@c15t/backend 1.8.0 → 2.0.0-rc.0

package/dist/handlers/status/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Status handlers index.
+ *
+ * @packageDocumentation
+ */
+export { statusHandler } from './status.handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/handlers/status/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/handlers/status/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/handlers/status/status.handler.d.ts

@@ -0,0 +1,26 @@
+/**
+ * GET /status handler - Health check and status endpoint.
+ *
+ * @packageDocumentation
+ */
+import type { Context } from 'hono';
+/**
+ * Handles the status request to check the health of the service and its dependencies.
+ *
+ * This handler performs a simple query to the database to ensure it is reachable and
+ * functional. It also extracts client information from the request headers.
+ */
+export declare const statusHandler: (c: Context) => Promise<Response & import("hono").TypedResponse<{
+    version: string;
+    timestamp: string;
+    client: {
+        ip: string | null;
+        acceptLanguage: string | null;
+        userAgent: string | null;
+        region: {
+            countryCode: string | null;
+            regionCode: string | null;
+        };
+    };
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+//# sourceMappingURL=status.handler.d.ts.map

package/dist/handlers/status/status.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.handler.d.ts","sourceRoot":"","sources":["../../../src/handlers/status/status.handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAMpC;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAU,GAAG,OAAO;;;;;;;;;;;;kEAgC7C,CAAC"}

package/dist/handlers/subject/get.handler.d.ts

@@ -0,0 +1,32 @@
+/**
+ * GET /subjects/:id handler - Check this device's consent status.
+ *
+ * @packageDocumentation
+ */
+import type { Context } from 'hono';
+/**
+ * Handles retrieving a subject's consent status.
+ *
+ * Returns the subject's information and their consent records,
+ * optionally filtered by consent type(s).
+ */
+export declare const getSubjectHandler: (c: Context) => Promise<Response & import("hono").TypedResponse<{
+    subject: {
+        id: string;
+        externalId: string | undefined;
+        isIdentified: boolean;
+        createdAt: string;
+    };
+    consents: {
+        id: string;
+        type: string;
+        policyId: string | undefined;
+        isLatestPolicy: boolean;
+        preferences: {
+            [x: string]: boolean;
+        } | undefined;
+        givenAt: string;
+    }[];
+    isValid: boolean;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+//# sourceMappingURL=get.handler.d.ts.map

package/dist/handlers/subject/get.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.handler.d.ts","sourceRoot":"","sources":["../../../src/handlers/subject/get.handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAMpC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAU,GAAG,OAAO;;;;;;;;;;;;;;;;;;kEA0EjD,CAAC"}

package/dist/handlers/subject/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Subject handlers exports.
+ *
+ * @packageDocumentation
+ */
+export { getSubjectHandler } from './get.handler';
+export { listSubjectsHandler } from './list.handler';
+export { patchSubjectHandler } from './patch.handler';
+export { postSubjectHandler } from './post.handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/handlers/subject/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/handlers/subject/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/handlers/subject/list.handler.d.ts

@@ -0,0 +1,31 @@
+/**
+ * GET /subjects handler - List subjects by externalId (requires API key).
+ *
+ * @packageDocumentation
+ */
+import type { Context } from 'hono';
+/**
+ * Handles listing all subjects linked to an external ID.
+ *
+ * This endpoint requires API key authentication and is intended
+ * for server-side use only (Data Subject Access Requests).
+ */
+export declare const listSubjectsHandler: (c: Context) => Promise<Response & import("hono").TypedResponse<{
+    subjects: {
+        id: string;
+        externalId: string;
+        isIdentified: boolean;
+        createdAt: string;
+        consents: {
+            id: string;
+            type: string;
+            policyId: string | undefined;
+            isLatestPolicy: boolean;
+            preferences: {
+                [x: string]: boolean;
+            } | undefined;
+            givenAt: string;
+        }[];
+    }[];
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+//# sourceMappingURL=list.handler.d.ts.map

package/dist/handlers/subject/list.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.handler.d.ts","sourceRoot":"","sources":["../../../src/handlers/subject/list.handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAMpC;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAU,GAAG,OAAO;;;;;;;;;;;;;;;;;kEA0EnD,CAAC"}

