@walkeros/server-source-express 0.0.0-next-20251219153324

package/README.md

@@ -0,0 +1,567 @@
+# @walkeros/server-source-express
+
+Express server source for walkerOS - turn-key HTTP event collection server with
+Express.js.
+
+## Installation
+
+```bash
+npm install @walkeros/server-source-express
+```
+
+## Quick Start
+
+### Standalone Server (Docker-style)
+
+```typescript
+import { startFlow } from '@walkeros/collector';
+import { sourceExpress } from '@walkeros/server-source-express';
+
+const { collector } = await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: 8080, // Start server on port 8080
+        },
+      },
+    },
+  },
+  destinations: {
+    // Your destinations here
+  },
+});
+
+// Server is now running!
+// POST http://localhost:8080/collect - JSON event ingestion
+// GET  http://localhost:8080/collect - Pixel tracking
+// GET  http://localhost:8080/health  - Health check
+```
+
+### App-Only Mode (Custom Integration)
+
+```typescript
+const { collector } = await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          // No port = app only, no server started
+          path: '/events',
+          cors: false, // Handle CORS with your own middleware
+        },
+      },
+    },
+  },
+});
+
+// Access the Express app
+const expressSource = collector.sources.express;
+const app = expressSource.app;
+
+// Add custom middleware
+app.use(yourAuthMiddleware);
+
+// Add custom routes
+app.get('/custom', customHandler);
+
+// Start server manually
+app.listen(3000);
+```
+
+## Configuration
+
+### Settings
+
+```typescript
+interface Settings {
+  /**
+   * HTTP server port to listen on
+   * If not provided, server will not start (app-only mode)
+   * @optional
+   */
+  port?: number;
+
+  /**
+   * Event collection endpoint path
+   * All HTTP methods (POST, GET, OPTIONS) registered on this path
+   * @default '/collect'
+   */
+  path?: string;
+
+  /**
+   * CORS configuration
+   * - false: Disabled
+   * - true: Allow all origins (default)
+   * - object: Custom CORS options
+   * @default true
+   */
+  cors?: boolean | CorsOptions;
+
+  /**
+   * Enable health check endpoints
+   * - GET /health (liveness check)
+   * - GET /ready (readiness check)
+   * @default true
+   */
+  status?: boolean;
+}
+```
+
+### CORS Options
+
+```typescript
+interface CorsOptions {
+  /** Allowed origins (string, array, or '*') */
+  origin?: string | string[] | '*';
+
+  /** Allowed HTTP methods */
+  methods?: string[];
+
+  /** Allowed request headers */
+  headers?: string[];
+
+  /** Allow credentials (cookies, authorization) */
+  credentials?: boolean;
+
+  /** Preflight cache duration in seconds */
+  maxAge?: number;
+}
+```
+
+## HTTP Methods
+
+### POST - Standard Event Ingestion
+
+Send events as JSON in the request body.
+
+**Request:**
+
+```bash
+curl -X POST http://localhost:8080/collect \
+  -H "Content-Type: application/json" \
+  -d '{
+    "event": "page view",
+    "data": {
+      "title": "Home Page",
+      "path": "/"
+    },
+    "user": {
+      "id": "user123"
+    }
+  }'
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "timestamp": 1647261462000
+}
+```
+
+### GET - Pixel Tracking
+
+Send events as query parameters. Returns a 1x1 transparent GIF.
+
+**Request:**
+
+```html
+<!-- In your HTML -->
+<img
+  src="http://localhost:8080/collect?event=page%20view&data[title]=Home&user[id]=user123"
+  width="1"
+  height="1"
+  alt=""
+/>
+```
+
+**Response:**
+
+```
+Content-Type: image/gif
+Cache-Control: no-cache, no-store, must-revalidate
+
+[1x1 transparent GIF binary]
+```
+
+### OPTIONS - CORS Preflight
+
+Automatically handled for cross-origin requests.
+
+**Request:**
+
+```bash
+curl -X OPTIONS http://localhost:8080/collect \
+  -H "Origin: https://example.com"
+```
+
+**Response:**
+
+```
+Access-Control-Allow-Origin: *
+Access-Control-Allow-Methods: GET, POST, OPTIONS
+Access-Control-Allow-Headers: Content-Type
+
+204 No Content
+```
+
+## Health Checks
+
+### GET /health - Liveness Check
+
+Returns server status (always returns 200 if server is running).
+
+**Response:**
+
+```json
+{
+  "status": "ok",
+  "timestamp": 1647261462000,
+  "source": "express"
+}
+```
+
+### GET /ready - Readiness Check
+
+Returns readiness status (same as health for Express source).
+
+**Response:**
+
+```json
+{
+  "status": "ready",
+  "timestamp": 1647261462000,
+  "source": "express"
+}
+```
+
+## Advanced Examples
+
+### Custom CORS Configuration
+
+```typescript
+await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: 8080,
+          cors: {
+            origin: ['https://app.example.com', 'https://admin.example.com'],
+            credentials: true,
+            methods: ['GET', 'POST', 'OPTIONS'],
+            headers: ['Content-Type', 'Authorization'],
+            maxAge: 86400, // 24 hours
+          },
+        },
+      },
+    },
+  },
+});
+```
+
+### Disable Health Checks
+
+```typescript
+await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: 8080,
+          status: false, // Disable /health and /ready endpoints
+        },
+      },
+    },
+  },
+});
+```
+
+### Custom Endpoint Path
+
+```typescript
+await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: 8080,
+          path: '/api/v1/events', // Custom path
+        },
+      },
