }\n\n    // Build and store request context\n    const requestContext = buildRequestContext(req);\n    (req as RequestWithPeacContext)[PEAC_CONTEXT_KEY] = requestContext;\n\n    // Enhance config with Express-specific extractors\n    const enhancedConfig: MiddlewareConfig = {\n      ...config,\n      claimsGenerator: async (ctx) => {\n        const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};\n\n        return {\n          ...baseClaims,\n          ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),\n          ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),\n        };\n      },\n    };\n\n    // Store original json method\n    const originalJson = res.json.bind(res);\n\n    // Override res.json to inject receipt synchronously\n    res.json = function jsonWithReceiptSync(body: unknown): Response {\n      // We can't make this truly sync due to crypto operations,\n      // but we can make it blocking by using a sync wrapper\n      const syncWrapper = async (): Promise<void> => {\n        try {\n          const result = await createReceipt(enhancedConfig, requestContext, {\n            statusCode: res.statusCode,\n            headers: res.getHeaders() as Record<string, string | string[] | undefined>,\n            body,\n          });\n\n          // Add headers\n          for (const [key, value] of Object.entries(result.headers)) {\n            res.setHeader(key, value);\n          }\n\n          // Send response\n          if (result.bodyWrapper) {\n            originalJson(result.bodyWrapper);\n          } else {\n            originalJson(body);\n          }\n        } catch (error) {\n          if (config.onError) {\n            config.onError(error as Error, req, res);\n          } else {\n            console.error('[PEAC] Receipt generation failed:', (error as Error).message);\n          }\n          originalJson(body);\n        }\n      };\n\n      // Execute synchronously by blocking\n      syncWrapper();\n      return res;\n    };\n\n    next();\n  };\n}\n"]}

package/package.json

@@ -1,16 +1,17 @@
 {
   "name": "@peac/middleware-express",
-  "version": "0.10.9",
+  "version": "0.10.10",
   "description": "Express.js middleware for automatic PEAC receipt issuance",
-  "main": "dist/index.js",
+  "main": "dist/index.cjs",
   "types": "dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.js",
-      "default": "./dist/index.js"
-    }
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
   },
   "repository": {
     "type": "git",
@@ -32,7 +33,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@peac/middleware-core": "0.10.9"
+    "@peac/middleware-core": "0.10.10"
   },
   "peerDependencies": {
     "express": "^4.18.0 || ^5.0.0"
@@ -44,14 +45,17 @@
     "supertest": "^6.3.3",
     "@types/supertest": "^6.0.2",
     "typescript": "^5.3.3",
-    "vitest": "^1.1.0",
-    "@peac/crypto": "0.10.9"
+    "vitest": "^4.0.0",
+    "tsup": "^8.0.0",
+    "@peac/crypto": "0.10.10"
   },
   "scripts": {
     "prebuild": "rm -rf dist tsconfig.tsbuildinfo",
-    "build": "tsc",
+    "build": "pnpm run build:js && pnpm run build:types",
     "test": "vitest run",
     "test:watch": "vitest",
-    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+    "clean": "rm -rf dist tsconfig.tsbuildinfo",
+    "build:js": "tsup",
+    "build:types": "rm -f dist/.tsbuildinfo && tsc && rm -f dist/.tsbuildinfo"
   }
 }

package/dist/index.js

@@ -1,41 +0,0 @@
-"use strict";
-/**
- * PEAC Middleware for Express.js
- *
- * Express.js middleware for automatic PEAC receipt issuance.
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { peacMiddleware } from '@peac/middleware-express';
- *
- * const app = express();
- *
- * app.use(peacMiddleware({
- *   issuer: 'https://api.example.com',
- *   signingKey: {
- *     kty: 'OKP',
- *     crv: 'Ed25519',
- *     x: '<base64url public key>',
- *     d: '<base64url private key>',
- *   },
- *   keyId: 'prod-2026-02',
- * }));
- *
- * app.get('/api/data', (req, res) => {
- *   res.json({ message: 'Hello World' });
- *   // PEAC-Receipt header automatically added
- * });
- * ```
- *
- * @packageDocumentation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.hasPeacContext = exports.getReceiptFromResponse = exports.peacMiddlewareSync = exports.peacMiddleware = void 0;
-// Middleware
-var middleware_js_1 = require("./middleware.js");
-Object.defineProperty(exports, "peacMiddleware", { enumerable: true, get: function () { return middleware_js_1.peacMiddleware; } });
-Object.defineProperty(exports, "peacMiddlewareSync", { enumerable: true, get: function () { return middleware_js_1.peacMiddlewareSync; } });
-Object.defineProperty(exports, "getReceiptFromResponse", { enumerable: true, get: function () { return middleware_js_1.getReceiptFromResponse; } });
-Object.defineProperty(exports, "hasPeacContext", { enumerable: true, get: function () { return middleware_js_1.hasPeacContext; } });
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAEH,aAAa;AACb,iDAKyB;AAJvB,+GAAA,cAAc,OAAA;AACd,mHAAA,kBAAkB,OAAA;AAClB,uHAAA,sBAAsB,OAAA;AACtB,+GAAA,cAAc,OAAA"}

