@getstrata/core 0.5.42 → 0.5.44

package/dist/entries/mail/mailer.js

@@ -0,0 +1,208 @@
+// @bun
+// ../../src/core/mail/mailer.ts
+function resolveSmtpConfig() {
+  const host = process.env.MAIL_HOST?.trim();
+  if (!host) {
+    throw new Error('MAIL_DRIVER="smtp" requires MAIL_HOST to be set.');
+  }
+  const from = process.env.MAIL_FROM?.trim();
+  if (!from) {
+    throw new Error('MAIL_DRIVER="smtp" requires MAIL_FROM to be set.');
+  }
+  const port = Number.parseInt(process.env.MAIL_PORT ?? "587", 10);
+  if (!Number.isInteger(port) || port <= 0) {
+    throw new Error('Environment variable "MAIL_PORT" must be a positive integer.');
+  }
+  return {
+    host,
+    port,
+    from,
+    secure: (process.env.MAIL_SECURE ?? "false") === "true",
+    ...process.env.MAIL_USERNAME?.trim() ? { username: process.env.MAIL_USERNAME.trim() } : {},
+    ...process.env.MAIL_PASSWORD?.trim() ? { password: process.env.MAIL_PASSWORD.trim() } : {}
+  };
+}
+function encodeBase64(value) {
+  return Buffer.from(value, "utf8").toString("base64");
+}
+function parseSmtpResponses(buffer) {
+  const responses = [];
+  let remainder = buffer;
+  while (remainder.includes(`\r
+`)) {
+    const index = remainder.indexOf(`\r
+`);
+    const line = remainder.slice(0, index);
+    remainder = remainder.slice(index + 2);
+    if (line.length >= 4 && line[3] === "-") {
+      continue;
+    }
+    responses.push(line);
+  }
+  return { responses, remainder };
+}
+async function waitForSmtpResponse(readResponse, expectedCodes) {
+  const response = await readResponse();
+  const code = response.slice(0, 3);
+  if (!expectedCodes.includes(code)) {
+    throw new Error(`Unexpected SMTP response: ${response}`);
+  }
+  return response;
+}
+async function openSmtpConnection(config) {
+  let buffer = "";
+  const waiters = [];
+  const readResponse = () => new Promise((resolve, reject) => {
+    const parsed = parseSmtpResponses(buffer);
+    if (parsed.responses.length > 0) {
+      buffer = parsed.remainder;
+      resolve(parsed.responses.shift());
+      return;
+    }
+    waiters.push({ resolve, reject });
+  });
+  const socket = await Bun.connect({
+    hostname: config.host,
+    port: config.port,
+    socket: {
+      open() {},
+      data(_socket, chunk) {
+        buffer += Buffer.from(chunk).toString("utf8");
+        const parsed = parseSmtpResponses(buffer);
+        buffer = parsed.remainder;
+        while (parsed.responses.length > 0 && waiters.length > 0) {
+          const response = parsed.responses.shift();
+          waiters.shift()?.resolve(response);
+        }
+      },
+      error(_socket, error) {
+        const pending = waiters.splice(0);
+        for (const waiter of pending) {
+          waiter.reject(error instanceof Error ? error : new Error(String(error)));
+        }
+      }
+    }
+  });
+  return { socket, readResponse };
+}
+async function defaultSmtpTransport(config, message) {
+  const { socket, readResponse } = await openSmtpConnection(config);
+  try {
+    await waitForSmtpResponse(readResponse, ["220"]);
+    await socket.write(`EHLO workhub.local\r
+`);
+    await waitForSmtpResponse(readResponse, ["250"]);
+    if (config.username && config.password) {
+      await socket.write(`AUTH LOGIN\r
+`);
+      await waitForSmtpResponse(readResponse, ["334"]);
+      await socket.write(`${encodeBase64(config.username)}\r
+`);