+    },
+  },
+});
+
+// All methods now work on /api/v1/events
+// POST /api/v1/events
+// GET /api/v1/events
+// OPTIONS /api/v1/events
+```
+
+### Extend Express App
+
+```typescript
+const { collector } = await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: { port: 8080 },
+      },
+    },
+  },
+});
+
+// Access Express app for advanced customization
+const expressSource = collector.sources.express;
+const app = expressSource.app;
+
+// Add authentication middleware
+app.use('/collect', authMiddleware);
+
+// Add rate limiting
+import rateLimit from 'express-rate-limit';
+app.use(
+  '/collect',
+  rateLimit({
+    windowMs: 15 * 60 * 1000, // 15 minutes
+    max: 100, // Limit each IP to 100 requests per windowMs
+  }),
+);
+
+// Add custom logging
+app.use((req, res, next) => {
+  console.log(`${req.method} ${req.path}`);
+  next();
+});
+```
+
+## Event Format
+
+### Single Event
+
+```json
+{
+  "event": "page view",
+  "data": {
+    "title": "Home Page",
+    "path": "/"
+  },
+  "context": {
+    "language": ["en", 0],
+    "currency": ["USD", 0]
+  },
+  "user": {
+    "id": "user123",
+    "device": "device456"
+  },
+  "globals": {
+    "appVersion": "1.0.0"
+  },
+  "consent": {
+    "functional": true,
+    "marketing": true
+  }
+}
+```
+
+### Query Parameters (GET)
+
+For pixel tracking, use nested bracket notation:
+
+```
+?event=page%20view
+&data[title]=Home%20Page
+&data[path]=/
+&user[id]=user123
+&consent[marketing]=true
+```
+
+This is automatically parsed by `requestToData` from `@walkeros/core`.
+
+## Architecture
+
+### Infrastructure Ownership
+
+The Express source **owns its HTTP infrastructure**:
+
+- ✅ Creates Express application
+- ✅ Configures middleware (JSON parsing, CORS)
+- ✅ Registers routes (POST, GET, OPTIONS)
+- ✅ Starts HTTP server (if port configured)
+- ✅ Handles graceful shutdown (SIGTERM, SIGINT)
+
+This design enables:
+
+1. **Turn-key deployment** - Just specify a port and deploy
+2. **Docker-friendly** - Perfect for containerized environments
+3. **Flexibility** - App-only mode for custom integrations
+
+### Request Flow
+
+```
+┌─────────────────────────────────────────┐
+│ HTTP Client (Browser, Server, etc.)    │
+└─────────────────────────────────────────┘
+                 ↓
+┌─────────────────────────────────────────┐
+│ EXPRESS SOURCE                          │
+│ - Receives HTTP request                 │
+│ - Parses body/query params              │
+│ - Validates request structure           │
+│ - Calls env.push() → Collector          │
+│ - Returns HTTP response                 │
+└─────────────────────────────────────────┘
+                 ↓
+┌─────────────────────────────────────────┐
+│ COLLECTOR                               │
+│ - Event validation & processing         │
+│ - Consent management                    │
+│ - Mapping rules                         │
+│ - Routes to destinations                │
+└─────────────────────────────────────────┘
+```
+
+## Deployment
+
+### Docker
+
+```dockerfile
+FROM node:18-alpine
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm install
+
+COPY . .
+
+ENV PORT=8080
+EXPOSE 8080
+
+CMD ["node", "server.js"]
+```
+
+**server.js:**
+
+```javascript
+import { startFlow } from '@walkeros/collector';
+import { sourceExpress } from '@walkeros/server-source-express';
+
+await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: process.env.PORT || 8080,
+        },
+      },
+    },
+  },
+  // Your destinations...
+});
+```
+
+### Kubernetes
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: walkeros-collector
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: walkeros-collector
+  template:
+    metadata:
+      labels:
+        app: walkeros-collector
+    spec:
+      containers:
+        - name: collector
+          image: your-registry/walkeros-collector:latest
+          ports:
+            - containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 5
+          readinessProbe:
+            httpGet:
+              path: /ready
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 3
+```
+
+## Testing
+
+The package includes comprehensive tests using mocked Express Request/Response
+objects.
+
+**Run tests:**
+
+```bash
+npm test
+```
+
+**Example test:**
+
+```typescript
+import { sourceExpress } from '@walkeros/server-source-express';
+
+test('should process POST event', async () => {
+  const mockPush = jest.fn().mockResolvedValue({ event: { id: 'test' } });
+
+  const source = await sourceExpress(
+    {},
+    {
+      push: mockPush,
+      command: jest.fn(),
+      elb: jest.fn(),
+    },
+  );
+
+  const req = {
+    method: 'POST',
+    body: { event: 'page view', data: { title: 'Home' } },
+    headers: {},
+    get: () => undefined,
+  };
+  const res = {
+    status: jest.fn().returnThis(),
+    json: jest.fn(),
+    send: jest.fn(),
+    set: jest.fn(),
+  };
+
+  await source.push(req, res);
+
+  expect(res.status).toHaveBeenCalledWith(200);
+  expect(mockPush).toHaveBeenCalled();
+});
+```
+
+## License
+
+MIT
+
+## Links
+
+- [walkerOS Documentation](https://github.com/elbwalker/walkerOS)
+- [Express.js](https://expressjs.com/)
+- [GitHub Repository](https://github.com/elbwalker/walkerOS)
+- [Report Issues](https://github.com/elbwalker/walkerOS/issues)

