@walkeros/server-source-express 1.0.4 → 1.1.0-next-1771252576264

package/README.md

@@ -49,7 +49,7 @@ const { collector } = await startFlow({
       config: {
         settings: {
           // No port = app only, no server started
-          path: '/events',
+          paths: ['/events'],
           cors: false, // Handle CORS with your own middleware
         },
       },
@@ -85,9 +85,15 @@ interface Settings {
   port?: number;
 
   /**
-   * Event collection endpoint path
-   * All HTTP methods (POST, GET, OPTIONS) registered on this path
-   * @default '/collect'
+   * Route paths to register
+   * String shorthand registers GET+POST. RouteConfig allows per-route method control.
+   * @default ['/collect']
+   */
+  paths?: Array<string | RouteConfig>;
+
+  /**
+   * @deprecated Use `paths` instead. Will be removed in next major.
+   * Converted to `paths: [path]` internally.
    */
   path?: string;
 
@@ -108,6 +114,13 @@ interface Settings {
    */
   status?: boolean;
 }
+
+interface RouteConfig {
+  /** Express route path (supports wildcards like /api/*) */
+  path: string;
+  /** HTTP methods to register. OPTIONS always included for CORS. */
+  methods?: ('GET' | 'POST')[];
+}
 ```
 
 ### CORS Options
@@ -283,7 +296,7 @@ await startFlow({
 });
 ```
 
-### Custom Endpoint Path
+### Custom Endpoint Paths
 
 ```typescript
 await startFlow({
@@ -293,17 +306,35 @@ await startFlow({
       config: {
         settings: {
           port: 8080,
-          path: '/api/v1/events', // Custom path
+          paths: ['/api/v1/events'], // Custom path (GET + POST)
         },
       },
     },
   },
 });
+```
+
+### Multi-Path with Method Control
 
-// All methods now work on /api/v1/events
-// POST /api/v1/events
-// GET /api/v1/events
-// OPTIONS /api/v1/events
+```typescript
+await startFlow({
+  sources: {
+    express: {
+      code: sourceExpress,
+      config: {
+        settings: {
+          port: 8080,
+          paths: [
+            '/collect', // GET + POST (default)
+            { path: '/pixel', methods: ['GET'] }, // GET only (pixel tracking)
+            { path: '/ingest', methods: ['POST'] }, // POST only (JSON ingestion)
+            { path: '/webhooks/*', methods: ['POST'] }, // POST wildcard
+          ],
+        },
+      },
+    },
+  },
+});
 ```
 
 ### Ingest Metadata

package/dist/dev.d.mts

@@ -1,3 +1,4 @@
+import * as _walkeros_core_dev from '@walkeros/core/dev';
 import { z } from '@walkeros/core/dev';
 
 /**
@@ -12,6 +13,24 @@ declare const HttpMethod: z.ZodEnum<{
     OPTIONS: "OPTIONS";
     HEAD: "HEAD";
 }>;
+/**
+ * HTTP methods supported for route configuration.
+ * OPTIONS is always registered for CORS (not user-configurable per route).
+ */
+declare const RouteMethod: z.ZodEnum<{
+    GET: "GET";
+    POST: "POST";
+}>;
+/**
+ * Route configuration for multi-path support.
+ */
+declare const RouteConfigSchema: z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+    }>>>;
+}, z.core.$strip>;
 /**
  * CORS origin configuration
  * Accepts:
@@ -42,11 +61,18 @@ declare const CorsOptionsSchema: z.ZodObject<{
 type CorsOptions = z.infer<typeof CorsOptionsSchema>;
 
 /**
- * Express source settings schema
+ * Express source settings schema.
  */
 declare const SettingsSchema: z.ZodObject<{
     port: z.ZodOptional<z.ZodNumber>;
-    path: z.ZodDefault<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    paths: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        path: z.ZodString;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+        }>>>;
+    }, z.core.$strip>]>>>;
     cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
         origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
         methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -66,14 +92,19 @@ declare const SettingsSchema: z.ZodObject<{
 }, z.core.$strip>;
 type Settings = z.infer<typeof SettingsSchema>;
 
+declare const settings: _walkeros_core_dev.JSONSchema;
+
 type index_CorsOptions = CorsOptions;
 declare const index_CorsOptionsSchema: typeof CorsOptionsSchema;
 declare const index_CorsOrigin: typeof CorsOrigin;
 declare const index_HttpMethod: typeof HttpMethod;
+declare const index_RouteConfigSchema: typeof RouteConfigSchema;
+declare const index_RouteMethod: typeof RouteMethod;
 type index_Settings = Settings;
 declare const index_SettingsSchema: typeof SettingsSchema;
+declare const index_settings: typeof settings;
 declare namespace index {
-  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema };
+  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, index_RouteConfigSchema as RouteConfigSchema, index_RouteMethod as RouteMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema, index_settings as settings };
 }
 
 export { index as schemas };

package/dist/dev.d.ts

@@ -1,3 +1,4 @@
+import * as _walkeros_core_dev from '@walkeros/core/dev';
 import { z } from '@walkeros/core/dev';
 
 /**
@@ -12,6 +13,24 @@ declare const HttpMethod: z.ZodEnum<{
     OPTIONS: "OPTIONS";
     HEAD: "HEAD";
 }>;
+/**
+ * HTTP methods supported for route configuration.
+ * OPTIONS is always registered for CORS (not user-configurable per route).
+ */
+declare const RouteMethod: z.ZodEnum<{
+    GET: "GET";
+    POST: "POST";
+}>;
+/**
+ * Route configuration for multi-path support.
+ */
+declare const RouteConfigSchema: z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+    }>>>;
+}, z.core.$strip>;
 /**
  * CORS origin configuration
  * Accepts:
@@ -42,11 +61,18 @@ declare const CorsOptionsSchema: z.ZodObject<{
 type CorsOptions = z.infer<typeof CorsOptionsSchema>;
 
 /**
- * Express source settings schema
+ * Express source settings schema.
  */
 declare const SettingsSchema: z.ZodObject<{
     port: z.ZodOptional<z.ZodNumber>;
-    path: z.ZodDefault<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    paths: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        path: z.ZodString;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+        }>>>;
+    }, z.core.$strip>]>>>;
     cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
         origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
         methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -66,14 +92,19 @@ declare const SettingsSchema: z.ZodObject<{
 }, z.core.$strip>;
 type Settings = z.infer<typeof SettingsSchema>;
 
+declare const settings: _walkeros_core_dev.JSONSchema;
+
 type index_CorsOptions = CorsOptions;
 declare const index_CorsOptionsSchema: typeof CorsOptionsSchema;
 declare const index_CorsOrigin: typeof CorsOrigin;
 declare const index_HttpMethod: typeof HttpMethod;
+declare const index_RouteConfigSchema: typeof RouteConfigSchema;
+declare const index_RouteMethod: typeof RouteMethod;
 type index_Settings = Settings;
 declare const index_SettingsSchema: typeof SettingsSchema;
+declare const index_settings: typeof settings;
 declare namespace index {
-  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema };
+  export { type index_CorsOptions as CorsOptions, index_CorsOptionsSchema as CorsOptionsSchema, index_CorsOrigin as CorsOrigin, index_HttpMethod as HttpMethod, index_RouteConfigSchema as RouteConfigSchema, index_RouteMethod as RouteMethod, type index_Settings as Settings, index_SettingsSchema as SettingsSchema, index_settings as settings };
 }
 
 export { index as schemas };

