spikard_core/

parameters.rs

//! Parameter validation using JSON Schema
//!
//! This module provides validation for request parameters (query, path, header, cookie)
//! using JSON Schema as the validation contract.

use crate::debug_log_module;
use crate::validation::{ValidationError, ValidationErrorDetail};
use serde_json::{Value, json};
use std::collections::HashMap;

/// Parameter source - where the parameter comes from
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum ParameterSource {
    Query,
    Path,
    Header,
    Cookie,
}

impl ParameterSource {
    fn from_str(s: &str) -> Option<Self> {
        match s {
            "query" => Some(Self::Query),
            "path" => Some(Self::Path),
            "header" => Some(Self::Header),
            "cookie" => Some(Self::Cookie),
            _ => None,
        }
    }
}

/// Parameter definition extracted from schema
#[derive(Debug, Clone)]
struct ParameterDef {
    name: String,
    source: ParameterSource,
    expected_type: Option<String>,
    format: Option<String>,
    required: bool,
}

/// Parameter validator that uses JSON Schema
#[derive(Clone, Debug)]
pub struct ParameterValidator {
    schema: Value,
    parameter_defs: Vec<ParameterDef>,
}

impl ParameterValidator {
    /// Create a new parameter validator from a JSON Schema
    ///
    /// The schema should describe all parameters with their types and constraints.
    /// Each property MUST have a "source" field indicating where the parameter comes from.
    pub fn new(schema: Value) -> Result<Self, String> {
        let parameter_defs = Self::extract_parameter_defs(&schema)?;

        Ok(Self { schema, parameter_defs })
    }

    /// Extract parameter definitions from the schema
    fn extract_parameter_defs(schema: &Value) -> Result<Vec<ParameterDef>, String> {
        let mut defs = Vec::new();

        let properties = schema
            .get("properties")
            .and_then(|p| p.as_object())
            .cloned()
            .unwrap_or_default();

        let required_list = schema
            .get("required")
            .and_then(|r| r.as_array())
            .map(|arr| arr.iter().filter_map(|v| v.as_str()).collect::<Vec<_>>())
            .unwrap_or_default();

        for (name, prop) in properties {
            let source_str = prop.get("source").and_then(|s| s.as_str()).ok_or_else(|| {
                anyhow::anyhow!("Invalid parameter schema")
                    .context(format!("Parameter '{}' missing required 'source' field", name))
                    .to_string()
            })?;

            let source = ParameterSource::from_str(source_str).ok_or_else(|| {
                anyhow::anyhow!("Invalid parameter schema")
                    .context(format!(
                        "Invalid source '{}' for parameter '{}' (expected: query, path, header, or cookie)",
                        source_str, name
                    ))
                    .to_string()
            })?;

            let expected_type = prop.get("type").and_then(|t| t.as_str()).map(String::from);
            let format = prop.get("format").and_then(|f| f.as_str()).map(String::from);

            let is_optional = prop.get("optional").and_then(|v| v.as_bool()).unwrap_or(false);
            let required = required_list.contains(&name.as_str()) && !is_optional;

            defs.push(ParameterDef {
                name: name.clone(),
                source,
                expected_type,
                format,
                required,
            });
        }

        Ok(defs)
    }

    /// Get the underlying JSON Schema
    pub fn schema(&self) -> &Value {
        &self.schema
    }

    /// Validate and extract parameters from the request
    ///
    /// This builds a JSON object from query/path/header/cookie params and validates it.
    /// It performs type coercion (e.g., "123" → 123) based on the schema.
    ///
    /// Returns the validated JSON object that can be directly converted to Python kwargs.
    pub fn validate_and_extract(
        &self,
        query_params: &Value,
        raw_query_params: &HashMap<String, Vec<String>>,
        path_params: &HashMap<String, String>,
        headers: &HashMap<String, String>,
        cookies: &HashMap<String, String>,
    ) -> Result<Value, ValidationError> {
        tracing::debug!(
            "validate_and_extract called with query_params: {:?}, path_params: {:?}, headers: {} items, cookies: {} items",
            query_params,
            path_params,
            headers.len(),
            cookies.len()
        );
        tracing::debug!("parameter_defs count: {}", self.parameter_defs.len());

        let mut params_map = serde_json::Map::new();
        let mut errors = Vec::new();
        let mut raw_values_map: HashMap<String, String> = HashMap::new();

        for param_def in &self.parameter_defs {
            tracing::debug!(
                "Processing param: {:?}, source: {:?}, required: {}, expected_type: {:?}",
                param_def.name,
                param_def.source,
                param_def.required,
                param_def.expected_type
            );

            if param_def.source == ParameterSource::Query && param_def.expected_type.as_deref() == Some("array") {
                let query_value = query_params.get(&param_def.name);

                if param_def.required && query_value.is_none() {
                    errors.push(ValidationErrorDetail {
                        error_type: "missing".to_string(),
                        loc: vec!["query".to_string(), param_def.name.clone()],
                        msg: "Field required".to_string(),
                        input: Value::Null,
                        ctx: None,
                    });
                    continue;
                }

