@open-mercato/cli 0.4.9-develop-8c36c096d5 → 0.4.9-develop-31d1a87765

package/dist/lib/generators/openapi.js

@@ -103,6 +103,289 @@ function parseOpenApiFromSource(filePath) {
     return null;
   }
 }
+async function generateOpenApiViaBundle(routes, projectRoot, quiet) {
+  let esbuild;
+  try {
+    esbuild = await import("esbuild");
+  } catch {
+    if (!quiet) console.log("[OpenAPI] esbuild not available, skipping bundle approach");
+    return null;
+  }
+  const { execFileSync } = await import("node:child_process");
+  const cacheDir = path.join(projectRoot, "node_modules", ".cache");
+  if (!fs.existsSync(cacheDir)) fs.mkdirSync(cacheDir, { recursive: true });
+  const bundlePath = path.join(cacheDir, "_openapi-bundle.mjs");
+  const tsconfigPath = path.join(projectRoot, "tsconfig.base.json");
+  const generatorPath = path.join(
+    projectRoot,
+    "packages",
+    "shared",
+    "src",
+    "lib",
+    "openapi",
+    "generator.ts"
+  );
+  const importLines = [
+    `import { buildOpenApiDocument } from ${JSON.stringify(generatorPath)};`
+  ];
+  const routeMapLines = [];
+  for (let i = 0; i < routes.length; i++) {
+    const route = routes[i];
+    importLines.push(`import * as R${i} from ${JSON.stringify(route.path)};`);
+    const bracketPath = route.openApiPath.replace(/\{([^}]+)\}/g, "[$1]");
+    routeMapLines.push(`  [${JSON.stringify(bracketPath)}, R${i}],`);
+  }
+  const entryScript = `${importLines.join("\n")}
+
+const routeEntries = [
+${routeMapLines.join("\n")}
+];
+
+const modules = new Map();
+for (const [apiPath, mod] of routeEntries) {
+  const moduleId = apiPath.replace(/^\\/api\\//, '').split('/')[0];
+  if (!modules.has(moduleId)) modules.set(moduleId, { id: moduleId, apis: [] });
+  modules.get(moduleId).apis.push({
+    path: apiPath,
+    handlers: mod,
+    metadata: mod.metadata,
+  });
+}
+
+const doc = buildOpenApiDocument([...modules.values()], {
+  title: 'Open Mercato API',
+  version: '1.0.0',
+  description: 'Auto-generated OpenAPI specification',
+  servers: [{ url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' }],
+});
+
+// Deep-clone to break shared object references before serializing.
+// The zodToJsonSchema memo cache returns the same object instance for
+// fields like currencyCode that appear on both parent and child schemas.
+// A naive WeakSet-based circular-ref guard would drop the second occurrence,
+// causing properties to vanish from the generated spec (while the field
+// still appears in the 'required' array, since those are plain strings).
+const deepClone = (v, ancestors = []) => {
+  if (v === null || typeof v !== 'object') return v;
+  if (typeof v === 'bigint') return Number(v);
+  if (typeof v === 'function') return undefined;
+  if (ancestors.includes(v)) return undefined;  // true circular ref
+  const next = [...ancestors, v];
+  if (Array.isArray(v)) return v.map((item) => deepClone(item, next));
+  const out = {};
+  for (const [k, val] of Object.entries(v)) {
+    const cloned = deepClone(val, next);
+    if (cloned !== undefined) out[k] = cloned;
+  }
+  return out;
+};
+process.stdout.write(JSON.stringify(deepClone(doc), (_, v) =>
+  typeof v === 'bigint' ? Number(v) : v
+));
+`;
+  const stubNextPlugin = {
+    name: "stub-next",
+    setup(build) {
+      build.onResolve({ filter: /^next($|\/)/ }, () => ({
+        path: "next-stub",
+        namespace: "next-stub"
+      }));
+      build.onLoad({ filter: /.*/, namespace: "next-stub" }, () => ({
+        contents: [
+          "const p = new Proxy(function(){}, {",
+          '  get(_, k) { return k === "__esModule" ? true : k === "default" ? p : p; },',
+          "  apply() { return p; },",
+          "  construct() { return p; },",
+          "});",
+          "export default p;",
+          "export const NextRequest = p, NextResponse = p, headers = p, cookies = p;",
+          "export const redirect = p, notFound = p, useRouter = p, usePathname = p;",
+          "export const useSearchParams = p, permanentRedirect = p, revalidatePath = p;"
+        ].join("\n"),
+        loader: "js"
+      }));
+    }
+  };
+  const appRoot = path.join(projectRoot, "apps", "mercato");
+  const resolveWorkspacePlugin = {
+    name: "resolve-workspace",
+    setup(build) {
+      build.onResolve({ filter: /^@open-mercato\// }, (args) => {
+        const withoutScope = args.path.slice("@open-mercato/".length);
+        const slashIdx = withoutScope.indexOf("/");
+        const pkg = slashIdx === -1 ? withoutScope : withoutScope.slice(0, slashIdx);
+        const rest = slashIdx === -1 ? "" : withoutScope.slice(slashIdx + 1);
+        const base = rest ? path.join(projectRoot, "packages", pkg, "src", rest) : path.join(projectRoot, "packages", pkg, "src", "index");
+        for (const ext of [".ts", ".tsx", "/index.ts", "/index.tsx"]) {
+          if (fs.existsSync(base + ext)) return { path: base + ext };
+        }
+        return void 0;
+      });
+      build.onResolve({ filter: /^@\/\.mercato\// }, (args) => {
+        const rest = args.path.slice("@/".length);
+        const base = path.join(appRoot, rest);
+        for (const ext of [".ts", ".tsx", "/index.ts", "/index.tsx", ""]) {
+          if (fs.existsSync(base + ext)) return { path: base + ext };
+        }
+        return void 0;
+      });
+      build.onResolve({ filter: /^@\// }, (args) => {
+        const rest = args.path.slice("@/".length);
+        const base = path.join(appRoot, "src", rest);
+        for (const ext of [".ts", ".tsx", "/index.ts", "/index.tsx"]) {
+          if (fs.existsSync(base + ext)) return { path: base + ext };
+        }
+        return void 0;
+      });