+      await waitForSmtpResponse(readResponse, ["334"]);
+      await socket.write(`${encodeBase64(config.password)}\r
+`);
+      await waitForSmtpResponse(readResponse, ["235"]);
+    }
+    await socket.write(`MAIL FROM:<${config.from}>\r
+`);
+    await waitForSmtpResponse(readResponse, ["250"]);
+    await socket.write(`RCPT TO:<${message.to}>\r
+`);
+    await waitForSmtpResponse(readResponse, ["250", "251"]);
+    await socket.write(`DATA\r
+`);
+    await waitForSmtpResponse(readResponse, ["354"]);
+    const payload = buildSmtpPayload(config.from, message);
+    await socket.write(payload);
+    await waitForSmtpResponse(readResponse, ["250"]);
+    await socket.write(`QUIT\r
+`);
+    await waitForSmtpResponse(readResponse, ["221"]);
+  } finally {
+    socket.end();
+  }
+}
+function buildSmtpPayload(from, message) {
+  const headers = [
+    `From: ${from}`,
+    `To: ${message.to}`,
+    `Subject: ${message.subject}`,
+    "MIME-Version: 1.0"
+  ];
+  if (message.html) {
+    const boundary = `strata-${Date.now().toString(36)}`;
+    headers.push(`Content-Type: multipart/alternative; boundary="${boundary}"`);
+    const parts = [
+      `--${boundary}`,
+      "Content-Type: text/plain; charset=utf-8",
+      "",
+      message.body,
+      `--${boundary}`,
+      "Content-Type: text/html; charset=utf-8",
+      "",
+      message.html,
+      `--${boundary}--`,
+      ""
+    ];
+    return [...headers, "", ...parts, ".", ""].join(`\r
+`);
+  }
+  headers.push("Content-Type: text/plain; charset=utf-8");
+  return [...headers, "", message.body, ".", ""].join(`\r
+`);
+}
+
+class LogMailDriver {
+  async send(message) {
+    console.log(JSON.stringify({
+      level: "info",
+      channel: "mail",
+      to: message.to,
+      subject: message.subject,
+      body: message.body,
+      ...message.html ? { html: message.html } : {}
+    }));
+  }
+}
+
+class SmtpMailDriver {
+  config;
+  transport;
+  constructor(config, transport = defaultSmtpTransport) {
+    this.config = config;
+    this.transport = transport;
+  }
+  send(message) {
+    return this.transport(this.config, message);
+  }
+}
+
+class Mailer {
+  driver;
+  constructor(driver) {
+    this.driver = driver;
+  }
+  send(message) {
+    return this.driver.send(message);
+  }
+}
+function createMailDriver() {
+  const driver = process.env.MAIL_DRIVER ?? "log";
+  if (driver === "smtp") {
+    return new SmtpMailDriver(resolveSmtpConfig());
+  }
+  return new LogMailDriver;
+}
+var appMailer = new Mailer(createMailDriver());
+function mailer() {
+  return appMailer;
+}
+export {
+  resolveSmtpConfig,
+  mailer,
+  createMailDriver,
+  buildSmtpPayload,
+  SmtpMailDriver,
+  Mailer,
+  LogMailDriver
+};

package/dist/entries/mail/markdownMail.js

@@ -0,0 +1,63 @@
+// @bun
+// ../../src/core/mail/markdownMail.ts
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function stripMarkdown(markdown) {
+  return markdown.replace(/^#{1,6}\s+/gm, "").replace(/\*\*([^*]+)\*\*/g, "$1").replace(/\*([^*]+)\*/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1 ($2)").replace(/^[-*]\s+/gm, "\u2022 ").replace(/```[\s\S]*?```/g, "").replace(/\n{3,}/g, `
+
+`).trim();
+}
+function markdownToHtml(markdown) {