package/dist/dev.d.mts

@@ -0,0 +1,79 @@
+import { z } from '@walkeros/core/dev';
+
+/**
+ * HTTP methods enum
+ */
+declare const HttpMethod: z.ZodEnum<{
+    GET: "GET";
+    POST: "POST";
+    PUT: "PUT";
+    PATCH: "PATCH";
+    DELETE: "DELETE";
+    OPTIONS: "OPTIONS";
+    HEAD: "HEAD";
+}>;
+/**
+ * CORS origin configuration
+ * Accepts:
+ * - '*' for all origins
+ * - Single URL string
+ * - Array of URL strings
+ */
+declare const CorsOrigin: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>;
+/**
+ * CORS options schema
+ * Configuration for Cross-Origin Resource Sharing
+ */
+declare const CorsOptionsSchema: z.ZodObject<{
+    origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        OPTIONS: "OPTIONS";
+        HEAD: "HEAD";
+    }>>>;
+    headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodBoolean>;
+    maxAge: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CorsOptions = z.infer<typeof CorsOptionsSchema>;
+
+/**
+ * Express source settings schema
+ */
+declare const SettingsSchema: z.ZodObject<{
+    port: z.ZodOptional<z.ZodNumber>;
+    path: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            OPTIONS: "OPTIONS";
+            HEAD: "HEAD";
+        }>>>;
+        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodBoolean>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>]>>;
+    status: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type Settings = z.infer<typeof SettingsSchema>;
+
+type index_CorsOptions = CorsOptions;
+declare const index_CorsOptionsSchema: typeof CorsOptionsSchema;
+declare const index_CorsOrigin: typeof CorsOrigin;
+declare const index_HttpMethod: typeof HttpMethod;
+type index_Settings = Settings;
+declare const index_SettingsSchema: typeof SettingsSchema;
+declare namespace index {
+  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema };
+}
+
+export { index as schemas };