                if let Some(value) = query_value {
                    let array_value = if value.is_array() {
                        value.clone()
                    } else {
                        Value::Array(vec![value.clone()])
                    };
                    let (item_type, item_format) = self.array_item_type_and_format(&param_def.name);

                    let coerced_items = match array_value.as_array() {
                        Some(items) => {
                            let mut out = Vec::with_capacity(items.len());
                            for item in items {
                                if let Some(text) = item.as_str() {
                                    match Self::coerce_value(text, item_type, item_format) {
                                        Ok(coerced) => out.push(coerced),
                                        Err(e) => {
                                            errors.push(ValidationErrorDetail {
                                                error_type: match item_type {
                                                    Some("integer") => "int_parsing".to_string(),
                                                    Some("number") => "float_parsing".to_string(),
                                                    Some("boolean") => "bool_parsing".to_string(),
                                                    Some("string") => match item_format {
                                                        Some("uuid") => "uuid_parsing".to_string(),
                                                        Some("date") => "date_parsing".to_string(),
                                                        Some("date-time") => "datetime_parsing".to_string(),
                                                        Some("time") => "time_parsing".to_string(),
                                                        Some("duration") => "duration_parsing".to_string(),
                                                        _ => "type_error".to_string(),
                                                    },
                                                    _ => "type_error".to_string(),
                                                },
                                                loc: vec!["query".to_string(), param_def.name.clone()],
                                                msg: match item_type {
                                                    Some("integer") => "Input should be a valid integer, unable to parse string as an integer".to_string(),
                                                    Some("number") => "Input should be a valid number, unable to parse string as a number".to_string(),
                                                    Some("boolean") => "Input should be a valid boolean, unable to interpret input".to_string(),
                                                    Some("string") => match item_format {
                                                        Some("uuid") => format!("Input should be a valid UUID, {}", e),
                                                        Some("date") => format!("Input should be a valid date, {}", e),
                                                        Some("date-time") => format!("Input should be a valid datetime, {}", e),
                                                        Some("time") => format!("Input should be a valid time, {}", e),
                                                        Some("duration") => format!("Input should be a valid duration, {}", e),
                                                        _ => e.clone(),
                                                    },
                                                    _ => e.clone(),
                                                },
                                                input: Value::String(text.to_string()),
                                                ctx: None,
                                            });
                                        }
                                    }
                                } else {
                                    out.push(item.clone());
                                }
                            }
                            out
                        }
                        None => Vec::new(),
                    };

                    params_map.insert(param_def.name.clone(), Value::Array(coerced_items));
                }
                continue;
            }

            let raw_value_string = match param_def.source {
                ParameterSource::Query => raw_query_params
                    .get(&param_def.name)
                    .and_then(|values| values.first())
                    .map(String::as_str),
                ParameterSource::Path => path_params.get(&param_def.name).map(String::as_str),
                ParameterSource::Header => {
                    let header_name = param_def.name.replace('_', "-").to_lowercase();
                    headers.get(&header_name).map(String::as_str)
                }
                ParameterSource::Cookie => cookies.get(&param_def.name).map(String::as_str),
            };

            tracing::debug!("raw_value_string for {}: {:?}", param_def.name, raw_value_string);

            if param_def.required && raw_value_string.is_none() {
                let source_str = match param_def.source {
                    ParameterSource::Query => "query",
                    ParameterSource::Path => "path",
                    ParameterSource::Header => "headers",
                    ParameterSource::Cookie => "cookie",
                };
                let param_name_for_error = if param_def.source == ParameterSource::Header {
                    param_def.name.replace('_', "-").to_lowercase()
                } else {
                    param_def.name.clone()
                };
                errors.push(ValidationErrorDetail {
                    error_type: "missing".to_string(),
                    loc: vec![source_str.to_string(), param_name_for_error],
                    msg: "Field required".to_string(),
                    input: Value::Null,
                    ctx: None,
                });
                continue;
            }