+  const escaped = markdown.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return escaped.replace(/^### (.+)$/gm, "<h3>$1</h3>").replace(/^## (.+)$/gm, "<h2>$1</h2>").replace(/^# (.+)$/gm, "<h1>$1</h1>").replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>').replace(/^[-*]\s+(.+)$/gm, "<li>$1</li>").replace(/(<li>[\s\S]*?<\/li>\n?)+/g, (block) => `<ul>${block}</ul>`).replace(/```(\w+)?\n([\s\S]*?)```/g, "<pre><code>$2</code></pre>").split(/\n\n+/).map((block) => {
+    if (block.startsWith("<")) {
+      return block;
+    }
+    return `<p>${block.replace(/\n/g, " ")}</p>`;
+  }).join(`
+`);
+}
+function wrapMarkdownMailLayout(bodyHtml, options = {}) {
+  const title = escapeHtml(options.title ?? "GetStrata");
+  const preview = escapeHtml(options.preview ?? "");
+  const footer = escapeHtml(options.footer ?? "Sent by GetStrata");
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  <style>
+    body { font-family: system-ui, sans-serif; line-height: 1.5; color: #111827; background: #f9fafb; margin: 0; padding: 24px; }
+    .container { max-width: 640px; margin: 0 auto; background: #ffffff; border: 1px solid #e5e7eb; border-radius: 8px; overflow: hidden; }
+    .header { padding: 20px 24px; border-bottom: 1px solid #e5e7eb; font-weight: 600; }
+    .content { padding: 24px; }
+    .footer { padding: 16px 24px; border-top: 1px solid #e5e7eb; color: #6b7280; font-size: 14px; }
+    a { color: #2563eb; }
+    code { background: #f3f4f6; padding: 2px 4px; border-radius: 4px; }
+    pre { background: #111827; color: #f9fafb; padding: 12px; border-radius: 6px; overflow-x: auto; }
+  </style>
+</head>
+<body>
+  ${preview ? `<span style="display:none;max-height:0;overflow:hidden;">${preview}</span>` : ""}
+  <div class="container">
+    <div class="header">${title}</div>
+    <div class="content">${bodyHtml}</div>
+    <div class="footer">${footer}</div>
+  </div>
+</body>
+</html>`;
+}
+function renderMarkdownMail(markdown, options = {}) {
+  const bodyHtml = markdownToHtml(markdown.trim());
+  const html = wrapMarkdownMailLayout(bodyHtml, options);
+  const text = stripMarkdown(markdown);
+  return { html, text };
+}
+export {
+  wrapMarkdownMailLayout,
+  stripMarkdown,
+  renderMarkdownMail,
+  markdownToHtml
+};

package/dist/entries/mail/markdownMailable.js

@@ -0,0 +1,78 @@
+// @bun
+// ../../src/core/mail/markdownMail.ts
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function stripMarkdown(markdown) {
+  return markdown.replace(/^#{1,6}\s+/gm, "").replace(/\*\*([^*]+)\*\*/g, "$1").replace(/\*([^*]+)\*/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1 ($2)").replace(/^[-*]\s+/gm, "\u2022 ").replace(/```[\s\S]*?```/g, "").replace(/\n{3,}/g, `
+
+`).trim();
+}
+function markdownToHtml(markdown) {
+  const escaped = markdown.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return escaped.replace(/^### (.+)$/gm, "<h3>$1</h3>").replace(/^## (.+)$/gm, "<h2>$1</h2>").replace(/^# (.+)$/gm, "<h1>$1</h1>").replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>').replace(/^[-*]\s+(.+)$/gm, "<li>$1</li>").replace(/(<li>[\s\S]*?<\/li>\n?)+/g, (block) => `<ul>${block}</ul>`).replace(/```(\w+)?\n([\s\S]*?)```/g, "<pre><code>$2</code></pre>").split(/\n\n+/).map((block) => {
+    if (block.startsWith("<")) {
+      return block;
+    }
+    return `<p>${block.replace(/\n/g, " ")}</p>`;
+  }).join(`
+`);
+}
+function wrapMarkdownMailLayout(bodyHtml, options = {}) {
+  const title = escapeHtml(options.title ?? "GetStrata");
+  const preview = escapeHtml(options.preview ?? "");
+  const footer = escapeHtml(options.footer ?? "Sent by GetStrata");