package/dist/dev.d.ts

@@ -0,0 +1,79 @@
+import { z } from '@walkeros/core/dev';
+
+/**
+ * HTTP methods enum
+ */
+declare const HttpMethod: z.ZodEnum<{
+    GET: "GET";
+    POST: "POST";
+    PUT: "PUT";
+    PATCH: "PATCH";
+    DELETE: "DELETE";
+    OPTIONS: "OPTIONS";
+    HEAD: "HEAD";
+}>;
+/**
+ * CORS origin configuration
+ * Accepts:
+ * - '*' for all origins
+ * - Single URL string
+ * - Array of URL strings
+ */
+declare const CorsOrigin: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>;
+/**
+ * CORS options schema
+ * Configuration for Cross-Origin Resource Sharing
+ */
+declare const CorsOptionsSchema: z.ZodObject<{
+    origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        OPTIONS: "OPTIONS";
+        HEAD: "HEAD";
+    }>>>;
+    headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodBoolean>;
+    maxAge: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CorsOptions = z.infer<typeof CorsOptionsSchema>;
+
+/**
+ * Express source settings schema
+ */
+declare const SettingsSchema: z.ZodObject<{
+    port: z.ZodOptional<z.ZodNumber>;
+    path: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            OPTIONS: "OPTIONS";
+            HEAD: "HEAD";
+        }>>>;
+        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodBoolean>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>]>>;
+    status: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type Settings = z.infer<typeof SettingsSchema>;
+
+type index_CorsOptions = CorsOptions;
+declare const index_CorsOptionsSchema: typeof CorsOptionsSchema;
+declare const index_CorsOrigin: typeof CorsOrigin;
+declare const index_HttpMethod: typeof HttpMethod;
+type index_Settings = Settings;
+declare const index_SettingsSchema: typeof SettingsSchema;
+declare namespace index {
+  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema };
+}
+
+export { index as schemas };

package/dist/dev.js

@@ -0,0 +1 @@
+"use strict";var e,o=Object.defineProperty,r=Object.getOwnPropertyDescriptor,t=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,i=(e,r)=>{for(var t in r)o(e,t,{get:r[t],enumerable:!0})},n={};i(n,{schemas:()=>l}),module.exports=(e=n,((e,i,n,l)=>{if(i&&"object"==typeof i||"function"==typeof i)for(let s of t(i))a.call(e,s)||s===n||o(e,s,{get:()=>i[s],enumerable:!(l=r(i,s))||l.enumerable});return e})(o({},"__esModule",{value:!0}),e));var l={};i(l,{CorsOptionsSchema:()=>p,CorsOrigin:()=>d,HttpMethod:()=>c,SettingsSchema:()=>u});var s=require("@walkeros/core/dev"),c=s.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),d=s.z.union([s.z.string(),s.z.array(s.z.string()),s.z.literal("*")]),p=s.z.object({origin:d.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:s.z.array(c).describe("Allowed HTTP methods").optional(),headers:s.z.array(s.z.string()).describe("Allowed request headers").optional(),credentials:s.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:s.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),b=require("@walkeros/core/dev"),u=b.z.object({port:b.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:b.z.string().describe("Event collection endpoint path").default("/collect"),cors:b.z.union([b.z.boolean(),p]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:b.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});//# sourceMappingURL=dev.js.map

package/dist/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/dev.ts","../src/schemas/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts"],"sourcesContent":["export * as schemas from './schemas';\n","export * from './primitives';\nexport * from './settings';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,IAAAA,cAAkB;AAMX,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;","names":["import_dev"]}

package/dist/dev.mjs

@@ -0,0 +1 @@
+var e=Object.defineProperty,o={};((o,r)=>{for(var t in r)e(o,t,{get:r[t],enumerable:!0})})(o,{CorsOptionsSchema:()=>i,CorsOrigin:()=>a,HttpMethod:()=>t,SettingsSchema:()=>s});import{z as r}from"@walkeros/core/dev";var t=r.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),a=r.union([r.string(),r.array(r.string()),r.literal("*")]),i=r.object({origin:a.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:r.array(t).describe("Allowed HTTP methods").optional(),headers:r.array(r.string()).describe("Allowed request headers").optional(),credentials:r.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:r.number().int().positive().describe("Preflight cache duration in seconds").optional()});import{z as n}from"@walkeros/core/dev";var s=n.object({port:n.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:n.string().describe("Event collection endpoint path").default("/collect"),cors:n.union([n.boolean(),i]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:n.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});export{o as schemas};//# sourceMappingURL=dev.mjs.map