            if let Some(value_str) = raw_value_string {
                tracing::debug!(
                    "Coercing value '{}' to type {:?} with format {:?}",
                    value_str,
                    param_def.expected_type,
                    param_def.format
                );
                match Self::coerce_value(
                    value_str,
                    param_def.expected_type.as_deref(),
                    param_def.format.as_deref(),
                ) {
                    Ok(coerced) => {
                        tracing::debug!("Coerced to: {:?}", coerced);
                        params_map.insert(param_def.name.clone(), coerced);
                        raw_values_map.insert(param_def.name.clone(), value_str.to_string());
                    }
                    Err(e) => {
                        tracing::debug!("Coercion failed: {}", e);
                        let source_str = match param_def.source {
                            ParameterSource::Query => "query",
                            ParameterSource::Path => "path",
                            ParameterSource::Header => "headers",
                            ParameterSource::Cookie => "cookie",
                        };
                        let (error_type, error_msg) =
                            match (param_def.expected_type.as_deref(), param_def.format.as_deref()) {
                                (Some("integer"), _) => (
                                    "int_parsing",
                                    "Input should be a valid integer, unable to parse string as an integer".to_string(),
                                ),
                                (Some("number"), _) => (
                                    "float_parsing",
                                    "Input should be a valid number, unable to parse string as a number".to_string(),
                                ),
                                (Some("boolean"), _) => (
                                    "bool_parsing",
                                    "Input should be a valid boolean, unable to interpret input".to_string(),
                                ),
                                (Some("string"), Some("uuid")) => {
                                    ("uuid_parsing", format!("Input should be a valid UUID, {}", e))
                                }
                                (Some("string"), Some("date")) => {
                                    ("date_parsing", format!("Input should be a valid date, {}", e))
                                }
                                (Some("string"), Some("date-time")) => {
                                    ("datetime_parsing", format!("Input should be a valid datetime, {}", e))
                                }
                                (Some("string"), Some("time")) => {
                                    ("time_parsing", format!("Input should be a valid time, {}", e))
                                }
                                (Some("string"), Some("duration")) => {
                                    ("duration_parsing", format!("Input should be a valid duration, {}", e))
                                }
                                _ => ("type_error", e.clone()),
                            };
                        let param_name_for_error = if param_def.source == ParameterSource::Header {
                            param_def.name.replace('_', "-").to_lowercase()
                        } else {
                            param_def.name.clone()
                        };
                        errors.push(ValidationErrorDetail {
                            error_type: error_type.to_string(),
                            loc: vec![source_str.to_string(), param_name_for_error],
                            msg: error_msg,
                            input: Value::String(value_str.to_string()),
                            ctx: None,
                        });
                    }
                }
            }
        }

        if !errors.is_empty() {
            tracing::debug!("Errors during extraction: {:?}", errors);
            return Err(ValidationError { errors });
        }

        let params_json = Value::Object(params_map.clone());
        tracing::debug!("params_json after coercion: {:?}", params_json);

        let validation_schema = self.create_validation_schema();
        tracing::debug!("validation_schema: {:?}", validation_schema);

        let validator = crate::validation::SchemaValidator::new(validation_schema).map_err(|e| ValidationError {
            errors: vec![ValidationErrorDetail {
                error_type: "schema_error".to_string(),
                loc: vec!["schema".to_string()],
                msg: e,
                input: Value::Null,
                ctx: None,
            }],
        })?;

        tracing::debug!("About to validate params_json against schema");
        tracing::debug!("params_json = {:?}", params_json);
        tracing::debug!(
            "params_json pretty = {}",
            serde_json::to_string_pretty(&params_json).unwrap_or_default()
        );
        tracing::debug!(
            "schema = {}",
            serde_json::to_string_pretty(&self.schema).unwrap_or_default()
        );
        match validator.validate(&params_json) {
            Ok(_) => {
                tracing::debug!("Validation succeeded");
                Ok(params_json)
            }
            Err(mut validation_err) => {
                tracing::debug!("Validation failed: {:?}", validation_err);

                for error in &mut validation_err.errors {
                    if error.loc.len() >= 2 && error.loc[0] == "body" {
                        let param_name = &error.loc[1];
                        if let Some(param_def) = self.parameter_defs.iter().find(|p| &p.name == param_name) {
                            let source_str = match param_def.source {
                                ParameterSource::Query => "query",
                                ParameterSource::Path => "path",
                                ParameterSource::Header => "headers",
                                ParameterSource::Cookie => "cookie",
                            };
                            error.loc[0] = source_str.to_string();

                            if param_def.source == ParameterSource::Header {
                                error.loc[1] = param_def.name.replace('_', "-").to_lowercase();
                            }

                            if let Some(raw_value) = raw_values_map.get(&param_def.name) {
                                error.input = Value::String(raw_value.clone());
                            }
                        }
                    }
                }

                debug_log_module!(
                    "parameters",
                    "Returning {} validation errors",
                    validation_err.errors.len()
                );
                for (i, error) in validation_err.errors.iter().enumerate() {
                    debug_log_module!(
                        "parameters",
                        "  Error {}: type={}, loc={:?}, msg={}, input={}, ctx={:?}",
                        i,
                        error.error_type,
                        error.loc,
                        error.msg,
                        error.input,
                        error.ctx
                    );
                }
                #[allow(clippy::collapsible_if)]
                if crate::debug::is_enabled() {
                    if let Ok(json_errors) = serde_json::to_value(&validation_err.errors) {
                        if let Ok(json_str) = serde_json::to_string_pretty(&json_errors) {
                            debug_log_module!("parameters", "Serialized errors:\n{}", json_str);
                        }
                    }
                }