package/dist/middleware.js

@@ -1,220 +0,0 @@
-"use strict";
-/**
- * Express.js Middleware for PEAC Receipt Issuance
- *
- * Intercepts responses and adds PEAC receipts automatically.
- *
- * @packageDocumentation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.hasPeacContext = hasPeacContext;
-exports.getReceiptFromResponse = getReceiptFromResponse;
-exports.peacMiddleware = peacMiddleware;
-exports.peacMiddlewareSync = peacMiddlewareSync;
-const middleware_core_1 = require("@peac/middleware-core");
-/**
- * Symbol to store PEAC context on request
- */
-const PEAC_CONTEXT_KEY = Symbol('peac-context');
-/**
- * Check if a request has PEAC context
- */
-function hasPeacContext(req) {
-    return PEAC_CONTEXT_KEY in req;
-}
-/**
- * Get the PEAC receipt from a response (for testing/debugging)
- *
- * @param res - Express response object
- * @returns Receipt JWS if present, undefined otherwise
- */
-function getReceiptFromResponse(res) {
-    const receipt = res.getHeader('PEAC-Receipt');
-    return typeof receipt === 'string' ? receipt : undefined;
-}
-/**
- * Convert Express request to RequestContext
- */
-function buildRequestContext(req) {
-    return {
-        method: req.method,
-        path: req.path,
-        headers: req.headers,
-        body: req.body,
-        timestamp: Date.now(),
-    };
-}
-/**
- * Express middleware that adds PEAC receipts to responses
- *
- * The middleware intercepts `res.json()` and `res.send()` to inject
- * PEAC receipts into responses. For header transport (default), the
- * receipt is added as a `PEAC-Receipt` header. For body transport,
- * the response is wrapped in a `{ data, peac_receipt }` structure.
- *
- * @param config - Middleware configuration
- * @returns Express request handler
- *
- * @example
- * ```typescript
- * import express from 'express';
- * import { peacMiddleware } from '@peac/middleware-express';
- *
- * const app = express();
- *
- * // Add PEAC middleware
- * app.use(peacMiddleware({
- *   issuer: 'https://api.example.com',
- *   signingKey: privateKey,
- *   keyId: 'prod-2026-02',
- * }));
- *
- * app.get('/api/data', (req, res) => {
- *   res.json({ items: [1, 2, 3] });
- *   // PEAC-Receipt header automatically added
- * });
- * ```
- */
-function peacMiddleware(config) {
-    // Validate configuration at initialization
-    (0, middleware_core_1.validateConfig)(config);
-    return async function peacReceiptMiddleware(req, res, next) {
-        // Check if we should skip this request
-        if (config.skip?.(req)) {
-            next();
-            return;
-        }
-        // Build and store request context
-        const requestContext = buildRequestContext(req);
-        req[PEAC_CONTEXT_KEY] = requestContext;
-        // Enhance config with Express-specific extractors
-        const enhancedConfig = {
-            ...config,
-            claimsGenerator: async (ctx) => {
-                const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
-                return {
-                    ...baseClaims,
-                    // Override audience if custom extractor provided
-                    ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),
-                    // Add subject if extractor provided
-                    ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),
-                };
-            },
-        };
-        // Store original json method
-        const originalJson = res.json.bind(res);
-        // Override res.json to inject receipt
-        res.json = function jsonWithReceipt(body) {
-            // Generate receipt asynchronously
-            (0, middleware_core_1.createReceipt)(enhancedConfig, requestContext, {
-                statusCode: res.statusCode,
-                headers: res.getHeaders(),
-                body,
-            })
-                .then((result) => {
-                // Add headers from receipt result
-                for (const [key, value] of Object.entries(result.headers)) {
-                    res.setHeader(key, value);
-                }
-                // If body transport, use wrapped body
-                if (result.bodyWrapper) {
-                    return originalJson(result.bodyWrapper);
-                }
-                return originalJson(body);
-            })
-                .catch((error) => {
-                // Handle errors without breaking the response
-                if (config.onError) {
-                    config.onError(error, req, res);
-                }
-                else {
-                    // Log but don't fail the response
-                    console.error('[PEAC] Receipt generation failed:', error.message);
-                }
-                // Send original body on error
-                return originalJson(body);
-            });
-            // Return response for chaining (synchronous return)
-            // The actual response will be sent by the promise chain
-            return res;
-        };
-        next();
-    };
-}
-/**
- * Create middleware with synchronous receipt generation (blocking)
- *
- * This variant waits for receipt generation before sending the response.
- * Use this when you need to guarantee the receipt is in the response,
- * but be aware it adds latency.
- *
- * @param config - Middleware configuration
- * @returns Express request handler
- */
-function peacMiddlewareSync(config) {
-    // Validate configuration at initialization
-    (0, middleware_core_1.validateConfig)(config);
-    return async function peacReceiptMiddlewareSync(req, res, next) {
-        // Check if we should skip this request
-        if (config.skip?.(req)) {
-            next();
-            return;
-        }
