@fade_networker/vono 0.1.0

package/dist/server/middleware/rateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAmBzD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,EACnB,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EACzE,OAAO,SAA+C,qDA0FvD;AAyBD;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,mDAI3B,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,mDAI1B,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,mDAI1B,CAAA;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAAC,eAAe,CAAC,EAAE;IAC7D,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,GAAG,CAAC,EAAE,aAAa,CAAA;IACnB,GAAG,CAAC,EAAE,aAAa,CAAA;CACpB;;;;EAkBA"}

package/dist/server/middleware/rateLimiter.js

@@ -0,0 +1,164 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+import { createMiddleware } from 'hono/factory';
+import { Logger } from '../../shared/utils/logger.js';
+// ─── Core factory ───────────────────────────────────────────────────
+/**
+ * createRateLimiter — build a Hono middleware that enforces a sliding
+ * window rate limit using an in-memory store.
+ *
+ * Lazy-init pattern: the cleanup setInterval is deferred to the FIRST
+ * request so it is never called at module load time. This is required
+ * for Cloudflare Workers compatibility — CF Workers prohibit top-level
+ * I/O and timers outside of request handlers.
+ *
+ * @param tier    — { windowMs, limit } from VonoConfig.rateLimit
+ * @param keyFn   — function to derive the rate-limit key from the request
+ *                  (defaults to client IP)
+ * @param message — custom 429 message
+ */
+export function createRateLimiter(tier, keyFn, message = 'Too many attempts. Please try again later.') {
+    const state = {
+        store: new Map(),
+        initialized: false,
+        intervalHandle: null,
+    };
+    return createMiddleware(async (c, next) => {
+        // ── Lazy init: register cleanup interval on first request ────────
+        if (!state.initialized) {
+            state.initialized = true;
+            // Purge expired entries every windowMs to prevent memory leaks.
+            // Deferred here (not at module load) for CF Workers compatibility.
+            state.intervalHandle = setInterval(() => {
+                const now = Date.now();
+                for (const [key, entry] of state.store.entries()) {
+                    if (entry.resetAt <= now) {
+                        state.store.delete(key);
+                    }
+                }
+            }, tier.windowMs);
+            // Allow the interval to be garbage-collected in serverless envs
+            if (state.intervalHandle?.unref) {
+                state.intervalHandle.unref();
+            }
+        }
+        // ── Derive rate-limit key ────────────────────────────────────────
+        // Security: sanitize the IP to prevent header injection attacks.
+        // Only take the first IP from x-forwarded-for (leftmost = client IP).
+        // Reject values that don't look like valid IPs to prevent spoofing.
+        const rawIp = keyFn
+            ? keyFn(c)
+            : (c.req.header('cf-connecting-ip') ??
+                c.req.header('x-forwarded-for')?.split(',')[0]?.trim() ??
+                c.req.header('x-real-ip') ??
+                'unknown');
+        // Sanitize: strip anything that isn't a valid IP character
+        const key = rawIp.replace(/[^0-9a-fA-F.:]/g, '').slice(0, 45) || 'unknown';
+        const now = Date.now();
+        // ── Check / update store ─────────────────────────────────────────
+        const existing = state.store.get(key);
+        if (!existing || existing.resetAt <= now) {
+            // First request in this window — or window has expired
+            state.store.set(key, { count: 1, resetAt: now + tier.windowMs });
+            await next();
+            return;
+        }
+        existing.count += 1;
+        if (existing.count > tier.limit) {
