@stepflowjs/adapter-express 0.0.1

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+import { Stepflow } from '@stepflowjs/core';
+import { AuthContext, AuthConfig, EndpointOption, BaseAdapterOptions } from '@stepflowjs/adapter-shared';
+export { AuthConfig, AuthContext, AuthHandler, AuthResult, EndpointConfig, EndpointOption, EndpointPreset, RouteName, allOf, anyOf, createApiKeyAuth, createBearerAuth, isRouteEnabled, resolveEndpoints } from '@stepflowjs/adapter-shared';
+import { Response, Router, RequestHandler } from 'express';
+
+/** Express-specific request type for auth handlers */
+type ExpressRequest = {
+    header(name: string): string | undefined;
+    headers: Record<string, string | string[] | undefined>;
+    url: string;
+    method: string;
+    query(name: string): string | undefined;
+};
+/** Express-specific auth context */
+type ExpressAuthContext = AuthContext<ExpressRequest, Response>;
+/** Express-specific auth config */
+type ExpressAuthConfig = AuthConfig<ExpressRequest, Response>;
+interface MiddlewareOptions {
+    /** Base path for Stepflow routes. When set, middleware only handles paths under this base. */
+    basePath?: string;
+    /** Endpoint configuration - preset or fine-grained */
+    endpoints?: EndpointOption;
+    /** Authorization configuration */
+    auth?: ExpressAuthConfig;
+    /** Callback when authorization fails */
+    onAuthFailure?: BaseAdapterOptions<ExpressRequest, Response>["onAuthFailure"];
+}
+interface RouterOptions {
+    /** Prefix all routes under this base path (e.g. "/api/stepflow"). */
+    basePath?: string;
+    /** Custom health check function. Defaults to stepflow.healthCheck(). */
+    healthCheck?: () => Promise<boolean>;
+    /** Endpoint configuration - preset or fine-grained */
+    endpoints?: EndpointOption;
+    /** Authorization configuration */
+    auth?: ExpressAuthConfig;
+    /** Callback when authorization fails */
+    onAuthFailure?: BaseAdapterOptions<ExpressRequest, Response>["onAuthFailure"];
+}
+interface TriggerRequestBody<TPayload = unknown> {
+    payload: TPayload;
+    metadata?: Record<string, unknown>;
+    runId?: string;
+    delay?: number;
+    idempotencyKey?: string;
+}
+interface NotifyRequestBody {
+    data: unknown;
+}
+interface ErrorResponseBody {
+    error: string;
+    message?: string;
+}
+
+declare function createStepflowRouter(stepflow: Stepflow, options?: RouterOptions): Router;
+declare function createStepflowMiddleware(stepflow: Stepflow, options?: MiddlewareOptions): RequestHandler;
+
+export { type ErrorResponseBody, type ExpressAuthConfig, type ExpressAuthContext, type ExpressRequest, type MiddlewareOptions, type NotifyRequestBody, type RouterOptions, type TriggerRequestBody, createStepflowMiddleware, createStepflowRouter };

package/dist/index.js

@@ -0,0 +1,503 @@
+// src/index.ts
+import {
+  isRouteEnabled,
+  runAuth,
+  getAuthFailureResponse,
+  createErrorBody
+} from "@stepflowjs/adapter-shared";
+import express, {
+  Router
+} from "express";
+import {
+  createApiKeyAuth,
+  createBearerAuth,
+  anyOf,
+  allOf,
+  isRouteEnabled as isRouteEnabled2,
+  resolveEndpoints
+} from "@stepflowjs/adapter-shared";
+function normalizeBasePath(basePath) {
+  if (!basePath) return "";
+  if (basePath === "/") return "";
+  return basePath.startsWith("/") ? basePath.replace(/\/$/, "") : `/${basePath}`;
+}
+function getAccessToken(req) {
+  const queryToken = req.query.token;
+  if (typeof queryToken === "string" && queryToken.length > 0) {
+    return queryToken;
+  }
+  const authHeader = req.header("authorization") ?? req.header("Authorization");
+  if (!authHeader) return void 0;
+  const match = authHeader.match(/^Bearer\s+(.+)$/i);
+  return match?.[1];
+}
+function jsonError(res, status, error, message) {
+  const body = message ? { error, message } : { error };
+  res.status(status).json(body);
+}
+function jsonAuthError(res, status, code, message) {
+  const body = createErrorBody(code, message);
+  res.status(status).json(body);
+}
+function getFirstParam(params, name) {
+  const value = params[name];
+  if (Array.isArray(value)) return value[0] ?? "";
+  return value ?? "";
+}
+function parseThrottleMs(value) {
+  if (typeof value !== "string") return void 0;
+  const ms = Number(value);
+  if (!Number.isFinite(ms) || ms < 0) return void 0;
+  return ms;
+}
+function createExpressRequest(req) {
+  return {
+    header: (name) => req.header(name),
+    headers: req.headers,
+    url: req.url,
+    method: req.method,
+    query: (name) => {
+      const value = req.query[name];
+      if (typeof value === "string") return value;
+      if (Array.isArray(value) && value.length > 0) return String(value[0]);
+      return void 0;
+    }
+  };
+}
+async function checkAuth(req, res, route, options, params = {}) {
+  const ctx = {
+    route,
+    request: createExpressRequest(req),
+    extra: res,
+    ...params
+  };
+  const result = await runAuth(ctx, options.auth);
+  if (!result.ok) {
+    const { status, code, message } = getAuthFailureResponse(result);
+    await options.onAuthFailure?.(ctx, result);
+    jsonAuthError(res, status, code, message);
+    return true;
+  }
+  return false;
+}
+function createStepflowRouter(stepflow, options = {}) {
+  const basePath = normalizeBasePath(options.basePath);
+  const router = Router();
+  router.use(express.json());
+  if (isRouteEnabled("health", options.endpoints)) {
+    router.get(`${basePath}/health`, async (req, res) => {
+      if (await checkAuth(req, res, "health", options)) return;
+      try {
+        const ok = await (options.healthCheck?.() ?? stepflow.healthCheck());
+        res.status(200).json({ ok });
+      } catch (error) {
+        jsonError(res, 500, "Internal server error", error.message);
+      }
+    });
+  }
+  if (isRouteEnabled("trigger", options.endpoints)) {
+    router.post(
+      `${basePath}/trigger/:workflowId`,
+      async (req, res) => {
+        const workflowId = getFirstParam(req.params, "workflowId");
+        if (await checkAuth(req, res, "trigger", options, { workflowId }))
+          return;
+        try {
+          const body = req.body;
+          if (!body || typeof body !== "object") {
+            jsonError(res, 400, "Bad request", "Invalid JSON body");
+            return;
+          }
+          const result = await stepflow.trigger(
+            String(workflowId),
+            body.payload,
+            {
+              runId: body.runId,
+              metadata: body.metadata,
+              delay: body.delay,
+              idempotencyKey: body.idempotencyKey
+            }
+          );
+          const response = result;
+          res.status(200).json(response);
+        } catch (error) {
+          const message = error.message;
