@eva_solutions/auth-sdk 0.0.0-stage → 3.0.0-dev-20261109133200

package/dist/hono-openapi/index.cjs

@@ -0,0 +1,326 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_auth_handlers = require("../auth-handlers-CDzGFDTu.cjs");
+let zod = require("zod");
+let _hono_zod_openapi = require("@hono/zod-openapi");
+// src/hono-openapi/index.ts
+/**
+* Variante OpenAPIHono del SDK — entry point `@eva_solutions/auth-sdk/hono-openapi`.
+*
+* Decisión B3 (ADR-012): usa `createRoute` + `app.openapi(route, handler)`.
+* `defineOpenAPIRoute` es para el método `openapiRoutes` (array API) — se eligió
+* `createRoute` como API primaria por compatibilidad con el factory pattern.
+* Los handlers del factory son compatibles con `RouteHandler<R>` cuando se castea
+* via `as RouteHandler<typeof route>` (no `as never` — type assertion específica).
+* Decisión B1 (ADR-012): schemas importados desde src/schemas.ts (canónico — T-00 validó).
+* Decisión CE1 (ADR-012): requiere parent OpenAPIHono (no Hono plano) — ver warning.
+*
+* RISK-04 (T-034): ErrorResponseSchema siempre documenta el shape 'api'
+* `{ error: { code: string, message: string } }` independientemente del errorWire
+* configurado en runtime. En wire='sdk' el runtime devuelve el mismo shape — es correcto.
+* El errorWire controla el código de error (EvaApiError vs EvaSdkError), pero el shape
+* del wire HTTP es siempre `{ error: { code, message } }` en ambos casos.
+*
+* @example
+* ```ts
+* import { OpenAPIHono } from '@hono/zod-openapi'
+* import { evaAuthOpenAPIRoutes } from '@eva_solutions/auth-sdk/hono-openapi'
+*
+* const app = new OpenAPIHono()  // ← CRÍTICO: OpenAPIHono, no Hono
+* app.route('/auth', evaAuthOpenAPIRoutes())
+* app.doc('/doc', { openapi: '3.1.0', info: { title: 'API', version: '1.0' } })
+* ```
+*/
+const tags = ["Auth"];
+const getCodeRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "post",
+	path: "/get-code",
+	tags,
+	summary: "Solicitar código de verificación",
+	request: { body: {
+		content: { "application/json": { schema: require_auth_handlers.GetCodeSchema } },
+		required: true
+	} },
+	responses: {
+		200: {
+			description: "Código enviado al teléfono; incluye el challengeId del desafío",
+			content: { "application/json": { schema: require_auth_handlers.GetCodeResponseSchema } }
+		},
+		400: {
+			description: "Teléfono inválido o JSON malformado",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const loginRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "post",
+	path: "/login",
+	tags,
+	summary: "Autenticarse con teléfono y código",
+	request: { body: {
+		content: { "application/json": { schema: require_auth_handlers.LoginSchema } },
+		required: true
+	} },
+	responses: {
+		200: {
+			description: "Login exitoso — tokens seteados en cookies",
+			content: { "application/json": { schema: require_auth_handlers.LoginResponseSchema } }
+		},
+		400: {
+			description: "Credenciales inválidas o JSON malformado",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		401: {
+			description: "No autorizado",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const refreshRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "post",
+	path: "/refresh",
+	tags,
+	summary: "Renovar access token vía refresh token en cookie",
+	responses: {
+		200: {
+			description: "Tokens renovados",
+			content: { "application/json": { schema: require_auth_handlers.RefreshResponseSchema } }
+		},
+		401: {
+			description: "Refresh token ausente o inválido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const logoutRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "post",
+	path: "/logout",
+	tags,
+	summary: "Cerrar sesión y limpiar cookies",
+	responses: {
+		200: {
+			description: "Logout exitoso",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Refresh token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const getMeRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "get",