                Err(validation_err)
            }
        }
    }

    fn array_item_type_and_format(&self, name: &str) -> (Option<&str>, Option<&str>) {
        let Some(prop) = self
            .schema
            .get("properties")
            .and_then(|value| value.as_object())
            .and_then(|props| props.get(name))
        else {
            return (None, None);
        };

        let Some(items) = prop.get("items") else {
            return (None, None);
        };

        let item_type = items.get("type").and_then(|value| value.as_str());
        let item_format = items.get("format").and_then(|value| value.as_str());
        (item_type, item_format)
    }

    /// Coerce a string value to the expected JSON type
    fn coerce_value(value: &str, expected_type: Option<&str>, format: Option<&str>) -> Result<Value, String> {
        if let Some(fmt) = format {
            match fmt {
                "uuid" => {
                    Self::validate_uuid_format(value)?;
                    return Ok(json!(value));
                }
                "date" => {
                    Self::validate_date_format(value)?;
                    return Ok(json!(value));
                }
                "date-time" => {
                    Self::validate_datetime_format(value)?;
                    return Ok(json!(value));
                }
                "time" => {
                    Self::validate_time_format(value)?;
                    return Ok(json!(value));
                }
                "duration" => {
                    Self::validate_duration_format(value)?;
                    return Ok(json!(value));
                }
                _ => {}
            }
        }

        match expected_type {
            Some("integer") => value
                .parse::<i64>()
                .map(|i| json!(i))
                .map_err(|e| format!("Invalid integer: {}", e)),
            Some("number") => value
                .parse::<f64>()
                .map(|f| json!(f))
                .map_err(|e| format!("Invalid number: {}", e)),
            Some("boolean") => {
                if value.is_empty() {
                    return Ok(json!(false));
                }
                let value_lower = value.to_lowercase();
                if value_lower == "true" || value == "1" {
                    Ok(json!(true))
                } else if value_lower == "false" || value == "0" {
                    Ok(json!(false))
                } else {
                    Err(format!("Invalid boolean: {}", value))
                }
            }
            _ => Ok(json!(value)),
        }
    }

    /// Validate ISO 8601 date format: YYYY-MM-DD
    fn validate_date_format(value: &str) -> Result<(), String> {
        jiff::civil::Date::strptime("%Y-%m-%d", value)
            .map(|_| ())
            .map_err(|e| format!("Invalid date format: {}", e))
    }

    /// Validate ISO 8601 datetime format
    fn validate_datetime_format(value: &str) -> Result<(), String> {
        use std::str::FromStr;
        jiff::Timestamp::from_str(value)
            .map(|_| ())
            .map_err(|e| format!("Invalid datetime format: {}", e))
    }

    /// Validate ISO 8601 time format: HH:MM:SS or HH:MM:SS.ffffff
    fn validate_time_format(value: &str) -> Result<(), String> {
        let (time_part, offset_part) = if let Some(stripped) = value.strip_suffix('Z') {
            (stripped, "Z")
        } else {
            let plus = value.rfind('+');
            let minus = value.rfind('-');
            let split_at = match (plus, minus) {
                (Some(p), Some(m)) => Some(std::cmp::max(p, m)),
                (Some(p), None) => Some(p),
                (None, Some(m)) => Some(m),
                (None, None) => None,
            }
            .ok_or_else(|| "Invalid time format: missing timezone offset".to_string())?;

            if split_at < 8 {
                return Err("Invalid time format: timezone offset position is invalid".to_string());
            }

            (&value[..split_at], &value[split_at..])
        };

        let base_time = time_part.split('.').next().unwrap_or(time_part);
        jiff::civil::Time::strptime("%H:%M:%S", base_time).map_err(|e| format!("Invalid time format: {}", e))?;

        if let Some((_, frac)) = time_part.split_once('.')
            && (frac.is_empty() || frac.len() > 9 || !frac.chars().all(|c| c.is_ascii_digit()))
        {
            return Err("Invalid time format: fractional seconds must be 1-9 digits".to_string());
        }

        if offset_part != "Z" {
            let sign = offset_part
                .chars()
                .next()
                .ok_or_else(|| "Invalid time format: empty timezone offset".to_string())?;
            if sign != '+' && sign != '-' {
                return Err("Invalid time format: timezone offset must start with + or -".to_string());
            }

            let rest = &offset_part[1..];
            let (hours_str, minutes_str) = rest
                .split_once(':')
                .ok_or_else(|| "Invalid time format: timezone offset must be ±HH:MM".to_string())?;
            let hours: u8 = hours_str
                .parse()
                .map_err(|_| "Invalid time format: invalid timezone hours".to_string())?;
            let minutes: u8 = minutes_str
                .parse()
                .map_err(|_| "Invalid time format: invalid timezone minutes".to_string())?;
            if hours > 23 || minutes > 59 {
                return Err("Invalid time format: timezone offset out of range".to_string());
            }
        }

        Ok(())
    }

    /// Validate duration format (simplified - accept ISO 8601 duration or simple formats)
    fn validate_duration_format(value: &str) -> Result<(), String> {
        use std::str::FromStr;
        jiff::Span::from_str(value)
            .map(|_| ())
            .map_err(|e| format!("Invalid duration format: {}", e))
    }

