@contractkit/plugin-typescript 0.31.1 → 0.32.0

package/.turbo/turbo-build$colon$ci.log

@@ -5,9 +5,9 @@ $ tsup src/index.ts --format esm --sourcemap --dts && tsc --emitDeclarationOnly
 CLI tsup v8.5.1
 CLI Target: esnext
 ESM Build start
-ESM dist/index.js     188.58 KB
-ESM dist/index.js.map 418.71 KB
-ESM ⚡️ Build success in 589ms
+ESM dist/index.js     191.67 KB
+ESM dist/index.js.map 428.46 KB
+ESM ⚡️ Build success in 328ms
 DTS Build start
-DTS ⚡️ Build success in 7825ms
-DTS dist/index.d.ts 4.55 KB
+DTS ⚡️ Build success in 3774ms
+DTS dist/index.d.ts 5.08 KB

package/.turbo/turbo-test$colon$ci.log

@@ -3,34 +3,34 @@ $ vitest run --coverage
  RUN  v4.1.5 /home/runner/work/ContractKit/ContractKit/packages/plugin-typescript
       Coverage enabled with v8
 
- ✓ tests/codegen-contract.test.ts (128 tests) 249ms
- ✓ tests/codegen-sdk.test.ts (152 tests) 296ms
- ✓ tests/codegen-operation.test.ts (129 tests) 235ms
- ✓ tests/codegen-server.test.ts (25 tests) 107ms
- ✓ tests/codegen-plain-types.test.ts (66 tests) 46ms
- ✓ tests/pipeline.test.ts (28 tests) 320ms
- ✓ tests/codegen-mcp.test.ts (24 tests) 42ms
- ✓ tests/escaping-security.test.ts (18 tests) 65ms
+ ✓ tests/codegen-contract.test.ts (128 tests) 165ms
+ ✓ tests/codegen-sdk.test.ts (152 tests) 307ms
+ ✓ tests/codegen-operation.test.ts (154 tests) 317ms
+ ✓ tests/codegen-plain-types.test.ts (66 tests) 70ms
+ ✓ tests/codegen-server.test.ts (30 tests) 123ms
+ ✓ tests/pipeline.test.ts (29 tests) 279ms
+ ✓ tests/codegen-mcp.test.ts (24 tests) 55ms
+ ✓ tests/escaping-security.test.ts (18 tests) 38ms
 
  Test Files  8 passed (8)
-      Tests  570 passed (570)
-   Start at  17:32:01
-   Duration  11.21s (transform 7.13s, setup 0ms, import 22.29s, tests 1.36s, environment 2ms)
+      Tests  601 passed (601)
+   Start at  16:35:30
+   Duration  8.90s (transform 6.21s, setup 0ms, import 18.05s, tests 1.36s, environment 7ms)
 
  % Coverage report from v8
 -------------------|---------|----------|---------|---------|-------------------
 File               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
 -------------------|---------|----------|---------|---------|-------------------
-All files          |   83.71 |     78.1 |   86.07 |   86.33 |                   
- src               |   83.57 |    77.84 |   85.81 |   86.18 |                   
-  ...n-contract.ts |    88.1 |    82.91 |   90.08 |   89.26 | ...1095,1100-1101 
+All files          |    84.1 |    78.42 |   86.54 |    86.6 |                   
+ src               |   83.97 |    78.12 |   86.28 |   86.46 |                   
+  ...n-contract.ts |   88.69 |    83.12 |   90.08 |   89.98 | ...1095,1100-1101 
   codegen-mcp.ts   |   82.79 |    75.47 |   84.21 |   86.02 | ...93,298-299,382 
-  ...-operation.ts |   82.35 |    80.68 |   76.19 |   84.83 | ...99-910,915-916 
+  ...-operation.ts |   83.05 |    80.67 |   79.71 |   85.23 | ...1010,1015-1016 
   ...lain-types.ts |   91.57 |    81.98 |   96.87 |   94.44 | ...31,157,269,275 
   codegen-sdk.ts   |   89.92 |    83.94 |   90.62 |   92.67 | ...1411,1425-1426 
-  index.ts         |   66.25 |    53.15 |   72.72 |   70.29 | ...1022,1038-1057 
+  index.ts         |   67.64 |    55.61 |   73.68 |   70.93 | ...1052,1068-1087 
   path-utils.ts    |   70.28 |    51.13 |     100 |    73.5 | ...65-168,216-231 
   ts-render.ts     |      85 |    87.36 |   79.16 |   89.23 | 83,159,192-200    
- tests             |   91.07 |    90.24 |      90 |   93.87 |                   
-  helpers.ts       |   91.07 |    90.24 |      90 |   93.87 | 110-118           
+ tests             |   91.22 |    92.68 |   90.32 |      94 |                   
+  helpers.ts       |   91.22 |    92.68 |   90.32 |      94 | 115-123           
 -------------------|---------|----------|---------|---------|-------------------