+	path: "/me",
+	tags,
+	summary: "Obtener datos del usuario autenticado",
+	responses: {
+		200: {
+			description: "Usuario",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const updateMeRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "patch",
+	path: "/me",
+	tags,
+	summary: "Actualizar datos del usuario autenticado",
+	request: { body: {
+		content: { "application/json": { schema: require_auth_handlers.UpdateUserSchema } },
+		required: true
+	} },
+	responses: {
+		200: {
+			description: "Usuario actualizado",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		400: {
+			description: "Body inválido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const deleteMeRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "delete",
+	path: "/me",
+	tags,
+	summary: "Eliminar cuenta del usuario autenticado",
+	responses: {
+		200: {
+			description: "Cuenta eliminada",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const getEmpresasRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "get",
+	path: "/empresas",
+	tags,
+	summary: "Listar empresas del usuario autenticado",
+	responses: {
+		200: {
+			description: "Lista de empresas",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const setActiveEmpresaRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "post",
+	path: "/empresa-activa",
+	tags,
+	summary: "Cambiar la empresa activa de la sesión",
+	request: { body: {
+		content: { "application/json": { schema: require_auth_handlers.ActiveEmpresaSchema } },
+		required: true
+	} },
+	responses: {
+		200: {
+			description: "Empresa activa cambiada — access token nuevo seteado en su cookie (el refresh no rota)",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		400: {
+			description: "Body inválido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		401: {
+			description: "Access token ausente o inválido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		403: {
+			description: "La persona no pertenece a la empresa, o el Origin no está permitido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		429: {
+			description: "Auth limitó los pedidos",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		502: {
+			description: "Auth respondió 200 sin reemitir el access token",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		503: {
+			description: "Auth no disponible",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const getSessionsRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "get",
+	path: "/sessions",
+	tags,
+	summary: "Listar sesiones activas del usuario",
+	responses: {
+		200: {
+			description: "Lista de sesiones",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const deleteSessionRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "delete",
+	path: "/sessions/{id}",
+	tags,
+	summary: "Cerrar una sesión específica por ID",
+	responses: {
+		200: {
+			description: "Sesión cerrada",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		400: {
+			description: "ID de sesión inválido",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		},
+		401: {
+			description: "Access token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+const deleteAllSessionsRoute = (0, _hono_zod_openapi.createRoute)({
+	method: "delete",
+	path: "/sessions",
+	tags,
+	summary: "Cerrar todas las sesiones activas",
+	responses: {
+		200: {
+			description: "Todas las sesiones cerradas",
+			content: { "application/json": { schema: zod.z.object({ data: zod.z.unknown() }) } }
+		},
+		401: {
+			description: "Refresh token ausente",
+			content: { "application/json": { schema: require_auth_handlers.ErrorResponseSchema } }
+		}
+	}
+});
+/**
+* Retorna una instancia `OpenAPIHono` con los 12 endpoints de auth declarados
+* con schemas Zod 4 para generación automática de documentación OpenAPI 3.1.
+*
+* ⚠ IMPORTANTE: montar en un parent `OpenAPIHono` (no `Hono` plano).