package/dist/dev.js

@@ -1 +1 @@
-"use strict";var e,o=Object.defineProperty,r=Object.getOwnPropertyDescriptor,t=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,i=(e,r)=>{for(var t in r)o(e,t,{get:r[t],enumerable:!0})},n={};i(n,{schemas:()=>l}),module.exports=(e=n,((e,i,n,l)=>{if(i&&"object"==typeof i||"function"==typeof i)for(let s of t(i))a.call(e,s)||s===n||o(e,s,{get:()=>i[s],enumerable:!(l=r(i,s))||l.enumerable});return e})(o({},"__esModule",{value:!0}),e));var l={};i(l,{CorsOptionsSchema:()=>p,CorsOrigin:()=>d,HttpMethod:()=>c,SettingsSchema:()=>u});var s=require("@walkeros/core/dev"),c=s.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),d=s.z.union([s.z.string(),s.z.array(s.z.string()),s.z.literal("*")]),p=s.z.object({origin:d.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:s.z.array(c).describe("Allowed HTTP methods").optional(),headers:s.z.array(s.z.string()).describe("Allowed request headers").optional(),credentials:s.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:s.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),b=require("@walkeros/core/dev"),u=b.z.object({port:b.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:b.z.string().describe("Event collection endpoint path").default("/collect"),cors:b.z.union([b.z.boolean(),p]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:b.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});//# sourceMappingURL=dev.js.map
+"use strict";var e,r=Object.defineProperty,o=Object.getOwnPropertyDescriptor,t=Object.getOwnPropertyNames,a=Object.prototype.hasOwnProperty,i=(e,o)=>{for(var t in o)r(e,t,{get:o[t],enumerable:!0})},s={};i(s,{schemas:()=>n}),module.exports=(e=s,((e,i,s,n)=>{if(i&&"object"==typeof i||"function"==typeof i)for(let l of t(i))a.call(e,l)||l===s||r(e,l,{get:()=>i[l],enumerable:!(n=o(i,l))||n.enumerable});return e})(r({},"__esModule",{value:!0}),e));var n={};i(n,{CorsOptionsSchema:()=>g,CorsOrigin:()=>h,HttpMethod:()=>p,RouteConfigSchema:()=>b,RouteMethod:()=>u,SettingsSchema:()=>m,settings:()=>z});var l=require("@walkeros/core/dev"),d=require("@walkeros/core/dev"),c=require("@walkeros/core/dev"),p=c.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),u=c.z.enum(["GET","POST"]),b=c.z.object({path:c.z.string().describe("Express route path (supports wildcards like /api/*)"),methods:c.z.array(u).min(1).describe("HTTP methods to register. OPTIONS always included for CORS.").optional()}),h=c.z.union([c.z.string(),c.z.array(c.z.string()),c.z.literal("*")]),g=c.z.object({origin:h.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:c.z.array(p).describe("Allowed HTTP methods").optional(),headers:c.z.array(c.z.string()).describe("Allowed request headers").optional(),credentials:c.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:c.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),m=d.z.object({port:d.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:d.z.string().describe("Deprecated: use paths instead").optional(),paths:d.z.array(d.z.union([d.z.string(),b])).min(1).describe("Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.").optional(),cors:d.z.union([d.z.boolean(),g]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:d.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)}),z=(0,l.zodToSchema)(m);//# sourceMappingURL=dev.js.map

package/dist/dev.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/dev.ts","../src/schemas/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts"],"sourcesContent":["export * as schemas from './schemas';\n","export * from './primitives';\nexport * from './settings';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,IAAAA,cAAkB;AAMX,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;","names":["import_dev"]}
+{"version":3,"sources":["../src/dev.ts","../src/schemas/index.ts","../src/schemas/settings.ts","../src/schemas/primitives.ts"],"sourcesContent":["export * as schemas from './schemas';\n","import { zodToSchema } from '@walkeros/core/dev';\nimport { SettingsSchema } from './settings';\n\nexport * from './primitives';\nexport { SettingsSchema, type Settings } from './settings';\n\n// JSON Schema\nexport const settings = zodToSchema(SettingsSchema);\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema, RouteConfigSchema } from './primitives';\n\n/**\n * Express source settings schema.\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0)\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  /** @deprecated Use `paths` instead */\n  path: z.string().describe('Deprecated: use paths instead').optional(),\n\n  paths: z\n    .array(z.union([z.string(), RouteConfigSchema]))\n    .min(1)\n    .describe(\n      'Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.',\n    )\n    .optional(),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * HTTP methods supported for route configuration.\n * OPTIONS is always registered for CORS (not user-configurable per route).\n */\nexport const RouteMethod = z.enum(['GET', 'POST']);\n\n/**\n * Route configuration for multi-path support.\n */\nexport const RouteConfigSchema = z.object({\n  path: z\n    .string()\n    .describe('Express route path (supports wildcards like /api/*)'),\n  methods: z\n    .array(RouteMethod)\n    .min(1)\n    .describe('HTTP methods to register. OPTIONS always included for CORS.')\n    .optional(),\n});\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,cAA4B;;;ACA5B,IAAAC,cAAkB;;;ACAlB,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,cAAc,aAAE,KAAK,CAAC,OAAO,MAAM,CAAC;AAK1C,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,MAAM,aACH,OAAO,EACP,SAAS,qDAAqD;AAAA,EACjE,SAAS,aACN,MAAM,WAAW,EACjB,IAAI,CAAC,EACL,SAAS,6DAA6D,EACtE,SAAS;AACd,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ADlEM,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA;AAAA,EAGZ,MAAM,cAAE,OAAO,EAAE,SAAS,+BAA+B,EAAE,SAAS;AAAA,EAEpE,OAAO,cACJ,MAAM,cAAE,MAAM,CAAC,cAAE,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAC9C,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ADhCM,IAAM,eAAW,yBAAY,cAAc;","names":["import_dev","import_dev"]}

package/dist/dev.mjs

@@ -1 +1 @@
-var e=Object.defineProperty,o={};((o,r)=>{for(var t in r)e(o,t,{get:r[t],enumerable:!0})})(o,{CorsOptionsSchema:()=>i,CorsOrigin:()=>a,HttpMethod:()=>t,SettingsSchema:()=>s});import{z as r}from"@walkeros/core/dev";var t=r.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),a=r.union([r.string(),r.array(r.string()),r.literal("*")]),i=r.object({origin:a.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:r.array(t).describe("Allowed HTTP methods").optional(),headers:r.array(r.string()).describe("Allowed request headers").optional(),credentials:r.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:r.number().int().positive().describe("Preflight cache duration in seconds").optional()});import{z as n}from"@walkeros/core/dev";var s=n.object({port:n.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:n.string().describe("Event collection endpoint path").default("/collect"),cors:n.union([n.boolean(),i]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:n.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});export{o as schemas};//# sourceMappingURL=dev.mjs.map
+var e=Object.defineProperty,o={};((o,r)=>{for(var t in r)e(o,t,{get:r[t],enumerable:!0})})(o,{CorsOptionsSchema:()=>d,CorsOrigin:()=>l,HttpMethod:()=>i,RouteConfigSchema:()=>n,RouteMethod:()=>s,SettingsSchema:()=>c,settings:()=>p});import{zodToSchema as r}from"@walkeros/core/dev";import{z as t}from"@walkeros/core/dev";import{z as a}from"@walkeros/core/dev";var i=a.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),s=a.enum(["GET","POST"]),n=a.object({path:a.string().describe("Express route path (supports wildcards like /api/*)"),methods:a.array(s).min(1).describe("HTTP methods to register. OPTIONS always included for CORS.").optional()}),l=a.union([a.string(),a.array(a.string()),a.literal("*")]),d=a.object({origin:l.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:a.array(i).describe("Allowed HTTP methods").optional(),headers:a.array(a.string()).describe("Allowed request headers").optional(),credentials:a.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:a.number().int().positive().describe("Preflight cache duration in seconds").optional()}),c=t.object({port:t.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:t.string().describe("Deprecated: use paths instead").optional(),paths:t.array(t.union([t.string(),n])).min(1).describe("Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.").optional(),cors:t.union([t.boolean(),d]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:t.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)}),p=r(c);export{o as schemas};//# sourceMappingURL=dev.mjs.map

package/dist/dev.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/schemas/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts"],"sourcesContent":["export * from './primitives';\nexport * from './settings';\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n"],"mappings":";;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,SAAS,KAAAA,UAAS;AAMX,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;","names":["z","z"]}
+{"version":3,"sources":["../src/schemas/index.ts","../src/schemas/settings.ts","../src/schemas/primitives.ts"],"sourcesContent":["import { zodToSchema } from '@walkeros/core/dev';\nimport { SettingsSchema } from './settings';\n\nexport * from './primitives';\nexport { SettingsSchema, type Settings } from './settings';\n\n// JSON Schema\nexport const settings = zodToSchema(SettingsSchema);\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema, RouteConfigSchema } from './primitives';\n\n/**\n * Express source settings schema.\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0)\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  /** @deprecated Use `paths` instead */\n  path: z.string().describe('Deprecated: use paths instead').optional(),\n\n  paths: z\n    .array(z.union([z.string(), RouteConfigSchema]))\n    .min(1)\n    .describe(\n      'Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.',\n    )\n    .optional(),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * HTTP methods supported for route configuration.\n * OPTIONS is always registered for CORS (not user-configurable per route).\n */\nexport const RouteMethod = z.enum(['GET', 'POST']);\n\n/**\n * Route configuration for multi-path support.\n */\nexport const RouteConfigSchema = z.object({\n  path: z\n    .string()\n    .describe('Express route path (supports wildcards like /api/*)'),\n  methods: z\n    .array(RouteMethod)\n    .min(1)\n    .describe('HTTP methods to register. OPTIONS always included for CORS.')\n    .optional(),\n});\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n"],"mappings":";;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,mBAAmB;;;ACA5B,SAAS,KAAAA,UAAS;;;ACAlB,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,cAAc,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC;AAK1C,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EACH,OAAO,EACP,SAAS,qDAAqD;AAAA,EACjE,SAAS,EACN,MAAM,WAAW,EACjB,IAAI,CAAC,EACL,SAAS,6DAA6D,EACtE,SAAS;AACd,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ADlEM,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA;AAAA,EAGZ,MAAMA,GAAE,OAAO,EAAE,SAAS,+BAA+B,EAAE,SAAS;AAAA,EAEpE,OAAOA,GACJ,MAAMA,GAAE,MAAM,CAACA,GAAE,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAC9C,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ADhCM,IAAM,WAAW,YAAY,cAAc;","names":["z","z"]}

package/dist/index.d.mts

@@ -2,6 +2,16 @@ import { Source, WalkerOS } from '@walkeros/core';
 import { Request, Response, Application } from 'express';
 import { z } from '@walkeros/core/dev';
 