    /// Validate UUID format
    fn validate_uuid_format(value: &str) -> Result<(), String> {
        use std::str::FromStr;
        uuid::Uuid::from_str(value)
            .map(|_| ())
            .map_err(|_e| format!("invalid character: expected an optional prefix of `urn:uuid:` followed by [0-9a-fA-F-], found `{}` at {}",
                value.chars().next().unwrap_or('?'),
                value.chars().position(|c| !c.is_ascii_hexdigit() && c != '-').unwrap_or(0)))
    }

    /// Create a validation schema without the "source" fields
    /// (JSON Schema doesn't recognize "source" as a standard field)
    fn create_validation_schema(&self) -> Value {
        let mut schema = self.schema.clone();

        if let Some(properties) = schema.get_mut("properties").and_then(|p| p.as_object_mut()) {
            for (_name, prop) in properties.iter_mut() {
                if let Some(obj) = prop.as_object_mut() {
                    obj.remove("source");
                }
            }
        }

        schema
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use serde_json::json;

    #[test]
    fn test_array_query_parameter() {
        let schema = json!({
            "type": "object",
            "properties": {
                "device_ids": {
                    "type": "array",
                    "items": {"type": "integer"},
                    "source": "query"
                }
            },
            "required": []
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let query_params = json!({
            "device_ids": [1, 2]
        });
        let raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        let path_params = HashMap::new();

        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(
            result.is_ok(),
            "Array query param validation failed: {:?}",
            result.err()
        );

        let extracted = result.unwrap();
        assert_eq!(extracted["device_ids"], json!([1, 2]));
    }

    #[test]
    fn test_path_parameter_extraction() {
        let schema = json!({
            "type": "object",
            "properties": {
                "item_id": {
                    "type": "string",
                    "source": "path"
                }
            },
            "required": ["item_id"]
        });

        let validator = ParameterValidator::new(schema).expect("Failed to create validator");

        let mut path_params = HashMap::new();
        path_params.insert("item_id".to_string(), "foobar".to_string());
        let query_params = json!({});
        let raw_query_params: HashMap<String, Vec<String>> = HashMap::new();

        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed: {:?}", result);

        let params = result.unwrap();
        assert_eq!(params, json!({"item_id": "foobar"}));
    }

    #[test]
    fn test_boolean_path_parameter_coercion() {
        let schema = json!({
            "type": "object",
            "properties": {
                "value": {
                    "type": "boolean",
                    "source": "path"
                }
            },
            "required": ["value"]
        });

        let validator = ParameterValidator::new(schema).expect("Failed to create validator");

        let mut path_params = HashMap::new();
        path_params.insert("value".to_string(), "True".to_string());
        let query_params = json!({});
        let raw_query_params: HashMap<String, Vec<String>> = HashMap::new();

        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        if result.is_err() {
            eprintln!("Error for 'True': {:?}", result);
        }
        assert!(result.is_ok(), "Validation should succeed for 'True': {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"value": true}));

        path_params.insert("value".to_string(), "1".to_string());
        let query_params_1 = json!({});
        let result = validator.validate_and_extract(
            &query_params_1,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed for '1': {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"value": true}));

        path_params.insert("value".to_string(), "false".to_string());
        let query_params_false = json!({});
        let result = validator.validate_and_extract(
            &query_params_false,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed for 'false': {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"value": false}));

        path_params.insert("value".to_string(), "TRUE".to_string());
        let query_params_true = json!({});
        let result = validator.validate_and_extract(
            &query_params_true,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed for 'TRUE': {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"value": true}));
    }

    #[test]
    fn test_boolean_query_parameter_coercion() {
        let schema = json!({
            "type": "object",
            "properties": {
                "flag": {
                    "type": "boolean",
                    "source": "query"
                }
            },
            "required": ["flag"]
        });

        let validator = ParameterValidator::new(schema).expect("Failed to create validator");
        let path_params = HashMap::new();

        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["1".to_string()]);
        let query_params = json!({"flag": 1});
        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed for integer 1: {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"flag": true}));

        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["0".to_string()]);
        let query_params = json!({"flag": 0});
        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(result.is_ok(), "Validation should succeed for integer 0: {:?}", result);
        let params = result.unwrap();
        assert_eq!(params, json!({"flag": false}));

        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["true".to_string()]);
        let query_params = json!({"flag": true});
        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(
            result.is_ok(),
            "Validation should succeed for boolean true: {:?}",
            result
        );
        let params = result.unwrap();
        assert_eq!(params, json!({"flag": true}));

        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["false".to_string()]);
        let query_params = json!({"flag": false});
        let result = validator.validate_and_extract(
            &query_params,
            &raw_query_params,
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );
        assert!(
            result.is_ok(),
            "Validation should succeed for boolean false: {:?}",
            result
        );
        let params = result.unwrap();
        assert_eq!(params, json!({"flag": false}));
    }