package/dist/dev.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schemas/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts"],"sourcesContent":["export * from './primitives';\nexport * from './settings';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n"],"mappings":";;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,SAAS,KAAAA,UAAS;AAMX,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;","names":["z","z"]}

package/dist/index.d.mts

@@ -0,0 +1,113 @@
+import { Source, WalkerOS } from '@walkeros/core';
+import { Request, Response, Application } from 'express';
+import { z } from '@walkeros/core/dev';
+
+/**
+ * CORS options schema
+ * Configuration for Cross-Origin Resource Sharing
+ */
+declare const CorsOptionsSchema: z.ZodObject<{
+    origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        OPTIONS: "OPTIONS";
+        HEAD: "HEAD";
+    }>>>;
+    headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodBoolean>;
+    maxAge: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CorsOptions = z.infer<typeof CorsOptionsSchema>;
+
+/**
+ * Express source settings schema
+ */
+declare const SettingsSchema: z.ZodObject<{
+    port: z.ZodOptional<z.ZodNumber>;
+    path: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            OPTIONS: "OPTIONS";
+            HEAD: "HEAD";
+        }>>>;
+        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodBoolean>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>]>>;
+    status: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+
+type Settings = z.infer<typeof SettingsSchema>;
+type InitSettings = Partial<Settings>;
+interface Mapping {
+}
+type Push = (req: Request, res: Response) => Promise<void>;
+interface Env extends Source.Env {
+    req?: Request;
+    res?: Response;
+}
+type Types = Source.Types<Settings, Mapping, Push, Env, InitSettings>;
+type Config = Source.Config<Types>;
+type PartialConfig = Source.PartialConfig<Types>;
+interface ExpressSource extends Omit<Source.Instance<Types>, 'push'> {
+    push: Push;
+    app: Application;
+    server?: ReturnType<Application['listen']>;
+}
+interface EventRequest {
+    event: string;
+    data?: WalkerOS.AnyObject;
+    context?: WalkerOS.AnyObject;
+    user?: WalkerOS.AnyObject;
+    globals?: WalkerOS.AnyObject;
+    consent?: WalkerOS.AnyObject;
+}
+interface EventResponse {
+    success: boolean;
+    id?: string;
+    timestamp?: number;
+    error?: string;
+}
+type RequestBody = EventRequest;
+type ResponseBody = EventResponse;
+
+/**
+ * Set CORS headers on response
+ *
+ * @param res Express response object
+ * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)
+ */
+declare function setCorsHeaders(res: Response, corsConfig?: boolean | CorsOptions): void;
+/**
+ * 1x1 transparent GIF for pixel tracking
+ * Base64-encoded GIF (43 bytes)
+ */
+declare const TRANSPARENT_GIF: Buffer<ArrayBuffer>;
+
+/**
+ * Express source initialization
+ *
+ * This source OWNS its HTTP server infrastructure:
+ * - Creates Express application
+ * - Sets up middleware (JSON parsing, CORS)
+ * - Registers event collection endpoints (POST, GET, OPTIONS)
+ * - Starts HTTP server (if port configured)
+ * - Handles graceful shutdown
+ *
+ * @param config Partial source configuration
+ * @param env Source environment with push, command, elb functions
+ * @returns Express source instance with app and push handler
+ */
+declare const sourceExpress: (config: PartialConfig, env: Types["env"]) => Promise<ExpressSource>;
+
+export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type Settings, TRANSPARENT_GIF, type Types, setCorsHeaders, sourceExpress };