+          if (message.includes("Workflow") && message.includes("not found")) {
+            jsonError(res, 404, "Not found", message);
+            return;
+          }
+          jsonError(res, 500, "Internal server error", message);
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("runs", options.endpoints)) {
+    router.get(
+      `${basePath}/runs/:runId`,
+      async (req, res) => {
+        const runId = getFirstParam(req.params, "runId");
+        if (await checkAuth(req, res, "runs", options, { runId })) return;
+        try {
+          const accessToken = getAccessToken(req);
+          const run = await stepflow.getRun(String(runId), { accessToken });
+          if (!run) {
+            jsonError(res, 404, "Not found", `Run "${runId}" not found`);
+            return;
+          }
+          const response = run;
+          res.status(200).json(response);
+        } catch (error) {
+          const message = error.message;
+          if (message === "Invalid access token") {
+            jsonError(res, 401, "Unauthorized", message);
+            return;
+          }
+          jsonError(res, 500, "Internal server error", message);
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("runsStream", options.endpoints)) {
+    router.get(
+      `${basePath}/runs/:runId/stream`,
+      async (req, res) => {
+        const runId = getFirstParam(req.params, "runId");
+        if (await checkAuth(req, res, "runsStream", options, { runId })) return;
+        const accessToken = getAccessToken(req);
+        if (accessToken) {
+          try {
+            await stepflow.getRun(String(runId), { accessToken });
+          } catch (error) {
+            const message = error.message;
+            if (message === "Invalid access token") {
+              jsonError(res, 401, "Unauthorized", message);
+              return;
+            }
+            jsonError(res, 500, "Internal server error", message);
+            return;
+          }
+        }
+        const throttleMs = parseThrottleMs(req.query.throttle);
+        res.status(200);
+        res.setHeader("Content-Type", "text/event-stream");
+        res.setHeader("Cache-Control", "no-cache");
+        res.setHeader("Connection", "keep-alive");
+        res.setHeader("X-Accel-Buffering", "no");
+        res.flushHeaders?.();
+        res.write(`: connected
+
+`);
+        let lastSentAt = 0;
+        let executionId;
+        let unsubscribeExecution;
+        let closed = false;
+        const send = (type, data) => {
+          if (closed) return;
+          if (throttleMs !== void 0) {
+            const now = Date.now();
+            if (now - lastSentAt < throttleMs) {
+              return;
+            }
+            lastSentAt = now;
+          }
+          res.write(`event: ${type}
+`);
+          res.write(`data: ${JSON.stringify(data)}
+
+`);
+        };
+        const publishCurrentExecution = async () => {
+          const current = await stepflow.getRun(String(runId));
+          if (!current) return;
+          executionId = current.id;
+          send("update", current);
+          if (current.status === "completed") {
+            send("execution:complete", { result: current.result });
+          }
+          if (current.status === "failed") {
+            send("execution:failed", { error: current.error });
+          }
+        };
+        const handleExecutionEvent = (event) => {
+          void (async () => {
+            if (!executionId || closed) return;
+            const execution = await stepflow.getExecution(executionId);
+            if (execution) {
+              send("update", execution);
+              if (execution.status === "completed") {
+                send("execution:complete", { result: execution.result });
+              }
+              if (execution.status === "failed") {
+                send("execution:failed", { error: execution.error });
+              }
+              if (typeof event === "object" && event !== null && "type" in event && "stepName" in event && typeof event.type === "string" && typeof event.stepName === "string") {
+                const type = event.type;
+                const stepName = event.stepName;
+                if (type === "step:complete") {
+                  const step = execution.steps.find(
+                    (s) => s.name === stepName
+                  );
+                  if (step) send("step:complete", step);
+                }
+                if (type === "step:failed") {
+                  const step = execution.steps.find(
+                    (s) => s.name === stepName
+                  );
+                  if (step) send("step:failed", step);
+                }
+              }
+            }
+          })();
+        };
+        const stop = () => {
+          if (closed) return;
+          closed = true;
+          unsubscribeExecution?.();
+          res.end();
+        };
+        req.on("close", stop);
+        try {
+          await publishCurrentExecution();
+          while (!closed && !executionId) {
+            await new Promise((r) => setTimeout(r, 250));
+            await publishCurrentExecution();
+          }
+          if (!executionId || closed) return;
+          unsubscribeExecution = stepflow.subscribeToExecution(
+            executionId,
+            handleExecutionEvent
+          );
+        } catch (error) {
+          if (!closed) {
+            send("error", {
+              error: "Internal server error",
+              message: error.message
+            });
+            stop();
+          }
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("notify", options.endpoints)) {
+    router.post(
+      `${basePath}/notify/:eventId`,
+      async (req, res) => {
+        const eventId = getFirstParam(req.params, "eventId");
+        if (await checkAuth(req, res, "notify", options, { eventId })) return;
+        try {
+          const body = req.body;
+          if (!body || typeof body !== "object") {
+            jsonError(res, 400, "Bad request", "Invalid JSON body");
+            return;
+          }
+          const result = await stepflow.notify(String(eventId), body.data);
+          const response = result;
+          res.status(200).json(response);
+        } catch (error) {
+          jsonError(
+            res,
+            500,
+            "Internal server error",
+            error.message
+          );
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("workflowsTrigger", options.endpoints)) {
+    router.post(
+      `${basePath}/workflows/:workflowId/trigger`,
+      async (req, res) => {
+        const workflowId = getFirstParam(req.params, "workflowId");
+        if (await checkAuth(req, res, "workflowsTrigger", options, { workflowId }))
+          return;