+/**
+ * Route configuration for multi-path support.
+ */
+declare const RouteConfigSchema: z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+    }>>>;
+}, z.core.$strip>;
 /**
  * CORS options schema
  * Configuration for Cross-Origin Resource Sharing
@@ -24,11 +34,18 @@ declare const CorsOptionsSchema: z.ZodObject<{
 type CorsOptions = z.infer<typeof CorsOptionsSchema>;
 
 /**
- * Express source settings schema
+ * Express source settings schema.
  */
 declare const SettingsSchema: z.ZodObject<{
     port: z.ZodOptional<z.ZodNumber>;
-    path: z.ZodDefault<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    paths: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        path: z.ZodString;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+        }>>>;
+    }, z.core.$strip>]>>>;
     cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
         origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
         methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -48,6 +65,8 @@ declare const SettingsSchema: z.ZodObject<{
 }, z.core.$strip>;
 
 type Settings = z.infer<typeof SettingsSchema>;
+type RouteConfig = z.infer<typeof RouteConfigSchema>;
+type RouteMethod = 'GET' | 'POST';
 type InitSettings = Partial<Settings>;
 interface Mapping {
 }
@@ -109,4 +128,4 @@ declare const TRANSPARENT_GIF: Buffer<ArrayBuffer>;
  */
 declare const sourceExpress: (context: Source.Context<Types>) => Promise<ExpressSource>;
 
-export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type Settings, TRANSPARENT_GIF, type Types, sourceExpress as default, setCorsHeaders, sourceExpress };
+export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type RouteConfig, type RouteMethod, type Settings, TRANSPARENT_GIF, type Types, sourceExpress as default, setCorsHeaders, sourceExpress };

package/dist/index.d.ts

@@ -2,6 +2,16 @@ import { Source, WalkerOS } from '@walkeros/core';
 import { Request, Response, Application } from 'express';
 import { z } from '@walkeros/core/dev';
 
+/**
+ * Route configuration for multi-path support.
+ */
+declare const RouteConfigSchema: z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+    }>>>;
+}, z.core.$strip>;
 /**
  * CORS options schema
  * Configuration for Cross-Origin Resource Sharing
@@ -24,11 +34,18 @@ declare const CorsOptionsSchema: z.ZodObject<{
 type CorsOptions = z.infer<typeof CorsOptionsSchema>;
 
 /**
- * Express source settings schema
+ * Express source settings schema.
  */
 declare const SettingsSchema: z.ZodObject<{
     port: z.ZodOptional<z.ZodNumber>;
-    path: z.ZodDefault<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    paths: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        path: z.ZodString;
+        methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+        }>>>;
+    }, z.core.$strip>]>>>;
     cors: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
         origin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>, z.ZodLiteral<"*">]>>;
         methods: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -48,6 +65,8 @@ declare const SettingsSchema: z.ZodObject<{
 }, z.core.$strip>;
 
 type Settings = z.infer<typeof SettingsSchema>;
+type RouteConfig = z.infer<typeof RouteConfigSchema>;
+type RouteMethod = 'GET' | 'POST';
 type InitSettings = Partial<Settings>;
 interface Mapping {
 }
@@ -109,4 +128,4 @@ declare const TRANSPARENT_GIF: Buffer<ArrayBuffer>;
  */
 declare const sourceExpress: (context: Source.Context<Types>) => Promise<ExpressSource>;
 
-export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type Settings, TRANSPARENT_GIF, type Types, sourceExpress as default, setCorsHeaders, sourceExpress };
+export { type Config, type Env, type EventRequest, type EventResponse, type ExpressSource, type InitSettings, type Mapping, type PartialConfig, type Push, type RequestBody, type ResponseBody, type RouteConfig, type RouteMethod, type Settings, TRANSPARENT_GIF, type Types, sourceExpress as default, setCorsHeaders, sourceExpress };