package/dist/handlers/subject/patch.handler.d.ts

@@ -0,0 +1,22 @@
+/**
+ * PATCH /subjects/:id handler - Link external ID to subject.
+ *
+ * @packageDocumentation
+ */
+import type { Context } from 'hono';
+/**
+ * Handles linking an external ID to a subject.
+ *
+ * Unlike the legacy identify endpoint, this does NOT merge subjects.
+ * Each device maintains its own independent consent history.
+ * The externalId allows querying all subjects via GET /subjects.
+ */
+export declare const patchSubjectHandler: (c: Context) => Promise<Response & import("hono").TypedResponse<{
+    success: true;
+    subject: {
+        id: string;
+        externalId: string;
+        isIdentified: true;
+    };
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+//# sourceMappingURL=patch.handler.d.ts.map

package/dist/handlers/subject/patch.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.handler.d.ts","sourceRoot":"","sources":["../../../src/handlers/subject/patch.handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAOpC;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAU,GAAG,OAAO;;;;;;;kEAqGnD,CAAC"}

package/dist/handlers/subject/post.handler.d.ts

@@ -0,0 +1,25 @@
+/**
+ * POST /subjects handler - Records consent (append-only).
+ *
+ * @packageDocumentation
+ */
+import type { Context } from 'hono';
+/**
+ * Handles the creation of a new consent record for a subject.
+ *
+ * This handler processes consent submissions with client-generated subject IDs.
+ * Each call creates a new consent record (append-only), preserving the full audit trail.
+ */
+export declare const postSubjectHandler: (c: Context) => Promise<Response & import("hono").TypedResponse<{
+    subjectId: string;
+    consentId: string;
+    domainId: string;
+    domain: string;
+    type: "cookie_banner" | "privacy_policy" | "dpa" | "terms_and_conditions" | "marketing_communications" | "age_verification" | "other";
+    metadata: {
+        [x: string]: import("hono/utils/types").JSONValue;
+    } | undefined;
+    uiSource: string | undefined;
+    givenAt: string;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+//# sourceMappingURL=post.handler.d.ts.map

package/dist/handlers/subject/post.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.handler.d.ts","sourceRoot":"","sources":["../../../src/handlers/subject/post.handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAOpC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,GAAG,OAAO;;;;;;;;;;;kEAyOlD,CAAC"}

package/dist/handlers/utils/consent-enrichment.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Shared consent enrichment utilities.
+ *
+ * Extracts duplicated consent-building logic from get/list/check handlers
+ * and batch-loads policies + purposes to eliminate N+1 queries.
+ *
+ * @packageDocumentation
+ */
+import type { C15TContext } from '../../types';
+type EnrichmentContext = Pick<C15TContext, 'db' | 'registry'>;
+export interface EnrichedConsentItem {
+    id: string;
+    type: string;
+    policyId: string | undefined;
+    isLatestPolicy: boolean;
+    preferences: Record<string, boolean> | undefined;
+    givenAt: Date;
+}
+export interface ConsentPolicyInfo {
+    consentId: string;
+    policyType: string;
+    policyId: string | undefined;
+    isLatestPolicy: boolean;
+}
+/**
+ * Parse purposeIds from DB — handles both `{ json: string[] }` wrapper
+ * (some adapters) and raw `string[]` format.
+ */
+export declare function parsePurposeIds(purposeIds: unknown): string[];
+/**
+ * Full consent enrichment for get/list handlers.
+ *
+ * Resolves policy types, isLatestPolicy, and purpose preferences
+ * using batch queries instead of per-consent lookups.
+ */
+export declare function enrichConsents(consents: Array<{
+    id: string;
+    policyId: string | null;
+    purposeIds: unknown;
+    givenAt: Date;
+}>, ctx: EnrichmentContext): Promise<EnrichedConsentItem[]>;
+/**
+ * Policy-only enrichment for check handler.
+ *
+ * Resolves policy type and isLatestPolicy without loading purposes.
+ */
+export declare function resolveConsentPolicies(consents: Array<{
+    id: string;
+    policyId: string | null;
+}>, ctx: EnrichmentContext): Promise<ConsentPolicyInfo[]>;
+export {};
+//# sourceMappingURL=consent-enrichment.d.ts.map

package/dist/handlers/utils/consent-enrichment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-enrichment.d.ts","sourceRoot":"","sources":["../../../src/handlers/utils/consent-enrichment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,KAAK,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAAC,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,OAAO,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,cAAc,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,CAS7D;AA8CD;;;;;GAKG;AACH,wBAAsB,cAAc,CACnC,QAAQ,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,IAAI,CAAC;CACd,CAAC,EACF,GAAG,EAAE,iBAAiB,GACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAoEhC;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC3C,QAAQ,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC,EACF,GAAG,EAAE,iBAAiB,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiC9B"}