+        try {
+          const body = req.body;
+          if (!body || typeof body !== "object") {
+            jsonError(res, 400, "Bad request", "Invalid JSON body");
+            return;
+          }
+          const result = await stepflow.trigger(
+            String(workflowId),
+            body.payload,
+            {
+              runId: body.runId,
+              metadata: body.metadata,
+              delay: body.delay,
+              idempotencyKey: body.idempotencyKey
+            }
+          );
+          const response = result;
+          res.status(200).json(response);
+        } catch (error) {
+          const message = error.message;
+          if (message.includes("Workflow") && message.includes("not found")) {
+            jsonError(res, 404, "Not found", message);
+            return;
+          }
+          jsonError(res, 500, "Internal server error", message);
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("eventsNotify", options.endpoints)) {
+    router.post(
+      `${basePath}/events/:eventId/notify`,
+      async (req, res) => {
+        const eventId = getFirstParam(req.params, "eventId");
+        if (await checkAuth(req, res, "eventsNotify", options, { eventId }))
+          return;
+        try {
+          const body = req.body;
+          if (!body || typeof body !== "object") {
+            jsonError(res, 400, "Bad request", "Invalid JSON body");
+            return;
+          }
+          const result = await stepflow.notify(String(eventId), body.data);
+          const response = result;
+          res.status(200).json(response);
+        } catch (error) {
+          jsonError(
+            res,
+            500,
+            "Internal server error",
+            error.message
+          );
+        }
+      }
+    );
+  }
+  if (isRouteEnabled("workflowsStream", options.endpoints)) {
+    router.post(
+      `${basePath}/workflows/:workflowId/stream`,
+      async (req, res) => {
+        const workflowId = getFirstParam(req.params, "workflowId");
+        if (await checkAuth(req, res, "workflowsStream", options, { workflowId }))
+          return;
+        try {
+          const body = req.body;
+          if (!body || typeof body !== "object") {
+            jsonError(res, 400, "Bad request", "Invalid JSON body");
+            return;
+          }
+          const { runId, publicAccessToken } = await stepflow.trigger(
+            String(workflowId),
+            body.payload
+          );
+          res.status(200);
+          res.setHeader("Content-Type", "text/event-stream");
+          res.setHeader("Cache-Control", "no-cache");
+          res.setHeader("Connection", "keep-alive");
+          res.setHeader("X-Accel-Buffering", "no");
+          res.flushHeaders?.();
+          res.write(`event: trigger
+`);
+          res.write(
+            `data: ${JSON.stringify({ runId, accessToken: publicAccessToken })}
+
+`
+          );
+          let executionId;
+          let closed = false;
+          const stop = () => {
+            if (closed) return;
+            closed = true;
+            res.end();
+          };
+          req.on("close", stop);
+          while (!closed && !executionId) {
+            const run = await stepflow.getRun(runId);
+            executionId = run?.id;
+            if (!executionId) {
+              await new Promise((r) => setTimeout(r, 100));
+            }
+          }
+          if (!executionId || closed) return;
+          const unsubscribe = stepflow.subscribeToExecution(executionId, () => {
+            void (async () => {
+              if (closed) return;
+              const execution = await stepflow.getExecution(executionId);
+              if (execution) {
+                res.write(`event: update
+`);
+                res.write(`data: ${JSON.stringify(execution)}
+
+`);
+              }
+            })();
+          });
+          try {
+            await new Promise((r) => setTimeout(r, 60 * 60 * 1e3));
+          } finally {
+            unsubscribe();
+            stop();
+          }
+        } catch (error) {
+          const message = error.message;
+          if (message.includes("Workflow") && message.includes("not found")) {
+            jsonError(res, 404, "Not found", message);
+            return;
+          }
+          jsonError(res, 500, "Internal server error", message);
+        }
+      }
+    );
+  }
+  router.use(
+    (error, _req, res, next) => {
+      if (res.headersSent) {
+        next(error);
+        return;
+      }
+      if (error instanceof SyntaxError && "status" in error && typeof error.status === "number" && error.status === 400) {
+        jsonError(res, 400, "Bad request", "Invalid JSON body");
+        return;
+      }
+      next(error);
+    }
+  );
+  return router;
+}
+function createStepflowMiddleware(stepflow, options = {}) {
+  const basePath = normalizeBasePath(options.basePath);
+  const router = createStepflowRouter(stepflow, {
+    endpoints: options.endpoints,
+    auth: options.auth,
+    onAuthFailure: options.onAuthFailure
+  });
+  return (req, res, next) => {
+    if (basePath) {
+      const fullPath = `${req.baseUrl}${req.path}`;
+      if (!fullPath.startsWith(basePath)) {
+        next();
+        return;
+      }
+      if (req.url.startsWith(basePath)) {
+        const originalUrl = req.url;
+        req.url = req.url.slice(basePath.length) || "/";
+        router(req, res, (err) => {
+          req.url = originalUrl;
+          if (!err) {
+            next();
+            return;
+          }
+          next(err instanceof Error ? err : new Error(String(err)));
+        });
+        return;
+      }
+    }
+    router(req, res, next);
+  };
+}
+export {
+  allOf,
+  anyOf,
+  createApiKeyAuth,
+  createBearerAuth,
+  createStepflowMiddleware,
+  createStepflowRouter,
+  isRouteEnabled2 as isRouteEnabled,
+  resolveEndpoints
