@tumbaland/backend-core 1.16.0

package/dist/index.js

@@ -0,0 +1,81 @@
+"use strict";
+// @tumbaland/backend-core - Core shared functionality for Tumbaland backend services
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractSpanContext = exports.injectHeaders = exports.setSpanTag = exports.logToSpan = exports.createChildSpan = exports.tracingMiddleware = exports.startSpan = exports.getTracer = exports.initTracer = exports.register = exports.businessMetrics = exports.databaseQueriesTotal = exports.databaseQueryDuration = exports.httpRequestsTotal = exports.httpRequestDuration = exports.metricsMiddleware = exports.sendError = exports.sendSuccess = exports.createApiResponse = exports.correlationMiddleware = exports.generateCorrelationId = exports.validate = exports.strictRateLimiter = exports.standardRateLimiter = exports.createRateLimiter = exports.securityHeaders = exports.simpleRequestLogger = exports.requestLoggerWithMetrics = exports.requestLogger = exports.errorHandler = exports.createCorsMiddleware = exports.authenticateToken = exports.TooManyRequestsError = exports.ConflictError = exports.NotFoundError = exports.ForbiddenError = exports.UnauthorizedError = exports.BadRequestError = exports.HttpError = exports.requireEnv = exports.disconnectDB = exports.connectDB = exports.metricsHandler = exports.healthLive = exports.healthCheck = exports.logger = exports.createBaseApp = void 0;
+// App bootstrap
+var createBaseApp_1 = require("./app/createBaseApp");
+Object.defineProperty(exports, "createBaseApp", { enumerable: true, get: function () { return createBaseApp_1.createBaseApp; } });
+// Logging
+var logger_1 = require("./logging/logger");
+Object.defineProperty(exports, "logger", { enumerable: true, get: function () { return __importDefault(logger_1).default; } });
+// Health checks
+var healthController_1 = require("./health/healthController");
+Object.defineProperty(exports, "healthCheck", { enumerable: true, get: function () { return healthController_1.healthCheck; } });
+Object.defineProperty(exports, "healthLive", { enumerable: true, get: function () { return healthController_1.healthLive; } });
+Object.defineProperty(exports, "metricsHandler", { enumerable: true, get: function () { return healthController_1.metricsHandler; } });
+// Database
+var connection_1 = require("./database/connection");
+Object.defineProperty(exports, "connectDB", { enumerable: true, get: function () { return connection_1.connectDB; } });
+Object.defineProperty(exports, "disconnectDB", { enumerable: true, get: function () { return connection_1.disconnectDB; } });
+// Config
+var env_1 = require("./config/env");
+Object.defineProperty(exports, "requireEnv", { enumerable: true, get: function () { return env_1.requireEnv; } });
+// Errors
+var HttpError_1 = require("./errors/HttpError");
+Object.defineProperty(exports, "HttpError", { enumerable: true, get: function () { return HttpError_1.HttpError; } });
+Object.defineProperty(exports, "BadRequestError", { enumerable: true, get: function () { return HttpError_1.BadRequestError; } });
+Object.defineProperty(exports, "UnauthorizedError", { enumerable: true, get: function () { return HttpError_1.UnauthorizedError; } });
+Object.defineProperty(exports, "ForbiddenError", { enumerable: true, get: function () { return HttpError_1.ForbiddenError; } });
+Object.defineProperty(exports, "NotFoundError", { enumerable: true, get: function () { return HttpError_1.NotFoundError; } });
+Object.defineProperty(exports, "ConflictError", { enumerable: true, get: function () { return HttpError_1.ConflictError; } });
+Object.defineProperty(exports, "TooManyRequestsError", { enumerable: true, get: function () { return HttpError_1.TooManyRequestsError; } });
+// Middleware
+var authMiddleware_1 = require("./middleware/authMiddleware");
+Object.defineProperty(exports, "authenticateToken", { enumerable: true, get: function () { return authMiddleware_1.authenticateToken; } });
+var corsMiddleware_1 = require("./middleware/corsMiddleware");
+Object.defineProperty(exports, "createCorsMiddleware", { enumerable: true, get: function () { return corsMiddleware_1.createCorsMiddleware; } });
+var errorHandler_1 = require("./middleware/errorHandler");
+Object.defineProperty(exports, "errorHandler", { enumerable: true, get: function () { return errorHandler_1.errorHandler; } });
+var requestLogger_1 = require("./middleware/requestLogger");
+Object.defineProperty(exports, "requestLogger", { enumerable: true, get: function () { return requestLogger_1.requestLogger; } });
+Object.defineProperty(exports, "requestLoggerWithMetrics", { enumerable: true, get: function () { return requestLogger_1.requestLoggerWithMetrics; } });
+Object.defineProperty(exports, "simpleRequestLogger", { enumerable: true, get: function () { return requestLogger_1.simpleRequestLogger; } });
+var security_1 = require("./middleware/security");
+Object.defineProperty(exports, "securityHeaders", { enumerable: true, get: function () { return security_1.securityHeaders; } });