package/dist/index.d.ts

@@ -0,0 +1,113 @@
+import { Source, WalkerOS } from '@walkeros/core';
+import { Request, Response, Application } from 'express';
+import { z } from '@walkeros/core/dev';
+
+/**
+ * CORS options schema
+ * Configuration for Cross-Origin Resource Sharing
+ */
+declare const CorsOptionsSchema: z.ZodObject<{
+    origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        OPTIONS: "OPTIONS";
+        HEAD: "HEAD";
+    }>>>;
+    headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodBoolean>;
+    maxAge: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type CorsOptions = z.infer<typeof CorsOptionsSchema>;
+
+/**
+ * Express source settings schema
+ */
+declare const SettingsSchema: z.ZodObject<{
+    port: z.ZodOptional<z.ZodNumber>;
+    path: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+        origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            OPTIONS: "OPTIONS";
+            HEAD: "HEAD";
+        }>>>;
+        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodBoolean>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>]>>;
+    status: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+
+type Settings = z.infer<typeof SettingsSchema>;
+type InitSettings = Partial<Settings>;
+interface Mapping {
+}
+type Push = (req: Request, res: Response) => Promise<void>;
+interface Env extends Source.Env {
+    req?: Request;
+    res?: Response;
+}
+type Types = Source.Types<Settings, Mapping, Push, Env, InitSettings>;
+type Config = Source.Config<Types>;
+type PartialConfig = Source.PartialConfig<Types>;
+interface ExpressSource extends Omit<Source.Instance<Types>, 'push'> {
+    push: Push;
+    app: Application;
+    server?: ReturnType<Application['listen']>;
+}
+interface EventRequest {
+    event: string;
+    data?: WalkerOS.AnyObject;
+    context?: WalkerOS.AnyObject;
+    user?: WalkerOS.AnyObject;
+    globals?: WalkerOS.AnyObject;
+    consent?: WalkerOS.AnyObject;
+}
+interface EventResponse {
+    success: boolean;
+    id?: string;
+    timestamp?: number;
+    error?: string;
+}
+type RequestBody = EventRequest;
+type ResponseBody = EventResponse;
+
+/**
+ * Set CORS headers on response
+ *
+ * @param res Express response object
+ * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)
+ */
+declare function setCorsHeaders(res: Response, corsConfig?: boolean | CorsOptions): void;
+/**
+ * 1x1 transparent GIF for pixel tracking
+ * Base64-encoded GIF (43 bytes)
+ */
+declare const TRANSPARENT_GIF: Buffer<ArrayBuffer>;
+
+/**
+ * Express source initialization
+ *
+ * This source OWNS its HTTP server infrastructure:
+ * - Creates Express application
+ * - Sets up middleware (JSON parsing, CORS)
+ * - Registers event collection endpoints (POST, GET, OPTIONS)
+ * - Starts HTTP server (if port configured)
+ * - Handles graceful shutdown
+ *
+ * @param config Partial source configuration
+ * @param env Source environment with push, command, elb functions
+ * @returns Express source instance with app and push handler
+ */
+declare const sourceExpress: (config: PartialConfig, env: Types["env"]) => Promise<ExpressSource>;
+
+export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type Settings, TRANSPARENT_GIF, type Types, setCorsHeaders, sourceExpress };