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Execution, NotifyResult, TriggerResult } from \"@stepflowjs/core\";\nimport type { Stepflow } from \"@stepflowjs/core\";\nimport {\n  type AuthConfig,\n  type AuthContext,\n  type BaseAdapterOptions,\n  type EndpointOption,\n  type RouteName,\n  isRouteEnabled,\n  runAuth,\n  getAuthFailureResponse,\n  createErrorBody,\n} from \"@stepflowjs/adapter-shared\";\nimport express, {\n  Router,\n  type NextFunction,\n  type Request,\n  type RequestHandler,\n  type Response,\n} from \"express\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/** Express-specific request type for auth handlers */\nexport type ExpressRequest = {\n  header(name: string): string | undefined;\n  headers: Record<string, string | string[] | undefined>;\n  url: string;\n  method: string;\n  query(name: string): string | undefined;\n};\n\n/** Express-specific auth context */\nexport type ExpressAuthContext = AuthContext<ExpressRequest, Response>;\n\n/** Express-specific auth config */\nexport type ExpressAuthConfig = AuthConfig<ExpressRequest, Response>;\n\nexport interface MiddlewareOptions {\n  /** Base path for Stepflow routes. When set, middleware only handles paths under this base. */\n  basePath?: string;\n  /** Endpoint configuration - preset or fine-grained */\n  endpoints?: EndpointOption;\n  /** Authorization configuration */\n  auth?: ExpressAuthConfig;\n  /** Callback when authorization fails */\n  onAuthFailure?: BaseAdapterOptions<ExpressRequest, Response>[\"onAuthFailure\"];\n}\n\nexport interface RouterOptions {\n  /** Prefix all routes under this base path (e.g. \"/api/stepflow\"). */\n  basePath?: string;\n  /** Custom health check function. Defaults to stepflow.healthCheck(). */\n  healthCheck?: () => Promise<boolean>;\n  /** Endpoint configuration - preset or fine-grained */\n  endpoints?: EndpointOption;\n  /** Authorization configuration */\n  auth?: ExpressAuthConfig;\n  /** Callback when authorization fails */\n  onAuthFailure?: BaseAdapterOptions<ExpressRequest, Response>[\"onAuthFailure\"];\n}\n\nexport interface TriggerRequestBody<TPayload = unknown> {\n  payload: TPayload;\n  metadata?: Record<string, unknown>;\n  runId?: string;\n  delay?: number;\n  idempotencyKey?: string;\n}\n\nexport interface NotifyRequestBody {\n  data: unknown;\n}\n\nexport interface ErrorResponseBody {\n  error: string;\n  message?: string;\n}\n\n// ============================================================================\n// Re-exports from shared\n// ============================================================================\n\nexport {\n  type AuthContext,\n  type AuthResult,\n  type AuthHandler,\n  type AuthConfig,\n  type EndpointConfig,\n  type EndpointOption,\n  type EndpointPreset,\n  type RouteName,\n  createApiKeyAuth,\n  createBearerAuth,\n  anyOf,\n  allOf,\n  isRouteEnabled,\n  resolveEndpoints,\n} from \"@stepflowjs/adapter-shared\";\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\nfunction normalizeBasePath(basePath: string | undefined): string {\n  if (!basePath) return \"\";\n  if (basePath === \"/\") return \"\";\n  return basePath.startsWith(\"/\")\n    ? basePath.replace(/\\/$/, \"\")\n    : `/${basePath}`;\n}\n\nfunction getAccessToken(req: Request): string | undefined {\n  const queryToken = req.query.token;\n  if (typeof queryToken === \"string\" && queryToken.length > 0) {\n    return queryToken;\n  }\n\n  const authHeader = req.header(\"authorization\") ?? req.header(\"Authorization\");\n  if (!authHeader) return undefined;\n\n  const match = authHeader.match(/^Bearer\\s+(.+)$/i);\n  return match?.[1];\n}\n\nfunction jsonError(\n  res: Response,\n  status: number,\n  error: string,\n  message?: string,\n): void {\n  const body: ErrorResponseBody = message ? { error, message } : { error };\n  res.status(status).json(body);\n}\n\nfunction jsonAuthError(\n  res: Response,\n  status: number,\n  code: string,\n  message: string,\n): void {\n  const body = createErrorBody(code, message);\n  res.status(status).json(body);\n}\n\nfunction getFirstParam(params: Request[\"params\"], name: string): string {\n  const value = params[name];\n  if (Array.isArray(value)) return value[0] ?? \"\";\n  return value ?? \"\";\n}\n\nfunction parseThrottleMs(value: unknown): number | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const ms = Number(value);\n  if (!Number.isFinite(ms) || ms < 0) return undefined;\n  return ms;\n}\n\n/**\n * Creates an ExpressRequest object from Express Request for auth handlers\n */\nfunction createExpressRequest(req: Request): ExpressRequest {\n  return {\n    header: (name: string) => req.header(name),\n    headers: req.headers as Record<string, string | string[] | undefined>,\n    url: req.url,\n    method: req.method,\n    query: (name: string) => {\n      const value = req.query[name];\n      if (typeof value === \"string\") return value;\n      if (Array.isArray(value) && value.length > 0) return String(value[0]);\n      return undefined;\n    },\n  };\n}\n\n/**\n * Runs authorization check and returns true if denied (response already sent)\n */\nasync function checkAuth(\n  req: Request,\n  res: Response,\n  route: RouteName,\n  options: RouterOptions,\n  params: { workflowId?: string; eventId?: string; runId?: string } = {},\n): Promise<boolean> {\n  const ctx: ExpressAuthContext = {\n    route,\n    request: createExpressRequest(req),\n    extra: res,\n    ...params,\n  };\n\n  const result = await runAuth(ctx, options.auth);\n\n  if (!result.ok) {\n    const { status, code, message } = getAuthFailureResponse(result);\n    await options.onAuthFailure?.(ctx, result);\n    jsonAuthError(res, status, code, message);\n    return true;\n  }\n\n  return false;\n}\n\n// ============================================================================\n// Router\n// ============================================================================\n\nexport function createStepflowRouter(\n  stepflow: Stepflow,\n  options: RouterOptions = {},\n): Router {\n  const basePath = normalizeBasePath(options.basePath);\n  const router = Router();\n\n  router.use(express.json());\n\n  // Health check\n  if (isRouteEnabled(\"health\", options.endpoints)) {\n    router.get(`${basePath}/health`, async (req: Request, res: Response) => {\n      if (await checkAuth(req, res, \"health\", options)) return;\n\n      try {\n        const ok = await (options.healthCheck?.() ?? stepflow.healthCheck());\n        res.status(200).json({ ok });\n      } catch (error) {\n        jsonError(res, 500, \"Internal server error\", (error as Error).message);\n      }\n    });\n  }\n\n  // Trigger a workflow\n  if (isRouteEnabled(\"trigger\", options.endpoints)) {\n    router.post(\n      `${basePath}/trigger/:workflowId`,\n      async (req: Request, res: Response) => {\n        const workflowId = getFirstParam(req.params, \"workflowId\");\n\n        if (await checkAuth(req, res, \"trigger\", options, { workflowId }))\n          return;\n\n        try {\n          const body = req.body as TriggerRequestBody | undefined;\n          if (!body || typeof body !