@contractspec/lib.contracts-runtime-server-graphql 2.0.0

package/README.md

@@ -0,0 +1,3 @@
+# @contractspec/lib.contracts-runtime-server-graphql
+
+Split package for GraphQL server adapters.

package/dist/browser/graphql-pothos.js

@@ -0,0 +1,146 @@
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/dist/browser/index.js

@@ -0,0 +1,146 @@
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/dist/graphql-pothos.d.ts

@@ -0,0 +1,9 @@
+import type { SchemaTypes } from '@pothos/core';
+import type { OperationSpecRegistry } from '@contractspec/lib.contracts-spec/operations/registry';
+import '@pothos/plugin-prisma';
+import '@pothos/plugin-complexity';
+import '@pothos/plugin-relay';
+import '@pothos/plugin-dataloader';
+import '@pothos/plugin-tracing';
+import type { ResourceRegistry } from '@contractspec/lib.contracts-spec/resources';
+export declare function registerContractsOnBuilder<T extends SchemaTypes>(builder: PothosSchemaTypes.SchemaBuilder<T>, reg: OperationSpecRegistry, resources?: ResourceRegistry): void;

package/dist/graphql-pothos.js

@@ -0,0 +1,147 @@
+// @bun
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/dist/index.d.ts

@@ -0,0 +1 @@
+export * from './graphql-pothos';

package/dist/index.js

@@ -0,0 +1,147 @@
+// @bun
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/dist/node/graphql-pothos.js

@@ -0,0 +1,146 @@
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/dist/node/index.js

@@ -0,0 +1,146 @@
+// src/graphql-pothos.ts
+import { defaultGqlField } from "@contractspec/lib.contracts-spec/jsonschema";
+import"@pothos/plugin-prisma";
+import"@pothos/plugin-complexity";
+import"@pothos/plugin-relay";
+import"@pothos/plugin-dataloader";
+import"@pothos/plugin-tracing";
+import { isSchemaModel } from "@contractspec/lib.schema";
+import { createInputTypeBuilder } from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-input";
+import {
+  hydrateResourceIfNeeded,
+  parseReturns
+} from "@contractspec/lib.contracts-runtime-server-rest/contracts-adapter-hydration";
+function registerContractsOnBuilder(builder, reg, resources) {
+  const { buildInputFieldArgs } = createInputTypeBuilder(builder);
+  const outputTypeCache = new Map;
+  for (const spec of reg.list()) {
+    const out = spec.io.output;
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      const typeName = isSchemaModel(model) ? model.config?.name : "UnknownOutput";
+      if (typeName && !outputTypeCache.has(typeName)) {
+        outputTypeCache.set(typeName, model);
+      }
+    }
+  }
+  for (const [typeName, model] of outputTypeCache.entries()) {
+    if (!isSchemaModel(model))
+      continue;
+    builder.objectType(typeName, {
+      fields: (t) => {
+        const entries = Object.entries(model.config.fields);
+        const acc = {};
+        for (const [key, field] of entries) {
+          const fieldType = field.type;
+          let gqlType = "JSON";
+          if (fieldType && typeof fieldType.getPothos === "function") {
+            const pothosInfo = fieldType.getPothos();
+            gqlType = pothosInfo.name || "JSON";
+            if (gqlType === "String_unsecure")
+              gqlType = "String";
+            if (gqlType === "Int_unsecure")
+              gqlType = "Int";
+            if (gqlType === "Float_unsecure")
+              gqlType = "Float";
+            if (gqlType === "Boolean_unsecure")
+              gqlType = "Boolean";
+            if (gqlType === "ID_unsecure")
+              gqlType = "ID";
+          }
+          const typeRef = field.isArray ? [gqlType] : gqlType;
+          acc[key] = t.field({
+            type: typeRef,
+            nullable: field.isOptional,
+            resolve: (parent) => parent[key]
+          });
+        }
+        return acc;
+      }
+    });
+  }
+  function resolveGraphQLTypeName(contractSpec) {
+    const returnsName = contractSpec.transport?.gql?.returns;
+    if (returnsName)
+      return returnsName;
+    const out = contractSpec.io.output ?? {};
+    if (out && "kind" in out && out.kind === "resource_ref" && "graphQLType" in out && out.graphQLType) {
+      return String(out.graphQLType);
+    }
+    if (out && "getZod" in out && typeof out.getZod === "function") {
+      const model = out;
+      if (isSchemaModel(model)) {
+        const typeName = model.config?.name;
+        if (typeName && outputTypeCache.has(typeName)) {
+          return typeName;
+        }
+      }
+    }
+    return "JSON";
+  }
+  for (const spec of reg.list()) {
+    const fieldName = spec.transport?.gql?.field ?? defaultGqlField(spec.meta.key, spec.meta.version);
+    const byIdField = spec.transport?.gql?.byIdField ?? "id";
+    const returnsResource = spec.transport?.gql?.resource;
+    const isQuery = spec.meta.kind === "query";
+    const graphQLTypeName = resolveGraphQLTypeName(spec);
+    const returnsDecl = spec.transport?.gql?.returns;
+    const parsed = parseReturns(returnsDecl ?? graphQLTypeName);
+    const resolveFieldFn = async (_root, args, ctx) => {
+      if (spec.policy.auth !== "anonymous" && !ctx.user)
+        throw new Error("Unauthorized");
+      const handlerCtx = {
+        traceId: ctx.logger?.getTraceId?.() ?? undefined,
+        userId: ctx.user?.id ?? null,
+        organizationId: ctx.session?.activeOrganizationId ?? null,
+        actor: ctx.user ? "user" : "anonymous",
+        channel: "web",
+        eventPublisher: ctx.eventPublisher
+      };
+      const parsedInput = spec.io.input?.getZod().parse(args.input ?? {});
+      const result = await reg.execute(spec.meta.key, spec.meta.version, parsedInput, handlerCtx);
+      const out = spec.io.output;
+      if (resources && (returnsResource || out?.kind === "resource_ref")) {
+        const varName = byIdField ?? out?.varName ?? "id";
+        const template = returnsResource ?? out?.uriTemplate;
+        const hydrated = await hydrateResourceIfNeeded(resources, result, {
+          template,
+          varName,
+          returns: parsed
+        });
+        if (hydrated !== result)
+          return hydrated;
+      }
+      if (graphQLTypeName) {
+        if (parsed.inner === "Boolean" && !parsed.isList) {
+          return Boolean(result?.ok ?? result);
+        }
+        return result;
+      }
+      const parsedOut = spec.io.output.getZod().parse(result);
+      return parsedOut;
+    };
+    const fieldSettingsFn = (t) => {
+      const inputType = buildInputFieldArgs(spec.io.input);
+      return t.field({
+        type: parsed.isList ? [parsed.inner] : parsed.inner,
+        complexity: () => 10,
+        resolve: resolveFieldFn,
+        args: inputType ? {
+          input: t.arg({
+            type: inputType,
+            required: true
+          })
+        } : undefined
+      });
+    };
+    if (isQuery) {
+      builder.queryField(fieldName, fieldSettingsFn);
+    } else {
+      builder.mutationField(fieldName, fieldSettingsFn);
+    }
+  }
+}
+export {
+  registerContractsOnBuilder
+};