package/CHANGELOG.md

@@ -1,5 +1,96 @@
 # @contractkit/contractkit-plugin-typescript
 
+## 0.32.0
+
+### Minor Changes
+
+- 5dc2693: Add `server.validateResponses` — the generated Koa router can now validate what it sends, not just
+  what it receives
+
+    Handlers have always run request params, query, headers and body through `parseAndValidate`. The
+    service's return value got nothing: it was type-annotated and assigned straight to `ctx.body`, so a
+    service returning a shape its own contract forbids shipped it to the client unchanged. With
+    `server.validateResponses: true` the result is re-parsed against the declared response schema and
+    the _parsed_ value is written:
+
+    ```ts
+    const result: User = await service.getById(id);
+
+    ctx.status = 200;
+    ctx.type = 'application/json';
+    ctx.body = await parseAndValidate(result, User, 500);
+    ```
+
+    Because the parsed value is what reaches the wire, `mode(strip)` now actually strips extra keys off
+    responses.
+    - **Opt-in, and off by default**, because turning it on surfaces real drift. TypeScript only
+      excess-property-checks object _literals_, so a service returning a database row with undeclared
+      columns satisfies `const result: User` today and quietly ships them; under the default `strict`
+      mode that becomes a 500. That is the flag working, but it is not a change to make on a Friday.
+    - **`zod: true` is a hard prerequisite.** Without it `output.types` emits plain interfaces — types
+      with no runtime schema value to validate against. Setting `validateResponses` alone now fails the
+      build with an explicit message instead of emitting code that cannot compile. This is the plugin's
+      first config assertion; it runs for both the default export and `createTypescriptPlugin`.
+    - **Requires `@maroonedsoftware/zod` 0.6.1 or later** for the `statusCode` argument. Failures are
+      raised as `500`, not the `400` a request-side failure gets — a service breaking its own contract
+      is a server fault. At 5xx that package puts the field-level map on `internalDetails` rather than
+      `details`, so `errorMiddleware` keeps it out of the response body and on the log path.
+
+    Two kinds of response body are deliberately left unvalidated, and generate exactly as before:
+    - **Anything transitively referencing a model with `format(input=…)` or `format(output=…)`.** Those
+      schemas transform keys between wire and developer-facing casing, and the service already returns
+      the post-transform shape, so re-parsing it through the same schema would fail on every key. Note
+      this needs a wider set than `modelsWithOutput`, which seeds only from `outputCase` because only
+      that case needs an `Output` type alias — a `format(input=snake)`-only model is just as
+      untouchable. `@contractkit/core` gains `computeModelsWithCaseTransform` for it.
+    - **A status whose several content types carry different body shapes**, where `contentType` and
+      `body` are correlated across union members. Matching shapes (`image/png` and `image/jpeg` both
+      `binary`) share one schema and validate normally.
+
+    One wart worth knowing: `ctx.status` and any `ctx.set(…)` response headers are written before the
+    body, so a validation failure raises its 500 with the success path's headers already set.
+
+    Projects that do not set the flag generate byte-identical routers.
+
+### Patch Changes
+
+- 5dc2693: Stop the generated Koa router emitting imports nothing in the file references
+
+    `collectTypes` and `collectServices` walk the AST, and the AST over-approximates what a router
+    actually uses in three ways:
+    - A model with an `Input` or `Output` variant contributed **both** its base name and the variant,
+      even when only the variant is ever annotated. A response typed `AuthTokenOutput` emitted
+      `import { AuthToken, AuthTokenOutput }`, and a request body validated against `CreateUserInput`
+      emitted `import { CreateUser, CreateUserInput }`.
+    - Both collectors walk every operation, including the `internal` ones `includeInternal: false`
+      drops. A router whose only operation was excluded still imported that operation's service and
+      response model, with no handler left to use either.
+
+    In a consuming project with `noUnusedLocals` — or the equivalent lint rule — each of those is a
+    compile error in generated code the user cannot edit.
+
+    Every collected service and model name is now filtered through the same `uses` gate that already
+    prunes `parseAndValidate`, `requirePolicy`, `MultipartBody` and the luxon imports: a name is
+    imported only if it appears in the generated body. This is the approach the file's own comment
+    already argued for — deciding imports from the emitted text rather than from predicates over the
+    AST that have to be kept in step with it by hand.
+
+    Names that are genuinely used are unaffected, including a base model used as the runtime schema
+    under `server.validateResponses`. `@contractkit/plugin-typescript`'s MCP output does not have this
+    gap — its schema ids and service imports are both derived from the emitted tool plans.
+
+- Updated dependencies [aea5e21]
+- Updated dependencies [5dc2693]
+    - @contractkit/core@0.27.0
+
+## 0.31.2
+
+### Patch Changes
+
+- ca1c139: Declare the MIT license explicitly: every package now ships a `LICENSE` file in its published tarball and sets `"license": "MIT"` in its manifest, so license scanners and registries report the terms correctly.
+- Updated dependencies [ca1c139]
+    - @contractkit/core@0.26.1
+
 ## 0.31.1
 