+            const retryAfterSec = Math.ceil((existing.resetAt - now) / 1000);
+            Logger.warn('[vono] Rate limit exceeded', {
+                key,
+                count: existing.count,
+                limit: tier.limit,
+                retryAfterSec,
+            });
+            return c.json({
+                success: false,
+                statusCode: 429,
+                message,
+            }, 429, {
+                'Retry-After': String(retryAfterSec),
+                'X-RateLimit-Limit': String(tier.limit),
+                'X-RateLimit-Remaining': '0',
+                'X-RateLimit-Reset': String(Math.ceil(existing.resetAt / 1000)),
+            });
+        }
+        // Under the limit — set informational headers and continue
+        c.header('X-RateLimit-Limit', String(tier.limit));
+        c.header('X-RateLimit-Remaining', String(Math.max(0, tier.limit - existing.count)));
+        c.header('X-RateLimit-Reset', String(Math.ceil(existing.resetAt / 1000)));
+        await next();
+    });
+}
+// ─── Default tiers ──────────────────────────────────────────────────
+/**
+ * Default rate limit tiers — used when vono.config.ts does not specify
+ * custom values. Projects should override these in their config.
+ */
+const DEFAULT_AUTH_TIER = {
+    windowMs: 15 * 60 * 1000, // 15 minutes
+    limit: 10, // 10 login attempts per window
+};
+const DEFAULT_OTP_TIER = {
+    windowMs: 10 * 60 * 1000, // 10 minutes
+    limit: 5, // 5 OTP attempts per window
+};
+const DEFAULT_API_TIER = {
+    windowMs: 60 * 1000, // 1 minute
+    limit: 100, // 100 requests per minute
+};
+// ─── Pre-built limiters ──────────────────────────────────────────────
+/**
+ * authRateLimiter — strict limiter for login / register endpoints.
+ *
+ * Uses DEFAULT_AUTH_TIER unless overridden via config.
+ * Override in your src/index.ts:
+ * ```ts
+ * import { createRateLimiter } from 'vono/server'
+ * const authRateLimiter = createRateLimiter(config.rateLimit?.auth ?? DEFAULT_AUTH_TIER)
+ * ```
+ */
+export const authRateLimiter = createRateLimiter(DEFAULT_AUTH_TIER, undefined, 'Too many login attempts. Please wait 15 minutes before trying again.');
+/**
+ * otpRateLimiter — strict limiter for OTP / password-reset endpoints.
+ */
+export const otpRateLimiter = createRateLimiter(DEFAULT_OTP_TIER, undefined, 'Too many OTP attempts. Please wait 10 minutes before trying again.');
+/**
+ * apiRateLimiter — general-purpose limiter for public API endpoints.
+ */
+export const apiRateLimiter = createRateLimiter(DEFAULT_API_TIER, undefined, 'Too many requests. Please slow down.');
+// ─── Config-aware factory ────────────────────────────────────────────
+/**
+ * createConfiguredRateLimiters — build rate limiters from VonoConfig.
+ *
+ * Call this in your src/index.ts after loading vono.config.ts to get
+ * limiters that respect your project's custom tier settings.
+ *
+ * Usage:
+ * ```ts
+ * import { createConfiguredRateLimiters } from 'vono/server'
+ * import config from '../vono.config.js'
+ *
+ * const { authRateLimiter, otpRateLimiter, apiRateLimiter } =
+ *   createConfiguredRateLimiters(config.rateLimit)
+ *
+ * authRoutes.use('/login', authRateLimiter)
+ * authRoutes.use('/otp/verify', otpRateLimiter)
+ * api.use('*', apiRateLimiter)
+ * ```
+ */
+export function createConfiguredRateLimiters(rateLimitConfig) {
+    return {
+        authRateLimiter: createRateLimiter(rateLimitConfig?.auth ?? DEFAULT_AUTH_TIER, undefined, 'Too many login attempts. Please wait before trying again.'),
+        otpRateLimiter: createRateLimiter(rateLimitConfig?.otp ?? DEFAULT_OTP_TIER, undefined, 'Too many OTP attempts. Please wait before trying again.'),
+        apiRateLimiter: createRateLimiter(rateLimitConfig?.api ?? DEFAULT_API_TIER, undefined, 'Too many requests. Please slow down.'),
+    };
+}
+//# sourceMappingURL=rateLimiter.js.map