package/dist/init.d.ts

@@ -1,36 +1,30 @@
-import type { C15TContext, C15TOptions, C15TPlugin } from './types';
-import { type SDKResult } from './pkgs/results';
+import type { C15TContext, C15TOptions } from './types';
 /**
- * Initializes the c15t consent management system using Result pattern
+ * Initializes the c15t backend context.
  *
- * This function creates and configures the consent context based on the provided options.
- * It sets up storage adapters, initializes plugins, configures security settings,
- * and establishes the foundation for the consent management system.
- *
- * This version uses the neverthrow Result pattern for error handling.
- *
- * @template P - The plugin types used in the configuration
- * @param options - Configuration options for the c15t instance
- * @returns A Promise resolving to a Result containing the initialized consent context
+ * Telemetry (tracing and metrics) is opt-in and disabled by default.
+ * Users must:
+ * 1. Set up their own OpenTelemetry SDK (Node.js, Bun, edge runtime, etc.)
+ * 2. Pass enabled: true and optionally a tracer/meter to the telemetry config
  *
  * @example
  * ```typescript
- * const contextResult = await init({
- *   storage: memoryAdapter(),
- *   plugins: [geoPlugin()]
- * });
+ * // User sets up their own SDK before calling init
+ * import { NodeSDK } from '@opentelemetry/sdk-node';
+ * const sdk = new NodeSDK({ ... });
+ * sdk.start();
  *
- * // Handle success and error cases explicitly
- * contextResult.match(
- *   (context) => {
- *     // Use the successfully initialized context
+ * // Then pass telemetry config
+ * const instance = c15tInstance({
+ *   advanced: {
+ *     telemetry: {
+ *       enabled: true,
+ *       tracer: trace.getTracer('my-app'),
+ *       meter: metrics.getMeter('my-app'),
+ *     },
  *   },
- *   (error) => {
- *     // Handle the initialization error
- *     console.error('Failed to initialize:', error.message);
- *   }
- * );
+ * });
  * ```
  */
-export declare const init: <P extends C15TPlugin[]>(options: C15TOptions<P>) => Promise<SDKResult<C15TContext>>;
+export declare const init: (options: C15TOptions) => C15TContext;
 //# sourceMappingURL=init.d.ts.map

package/dist/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAIpE,OAAO,EAON,KAAK,SAAS,EAEd,MAAM,gBAAgB,CAAC;AA0BxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,IAAI,GAAU,CAAC,SAAS,UAAU,EAAE,EAChD,SAAS,WAAW,CAAC,CAAC,CAAC,KACrB,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAwKhC,CAAC"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAUxD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,IAAI,GAAI,SAAS,WAAW,KAAG,WAiD3C,CAAC"}

package/dist/middleware/auth/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Authentication middleware exports.
+ *
+ * @packageDocumentation
+ */
+export { extractBearerToken, validateApiKey, validateRequestAuth, } from './validate-api-key';
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACN,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GACnB,MAAM,oBAAoB,CAAC"}

package/dist/middleware/auth/validate-api-key.d.ts

@@ -0,0 +1,49 @@
+/**
+ * API key validation utilities.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Extracts the Bearer token from an Authorization header.
+ *
+ * @param authHeader - The Authorization header value
+ * @returns The token if valid Bearer format, null otherwise
+ *
+ * @example
+ * ```typescript
+ * extractBearerToken('Bearer sk_live_abc123'); // 'sk_live_abc123'
+ * extractBearerToken('Basic abc123'); // null
+ * extractBearerToken('sk_live_abc123'); // null
+ * ```
+ */
+export declare function extractBearerToken(authHeader: string | null): string | null;
+/**
+ * Validates an API key against the configured keys.
+ *
+ * @param token - The token to validate
+ * @param validKeys - Array of valid API keys
+ * @returns True if the token is valid
+ *
+ * @remarks
+ * Uses timing-safe comparison to prevent timing attacks.
+ * If no keys are configured, returns false.
+ */
+export declare function validateApiKey(token: string | null, validKeys: string[] | undefined): boolean;
+/**
+ * Validates authentication from request headers.
+ *
+ * @param headers - Request headers
+ * @param validKeys - Array of valid API keys
+ * @returns True if the request has a valid API key
+ *
+ * @example
+ * ```typescript
+ * const headers = new Headers();
+ * headers.set('Authorization', 'Bearer sk_live_abc123');
+ *
+ * validateRequestAuth(headers, ['sk_live_abc123']); // true
+ * validateRequestAuth(headers, ['sk_live_other']); // false
+ * ```
+ */
+export declare function validateRequestAuth(headers: Headers | undefined, validKeys: string[] | undefined): boolean;
+//# sourceMappingURL=validate-api-key.d.ts.map