== \"object\") {\n            jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n            return;\n          }\n\n          const result = await stepflow.trigger(\n            String(workflowId),\n            body.payload,\n            {\n              runId: body.runId,\n              metadata: body.metadata,\n              delay: body.delay,\n              idempotencyKey: body.idempotencyKey,\n            },\n          );\n\n          const response: TriggerResult = result;\n          res.status(200).json(response);\n        } catch (error) {\n          const message = (error as Error).message;\n          if (message.includes(\"Workflow\") && message.includes(\"not found\")) {\n            jsonError(res, 404, \"Not found\", message);\n            return;\n          }\n          jsonError(res, 500, \"Internal server error\", message);\n        }\n      },\n    );\n  }\n\n  // Get run status\n  if (isRouteEnabled(\"runs\", options.endpoints)) {\n    router.get(\n      `${basePath}/runs/:runId`,\n      async (req: Request, res: Response) => {\n        const runId = getFirstParam(req.params, \"runId\");\n\n        if (await checkAuth(req, res, \"runs\", options, { runId })) return;\n\n        try {\n          const accessToken = getAccessToken(req);\n          const run = await stepflow.getRun(String(runId), { accessToken });\n\n          if (!run) {\n            jsonError(res, 404, \"Not found\", `Run \"${runId}\" not found`);\n            return;\n          }\n\n          const response: Execution = run;\n          res.status(200).json(response);\n        } catch (error) {\n          const message = (error as Error).message;\n          if (message === \"Invalid access token\") {\n            jsonError(res, 401, \"Unauthorized\", message);\n            return;\n          }\n          jsonError(res, 500, \"Internal server error\", message);\n        }\n      },\n    );\n  }\n\n  // SSE stream for run updates\n  if (isRouteEnabled(\"runsStream\", options.endpoints)) {\n    router.get(\n      `${basePath}/runs/:runId/stream`,\n      async (req: Request, res: Response) => {\n        const runId = getFirstParam(req.params, \"runId\");\n\n        if (await checkAuth(req, res, \"runsStream\", options, { runId })) return;\n\n        const accessToken = getAccessToken(req);\n        if (accessToken) {\n          try {\n            await stepflow.getRun(String(runId), { accessToken });\n          } catch (error) {\n            const message = (error as Error).message;\n            if (message === \"Invalid access token\") {\n              jsonError(res, 401, \"Unauthorized\", message);\n              return;\n            }\n            jsonError(res, 500, \"Internal server error\", message);\n            return;\n          }\n        }\n\n        const throttleMs = parseThrottleMs(req.query.throttle);\n\n        res.status(200);\n        res.setHeader(\"Content-Type\", \"text/event-stream\");\n        res.setHeader(\"Cache-Control\", \"no-cache\");\n        res.setHeader(\"Connection\", \"keep-alive\");\n        res.setHeader(\"X-Accel-Buffering\", \"no\");\n        res.flushHeaders?.();\n\n        // Ensure the client receives an initial chunk immediately.\n        res.write(`: connected\\n\\n`);\n\n        let lastSentAt = 0;\n        let executionId: string | undefined;\n        let unsubscribeExecution: (() => void) | undefined;\n        let closed = false;\n\n        const send = (type: string, data: unknown) => {\n          if (closed) return;\n\n          if (throttleMs !== undefined) {\n            const now = Date.now();\n            if (now - lastSentAt < throttleMs) {\n              return;\n            }\n            lastSentAt = now;\n          }\n\n          res.write(`event: ${type}\\n`);\n          res.write(`data: ${JSON.stringify(data)}\\n\\n`);\n        };\n\n        const publishCurrentExecution = async () => {\n          const current = await stepflow.getRun(String(runId));\n          if (!current) return;\n\n          executionId = current.id;\n          send(\"update\", current);\n\n          if (current.status === \"completed\") {\n            send(\"execution:complete\", { result: current.result });\n          }\n          if (current.status === \"failed\") {\n            send(\"execution:failed\", { error: current.error });\n          }\n        };\n\n        const handleExecutionEvent = (event: unknown) => {\n          // We cannot await inside the realtime callback.\n          void (async () => {\n            if (!executionId || closed) return;\n\n            const execution = await stepflow.getExecution(executionId);\n            if (execution) {\n              send(\"update\", execution);\n\n              if (execution.status === \"completed\") {\n                send(\"execution:complete\", { result: execution.result });\n              }\n              if (execution.status === \"failed\") {\n                send(\"execution:failed\", { error: execution.error });\n              }\n\n              if (\n                typeof event === \"object\" &&\n                event !== null &&\n                \"type\" in event &&\n                \"stepName\" in event &&\n                typeof (event as { type: unknown }).type === \"string\" &&\n                typeof (event as { stepName: unknown }).stepName === \"string\"\n              ) {\n                const type = (event as { type: string }).type;\n                const stepName = (event as { stepName: string }).stepName;\n\n                if (type === \"step:complete\") {\n                  const step = execution.steps.find(\n                    (s: { name: string }) => s.name === stepName,\n                  );\n                  if (step) send(\"step:complete\", step);\n                }\n                if (type === \"step:failed\") {\n                  const step = execution.steps.find(\n                    (s: { name: string }) => s.name === stepName,\n                  );\n                  if (step) send(\"step:failed\", step);\n                }\n              }\n            }\n          })();\n        };\n\n        const stop = () => {\n          if (closed) return;\n          closed = true;\n          unsubscribeExecution?.();\n          res.end();\n        };\n\n        req.on(\"close\", stop);\n\n        try {\n          await publishCurrentExecution();\n\n          // If the run doesn't exist yet, poll until it does.\n          while (!closed && !executionId) {\n            await new Promise((r) => setTimeout(r, 250));\n            await publishCurrentExecution();\n          }\n\n          if (!executionId || closed) return;\n\n          unsubscribeExecution = stepflow.subscribeToExecution(\n            executionId,\n            handleExecutionEvent,\n          );\n        } catch (error) {\n          if (!closed) {\n            send(\"error\", {\n              error: \"Internal server error\",\n              message: (error as Error).message,\n            });\n            stop();\n          }\n        }\n      },\n    );\n  }\n\n  // Notify an event\n  if (isRouteEnabled(\"notify\", options.endpoints)) {\n    router.post(\n      `${basePath}/notify/:eventId`,\n      async (req: Request, res: Response) => {\n        const eventId = getFirstParam(req.params, \"eventId\");\n\n        if (await checkAuth(req, res, \"notify\", options, { eventId })) return;\n\n        try {\n          const body = req.body as NotifyRequestBody | undefined;\n          if (!body || typeof body !