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  <style>
+    body { font-family: system-ui, sans-serif; line-height: 1.5; color: #111827; background: #f9fafb; margin: 0; padding: 24px; }
+    .container { max-width: 640px; margin: 0 auto; background: #ffffff; border: 1px solid #e5e7eb; border-radius: 8px; overflow: hidden; }
+    .header { padding: 20px 24px; border-bottom: 1px solid #e5e7eb; font-weight: 600; }
+    .content { padding: 24px; }
+    .footer { padding: 16px 24px; border-top: 1px solid #e5e7eb; color: #6b7280; font-size: 14px; }
+    a { color: #2563eb; }
+    code { background: #f3f4f6; padding: 2px 4px; border-radius: 4px; }
+    pre { background: #111827; color: #f9fafb; padding: 12px; border-radius: 6px; overflow-x: auto; }
+  </style>
+</head>
+<body>
+  ${preview ? `<span style="display:none;max-height:0;overflow:hidden;">${preview}</span>` : ""}
+  <div class="container">
+    <div class="header">${title}</div>
+    <div class="content">${bodyHtml}</div>
+    <div class="footer">${footer}</div>
+  </div>
+</body>
+</html>`;
+}
+function renderMarkdownMail(markdown, options = {}) {
+  const bodyHtml = markdownToHtml(markdown.trim());
+  const html = wrapMarkdownMailLayout(bodyHtml, options);
+  const text = stripMarkdown(markdown);
+  return { html, text };
+}
+
+// ../../src/core/mail/markdownMailable.ts
+function buildMarkdownMailMessage(input) {
+  const rendered = renderMarkdownMail(input.markdown, {
+    title: input.layout?.title ?? input.subject,
+    ...input.layout
+  });
+  return {
+    to: input.to,
+    subject: input.subject,
+    body: rendered.text,
+    html: rendered.html
+  };
+}
+async function sendMarkdownMail(mailer, input) {
+  await mailer.send(buildMarkdownMailMessage(input));
+}
+export {
+  sendMarkdownMail,
+  buildMarkdownMailMessage
+};

package/dist/entries/notifications.js

@@ -0,0 +1,152 @@
+// @bun
+// ../../src/core/mail/markdownMail.ts
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function stripMarkdown(markdown) {
+  return markdown.replace(/^#{1,6}\s+/gm, "").replace(/\*\*([^*]+)\*\*/g, "$1").replace(/\*([^*]+)\*/g, "$1").replace(/`([^`]+)`/g, "$1").replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1 ($2)").replace(/^[-*]\s+/gm, "\u2022 ").replace(/```[\s\S]*?```/g, "").replace(/\n{3,}/g, `
+
+`).trim();
+}
+function markdownToHtml(markdown) {
+  const escaped = markdown.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return escaped.replace(/^### (.+)$/gm, "<h3>$1</h3>").replace(/^## (.+)$/gm, "<h2>$1</h2>").replace(/^# (.+)$/gm, "<h1>$1</h1>").replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>').replace(/^[-*]\s+(.+)$/gm, "<li>$1</li>").replace(/(<li>[\s\S]*?<\/li>\n?)+/g, (block) => `<ul>${block}</ul>`).replace(/```(\w+)?\n([\s\S]*?)```/g, "<pre><code>$2</code></pre>").split(/\n\n+/).map((block) => {
+    if (block.startsWith("<")) {
+      return block;
+    }
+    return `<p>${block.replace(/\n/g, " ")}</p>`;
+  }).join(`
+`);
+}
+function wrapMarkdownMailLayout(bodyHtml, options = {}) {
+  const title = escapeHtml(options.title ?? "GetStrata");
+  const preview = escapeHtml(options.preview ?? "");
+  const footer = escapeHtml(options.footer ?? "Sent by GetStrata");
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  <style>
+    body { font-family: system-ui, sans-serif; line-height: 1.5; color: #111827; background: #f9fafb; margin: 0; padding: 24px; }