+Object.defineProperty(exports, "createRateLimiter", { enumerable: true, get: function () { return security_1.createRateLimiter; } });
+Object.defineProperty(exports, "standardRateLimiter", { enumerable: true, get: function () { return security_1.standardRateLimiter; } });
+Object.defineProperty(exports, "strictRateLimiter", { enumerable: true, get: function () { return security_1.strictRateLimiter; } });
+var validate_1 = require("./middleware/validate");
+Object.defineProperty(exports, "validate", { enumerable: true, get: function () { return validate_1.validate; } });
+// Utils
+var correlation_1 = require("./utils/correlation");
+Object.defineProperty(exports, "generateCorrelationId", { enumerable: true, get: function () { return correlation_1.generateCorrelationId; } });
+Object.defineProperty(exports, "correlationMiddleware", { enumerable: true, get: function () { return correlation_1.correlationMiddleware; } });
+var response_1 = require("./utils/response");
+Object.defineProperty(exports, "createApiResponse", { enumerable: true, get: function () { return response_1.createApiResponse; } });
+Object.defineProperty(exports, "sendSuccess", { enumerable: true, get: function () { return response_1.sendSuccess; } });
+Object.defineProperty(exports, "sendError", { enumerable: true, get: function () { return response_1.sendError; } });
+// Metrics
+var metrics_1 = require("./metrics");
+Object.defineProperty(exports, "metricsMiddleware", { enumerable: true, get: function () { return metrics_1.metricsMiddleware; } });
+Object.defineProperty(exports, "httpRequestDuration", { enumerable: true, get: function () { return metrics_1.httpRequestDuration; } });
+Object.defineProperty(exports, "httpRequestsTotal", { enumerable: true, get: function () { return metrics_1.httpRequestsTotal; } });
+Object.defineProperty(exports, "databaseQueryDuration", { enumerable: true, get: function () { return metrics_1.databaseQueryDuration; } });
+Object.defineProperty(exports, "databaseQueriesTotal", { enumerable: true, get: function () { return metrics_1.databaseQueriesTotal; } });
+Object.defineProperty(exports, "businessMetrics", { enumerable: true, get: function () { return metrics_1.businessMetrics; } });
+Object.defineProperty(exports, "register", { enumerable: true, get: function () { return metrics_1.register; } });
+// Tracing
+var tracing_1 = require("./tracing");
+Object.defineProperty(exports, "initTracer", { enumerable: true, get: function () { return tracing_1.initTracer; } });
+Object.defineProperty(exports, "getTracer", { enumerable: true, get: function () { return tracing_1.getTracer; } });
+Object.defineProperty(exports, "startSpan", { enumerable: true, get: function () { return tracing_1.startSpan; } });
+Object.defineProperty(exports, "tracingMiddleware", { enumerable: true, get: function () { return tracing_1.tracingMiddleware; } });
+Object.defineProperty(exports, "createChildSpan", { enumerable: true, get: function () { return tracing_1.createChildSpan; } });
+Object.defineProperty(exports, "logToSpan", { enumerable: true, get: function () { return tracing_1.logToSpan; } });
+Object.defineProperty(exports, "setSpanTag", { enumerable: true, get: function () { return tracing_1.setSpanTag; } });
+Object.defineProperty(exports, "injectHeaders", { enumerable: true, get: function () { return tracing_1.injectHeaders; } });
+Object.defineProperty(exports, "extractSpanContext", { enumerable: true, get: function () { return tracing_1.extractSpanContext; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,qFAAqF;;;;;;AAErF,gBAAgB;AAChB,qDAAoD;AAA3C,8GAAA,aAAa,OAAA;AAGtB,UAAU;AACV,2CAAqD;AAA5C,iHAAA,OAAO,OAAU;AAE1B,gBAAgB;AAChB,8DAAoF;AAA3E,+GAAA,WAAW,OAAA;AAAE,8GAAA,UAAU,OAAA;AAAE,kHAAA,cAAc,OAAA;AAEhD,WAAW;AACX,oDAAgE;AAAvD,uGAAA,SAAS,OAAA;AAAE,0GAAA,YAAY,OAAA;AAEhC,SAAS;AACT,oCAA0C;AAAjC,iGAAA,UAAU,OAAA;AAEnB,SAAS;AACT,gDAAuJ;AAA9I,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAAE,2GAAA,cAAc,OAAA;AAAE,0GAAA,aAAa,OAAA;AAAE,0GAAA,aAAa,OAAA;AAAE,iHAAA,oBAAoB,OAAA;AAE1H,aAAa;AACb,8DAAgE;AAAvD,mHAAA,iBAAiB,OAAA;AAC1B,8DAAmE;AAA1D,sHAAA,oBAAoB,OAAA;AAC7B,0DAAyD;AAAhD,4GAAA,YAAY,OAAA;AACrB,4DAA0G;AAAjG,8GAAA,aAAa,OAAA;AAAE,yHAAA,wBAAwB,OAAA;AAAE,oHAAA,mBAAmB,OAAA;AACrE,kDAAmH;AAA1G,2GAAA,eAAe,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAAE,+GAAA,mBAAmB,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AACnF,kDAAiD;AAAxC,oGAAA,QAAQ,OAAA;AAKjB,QAAQ;AACR,mDAAmF;AAA1E,oHAAA,qBAAqB,OAAA;AAAE,oHAAA,qBAAqB,OAAA;AACrD,6CAA6E;AAApE,6GAAA,iBAAiB,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,qGAAA,SAAS,OAAA;AAGlD,UAAU;AACV,qCAQmB;AAPjB,4GAAA,iBAAiB,OAAA;AACjB,8GAAA,mBAAmB,OAAA;AACnB,4GAAA,iBAAiB,OAAA;AACjB,gHAAA,qBAAqB,OAAA;AACrB,+GAAA,oBAAoB,OAAA;AACpB,0GAAA,eAAe,OAAA;AACf,mGAAA,QAAQ,OAAA;AAGV,UAAU;AACV,qCAUmB;AATjB,qGAAA,UAAU,OAAA;AACV,oGAAA,SAAS,OAAA;AACT,oGAAA,SAAS,OAAA;AACT,4GAAA,iBAAiB,OAAA;AACjB,0GAAA,eAAe,OAAA;AACf,oGAAA,SAAS,OAAA;AACT,qGAAA,UAAU,OAAA;AACV,wGAAA,aAAa,OAAA;AACb,6GAAA,kBAAkB,OAAA"}