+      build.onResolve({ filter: /^#generated\// }, (args) => {
+        const rest = args.path.slice("#generated/".length);
+        const coreGenerated = path.join(projectRoot, "packages", "core", "generated");
+        const base = path.join(coreGenerated, rest);
+        for (const ext of [".ts", "/index.ts"]) {
+          if (fs.existsSync(base + ext)) return { path: base + ext };
+        }
+        return void 0;
+      });
+    }
+  };
+  const nodeBuiltins = /* @__PURE__ */ new Set([
+    "assert",
+    "buffer",
+    "child_process",
+    "cluster",
+    "console",
+    "constants",
+    "crypto",
+    "dgram",
+    "dns",
+    "domain",
+    "events",
+    "fs",
+    "http",
+    "http2",
+    "https",
+    "module",
+    "net",
+    "os",
+    "path",
+    "perf_hooks",
+    "process",
+    "punycode",
+    "querystring",
+    "readline",
+    "repl",
+    "stream",
+    "string_decoder",
+    "sys",
+    "timers",
+    "tls",
+    "tty",
+    "url",
+    "util",
+    "v8",
+    "vm",
+    "wasi",
+    "worker_threads",
+    "zlib",
+    "async_hooks",
+    "diagnostics_channel",
+    "inspector",
+    "trace_events"
+  ]);
+  const externalNonWorkspacePlugin = {
+    name: "external-non-workspace",
+    setup(build) {
+      build.onResolve({ filter: /^[^./]/ }, (args) => {
+        if (args.path.startsWith("@open-mercato/")) return void 0;
+        if (args.path.startsWith("@/")) return void 0;
+        if (args.path.startsWith("#generated/")) return void 0;
+        if (args.path.startsWith("next")) return void 0;
+        if (args.path.startsWith("node:")) return void 0;
+        const topLevel = args.path.split("/")[0];
+        if (nodeBuiltins.has(topLevel)) return void 0;
+        const pkgName = args.path.startsWith("@") ? args.path.split("/").slice(0, 2).join("/") : topLevel;
+        const pkgDir = path.join(projectRoot, "node_modules", pkgName);
+        if (fs.existsSync(pkgDir)) return { external: true };
+        return { path: args.path, namespace: "missing-pkg" };
+      });
+      build.onLoad({ filter: /.*/, namespace: "missing-pkg" }, () => ({
+        contents: 'var h={get:(_,k)=>k==="__esModule"?true:p};var p=new Proxy(function(){return p},{get:h.get,apply:()=>p,construct:()=>p});module.exports=p;',
+        loader: "js"
+      }));
+    }
+  };
+  try {
+    await esbuild.build({
+      stdin: {
+        contents: entryScript,
+        resolveDir: projectRoot,
+        sourcefile: "openapi-entry.ts",
+        loader: "ts"
+      },
+      bundle: true,
+      format: "esm",
+      platform: "node",
+      target: "node18",
+      outfile: bundlePath,
+      write: true,
+      tsconfig: tsconfigPath,
+      logLevel: "silent",
+      jsx: "automatic",
+      plugins: [stubNextPlugin, resolveWorkspacePlugin, externalNonWorkspacePlugin]
+    });
+    const stdout = execFileSync(process.execPath, [bundlePath], {
+      timeout: 6e4,
+      maxBuffer: 20 * 1024 * 1024,
+      encoding: "utf-8",
+      env: { ...process.env, NODE_NO_WARNINGS: "1" },
+      cwd: projectRoot
+    });
+    const lastLine = stdout.trim().split("\n").pop();
+    const doc = JSON.parse(lastLine);
+    if (!quiet) {
+      const pathCount = Object.keys(doc.paths || {}).length;
+      const withBody = Object.values(doc.paths || {}).reduce((n, methods) => {
+        for (const m of Object.values(methods)) {
+          if (m?.requestBody) n++;
+        }
+        return n;
+      }, 0);
+      console.log(`[OpenAPI] Bundle approach: ${pathCount} paths, ${withBody} with requestBody schemas`);
+    }
+    return doc;
+  } catch (err) {
+    const errMsg = err instanceof Error ? err.message : String(err);
+    const stderr = err?.stderr;
+    const esbuildErrors = err?.errors;
+    if (!quiet) {
+      console.log(`[OpenAPI] Bundle approach failed, will use static fallback: ${errMsg.split("\n")[0]}`);
+      if (esbuildErrors?.length) {
+        const unique = /* @__PURE__ */ new Map();
+        for (const e of esbuildErrors) {
+          const key = e.text;
+          if (!unique.has(key)) unique.set(key, e.location?.file ?? "");
+        }
+        for (const [text, file] of [...unique.entries()].slice(0, 10)) {
+          console.log(`[OpenAPI]   ${text}${file ? ` (${path.basename(file)})` : ""}`);
+        }
+        if (unique.size > 10) console.log(`[OpenAPI]   ... and ${unique.size - 10} more`);
+      }
+      if (stderr) {
+        for (const line of String(stderr).trim().split("\n").slice(0, 3)) {
+          console.log(`[OpenAPI]   ${line}`);
+        }
+      }
+    }
+    return null;
+  } finally {
+    for (const file of ["_openapi-register.mjs", "_openapi-loader.mjs", "_next-stub.cjs"]) {
+      try {
+        fs.unlinkSync(path.join(cacheDir, file));
+      } catch {
+      }
+    }
+  }
+}
 function buildOpenApiPaths(routes) {
   const paths = {};
   for (const route of routes) {
@@ -144,30 +427,39 @@ async function generateOpenApi(options) {
   if (!quiet) {
     console.log(`[OpenAPI] Found ${routes.length} API route files`);
   }
-  const paths = buildOpenApiPaths(routes);
-  const pathCount = Object.keys(paths).length;
-  const doc = {
-    openapi: "3.1.0",
-    info: {
-      title: "Open Mercato API",
-      version: "1.0.0",
-      description: "Auto-generated OpenAPI specification"
-    },
-    servers: [
-      { url: process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000" }
-    ],
-    paths,
-    components: {
-      securitySchemes: {
-        bearerAuth: {
-          type: "http",
-          scheme: "bearer",
-          bearerFormat: "JWT",
-          description: "Send an `Authorization: Bearer <token>` header with a valid API token."