package/dist/index.js

@@ -1 +1 @@
-"use strict";var mod,__create=Object.create,__defProp=Object.defineProperty,__getOwnPropDesc=Object.getOwnPropertyDescriptor,__getOwnPropNames=Object.getOwnPropertyNames,__getProtoOf=Object.getPrototypeOf,__hasOwnProp=Object.prototype.hasOwnProperty,__copyProps=(to,from,except,desc)=>{if(from&&"object"==typeof from||"function"==typeof from)for(let key of __getOwnPropNames(from))__hasOwnProp.call(to,key)||key===except||__defProp(to,key,{get:()=>from[key],enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable});return to},__toESM=(mod,isNodeMode,target)=>(target=null!=mod?__create(__getProtoOf(mod)):{},__copyProps(!isNodeMode&&mod&&mod.__esModule?target:__defProp(target,"default",{value:mod,enumerable:!0}),mod)),index_exports={};((target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:!0})})(index_exports,{TRANSPARENT_GIF:()=>TRANSPARENT_GIF,default:()=>index_default,setCorsHeaders:()=>setCorsHeaders,sourceExpress:()=>sourceExpress}),module.exports=(mod=index_exports,__copyProps(__defProp({},"__esModule",{value:!0}),mod));var import_express=__toESM(require("express")),import_cors=__toESM(require("cors")),import_core=require("@walkeros/core"),import_dev=require("@walkeros/core/dev"),HttpMethod=import_dev.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),CorsOrigin=import_dev.z.union([import_dev.z.string(),import_dev.z.array(import_dev.z.string()),import_dev.z.literal("*")]),CorsOptionsSchema=import_dev.z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:import_dev.z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:import_dev.z.array(import_dev.z.string()).describe("Allowed request headers").optional(),credentials:import_dev.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:import_dev.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),import_dev2=require("@walkeros/core/dev"),SettingsSchema=import_dev2.z.object({port:import_dev2.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:import_dev2.z.string().describe("Event collection endpoint path").default("/collect"),cors:import_dev2.z.union([import_dev2.z.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:import_dev2.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async context=>{const{config:config={},env:env}=context,settings=SettingsSchema.parse(config.settings||{}),app=(0,import_express.default)();if(app.use(import_express.default.json({limit:"1mb"})),!1!==settings.cors){const corsOptions=!0===settings.cors?{}:settings.cors;app.use((0,import_cors.default)(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings.cors),void res.status(204).send();if(await context.setIngest(req),"GET"===req.method){const parsedData=(0,import_core.requestToData)(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}};let server;if(app.post(settings.path,push),app.get(settings.path,push),app.options(settings.path,push),settings.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings.port){server=app.listen(settings.port,()=>{const statusRoutes=settings.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"";env.logger.info(`Express source listening on port ${settings.port}\n   POST ${settings.path} - Event collection (JSON body)\n   GET ${settings.path} - Pixel tracking (query params)\n   OPTIONS ${settings.path} - CORS preflight`+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings},push:push,app:app,server:server}},index_default=sourceExpress;//# sourceMappingURL=index.js.map
+"use strict";var mod,__create=Object.create,__defProp=Object.defineProperty,__getOwnPropDesc=Object.getOwnPropertyDescriptor,__getOwnPropNames=Object.getOwnPropertyNames,__getProtoOf=Object.getPrototypeOf,__hasOwnProp=Object.prototype.hasOwnProperty,__copyProps=(to,from,except,desc)=>{if(from&&"object"==typeof from||"function"==typeof from)for(let key of __getOwnPropNames(from))__hasOwnProp.call(to,key)||key===except||__defProp(to,key,{get:()=>from[key],enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable});return to},__toESM=(mod,isNodeMode,target)=>(target=null!=mod?__create(__getProtoOf(mod)):{},__copyProps(!isNodeMode&&mod&&mod.__esModule?target:__defProp(target,"default",{value:mod,enumerable:!0}),mod)),index_exports={};((target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:!0})})(index_exports,{TRANSPARENT_GIF:()=>TRANSPARENT_GIF,default:()=>index_default,setCorsHeaders:()=>setCorsHeaders,sourceExpress:()=>sourceExpress}),module.exports=(mod=index_exports,__copyProps(__defProp({},"__esModule",{value:!0}),mod));var import_express=__toESM(require("express")),import_cors=__toESM(require("cors")),import_core=require("@walkeros/core"),import_dev3=require("@walkeros/core/dev"),import_dev2=require("@walkeros/core/dev"),import_dev=require("@walkeros/core/dev"),HttpMethod=import_dev.z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),RouteMethod=import_dev.z.enum(["GET","POST"]),RouteConfigSchema=import_dev.z.object({path:import_dev.z.string().describe("Express route path (supports wildcards like /api/*)"),methods:import_dev.z.array(RouteMethod).min(1).describe("HTTP methods to register. OPTIONS always included for CORS.").optional()}),CorsOrigin=import_dev.z.union([import_dev.z.string(),import_dev.z.array(import_dev.z.string()),import_dev.z.literal("*")]),CorsOptionsSchema=import_dev.z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:import_dev.z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:import_dev.z.array(import_dev.z.string()).describe("Allowed request headers").optional(),credentials:import_dev.z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:import_dev.z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),SettingsSchema=import_dev2.z.object({port:import_dev2.z.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:import_dev2.z.string().describe("Deprecated: use paths instead").optional(),paths:import_dev2.z.array(import_dev2.z.union([import_dev2.z.string(),RouteConfigSchema])).min(1).describe("Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.").optional(),cors:import_dev2.z.union([import_dev2.z.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:import_dev2.z.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});(0,import_dev3.zodToSchema)(SettingsSchema);function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async context=>{var _a;const{config:config={},env:env}=context,parsed=SettingsSchema.parse(config.settings||{}),settings2={...parsed,paths:null!=(_a=parsed.paths)?_a:parsed.path?[parsed.path]:["/collect"]},app=(0,import_express.default)();if(app.use(import_express.default.json({limit:"1mb"})),!1!==settings2.cors){const corsOptions=!0===settings2.cors?{}:settings2.cors;app.use((0,import_cors.default)(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings2.cors),void res.status(204).send();if(await context.setIngest(req),"GET"===req.method){const parsedData=(0,import_core.requestToData)(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}},resolvedPaths=settings2.paths.map(entry=>"string"==typeof entry?{path:entry,methods:["GET","POST"]}:{path:entry.path,methods:entry.methods||["GET","POST"]});for(const route of resolvedPaths)route.methods.includes("POST")&&app.post(route.path,push),route.methods.includes("GET")&&app.get(route.path,push),app.options(route.path,push);let server;if(settings2.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings2.port){server=app.listen(settings2.port,()=>{const statusRoutes=settings2.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"",routeLines=resolvedPaths.map(r=>`   ${[...r.methods,"OPTIONS"].join(", ")} ${r.path}`).join("\n");env.logger.info(`Express source listening on port ${settings2.port}\n`+routeLines+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings2},push:push,app:app,server:server}},index_default=sourceExpress;//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type { Source } from '@walkeros/core';\nimport type { ExpressSource, Types, EventRequest } from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param context Source context with config, env, logger, id\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  context: Source.Context<Types>,\n): Promise<ExpressSource> => {\n  const { config = {}, env } = context;\n\n  // Validate and apply default settings\n  const settings = SettingsSchema.parse(config.settings || {});\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Extract ingest metadata from request (if config.ingest is defined)\n      await context.setIngest(req);\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register event collection endpoint (handles POST, GET, OPTIONS)\n  app.post(settings.path, push);\n  app.get(settings.path, push);\n  app.options(settings.path, push);\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          `   POST ${settings.path} - Event collection (JSON body)\\n` +\n          `   GET ${settings.path} - Pixel tracking (query params)\\n` +\n          `   OPTIONS ${settings.path} - CORS preflight` +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\nexport default sourceExpress;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAqD;AACrD,kBAAiB;AACjB,kBAA8B;;;ACF9B,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,IAAAA,cAAkB;AAMX,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ACxBM,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AHjCO,IAAM,gBAAgB,OAC3B,YAC2B;AAC3B,QAAM,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI;AAG7B,QAAM,WAAW,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3D,QAAM,UAAM,eAAAC,SAAQ;AAGpB,MAAI,IAAI,eAAAA,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,cAAc,SAAS,SAAS,OAAO,CAAC,IAAI,SAAS;AAC3D,QAAI,QAAI,YAAAC,SAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAK,SAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,YAAM,QAAQ,UAAU,GAAG;AAG3B,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,iBAAa,2BAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,KAAK,SAAS,MAAM,IAAI;AAC5B,MAAI,IAAI,SAAS,MAAM,IAAI;AAC3B,MAAI,QAAQ,SAAS,MAAM,IAAI;AAG/B,MAAI,SAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAI,SAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAO,SAAS,MAAM,MAAM;AACvC,YAAM,eAAe,SAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,UAAI,OAAO;AAAA,QACT,oCAAoC,SAAS,IAAI;AAAA,UACpC,SAAS,IAAI;AAAA,SACd,SAAS,IAAI;AAAA,aACT,SAAS,IAAI,sBAC3B;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;AAsBA,IAAO,gBAAQ;","names":["import_dev","express","cors"]}
+{"version":3,"sources":["../src/index.ts","../src/schemas/index.ts","../src/schemas/settings.ts","../src/schemas/primitives.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type { Source } from '@walkeros/core';\nimport type { ExpressSource, Types, EventRequest } from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param context Source context with config, env, logger, id\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  context: Source.Context<Types>,\n): Promise<ExpressSource> => {\n  const { config = {}, env } = context;\n\n  // Validate and apply default settings\n  const parsed = SettingsSchema.parse(config.settings || {});\n  const settings = {\n    ...parsed,\n    paths: parsed.paths ?? (parsed.path ? [parsed.path] : ['/collect']),\n  };\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Extract ingest metadata from request (if config.ingest is defined)\n      await context.setIngest(req);\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register handlers per route config\n  const resolvedPaths = settings.paths.map((entry) =>\n    typeof entry === 'string'\n      ? { path: entry, methods: ['GET', 'POST'] as const }\n      : {\n          path: entry.path,\n          methods: entry.methods || (['GET', 'POST'] as const),\n        },\n  );\n\n  for (const route of resolvedPaths) {\n    if (route.methods.includes('POST')) app.post(route.path, push);\n    if (route.methods.includes('GET')) app.get(route.path, push);\n    app.options(route.path, push); // Always register OPTIONS for CORS\n  }\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      const routeLines = resolvedPaths\n        .map((r) => {\n          const methods = [...r.methods, 'OPTIONS'].join(', ');\n          return `   ${methods} ${r.path}`;\n        })\n        .join('\\n');\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          routeLines +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n  RouteConfig,\n  RouteMethod,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\nexport default sourceExpress;\n","import { zodToSchema } from '@walkeros/core/dev';\nimport { SettingsSchema } from './settings';\n\nexport * from './primitives';\nexport { SettingsSchema, type Settings } from './settings';\n\n// JSON Schema\nexport const settings = zodToSchema(SettingsSchema);\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema, RouteConfigSchema } from './primitives';\n\n/**\n * Express source settings schema.\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0)\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  /** @deprecated Use `paths` instead */\n  path: z.string().describe('Deprecated: use paths instead').optional(),\n\n  paths: z\n    .array(z.union([z.string(), RouteConfigSchema]))\n    .min(1)\n    .describe(\n      'Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.',\n    )\n    .optional(),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * HTTP methods supported for route configuration.\n * OPTIONS is always registered for CORS (not user-configurable per route).\n */\nexport const RouteMethod = z.enum(['GET', 'POST']);\n\n/**\n * Route configuration for multi-path support.\n */\nexport const RouteConfigSchema = z.object({\n  path: z\n    .string()\n    .describe('Express route path (supports wildcards like /api/*)'),\n  methods: z\n    .array(RouteMethod)\n    .min(1)\n    .describe('HTTP methods to register. OPTIONS always included for CORS.')\n    .optional(),\n});\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAqD;AACrD,kBAAiB;AACjB,kBAA8B;;;ACF9B,IAAAA,cAA4B;;;ACA5B,IAAAC,cAAkB;;;ACAlB,iBAAkB;AAKX,IAAM,aAAa,aAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,cAAc,aAAE,KAAK,CAAC,OAAO,MAAM,CAAC;AAK1C,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,MAAM,aACH,OAAO,EACP,SAAS,qDAAqD;AAAA,EACjE,SAAS,aACN,MAAM,WAAW,EACjB,IAAI,CAAC,EACL,SAAS,6DAA6D,EACtE,SAAS;AACd,CAAC;AASM,IAAM,aAAa,aAAE,MAAM;AAAA,EAChC,aAAE,OAAO;AAAA,EACT,aAAE,MAAM,aAAE,OAAO,CAAC;AAAA,EAClB,aAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,aAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,aAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,aACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,aACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ADlEM,IAAM,iBAAiB,cAAE,OAAO;AAAA,EACrC,MAAM,cACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA;AAAA,EAGZ,MAAM,cAAE,OAAO,EAAE,SAAS,+BAA+B,EAAE,SAAS;AAAA,EAEpE,OAAO,cACJ,MAAM,cAAE,MAAM,CAAC,cAAE,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAC9C,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAM,cACH,MAAM,CAAC,cAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQ,cACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ADhCM,IAAM,eAAW,yBAAY,cAAc;;;AGE3C,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AJjCO,IAAM,gBAAgB,OAC3B,YAC2B;AAvB7B;AAwBE,QAAM,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI;AAG7B,QAAM,SAAS,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AACzD,QAAMC,YAAW;AAAA,IACf,GAAG;AAAA,IACH,QAAO,YAAO,UAAP,YAAiB,OAAO,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;AAAA,EACnE;AAEA,QAAM,UAAM,eAAAC,SAAQ;AAGpB,MAAI,IAAI,eAAAA,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAID,UAAS,SAAS,OAAO;AAC3B,UAAM,cAAcA,UAAS,SAAS,OAAO,CAAC,IAAIA,UAAS;AAC3D,QAAI,QAAI,YAAAE,SAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAKF,UAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,YAAM,QAAQ,UAAU,GAAG;AAG3B,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,iBAAa,2BAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,gBAAgBA,UAAS,MAAM;AAAA,IAAI,CAAC,UACxC,OAAO,UAAU,WACb,EAAE,MAAM,OAAO,SAAS,CAAC,OAAO,MAAM,EAAW,IACjD;AAAA,MACE,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM,WAAY,CAAC,OAAO,MAAM;AAAA,IAC3C;AAAA,EACN;AAEA,aAAW,SAAS,eAAe;AACjC,QAAI,MAAM,QAAQ,SAAS,MAAM,EAAG,KAAI,KAAK,MAAM,MAAM,IAAI;AAC7D,QAAI,MAAM,QAAQ,SAAS,KAAK,EAAG,KAAI,IAAI,MAAM,MAAM,IAAI;AAC3D,QAAI,QAAQ,MAAM,MAAM,IAAI;AAAA,EAC9B;AAGA,MAAIA,UAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAIA,UAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAOA,UAAS,MAAM,MAAM;AACvC,YAAM,eAAeA,UAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,YAAM,aAAa,cAChB,IAAI,CAAC,MAAM;AACV,cAAM,UAAU,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,KAAK,IAAI;AACnD,eAAO,MAAM,OAAO,IAAI,EAAE,IAAI;AAAA,MAChC,CAAC,EACA,KAAK,IAAI;AACZ,UAAI,OAAO;AAAA,QACT,oCAAoCA,UAAS,IAAI;AAAA,IAC/C,aACA;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH,UAAAA;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;AAwBA,IAAO,gBAAQ;","names":["import_dev","import_dev","settings","express","cors"]}