package/dist/server/middleware/rateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.js","sourceRoot":"","sources":["../../../src/server/middleware/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAA;AAkBrD,uEAAuE;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAmB,EACnB,KAAyE,EACzE,OAAO,GAAG,4CAA4C;IAEtD,MAAM,KAAK,GAAqB;QAC9B,KAAK,EAAE,IAAI,GAAG,EAAE;QAChB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,IAAI;KACrB,CAAA;IAED,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxC,oEAAoE;QACpE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;YACxB,gEAAgE;YAChE,mEAAmE;YACnE,KAAK,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBACjD,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;wBACzB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YAEjB,gEAAgE;YAChE,IAAI,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBAChC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAA;YAC9B,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,KAAK,GAAG,KAAK;YACjB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACV,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBAChC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBACtD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;gBACzB,SAAS,CAAC,CAAA;QAEf,2DAA2D;QAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAA;QAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,oEAAoE;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAErC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACzC,uDAAuD;YACvD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;YAChE,MAAM,IAAI,EAAE,CAAA;YACZ,OAAM;QACR,CAAC;QAED,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAA;QAEnB,IAAI,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;YAEhE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACxC,GAAG;gBACH,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa;aACd,CAAC,CAAA;YAEF,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,GAAG;gBACf,OAAO;aACR,EACD,GAAG,EACH;gBACE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;gBACpC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACvC,uBAAuB,EAAE,GAAG;gBAC5B,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;aAChE,CACF,CAAA;QACH,CAAC;QAED,2DAA2D;QAC3D,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAEzE,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;GAGG;AACH,MAAM,iBAAiB,GAAkB;IACvC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,KAAK,EAAE,EAAE,EAAkB,+BAA+B;CAC3D,CAAA;AAED,MAAM,gBAAgB,GAAkB;IACtC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,KAAK,EAAE,CAAC,EAAmB,4BAA4B;CACxD,CAAA;AAED,MAAM,gBAAgB,GAAkB;IACtC,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAQ,WAAW;IACtC,KAAK,EAAE,GAAG,EAAiB,0BAA0B;CACtD,CAAA;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAC9C,iBAAiB,EACjB,SAAS,EACT,sEAAsE,CACvE,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAC7C,gBAAgB,EAChB,SAAS,EACT,oEAAoE,CACrE,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAC7C,gBAAgB,EAChB,SAAS,EACT,sCAAsC,CACvC,CAAA;AAED,wEAAwE;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAAC,eAI5C;IACC,OAAO;QACL,eAAe,EAAE,iBAAiB,CAChC,eAAe,EAAE,IAAI,IAAI,iBAAiB,EAC1C,SAAS,EACT,2DAA2D,CAC5D;QACD,cAAc,EAAE,iBAAiB,CAC/B,eAAe,EAAE,GAAG,IAAI,gBAAgB,EACxC,SAAS,EACT,yDAAyD,CAC1D;QACD,cAAc,EAAE,iBAAiB,CAC/B,eAAe,EAAE,GAAG,IAAI,gBAAgB,EACxC,SAAS,EACT,sCAAsC,CACvC;KACF,CAAA;AACH,CAAC"}

package/dist/server/middleware/validator.d.ts

@@ -0,0 +1,57 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+import type { ZodSchema } from 'zod';
+/**
+ * The part of the request to validate.
+ *   - 'json'   — c.req.json()
+ *   - 'query'  — c.req.query() (all query params as an object)
+ *   - 'param'  — c.req.param() (URL path params)
+ *   - 'header' — c.req.header() (request headers)
+ *   - 'form'   — c.req.formData() (multipart/form-data or urlencoded)
+ */
+export type ValidatorTarget = 'json' | 'query' | 'param' | 'header' | 'form';
+export interface ValidationErrorBody {
+    success: false;
+    statusCode: 422;
+    message: string;
+    errors: Record<string, string>;
+}
+/**
+ * zodValidator — Hono middleware factory for request validation.
+ *
+ * Validates the specified part of the request against a Zod schema.
+ * On failure, returns HTTP 422 with a structured error body.
+ * On success, sets the parsed data on `c.var` under the target key
+ * so downstream handlers can access it type-safely.
+ *
+ * Usage:
+ * ```ts
+ * import { zodValidator } from 'vono/server'
+ * import { z } from 'zod'
+ *
+ * const CreateUserSchema = z.object({
+ *   email: z.string().email(),
+ *   password: z.string().min(8),
+ * })
+ *
+ * router.post('/users',
+ *   zodValidator('json', CreateUserSchema),
+ *   async (c) => {
+ *     const body = c.var.json as z.infer<typeof CreateUserSchema>
+ *     // body is fully typed and validated
+ *   }
+ * )
+ * ```
+ *
+ * @param target — which part of the request to validate
+ * @param schema — Zod schema to validate against
+ */
+export declare function zodValidator<T>(target: ValidatorTarget, schema: ZodSchema<T>): import("hono").MiddlewareHandler<any, string, {}>;
+//# sourceMappingURL=validator.d.ts.map