+  const projectRoot = path.resolve(
+    path.dirname(new URL(import.meta.url).pathname),
+    "../../../../.."
+  );
+  let doc = await generateOpenApiViaBundle(routes, projectRoot, quiet);
+  if (!doc) {
+    if (!quiet) {
+      console.log("[OpenAPI] Falling back to static regex approach");
+    }
+    const paths = buildOpenApiPaths(routes);
+    doc = {
+      openapi: "3.1.0",
+      info: {
+        title: "Open Mercato API",
+        version: "1.0.0",
+        description: "Auto-generated OpenAPI specification"
+      },
+      servers: [
+        { url: process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000" }
+      ],
+      paths,
+      components: {
+        securitySchemes: {
+          bearerAuth: {
+            type: "http",
+            scheme: "bearer",
+            bearerFormat: "JWT",
+            description: "Send an `Authorization: Bearer <token>` header with a valid API token."
+          }
         }
       }
-    }
-  };
+    };
+  }
   const output = JSON.stringify(doc, null, 2);
   const checksum = calculateChecksum(output);
   const existingChecksums = readChecksumRecord(checksumFile);
@@ -183,6 +475,7 @@ async function generateOpenApi(options) {
   result.filesWritten.push(outFile);
   if (!quiet) {
     logGenerationResult(outFile, true);
+    const pathCount = Object.keys(doc.paths || {}).length;
     console.log(`[OpenAPI] Generated ${pathCount} API paths`);
   }
   return result;

package/dist/lib/generators/openapi.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/generators/openapi.ts"],
-  "sourcesContent": ["/**\n * OpenAPI JSON Generator\n *\n * Generates a static openapi.generated.json file at build time.\n * This allows CLI tools (like MCP dev server) to access API endpoint\n * information without requiring a running Next.js app.\n */\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport type { PackageResolver } from '../resolver'\nimport {\n  calculateChecksum,\n  readChecksumRecord,\n  writeChecksumRecord,\n  logGenerationResult,\n  type GeneratorResult,\n  createGeneratorResult,\n} from '../utils'\n\nexport interface GenerateOpenApiOptions {\n  resolver: PackageResolver\n  quiet?: boolean\n}\n\ntype HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'\n\ninterface ApiRouteInfo {\n  path: string\n  methods: HttpMethod[]\n  openApiPath: string\n}\n\n/**\n * Find all API route files and extract their OpenAPI specs.\n */\nasync function findApiRoutes(resolver: PackageResolver): Promise<ApiRouteInfo[]> {\n  const routes: ApiRouteInfo[] = []\n  const enabled = resolver.loadEnabledModules()\n\n  for (const entry of enabled) {\n    const modId = entry.id\n    const roots = resolver.getModulePaths(entry)\n\n    const apiApp = path.join(roots.appBase, 'api')\n    const apiPkg = path.join(roots.pkgBase, 'api')\n\n    // Scan route files\n    const routeFiles: Array<{ relativePath: string; fullPath: string }> = []\n\n    const walkDir = (dir: string, rel: string[] = []) => {\n      if (!fs.existsSync(dir)) return\n      for (const e of fs.readdirSync(dir, { withFileTypes: true })) {\n        if (e.isDirectory()) {\n          if (e.name === '__tests__' || e.name === '__mocks__') continue\n          walkDir(path.join(dir, e.name), [...rel, e.name])\n        } else if (e.isFile() && e.name === 'route.ts') {\n          routeFiles.push({\n            relativePath: [...rel].join('/'),\n            fullPath: path.join(dir, e.name),\n          })\n        }\n      }\n    }\n\n    // Scan package first, then app (app overrides)\n    if (fs.existsSync(apiPkg)) walkDir(apiPkg)\n    if (fs.existsSync(apiApp)) walkDir(apiApp)\n\n    // Process unique routes (app overrides package)\n    const seen = new Set<string>()\n    for (const { relativePath, fullPath } of routeFiles) {\n      if (seen.has(relativePath)) continue\n      seen.add(relativePath)\n\n      // Build API path\n      const routeSegs = relativePath ? relativePath.split('/') : []\n      const apiPath = `/api/${modId}${routeSegs.length ? '/' + routeSegs.join('/') : ''}`\n        // Convert [param] to {param} for OpenAPI format\n        .replace(/\\[([^\\]]+)\\]/g, '{$1}')\n\n      routes.push({\n        path: fullPath,\n        methods: await detectMethods(fullPath),\n        openApiPath: apiPath,\n      })\n    }\n  }\n\n  return routes\n}\n\n/**\n * Detect which HTTP methods are exported from a route file.