 ### Patch Changes

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Marooned Software
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -61,6 +61,7 @@ Generates Koa router files from `operation` declarations and optionally type fil
 | `output.routes` | `string` | — | Path template for router files |
 | `output.types` | `string` | — | Path template for type/schema files |
 | `servicePathTemplate` | `string` | — | Import path template for service implementations |
+| `validateResponses` | `boolean` | `false` | Re-parse the service result against its response schema before writing `ctx.body`. Requires `zod: true`. |
 
 Each generated router imports handler implementations from a service module. The `servicePathTemplate` controls where that import points. Template variables: `{module}`.
 
@@ -127,6 +128,8 @@ Contracts without visibility modifiers generate a single `Model` schema.
 
 Each operation file generates one Koa router. Request bodies and path/query params are validated against the Zod schemas (when `zod: true`) or plain types. Handlers are expected to be exported from the service module specified by `servicePathTemplate`.
 
+Responses are only type-annotated by default. With `validateResponses: true` (which requires `zod: true`) the service's return value is re-parsed against its declared response schema and the parsed value is written to `ctx.body`, so a service returning a shape the contract does not allow fails with a 500 instead of shipping it. See [docs/config.md](../../docs/config.md#validateresponses) for the caveats — notably that models using `format(input=…)`/`format(output=…)` are skipped.
+
 ### SDK client shape (from `operation`)
 
 Operation files cluster on the SDK based on `keys.area` and `keys.subarea` (set in each file's `options { keys: { ... } }` block):

package/dist/codegen-operation.d.ts

@@ -21,6 +21,18 @@ export interface OpCodegenOptions {
      * from the generated router entirely.
      */
     includeInternal?: boolean;
+    /**
+     * Re-parse the service result through its declared response schema before writing `ctx.body`,
+     * and write the parsed value. Requires the type file to hold Zod schemas (`server.zod`) —
+     * plain interfaces are types, with no runtime schema value to validate against. Default false.
+     */
+    validateResponses?: boolean;
+    /**
+     * Set of model names whose schema applies a `format(...)` key transform, directly or through a
+     * referenced model. Response bodies touching one are left unvalidated: the service returns the
+     * post-transform shape, which the schema itself cannot re-parse.
+     */
+    modelsWithTransform?: Set<string>;
 }
 /**
  * Generate a Koa router module for every operation in `root`, including the imports, type

package/dist/codegen-operation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codegen-operation.d.ts","sourceRoot":"","sources":["../src/codegen-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,UAAU,EACV,WAAW,EACX,eAAe,EAGf,gBAAgB,EAInB,MAAM,mBAAmB,CAAC;AAiC3B;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAkE5F;AAID,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,qFAAqF;IACrF,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAgGnF;AAwRD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAY7H;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,GAAG,MAAM,CAqBzE;AAqWD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWnD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ/E"}
+{"version":3,"file":"codegen-operation.d.ts","sourceRoot":"","sources":["../src/codegen-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,UAAU,EACV,WAAW,EACX,eAAe,EAGf,gBAAgB,EAInB,MAAM,mBAAmB,CAAC;AAiC3B;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAkE5F;AAID,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,qFAAqF;IACrF,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM,CAuGnF;AAwSD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAY7H;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,GAAG,MAAM,CAqBzE;AAsaD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWnD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ/E"}

package/dist/index.d.ts

@@ -15,6 +15,15 @@ export interface ServerConfig {
     servicePathTemplate?: string;
     /** Whether to emit handlers for `internal` operations. Default true. */
     includeInternal?: boolean;
+    /**
+     * When true, each handler re-parses the service result through its declared response schema
+     * before writing `ctx.body`, and writes the parsed value. Requires `zod: true` — without it
+     * `output.types` emits plain interfaces, which are types with no runtime schema value.
+     *
+     * A body that transitively references a model with `format(input=...)`/`format(output=...)`, and
+     * a status whose several mimes carry different body types, are left unvalidated. Default false.
+     */
+    validateResponses?: boolean;
 }
 /** TypeScript SDK client output: the client class, per-area operation clients, and their types. */
 export interface SdkConfig {