+* Si el parent es `new Hono()`, los paths NO aparecerán en el documento `/doc`.
+* Ver honojs/middleware#952 y docs/configuration.md sección "Variante OpenAPI".
+*/
+function evaAuthOpenAPIRoutes(opts = {}) {
+	const h = require_auth_handlers.buildAuthHandlers(opts);
+	const { getCode: getCodeGuard, login: loginGuard } = h.openApiGuards;
+	const sdkGuards = /* @__PURE__ */ new WeakMap();
+	const app = new _hono_zod_openapi.OpenAPIHono({ defaultHook: (result, c) => sdkGuards.get(c)?.onInvalid(result, c) });
+	app.use("*", h.originGuard);
+	for (const [path, guard] of [["/get-code", getCodeGuard], ["/login", loginGuard]]) app.on("POST", path, (c, next) => {
+		sdkGuards.set(c, guard);
+		return guard.middleware(c, next);
+	});
+	app.openapi(getCodeRoute, h.getCode);
+	app.openapi(loginRoute, h.login);
+	app.openapi(refreshRoute, h.refresh);
+	app.openapi(logoutRoute, h.logout);
+	app.openapi(getMeRoute, h.getMe);
+	app.openapi(updateMeRoute, h.updateMe);
+	app.openapi(deleteMeRoute, h.deleteMe);
+	app.openapi(getEmpresasRoute, h.getEmpresas);
+	app.openapi(setActiveEmpresaRoute, h.setActiveEmpresa);
+	app.openapi(getSessionsRoute, h.getSessions);
+	app.openapi(deleteSessionRoute, h.deleteSession);
+	app.openapi(deleteAllSessionsRoute, h.deleteAllSessions);
+	return app;
+}
+Object.defineProperty(exports, "OpenAPIHono", {
+	enumerable: true,
+	get: function() {
+		return _hono_zod_openapi.OpenAPIHono;
+	}
+});
+Object.defineProperty(exports, "createRoute", {
+	enumerable: true,
+	get: function() {
+		return _hono_zod_openapi.createRoute;
+	}
+});
+Object.defineProperty(exports, "defineOpenAPIRoute", {
+	enumerable: true,
+	get: function() {
+		return _hono_zod_openapi.defineOpenAPIRoute;
+	}
+});
+exports.evaAuthOpenAPIRoutes = evaAuthOpenAPIRoutes;
+
+//# sourceMappingURL=index.cjs.map

package/dist/hono-openapi/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["createRoute","GetCodeSchema","GetCodeResponseSchema","ErrorResponseSchema","LoginSchema","LoginResponseSchema","RefreshResponseSchema","z","UpdateUserSchema","ActiveEmpresaSchema","buildAuthHandlers","OpenAPIHono"],"sources":["../../src/hono-openapi/index.ts"],"sourcesContent":["/**\n * Variante OpenAPIHono del SDK — entry point `@eva_solutions/auth-sdk/hono-openapi`.\n *\n * Decisión B3 (ADR-012): usa `createRoute` + `app.openapi(route, handler)`.\n * `defineOpenAPIRoute` es para el método `openapiRoutes` (array API) — se eligió\n * `createRoute` como API primaria por compatibilidad con el factory pattern.\n * Los handlers del factory son compatibles con `RouteHandler<R>` cuando se castea\n * via `as RouteHandler<typeof route>` (no `as never` — type assertion específica).\n * Decisión B1 (ADR-012): schemas importados desde src/schemas.ts (canónico — T-00 validó).\n * Decisión CE1 (ADR-012): requiere parent OpenAPIHono (no Hono plano) — ver warning.\n *\n * RISK-04 (T-034): ErrorResponseSchema siempre documenta el shape 'api'\n * `{ error: { code: string, message: string } }` independientemente del errorWire\n * configurado en runtime. En wire='sdk' el runtime devuelve el mismo shape — es correcto.\n * El errorWire controla el código de error (EvaApiError vs EvaSdkError), pero el shape\n * del wire HTTP es siempre `{ error: { code, message } }` en ambos casos.\n *\n * @example\n * ```ts\n * import { OpenAPIHono } from '@hono/zod-openapi'\n * import { evaAuthOpenAPIRoutes } from '@eva_solutions/auth-sdk/hono-openapi'\n *\n * const app = new OpenAPIHono()  // ← CRÍTICO: OpenAPIHono, no Hono\n * app.route('/auth', evaAuthOpenAPIRoutes())\n * app.doc('/doc', { openapi: '3.1.0', info: { title: 'API', version: '1.0' } })\n * ```\n */\nimport { OpenAPIHono, createRoute } from '@hono/zod-openapi'\nimport { z } from 'zod'\nimport type { RouteHandler } from '@hono/zod-openapi'\nimport type { Context } from 'hono'\nimport {\n  buildAuthHandlers,\n  type AuthHandlerOptions,\n  type