package/dist/logging/logger.d.ts

@@ -0,0 +1,4 @@
+import winston from 'winston';
+declare const logger: winston.Logger;
+export default logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logging/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/logging/logger.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AA8E9B,QAAA,MAAM,MAAM,gBAsBV,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/logging/logger.js

@@ -0,0 +1,78 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const winston_1 = __importDefault(require("winston"));
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+// Define log levels
+const levels = {
+    error: 0,
+    warn: 1,
+    info: 2,
+    http: 3,
+    debug: 4,
+};
+const level = () => {
+    const env = process.env.NODE_ENV || 'development';
+    const isDevelopment = env === 'development';
+    return isDevelopment ? 'debug' : 'info';
+};
+// Define colors for each level
+const colors = {
+    error: 'red',
+    warn: 'yellow',
+    info: 'green',
+    http: 'magenta',
+    debug: 'white',
+};
+winston_1.default.addColors(colors);
+// Define format for console (human-readable)
+const consoleFormat = winston_1.default.format.combine(winston_1.default.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss:ms' }), winston_1.default.format.colorize({ all: true }), winston_1.default.format.printf((info) => `${info.timestamp} ${info.level}: ${info.message}`));
+// Define JSON format for production (structured logging)
+const jsonFormat = winston_1.default.format.combine(winston_1.default.format.timestamp(), winston_1.default.format.errors({ stack: true }), winston_1.default.format.json());
+// Choose format based on environment
+const isProduction = process.env.NODE_ENV === 'production';
+const logFormat = isProduction ? jsonFormat : consoleFormat;
+// Define which transports the logger must use
+const transports = [
+    // Console transport (goes to Docker stdout/stderr)
+    new winston_1.default.transports.Console({
+        format: logFormat,
+        level: level()
+    }),
+];
+// Add file transport only in development (optional)
+if (!isProduction && process.env.LOG_TO_FILE === 'true') {
+    // Create logs directory if it doesn't exist
+    const logsDir = path_1.default.join(process.cwd(), 'logs');
+    if (!fs_1.default.existsSync(logsDir)) {
+        fs_1.default.mkdirSync(logsDir, { recursive: true });
+    }
+    transports.push(new winston_1.default.transports.File({
+        filename: path_1.default.join(logsDir, 'app.log'),
+        format: jsonFormat,
+        level: 'debug'
+    }));
+}
+// Create the logger instance
+const logger = winston_1.default.createLogger({
+    level: level(),
+    levels,
+    format: logFormat,
+    transports,
+    // Handle exceptions and rejections
+    exceptionHandlers: [
+        new winston_1.default.transports.Console({
+            format: winston_1.default.format.combine(winston_1.default.format.colorize(), winston_1.default.format.simple())
+        })
+    ],
+    rejectionHandlers: [
+        new winston_1.default.transports.Console({
+            format: winston_1.default.format.combine(winston_1.default.format.colorize(), winston_1.default.format.simple())
+        })
+    ]
+});
+exports.default = logger;
+//# sourceMappingURL=logger.js.map

