@molecule/api-resource 1.0.4 → 1.0.6

package/README.md

@@ -3,15 +3,11 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-10-16T20:59:23.498Z
+Generated: 2026-10-23T21:27:14.472Z
 -->
 
 # @molecule/api-resource
 
-> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
-> It is written to be read by coding agents as much as by people, and is generated from this
-> package's source — edit `src/index.ts` JSDoc, not this file.
-
 Base resource patterns for molecule.dev.
 
 Provides CRUD operation factories and request handler utilities for
@@ -34,6 +30,10 @@ res.status(statusCode).send(body)
 Monkey-patching `res.json` (or `res.send`/`res.end`) to re-shape a handler's answer intercepts
 nothing the handler produces, so the request it was meant to answer is left unanswered and hangs.
 
+> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
+> It is written to be read by coding agents as much as by people, and is generated from this
+> package's source — edit `src/index.ts` JSDoc, not this file.
+
 ## Quick Start
 
 ```typescript
@@ -120,10 +120,21 @@ Framework-agnostic HTTP request interface. Structurally compatible with Express'
 `Request` — Express objects satisfy this interface without adapters, but the type
 doesn't depend on Express, allowing use with Fastify, Hono, or Lambda.
 
+`params` is `Record<string, any>` on purpose. Express 5 declares
+`ParamsDictionary` as `{ [key: string]: string | string[] }` — a wildcard or a
+repeated parameter yields an array — so `Record<string, string>` is NOT a
+supertype of it, and every Express handler passing its own `Request` to a
+function declared on this interface (`authorization.set(req, …)`) failed with
+TS2345 and was told to cast. This is the same shape `body` and `query` already
+use. A reader that needs one segment as a string checks it
+(`typeof req.params.id === 'string'`) rather than trusting the annotation;
+the packages that own the routes do exactly that where it matters (see
+`@molecule/api-bonds-default-express`'s `getParamId`).
+
 ```typescript
 interface MoleculeRequest {
   body: any
-  params: Record<string, string>
+  params: Record<string, any>
   query: Record<string, any>
   headers: Record<string, string | string[] | undefined>
   cookies?: Record<string, string>
@@ -588,7 +599,7 @@ returned by resource CRUD operations.
 ```typescript
 function responseSchema(
   propsSchema: T,
-): z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>
+): z.ZodTypeAny<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>
 ```
 
 - `propsSchema` — The Zod schema for the resource's props (e.g. `userPropsSchema`).
@@ -603,7 +614,7 @@ Creates a Zod schema that validates a resource descriptor object
 ```typescript
 function resourceSchema(
   _propsSchema: T,
-): z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>
+): z.ZodTypeAny<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>
 ```
 
 - `_propsSchema` — The Zod schema for the resource's props (used for type inference only).
@@ -617,7 +628,7 @@ human-readable message listing all validation failures if invalid.
 
 ```typescript
 function validate(
-  schema: z.ZodType<T, unknown, z.core.$ZodTypeInternals<T, unknown>>,
+  schema: z.ZodSchema<T, unknown, z.core.$ZodTypeInternals<T, unknown>>,
   data: unknown,
 ): T
 ```
@@ -634,7 +645,7 @@ union: `{ success: true, data }` on success or `{ success: false, error }` on fa
 
 ```typescript
 function safeParse(
-  schema: z.ZodType<T, unknown, z.core.$ZodTypeInternals<T, unknown>>,
+  schema: z.ZodSchema<T, unknown, z.core.$ZodTypeInternals<T, unknown>>,
   data: unknown,
 ): { success: true; data: T } | { success: false; error: z.ZodError }
 ```
@@ -786,6 +797,16 @@ interface Response<T = unknown> {
 
 Re-exported as a namespace — reach every member below through it (e.g. `utilities.<name>`).
 
+##### `utilities.ZodSchema` _(deprecated)_
+
+```typescript
+type ZodSchema<
+  Output = unknown,
+  Input = unknown,
+  Internals extends core.$ZodTypeInternals<Output, Input> = core.$ZodTypeInternals<Output, Input>,
+> = ZodType<Output, Input, Internals>
+```
+
 ##### `utilities.ZodError`
 