\n */\nasync function detectMethods(filePath: string): Promise<HttpMethod[]> {\n  const methods: HttpMethod[] = []\n  const content = fs.readFileSync(filePath, 'utf-8')\n\n  const methodPatterns: HttpMethod[] = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE']\n  for (const method of methodPatterns) {\n    // Check for export { GET }, export const GET, export async function GET\n    const patterns = [\n      new RegExp(`export\\\\s+(const|async\\\\s+function|function)\\\\s+${method}\\\\b`),\n      new RegExp(`export\\\\s*\\\\{[^}]*\\\\b${method}\\\\b[^}]*\\\\}`),\n    ]\n    if (patterns.some((p) => p.test(content))) {\n      methods.push(method)\n    }\n  }\n\n  return methods\n}\n\n/**\n * Parse openApi export from route file source code statically.\n * This extracts basic operation info without needing to compile the file.\n */\nfunction parseOpenApiFromSource(filePath: string): Record<string, any> | null {\n  try {\n    const content = fs.readFileSync(filePath, 'utf-8')\n\n    // Check if file exports openApi\n    if (!content.includes('export const openApi') && !content.includes('export { openApi')) {\n      return null\n    }\n\n    // Extract operationId, summary, description from the source\n    const result: Record<string, any> = {}\n    const methods = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE']\n\n    for (const method of methods) {\n      // Look for method specs in the openApi object\n      // Pattern: GET: { operationId: '...', summary: '...', ... }\n      const methodPattern = new RegExp(\n        `${method}\\\\s*:\\\\s*\\\\{([^}]+(?:\\\\{[^}]*\\\\}[^}]*)*)\\\\}`,\n        's'\n      )\n      const methodMatch = content.match(methodPattern)\n\n      if (methodMatch) {\n        const methodContent = methodMatch[1]\n        const spec: Record<string, any> = {}\n\n        // Extract operationId\n        const opIdMatch = methodContent.match(/operationId\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (opIdMatch) spec.operationId = opIdMatch[1]\n\n        // Extract summary\n        const summaryMatch = methodContent.match(/summary\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (summaryMatch) spec.summary = summaryMatch[1]\n\n        // Extract description\n        const descMatch = methodContent.match(/description\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (descMatch) spec.description = descMatch[1]\n\n        // Extract tags\n        const tagsMatch = methodContent.match(/tags\\s*:\\s*\\[([^\\]]*)\\]/)\n        if (tagsMatch) {\n          const tagsContent = tagsMatch[1]\n          const tags = tagsContent.match(/['\"]([^'\"]+)['\"]/g)\n          if (tags) {\n            spec.tags = tags.map(t => t.replace(/['\"]/g, ''))\n          }\n        }\n\n        if (Object.keys(spec).length > 0) {\n          result[method] = spec\n        }\n      }\n    }\n\n    return Object.keys(result).length > 0 ? result : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Build OpenAPI paths from discovered routes.\n * Extracts basic operation info from route files statically.\n */\nfunction buildOpenApiPaths(routes: ApiRouteInfo[]): Record<string, any> {\n  const paths: Record<string, any> = {}\n\n  for (const route of routes) {\n    const pathEntry: Record<string, any> = {}\n\n    // Try to extract OpenAPI specs from source\n    const openApiSpec = parseOpenApiFromSource(route.path)\n\n    for (const method of route.methods) {\n      const methodLower = method.toLowerCase()\n      const spec = openApiSpec?.[method]\n\n      // Generate a default operationId if not found\n      const pathSegments = route.openApiPath\n        .replace(/^\\/api\\//, '')\n        .replace(/\\{[^}]+\\}/g, 'by_id')\n        .split('/')\n        .filter(Boolean)\n        .join('_')\n      const defaultOperationId = `${methodLower}_${pathSegments}`\n\n      pathEntry[methodLower] = {\n        operationId: spec?.operationId || defaultOperationId,\n        summary: spec?.summary || `${method} ${route.openApiPath}`,\n        description: spec?.description || `${method} operation for ${route.openApiPath}`,\n        tags: spec?.tags || [route.openApiPath.split('/')[2] || 'api'],\n        responses: {\n          '200': {\n            description: 'Successful response',\n          },\n        },\n      }\n    }\n\n    if (Object.keys(pathEntry).length > 0) {\n      paths[route.openApiPath] = pathEntry\n    }\n  }\n\n  return paths\n}\n\n/**\n * Generate the OpenAPI JSON file.