== \"object\") {\n            jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n            return;\n          }\n\n          const result = await stepflow.notify(String(eventId), body.data);\n          const response: NotifyResult = result;\n          res.status(200).json(response);\n        } catch (error) {\n          jsonError(\n            res,\n            500,\n            \"Internal server error\",\n            (error as Error).message,\n          );\n        }\n      },\n    );\n  }\n\n  // Alias routes for StepflowClient (client-ts) conventions\n\n  if (isRouteEnabled(\"workflowsTrigger\", options.endpoints)) {\n    router.post(\n      `${basePath}/workflows/:workflowId/trigger`,\n      async (req: Request, res: Response) => {\n        const workflowId = getFirstParam(req.params, \"workflowId\");\n\n        if (\n          await checkAuth(req, res, \"workflowsTrigger\", options, { workflowId })\n        )\n          return;\n\n        try {\n          const body = req.body as\n            | {\n                payload: unknown;\n                metadata?: Record<string, unknown>;\n                runId?: string;\n                delay?: number;\n                idempotencyKey?: string;\n              }\n            | undefined;\n\n          if (!body || typeof body !== \"object\") {\n            jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n            return;\n          }\n\n          const result = await stepflow.trigger(\n            String(workflowId),\n            body.payload,\n            {\n              runId: body.runId,\n              metadata: body.metadata,\n              delay: body.delay,\n              idempotencyKey: body.idempotencyKey,\n            },\n          );\n\n          const response: TriggerResult = result;\n          res.status(200).json(response);\n        } catch (error) {\n          const message = (error as Error).message;\n          if (message.includes(\"Workflow\") && message.includes(\"not found\")) {\n            jsonError(res, 404, \"Not found\", message);\n            return;\n          }\n          jsonError(res, 500, \"Internal server error\", message);\n        }\n      },\n    );\n  }\n\n  if (isRouteEnabled(\"eventsNotify\", options.endpoints)) {\n    router.post(\n      `${basePath}/events/:eventId/notify`,\n      async (req: Request, res: Response) => {\n        const eventId = getFirstParam(req.params, \"eventId\");\n\n        if (await checkAuth(req, res, \"eventsNotify\", options, { eventId }))\n          return;\n\n        try {\n          const body = req.body as NotifyRequestBody | undefined;\n          if (!body || typeof body !== \"object\") {\n            jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n            return;\n          }\n\n          const result = await stepflow.notify(String(eventId), body.data);\n          const response: NotifyResult = result;\n          res.status(200).json(response);\n        } catch (error) {\n          jsonError(\n            res,\n            500,\n            \"Internal server error\",\n            (error as Error).message,\n          );\n        }\n      },\n    );\n  }\n\n  // Minimal stream endpoint: trigger + return SSE stream\n  if (isRouteEnabled(\"workflowsStream\", options.endpoints)) {\n    router.post(\n      `${basePath}/workflows/:workflowId/stream`,\n      async (req: Request, res: Response) => {\n        const workflowId = getFirstParam(req.params, \"workflowId\");\n\n        if (\n          await checkAuth(req, res, \"workflowsStream\", options, { workflowId })\n        )\n          return;\n\n        try {\n          const body = req.body as { payload: unknown } | undefined;\n          if (!body || typeof body !== \"object\") {\n            jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n            return;\n          }\n\n          const { runId, publicAccessToken } = await stepflow.trigger(\n            String(workflowId),\n            body.payload,\n          );\n\n          res.status(200);\n          res.setHeader(\"Content-Type\", \"text/event-stream\");\n          res.setHeader(\"Cache-Control\", \"no-cache\");\n          res.setHeader(\"Connection\", \"keep-alive\");\n          res.setHeader(\"X-Accel-Buffering\", \"no\");\n          res.flushHeaders?.();\n\n          res.write(`event: trigger\\n`);\n          res.write(\n            `data: ${JSON.stringify({ runId, accessToken: publicAccessToken })}\\n\\n`,\n          );\n\n          let executionId: string | undefined;\n          let closed = false;\n\n          const stop = () => {\n            if (closed) return;\n            closed = true;\n            res.end();\n          };\n\n          req.on(\"close\", stop);\n\n          // Delegate to the run stream logic by subscribing to the execution.\n          // We need executionId; poll until the run exists.\n          while (!closed && !executionId) {\n            const run = await stepflow.getRun(runId);\n            executionId = run?.id;\n            if (!executionId) {\n              await new Promise((r) => setTimeout(r, 100));\n            }\n          }\n\n          if (!executionId || closed) return;\n\n          const unsubscribe = stepflow.subscribeToExecution(executionId, () => {\n            void (async () => {\n              if (closed) return;\n              const execution = await stepflow.getExecution(executionId);\n              if (execution) {\n                res.write(`event: update\\n`);\n                res.write(`data: ${JSON.stringify(execution)}\\n\\n`);\n              }\n            })();\n          });\n\n          try {\n            // Keep connection open\n            await new Promise((r) => setTimeout(r, 60 * 60 * 1000));\n          } finally {\n            unsubscribe();\n            stop();\n          }\n        } catch (error) {\n          const message = (error as Error).message;\n          if (message.includes(\"Workflow\") && message.includes(\"not found\")) {\n            jsonError(res, 404, \"Not found\", message);\n            return;\n          }\n          jsonError(res, 500, \"Internal server error\", message);\n        }\n      },\n    );\n  }\n\n  // Error handler (invalid JSON, etc.)