package/dist/index.js

@@ -0,0 +1 @@
+"use strict";var mod,__create=Object.create,__defProp=Object.defineProperty,__getOwnPropDesc=Object.getOwnPropertyDescriptor,__getOwnPropNames=Object.getOwnPropertyNames,__getProtoOf=Object.getPrototypeOf,__hasOwnProp=Object.prototype.hasOwnProperty,__copyProps=(to,from,except,desc)=>{if(from&&"object"==typeof from||"function"==typeof from)for(let key of __getOwnPropNames(from))__hasOwnProp.call(to,key)||key===except||__defProp(to,key,{get:()=>from[key],enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable});return to},__toESM=(mod,isNodeMode,target)=>(target=null!=mod?__create(__getProtoOf(mod)):{},__copyProps(!isNodeMode&&mod&&mod.__esModule?target:__defProp(target,"default",{value:mod,enumerable:!0}),mod)),index_exports={};((target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:!0})})(index_exports,{TRANSPARENT_GIF:()=>TRANSPARENT_GIF,setCorsHeaders:()=>setCorsHeaders,sourceExpress:()=>sourceExpress}),module.exports=(mod=index_exports,__copyProps(__defProp({},"__esModule",{value:!0}),mod));var import_express=__toESM(require("express")),import_cors=__toESM(require("cors")),import_core=require("@walkeros/core"),import_dev=require("@walkeros/core/dev"),HttpMethod=import_dev.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),CorsOrigin=import_dev.z.union([import_dev.z.string(),import_dev.z.array(import_dev.z.string()),import_dev.z.literal("*")]),CorsOptionsSchema=import_dev.z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:import_dev.z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:import_dev.z.array(import_dev.z.string()).describe("Allowed request headers").optional(),credentials:import_dev.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:import_dev.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),import_dev2=require("@walkeros/core/dev"),SettingsSchema=import_dev2.z.object({port:import_dev2.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:import_dev2.z.string().describe("Event collection endpoint path").default("/collect"),cors:import_dev2.z.union([import_dev2.z.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:import_dev2.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async(config,env)=>{const settings=SettingsSchema.parse(config.settings||{}),app=(0,import_express.default)();if(app.use(import_express.default.json({limit:"1mb"})),!1!==settings.cors){const corsOptions=!0===settings.cors?{}:settings.cors;app.use((0,import_cors.default)(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings.cors),void res.status(204).send();if("GET"===req.method){const parsedData=(0,import_core.requestToData)(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}};let server;if(app.post(settings.path,push),app.get(settings.path,push),app.options(settings.path,push),settings.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings.port){server=app.listen(settings.port,()=>{const statusRoutes=settings.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"";env.logger.info(`Express source listening on port ${settings.port}\n   POST ${settings.path} - Event collection (JSON body)\n   GET ${settings.path} - Pixel tracking (query params)\n   OPTIONS ${settings.path} - CORS preflight`+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings},push:push,app:app,server:server}};//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type {\n  ExpressSource,\n  PartialConfig,\n  Types,\n  EventRequest,\n} from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param config Partial source configuration\n * @param env Source environment with push, command, elb functions\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  config: PartialConfig,\n  env: Types['env'],\n): Promise<ExpressSource> => {\n  // Validate and apply default settings\n  const settings = SettingsSchema.parse(config.settings || {});\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register event collection endpoint (handles POST, GET, OPTIONS)\n  app.post(settings.path, push);\n  app.get(settings.path, push);\n  app.options(settings.path, push);\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          `   POST ${settings.path} - Event collection (JSON body)\\n` +\n          `   GET ${settings.path} - Pixel tracking (query params)\\n` +\n          `   OPTIONS ${settings.path} - CORS preflight` +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAqD;AACrD,kBAAiB;AACjB,kBAA8B;;;ACF9B,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,IAAAA,cAAkB;AAMX,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ACxBM,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AH5BO,IAAM,gBAAgB,OAC3B,QACA,QAC2B;AAE3B,QAAM,WAAW,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3D,QAAM,UAAM,eAAAC,SAAQ;AAGpB,MAAI,IAAI,eAAAA,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,cAAc,SAAS,SAAS,OAAO,CAAC,IAAI,SAAS;AAC3D,QAAI,QAAI,YAAAC,SAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAK,SAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,iBAAa,2BAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,KAAK,SAAS,MAAM,IAAI;AAC5B,MAAI,IAAI,SAAS,MAAM,IAAI;AAC3B,MAAI,QAAQ,SAAS,MAAM,IAAI;AAG/B,MAAI,SAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAI,SAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAO,SAAS,MAAM,MAAM;AACvC,YAAM,eAAe,SAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,UAAI,OAAO;AAAA,QACT,oCAAoC,SAAS,IAAI;AAAA,UACpC,SAAS,IAAI;AAAA,SACd,SAAS,IAAI;AAAA,aACT,SAAS,IAAI,sBAC3B;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;","names":["import_dev","express","cors"]}