\n */\nexport async function generateOpenApi(options: GenerateOpenApiOptions): Promise<GeneratorResult> {\n  const { resolver, quiet = false } = options\n  const result = createGeneratorResult()\n\n  const outputDir = resolver.getOutputDir()\n  const outFile = path.join(outputDir, 'openapi.generated.json')\n  const checksumFile = path.join(outputDir, 'openapi.generated.checksum')\n\n  // Ensure output directory exists\n  if (!fs.existsSync(outputDir)) {\n    fs.mkdirSync(outputDir, { recursive: true })\n  }\n\n  // Find all API routes\n  const routes = await findApiRoutes(resolver)\n\n  if (!quiet) {\n    console.log(`[OpenAPI] Found ${routes.length} API route files`)\n  }\n\n  // Build OpenAPI paths from routes\n  const paths = buildOpenApiPaths(routes)\n  const pathCount = Object.keys(paths).length\n\n  // Build OpenAPI document\n  const doc = {\n    openapi: '3.1.0',\n    info: {\n      title: 'Open Mercato API',\n      version: '1.0.0',\n      description: 'Auto-generated OpenAPI specification',\n    },\n    servers: [\n      { url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' },\n    ],\n    paths,\n    components: {\n      securitySchemes: {\n        bearerAuth: {\n          type: 'http',\n          scheme: 'bearer',\n          bearerFormat: 'JWT',\n          description: 'Send an `Authorization: Bearer <token>` header with a valid API token.',\n        },\n      },\n    },\n  }\n\n  const output = JSON.stringify(doc, null, 2)\n  const checksum = calculateChecksum(output)\n\n  // Check if unchanged\n  const existingChecksums = readChecksumRecord(checksumFile)\n  if (existingChecksums && existingChecksums.content === checksum && fs.existsSync(outFile)) {\n    result.filesUnchanged.push(outFile)\n    if (!quiet) {\n      console.log(`[OpenAPI] Skipped (unchanged): ${outFile}`)\n    }\n    return result\n  }\n\n  // Write the file\n  fs.writeFileSync(outFile, output)\n  writeChecksumRecord(checksumFile, { content: checksum, structure: '' })\n\n  result.filesWritten.push(outFile)\n\n  if (!quiet) {\n    logGenerationResult(outFile, true)\n    console.log(`[OpenAPI] Generated ${pathCount} API paths`)\n  }\n\n  return result\n}\n"],
-  "mappings": "AAQA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAEtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAkBP,eAAe,cAAc,UAAoD;AAC/E,QAAM,SAAyB,CAAC;AAChC,QAAM,UAAU,SAAS,mBAAmB;AAE5C,aAAW,SAAS,SAAS;AAC3B,UAAM,QAAQ,MAAM;AACpB,UAAM,QAAQ,SAAS,eAAe,KAAK;AAE3C,UAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK;AAC7C,UAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK;AAG7C,UAAM,aAAgE,CAAC;AAEvE,UAAM,UAAU,CAAC,KAAa,MAAgB,CAAC,MAAM;AACnD,UAAI,CAAC,GAAG,WAAW,GAAG,EAAG;AACzB,iBAAW,KAAK,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG;AAC5D,YAAI,EAAE,YAAY,GAAG;AACnB,cAAI,EAAE,SAAS,eAAe,EAAE,SAAS,YAAa;AACtD,kBAAQ,KAAK,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;AAAA,QAClD,WAAW,EAAE,OAAO,KAAK,EAAE,SAAS,YAAY;AAC9C,qBAAW,KAAK;AAAA,YACd,cAAc,CAAC,GAAG,GAAG,EAAE,KAAK,GAAG;AAAA,YAC/B,UAAU,KAAK,KAAK,KAAK,EAAE,IAAI;AAAA,UACjC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAGA,QAAI,GAAG,WAAW,MAAM,EAAG,SAAQ,MAAM;AACzC,QAAI,GAAG,WAAW,MAAM,EAAG,SAAQ,MAAM;AAGzC,UAAM,OAAO,oBAAI,IAAY;AAC7B,eAAW,EAAE,cAAc,SAAS,KAAK,YAAY;AACnD,UAAI,KAAK,IAAI,YAAY,EAAG;AAC5B,WAAK,IAAI,YAAY;AAGrB,YAAM,YAAY,eAAe,aAAa,MAAM,GAAG,IAAI,CAAC;AAC5D,YAAM,UAAU,QAAQ,KAAK,GAAG,UAAU,SAAS,MAAM,UAAU,KAAK,GAAG,IAAI,EAAE,GAE9E,QAAQ,iBAAiB,MAAM;AAElC,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,MAAM,cAAc,QAAQ;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAKA,eAAe,cAAc,UAAyC;AACpE,QAAM,UAAwB,CAAC;AAC/B,QAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AAEjD,QAAM,iBAA+B,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ;AAC7E,aAAW,UAAU,gBAAgB;AAEnC,UAAM,WAAW;AAAA,MACf,IAAI,OAAO,mDAAmD,MAAM,KAAK;AAAA,MACzE,IAAI,OAAO,wBAAwB,MAAM,aAAa;AAAA,IACxD;AACA,QAAI,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG;AACzC,cAAQ,KAAK,MAAM;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AACT;AAMA,SAAS,uBAAuB,UAA8C;AAC5E,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AAGjD,QAAI,CAAC,QAAQ,SAAS,sBAAsB,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG;AACtF,aAAO;AAAA,IACT;AAGA,UAAM,SAA8B,CAAC;AACrC,UAAM,UAAU,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ;AAExD,eAAW,UAAU,SAAS;AAG5B,YAAM,gBAAgB,IAAI;AAAA,QACxB,GAAG,MAAM;AAAA,QACT;AAAA,MACF;AACA,YAAM,cAAc,QAAQ,MAAM,aAAa;AAE/C,UAAI,aAAa;AACf,cAAM,gBAAgB,YAAY,CAAC;AACnC,cAAM,OAA4B,CAAC;AAGnC,cAAM,YAAY,cAAc,MAAM,oCAAoC;AAC1E,YAAI,UAAW,MAAK,cAAc,UAAU,CAAC;AAG7C,cAAM,eAAe,cAAc,MAAM,gCAAgC;AACzE,YAAI,aAAc,MAAK,UAAU,aAAa,CAAC;AAG/C,cAAM,YAAY,cAAc,MAAM,oCAAoC;AAC1E,YAAI,UAAW,MAAK,cAAc,UAAU,CAAC;AAG7C,cAAM,YAAY,cAAc,MAAM,yBAAyB;AAC/D,YAAI,WAAW;AACb,gBAAM,cAAc,UAAU,CAAC;AAC/B,gBAAM,OAAO,YAAY,MAAM,mBAAmB;AAClD,cAAI,MAAM;AACR,iBAAK,OAAO,KAAK,IAAI,OAAK,EAAE,QAAQ,SAAS,EAAE,CAAC;AAAA,UAClD;AAAA,QACF;AAEA,YAAI,OAAO,KAAK,IAAI,EAAE,SAAS,GAAG;AAChC,iBAAO,MAAM,IAAI;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,kBAAkB,QAA6C;AACtE,QAAM,QAA6B,CAAC;AAEpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAiC,CAAC;AAGxC,UAAM,cAAc,uBAAuB,MAAM,IAAI;AAErD,eAAW,UAAU,MAAM,SAAS;AAClC,YAAM,cAAc,OAAO,YAAY;AACvC,YAAM,OAAO,cAAc,MAAM;AAGjC,YAAM,eAAe,MAAM,YACxB,QAAQ,YAAY,EAAE,EACtB,QAAQ,cAAc,OAAO,EAC7B,MAAM,GAAG,EACT,OAAO,OAAO,EACd,KAAK,GAAG;AACX,YAAM,qBAAqB,GAAG,WAAW,IAAI,YAAY;AAEzD,gBAAU,WAAW,IAAI;AAAA,QACvB,aAAa,MAAM,eAAe;AAAA,QAClC,SAAS,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,WAAW;AAAA,QACxD,aAAa,MAAM,eAAe,GAAG,MAAM,kBAAkB,MAAM,WAAW;AAAA,QAC9E,MAAM,MAAM,QAAQ,CAAC,MAAM,YAAY,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK;AAAA,QAC7D,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,KAAK,SAAS,EAAE,SAAS,GAAG;AACrC,YAAM,MAAM,WAAW,IAAI;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO;AACT;AAKA,eAAsB,gBAAgB,SAA2D;AAC/F,QAAM,EAAE,UAAU,QAAQ,MAAM,IAAI;AACpC,QAAM,SAAS,sBAAsB;AAErC,QAAM,YAAY,SAAS,aAAa;AACxC,QAAM,UAAU,KAAK,KAAK,WAAW,wBAAwB;AAC7D,QAAM,eAAe,KAAK,KAAK,WAAW,4BAA4B;AAGtE,MAAI,CAAC,GAAG,WAAW,SAAS,GAAG;AAC7B,OAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EAC7C;AAGA,QAAM,SAAS,MAAM,cAAc,QAAQ;AAE3C,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,mBAAmB,OAAO,MAAM,kBAAkB;AAAA,EAChE;AAGA,QAAM,QAAQ,kBAAkB,MAAM;AACtC,QAAM,YAAY,OAAO,KAAK,KAAK,EAAE;AAGrC,QAAM,MAAM;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,MACT,aAAa;AAAA,IACf;AAAA,IACA,SAAS;AAAA,MACP,EAAE,KAAK,QAAQ,IAAI,uBAAuB,wBAAwB;AAAA,IACpE;AAAA,IACA;AAAA,IACA,YAAY;AAAA,MACV,iBAAiB;AAAA,QACf,YAAY;AAAA,UACV,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,aAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC;AAC1C,QAAM,WAAW,kBAAkB,MAAM;AAGzC,QAAM,oBAAoB,mBAAmB,YAAY;AACzD,MAAI,qBAAqB,kBAAkB,YAAY,YAAY,GAAG,WAAW,OAAO,GAAG;AACzF,WAAO,eAAe,KAAK,OAAO;AAClC,QAAI,CAAC,OAAO;AACV,cAAQ,IAAI,kCAAkC,OAAO,EAAE;AAAA,IACzD;AACA,WAAO;AAAA,EACT;AAGA,KAAG,cAAc,SAAS,MAAM;AAChC,sBAAoB,cAAc,EAAE,SAAS,UAAU,WAAW,GAAG,CAAC;AAEtE,SAAO,aAAa,KAAK,OAAO;AAEhC,MAAI,CAAC,OAAO;AACV,wBAAoB,SAAS,IAAI;AACjC,YAAQ,IAAI,uBAAuB,SAAS,YAAY;AAAA,EAC1D;AAEA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * OpenAPI JSON Generator\n *\n * Generates a static openapi.generated.json file at build time.\n * This allows CLI tools (like MCP dev server) to access API endpoint\n * information without requiring a running Next.js app.\n */\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport type { PackageResolver } from '../resolver'\nimport {\n  calculateChecksum,\n  readChecksumRecord,\n  writeChecksumRecord,\n  logGenerationResult,\n  type GeneratorResult,\n  createGeneratorResult,\n} from '../utils'\n\nexport interface GenerateOpenApiOptions {\n  resolver: PackageResolver\n  quiet?: boolean\n}\n\ntype HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'\n\ninterface ApiRouteInfo {\n  path: string\n  methods: HttpMethod[]\n  openApiPath: string\n}\n\n/**\n * Find all API route files and extract their OpenAPI specs.\n */\nasync function findApiRoutes(resolver: PackageResolver): Promise<ApiRouteInfo[]> {\n  const routes: ApiRouteInfo[] = []\n  const enabled = resolver.loadEnabledModules()\n\n  for (const entry of enabled) {\n    const modId = entry.id\n    const roots = resolver.getModulePaths(entry)\n\n    const apiApp = path.join(roots.appBase, 'api')\n    const apiPkg = path.join(roots.pkgBase, 'api')\n\n    // Scan route files\n    const routeFiles: Array<{ relativePath: string; fullPath: string }> = []\n\n    const walkDir = (dir: string, rel: string[] = []) => {\n      if (!fs.existsSync(dir)) return\n      for (const e of fs.readdirSync(dir, { withFileTypes: true })) {\n        if (e.isDirectory()) {\n          if (e.name === '__tests__' || e.name === '__mocks__') continue\n          walkDir(path.join(dir, e.name), [...rel, e.name])\n        } else if (e.isFile() && e.name === 'route.ts') {\n          routeFiles.push({\n            relativePath: [...rel].join('/'),\n            fullPath: path.join(dir, e.name),\n          })\n        }\n      }\n    }\n\n    // Scan package first, then app (app overrides)\n    if (fs.existsSync(apiPkg)) walkDir(apiPkg)\n    if (fs.existsSync(apiApp)) walkDir(apiApp)\n\n    // Process unique routes (app overrides package)\n    const seen = new Set<string>()\n    for (const { relativePath, fullPath } of routeFiles) {\n      if (seen.has(relativePath)) continue\n      seen.add(relativePath)\n\n      // Build API path\n      const routeSegs = relativePath ? relativePath.split('/') : []\n      const apiPath = `/api/${modId}${routeSegs.length ? '/' + routeSegs.join('/') : ''}`\n        // Convert [param] to {param} for OpenAPI format\n        .replace(/\\[([^\\]]+)\\]/g, '{$1}')\n\n      routes.push({\n        path: fullPath,\n        methods: await detectMethods(fullPath),\n        openApiPath: apiPath,\n      })\n    }\n  }\n\n  return routes\n}\n\n/**\n * Detect which HTTP methods are exported from a route file.\n */\nasync function detectMethods(filePath: string): Promise<HttpMethod[]> {\n  const methods: HttpMethod[] = []\n  const content = fs.readFileSync(filePath, 'utf-8')\n\n  const methodPatterns: HttpMethod[] = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE']\n  for (const method of methodPatterns) {\n    // Check for export { GET }, export const GET, export async function GET\n    const patterns = [\n      new RegExp(`export\\\\s+(const|async\\\\s+function|function)\\\\s+${method}\\\\b`),\n      new RegExp(`export\\\\s*\\\\{[^}]*\\\\b${method}\\\\b[^}]*\\\\}`),\n    ]\n    if (patterns.some((p) => p.test(content))) {\n      methods.push(method)\n    }\n  }\n\n  return methods\n}\n\n/**\n * Parse openApi export from route file source code statically.\n * This extracts basic operation info without needing to compile the file.\n */\nfunction parseOpenApiFromSource(filePath: string): Record<string, any> | null {\n  try {\n    const content = fs.readFileSync(filePath, 'utf-8')\n\n    // Check if file exports openApi\n    if (!content.includes('export const openApi') && !content.includes('export { openApi')) {\n      return null\n    }\n\n    // Extract operationId, summary, description from the source\n    const result: Record<string, any> = {}\n    const methods = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE']\n\n    for (const method of methods) {\n      // Look for method specs in the openApi object\n      // Pattern: GET: { operationId: '...', summary: '...', ... }\n      const methodPattern = new RegExp(\n        `${method}\\\\s*:\\\\s*\\\\{([^}]+(?:\\\\{[^}]*\\\\}[^}]*)*)\\\\}`,\n        's'\n      )\n      const methodMatch = content.match(methodPattern)\n\n      if (methodMatch) {\n        const methodContent = methodMatch[1]\n        const spec: Record<string, any> = {}\n\n        // Extract operationId\n        const opIdMatch = methodContent.match(/operationId\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (opIdMatch) spec.operationId = opIdMatch[1]\n\n        // Extract summary\n        const summaryMatch = methodContent.match(/summary\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (summaryMatch) spec.summary = summaryMatch[1]\n\n        // Extract description\n        const descMatch = methodContent.match(/description\\s*:\\s*['\"]([^'\"]+)['\"]/)\n        if (descMatch) spec.description = descMatch[1]\n\n        // Extract tags\n        const tagsMatch = methodContent.match(/tags\\s*:\\s*\\[([^\\]]*)\\]/)\n        if (tagsMatch) {\n          const tagsContent = tagsMatch[1]\n          const tags = tagsContent.match(/['\"]([^'\"]+)['\"]/g)\n          if (tags) {\n            spec.tags = tags.map(t => t.replace(/['\"]/g, ''))\n          }\n        }\n\n        if (Object.keys(spec).length > 0) {\n          result[method] = spec\n        }\n      }\n    }\n\n    return Object.keys(result).length > 0 ? result : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Generate a complete OpenAPI document by bundling route files with esbuild\n * and executing the bundle to call buildOpenApiDocument from @open-mercato/shared.\n *\n * esbuild compiles TypeScript with legacy decorator support (reads experimentalDecorators\n * from tsconfig.json), avoiding the TC39 decorator mismatch that breaks tsx-based imports.\n * External packages (zod, mikro-orm, etc.) are resolved from node_modules at runtime.