package/dist/index.mjs

@@ -1 +1 @@
-import express from"express";import cors from"cors";import{requestToData}from"@walkeros/core";import{z}from"@walkeros/core/dev";var HttpMethod=z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),CorsOrigin=z.union([z.string(),z.array(z.string()),z.literal("*")]),CorsOptionsSchema=z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:z.array(z.string()).describe("Allowed request headers").optional(),credentials:z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:z.number().int().positive().describe("Preflight cache duration in seconds").optional()});import{z as z2}from"@walkeros/core/dev";var SettingsSchema=z2.object({port:z2.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:z2.string().describe("Event collection endpoint path").default("/collect"),cors:z2.union([z2.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:z2.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async context=>{const{config:config={},env:env}=context,settings=SettingsSchema.parse(config.settings||{}),app=express();if(app.use(express.json({limit:"1mb"})),!1!==settings.cors){const corsOptions=!0===settings.cors?{}:settings.cors;app.use(cors(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings.cors),void res.status(204).send();if(await context.setIngest(req),"GET"===req.method){const parsedData=requestToData(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}};let server;if(app.post(settings.path,push),app.get(settings.path,push),app.options(settings.path,push),settings.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings.port){server=app.listen(settings.port,()=>{const statusRoutes=settings.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"";env.logger.info(`Express source listening on port ${settings.port}\n   POST ${settings.path} - Event collection (JSON body)\n   GET ${settings.path} - Pixel tracking (query params)\n   OPTIONS ${settings.path} - CORS preflight`+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings},push:push,app:app,server:server}},index_default=sourceExpress;export{TRANSPARENT_GIF,index_default as default,setCorsHeaders,sourceExpress};//# sourceMappingURL=index.mjs.map
+import express from"express";import cors from"cors";import{requestToData}from"@walkeros/core";import{zodToSchema}from"@walkeros/core/dev";import{z as z2}from"@walkeros/core/dev";import{z}from"@walkeros/core/dev";var HttpMethod=z.enum(["GET","POST","PUT","PATCH","DELETE","OPTIONS","HEAD"]),RouteMethod=z.enum(["GET","POST"]),RouteConfigSchema=z.object({path:z.string().describe("Express route path (supports wildcards like /api/*)"),methods:z.array(RouteMethod).min(1).describe("HTTP methods to register. OPTIONS always included for CORS.").optional()}),CorsOrigin=z.union([z.string(),z.array(z.string()),z.literal("*")]),CorsOptionsSchema=z.object({origin:CorsOrigin.describe("Allowed origins (* for all, URL string, or array of URLs)").optional(),methods:z.array(HttpMethod).describe("Allowed HTTP methods").optional(),headers:z.array(z.string()).describe("Allowed request headers").optional(),credentials:z.boolean().describe("Allow credentials (cookies, authorization headers)").optional(),maxAge:z.number().int().positive().describe("Preflight cache duration in seconds").optional()}),SettingsSchema=z2.object({port:z2.number().int().min(0).max(65535).describe("HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)").optional(),path:z2.string().describe("Deprecated: use paths instead").optional(),paths:z2.array(z2.union([z2.string(),RouteConfigSchema])).min(1).describe("Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.").optional(),cors:z2.union([z2.boolean(),CorsOptionsSchema]).describe("CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration").default(!0),status:z2.boolean().describe("Enable health check endpoints (/health, /ready)").default(!0)});zodToSchema(SettingsSchema);function setCorsHeaders(res,corsConfig=!0){if(!1!==corsConfig)if(!0===corsConfig)res.set("Access-Control-Allow-Origin","*"),res.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),res.set("Access-Control-Allow-Headers","Content-Type");else{if(corsConfig.origin){const origin=Array.isArray(corsConfig.origin)?corsConfig.origin.join(", "):corsConfig.origin;res.set("Access-Control-Allow-Origin",origin)}corsConfig.methods&&res.set("Access-Control-Allow-Methods",corsConfig.methods.join(", ")),corsConfig.headers&&res.set("Access-Control-Allow-Headers",corsConfig.headers.join(", ")),corsConfig.credentials&&res.set("Access-Control-Allow-Credentials","true"),corsConfig.maxAge&&res.set("Access-Control-Max-Age",String(corsConfig.maxAge))}}var TRANSPARENT_GIF=Buffer.from("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7","base64"),sourceExpress=async context=>{var _a;const{config:config={},env:env}=context,parsed=SettingsSchema.parse(config.settings||{}),settings2={...parsed,paths:null!=(_a=parsed.paths)?_a:parsed.path?[parsed.path]:["/collect"]},app=express();if(app.use(express.json({limit:"1mb"})),!1!==settings2.cors){const corsOptions=!0===settings2.cors?{}:settings2.cors;app.use(cors(corsOptions))}const push=async(req,res)=>{try{if("OPTIONS"===req.method)return setCorsHeaders(res,settings2.cors),void res.status(204).send();if(await context.setIngest(req),"GET"===req.method){const parsedData=requestToData(req.url);return parsedData&&"object"==typeof parsedData&&await env.push(parsedData),res.set("Content-Type","image/gif"),res.set("Cache-Control","no-cache, no-store, must-revalidate"),void res.send(TRANSPARENT_GIF)}if("POST"===req.method){const eventData=req.body;return eventData&&"object"==typeof eventData?(await env.push(eventData),void res.json({success:!0,timestamp:Date.now()})):void res.status(400).json({success:!1,error:"Invalid event: body must be an object"})}res.status(405).json({success:!1,error:"Method not allowed. Use POST, GET, or OPTIONS."})}catch(error){res.status(500).json({success:!1,error:error instanceof Error?error.message:"Internal server error"})}},resolvedPaths=settings2.paths.map(entry=>"string"==typeof entry?{path:entry,methods:["GET","POST"]}:{path:entry.path,methods:entry.methods||["GET","POST"]});for(const route of resolvedPaths)route.methods.includes("POST")&&app.post(route.path,push),route.methods.includes("GET")&&app.get(route.path,push),app.options(route.path,push);let server;if(settings2.status&&(app.get("/health",(req,res)=>{res.json({status:"ok",timestamp:Date.now(),source:"express"})}),app.get("/ready",(req,res)=>{res.json({status:"ready",timestamp:Date.now(),source:"express"})})),void 0!==settings2.port){server=app.listen(settings2.port,()=>{const statusRoutes=settings2.status?"\n   GET /health - Health check\n   GET /ready - Readiness check":"",routeLines=resolvedPaths.map(r=>`   ${[...r.methods,"OPTIONS"].join(", ")} ${r.path}`).join("\n");env.logger.info(`Express source listening on port ${settings2.port}\n`+routeLines+statusRoutes)});const shutdownHandler=()=>{server&&server.close()};process.on("SIGTERM",shutdownHandler),process.on("SIGINT",shutdownHandler)}return{type:"express",config:{...config,settings:settings2},push:push,app:app,server:server}},index_default=sourceExpress;export{TRANSPARENT_GIF,index_default as default,setCorsHeaders,sourceExpress};//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/schemas/primitives.ts","../src/schemas/settings.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type { Source } from '@walkeros/core';\nimport type { ExpressSource, Types, EventRequest } from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param context Source context with config, env, logger, id\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  context: Source.Context<Types>,\n): Promise<ExpressSource> => {\n  const { config = {}, env } = context;\n\n  // Validate and apply default settings\n  const settings = SettingsSchema.parse(config.settings || {});\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Extract ingest metadata from request (if config.ingest is defined)\n      await context.setIngest(req);\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register event collection endpoint (handles POST, GET, OPTIONS)\n  app.post(settings.path, push);\n  app.get(settings.path, push);\n  app.options(settings.path, push);\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          `   POST ${settings.path} - Event collection (JSON body)\\n` +\n          `   GET ${settings.path} - Pixel tracking (query params)\\n` +\n          `   OPTIONS ${settings.path} - CORS preflight` +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\nexport default sourceExpress;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema } from './primitives';\n\n/**\n * Express source settings