package/dist/server/middleware/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,KAAK,CAAA;AAI9C;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE5E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAA;IACd,UAAU,EAAE,GAAG,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,qDAyE5E"}

package/dist/server/middleware/validator.js

@@ -0,0 +1,128 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+import { createMiddleware } from 'hono/factory';
+// ─── Middleware factory ──────────────────────────────────────────────
+/**
+ * zodValidator — Hono middleware factory for request validation.
+ *
+ * Validates the specified part of the request against a Zod schema.
+ * On failure, returns HTTP 422 with a structured error body.
+ * On success, sets the parsed data on `c.var` under the target key
+ * so downstream handlers can access it type-safely.
+ *
+ * Usage:
+ * ```ts
+ * import { zodValidator } from 'vono/server'
+ * import { z } from 'zod'
+ *
+ * const CreateUserSchema = z.object({
+ *   email: z.string().email(),
+ *   password: z.string().min(8),
+ * })
+ *
+ * router.post('/users',
+ *   zodValidator('json', CreateUserSchema),
+ *   async (c) => {
+ *     const body = c.var.json as z.infer<typeof CreateUserSchema>
+ *     // body is fully typed and validated
+ *   }
+ * )
+ * ```
+ *
+ * @param target — which part of the request to validate
+ * @param schema — Zod schema to validate against
+ */
+export function zodValidator(target, schema) {
+    return createMiddleware(async (c, next) => {
+        let rawData;
+        // Extract raw data from the appropriate request part
+        switch (target) {
+            case 'json': {
+                try {
+                    rawData = await c.req.json();
+                }
+                catch {
+                    return c.json(buildErrorBody('Invalid JSON body'), 422);
+                }
+                break;
+            }
+            case 'query': {
+                rawData = c.req.query();
+                break;
+            }
+            case 'param': {
+                rawData = c.req.param();
+                break;
+            }
+            case 'header': {
+                // Convert Headers to a plain object
+                const headers = {};
+                c.req.raw.headers.forEach((value, key) => {
+                    headers[key] = value;
+                });
+                rawData = headers;
+                break;
+            }
+            case 'form': {
+                try {
+                    const formData = await c.req.formData();
+                    const obj = {};
+                    formData.forEach((value, key) => {
+                        obj[key] = value;
+                    });
+                    rawData = obj;
+                }
+                catch {
+                    return c.json(buildErrorBody('Invalid form data'), 422);
+                }
+                break;
+            }
+        }
+        // Run Zod validation
+        const result = schema.safeParse(rawData);
+        if (!result.success) {
+            const errors = flattenZodErrors(result.error);
+            return c.json({
+                success: false,
+                statusCode: 422,
+                message: 'Validation failed',
+                errors,
+            }, 422);
+        }
+        // Store parsed data on c.var so handlers can access it
+        c.set(target, result.data);
+        await next();
+    });
+}
+// ─── Helpers ────────────────────────────────────────────────────────
+/**
+ * Flatten Zod errors into a { field: message } map.
+ * For nested fields, the key is dot-separated (e.g. "address.city").
+ */
+function flattenZodErrors(error) {
+    const errors = {};
+    for (const issue of error.issues) {
+        const field = issue.path.join('.') || '_root';
+        // Keep the first error per field
+        if (!errors[field]) {
+            errors[field] = issue.message;
+        }
+    }
+    return errors;
+}
+function buildErrorBody(message) {
+    return {
+        success: false,
+        statusCode: 422,
+        message,
+        errors: {},
+    };
+}
+//# sourceMappingURL=validator.js.map