package/dist/logging/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logging/logger.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,gDAAwB;AACxB,4CAAoB;AAEpB,oBAAoB;AACpB,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,KAAK,GAAG,GAAG,EAAE;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;IAClD,MAAM,aAAa,GAAG,GAAG,KAAK,aAAa,CAAC;IAC5C,OAAO,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC,CAAC;AAEF,+BAA+B;AAC/B,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,iBAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAE1B,6CAA6C;AAC7C,MAAM,aAAa,GAAG,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC1C,iBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,EAC9D,iBAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EACtC,iBAAO,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC,IAAS,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,CAClE,CACF,CAAC;AAEF,yDAAyD;AACzD,MAAM,UAAU,GAAG,iBAAO,CAAC,MAAM,CAAC,OAAO,CACvC,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,iBAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACtC,iBAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB,CAAC;AAEF,qCAAqC;AACrC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;AAE5D,8CAA8C;AAC9C,MAAM,UAAU,GAAwB;IACtC,mDAAmD;IACnD,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,KAAK,EAAE;KACf,CAAC;CACH,CAAC;AAEF,oDAAoD;AACpD,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;IAExD,4CAA4C;IAC5C,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,YAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,UAAU,CAAC,IAAI,CACb,IAAI,iBAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1B,QAAQ,EAAE,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QACvC,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,OAAO;KACf,CAAC,CACH,CAAC;AACJ,CAAC;AAED,6BAA6B;AAC7B,MAAM,MAAM,GAAG,iBAAO,CAAC,YAAY,CAAC;IAClC,KAAK,EAAE,KAAK,EAAE;IACd,MAAM;IACN,MAAM,EAAE,SAAS;IACjB,UAAU;IACV,mCAAmC;IACnC,iBAAiB,EAAE;QACjB,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,iBAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EACzB,iBAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CACxB;SACF,CAAC;KACH;IACD,iBAAiB,EAAE;QACjB,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,iBAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EACzB,iBAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CACxB;SACF,CAAC;KACH;CACF,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/dist/metrics/index.d.ts

@@ -0,0 +1,17 @@
+import promClient from 'prom-client';
+declare const register: promClient.Registry<"text/plain; version=0.0.4; charset=utf-8">;
+export declare const httpRequestDuration: promClient.Histogram<"route" | "method" | "status_code">;
+export declare const httpRequestsTotal: promClient.Counter<"route" | "method" | "status_code">;
+export declare const activeConnections: promClient.Gauge<string>;
+export declare const databaseQueryDuration: promClient.Histogram<"operation" | "collection">;
+export declare const databaseQueriesTotal: promClient.Counter<"operation" | "collection" | "status">;
+export declare const businessMetrics: {
+    albumsCreated: promClient.Counter<string>;
+    filesUploaded: promClient.Counter<"file_type">;
+    usersRegistered: promClient.Counter<string>;
+    paymentsProcessed: promClient.Counter<"method" | "status">;
+};
+export declare const metricsHandler: (req: any, res: any) => Promise<void>;
+export declare const metricsMiddleware: (req: any, res: any, next: any) => void;
+export { register };
+//# sourceMappingURL=index.d.ts.map

package/dist/metrics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/metrics/index.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,aAAa,CAAC;AAGrC,QAAA,MAAM,QAAQ,iEAA4B,CAAC;AAY3C,eAAO,MAAM,mBAAmB,0DAK9B,CAAC;AAEH,eAAO,MAAM,iBAAiB,wDAI5B,CAAC;AAEH,eAAO,MAAM,iBAAiB,0BAG5B,CAAC;AAEH,eAAO,MAAM,qBAAqB,kDAKhC,CAAC;AAEH,eAAO,MAAM,oBAAoB,2DAI/B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;CAsB3B,CAAC;AAGF,eAAO,MAAM,cAAc,GAAU,KAAK,GAAG,EAAE,KAAK,GAAG,kBAQtD,CAAC;AAGF,eAAO,MAAM,iBAAiB,GAAI,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SAyB9D,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/metrics/index.js