+    .container { max-width: 640px; margin: 0 auto; background: #ffffff; border: 1px solid #e5e7eb; border-radius: 8px; overflow: hidden; }
+    .header { padding: 20px 24px; border-bottom: 1px solid #e5e7eb; font-weight: 600; }
+    .content { padding: 24px; }
+    .footer { padding: 16px 24px; border-top: 1px solid #e5e7eb; color: #6b7280; font-size: 14px; }
+    a { color: #2563eb; }
+    code { background: #f3f4f6; padding: 2px 4px; border-radius: 4px; }
+    pre { background: #111827; color: #f9fafb; padding: 12px; border-radius: 6px; overflow-x: auto; }
+  </style>
+</head>
+<body>
+  ${preview ? `<span style="display:none;max-height:0;overflow:hidden;">${preview}</span>` : ""}
+  <div class="container">
+    <div class="header">${title}</div>
+    <div class="content">${bodyHtml}</div>
+    <div class="footer">${footer}</div>
+  </div>
+</body>
+</html>`;
+}
+function renderMarkdownMail(markdown, options = {}) {
+  const bodyHtml = markdownToHtml(markdown.trim());
+  const html = wrapMarkdownMailLayout(bodyHtml, options);
+  const text = stripMarkdown(markdown);
+  return { html, text };
+}
+
+// ../../src/core/mail/markdownMailable.ts
+function buildMarkdownMailMessage(input) {
+  const rendered = renderMarkdownMail(input.markdown, {
+    title: input.layout?.title ?? input.subject,
+    ...input.layout
+  });
+  return {
+    to: input.to,
+    subject: input.subject,
+    body: rendered.text,
+    html: rendered.html
+  };
+}
+async function sendMarkdownMail(mailer, input) {
+  await mailer.send(buildMarkdownMailMessage(input));
+}
+
+// ../../src/core/notifications/dispatcher.ts
+class NotificationDispatcher {
+  mailer;
+  databaseStore;
+  constructor(mailer, databaseStore = null) {
+    this.mailer = mailer;
+    this.databaseStore = databaseStore;
+  }
+  async send(notifiable, notification) {
+    for (const channel of notification.via(notifiable)) {
+      if (channel === "mail") {
+        await this.sendMail(notifiable, notification);
+        continue;
+      }
+      if (channel === "database") {
+        await this.sendDatabase(notifiable, notification);
+      }
+    }
+  }
+  async sendMail(notifiable, notification) {
+    const routed = notifiable.routeNotificationFor("mail");
+    if (routed === null) {
+      return;
+    }
+    const message = notification.toMail(notifiable);
+    if (!message) {
+      return;
+    }
+    if (message.markdown) {
+      await this.mailer.send(buildMarkdownMailMessage({
+        to: String(routed),
+        subject: message.subject,
+        markdown: message.markdown
+      }));
+      return;
+    }
+    await this.mailer.send({
+      to: String(routed),
+      subject: message.subject,
+      body: message.body ?? "",
+      ...message.html ? { html: message.html } : {}
+    });
+  }
+  async sendDatabase(notifiable, notification) {
+    if (!this.databaseStore) {
+      return;
+    }
+    const payload = notification.toDatabase(notifiable);
+    if (!payload) {
+      return;
+    }
+    await this.databaseStore.create({
+      userId: Number(notifiable.getNotificationKey()),
+      ...payload
+    });
+  }
+}
+function createNotificationDispatcher(mailer, databaseStore) {
+  return new NotificationDispatcher(mailer, databaseStore ?? null);
+}
+// ../../src/core/notifications/notification.ts
+class Notification {
+  via(_notifiable) {
+    throw new Error("Notification subclasses must implement via().");