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACR,iBAAiB,EAQpB,MAAM,mBAAmB,CAAC;AA8C3B,gFAAgF;AAChF,MAAM,WAAW,YAAY;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6HAA6H;IAC7H,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACL,8EAA8E;QAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,+EAA+E;QAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iGAAiG;AACjG,MAAM,WAAW,WAAW;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAChC;AAED,0FAA0F;AAC1F,MAAM,WAAW,SAAS;IACtB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE;QACL,oHAAoH;QACpH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,0GAA0G;QAC1G,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,yFAAyF;QACzF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,0FAA0F;AAC1F,MAAM,WAAW,sBAAsB;IACnC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,GAAG,CAAC,EAAE,SAAS,CAAC;CACnB;AAID,yGAAyG;AACzG,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAO9C,QAAA,MAAM,MAAM,EAAE,iBAMb,CAAC;AAEF,eAAe,MAAM,CAAC;AAEtB,2GAA2G;AAC3G,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAOzG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACR,iBAAiB,EAQpB,MAAM,mBAAmB,CAAC;AA+C3B,gFAAgF;AAChF,MAAM,WAAW,YAAY;IACzB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6HAA6H;IAC7H,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACL,8EAA8E;QAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,+EAA+E;QAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iGAAiG;AACjG,MAAM,WAAW,WAAW;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAChC;AAED,0FAA0F;AAC1F,MAAM,WAAW,SAAS;IACtB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE;QACL,oHAAoH;QACpH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,0GAA0G;QAC1G,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,yFAAyF;QACzF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,0FAA0F;AAC1F,MAAM,WAAW,sBAAsB;IACnC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,GAAG,CAAC,EAAE,SAAS,CAAC;CACnB;AAID,yGAAyG;AACzG,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAO9C,QAAA,MAAM,MAAM,EAAE,iBAMb,CAAC;AAEF,eAAe,MAAM,CAAC;AAEtB,2GAA2G;AAC3G,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAOzG"}