    #[test]
    fn test_integer_coercion_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "count": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["count"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("count".to_string(), vec!["not_a_number".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"count": "not_a_number"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err(), "Should fail to coerce non-integer string");
        let err = result.unwrap_err();
        assert_eq!(err.errors.len(), 1);
        assert_eq!(err.errors[0].error_type, "int_parsing");
        assert_eq!(err.errors[0].loc, vec!["query".to_string(), "count".to_string()]);
        assert!(err.errors[0].msg.contains("valid integer"));
    }

    #[test]
    fn test_integer_coercion_with_letters_mixed_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "id": {
                    "type": "integer",
                    "source": "path"
                }
            },
            "required": ["id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut path_params = HashMap::new();
        path_params.insert("id".to_string(), "123abc".to_string());

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "int_parsing");
    }

    #[test]
    fn test_integer_coercion_overflow_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "big_num": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["big_num"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let too_large = "9223372036854775808";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("big_num".to_string(), vec![too_large.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"big_num": too_large}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err(), "Should fail on integer overflow");
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "int_parsing");
    }

    #[test]
    fn test_integer_coercion_negative_overflow_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "small_num": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["small_num"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let too_small = "-9223372036854775809";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("small_num".to_string(), vec![too_small.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"small_num": too_small}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "int_parsing");
    }

    #[test]
    fn test_float_coercion_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "price": {
                    "type": "number",
                    "source": "query"
                }
            },
            "required": ["price"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("price".to_string(), vec!["not.a.number".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"price": "not.a.number"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "float_parsing");
        assert!(err.errors[0].msg.contains("valid number"));
    }

    #[test]
    fn test_float_coercion_scientific_notation_success() {
        let schema = json!({
            "type": "object",
            "properties": {
                "value": {
                    "type": "number",
                    "source": "query"
                }
            },
            "required": ["value"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("value".to_string(), vec!["1.5e10".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"value": 1.5e10}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["value"], json!(1.5e10));
    }

    #[test]
    fn test_boolean_coercion_empty_string_returns_false() {
        // BUG: Empty string returns false instead of error - this is behavior to verify
        let schema = json!({
            "type": "object",
            "properties": {
                "flag": {
                    "type": "boolean",
                    "source": "query"
                }
            },
            "required": ["flag"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"flag": ""}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["flag"], json!(false));
    }

    #[test]
    fn test_boolean_coercion_whitespace_string_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "flag": {
                    "type": "boolean",
                    "source": "query"
                }
            },
            "required": ["flag"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["   ".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"flag": "   "}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err(), "Whitespace-only string should fail boolean parsing");
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "bool_parsing");
    }

    #[test]
    fn test_boolean_coercion_invalid_value_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "enabled": {
                    "type": "boolean",
                    "source": "path"
                }
            },
            "required": ["enabled"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut path_params = HashMap::new();
        path_params.insert("enabled".to_string(), "maybe".to_string());

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "bool_parsing");
        assert!(err.errors[0].msg.contains("valid boolean"));
    }

    #[test]
    fn test_required_query_parameter_missing_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "required_param": {
                    "type": "string",
                    "source": "query"
                }
            },
            "required": ["required_param"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "missing");
        assert_eq!(
            err.errors[0].loc,
            vec!["query".to_string(), "required_param".to_string()]
        );
        assert!(err.errors[0].msg.contains("required"));
    }

    #[test]
    fn test_required_path_parameter_missing_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "user_id": {
                    "type": "string",
                    "source": "path"
                }
            },
            "required": ["user_id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "missing");
        assert_eq!(err.errors[0].loc, vec!["path".to_string(), "user_id".to_string()]);
    }

    #[test]
    fn test_required_header_parameter_missing_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "Authorization": {
                    "type": "string",
                    "source": "header"
                }
            },
            "required": ["Authorization"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "missing");
        assert_eq!(
            err.errors[0].loc,
            vec!["headers".to_string(), "authorization".to_string()]
        );
    }

    #[test]
    fn test_required_cookie_parameter_missing_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "session_id": {
                    "type": "string",
                    "source": "cookie"
                }
            },
            "required": ["session_id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "missing");
        assert_eq!(err.errors[0].loc, vec!["cookie".to_string(), "session_id".to_string()]);
    }

    #[test]
    fn test_optional_parameter_missing_succeeds() {
        let schema = json!({
            "type": "object",
            "properties": {
                "optional_param": {
                    "type": "string",
                    "source": "query",
                    "optional": true
                }
            },
            "required": []
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok(), "Optional parameter should not cause error when missing");
        let extracted = result.unwrap();
        assert!(!extracted.as_object().unwrap().contains_key("optional_param"));
    }

    #[test]
    fn test_uuid_validation_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "id": {
                    "type": "string",
                    "format": "uuid",
                    "source": "path"
                }
            },
            "required": ["id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut path_params = HashMap::new();
        path_params.insert("id".to_string(), "not-a-uuid".to_string());

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &path_params,
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "uuid_parsing");
        assert!(err.errors[0].msg.contains("UUID"));
    }