package/dist/middleware/auth/validate-api-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-api-key.d.ts","sourceRoot":"","sources":["../../../src/middleware/auth/validate-api-key.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAW3E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,GAC7B,OAAO,CAOT;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,GAC7B,OAAO,CAQT"}

package/dist/middleware/cors/cors.d.ts

@@ -4,34 +4,30 @@
  * @packageDocumentation
  */
 /**
- * CORS configuration options type
+ * CORS configuration options compatible with Hono's cors middleware
  */
-export interface CORSConfig {
-    /** Origin validation function */
-    origin: (origin: string) => Promise<string | null>;
-    /** Whether to allow credentials */
-    credentials: boolean;
-    /** Allowed headers */
-    allowHeaders: readonly string[];
-    /** Max age for preflight requests */
-    maxAge: number;
-    /** Allowed HTTP methods */
-    methods: readonly string[];
+export interface CorsOptions {
+    origin: string | string[] | ((origin: string) => string | null);
+    methods?: string[];
+    allowMethods?: string[];
+    allowHeaders?: string[];
+    maxAge?: number;
+    credentials?: boolean;
+    exposeHeaders?: string[];
 }
 /**
- * Creates CORS options configuration for the c15t middleware
+ * Creates CORS options configuration for Hono's cors middleware
  *
  * @param trustedOrigins - Array of allowed origin patterns or single string. Can include wildcards ('*').
  * If undefined, defaults to allowing all origins without credentials.
  *
- * @returns CORS configuration object with origin validation function and header settings
+ * @returns Hono CORS configuration object
  *
  * @example
  * ```ts
  * const corsOptions = createCORSOptions(['http://localhost:3000', 'https://example.com']);
+ * app.use('*', cors(corsOptions));
  * ```
- *
- * @throws {TypeError} When URL parsing fails in origin validation
  */
-export declare function createCORSOptions(trustedOrigins?: string[] | string): CORSConfig;
+export declare function createCORSOptions(trustedOrigins?: string[] | string): CorsOptions;
 //# sourceMappingURL=cors.d.ts.map

package/dist/middleware/cors/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/cors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgCH;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,iCAAiC;IACjC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnD,mCAAmC;IACnC,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB;IACtB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAChC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAChC,UAAU,CA+GZ"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/cors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAyFD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAChC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAChC,WAAW,CA+Db"}

package/dist/middleware/cors/is-origin-trusted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"is-origin-trusted.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/is-origin-trusted.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,QAA4C,CAAC;AA+BrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,EACxB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CA6CT"}
+{"version":3,"file":"is-origin-trusted.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/is-origin-trusted.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,QAC8B,CAAC;AA+BvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,EACxB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CA6CT"}

package/dist/middleware/cors/process-cors.d.ts

@@ -4,7 +4,7 @@
  *
  * @packageDocumentation
  */
-import type { C15TContext } from '../../types/context';
+import type { C15TContext } from '../../types';
 /**
  * Processes CORS validation for an incoming request and enriches the context
  * with origin information. This middleware function validates the origin against

package/dist/middleware/cors/process-cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/process-cors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA4CnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,GACvB,SAAS,OAAO,EAChB,SAAS,WAAW,EACpB,iBAAiB,MAAM,EAAE,KACvB,WAaF,CAAC"}
+{"version":3,"file":"process-cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/process-cors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AA4C3C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,GACvB,SAAS,OAAO,EAChB,SAAS,WAAW,EACpB,iBAAiB,MAAM,EAAE,KACvB,WAaF,CAAC"}