package/dist/index.mjs

@@ -0,0 +1 @@
+import express from"express";import cors from"cors";import{requestToData}from"@walkeros/core";import{z}from"@walkeros/core/dev";var HttpMethod=z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),CorsOrigin=z.union([z.string(),z.array(z.string()),z.literal("*")]),CorsOptionsSchema=z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:z.array(z.string()).describe("Allowed request headers").optional(),credentials:z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:z.number().int().positive().describe("Preflight cache duration in seconds").optional()});import{z as z2}from"@walkeros/core/dev";var SettingsSchema=z2.object({port:z2.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:z2.string().describe("Event collection endpoint path").default("/collect"),cors:z2.union([z2.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:z2.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async(config,env)=>{const settings=SettingsSchema.parse(config.settings||{}),app=express();if(app.use(express.json({limit:"1mb"})),!1!==settings.cors){const corsOptions=!0===settings.cors?{}:settings.cors;app.use(cors(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings.cors),void res.status(204).send();if("GET"===req.method){const parsedData=requestToData(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}};let server;if(app.post(settings.path,push),app.get(settings.path,push),app.options(settings.path,push),settings.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings.port){server=app.listen(settings.port,()=>{const statusRoutes=settings.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"";env.logger.info(`Express source listening on port ${settings.port}\n   POST ${settings.path} - Event collection (JSON body)\n   GET ${settings.path} - Pixel tracking (query params)\n   OPTIONS ${settings.path} - CORS preflight`+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings},push:push,app:app,server:server}};export{TRANSPARENT_GIF,setCorsHeaders,sourceExpress};//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type {\n  ExpressSource,\n  PartialConfig,\n  Types,\n  EventRequest,\n} from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param config Partial source configuration\n * @param env Source environment with push, command, elb functions\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  config: PartialConfig,\n  env: Types['env'],\n): Promise<ExpressSource> => {\n  // Validate and apply default settings\n  const settings = SettingsSchema.parse(config.settings || {});\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register event collection endpoint (handles POST, GET, OPTIONS)\n  app.post(settings.path, push);\n  app.get(settings.path, push);\n  app.options(settings.path, push);\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          `   POST ${settings.path} - Event collection (JSON body)\\n` +\n          `   GET ${settings.path} - Pixel tracking (query params)\\n` +\n          `   OPTIONS ${settings.path} - CORS preflight` +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";AAAA,OAAO,aAA8C;AACrD,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACF9B,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,SAAS,KAAAA,UAAS;AAMX,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ACxBM,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AH5BO,IAAM,gBAAgB,OAC3B,QACA,QAC2B;AAE3B,QAAM,WAAW,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3D,QAAM,MAAM,QAAQ;AAGpB,MAAI,IAAI,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,cAAc,SAAS,SAAS,OAAO,CAAC,IAAI,SAAS;AAC3D,QAAI,IAAI,KAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAK,SAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,aAAa,cAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,KAAK,SAAS,MAAM,IAAI;AAC5B,MAAI,IAAI,SAAS,MAAM,IAAI;AAC3B,MAAI,QAAQ,SAAS,MAAM,IAAI;AAG/B,MAAI,SAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAI,SAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAO,SAAS,MAAM,MAAM;AACvC,YAAM,eAAe,SAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,UAAI,OAAO;AAAA,QACT,oCAAoC,SAAS,IAAI;AAAA,UACpC,SAAS,IAAI;AAAA,SACd,SAAS,IAAI;AAAA,aACT,SAAS,IAAI,sBAC3B;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;","names":["z","z"]}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@walkeros/server-source-express",
+  "description": "Express server source for walkerOS",
+  "version": "0.0.0-next-20251219153324",
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist/**"
+  ],
+  "scripts": {
+    "build": "tsup --silent",
+    "clean": "rm -rf .turbo && rm -rf node_modules && rm -rf dist",
+    "dev": "jest --watchAll --colors",
+    "lint": "tsc && eslint \"**/*.ts*\"",
+    "test": "jest",
+    "update": "npx npm-check-updates -u && npm update"
+  },
+  "dependencies": {
+    "@walkeros/core": "0.0.0-next-20251219153324",
+    "express": "^5.2.1",
+    "cors": "^2.8.5"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/cors": "^2.8.19"
+  },
+  "repository": {
+    "url": "git+https://github.com/elbwalker/walkerOS.git",
+    "directory": "packages/server/sources/express"
+  },
+  "author": "elbwalker <hello@elbwalker.com>",
+  "homepage": "https://github.com/elbwalker/walkerOS#readme",
+  "bugs": {
+    "url": "https://github.com/elbwalker/walkerOS/issues"
+  },
+  "keywords": [
+    "walker",
+    "walkerOS",
+    "source",
+    "server",
+    "express",
+    "http"
+  ],
+  "funding": [
+    {
+      "type": "GitHub Sponsors",
+      "url": "https://github.com/sponsors/elbwalker"
+    }
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./dev": {
+      "types": "./dist/dev.d.ts",
+      "import": "./dist/dev.mjs",
+      "require": "./dist/dev.js"
+    }
+  }
+}