 An Error-like class used to store Zod validation issues.
@@ -807,151 +828,6 @@ interface ZodError<T = unknown> extends $ZodError<T> {
 }
 ```
 
-##### `utilities.ZodSchema`
-
-````typescript
-interface ZodType<
-  out Output = unknown,
-  out Input = unknown,
-  out Internals extends core.$ZodTypeInternals<Output, Input> = core.$ZodTypeInternals<
-    Output,
-    Input
-  >,
-> extends core.$ZodType<Output, Input, Internals> {
-  def: Internals['def']
-  type: Internals['def']['type']
-  /** @deprecated Use `.def` instead. */
-  _def: Internals['def']
-  /** @deprecated Use `z.output<typeof schema>` instead. */
-  _output: Internals['output']
-  /** @deprecated Use `z.input<typeof schema>` instead. */
-  _input: Internals['input']
-  '~standard': ZodStandardSchemaWithJSON<this>
-  /** Converts this schema to a JSON Schema representation. */
-  toJSONSchema(params?: core.ToJSONSchemaParams): core.ZodStandardJSONSchemaPayload<this>
-  check(...checks: (core.CheckFn<core.output<this>> | core.$ZodCheck<core.output<this>>)[]): this
-  with(...checks: (core.CheckFn<core.output<this>> | core.$ZodCheck<core.output<this>>)[]): this
-  clone(
-    def?: Internals['def'],
-    params?: {
-      parent: boolean
-    },
-  ): this
-  register<R extends core.$ZodRegistry>(
-    registry: R,
-    ...meta: this extends R['_schema']
-      ? undefined extends R['_meta']
-        ? [core.$replace<R['_meta'], this>?]
-        : [core.$replace<R['_meta'], this>]
-      : ['Incompatible schema']
-  ): this
-  brand<T extends PropertyKey = PropertyKey, Dir extends 'in' | 'out' | 'inout' = 'out'>(
-    value?: T,
-  ): PropertyKey extends T ? this : core.$ZodBranded<this, T, Dir>
-  parse(data: unknown, params?: core.ParseContext<core.$ZodIssue>): core.output<this>
-  safeParse(
-    data: unknown,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): parse.ZodSafeParseResult<core.output<this>>
-  parseAsync(data: unknown, params?: core.ParseContext<core.$ZodIssue>): Promise<core.output<this>>
-  safeParseAsync(
-    data: unknown,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): Promise<parse.ZodSafeParseResult<core.output<this>>>
-  spa: (
-    data: unknown,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ) => Promise<parse.ZodSafeParseResult<core.output<this>>>
-  encode(data: core.output<this>, params?: core.ParseContext<core.$ZodIssue>): core.input<this>
-  decode(data: core.input<this>, params?: core.ParseContext<core.$ZodIssue>): core.output<this>
-  encodeAsync(
-    data: core.output<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): Promise<core.input<this>>
-  decodeAsync(
-    data: core.input<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): Promise<core.output<this>>
-  safeEncode(
-    data: core.output<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): parse.ZodSafeParseResult<core.input<this>>
-  safeDecode(
-    data: core.input<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): parse.ZodSafeParseResult<core.output<this>>
-  safeEncodeAsync(
-    data: core.output<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): Promise<parse.ZodSafeParseResult<core.input<this>>>
-  safeDecodeAsync(
-    data: core.input<this>,
-    params?: core.ParseContext<core.$ZodIssue>,
-  ): Promise<parse.ZodSafeParseResult<core.output<this>>>
-  refine<Ch extends (arg: core.output<this>) => unknown | Promise<unknown>>(
-    check: Ch,
-    params?: string | core.$ZodCustomParams,
-  ): Ch extends (arg: any) => arg is infer R ? this & ZodType<R, core.input<this>> : this
-  superRefine(
-    refinement: (
-      arg: core.output<this>,
-      ctx: core.$RefinementCtx<core.output<this>>,
-    ) => void | Promise<void>,
-    params?: core.$ZodSuperRefineParams,
-  ): this
-  overwrite(fn: (x: core.output<this>) => core.output<this>): this
-  optional(): ZodOptional<this>
-  exactOptional(): ZodExactOptional<this>
-  nonoptional(params?: string | core.$ZodNonOptionalParams): ZodNonOptional<this>
-  nullable(): ZodNullable<this>
-  nullish(): ZodOptional<ZodNullable<this>>
-  default(def: util.NoUndefined<core.output<this>>): ZodDefault<this>
-  default(def: () => util.NoUndefined<core.output<this>>): ZodDefault<this>
-  prefault(def: () => core.input<this>): ZodPrefault<this>
-  prefault(def: core.input<this>): ZodPrefault<this>
-  array(): ZodArray<this>
-  or<T extends core.SomeType>(option: T): ZodUnion<[this, T]>
-  and<T extends core.SomeType>(incoming: T): ZodIntersection<this, T>
-  transform<NewOut>(
-    transform: (
-      arg: core.output<this>,
-      ctx: core.$RefinementCtx<core.output<this>>,
-    ) => NewOut | Promise<NewOut>,
-  ): ZodPipe<this, ZodTransform<Awaited<NewOut>, core.output<this>>>
-  catch(def: core.output<this>): ZodCatch<this>
-  catch(def: (ctx: core.$ZodCatchCtx) => core.output<this>): ZodCatch<this>
-  pipe<T extends core.$ZodType<any, core.output<this>>>(