OpenAPIBodyGuard,\n} from '../auth-handlers'\nimport {\n  ActiveEmpresaSchema,\n  GetCodeSchema,\n  GetCodeResponseSchema,\n  LoginSchema,\n  UpdateUserSchema,\n  ErrorResponseSchema,\n  LoginResponseSchema,\n  RefreshResponseSchema,\n} from '../schemas'\n\nexport type EvaAuthOpenAPIRoutesOptions = AuthHandlerOptions\n\nconst tags = ['Auth']\n\n// === Route definitions (createRoute — forma canónica de @hono/zod-openapi) ===\n\nconst getCodeRoute = createRoute({\n  method: 'post',\n  path: '/get-code',\n  tags,\n  summary: 'Solicitar código de verificación',\n  request: {\n    body: {\n      content: { 'application/json': { schema: GetCodeSchema } },\n      required: true,\n    },\n  },\n  responses: {\n    200: {\n      description:\n        'Código enviado al teléfono; incluye el challengeId del desafío',\n      content: { 'application/json': { schema: GetCodeResponseSchema } },\n    },\n    400: {\n      description: 'Teléfono inválido o JSON malformado',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst loginRoute = createRoute({\n  method: 'post',\n  path: '/login',\n  tags,\n  summary: 'Autenticarse con teléfono y código',\n  request: {\n    body: {\n      content: { 'application/json': { schema: LoginSchema } },\n      required: true,\n    },\n  },\n  responses: {\n    200: {\n      description: 'Login exitoso — tokens seteados en cookies',\n      content: { 'application/json': { schema: LoginResponseSchema } },\n    },\n    400: {\n      description: 'Credenciales inválidas o JSON malformado',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    401: {\n      description: 'No autorizado',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst refreshRoute = createRoute({\n  method: 'post',\n  path: '/refresh',\n  tags,\n  summary: 'Renovar access token vía refresh token en cookie',\n  responses: {\n    200: {\n      description: 'Tokens renovados',\n      content: { 'application/json': { schema: RefreshResponseSchema } },\n    },\n    401: {\n      description: 'Refresh token ausente o inválido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst logoutRoute = createRoute({\n  method: 'post',\n  path: '/logout',\n  tags,\n  summary: 'Cerrar sesión y limpiar cookies',\n  responses: {\n    200: {\n      description: 'Logout exitoso',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Refresh token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst getMeRoute = createRoute({\n  method: 'get',\n  path: '/me',\n  tags,\n  summary: 'Obtener datos del usuario autenticado',\n  responses: {\n    200: {\n      description: 'Usuario',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst updateMeRoute = createRoute({\n  method: 'patch',\n  path: '/me',\n  tags,\n  summary: 'Actualizar datos del usuario autenticado',\n  request: {\n    body: {\n      content: { 'application/json': { schema: UpdateUserSchema } },\n      required: true,\n    },\n  },\n  responses: {\n    200: {\n      description: 'Usuario actualizado',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    400: {\n      description: 'Body inválido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst deleteMeRoute = createRoute({\n  method: 'delete',\n  path: '/me',\n  tags,\n  summary: 'Eliminar cuenta del usuario autenticado',\n  responses: {\n    200: {\n      description: 'Cuenta eliminada',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst getEmpresasRoute = createRoute({\n  method: 'get',\n  path: '/empresas',\n  tags,\n  summary: 'Listar empresas del usuario autenticado',\n  responses: {\n    200: {\n      description: 'Lista de empresas',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst setActiveEmpresaRoute = createRoute({\n  method: 'post',\n  path: '/empresa-activa',\n  tags,\n  summary: 'Cambiar la empresa activa de la sesión',\n  request: {\n    body: {\n      content: { 'application/json': { schema: ActiveEmpresaSchema } },\n      