package/dist/server/middleware/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/server/middleware/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAsB/C,wEAAwE;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY,CAAI,MAAuB,EAAE,MAAoB;IAC3E,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxC,IAAI,OAAgB,CAAA;QAEpB,qDAAqD;QACrD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC,IAAI,CACX,cAAc,CAAC,mBAAmB,CAAC,EACnC,GAAG,CACJ,CAAA;gBACH,CAAC;gBACD,MAAK;YACP,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;gBACvB,MAAK;YACP,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;gBACvB,MAAK;YACP,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,oCAAoC;gBACpC,MAAM,OAAO,GAA2B,EAAE,CAAA;gBAC1C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACtB,CAAC,CAAC,CAAA;gBACF,OAAO,GAAG,OAAO,CAAA;gBACjB,MAAK;YACP,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;oBACvC,MAAM,GAAG,GAAkC,EAAE,CAAA;oBAC7C,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;oBAClB,CAAC,CAAC,CAAA;oBACF,OAAO,GAAG,GAAG,CAAA;gBACf,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC,IAAI,CACX,cAAc,CAAC,mBAAmB,CAAC,EACnC,GAAG,CACJ,CAAA;gBACH,CAAC;gBACD,MAAK;YACP,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAExC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC7C,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,OAAO,EAAE,KAAc;gBACvB,UAAU,EAAE,GAAY;gBACxB,OAAO,EAAE,mBAAmB;gBAC5B,MAAM;aACuB,EAC/B,GAAG,CACJ,CAAA;QACH,CAAC;QAED,uDAAuD;QACvD,CAAC,CAAC,GAAG,CAAC,MAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAe;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAA;QAC7C,iCAAiC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,GAAG;QACf,OAAO;QACP,MAAM,EAAE,EAAE;KACX,CAAA;AACH,CAAC"}

package/dist/server/openapi/append-tag.d.ts

@@ -0,0 +1,21 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+/**
+ * appendModuleTag — reads src/openapi.ts, appends a new tag entry
+ * for the given module, and writes the file back.
+ *
+ * Idempotent: skips if the tag already exists.
+ *
+ * @param specPath   — path to src/openapi.ts (relative to cwd)
+ * @param moduleName — module name, e.g. 'products'
+ * @param description — optional tag description
+ */
+export declare function appendModuleTag(specPath: string, moduleName: string, description?: string): void;
+//# sourceMappingURL=append-tag.d.ts.map

package/dist/server/openapi/append-tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-tag.d.ts","sourceRoot":"","sources":["../../../src/server/openapi/append-tag.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CA0CN"}

package/dist/server/openapi/append-tag.js

@@ -0,0 +1,54 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+import { readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { Logger } from '../../shared/utils/logger.js';
+/**
+ * appendModuleTag — reads src/openapi.ts, appends a new tag entry
+ * for the given module, and writes the file back.
+ *
+ * Idempotent: skips if the tag already exists.
+ *
+ * @param specPath   — path to src/openapi.ts (relative to cwd)
+ * @param moduleName — module name, e.g. 'products'
+ * @param description — optional tag description
+ */
+export function appendModuleTag(specPath, moduleName, description) {
+    if (!existsSync(specPath)) {
+        Logger.warn(`[openapi] spec file not found: ${specPath}`);
+        return;
+    }
+    const content = readFileSync(specPath, 'utf8');
+    // Derive tag name: 'products' → 'Products'
+    const tagName = moduleName.charAt(0).toUpperCase() + moduleName.slice(1);
+    const tagDescription = description ?? `${tagName} module endpoints`;
+    // Idempotency check
+    if (content.includes(`name: '${tagName}'`) || content.includes(`name: "${tagName}"`)) {
+        Logger.info(`[openapi] tag "${tagName}" already exists in ${specPath} — skipping`);
+        return;
+    }
+    // Find the tags array and append the new entry before the closing bracket
+    // Pattern: looks for the last entry in the tags array
+    const tagEntry = `      { name: '${tagName}', description: '${tagDescription}' },`;
+    // Strategy: insert before the closing `]` of the tags array
+    // We look for the pattern `tags: [` and find its closing `]`
+    const tagsMatch = content.match(/tags:\s*\[([^\]]*)\]/s);
+    if (!tagsMatch) {
+        Logger.warn(`[openapi] could not locate tags array in ${specPath}`);
+        return;
+    }
+    const updated = content.replace(/tags:\s*\[([^\]]*)\]/s, (match, inner) => {
+        const trimmed = inner.trimEnd();
+        const separator = trimmed.endsWith(',') ? '\n' : ',\n';
+        return `tags: [${trimmed}${separator}${tagEntry}\n    ]`;
+    });
+    writeFileSync(specPath, updated, 'utf8');
+    Logger.info(`[openapi] appended tag "${tagName}" to ${specPath}`);
+}
+//# sourceMappingURL=append-tag.js.map