@@ -0,0 +1,99 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.register = exports.metricsMiddleware = exports.metricsHandler = exports.businessMetrics = exports.databaseQueriesTotal = exports.databaseQueryDuration = exports.activeConnections = exports.httpRequestsTotal = exports.httpRequestDuration = void 0;
+const prom_client_1 = __importDefault(require("prom-client"));
+// Create a Registry which registers the metrics
+const register = new prom_client_1.default.Registry();
+exports.register = register;
+// Add a default label which is added to all metrics
+register.setDefaultLabels({
+    app: process.env.SERVICE_NAME || 'unknown-service',
+    version: process.env.npm_package_version || '1.0.0'
+});
+// Enable the collection of default metrics
+prom_client_1.default.collectDefaultMetrics({ register });
+// Custom metrics
+exports.httpRequestDuration = new prom_client_1.default.Histogram({
+    name: 'http_request_duration_seconds',
+    help: 'Duration of HTTP requests in seconds',
+    labelNames: ['method', 'route', 'status_code'],
+    buckets: [0.1, 0.5, 1, 2, 5, 10]
+});
+exports.httpRequestsTotal = new prom_client_1.default.Counter({
+    name: 'http_requests_total',
+    help: 'Total number of HTTP requests',
+    labelNames: ['method', 'route', 'status_code']
+});
+exports.activeConnections = new prom_client_1.default.Gauge({
+    name: 'active_connections',
+    help: 'Number of active connections'
+});
+exports.databaseQueryDuration = new prom_client_1.default.Histogram({
+    name: 'database_query_duration_seconds',
+    help: 'Duration of database queries in seconds',
+    labelNames: ['operation', 'collection'],
+    buckets: [0.01, 0.05, 0.1, 0.5, 1, 2, 5]
+});
+exports.databaseQueriesTotal = new prom_client_1.default.Counter({
+    name: 'database_queries_total',
+    help: 'Total number of database queries',
+    labelNames: ['operation', 'collection', 'status']
+});
+exports.businessMetrics = {
+    albumsCreated: new prom_client_1.default.Counter({
+        name: 'albums_created_total',
+        help: 'Total number of albums created'
+    }),
+    filesUploaded: new prom_client_1.default.Counter({
+        name: 'files_uploaded_total',
+        help: 'Total number of files uploaded',
+        labelNames: ['file_type']
+    }),
+    usersRegistered: new prom_client_1.default.Counter({
+        name: 'users_registered_total',
+        help: 'Total number of users registered'
+    }),
+    paymentsProcessed: new prom_client_1.default.Counter({
+        name: 'payments_processed_total',
+        help: 'Total number of payments processed',
+        labelNames: ['status', 'method']
+    })
+};
+// Metrics endpoint handler
+const metricsHandler = async (req, res) => {
+    try {
+        res.set('Content-Type', register.contentType);
+        const metrics = await register.metrics();
+        res.end(metrics);
+    }
+    catch (error) {
+        res.status(500).end('Error generating metrics');
+    }
+};
+exports.metricsHandler = metricsHandler;
+// Middleware to collect HTTP metrics
+const metricsMiddleware = (req, res, next) => {
+    const start = Date.now();
+    const { method, url } = req;
+    // Increment active connections
+    exports.activeConnections.inc();
+    res.on('finish', () => {
+        const duration = (Date.now() - start) / 1000; // Convert to seconds
+        const { statusCode } = res;
+        // Record metrics
+        exports.httpRequestDuration
+            .labels(method, url, statusCode.toString())
+            .observe(duration);
+        exports.httpRequestsTotal
+            .labels(method, url, statusCode.toString())
+            .inc();
+        // Decrement active connections
+        exports.activeConnections.dec();
+    });
+    next();
+};
+exports.metricsMiddleware = metricsMiddleware;
+//# sourceMappingURL=index.js.map

package/dist/metrics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/metrics/index.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAqC;AAErC,gDAAgD;AAChD,MAAM,QAAQ,GAAG,IAAI,qBAAU,CAAC,QAAQ,EAAE,CAAC;AA0GlC,4BAAQ;AAxGjB,oDAAoD;AACpD,QAAQ,CAAC,gBAAgB,CAAC;IACxB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,iBAAiB;IAClD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO;CACpD,CAAC,CAAC;AAEH,2CAA2C;AAC3C,qBAAU,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE/C,iBAAiB;AACJ,QAAA,mBAAmB,GAAG,IAAI,qBAAU,CAAC,SAAS,CAAC;IAC1D,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,sCAAsC;IAC5C,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC;IAC9C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CACjC,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,IAAI,qBAAU,CAAC,OAAO,CAAC;IACtD,IAAI,EAAE,qBAAqB;IAC3B,IAAI,EAAE,+BAA+B;IACrC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC;CAC/C,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,IAAI,qBAAU,CAAC,KAAK,CAAC;IACpD,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,8BAA8B;CACrC,CAAC,CAAC;AAEU,QAAA,qBAAqB,GAAG,IAAI,qBAAU,CAAC,SAAS,CAAC;IAC5D,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,yCAAyC;IAC/C,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACvC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CACzC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,IAAI,qBAAU,CAAC,OAAO,CAAC;IACzD,IAAI,EAAE,wBAAwB;IAC9B,IAAI,EAAE,kCAAkC;IACxC,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC;CAClD,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG;IAC7B,aAAa,EAAE,IAAI,qBAAU,CAAC,OAAO,CAAC;QACpC,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,gCAAgC;KACvC,CAAC;IAEF,aAAa,EAAE,IAAI,qBAAU,CAAC,OAAO,CAAC;QACpC,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,gCAAgC;QACtC,UAAU,EAAE,CAAC,WAAW,CAAC;KAC1B,CAAC;IAEF,eAAe,EAAE,IAAI,qBAAU,CAAC,OAAO,CAAC;QACtC,IAAI,EAAE,wBAAwB;QAC9B,IAAI,EAAE,kCAAkC;KACzC,CAAC;IAEF,iBAAiB,EAAE,IAAI,qBAAU,CAAC,OAAO,CAAC;QACxC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,oCAAoC;QAC1C,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,2BAA2B;AACpB,MAAM,cAAc,GAAG,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC;AARW,QAAA,cAAc,kBAQzB;AAEF,qCAAqC;AAC9B,MAAM,iBAAiB,GAAG,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAE5B,+BAA+B;IAC/B,yBAAiB,CAAC,GAAG,EAAE,CAAC;IAExB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,qBAAqB;QACnE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAE3B,iBAAiB;QACjB,2BAAmB;aAChB,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;aAC1C,OAAO,CAAC,QAAQ,CAAC,CAAC;QAErB,yBAAiB;aACd,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;aAC1C,GAAG,EAAE,CAAC;QAET,+BAA+B;QAC/B,yBAAiB,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAzBW,QAAA,iBAAiB,qBAyB5B"}