required: true,\n    },\n  },\n  responses: {\n    200: {\n      description:\n        'Empresa activa cambiada — access token nuevo seteado en su cookie (el refresh no rota)',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    400: {\n      description: 'Body inválido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    401: {\n      description: 'Access token ausente o inválido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    403: {\n      description:\n        'La persona no pertenece a la empresa, o el Origin no está permitido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    429: {\n      description: 'Auth limitó los pedidos',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    502: {\n      description: 'Auth respondió 200 sin reemitir el access token',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    503: {\n      description: 'Auth no disponible',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst getSessionsRoute = createRoute({\n  method: 'get',\n  path: '/sessions',\n  tags,\n  summary: 'Listar sesiones activas del usuario',\n  responses: {\n    200: {\n      description: 'Lista de sesiones',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst deleteSessionRoute = createRoute({\n  method: 'delete',\n  path: '/sessions/{id}',\n  tags,\n  summary: 'Cerrar una sesión específica por ID',\n  responses: {\n    200: {\n      description: 'Sesión cerrada',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    400: {\n      description: 'ID de sesión inválido',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n    401: {\n      description: 'Access token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\nconst deleteAllSessionsRoute = createRoute({\n  method: 'delete',\n  path: '/sessions',\n  tags,\n  summary: 'Cerrar todas las sesiones activas',\n  responses: {\n    200: {\n      description: 'Todas las sesiones cerradas',\n      content: {\n        'application/json': { schema: z.object({ data: z.unknown() }) },\n      },\n    },\n    401: {\n      description: 'Refresh token ausente',\n      content: { 'application/json': { schema: ErrorResponseSchema } },\n    },\n  },\n})\n\n// === Factory ===\n\n/**\n * Retorna una instancia `OpenAPIHono` con los 12 endpoints de auth declarados\n * con schemas Zod 4 para generación automática de documentación OpenAPI 3.1.\n *\n * ⚠ IMPORTANTE: montar en un parent `OpenAPIHono` (no `Hono` plano).\n * Si el parent es `new Hono()`, los paths NO aparecerán en el documento `/doc`.\n * Ver honojs/middleware#952 y docs/configuration.md sección \"Variante OpenAPI\".\n */\nexport function evaAuthOpenAPIRoutes(\n  opts: EvaAuthOpenAPIRoutesOptions = {},\n): OpenAPIHono {\n  const h = buildAuthHandlers(opts)\n  const { getCode: getCodeGuard, login: loginGuard } = h.openApiGuards\n  // Hook del validador solo para get-code/login del SDK: sus 400 salen en el wire de la\n  // variante plana en vez del ZodError. El resto de las rutas conserva el default.\n  // Las rutas del SDK se identifican por haber pasado por su guarda (registrada con el\n  // path exacto relativo a esta sub-app), no por el sufijo del path completo: así una\n  // ruta propia del consumidor (/admin/login, /sms/get-code) no hereda los mensajes\n  // y el prefijo de montaje (/auth, basePath, raíz, strict:false) es irrelevante.\n  const sdkGuards = new WeakMap<Context, OpenAPIBodyGuard>()\n  const app = new OpenAPIHono({\n    defaultHook: (result, c) => sdkGuards.get(c)?.onInvalid(result, c),\n  })\n\n  // CSRF por Origin: antes que cualquier otra guarda o validador.\n  app.use('*', h.originGuard)\n\n  // get-code/login: el validador del body responde el 400 antes que el handler;\n  // la guarda aporta no-store y el JSON malformado en el wire de la variante plana.