+  }
+  toMail(_notifiable) {
+    return null;
+  }
+  toDatabase(_notifiable) {
+    return null;
+  }
+}
+export {
+  createNotificationDispatcher,
+  NotificationDispatcher,
+  Notification
+};

package/dist/entries/openapi/generator.js

@@ -0,0 +1,178 @@
+// @bun
+// ../../src/config/app.ts
+var appConfig = {
+  name: "WorkHub",
+  env: process.env.APP_ENV ?? "local",
+  debug: (process.env.APP_DEBUG ?? "true") !== "false",
+  url: process.env.APP_URL ?? "http://localhost:3000",
+  apiPrefix: process.env.API_PREFIX ?? "/api/v1"
+};
+
+// ../../src/core/openapi/generator.ts
+var PUBLIC_ROUTE_DESCRIPTIONS = {
+  "GET /auth/me": "Current authenticated user",
+  "POST /auth/login": "Login with email and password",
+  "GET /auth/tokens": "List API tokens",
+  "POST /auth/tokens": "Create API token",
+  "DELETE /auth/tokens/:id": "Revoke API token",
+  "GET /users/me/export": "GDPR export of user data",
+  "DELETE /users/me": "GDPR account erasure (anonymize user, revoke tokens)",
+  "GET /organizations": "List organizations",
+  "POST /organizations": "Create organization",
+  "GET /organizations/:id/members": "List organization members",
+  "GET /projects": "List projects",
+  "POST /projects": "Create project",
+  "GET /tasks": "List tasks",
+  "POST /tasks": "Create task",
+  "GET /search": "Full-text search tasks and comments",
+  "GET /audit-logs": "List audit log entries",
+  "GET /webhooks": "List webhooks",
+  "POST /webhooks": "Create webhook",
+  "GET /reports/summary": "Cross-module summary report",
+  "GET /admin/stats": "Platform statistics",
+  "GET /admin/tenants": "List tenants",
+  "GET /admin/features": "Runtime feature flags",
+  "GET /billing/subscription": "Current tenant subscription",
+  "POST /billing/webhooks/stripe": "Stripe webhook receiver (stub)",
+  "GET /scim/v2/Users": "SCIM list users",
+  "POST /scim/v2/Users": "SCIM create user",
+  "GET /scim/v2/Groups": "SCIM list groups (organizations)",
+  "GET /health": "Liveness probe",
+  "GET /ready": "Readiness probe",
+  "GET /metrics": "Prometheus metrics"
+};
+function toOpenApiPath(path) {
+  return path.replace(/:([A-Za-z_]+)/g, "{$1}");
+}
+function requiresBearerAuth(path, method) {
+  if (path.startsWith("/auth/login") || path.startsWith("/auth/oauth")) {
+    return false;
+  }
+  if (path.startsWith("/scim/") || path.startsWith("/billing/webhooks/")) {
+    return false;
+  }
+  if (["/health", "/ready", "/metrics", "/"].includes(path)) {
+    return false;
+  }
+  if (method === "GET" && ["/organizations", "/projects", "/tasks", "/search"].some((prefix) => path.startsWith(prefix))) {
+    return false;
+  }
+  return path.startsWith("/auth/") || ["POST", "PATCH", "PUT", "DELETE"].includes(method);
+}
+function generateOpenApiSpec(routes) {
+  const paths = {};
+  for (const route of routes) {
+    const openApiPath = toOpenApiPath(route.path);
+    const method = route.method.toLowerCase();
+    const description = PUBLIC_ROUTE_DESCRIPTIONS[`${route.method} ${route.path}`] ?? `${route.method} ${route.path}`;
+    paths[openApiPath] ??= {};
+    paths[openApiPath][method] = {
+      summary: description,
+      ...requiresBearerAuth(route.path, route.method) ? { security: [{ bearerAuth: [] }] } : {},
+      responses: {
+        "200": { description: "OK" },
+        "201": { description: "Created" },
+        "204": { description: "No Content" },