schema\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0) // 0 = random available port\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  path: z\n    .string()\n    .describe('Event collection endpoint path')\n    .default('/collect'),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";AAAA,OAAO,aAA8C;AACrD,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACF9B,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ACpDD,SAAS,KAAAA,UAAS;AAMX,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,OAAO,EACP,SAAS,gCAAgC,EACzC,QAAQ,UAAU;AAAA,EAErB,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ACxBM,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AHjCO,IAAM,gBAAgB,OAC3B,YAC2B;AAC3B,QAAM,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI;AAG7B,QAAM,WAAW,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3D,QAAM,MAAM,QAAQ;AAGpB,MAAI,IAAI,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAI,SAAS,SAAS,OAAO;AAC3B,UAAM,cAAc,SAAS,SAAS,OAAO,CAAC,IAAI,SAAS;AAC3D,QAAI,IAAI,KAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAK,SAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,YAAM,QAAQ,UAAU,GAAG;AAG3B,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,aAAa,cAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,KAAK,SAAS,MAAM,IAAI;AAC5B,MAAI,IAAI,SAAS,MAAM,IAAI;AAC3B,MAAI,QAAQ,SAAS,MAAM,IAAI;AAG/B,MAAI,SAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAI,SAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAO,SAAS,MAAM,MAAM;AACvC,YAAM,eAAe,SAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,UAAI,OAAO;AAAA,QACT,oCAAoC,SAAS,IAAI;AAAA,UACpC,SAAS,IAAI;AAAA,SACd,SAAS,IAAI;AAAA,aACT,SAAS,IAAI,sBAC3B;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;AAsBA,IAAO,gBAAQ;","names":["z","z"]}
+{"version":3,"sources":["../src/index.ts","../src/schemas/index.ts","../src/schemas/settings.ts","../src/schemas/primitives.ts","../src/utils.ts"],"sourcesContent":["import express, { type Request, type Response } from 'express';\nimport cors from 'cors';\nimport { requestToData } from '@walkeros/core';\nimport type { Source } from '@walkeros/core';\nimport type { ExpressSource, Types, EventRequest } from './types';\nimport { SettingsSchema } from './schemas';\nimport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\n/**\n * Express source initialization\n *\n * This source OWNS its HTTP server infrastructure:\n * - Creates Express application\n * - Sets up middleware (JSON parsing, CORS)\n * - Registers event collection endpoints (POST, GET, OPTIONS)\n * - Starts HTTP server (if port configured)\n * - Handles graceful shutdown\n *\n * @param context Source context with config, env, logger, id\n * @returns Express source instance with app and push handler\n */\nexport const sourceExpress = async (\n  context: Source.Context<Types>,\n): Promise<ExpressSource> => {\n  const { config = {}, env } = context;\n\n  // Validate and apply default settings\n  const parsed = SettingsSchema.parse(config.settings || {});\n  const settings = {\n    ...parsed,\n    paths: parsed.paths ?? (parsed.path ? [parsed.path] : ['/collect']),\n  };\n\n  const app = express();\n\n  // Middleware setup - JSON body parsing with 10mb default limit\n  app.use(express.json({ limit: '1mb' }));\n\n  // CORS middleware (enabled by default)\n  if (settings.cors !== false) {\n    const corsOptions = settings.cors === true ? {} : settings.cors;\n    app.use(cors(corsOptions));\n  }\n\n  /**\n   * Request handler - transforms HTTP requests into walker events\n   * Supports POST (JSON body), GET (query params), and OPTIONS (CORS preflight)\n   */\n  const push = async (req: Request, res: Response): Promise<void> => {\n    try {\n      // Handle OPTIONS for CORS preflight\n      if (req.method === 'OPTIONS') {\n        setCorsHeaders(res, settings.cors);\n        res.status(204).send();\n        return;\n      }\n\n      // Extract ingest metadata from request (if config.ingest is defined)\n      await context.setIngest(req);\n\n      // Handle GET requests (pixel tracking)\n      if (req.method === 'GET') {\n        // Parse query parameters to event data using requestToData\n        const parsedData = requestToData(req.url);\n\n        // Send to collector\n        if (parsedData && typeof parsedData === 'object') {\n          await env.push(parsedData);\n        }\n\n        // Return 1x1 transparent GIF for pixel tracking\n        res.set('Content-Type', 'image/gif');\n        res.set('Cache-Control', 'no-cache, no-store, must-revalidate');\n        res.send(TRANSPARENT_GIF);\n        return;\n      }\n\n      // Handle POST requests (standard event ingestion)\n      if (req.method === 'POST') {\n        const eventData = req.body;\n\n        if (!eventData || typeof eventData !== 'object') {\n          res.status(400).json({\n            success: false,\n            error: 'Invalid event: body must be an object',\n          });\n          return;\n        }\n\n        // Send event to collector\n        await env.push(eventData);\n\n        res.json({\n          success: true,\n          timestamp: Date.now(),\n        });\n        return;\n      }\n\n      // Unsupported method\n      res.status(405).json({\n        success: false,\n        error: 'Method not allowed. Use POST, GET, or OPTIONS.',\n      });\n    } catch (error) {\n      res.status(500).json({\n        success: false,\n        error: error instanceof Error ? error.message : 'Internal server error',\n      });\n    }\n  };\n\n  // Register handlers per route config\n  const resolvedPaths = settings.paths.map((entry) =>\n    typeof entry === 'string'\n      ? { path: entry, methods: ['GET', 'POST'] as const }\n      : {\n          path: entry.path,\n          methods: entry.methods || (['GET', 'POST'] as const),\n        },\n  );\n\n  for (const route of resolvedPaths) {\n    if (route.methods.includes('POST')) app.post(route.path, push);\n    if (route.methods.includes('GET')) app.get(route.path, push);\n    app.options(route.path, push); // Always register OPTIONS for CORS\n  }\n\n  // Health check endpoints (if enabled)\n  if (settings.status) {\n    app.get('/health', (req, res) => {\n      res.json({\n        status: 'ok',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n\n    app.get('/ready', (req, res) => {\n      res.json({\n        status: 'ready',\n        timestamp: Date.now(),\n        source: 'express',\n      });\n    });\n  }\n\n  // Source owns the HTTP server (if port configured)\n  let server: ReturnType<typeof app.listen> | undefined;\n\n  if (settings.port !== undefined) {\n    server = app.listen(settings.port, () => {\n      const statusRoutes = settings.status\n        ? `\\n   GET /health - Health check\\n   GET /ready - Readiness check`\n        : '';\n      const routeLines = resolvedPaths\n        .map((r) => {\n          const methods = [...r.methods, 'OPTIONS'].join(', ');\n          return `   ${methods} ${r.path}`;\n        })\n        .join('\\n');\n      env.logger.info(\n        `Express source listening on port ${settings.port}\\n` +\n          routeLines +\n          statusRoutes,\n      );\n    });\n\n    // Graceful shutdown handlers\n    const shutdownHandler = () => {\n      if (server) {\n        server.close();\n      }\n    };\n\n    process.on('SIGTERM', shutdownHandler);\n    process.on('SIGINT', shutdownHandler);\n  }\n\n  const instance: ExpressSource = {\n    type: 'express',\n    config: {\n      ...config,\n      settings,\n    },\n    push,\n    app, // Expose app for advanced usage\n    server, // Expose server (if started)\n  };\n\n  return instance;\n};\n\n// Export types (avoid re-exporting duplicates from schemas)\nexport type {\n  ExpressSource,\n  Config,\n  PartialConfig,\n  Types,\n  EventRequest,\n  EventResponse,\n  RequestBody,\n  ResponseBody,\n  Push,\n  Env,\n  Mapping,\n  InitSettings,\n  Settings,\n  RouteConfig,\n  RouteMethod,\n} from './types';\n\n// Export utils\nexport { setCorsHeaders, TRANSPARENT_GIF } from './utils';\n\nexport default sourceExpress;\n","import { zodToSchema } from '@walkeros/core/dev';\nimport { SettingsSchema } from './settings';\n\nexport * from './primitives';\nexport { SettingsSchema, type Settings } from './settings';\n\n// JSON Schema\nexport const settings = zodToSchema(SettingsSchema);\n","import { z } from '@walkeros/core/dev';\nimport { CorsOptionsSchema, RouteConfigSchema } from './primitives';\n\n/**\n * Express source settings schema.