package/dist/server/openapi/append-tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-tag.js","sourceRoot":"","sources":["../../../src/server/openapi/append-tag.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAA;AAErD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,UAAkB,EAClB,WAAoB;IAEpB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAA;QACzD,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE9C,2CAA2C;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,cAAc,GAAG,WAAW,IAAI,GAAG,OAAO,mBAAmB,CAAA;IAEnE,oBAAoB;IACpB,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,OAAO,GAAG,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,kBAAkB,OAAO,uBAAuB,QAAQ,aAAa,CAAC,CAAA;QAClF,OAAM;IACR,CAAC;IAED,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,QAAQ,GAAG,kBAAkB,OAAO,oBAAoB,cAAc,MAAM,CAAA;IAElF,4DAA4D;IAC5D,6DAA6D;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAExD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAA;QACnE,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAC7B,uBAAuB,EACvB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;QAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;QACtD,OAAO,UAAU,OAAO,GAAG,SAAS,GAAG,QAAQ,SAAS,CAAA;IAC1D,CAAC,CACF,CAAA;IAED,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,OAAO,QAAQ,QAAQ,EAAE,CAAC,CAAA;AACnE,CAAC"}

package/dist/server/openapi/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+export { generateOpenApiSpec } from './spec-template.js';
+export { appendModuleTag } from './append-tag.js';
+export type { OpenApiSpec } from './spec-template.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/openapi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/server/openapi/index.js

@@ -0,0 +1,12 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+export { generateOpenApiSpec } from './spec-template.js';
+export { appendModuleTag } from './append-tag.js';
+//# sourceMappingURL=index.js.map

package/dist/server/openapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/server/openapi/spec-template.d.ts

@@ -0,0 +1,45 @@
+/**
+ * ──────────────────────────────────────────────────────────────────
+ * 🏢 Company Name: Bonifade Technologies
+ * 👨‍💻 Developer: Bowofade Oyerinde
+ * 🐙 GitHub: oyenet1
+ * 📅 Created Date: 2026-04-05
+ * 🔄 Updated Date: 2026-04-05
+ * ──────────────────────────────────────────────────────────────────
+ */
+export interface OpenApiSpec {
+    openapi: string;
+    info: {
+        title: string;
+        version: string;
+        description?: string;
+    };
+    servers: Array<{
+        url: string;
+        description?: string;
+    }>;
+    tags: Array<{
+        name: string;
+        description?: string;
+    }>;
+    components: {
+        securitySchemes: Record<string, unknown>;
+        schemas: Record<string, unknown>;
+    };
+    paths: Record<string, unknown>;
+}
+/**
+ * generateOpenApiSpec — returns a complete OpenAPI 3.1 spec object.
+ *
+ * Includes:
+ *   - info, servers
+ *   - tags: Health, Auth
+ *   - components.securitySchemes: bearerAuth
+ *   - components.schemas: SuccessResponse, ErrorResponse, PaginationMeta
+ *
+ * @example
+ *   // src/openapi.ts
+ *   export default generateOpenApiSpec('MyApp', '1.0.0', 'https://api.example.com')
+ */
+export declare function generateOpenApiSpec(appName: string, appVersion: string, serverUrl: string): OpenApiSpec;
+//# sourceMappingURL=spec-template.d.ts.map

package/dist/server/openapi/spec-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-template.d.ts","sourceRoot":"","sources":["../../../src/server/openapi/spec-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,MAAM,CAAA;QACf,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrD,IAAI,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACnD,UAAU,EAAE;QACV,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACjC,CAAA;IACD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,WAAW,CAmHb"}