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@contractspec/lib.contracts-runtime-server-graphql",
+  "version": "2.0.0",
+  "description": "GraphQL server runtime adapters for ContractSpec contracts",
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "publish:pkg": "bun publish --tolerate-republish --ignore-scripts --verbose",
+    "publish:pkg:canary": "bun publish:pkg --tag canary",
+    "clean": "rm -rf dist",
+    "lint": "bun run lint:fix",
+    "lint:fix": "eslint src --fix",
+    "lint:check": "eslint src",
+    "build": "bun run prebuild && bun run build:bundle && bun run build:types",
+    "build:bundle": "contractspec-bun-build transpile",
+    "build:types": "contractspec-bun-build types",
+    "prebuild": "contractspec-bun-build prebuild",
+    "typecheck": "tsc --noEmit",
+    "dev": "contractspec-bun-build dev"
+  },
+  "dependencies": {
+    "@contractspec/lib.contracts-runtime-server-rest": "2.0.0",
+    "@contractspec/lib.contracts-spec": "2.0.0",
+    "@contractspec/lib.schema": "2.0.0",
+    "@pothos/plugin-complexity": "^4.1.2",
+    "@pothos/plugin-dataloader": "^4.4.2",
+    "@pothos/plugin-prisma": "^4.14.0",
+    "@pothos/plugin-relay": "^4.7.0",
+    "@pothos/plugin-tracing": "^1.1.2"
+  },
+  "peerDependencies": {
+    "@pothos/core": "^4.9.1",
+    "@pothos/plugin-relay": "^4.7.0"
+  },
+  "devDependencies": {
+    "@contractspec/tool.typescript": "2.0.0",
+    "typescript": "^5.9.3",
+    "@contractspec/tool.bun": "2.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "bun": "./dist/index.js",
+      "node": "./dist/node/index.js",
+      "browser": "./dist/browser/index.js",
+      "default": "./dist/index.js"
+    },
+    "./graphql-pothos": {
+      "types": "./dist/graphql-pothos.d.ts",
+      "bun": "./dist/graphql-pothos.js",
+      "node": "./dist/node/graphql-pothos.js",
+      "browser": "./dist/browser/graphql-pothos.js",
+      "default": "./dist/graphql-pothos.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "bun": "./dist/index.js",
+        "node": "./dist/node/index.js",
+        "browser": "./dist/browser/index.js",
+        "default": "./dist/index.js"
+      },
+      "./graphql-pothos": {
+        "types": "./dist/graphql-pothos.d.ts",
+        "bun": "./dist/graphql-pothos.js",
+        "node": "./dist/node/graphql-pothos.js",
+        "browser": "./dist/browser/graphql-pothos.js",
+        "default": "./dist/graphql-pothos.js"
+      }
+    }
+  }
+}