-    target: T | core.$ZodType<any, core.output<this>>,
-  ): ZodPipe<this, T>
-  readonly(): ZodReadonly<this>
-  /** Returns a new instance that has been registered in `z.globalRegistry` with the specified description */
-  describe(description: string): this
-  description?: string
-  /** Returns the metadata associated with this instance in `z.globalRegistry` */
-  meta(): core.$replace<core.GlobalMeta, this> | undefined
-  /** Returns a new instance that has been registered in `z.globalRegistry` with the specified metadata */
-  meta(data: core.$replace<core.GlobalMeta, this>): this
-  /** @deprecated Try safe-parsing `undefined` (this is what `isOptional` does internally):
-   *
-   * ```ts
-   * const schema = z.string().optional();
-   * const isOptional = schema.safeParse(undefined).success; // true
-   * ```
-   */
-  isOptional(): boolean
-  /**
-   * @deprecated Try safe-parsing `null` (this is what `isNullable` does internally):
-   *
-   * ```ts
-   * const schema = z.string().nullable();
-   * const isNullable = schema.safeParse(null).success; // true
-   * ```
-   */
-  isNullable(): boolean
-  apply<T>(fn: (schema: this) => T): T
-}
-````
-
 ##### `utilities.getValidProps`
 
 Validates resource props against a Zod schema, returning typed valid props or throwing

package/dist/http-types.d.ts

@@ -11,10 +11,21 @@
  * Framework-agnostic HTTP request interface. Structurally compatible with Express's
  * `Request` — Express objects satisfy this interface without adapters, but the type
  * doesn't depend on Express, allowing use with Fastify, Hono, or Lambda.
+ *
+ * `params` is `Record<string, any>` on purpose. Express 5 declares
+ * `ParamsDictionary` as `{ [key: string]: string | string[] }` — a wildcard or a
+ * repeated parameter yields an array — so `Record<string, string>` is NOT a
+ * supertype of it, and every Express handler passing its own `Request` to a
+ * function declared on this interface (`authorization.set(req, …)`) failed with
+ * TS2345 and was told to cast. This is the same shape `body` and `query` already
+ * use. A reader that needs one segment as a string checks it
+ * (`typeof req.params.id === 'string'`) rather than trusting the annotation;
+ * the packages that own the routes do exactly that where it matters (see
+ * `@molecule/api-bonds-default-express`'s `getParamId`).
  */
 export interface MoleculeRequest {
     body: any;
-    params: Record<string, string>;
+    params: Record<string, any>;
     query: Record<string, any>;
     headers: Record<string, string | string[] | undefined>;
     cookies?: Record<string, string>;

package/dist/http-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-types.d.ts","sourceRoot":"","sources":["../src/http-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,GAAG,CAAA;IACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC;;;;OAIG;IACH,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAA;CACjE;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;IACzB,GAAG,IAAI,IAAI,CAAA;IACX,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC5E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACtC,YAAY,CAAC,IAAI,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;AAE1D;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE,oBAAoB,KACvB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA"}
+{"version":3,"file":"http-types.d.ts","sourceRoot":"","sources":["../src/http-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,GAAG,CAAA;IACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC;;;;OAIG;IACH,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAA;CACjE;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;IACzB,GAAG,IAAI,IAAI,CAAA;IACX,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC5E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACtC,YAAY,CAAC,IAAI,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;AAE1D;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE,oBAAoB,KACvB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-resource",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "Resource CRUD operations and utilities for molecule.dev.",
   "type": "module",
   "main": "dist/index.js",
@@ -35,17 +35,17 @@
   ],
   "license": "Apache-2.0",
   "dependencies": {
-    "uuid": "14.0.1",
-    "zod": "4.4.3"
+    "uuid": "14.0.3",
+    "zod": "4.6.7"
   },
   "devDependencies": {
-    "@molecule/api-bond": "1.0.2",
-    "@molecule/api-database": "1.1.3",
+    "@molecule/api-bond": "1.0.3",
+    "@molecule/api-database": "1.1.5",
     "@molecule/api-locales-resource": "1.0.2",
-    "@molecule/api-utilities-validation": "1.0.2",
-    "@types/node": "26.1.2",
+    "@molecule/api-utilities-validation": "1.0.3",
+    "@types/node": "26.6.5",
     "typescript": "6.0.3",
-    "vitest": "4.1.11"
+    "vitest": "4.1.12"
   },
   "peerDependencies": {
     "@molecule/api-bond": "^1.0.1",