\n */\nexport const SettingsSchema = z.object({\n  port: z\n    .number()\n    .int()\n    .min(0)\n    .max(65535)\n    .describe(\n      'HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)',\n    )\n    .optional(),\n\n  /** @deprecated Use `paths` instead */\n  path: z.string().describe('Deprecated: use paths instead').optional(),\n\n  paths: z\n    .array(z.union([z.string(), RouteConfigSchema]))\n    .min(1)\n    .describe(\n      'Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control.',\n    )\n    .optional(),\n\n  cors: z\n    .union([z.boolean(), CorsOptionsSchema])\n    .describe(\n      'CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration',\n    )\n    .default(true),\n\n  status: z\n    .boolean()\n    .describe('Enable health check endpoints (/health, /ready)')\n    .default(true),\n});\n\nexport type Settings = z.infer<typeof SettingsSchema>;\n","import { z } from '@walkeros/core/dev';\n\n/**\n * HTTP methods enum\n */\nexport const HttpMethod = z.enum([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'OPTIONS',\n  'HEAD',\n]);\n\n/**\n * HTTP methods supported for route configuration.\n * OPTIONS is always registered for CORS (not user-configurable per route).\n */\nexport const RouteMethod = z.enum(['GET', 'POST']);\n\n/**\n * Route configuration for multi-path support.\n */\nexport const RouteConfigSchema = z.object({\n  path: z\n    .string()\n    .describe('Express route path (supports wildcards like /api/*)'),\n  methods: z\n    .array(RouteMethod)\n    .min(1)\n    .describe('HTTP methods to register. OPTIONS always included for CORS.')\n    .optional(),\n});\n\n/**\n * CORS origin configuration\n * Accepts:\n * - '*' for all origins\n * - Single URL string\n * - Array of URL strings\n */\nexport const CorsOrigin = z.union([\n  z.string(),\n  z.array(z.string()),\n  z.literal('*'),\n]);\n\n/**\n * CORS options schema\n * Configuration for Cross-Origin Resource Sharing\n */\nexport const CorsOptionsSchema = z.object({\n  origin: CorsOrigin.describe(\n    'Allowed origins (* for all, URL string, or array of URLs)',\n  ).optional(),\n\n  methods: z.array(HttpMethod).describe('Allowed HTTP methods').optional(),\n\n  headers: z.array(z.string()).describe('Allowed request headers').optional(),\n\n  credentials: z\n    .boolean()\n    .describe('Allow credentials (cookies, authorization headers)')\n    .optional(),\n\n  maxAge: z\n    .number()\n    .int()\n    .positive()\n    .describe('Preflight cache duration in seconds')\n    .optional(),\n});\n\nexport type CorsOptions = z.infer<typeof CorsOptionsSchema>;\n","import type { Response } from 'express';\nimport type { CorsOptions } from './schemas';\n\n/**\n * Set CORS headers on response\n *\n * @param res Express response object\n * @param corsConfig CORS configuration (false = disabled, true = allow all, object = custom)\n */\nexport function setCorsHeaders(\n  res: Response,\n  corsConfig: boolean | CorsOptions = true,\n): void {\n  if (corsConfig === false) return;\n\n  if (corsConfig === true) {\n    // Simple CORS - allow all\n    res.set('Access-Control-Allow-Origin', '*');\n    res.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n    res.set('Access-Control-Allow-Headers', 'Content-Type');\n  } else {\n    // Custom CORS configuration\n    if (corsConfig.origin) {\n      const origin = Array.isArray(corsConfig.origin)\n        ? corsConfig.origin.join(', ')\n        : corsConfig.origin;\n      res.set('Access-Control-Allow-Origin', origin);\n    }\n\n    if (corsConfig.methods) {\n      res.set('Access-Control-Allow-Methods', corsConfig.methods.join(', '));\n    }\n\n    if (corsConfig.headers) {\n      res.set('Access-Control-Allow-Headers', corsConfig.headers.join(', '));\n    }\n\n    if (corsConfig.credentials) {\n      res.set('Access-Control-Allow-Credentials', 'true');\n    }\n\n    if (corsConfig.maxAge) {\n      res.set('Access-Control-Max-Age', String(corsConfig.maxAge));\n    }\n  }\n}\n\n/**\n * 1x1 transparent GIF for pixel tracking\n * Base64-encoded GIF (43 bytes)\n */\nexport const TRANSPARENT_GIF = Buffer.from(\n  'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7',\n  'base64',\n);\n"],"mappings":";AAAA,OAAO,aAA8C;AACrD,OAAO,UAAU;AACjB,SAAS,qBAAqB;;;ACF9B,SAAS,mBAAmB;;;ACA5B,SAAS,KAAAA,UAAS;;;ACAlB,SAAS,SAAS;AAKX,IAAM,aAAa,EAAE,KAAK;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,cAAc,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC;AAK1C,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EACH,OAAO,EACP,SAAS,qDAAqD;AAAA,EACjE,SAAS,EACN,MAAM,WAAW,EACjB,IAAI,CAAC,EACL,SAAS,6DAA6D,EACtE,SAAS;AACd,CAAC;AASM,IAAM,aAAa,EAAE,MAAM;AAAA,EAChC,EAAE,OAAO;AAAA,EACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAClB,EAAE,QAAQ,GAAG;AACf,CAAC;AAMM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,QAAQ,WAAW;AAAA,IACjB;AAAA,EACF,EAAE,SAAS;AAAA,EAEX,SAAS,EAAE,MAAM,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS;AAAA,EAEvE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAE1E,aAAa,EACV,QAAQ,EACR,SAAS,oDAAoD,EAC7D,SAAS;AAAA,EAEZ,QAAQ,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,SAAS,qCAAqC,EAC9C,SAAS;AACd,CAAC;;;ADlEM,IAAM,iBAAiBC,GAAE,OAAO;AAAA,EACrC,MAAMA,GACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,KAAK,EACT;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA;AAAA,EAGZ,MAAMA,GAAE,OAAO,EAAE,SAAS,+BAA+B,EAAE,SAAS;AAAA,EAEpE,OAAOA,GACJ,MAAMA,GAAE,MAAM,CAACA,GAAE,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAC9C,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF,EACC,SAAS;AAAA,EAEZ,MAAMA,GACH,MAAM,CAACA,GAAE,QAAQ,GAAG,iBAAiB,CAAC,EACtC;AAAA,IACC;AAAA,EACF,EACC,QAAQ,IAAI;AAAA,EAEf,QAAQA,GACL,QAAQ,EACR,SAAS,iDAAiD,EAC1D,QAAQ,IAAI;AACjB,CAAC;;;ADhCM,IAAM,WAAW,YAAY,cAAc;;;AGE3C,SAAS,eACd,KACA,aAAoC,MAC9B;AACN,MAAI,eAAe,MAAO;AAE1B,MAAI,eAAe,MAAM;AAEvB,QAAI,IAAI,+BAA+B,GAAG;AAC1C,QAAI,IAAI,gCAAgC,oBAAoB;AAC5D,QAAI,IAAI,gCAAgC,cAAc;AAAA,EACxD,OAAO;AAEL,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,MAAM,QAAQ,WAAW,MAAM,IAC1C,WAAW,OAAO,KAAK,IAAI,IAC3B,WAAW;AACf,UAAI,IAAI,+BAA+B,MAAM;AAAA,IAC/C;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,SAAS;AACtB,UAAI,IAAI,gCAAgC,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA,IACvE;AAEA,QAAI,WAAW,aAAa;AAC1B,UAAI,IAAI,oCAAoC,MAAM;AAAA,IACpD;AAEA,QAAI,WAAW,QAAQ;AACrB,UAAI,IAAI,0BAA0B,OAAO,WAAW,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAMO,IAAM,kBAAkB,OAAO;AAAA,EACpC;AAAA,EACA;AACF;;;AJjCO,IAAM,gBAAgB,OAC3B,YAC2B;AAvB7B;AAwBE,QAAM,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI;AAG7B,QAAM,SAAS,eAAe,MAAM,OAAO,YAAY,CAAC,CAAC;AACzD,QAAMC,YAAW;AAAA,IACf,GAAG;AAAA,IACH,QAAO,YAAO,UAAP,YAAiB,OAAO,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;AAAA,EACnE;AAEA,QAAM,MAAM,QAAQ;AAGpB,MAAI,IAAI,QAAQ,KAAK,EAAE,OAAO,MAAM,CAAC,CAAC;AAGtC,MAAIA,UAAS,SAAS,OAAO;AAC3B,UAAM,cAAcA,UAAS,SAAS,OAAO,CAAC,IAAIA,UAAS;AAC3D,QAAI,IAAI,KAAK,WAAW,CAAC;AAAA,EAC3B;AAMA,QAAM,OAAO,OAAO,KAAc,QAAiC;AACjE,QAAI;AAEF,UAAI,IAAI,WAAW,WAAW;AAC5B,uBAAe,KAAKA,UAAS,IAAI;AACjC,YAAI,OAAO,GAAG,EAAE,KAAK;AACrB;AAAA,MACF;AAGA,YAAM,QAAQ,UAAU,GAAG;AAG3B,UAAI,IAAI,WAAW,OAAO;AAExB,cAAM,aAAa,cAAc,IAAI,GAAG;AAGxC,YAAI,cAAc,OAAO,eAAe,UAAU;AAChD,gBAAM,IAAI,KAAK,UAAU;AAAA,QAC3B;AAGA,YAAI,IAAI,gBAAgB,WAAW;AACnC,YAAI,IAAI,iBAAiB,qCAAqC;AAC9D,YAAI,KAAK,eAAe;AACxB;AAAA,MACF;AAGA,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,YAAY,IAAI;AAEtB,YAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,SAAS;AAAA,YACT,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AAGA,cAAM,IAAI,KAAK,SAAS;AAExB,YAAI,KAAK;AAAA,UACP,SAAS;AAAA,UACT,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,gBAAgBA,UAAS,MAAM;AAAA,IAAI,CAAC,UACxC,OAAO,UAAU,WACb,EAAE,MAAM,OAAO,SAAS,CAAC,OAAO,MAAM,EAAW,IACjD;AAAA,MACE,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM,WAAY,CAAC,OAAO,MAAM;AAAA,IAC3C;AAAA,EACN;AAEA,aAAW,SAAS,eAAe;AACjC,QAAI,MAAM,QAAQ,SAAS,MAAM,EAAG,KAAI,KAAK,MAAM,MAAM,IAAI;AAC7D,QAAI,MAAM,QAAQ,SAAS,KAAK,EAAG,KAAI,IAAI,MAAM,MAAM,IAAI;AAC3D,QAAI,QAAQ,MAAM,MAAM,IAAI;AAAA,EAC9B;AAGA,MAAIA,UAAS,QAAQ;AACnB,QAAI,IAAI,WAAW,CAAC,KAAK,QAAQ;AAC/B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAED,QAAI,IAAI,UAAU,CAAC,KAAK,QAAQ;AAC9B,UAAI,KAAK;AAAA,QACP,QAAQ;AAAA,QACR,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAGA,MAAI;AAEJ,MAAIA,UAAS,SAAS,QAAW;AAC/B,aAAS,IAAI,OAAOA,UAAS,MAAM,MAAM;AACvC,YAAM,eAAeA,UAAS,SAC1B;AAAA;AAAA,mCACA;AACJ,YAAM,aAAa,cAChB,IAAI,CAAC,MAAM;AACV,cAAM,UAAU,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,KAAK,IAAI;AACnD,eAAO,MAAM,OAAO,IAAI,EAAE,IAAI;AAAA,MAChC,CAAC,EACA,KAAK,IAAI;AACZ,UAAI,OAAO;AAAA,QACT,oCAAoCA,UAAS,IAAI;AAAA,IAC/C,aACA;AAAA,MACJ;AAAA,IACF,CAAC;AAGD,UAAM,kBAAkB,MAAM;AAC5B,UAAI,QAAQ;AACV,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAEA,YAAQ,GAAG,WAAW,eAAe;AACrC,YAAQ,GAAG,UAAU,eAAe;AAAA,EACtC;AAEA,QAAM,WAA0B;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,GAAG;AAAA,MACH,UAAAA;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,SAAO;AACT;AAwBA,IAAO,gBAAQ;","names":["z","z","settings"]}