    #[test]
    fn test_uuid_validation_uppercase_succeeds() {
        let schema = json!({
            "type": "object",
            "properties": {
                "id": {
                    "type": "string",
                    "format": "uuid",
                    "source": "query"
                }
            },
            "required": ["id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let valid_uuid = "550e8400-e29b-41d4-a716-446655440000";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("id".to_string(), vec![valid_uuid.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"id": valid_uuid}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["id"], json!(valid_uuid));
    }

    #[test]
    fn test_date_validation_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "created_at": {
                    "type": "string",
                    "format": "date",
                    "source": "query"
                }
            },
            "required": ["created_at"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("created_at".to_string(), vec!["2024/12/10".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"created_at": "2024/12/10"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "date_parsing");
        assert!(err.errors[0].msg.contains("date"));
    }

    #[test]
    fn test_date_validation_valid_iso_succeeds() {
        let schema = json!({
            "type": "object",
            "properties": {
                "created_at": {
                    "type": "string",
                    "format": "date",
                    "source": "query"
                }
            },
            "required": ["created_at"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let valid_date = "2024-12-10";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("created_at".to_string(), vec![valid_date.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"created_at": valid_date}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["created_at"], json!(valid_date));
    }

    #[test]
    fn test_datetime_validation_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "timestamp": {
                    "type": "string",
                    "format": "date-time",
                    "source": "query"
                }
            },
            "required": ["timestamp"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("timestamp".to_string(), vec!["not-a-datetime".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"timestamp": "not-a-datetime"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "datetime_parsing");
    }

    #[test]
    fn test_time_validation_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "start_time": {
                    "type": "string",
                    "format": "time",
                    "source": "query"
                }
            },
            "required": ["start_time"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("start_time".to_string(), vec!["25:00:00".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"start_time": "25:00:00"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "time_parsing");
    }

    #[test]
    fn test_time_validation_string_passthrough() {
        let schema = json!({
            "type": "object",
            "properties": {
                "start_time": {
                    "type": "string",
                    "source": "query"
                }
            },
            "required": ["start_time"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let time_string = "14:30:00";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("start_time".to_string(), vec![time_string.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"start_time": time_string}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok(), "String parameter should pass: {:?}", result);
        let extracted = result.unwrap();
        assert_eq!(extracted["start_time"], json!(time_string));
    }

    #[test]
    fn test_duration_validation_invalid_format_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "timeout": {
                    "type": "string",
                    "format": "duration",
                    "source": "query"
                }
            },
            "required": ["timeout"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("timeout".to_string(), vec!["not-a-duration".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"timeout": "not-a-duration"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "duration_parsing");
    }

    #[test]
    fn test_duration_validation_iso8601_succeeds() {
        let schema = json!({
            "type": "object",
            "properties": {
                "timeout": {
                    "type": "string",
                    "format": "duration",
                    "source": "query"
                }
            },
            "required": ["timeout"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let valid_duration = "PT5M";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("timeout".to_string(), vec![valid_duration.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"timeout": valid_duration}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
    }

    #[test]
    fn test_header_name_normalization_with_underscores() {
        let schema = json!({
            "type": "object",
            "properties": {
                "X_Custom_Header": {
                    "type": "string",
                    "source": "header"
                }
            },
            "required": ["X_Custom_Header"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut headers = HashMap::new();
        headers.insert("x-custom-header".to_string(), "value".to_string());

        let result =
            validator.validate_and_extract(&json!({}), &HashMap::new(), &HashMap::new(), &headers, &HashMap::new());

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["X_Custom_Header"], json!("value"));
    }

    #[test]
    fn test_multiple_query_parameter_values_uses_first() {
        let schema = json!({
            "type": "object",
            "properties": {
                "id": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["id"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("id".to_string(), vec!["123".to_string(), "456".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"id": [123, 456]}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok(), "Should accept first value of multiple query params");
        let extracted = result.unwrap();
        assert_eq!(extracted["id"], json!(123));
    }

    #[test]
    fn test_schema_creation_missing_source_field_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "param": {
                    "type": "string"
                }
            },
            "required": []
        });

        let result = ParameterValidator::new(schema);
        assert!(result.is_err(), "Schema without 'source' field should fail");
        let err_msg = result.unwrap_err();
        assert!(err_msg.contains("source"));
    }

    #[test]
    fn test_schema_creation_invalid_source_value_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "param": {
                    "type": "string",
                    "source": "invalid_source"
                }
            },
            "required": []
        });

        let result = ParameterValidator::new(schema);
        assert!(result.is_err());
        let err_msg = result.unwrap_err();
        assert!(err_msg.contains("Invalid source"));
    }

    #[test]
    fn test_multiple_errors_reported_together() {
        let schema = json!({
            "type": "object",
            "properties": {
                "count": {
                    "type": "integer",
                    "source": "query"
                },
                "user_id": {
                    "type": "string",
                    "source": "path"
                },
                "token": {
                    "type": "string",
                    "source": "header"
                }
            },
            "required": ["count", "user_id", "token"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors.len(), 3);
        assert!(err.errors.iter().all(|e| e.error_type == "missing"));
    }