\n  for (const [path, guard] of [\n    ['/get-code', getCodeGuard],\n    ['/login', loginGuard],\n  ] as const) {\n    app.on('POST', path, (c, next) => {\n      sdkGuards.set(c, guard)\n      return guard.middleware(c, next)\n    })\n  }\n\n  // Los handlers del factory retornan Promise<Response> — compatible en runtime con\n  // RouteHandler<R>, pero TS no puede reconciliar el union type RouteConfigToTypedResponse.\n  // Se usa double assertion (as unknown as RouteHandler<R>) documentada en ADR-012:\n  // es una type assertion específica (no as never — mantiene el tipo target concreto).\n  // Justificación: el factory pattern compartido entre variante plana y OpenAPI requiere\n  // handlers genéricos; la inference TS no atraviesa el indirection del factory.\n  app.openapi(\n    getCodeRoute,\n    h.getCode as unknown as RouteHandler<typeof getCodeRoute>,\n  )\n  app.openapi(loginRoute, h.login as unknown as RouteHandler<typeof loginRoute>)\n  app.openapi(\n    refreshRoute,\n    h.refresh as unknown as RouteHandler<typeof refreshRoute>,\n  )\n  app.openapi(\n    logoutRoute,\n    h.logout as unknown as RouteHandler<typeof logoutRoute>,\n  )\n  app.openapi(getMeRoute, h.getMe as unknown as RouteHandler<typeof getMeRoute>)\n  app.openapi(\n    updateMeRoute,\n    h.updateMe as unknown as RouteHandler<typeof updateMeRoute>,\n  )\n  app.openapi(\n    deleteMeRoute,\n    h.deleteMe as unknown as RouteHandler<typeof deleteMeRoute>,\n  )\n  app.openapi(\n    getEmpresasRoute,\n    h.getEmpresas as unknown as RouteHandler<typeof getEmpresasRoute>,\n  )\n  app.openapi(\n    setActiveEmpresaRoute,\n    h.setActiveEmpresa as unknown as RouteHandler<typeof setActiveEmpresaRoute>,\n  )\n  app.openapi(\n    getSessionsRoute,\n    h.getSessions as unknown as RouteHandler<typeof getSessionsRoute>,\n  )\n  app.openapi(\n    deleteSessionRoute,\n    h.deleteSession as unknown as RouteHandler<typeof deleteSessionRoute>,\n  )\n  app.openapi(\n    deleteAllSessionsRoute,\n    h.deleteAllSessions as unknown as RouteHandler<\n      typeof deleteAllSessionsRoute\n    >,\n  )\n\n  return app\n}\n\n// Re-exports de conveniencia\nexport { OpenAPIHono, createRoute, defineOpenAPIRoute } from '@hono/zod-openapi'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAM,OAAO,CAAC,MAAM;AAIpB,MAAM,gBAAA,GAAeA,kBAAAA,YAAAA,CAAY;CAC/B,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,SAAS,EACP,MAAM;EACJ,SAAS,EAAE,oBAAoB,EAAE,QAAQC,sBAAAA,cAAc,EAAE;EACzD,UAAU;CACZ,EACF;CACA,WAAW;EACT,KAAK;GACH,aACE;GACF,SAAS,EAAE,oBAAoB,EAAE,QAAQC,sBAAAA,sBAAsB,EAAE;EACnE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQC,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,cAAA,GAAaH,kBAAAA,YAAAA,CAAY;CAC7B,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,SAAS,EACP,MAAM;EACJ,SAAS,EAAE,oBAAoB,EAAE,QAAQI,sBAAAA,YAAY,EAAE;EACvD,UAAU;CACZ,EACF;CACA,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQC,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQF,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,gBAAA,GAAeH,kBAAAA,YAAAA,CAAY;CAC/B,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQM,sBAAAA,sBAAsB,EAAE;EACnE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQH,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,eAAA,GAAcH,kBAAAA,YAAAA,CAAY;CAC9B,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,cAAA,GAAaH,kBAAAA,YAAAA,CAAY;CAC7B,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,iBAAA,GAAgBH,kBAAAA,YAAAA,CAAY;CAChC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,SAAS,EACP,MAAM;EACJ,SAAS,EAAE,oBAAoB,EAAE,QAAQQ,sBAAAA,iBAAiB,EAAE;EAC5D,UAAU;CACZ,EACF;CACA,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQD,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,iBAAA,GAAgBH,kBAAAA,YAAAA,CAAY;CAChC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,oBAAA,GAAmBH,kBAAAA,YAAAA,CAAY;CACnC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,yBAAA,GAAwBH,kBAAAA,YAAAA,CAAY;CACxC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,SAAS,EACP,MAAM;EACJ,SAAS,EAAE,oBAAoB,EAAE,QAAQS,sBAAAA,oBAAoB,EAAE;EAC/D,UAAU;CACZ,EACF;CACA,WAAW;EACT,KAAK;GACH,aACE;GACF,SAAS,EACP,oBAAoB,EAAE,QAAQF,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aACE;GACF,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,oBAAA,GAAmBH,kBAAAA,YAAAA,CAAY;CACnC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,sBAAA,GAAqBH,kBAAAA,YAAAA,CAAY;CACrC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQA,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;AAED,MAAM,0BAAA,GAAyBH,kBAAAA,YAAAA,CAAY;CACzC,QAAQ;CACR,MAAM;CACN;CACA,SAAS;CACT,WAAW;EACT,KAAK;GACH,aAAa;GACb,SAAS,EACP,oBAAoB,EAAE,QAAQO,IAAAA,EAAE,OAAO,EAAE,MAAMA,IAAAA,EAAE,QAAQ,EAAE,CAAC,EAAE,EAChE;EACF;EACA,KAAK;GACH,aAAa;GACb,SAAS,EAAE,oBAAoB,EAAE,QAAQJ,sBAAAA,oBAAoB,EAAE;EACjE;CACF;AACF,CAAC;;;;;;;;;AAYD,SAAgB,qBACd,OAAoC,CAAC,GACxB;CACb,MAAM,IAAIO,sBAAAA,kBAAkB,IAAI;CAChC,MAAM,EAAE,SAAS,cAAc,OAAO,eAAe,EAAE;CAOvD,MAAM,4BAAY,IAAI,QAAmC;CACzD,MAAM,MAAM,IAAIC,kBAAAA,YAAY,EAC1B,cAAc,QAAQ,MAAM,UAAU,IAAI,CAAC,CAAC,EAAE,UAAU,QAAQ,CAAC,EACnE,CAAC;CAGD,IAAI,IAAI,KAAK,EAAE,WAAW;CAI1B,KAAK,MAAM,CAAC,MAAM,UAAU,CAC1B,CAAC,aAAa,YAAY,GAC1B,CAAC,UAAU,UAAU,CACvB,GACE,IAAI,GAAG,QAAQ,OAAO,GAAG,SAAS;EAChC,UAAU,IAAI,GAAG,KAAK;EACtB,OAAO,MAAM,WAAW,GAAG,IAAI;CACjC,CAAC;CASH,IAAI,QACF,cACA,EAAE,OACJ;CACA,IAAI,QAAQ,YAAY,EAAE,KAAmD;CAC7E,IAAI,QACF,cACA,EAAE,OACJ;CACA,IAAI,QACF,aACA,EAAE,MACJ;CACA,IAAI,QAAQ,YAAY,EAAE,KAAmD;CAC7E,IAAI,QACF,eACA,EAAE,QACJ;CACA,IAAI,QACF,eACA,EAAE,QACJ;CACA,IAAI,QACF,kBACA,EAAE,WACJ;CACA,IAAI,QACF,uBACA,EAAE,gBACJ;CACA,IAAI,QACF,kBACA,EAAE,WACJ;CACA,IAAI,QACF,oBACA,EAAE,aACJ;CACA,IAAI,QACF,wBACA,EAAE,iBAGJ;CAEA,OAAO;AACT"}

package/dist/hono-openapi/index.d.cts

@@ -0,0 +1,14 @@
+import { t as AuthHandlerOptions } from "../auth-handlers-DRUUTEtW.cjs";
+import { OpenAPIHono, OpenAPIHono as OpenAPIHono$1, createRoute, defineOpenAPIRoute } from "@hono/zod-openapi";
+type EvaAuthOpenAPIRoutesOptions = AuthHandlerOptions;
+/**
+ * Retorna una instancia `OpenAPIHono` con los 12 endpoints de auth declarados
+ * con schemas Zod 4 para generación automática de documentación OpenAPI 3.1.
+ *
+ * ⚠ IMPORTANTE: montar en un parent `OpenAPIHono` (no `Hono` plano).
+ * Si el parent es `new Hono()`, los paths NO aparecerán en el documento `/doc`.
+ * Ver honojs/middleware#952 y docs/configuration.md sección "Variante OpenAPI".
+ */
+declare function evaAuthOpenAPIRoutes(opts?: EvaAuthOpenAPIRoutesOptions): OpenAPIHono$1;
+export { EvaAuthOpenAPIRoutesOptions, OpenAPIHono, createRoute, defineOpenAPIRoute, evaAuthOpenAPIRoutes };
+//# sourceMappingURL=index.d.cts.map

package/dist/hono-openapi/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":["OpenAPIHono"],"sources":["../../src/hono-openapi/index.ts"],"mappings":";;KA+CY,8BAA8B;;;;;;;;;iBAyS1B,qBACd,OAAM,8BACLA"}

package/dist/hono-openapi/index.d.ts

@@ -0,0 +1,14 @@
+import { t as AuthHandlerOptions } from "../auth-handlers-BTbXKJms.js";
+import { OpenAPIHono, OpenAPIHono as OpenAPIHono$1, createRoute, defineOpenAPIRoute } from "@hono/zod-openapi";
+type EvaAuthOpenAPIRoutesOptions = AuthHandlerOptions;
+/**
+ * Retorna una instancia `OpenAPIHono` con los 12 endpoints de auth declarados
+ * con schemas Zod 4 para generación automática de documentación OpenAPI 3.1.
+ *
+ * ⚠ IMPORTANTE: montar en un parent `OpenAPIHono` (no `Hono` plano).
+ * Si el parent es `new Hono()`, los paths NO aparecerán en el documento `/doc`.
+ * Ver honojs/middleware#952 y docs/configuration.md sección "Variante OpenAPI".
+ */
+declare function evaAuthOpenAPIRoutes(opts?: EvaAuthOpenAPIRoutesOptions): OpenAPIHono$1;
+export { EvaAuthOpenAPIRoutesOptions, OpenAPIHono, createRoute, defineOpenAPIRoute, evaAuthOpenAPIRoutes };
+//# sourceMappingURL=index.d.ts.map

package/dist/hono-openapi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":["OpenAPIHono"],"sources":["../../src/hono-openapi/index.ts"],"mappings":";;KA+CY,8BAA8B;;;;;;;;;iBAyS1B,qBACd,OAAM,8BACLA"}