+        "400": { description: "Bad Request" },
+        "401": { description: "Unauthorized" },
+        "403": { description: "Forbidden" },
+        "404": { description: "Not Found" },
+        "422": { description: "Validation Error" }
+      }
+    };
+  }
+  return {
+    openapi: "3.1.0",
+    info: {
+      title: "WorkHub API",
+      version: "1.0.0"
+    },
+    servers: [
+      { url: `${appConfig.url}${appConfig.apiPrefix}`, description: "WorkHub API" },
+      { url: appConfig.url, description: "Root (health, metrics, SCIM)" }
+    ],
+    paths,
+    components: {
+      securitySchemes: {
+        bearerAuth: {
+          type: "http",
+          scheme: "bearer"
+        }
+      },
+      schemas: {
+        ErrorResponse: {
+          type: "object",
+          properties: {
+            error: { type: "string" },
+            details: { type: "object", additionalProperties: true }
+          },
+          required: ["error"]
+        },
+        UserResource: {
+          type: "object",
+          properties: {
+            id: { type: "integer" },
+            name: { type: "string" },
+            email: { type: "string" },
+            role: { type: "string" }
+          }
+        },
+        OrganizationResource: {
+          type: "object",
+          properties: {
+            id: { type: "integer" },
+            name: { type: "string" },
+            slug: { type: "string" }
+          }
+        },
+        PaginatedMeta: {
+          type: "object",
+          properties: {
+            page: { type: "integer" },
+            per_page: { type: "integer" },
+            total: { type: "integer" },
+            last_page: { type: "integer" }
+          }
+        }
+      }
+    }
+  };
+}
+function renderOpenApiDocument(spec) {
+  return `${JSON.stringify(spec, null, 2)}
+`;
+}
+function toMethodName(method, path, apiPrefix) {
+  const relativePath = path.startsWith(apiPrefix) ? path.slice(apiPrefix.length) || "/" : path;
+  const segments = relativePath.replace(/\{|\}/g, "").split("/").filter(Boolean).flatMap((segment) => segment.split("-")).map((segment) => segment.replace(/[^a-zA-Z0-9]/g, "")).filter(Boolean).map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1));
+  return `${method.toLowerCase()}${segments.join("")}`;
+}
+function toRequestPath(path, apiPrefix) {
+  return path.startsWith(apiPrefix) ? path.slice(apiPrefix.length) || "/" : path;
+}
+function renderTypeScriptSdk(spec, apiPrefix = "/api/v1") {
+  const lines = [
+    "export class WorkHubClient {",
+    `  constructor(private readonly baseUrl = "${spec.servers[0]?.url ?? ""}") {}`,
+    "",
+    "  private async request(path: string, init: RequestInit = {}): Promise<Response> {",
+    `    return await fetch(\`\${this.baseUrl}\${path}\`, init);`,
+    "  }",
+    ""
+  ];
+  for (const [path, methods] of Object.entries(spec.paths)) {
+    const requestPath = toRequestPath(path, apiPrefix);
+    for (const method of Object.keys(methods)) {
+      const functionName = toMethodName(method, path, apiPrefix);
+      lines.push(`  async ${functionName}(init: RequestInit = {}): Promise<Response> {`, `    return await this.request("${requestPath}", { ...init, method: "${method.toUpperCase()}" });`, "  }", "");
+    }
+  }
+  lines.push("}", "");
+  return lines.join(`
+`);
+}
+export {
+  renderTypeScriptSdk,
+  renderOpenApiDocument,
+  generateOpenApiSpec
+};