package/dist/middleware/authMiddleware.d.ts

@@ -0,0 +1,9 @@
+import { Request, Response, NextFunction } from 'express';
+/**
+ * JWT authentication middleware
+ * Verifies JWT token and attaches user info (and its embedded groups) to
+ * the request — typed via the global `Express.Request` augmentation in
+ * `../types/auth`, no `(req as any)` cast needed.
+ */
+export declare function authenticateToken(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=authMiddleware.d.ts.map

package/dist/middleware/authMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.d.ts","sourceRoot":"","sources":["../../src/middleware/authMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAiBvF"}

package/dist/middleware/authMiddleware.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateToken = authenticateToken;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const env_1 = require("../config/env");
+/**
+ * JWT authentication middleware
+ * Verifies JWT token and attaches user info (and its embedded groups) to
+ * the request — typed via the global `Express.Request` augmentation in
+ * `../types/auth`, no `(req as any)` cast needed.
+ */
+function authenticateToken(req, res, next) {
+    try {
+        const JWT_SECRET = (0, env_1.requireEnv)('JWT_SECRET');
+        const token = req.cookies?.access_token || req.headers.authorization?.replace('Bearer ', '');
+        if (!token) {
+            res.status(401).json({ success: false, message: 'Access token required' });
+            return;
+        }
+        const user = jsonwebtoken_1.default.verify(token, JWT_SECRET);
+        req.user = user;
+        req.userGroups = user.groups ?? [];
+        next();
+    }
+    catch (error) {
+        res.status(401).json({ success: false, message: 'Invalid or expired token' });
+    }
+}
+//# sourceMappingURL=authMiddleware.js.map

package/dist/middleware/authMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMiddleware.js","sourceRoot":"","sources":["../../src/middleware/authMiddleware.ts"],"names":[],"mappings":";;;;;AAWA,8CAiBC;AA3BD,gEAA+B;AAC/B,uCAA2C;AAG3C;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC/E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAA,gBAAU,EAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAE7F,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAgB,CAAC;QAC1D,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/middleware/corsMiddleware.d.ts

@@ -0,0 +1,20 @@
+import cors from 'cors';
+export interface CorsMiddlewareOptions {
+    /**
+     * Comma-separated origin whitelist. Defaults to process.env.CORS_ORIGIN,
+     * read per-request so it works regardless of dotenv.config() timing.
+     */
+    origins?: string;
+    exposedHeaders?: string[];
+}
+/**
+ * Shared CORS middleware with an explicit origin whitelist.
+ * Requests without an Origin header (server-to-server, curl, health checks)
+ * are always allowed; browser requests must match the whitelist.
+ */
+export declare function createCorsMiddleware(options?: CorsMiddlewareOptions): (req: cors.CorsRequest, res: {
+    statusCode?: number | undefined;
+    setHeader(key: string, value: string): any;
+    end(): any;
+}, next: (err?: any) => any) => void;
+//# sourceMappingURL=corsMiddleware.d.ts.map

package/dist/middleware/corsMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"corsMiddleware.d.ts","sourceRoot":"","sources":["../../src/middleware/corsMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B;cAmBiE,CAAC;;;aAAmH,CAAC,uBAD7P"}

package/dist/middleware/corsMiddleware.js

@@ -0,0 +1,33 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCorsMiddleware = createCorsMiddleware;
+const cors_1 = __importDefault(require("cors"));
+const logger_1 = __importDefault(require("../logging/logger"));
+/**
+ * Shared CORS middleware with an explicit origin whitelist.
+ * Requests without an Origin header (server-to-server, curl, health checks)
+ * are always allowed; browser requests must match the whitelist.
+ */
+function createCorsMiddleware(options = {}) {
+    return (0, cors_1.default)({
+        origin: (origin, callback) => {
+            const allowedOrigins = (options.origins ?? process.env.CORS_ORIGIN ?? '')
+                .split(',')
+                .map(o => o.trim())
+                .filter(Boolean);
+            if (!origin || allowedOrigins.includes(origin)) {
+                return callback(null, true);
+            }
+            logger_1.default.warn('Blocked CORS origin', { origin });
+            return callback(new Error('Not allowed by CORS: ' + origin));
+        },
+        credentials: true,
+        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+        allowedHeaders: ['Content-Type', 'Authorization', 'X-Requested-With', 'x-correlation-id', 'x-session-id'],
+        exposedHeaders: options.exposedHeaders
+    });
+}
+//# sourceMappingURL=corsMiddleware.js.map