\n  router.use(\n    (error: unknown, _req: Request, res: Response, next: NextFunction) => {\n      if (res.headersSent) {\n        next(error);\n        return;\n      }\n\n      if (\n        error instanceof SyntaxError &&\n        \"status\" in error &&\n        typeof (error as { status?: unknown }).status === \"number\" &&\n        (error as { status: number }).status === 400\n      ) {\n        jsonError(res, 400, \"Bad request\", \"Invalid JSON body\");\n        return;\n      }\n\n      next(error);\n    },\n  );\n\n  return router;\n}\n\n// ============================================================================\n// Middleware\n// ============================================================================\n\nexport function createStepflowMiddleware(\n  stepflow: Stepflow,\n  options: MiddlewareOptions = {},\n): RequestHandler {\n  const basePath = normalizeBasePath(options.basePath);\n  const router = createStepflowRouter(stepflow, {\n    endpoints: options.endpoints,\n    auth: options.auth,\n    onAuthFailure: options.onAuthFailure,\n  });\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (basePath) {\n      const fullPath = `${req.baseUrl}${req.path}`;\n      if (!fullPath.startsWith(basePath)) {\n        next();\n        return;\n      }\n\n      // If mounted at root and the request path still includes basePath,\n      // strip it so the internal router can match \"/trigger\", \"/runs\", etc.\n      if (req.url.startsWith(basePath)) {\n        const originalUrl = req.url;\n        req.url = req.url.slice(basePath.length) || \"/\";\n        router(req, res, (err?: unknown) => {\n          req.url = originalUrl;\n          if (!err) {\n            next();\n            return;\n          }\n          next(err instanceof Error ? err : new Error(String(err)));\n        });\n        return;\n      }\n    }\n\n    router(req, res, next);\n  };\n}\n"],"mappings":";AAEA;AAAA,EAME;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,OAAO;AAAA,EACL;AAAA,OAKK;AAkEP;AAAA,EASE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAA;AAAA,EACA;AAAA,OACK;AAMP,SAAS,kBAAkB,UAAsC;AAC/D,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,aAAa,IAAK,QAAO;AAC7B,SAAO,SAAS,WAAW,GAAG,IAC1B,SAAS,QAAQ,OAAO,EAAE,IAC1B,IAAI,QAAQ;AAClB;AAEA,SAAS,eAAe,KAAkC;AACxD,QAAM,aAAa,IAAI,MAAM;AAC7B,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,IAAI,OAAO,eAAe,KAAK,IAAI,OAAO,eAAe;AAC5E,MAAI,CAAC,WAAY,QAAO;AAExB,QAAM,QAAQ,WAAW,MAAM,kBAAkB;AACjD,SAAO,QAAQ,CAAC;AAClB;AAEA,SAAS,UACP,KACA,QACA,OACA,SACM;AACN,QAAM,OAA0B,UAAU,EAAE,OAAO,QAAQ,IAAI,EAAE,MAAM;AACvE,MAAI,OAAO,MAAM,EAAE,KAAK,IAAI;AAC9B;AAEA,SAAS,cACP,KACA,QACA,MACA,SACM;AACN,QAAM,OAAO,gBAAgB,MAAM,OAAO;AAC1C,MAAI,OAAO,MAAM,EAAE,KAAK,IAAI;AAC9B;AAEA,SAAS,cAAc,QAA2B,MAAsB;AACtE,QAAM,QAAQ,OAAO,IAAI;AACzB,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,CAAC,KAAK;AAC7C,SAAO,SAAS;AAClB;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,KAAK,OAAO,KAAK;AACvB,MAAI,CAAC,OAAO,SAAS,EAAE,KAAK,KAAK,EAAG,QAAO;AAC3C,SAAO;AACT;AAKA,SAAS,qBAAqB,KAA8B;AAC1D,SAAO;AAAA,IACL,QAAQ,CAAC,SAAiB,IAAI,OAAO,IAAI;AAAA,IACzC,SAAS,IAAI;AAAA,IACb,KAAK,IAAI;AAAA,IACT,QAAQ,IAAI;AAAA,IACZ,OAAO,CAAC,SAAiB;AACvB,YAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,UAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,EAAG,QAAO,OAAO,MAAM,CAAC,CAAC;AACpE,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAKA,eAAe,UACb,KACA,KACA,OACA,SACA,SAAoE,CAAC,GACnD;AAClB,QAAM,MAA0B;AAAA,IAC9B;AAAA,IACA,SAAS,qBAAqB,GAAG;AAAA,IACjC,OAAO;AAAA,IACP,GAAG;AAAA,EACL;AAEA,QAAM,SAAS,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAE9C,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,EAAE,QAAQ,MAAM,QAAQ,IAAI,uBAAuB,MAAM;AAC/D,UAAM,QAAQ,gBAAgB,KAAK,MAAM;AACzC,kBAAc,KAAK,QAAQ,MAAM,OAAO;AACxC,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMO,SAAS,qBACd,UACA,UAAyB,CAAC,GAClB;AACR,QAAM,WAAW,kBAAkB,QAAQ,QAAQ;AACnD,QAAM,SAAS,OAAO;AAEtB,SAAO,IAAI,QAAQ,KAAK,CAAC;AAGzB,MAAI,eAAe,UAAU,QAAQ,SAAS,GAAG;AAC/C,WAAO,IAAI,GAAG,QAAQ,WAAW,OAAO,KAAc,QAAkB;AACtE,UAAI,MAAM,UAAU,KAAK,KAAK,UAAU,OAAO,EAAG;AAElD,UAAI;AACF,cAAM,KAAK,OAAO,QAAQ,cAAc,KAAK,SAAS,YAAY;AAClE,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC;AAAA,MAC7B,SAAS,OAAO;AACd,kBAAU,KAAK,KAAK,yBAA0B,MAAgB,OAAO;AAAA,MACvE;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI,eAAe,WAAW,QAAQ,SAAS,GAAG;AAChD,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,aAAa,cAAc,IAAI,QAAQ,YAAY;AAEzD,YAAI,MAAM,UAAU,KAAK,KAAK,WAAW,SAAS,EAAE,WAAW,CAAC;AAC9D;AAEF,YAAI;AACF,gBAAM,OAAO,IAAI;AACjB,cAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,sBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS;AAAA,YAC5B,OAAO,UAAU;AAAA,YACjB,KAAK;AAAA,YACL;AAAA,cACE,OAAO,KAAK;AAAA,cACZ,UAAU,KAAK;AAAA,cACf,OAAO,KAAK;AAAA,cACZ,gBAAgB,KAAK;AAAA,YACvB;AAAA,UACF;AAEA,gBAAM,WAA0B;AAChC,cAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,QAC/B,SAAS,OAAO;AACd,gBAAM,UAAW,MAAgB;AACjC,cAAI,QAAQ,SAAS,UAAU,KAAK,QAAQ,SAAS,WAAW,GAAG;AACjE,sBAAU,KAAK,KAAK,aAAa,OAAO;AACxC;AAAA,UACF;AACA,oBAAU,KAAK,KAAK,yBAAyB,OAAO;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,eAAe,QAAQ,QAAQ,SAAS,GAAG;AAC7C,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,QAAQ,cAAc,IAAI,QAAQ,OAAO;AAE/C,YAAI,MAAM,UAAU,KAAK,KAAK,QAAQ,SAAS,EAAE,MAAM,CAAC,EAAG;AAE3D,YAAI;AACF,gBAAM,cAAc,eAAe,GAAG;AACtC,gBAAM,MAAM,MAAM,SAAS,OAAO,OAAO,KAAK,GAAG,EAAE,YAAY,CAAC;AAEhE,cAAI,CAAC,KAAK;AACR,sBAAU,KAAK,KAAK,aAAa,QAAQ,KAAK,aAAa;AAC3D;AAAA,UACF;AAEA,gBAAM,WAAsB;AAC5B,cAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,QAC/B,SAAS,OAAO;AACd,gBAAM,UAAW,MAAgB;AACjC,cAAI,YAAY,wBAAwB;AACtC,sBAAU,KAAK,KAAK,gBAAgB,OAAO;AAC3C;AAAA,UACF;AACA,oBAAU,KAAK,KAAK,yBAAyB,OAAO;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,eAAe,cAAc,QAAQ,SAAS,GAAG;AACnD,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,QAAQ,cAAc,IAAI,QAAQ,OAAO;AAE/C,YAAI,MAAM,UAAU,KAAK,KAAK,cAAc,SAAS,EAAE,MAAM,CAAC,EAAG;AAEjE,cAAM,cAAc,eAAe,GAAG;AACtC,YAAI,aAAa;AACf,cAAI;AACF,kBAAM,SAAS,OAAO,OAAO,KAAK,GAAG,EAAE,YAAY,CAAC;AAAA,UACtD,SAAS,OAAO;AACd,kBAAM,UAAW,MAAgB;AACjC,gBAAI,YAAY,wBAAwB;AACtC,wBAAU,KAAK,KAAK,gBAAgB,OAAO;AAC3C;AAAA,YACF;AACA,sBAAU,KAAK,KAAK,yBAAyB,OAAO;AACpD;AAAA,UACF;AAAA,QACF;AAEA,cAAM,aAAa,gBAAgB,IAAI,MAAM,QAAQ;AAErD,YAAI,OAAO,GAAG;AACd,YAAI,UAAU,gBAAgB,mBAAmB;AACjD,YAAI,UAAU,iBAAiB,UAAU;AACzC,YAAI,UAAU,cAAc,YAAY;AACxC,YAAI,UAAU,qBAAqB,IAAI;AACvC,YAAI,eAAe;AAGnB,YAAI,MAAM;AAAA;AAAA,CAAiB;AAE3B,YAAI,aAAa;AACjB,YAAI;AACJ,YAAI;AACJ,YAAI,SAAS;AAEb,cAAM,OAAO,CAAC,MAAc,SAAkB;AAC5C,cAAI,OAAQ;AAEZ,cAAI,eAAe,QAAW;AAC5B,kBAAM,MAAM,KAAK,IAAI;AACrB,gBAAI,MAAM,aAAa,YAAY;AACjC;AAAA,YACF;AACA,yBAAa;AAAA,UACf;AAEA,cAAI,MAAM,UAAU,IAAI;AAAA,CAAI;AAC5B,cAAI,MAAM,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA;AAAA,CAAM;AAAA,QAC/C;AAEA,cAAM,0BAA0B,YAAY;AAC1C,gBAAM,UAAU,MAAM,SAAS,OAAO,OAAO,KAAK,CAAC;AACnD,cAAI,CAAC,QAAS;AAEd,wBAAc,QAAQ;AACtB,eAAK,UAAU,OAAO;AAEtB,cAAI,QAAQ,WAAW,aAAa;AAClC,iBAAK,sBAAsB,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,UACvD;AACA,cAAI,QAAQ,WAAW,UAAU;AAC/B,iBAAK,oBAAoB,EAAE,OAAO,QAAQ,MAAM,CAAC;AAAA,UACnD;AAAA,QACF;AAEA,cAAM,uBAAuB,CAAC,UAAmB;AAE/C,gBAAM,YAAY;AAChB,gBAAI,CAAC,eAAe,OAAQ;AAE5B,kBAAM,YAAY,MAAM,SAAS,aAAa,WAAW;AACzD,gBAAI,WAAW;AACb,mBAAK,UAAU,SAAS;AAExB,kBAAI,UAAU,WAAW,aAAa;AACpC,qBAAK,sBAAsB,EAAE,QAAQ,UAAU,OAAO,CAAC;AAAA,cACzD;AACA,kBAAI,UAAU,WAAW,UAAU;AACjC,qBAAK,oBAAoB,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,cACrD;AAEA,kBACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,cAAc,SACd,OAAQ,MAA4B,SAAS,YAC7C,OAAQ,MAAgC,aAAa,UACrD;AACA,sBAAM,OAAQ,MAA2B;AACzC,sBAAM,WAAY,MAA+B;AAEjD,oBAAI,SAAS,iBAAiB;AAC5B,wBAAM,OAAO,UAAU,MAAM;AAAA,oBAC3B,CAAC,MAAwB,EAAE,SAAS;AAAA,kBACtC;AACA,sBAAI,KAAM,MAAK,iBAAiB,IAAI;AAAA,gBACtC;AACA,oBAAI,SAAS,eAAe;AAC1B,wBAAM,OAAO,UAAU,MAAM;AAAA,oBAC3B,CAAC,MAAwB,EAAE,SAAS;AAAA,kBACtC;AACA,sBAAI,KAAM,MAAK,eAAe,IAAI;AAAA,gBACpC;AAAA,cACF;AAAA,YACF;AAAA,UACF,GAAG;AAAA,QACL;AAEA,cAAM,OAAO,MAAM;AACjB,cAAI,OAAQ;AACZ,mBAAS;AACT,iCAAuB;AACvB,cAAI,IAAI;AAAA,QACV;AAEA,YAAI,GAAG,SAAS,IAAI;AAEpB,YAAI;AACF,gBAAM,wBAAwB;AAG9B,iBAAO,CAAC,UAAU,CAAC,aAAa;AAC9B,kBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,kBAAM,wBAAwB;AAAA,UAChC;AAEA,cAAI,CAAC,eAAe,OAAQ;AAE5B,iCAAuB,SAAS;AAAA,YAC9B;AAAA,YACA;AAAA,UACF;AAAA,QACF,SAAS,OAAO;AACd,cAAI,CAAC,QAAQ;AACX,iBAAK,SAAS;AAAA,cACZ,OAAO;AAAA,cACP,SAAU,MAAgB;AAAA,YAC5B,CAAC;AACD,iBAAK;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,eAAe,UAAU,QAAQ,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,UAAU,cAAc,IAAI,QAAQ,SAAS;AAEnD,YAAI,MAAM,UAAU,KAAK,KAAK,UAAU,SAAS,EAAE,QAAQ,CAAC,EAAG;AAE/D,YAAI;AACF,gBAAM,OAAO,IAAI;AACjB,cAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,sBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,OAAO,OAAO,OAAO,GAAG,KAAK,IAAI;AAC/D,gBAAM,WAAyB;AAC/B,cAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,QAC/B,SAAS,OAAO;AACd;AAAA,YACE;AAAA,YACA;AAAA,YACA;AAAA,YACC,MAAgB;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,MAAI,eAAe,oBAAoB,QAAQ,SAAS,GAAG;AACzD,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,aAAa,cAAc,IAAI,QAAQ,YAAY;AAEzD,YACE,MAAM,UAAU,KAAK,KAAK,oBAAoB,SAAS,EAAE,WAAW,CAAC;AAErE;AAEF,YAAI;AACF,gBAAM,OAAO,IAAI;AAUjB,cAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,sBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS;AAAA,YAC5B,OAAO,UAAU;AAAA,YACjB,KAAK;AAAA,YACL;AAAA,cACE,OAAO,KAAK;AAAA,cACZ,UAAU,KAAK;AAAA,cACf,OAAO,KAAK;AAAA,cACZ,gBAAgB,KAAK;AAAA,YACvB;AAAA,UACF;AAEA,gBAAM,WAA0B;AAChC,cAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,QAC/B,SAAS,OAAO;AACd,gBAAM,UAAW,MAAgB;AACjC,cAAI,QAAQ,SAAS,UAAU,KAAK,QAAQ,SAAS,WAAW,GAAG;AACjE,sBAAU,KAAK,KAAK,aAAa,OAAO;AACxC;AAAA,UACF;AACA,oBAAU,KAAK,KAAK,yBAAyB,OAAO;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,eAAe,gBAAgB,QAAQ,SAAS,GAAG;AACrD,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,UAAU,cAAc,IAAI,QAAQ,SAAS;AAEnD,YAAI,MAAM,UAAU,KAAK,KAAK,gBAAgB,SAAS,EAAE,QAAQ,CAAC;AAChE;AAEF,YAAI;AACF,gBAAM,OAAO,IAAI;AACjB,cAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,sBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,OAAO,OAAO,OAAO,GAAG,KAAK,IAAI;AAC/D,gBAAM,WAAyB;AAC/B,cAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,QAC/B,SAAS,OAAO;AACd;AAAA,YACE;AAAA,YACA;AAAA,YACA;AAAA,YACC,MAAgB;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,eAAe,mBAAmB,QAAQ,SAAS,GAAG;AACxD,WAAO;AAAA,MACL,GAAG,QAAQ;AAAA,MACX,OAAO,KAAc,QAAkB;AACrC,cAAM,aAAa,cAAc,IAAI,QAAQ,YAAY;AAEzD,YACE,MAAM,UAAU,KAAK,KAAK,mBAAmB,SAAS,EAAE,WAAW,CAAC;AAEpE;AAEF,YAAI;AACF,gBAAM,OAAO,IAAI;AACjB,cAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,sBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,UACF;AAEA,gBAAM,EAAE,OAAO,kBAAkB,IAAI,MAAM,SAAS;AAAA,YAClD,OAAO,UAAU;AAAA,YACjB,KAAK;AAAA,UACP;AAEA,cAAI,OAAO,GAAG;AACd,cAAI,UAAU,gBAAgB,mBAAmB;AACjD,cAAI,UAAU,iBAAiB,UAAU;AACzC,cAAI,UAAU,cAAc,YAAY;AACxC,cAAI,UAAU,qBAAqB,IAAI;AACvC,cAAI,eAAe;AAEnB,cAAI,MAAM;AAAA,CAAkB;AAC5B,cAAI;AAAA,YACF,SAAS,KAAK,UAAU,EAAE,OAAO,aAAa,kBAAkB,CAAC,CAAC;AAAA;AAAA;AAAA,UACpE;AAEA,cAAI;AACJ,cAAI,SAAS;AAEb,gBAAM,OAAO,MAAM;AACjB,gBAAI,OAAQ;AACZ,qBAAS;AACT,gBAAI,IAAI;AAAA,UACV;AAEA,cAAI,GAAG,SAAS,IAAI;AAIpB,iBAAO,CAAC,UAAU,CAAC,aAAa;AAC9B,kBAAM,MAAM,MAAM,SAAS,OAAO,KAAK;AACvC,0BAAc,KAAK;AACnB,gBAAI,CAAC,aAAa;AAChB,oBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAAA,YAC7C;AAAA,UACF;AAEA,cAAI,CAAC,eAAe,OAAQ;AAE5B,gBAAM,cAAc,SAAS,qBAAqB,aAAa,MAAM;AACnE,kBAAM,YAAY;AAChB,kBAAI,OAAQ;AACZ,oBAAM,YAAY,MAAM,SAAS,aAAa,WAAW;AACzD,kBAAI,WAAW;AACb,oBAAI,MAAM;AAAA,CAAiB;AAC3B,oBAAI,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;AAAA;AAAA,CAAM;AAAA,cACpD;AAAA,YACF,GAAG;AAAA,UACL,CAAC;AAED,cAAI;AAEF,kBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,KAAK,GAAI,CAAC;AAAA,UACxD,UAAE;AACA,wBAAY;AACZ,iBAAK;AAAA,UACP;AAAA,QACF,SAAS,OAAO;AACd,gBAAM,UAAW,MAAgB;AACjC,cAAI,QAAQ,SAAS,UAAU,KAAK,QAAQ,SAAS,WAAW,GAAG;AACjE,sBAAU,KAAK,KAAK,aAAa,OAAO;AACxC;AAAA,UACF;AACA,oBAAU,KAAK,KAAK,yBAAyB,OAAO;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AAAA,IACL,CAAC,OAAgB,MAAe,KAAe,SAAuB;AACpE,UAAI,IAAI,aAAa;AACnB,aAAK,KAAK;AACV;AAAA,MACF;AAEA,UACE,iBAAiB,eACjB,YAAY,SACZ,OAAQ,MAA+B,WAAW,YACjD,MAA6B,WAAW,KACzC;AACA,kBAAU,KAAK,KAAK,eAAe,mBAAmB;AACtD;AAAA,MACF;AAEA,WAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,yBACd,UACA,UAA6B,CAAC,GACd;AAChB,QAAM,WAAW,kBAAkB,QAAQ,QAAQ;AACnD,QAAM,SAAS,qBAAqB,UAAU;AAAA,IAC5C,WAAW,QAAQ;AAAA,IACnB,MAAM,QAAQ;AAAA,IACd,eAAe,QAAQ;AAAA,EACzB,CAAC;AAED,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,UAAU;AACZ,YAAM,WAAW,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAC1C,UAAI,CAAC,SAAS,WAAW,QAAQ,GAAG;AAClC,aAAK;AACL;AAAA,MACF;AAIA,UAAI,IAAI,IAAI,WAAW,QAAQ,GAAG;AAChC,cAAM,cAAc,IAAI;AACxB,YAAI,MAAM,IAAI,IAAI,MAAM,SAAS,MAAM,KAAK;AAC5C,eAAO,KAAK,KAAK,CAAC,QAAkB;AAClC,cAAI,MAAM;AACV,cAAI,CAAC,KAAK;AACR,iBAAK;AACL;AAAA,UACF;AACA,eAAK,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAAA,QAC1D,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK,KAAK,IAAI;AAAA,EACvB;AACF;","names":["isRouteEnabled"]}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@stepflowjs/adapter-express",
+  "version": "0.0.1",
+  "description": "Express.js framework adapter for Stepflow workflows",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@stepflowjs/adapter-shared": "0.0.1",
+    "@stepflowjs/core": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/supertest": "^6.0.3",
+    "express": "^5.1.0",
+    "supertest": "^7.1.0",
+    "tsup": "^8.5.1",
+    "vitest": "^4.0.17"
+  },
+  "peerDependencies": {
+    "express": "^4.0.0 || ^5.0.0",
+    "typescript": "^5.0.0"
+  },
+  "license": "MIT",
+  "author": "Stepflow Contributors",
+  "repository": {
+    "type": "git",
+    "url": "https://stepflow-production.up.railway.app",
+    "directory": "packages/adapters/express"
+  },
+  "homepage": "https://stepflow-production.up.railway.app",
+  "bugs": {
+    "url": "https://stepflow-production.up.railway.app"
+  },
+  "keywords": [
+    "stepflow",
+    "adapter",
+    "express",
+    "framework",
+    "workflow",
+    "orchestration"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest",
+    "clean": "rm -rf dist"
+  }
+}