-        // Build and store request context
-        const requestContext = buildRequestContext(req);
-        req[PEAC_CONTEXT_KEY] = requestContext;
-        // Enhance config with Express-specific extractors
-        const enhancedConfig = {
-            ...config,
-            claimsGenerator: async (ctx) => {
-                const baseClaims = config.claimsGenerator ? await config.claimsGenerator(ctx) : {};
-                return {
-                    ...baseClaims,
-                    ...(config.audienceExtractor && { aud: config.audienceExtractor(req) }),
-                    ...(config.subjectExtractor && { sub: config.subjectExtractor(req) }),
-                };
-            },
-        };
-        // Store original json method
-        const originalJson = res.json.bind(res);
-        // Override res.json to inject receipt synchronously
-        res.json = function jsonWithReceiptSync(body) {
-            // We can't make this truly sync due to crypto operations,
-            // but we can make it blocking by using a sync wrapper
-            const syncWrapper = async () => {
-                try {
-                    const result = await (0, middleware_core_1.createReceipt)(enhancedConfig, requestContext, {
-                        statusCode: res.statusCode,
-                        headers: res.getHeaders(),
-                        body,
-                    });
-                    // Add headers
-                    for (const [key, value] of Object.entries(result.headers)) {
-                        res.setHeader(key, value);
-                    }
-                    // Send response
-                    if (result.bodyWrapper) {
-                        originalJson(result.bodyWrapper);
-                    }
-                    else {
-                        originalJson(body);
-                    }
-                }
-                catch (error) {
-                    if (config.onError) {
-                        config.onError(error, req, res);
-                    }
-                    else {
-                        console.error('[PEAC] Receipt generation failed:', error.message);
-                    }
-                    originalJson(body);
-                }
-            };
-            // Execute synchronously by blocking
-            syncWrapper();
-            return res;
-        };
-        next();
-    };
-}
-//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA0CH,wCAEC;AAQD,wDAGC;AA8CD,wCA+EC;AAYD,gDA4EC;AAzQD,2DAK+B;AAmB/B;;GAEG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAShD;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,gBAAgB,IAAI,GAAG,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,GAAa;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC9C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAwD;QACrE,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,SAAgB,cAAc,CAAC,MAA+B;IAC5D,2CAA2C;IAC3C,IAAA,gCAAc,EAAC,MAAM,CAAC,CAAC;IAEvB,OAAO,KAAK,UAAU,qBAAqB,CACzC,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,uCAAuC;QACvC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,GAA8B,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAEnE,kDAAkD;QAClD,MAAM,cAAc,GAAqB;YACvC,GAAG,MAAM;YACT,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAEnF,OAAO;oBACL,GAAG,UAAU;oBACb,iDAAiD;oBACjD,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvE,oCAAoC;oBACpC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;iBACtE,CAAC;YACJ,CAAC;SACF,CAAC;QAEF,6BAA6B;QAC7B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,sCAAsC;QACtC,GAAG,CAAC,IAAI,GAAG,SAAS,eAAe,CAAC,IAAa;YAC/C,kCAAkC;YAClC,IAAA,+BAAa,EAAC,cAAc,EAAE,cAAc,EAAE;gBAC5C,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,GAAG,CAAC,UAAU,EAAmD;gBAC1E,IAAI;aACL,CAAC;iBACC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,kCAAkC;gBAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC5B,CAAC;gBAED,sCAAsC;gBACtC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;gBAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;gBACtB,8CAA8C;gBAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,kCAAkC;oBAClC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpE,CAAC;gBAED,8BAA8B;gBAC9B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEL,oDAAoD;YACpD,wDAAwD;YACxD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAAC,MAA+B;IAChE,2CAA2C;IAC3C,IAAA,gCAAc,EAAC,MAAM,CAAC,CAAC;IAEvB,OAAO,KAAK,UAAU,yBAAyB,CAC7C,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,uCAAuC;QACvC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,GAA8B,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAEnE,kDAAkD;QAClD,MAAM,cAAc,GAAqB;YACvC,GAAG,MAAM;YACT,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAEnF,OAAO;oBACL,GAAG,UAAU;oBACb,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvE,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;iBACtE,CAAC;YACJ,CAAC;SACF,CAAC;QAEF,6BAA6B;QAC7B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,oDAAoD;QACpD,GAAG,CAAC,IAAI,GAAG,SAAS,mBAAmB,CAAC,IAAa;YACnD,0DAA0D;YAC1D,sDAAsD;YACtD,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;gBAC5C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAa,EAAC,cAAc,EAAE,cAAc,EAAE;wBACjE,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,OAAO,EAAE,GAAG,CAAC,UAAU,EAAmD;wBAC1E,IAAI;qBACL,CAAC,CAAC;oBAEH,cAAc;oBACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC5B,CAAC;oBAED,gBAAgB;oBAChB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;oBACnC,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,CAAC,OAAO,CAAC,KAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBAC/E,CAAC;oBACD,YAAY,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YAEF,oCAAoC;YACpC,WAAW,EAAE,CAAC;YACd,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}