package/dist/middleware/corsMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corsMiddleware.js","sourceRoot":"","sources":["../../src/middleware/corsMiddleware.ts"],"names":[],"mappings":";;;;;AAiBA,oDAkBC;AAnCD,gDAAwB;AACxB,+DAAuC;AAWvC;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,UAAiC,EAAE;IACtE,OAAO,IAAA,cAAI,EAAC;QACV,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;iBACtE,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBAClB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,gBAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,uBAAuB,GAAG,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACpD,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,CAAC;QACzG,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/errorHandler.d.ts

@@ -0,0 +1,14 @@
+import { ErrorRequestHandler } from 'express';
+/**
+ * Global error handler middleware.
+ *
+ * Controllers throw a typed `HttpError` (BadRequestError, NotFoundError,
+ * ForbiddenError, ...) instead of hand-rolling try/catch + string-matching
+ * on `error.message` to pick a status code — Express 5 forwards rejected
+ * promises from async route handlers here automatically. Anything that
+ * isn't a recognized error type is treated as an unexpected bug: logged
+ * with its full stack and returned as a generic 500 (no message leak
+ * outside development), same as before this file knew about HttpError.
+ */
+export declare const errorHandler: ErrorRequestHandler;
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/middleware/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,mBAAmB,EAAE,MAAM,SAAS,CAAC;AA4B/E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,mBA0D1B,CAAC"}

package/dist/middleware/errorHandler.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorHandler = void 0;
+const logger_1 = __importDefault(require("../logging/logger"));
+const HttpError_1 = require("../errors/HttpError");
+/**
+ * Recognizes error shapes that map to an obvious HTTP status without a
+ * controller having to catch and re-throw them: our own typed HttpError
+ * hierarchy, plus Mongoose's ValidationError (failed schema validation,
+ * e.g. a missing required field) and CastError (e.g. an invalid ObjectId
+ * string) — both of which are client mistakes, not server bugs, but throw
+ * as plain Mongoose error classes rather than anything of ours.
+ */
+function classifyError(error) {
+    if (error instanceof HttpError_1.HttpError) {
+        return { statusCode: error.statusCode, name: error.name, message: error.message };
+    }
+    if (error.name === 'ValidationError' || error.name === 'CastError') {
+        return { statusCode: 400, name: error.name, message: error.message };
+    }
+    return null;
+}
+/**
+ * Global error handler middleware.
+ *
+ * Controllers throw a typed `HttpError` (BadRequestError, NotFoundError,
+ * ForbiddenError, ...) instead of hand-rolling try/catch + string-matching
+ * on `error.message` to pick a status code — Express 5 forwards rejected
+ * promises from async route handlers here automatically. Anything that
+ * isn't a recognized error type is treated as an unexpected bug: logged
+ * with its full stack and returned as a generic 500 (no message leak
+ * outside development), same as before this file knew about HttpError.
+ */
+const errorHandler = (error, req, res, _next) => {
+    const known = classifyError(error);
+    if (known) {
+        // Client errors (4xx) are routine, expected control flow — log without
+        // a stack trace at warn level, not as if the service were broken.
+        logger_1.default.warn('Request failed:', {
+            error: known.message,
+            statusCode: known.statusCode,
+            url: req.url,
+            method: req.method,
+            correlationId: req.correlationId
+        });
+    }
+    else {
+        logger_1.default.error('Unhandled error:', {
+            error: error.message,
+            stack: error.stack,
+            url: req.url,
+            method: req.method,
+            ip: req.ip,
+            userAgent: req.get('User-Agent'),
+            correlationId: req.correlationId
+        });
+    }
+    // Add CORS headers to error responses
+    const origin = req.headers.origin;
+    if (origin && (origin.includes('localhost') || origin.includes('tumbaland.eu'))) {
+        res.header('Access-Control-Allow-Origin', origin);
+        res.header('Access-Control-Allow-Credentials', 'true');
+        res.header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+        res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-Requested-With, x-correlation-id, x-session-id');
+    }
+    if (known) {
+        res.status(known.statusCode).json({
+            success: false,
+            error: known.name,
+            message: known.message
+        });
+        return;
+    }
+    // Don't leak error details in production for unexpected errors
+    const isDevelopment = process.env.NODE_ENV === 'development';
+    const errorMessage = isDevelopment ? error.message : 'Something went wrong';
+    res.status(500).json({
+        success: false,
+        error: 'Internal server error',
+        message: errorMessage,
+        ...(isDevelopment && { stack: error.stack })
+    });
+};
+exports.errorHandler = errorHandler;
+//# sourceMappingURL=errorHandler.js.map