package/dist/index.js

@@ -1235,12 +1235,13 @@ function generateOp(root, options = {}) {
   if (koaImports.length > 0) {
     body.push(`import { ${koaImports.join(", ")} } from '@maroonedsoftware/koa';`);
   }
-  for (const svc of services) {
+  for (const svc of services.filter(uses)) {
     const modulePath = root.services?.[svc] ?? root.meta[svc] ?? deriveModulePath(svc, options.servicePathTemplate);
     body.push(`import { ${svc} } from '${modulePath}';`);
   }
-  if (types.length > 0) {
-    body.push(...generateTypeImports(types, root.file, options));
+  const usedTypes = types.filter(uses);
+  if (usedTypes.length > 0) {
+    body.push(...generateTypeImports(usedTypes, root.file, options));
   }
   const luxonImports = [
     "DateTime",
@@ -1359,9 +1360,11 @@ function generateSingleStatusResult(resp, op, className, call, options) {
   const respHeaders = resp?.headers ?? [];
   const hasRespHeaders = respHeaders.length > 0;
   const headersAnnotation = hasRespHeaders ? renderHeadersAnnotation(respHeaders, options.modelsWithOutput) : "";
+  let bodySchema;
   if (bodies.length === 1) {
     const { annotation, prelude } = formatTypeAnnotation(bodies[0].bodyType, options.modelsWithOutput);
     if (prelude) lines.push(`    ${prelude}`);
+    bodySchema = responseBodySchema(bodies[0].bodyType, options, prelude ? "resultType" : void 0);
     lines.push(`    const service = ctx.container.get(${className});`);
     if (hasRespHeaders) {
       lines.push(`    const result: { body: ${annotation}; headers: ${headersAnnotation} } = ${call};`);
@@ -1369,10 +1372,12 @@ function generateSingleStatusResult(resp, op, className, call, options) {
       lines.push(`    const result: ${annotation} = ${call};`);
     }
   } else if (bodies.length > 1) {
-    const { members, preludes } = renderResponseMembers(resp, options, {
+    const rendered = renderResponseMembers(resp, options, {
       includeStatus: false,
       varPrefix: "result"
     });
+    const { members, preludes } = rendered;
+    bodySchema = rendered.bodySchema;
     for (const prelude of preludes) lines.push(`    ${prelude}`);
     lines.push(`    const service = ctx.container.get(${className});`);
     lines.push(`    const result: ${members.join(" | ")} = ${call};`);
@@ -1389,10 +1394,10 @@ function generateSingleStatusResult(resp, op, className, call, options) {
   lines.push(...headerSetLines(respHeaders, "    "));
   if (bodies.length === 1) {
     lines.push(`    ctx.type = '${bodies[0].contentType}';`);
-    lines.push(`    ctx.body = ${hasRespHeaders ? "result.body" : "result"};`);
+    lines.push(`    ctx.body = ${responseBodyExpr(hasRespHeaders ? "result.body" : "result", bodySchema)};`);
   } else if (bodies.length > 1) {
     lines.push(`    ctx.type = result.contentType;`);
-    lines.push(`    ctx.body = result.body;`);
+    lines.push(`    ctx.body = ${responseBodyExpr("result.body", bodySchema)};`);
   }
   return lines;
 }
@@ -1401,6 +1406,7 @@ function generateMultiStatusResult(emitted, className, call, options) {
   const lines = [];
   const members = [];
   const preludes = [];
+  const bodySchemas = /* @__PURE__ */ new Map();
   for (const resp of emitted) {
     const rendered = renderResponseMembers(resp, options, {
       includeStatus: true,
@@ -1408,6 +1414,7 @@ function generateMultiStatusResult(emitted, className, call, options) {
     });
     members.push(...rendered.members);
     preludes.push(...rendered.preludes);
+    bodySchemas.set(resp.statusCode, rendered.bodySchema);
   }
   for (const prelude of preludes) lines.push(`    ${prelude}`);
   lines.push(`    const service = ctx.container.get(${className});`);
@@ -1422,7 +1429,7 @@ function generateMultiStatusResult(emitted, className, call, options) {
     lines.push(...headerSetLines(resp.headers ?? [], "            "));
     if (resp.bodies.length > 0) {
       lines.push(`            ctx.type = result.contentType;`);
-      lines.push(`            ctx.body = result.body;`);
+      lines.push(`            ctx.body = ${responseBodyExpr("result.body", bodySchemas.get(resp.statusCode))};`);
     }
     lines.push(`            break;`);
   }
@@ -1455,6 +1462,7 @@ function renderResponseMembers(resp, options, opts) {
   if (uniform) {
     const { annotation, prelude } = formatTypeAnnotation(bodies[0].bodyType, options.modelsWithOutput, `${opts.varPrefix}Type`);
     if (prelude) preludes.push(prelude);
+    const bodySchema = responseBodySchema(bodies[0].bodyType, options, prelude ? `${opts.varPrefix}Type` : void 0);
     const contentType = bodies.map((b) => `'${b.contentType}'`).join(" | ");
     return {
       members: [
@@ -1465,7 +1473,8 @@ function renderResponseMembers(resp, options, opts) {
           ...trailing
         ].join("; ")} }`
       ],
-      preludes
+      preludes,
+      bodySchema
     };
   }
   const members = bodies.map((b, i) => {
@@ -1613,6 +1622,46 @@ function formatTypeAnnotation(bodyType, modelsWithOutput, varName = "resultType"
   };
 }
 __name(formatTypeAnnotation, "formatTypeAnnotation");
+function isRevalidatable(type, modelsWithOutput, modelsWithTransform) {
+  const rec = /* @__PURE__ */ __name((t) => isRevalidatable(t, modelsWithOutput, modelsWithTransform), "rec");
+  switch (type.kind) {
+    case "ref":
+      return !modelsWithOutput?.has(type.name) && !modelsWithTransform?.has(type.name);
+    case "array":
+      return rec(type.item);
+    case "tuple":
+      return type.items.every(rec);
+    case "record":
+      return rec(type.key) && rec(type.value);
+    case "intersection": {
+      const [first, ...rest] = type.members;
+      if (!first) return true;
+      if (rest.length === 0) return rec(first);
+      const usesExtendChain = first.kind === "ref" && rest.every((m) => m.kind === "ref" || m.kind === "inlineObject");
+      return usesExtendChain && type.members.every(rec);
+    }
+    case "union":
+    case "discriminatedUnion":
+      return type.members.every(rec);
+    case "inlineObject":
+      return type.fields.every((f) => rec(f.type));
+    case "lazy":
+      return rec(type.inner);
+    default:
+      return true;
+  }
+}
+__name(isRevalidatable, "isRevalidatable");
+function responseBodySchema(bodyType, options, preludeVar) {
+  if (!options.validateResponses) return void 0;
+  if (!isRevalidatable(bodyType, options.modelsWithOutput, options.modelsWithTransform)) return void 0;
+  return preludeVar ?? renderType(bodyType);
+}
+__name(responseBodySchema, "responseBodySchema");
+function responseBodyExpr(value, schema) {
+  return schema ? `await parseAndValidate(${value}, ${schema}, 500)` : value;
+}
+__name(responseBodyExpr, "responseBodyExpr");
 function generateParamValidation(source, ctxExpr, varName, mode, suffix = "", modelsWithInput) {
   if (!source) return [];
   const lines = [];
@@ -1890,7 +1939,7 @@ function deriveTypeImportPath(file, template) {
 __name(deriveTypeImportPath, "deriveTypeImportPath");
 