    #[test]
    fn test_coercion_error_includes_original_value() {
        let schema = json!({
            "type": "object",
            "properties": {
                "age": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["age"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let invalid_value = "not_an_int";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("age".to_string(), vec![invalid_value.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"age": invalid_value}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].input, json!(invalid_value));
    }

    #[test]
    fn test_string_parameter_passes_through() {
        let schema = json!({
            "type": "object",
            "properties": {
                "name": {
                    "type": "string",
                    "source": "query"
                }
            },
            "required": ["name"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("name".to_string(), vec!["Alice".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"name": "Alice"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["name"], json!("Alice"));
    }

    #[test]
    fn test_string_with_special_characters_passes_through() {
        let schema = json!({
            "type": "object",
            "properties": {
                "message": {
                    "type": "string",
                    "source": "query"
                }
            },
            "required": ["message"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let special_value = "Hello! @#$%^&*() Unicode: 你好";
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("message".to_string(), vec![special_value.to_string()]);

        let result = validator.validate_and_extract(
            &json!({"message": special_value}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["message"], json!(special_value));
    }

    #[test]
    fn test_array_query_parameter_missing_required_returns_error() {
        let schema = json!({
            "type": "object",
            "properties": {
                "ids": {
                    "type": "array",
                    "items": {"type": "integer"},
                    "source": "query"
                }
            },
            "required": ["ids"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_err());
        let err = result.unwrap_err();
        assert_eq!(err.errors[0].error_type, "missing");
    }

    #[test]
    fn test_empty_array_parameter_accepted() {
        let schema = json!({
            "type": "object",
            "properties": {
                "tags": {
                    "type": "array",
                    "items": {"type": "string"},
                    "source": "query"
                }
            },
            "required": ["tags"]
        });

        let validator = ParameterValidator::new(schema).unwrap();

        let result = validator.validate_and_extract(
            &json!({"tags": []}),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["tags"], json!([]));
    }

    #[test]
    fn test_parameter_source_from_str_query() {
        assert_eq!(ParameterSource::from_str("query"), Some(ParameterSource::Query));
    }

    #[test]
    fn test_parameter_source_from_str_path() {
        assert_eq!(ParameterSource::from_str("path"), Some(ParameterSource::Path));
    }

    #[test]
    fn test_parameter_source_from_str_header() {
        assert_eq!(ParameterSource::from_str("header"), Some(ParameterSource::Header));
    }

    #[test]
    fn test_parameter_source_from_str_cookie() {
        assert_eq!(ParameterSource::from_str("cookie"), Some(ParameterSource::Cookie));
    }

    #[test]
    fn test_parameter_source_from_str_invalid() {
        assert_eq!(ParameterSource::from_str("invalid"), None);
    }

    #[test]
    fn test_integer_with_plus_sign() {
        let schema = json!({
            "type": "object",
            "properties": {
                "count": {
                    "type": "integer",
                    "source": "query"
                }
            },
            "required": ["count"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("count".to_string(), vec!["+123".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"count": "+123"}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["count"], json!(123));
    }

    #[test]
    fn test_float_with_leading_dot() {
        let schema = json!({
            "type": "object",
            "properties": {
                "ratio": {
                    "type": "number",
                    "source": "query"
                }
            },
            "required": ["ratio"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("ratio".to_string(), vec![".5".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"ratio": 0.5}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["ratio"], json!(0.5));
    }

    #[test]
    fn test_float_with_trailing_dot() {
        let schema = json!({
            "type": "object",
            "properties": {
                "value": {
                    "type": "number",
                    "source": "query"
                }
            },
            "required": ["value"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("value".to_string(), vec!["5.".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"value": 5.0}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
    }

    #[test]
    fn test_boolean_case_insensitive_true() {
        let schema = json!({
            "type": "object",
            "properties": {
                "flag": {
                    "type": "boolean",
                    "source": "query"
                }
            },
            "required": ["flag"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["TrUe".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"flag": true}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["flag"], json!(true));
    }

    #[test]
    fn test_boolean_case_insensitive_false() {
        let schema = json!({
            "type": "object",
            "properties": {
                "flag": {
                    "type": "boolean",
                    "source": "query"
                }
            },
            "required": ["flag"]
        });

        let validator = ParameterValidator::new(schema).unwrap();
        let mut raw_query_params: HashMap<String, Vec<String>> = HashMap::new();
        raw_query_params.insert("flag".to_string(), vec!["FaLsE".to_string()]);

        let result = validator.validate_and_extract(
            &json!({"flag": false}),
            &raw_query_params,
            &HashMap::new(),
            &HashMap::new(),
            &HashMap::new(),
        );

        assert!(result.is_ok());
        let extracted = result.unwrap();
        assert_eq!(extracted["flag"], json!(false));
    }
}