package/dist/middleware/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":";;;;;;AACA,+DAAuC;AACvC,mDAAgD;AAQhD;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,KAAY;IACjC,IAAI,KAAK,YAAY,qBAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACI,MAAM,YAAY,GAAwB,CAC/C,KAAY,EACZ,GAAY,EACZ,GAAa,EACb,KAAmB,EACb,EAAE;IACR,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,KAAK,EAAE,CAAC;QACV,uEAAuE;QACvE,kEAAkE;QAClE,gBAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC7B,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,aAAa,EAAG,GAAW,CAAC,aAAa;SAC1C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,gBAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YAC/B,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,aAAa,EAAG,GAAW,CAAC,aAAa;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,sCAAsC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,iCAAiC,CAAC,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,+EAA+E,CAAC,CAAC;IAC9H,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAChC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;IAC7D,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAE5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,YAAY;QACrB,GAAG,CAAC,aAAa,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC,CAAC;AA1DW,QAAA,YAAY,gBA0DvB"}

package/dist/middleware/requestLogger.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Morgan middleware configured to use Winston logger
+ * Logs HTTP requests in structured format
+ */
+export declare const requestLogger: (req: import("node:http").IncomingMessage, res: import("node:http").ServerResponse<import("node:http").IncomingMessage>, callback: (err?: Error) => void) => void;
+/**
+ * Combined middleware that includes both logging and metrics
+ * Use this instead of separate requestLogger and metricsMiddleware
+ */
+export declare const requestLoggerWithMetrics: ((req: import("node:http").IncomingMessage, res: import("node:http").ServerResponse<import("node:http").IncomingMessage>, callback: (err?: Error) => void) => void)[];
+/**
+ * Simple request logger for development
+ * Logs basic request info with correlation ID
+ */
+export declare const simpleRequestLogger: (req: any, res: any, next: any) => void;
+//# sourceMappingURL=requestLogger.d.ts.map

package/dist/middleware/requestLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestLogger.d.ts","sourceRoot":"","sources":["../../src/middleware/requestLogger.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,eAAO,MAAM,aAAa,yIAFU,CAAC,yBAQnC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,wBAAwB,0IAdD,CAAC,4BAcqC,CAAC;AAE3E;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SAoBhE,CAAC"}

package/dist/middleware/requestLogger.js

@@ -0,0 +1,49 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.simpleRequestLogger = exports.requestLoggerWithMetrics = exports.requestLogger = void 0;
+const morgan_1 = __importDefault(require("morgan"));
+const logger_1 = __importDefault(require("../logging/logger"));
+const metrics_1 = require("../metrics");
+/**
+ * Morgan middleware configured to use Winston logger
+ * Logs HTTP requests in structured format
+ */
+exports.requestLogger = (0, morgan_1.default)('combined', {
+    stream: {
+        write: (message) => {
+            logger_1.default.http(message.trim());
+        }
+    }
+});
+/**
+ * Combined middleware that includes both logging and metrics
+ * Use this instead of separate requestLogger and metricsMiddleware
+ */
+exports.requestLoggerWithMetrics = [exports.requestLogger, metrics_1.metricsMiddleware];
+/**
+ * Simple request logger for development
+ * Logs basic request info with correlation ID
+ */
+const simpleRequestLogger = (req, res, next) => {
+    const start = Date.now();
+    const correlationId = req.correlationId || 'unknown';
+    logger_1.default.info(`→ ${req.method} ${req.url}`, {
+        correlationId,
+        ip: req.ip,
+        userAgent: req.get('User-Agent')
+    });
+    res.on('finish', () => {
+        const duration = Date.now() - start;
+        logger_1.default.info(`← ${req.method} ${req.url} ${res.statusCode} ${duration}ms`, {
+            correlationId,
+            statusCode: res.statusCode,
+            duration
+        });
+    });
+    next();
+};
+exports.simpleRequestLogger = simpleRequestLogger;
+//# sourceMappingURL=requestLogger.js.map

package/dist/middleware/requestLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestLogger.js","sourceRoot":"","sources":["../../src/middleware/requestLogger.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,+DAAuC;AACvC,wCAA+C;AAE/C;;;GAGG;AACU,QAAA,aAAa,GAAG,IAAA,gBAAM,EAAC,UAAU,EAAE;IAC9C,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE;YACzB,gBAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;KACF;CACF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,wBAAwB,GAAG,CAAC,qBAAa,EAAE,2BAAiB,CAAC,CAAC;AAE3E;;;GAGG;AACI,MAAM,mBAAmB,GAAG,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IAErD,gBAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE;QACxC,aAAa;QACb,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;KACjC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,gBAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,IAAI,EAAE;YACxE,aAAa;YACb,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AApBW,QAAA,mBAAmB,uBAoB9B"}