 // src/index.ts
-import { runIncrementalCodegen, parseIncrementalManifest, emptyIncrementalManifest, serializeIncrementalManifest, hashFingerprint, collectTransitiveModelRefs } from "@contractkit/core";
+import { runIncrementalCodegen, parseIncrementalManifest, emptyIncrementalManifest, serializeIncrementalManifest, hashFingerprint, collectTransitiveModelRefs, computeModelsWithCaseTransform } from "@contractkit/core";
 
 // src/codegen-sdk.ts
 import { resolveModifiers as resolveModifiers2, isJsonMime, classifyContentType as classifyContentType2, observableResponses, thrownResponses } from "@contractkit/core";
@@ -4061,7 +4110,14 @@ function createTypescriptPlugin(config, rootDir) {
   };
 }
 __name(createTypescriptPlugin, "createTypescriptPlugin");
+function assertValidConfig(config) {
+  if (config.server?.validateResponses && !config.server.zod) {
+    throw new Error("plugin-typescript: server.validateResponses requires server.zod: true \u2014 without it output.types emits plain TypeScript interfaces, which are types with no runtime schema value for the router to validate against.");
+  }
+}
+__name(assertValidConfig, "assertValidConfig");
 async function runTypescriptCodegen(inputs, ctx, config, rootDir) {
+  assertValidConfig(config);
   const manifestPath = resolve2(ctx.cacheDir, CACHE_MANIFEST_FILENAME);
   const prevManifest = ctx.cacheEnabled ? readManifest(manifestPath) : emptyIncrementalManifest(TYPESCRIPT_CODEGEN_VERSION);
   const units = [];
@@ -4178,6 +4234,7 @@ function collectServerOutput(config, rootDir, inputs, units) {
   const serverBase = resolve2(rootDir, config.baseDir ?? ".");
   const modelsWithInput = inputs.modelsWithInput;
   const modelsWithOutput = inputs.modelsWithOutput;
+  const modelsWithTransform = computeModelsWithCaseTransform(inputs.contractRoots.flatMap((r) => r.models));
   const modelMap = buildModelMap(inputs.contractRoots);
   const allFiles = [
     ...inputs.contractRoots.map((r) => r.file),
@@ -4250,6 +4307,10 @@ function collectServerOutput(config, rootDir, inputs, units) {
       modelsWithOutput: sliceModelSet(refs, /* @__PURE__ */ new Set(), modelsWithOutput),
       servicePathTemplate: config.servicePathTemplate ?? null,
       includeInternal: config.includeInternal ?? true,
+      // Not covered by `sub`: adding `format(input=snake)` to a *different* .ck file changes
+      // this router's output with no change to `root` or the config.
+      modelsWithTransform: sliceModelSet(refs, /* @__PURE__ */ new Set(), modelsWithTransform),
+      validateResponses: config.validateResponses ?? false,
       sub: subConfigKey
     });
     units.push({
@@ -4264,7 +4325,9 @@ function collectServerOutput(config, rootDir, inputs, units) {
             modelOutPaths: serverModelOutPaths,
             modelsWithInput,
             modelsWithOutput,
-            includeInternal: config.includeInternal
+            modelsWithTransform,
+            includeInternal: config.includeInternal,
+            validateResponses: config.validateResponses
           })
         }
       ], "render")