package/dist/middleware/openapi/config.d.ts

@@ -1,12 +1,26 @@
 import type { C15TOptions } from '../../types';
 /**
  * Default OpenAPI configuration
+ *
+ * Note: specPath and docsPath should NOT include the basePath,
+ * as the basePath is stripped from incoming requests before routing.
  */
 export declare const createOpenAPIConfig: (options: C15TOptions) => {
     enabled: boolean;
     specPath: string;
     docsPath: string;
-    options?: Partial<import("@orpc/openapi").OpenAPIGeneratorOptions>;
+    options?: {
+        info?: {
+            title?: string;
+            version?: string;
+            description?: string;
+        };
+        servers?: Array<{
+            url: string;
+            description?: string;
+        }>;
+        security?: Array<Record<string, string[]>>;
+    };
     customUiTemplate?: string;
 };
 /**
@@ -19,7 +33,7 @@ export declare const createDefaultOpenAPIOptions: (options: C15TOptions) => {
         description: string;
     };
     servers: {
-        url: {};
+        url: string;
     }[];
     security: {
         bearerAuth: never[];

package/dist/middleware/openapi/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,WAAW;;;;;;CAQvD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,SAAS,WAAW;;;;;;;;;;;;CAQ9D,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,WAAW;;;;;YAqB+1C,CAAC;iBAAa,CAAC;mBAAqB,CAAC;uBAAyB,CAAC;;eAA0B,CAAC;;uBAAkC,CAAC;;gBAAwB,CAAC;;;CAd5iD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,SAAS,WAAW;;;;;;;;;;;;CAQ9D,CAAC"}

package/dist/middleware/openapi/handlers.d.ts

@@ -1,29 +1,6 @@
-import type { C15TContext, C15TOptions } from '../../types';
-/**
- * Type for the memoized OpenAPI spec function
- */
-type MemoizedSpecFunction = {
-    (): Promise<Record<string, unknown>>;
-    cached?: Record<string, unknown>;
-};
-/**
- * Generate the OpenAPI specification document
- *
- * @param options - Configuration options for the OpenAPI spec generation
- * @returns A memoized function that generates and caches the OpenAPI spec
- *
- * @throws {Error} When the OpenAPI generator fails to create a valid spec
- *
- * @example
- * ```ts
- * const getSpec = createOpenAPISpec(options);
- * const spec = await getSpec();
- * ```
- */
-export declare const createOpenAPISpec: (context: C15TContext, options: C15TOptions) => MemoizedSpecFunction;
+import type { C15TOptions } from '../../types';
 /**
  * Generate the default UI for API documentation
  */
 export declare const createDocsUI: (options: C15TOptions) => string;
-export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/middleware/openapi/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGxD;;GAEG;AACH,KAAK,oBAAoB,GAAG;IAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AA6BF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,SAAS,WAAW,EACpB,SAAS,WAAW,yBA0CpB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,WAAW,WA2BhD,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAG3C;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,WAAW,WA2BhD,CAAC"}

package/dist/middleware/openapi/index.d.ts

@@ -3,9 +3,10 @@
  *
  * This module provides OpenAPI functionality including:
  * - Configuration management
- * - Specification generation
  * - Documentation UI
+ *
+ * Note: OpenAPI spec generation is now handled by hono-openapi middleware.
  */
 export { createDefaultOpenAPIOptions, createOpenAPIConfig } from './config';
-export { createDocsUI, createOpenAPISpec } from './handlers';
+export { createDocsUI } from './handlers';
 //# sourceMappingURL=index.d.ts.map

package/dist/middleware/openapi/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/middleware/process-ip/index.d.ts

@@ -0,0 +1,12 @@
+import type { C15TOptions } from '../../types';
+/**
+ * Masks an IP address to reduce PII.
+ * - IPv4: Replaces last octet with 0 (e.g., 192.168.1.100 -> 192.168.1.0)
+ * - IPv6: Masks last 80 bits (e.g., 2001:db8:85a3::1 -> 2001:db8:85a3::)
+ *
+ * @param ip - The IP address to mask
+ * @returns The masked IP address
+ */
+export declare function maskIpAddress(ip: string | null): string | null;
+export declare function getIpAddress(req: Request | Headers, options: C15TOptions): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/process-ip/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/process-ip/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAoH3C;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CA4C9D;AAED,wBAAgB,YAAY,CAC3B,GAAG,EAAE,OAAO,GAAG,OAAO,EACtB,OAAO,EAAE,WAAW,GAClB,MAAM,GAAG,IAAI,CAyBf"}