package/dist/walkerOS.json

@@ -0,0 +1,140 @@
+{
+  "$meta": {
+    "package": "@walkeros/server-source-express",
+    "version": "1.0.5",
+    "type": "source",
+    "platform": "server"
+  },
+  "schemas": {
+    "settings": {
+      "$schema": "http://json-schema.org/draft-07/schema#",
+      "type": "object",
+      "properties": {
+        "port": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 65535,
+          "description": "HTTP server port to listen on. Use 0 for random available port. If not provided, server will not start (app only mode)"
+        },
+        "path": {
+          "type": "string",
+          "description": "Deprecated: use paths instead"
+        },
+        "paths": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "path": {
+                    "type": "string",
+                    "description": "Express route path (supports wildcards like /api/*)"
+                  },
+                  "methods": {
+                    "minItems": 1,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "enum": [
+                        "GET",
+                        "POST"
+                      ]
+                    },
+                    "description": "HTTP methods to register. OPTIONS always included for CORS."
+                  }
+                },
+                "required": [
+                  "path"
+                ],
+                "additionalProperties": false
+              }
+            ]
+          },
+          "description": "Route paths to register. String shorthand registers GET+POST. RouteConfig allows per-route method control."
+        },
+        "cors": {
+          "default": true,
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "origin": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    },
+                    {
+                      "type": "string",
+                      "const": "*"
+                    }
+                  ],
+                  "description": "Allowed origins (* for all, URL string, or array of URLs)"
+                },
+                "methods": {
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "enum": [
+                      "GET",
+                      "POST",
+                      "PUT",
+                      "PATCH",
+                      "DELETE",
+                      "OPTIONS",
+                      "HEAD"
+                    ]
+                  },
+                  "description": "Allowed HTTP methods"
+                },
+                "headers": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Allowed request headers"
+                },
+                "credentials": {
+                  "type": "boolean",
+                  "description": "Allow credentials (cookies, authorization headers)"
+                },
+                "maxAge": {
+                  "type": "integer",
+                  "exclusiveMinimum": 0,
+                  "maximum": 9007199254740991,
+                  "description": "Preflight cache duration in seconds"
+                }
+              },
+              "additionalProperties": false
+            }
+          ],
+          "description": "CORS configuration: false = disabled, true = allow all origins (default), object = custom configuration"
+        },
+        "status": {
+          "default": true,
+          "type": "boolean",
+          "description": "Enable health check endpoints (/health, /ready)"
+        }
+      },
+      "required": [
+        "cors",
+        "status"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "examples": {}
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@walkeros/server-source-express",
   "description": "Express server source for walkerOS",
-  "version": "1.0.4",
+  "version": "1.1.0-next-1771252576264",
   "license": "MIT",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -13,12 +13,13 @@
     "build": "tsup --silent",
     "clean": "rm -rf .turbo && rm -rf node_modules && rm -rf dist",
     "dev": "jest --watchAll --colors",
-    "lint": "tsc && eslint \"**/*.ts*\"",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint \"**/*.ts*\"",
     "test": "jest",
     "update": "npx npm-check-updates -u && npm update"
   },
   "dependencies": {
-    "@walkeros/core": "1.2.2",
+    "@walkeros/core": "1.4.0-next-1771252576264",
     "express": "^5.2.1",
     "cors": "^2.8.5"
   },
@@ -35,13 +36,18 @@
   "bugs": {
     "url": "https://github.com/elbwalker/walkerOS/issues"
   },
+  "walkerOS": {
+    "type": "source",
+    "platform": "server"
+  },
   "keywords": [
-    "walker",
     "walkerOS",
+    "walkerOS-source",
     "source",
     "server",
     "express",
-    "http"
+    "http",
+    "analytics"
   ],
   "funding": [
     {