\n */\nasync function generateOpenApiViaBundle(\n  routes: ApiRouteInfo[],\n  projectRoot: string,\n  quiet: boolean\n): Promise<Record<string, any> | null> {\n  let esbuild: typeof import('esbuild')\n  try {\n    esbuild = await import('esbuild')\n  } catch {\n    if (!quiet) console.log('[OpenAPI] esbuild not available, skipping bundle approach')\n    return null\n  }\n\n  const { execFileSync } = await import('node:child_process')\n\n  const cacheDir = path.join(projectRoot, 'node_modules', '.cache')\n  if (!fs.existsSync(cacheDir)) fs.mkdirSync(cacheDir, { recursive: true })\n\n  const bundlePath = path.join(cacheDir, '_openapi-bundle.mjs')\n  const tsconfigPath = path.join(projectRoot, 'tsconfig.base.json')\n  const generatorPath = path.join(\n    projectRoot, 'packages', 'shared', 'src', 'lib', 'openapi', 'generator.ts'\n  )\n\n  // Build the entry script that imports all routes and calls buildOpenApiDocument\n  const importLines: string[] = [\n    `import { buildOpenApiDocument } from ${JSON.stringify(generatorPath)};`,\n  ]\n  const routeMapLines: string[] = []\n\n  for (let i = 0; i < routes.length; i++) {\n    const route = routes[i]\n    importLines.push(`import * as R${i} from ${JSON.stringify(route.path)};`)\n    // Use [param] format so normalizePath in buildOpenApiDocument extracts path params\n    const bracketPath = route.openApiPath.replace(/\\{([^}]+)\\}/g, '[$1]')\n    routeMapLines.push(`  [${JSON.stringify(bracketPath)}, R${i}],`)\n  }\n\n  const entryScript = `${importLines.join('\\n')}\n\nconst routeEntries = [\n${routeMapLines.join('\\n')}\n];\n\nconst modules = new Map();\nfor (const [apiPath, mod] of routeEntries) {\n  const moduleId = apiPath.replace(/^\\\\/api\\\\//, '').split('/')[0];\n  if (!modules.has(moduleId)) modules.set(moduleId, { id: moduleId, apis: [] });\n  modules.get(moduleId).apis.push({\n    path: apiPath,\n    handlers: mod,\n    metadata: mod.metadata,\n  });\n}\n\nconst doc = buildOpenApiDocument([...modules.values()], {\n  title: 'Open Mercato API',\n  version: '1.0.0',\n  description: 'Auto-generated OpenAPI specification',\n  servers: [{ url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' }],\n});\n\n// Deep-clone to break shared object references before serializing.\n// The zodToJsonSchema memo cache returns the same object instance for\n// fields like currencyCode that appear on both parent and child schemas.\n// A naive WeakSet-based circular-ref guard would drop the second occurrence,\n// causing properties to vanish from the generated spec (while the field\n// still appears in the 'required' array, since those are plain strings).\nconst deepClone = (v, ancestors = []) => {\n  if (v === null || typeof v !== 'object') return v;\n  if (typeof v === 'bigint') return Number(v);\n  if (typeof v === 'function') return undefined;\n  if (ancestors.includes(v)) return undefined;  // true circular ref\n  const next = [...ancestors, v];\n  if (Array.isArray(v)) return v.map((item) => deepClone(item, next));\n  const out = {};\n  for (const [k, val] of Object.entries(v)) {\n    const cloned = deepClone(val, next);\n    if (cloned !== undefined) out[k] = cloned;\n  }\n  return out;\n};\nprocess.stdout.write(JSON.stringify(deepClone(doc), (_, v) =>\n  typeof v === 'bigint' ? Number(v) : v\n));\n`\n\n  // Plugin: stub next/* imports (not available outside Next.js app context)\n  const stubNextPlugin = {\n    name: 'stub-next',\n    setup(build: any) {\n      build.onResolve({ filter: /^next($|\\/)/ }, () => ({\n        path: 'next-stub',\n        namespace: 'next-stub',\n      }))\n      build.onLoad({ filter: /.*/, namespace: 'next-stub' }, () => ({\n        contents: [\n          'const p = new Proxy(function(){}, {',\n          '  get(_, k) { return k === \"__esModule\" ? true : k === \"default\" ? p : p; },',\n          '  apply() { return p; },',\n          '  construct() { return p; },',\n          '});',\n          'export default p;',\n          'export const NextRequest = p, NextResponse = p, headers = p, cookies = p;',\n          'export const redirect = p, notFound = p, useRouter = p, usePathname = p;',\n          'export const useSearchParams = p, permanentRedirect = p, revalidatePath = p;',\n        ].join('\\n'),\n        loader: 'js' as const,\n      }))\n    },\n  }\n\n  // Plugin: resolve workspace imports, aliases, and subpath imports\n  const appRoot = path.join(projectRoot, 'apps', 'mercato')\n  const resolveWorkspacePlugin = {\n    name: 'resolve-workspace',\n    setup(build: any) {\n      // @open-mercato/<pkg>/<path> \u2192 packages/<pkg>/src/<path>.ts\n      build.onResolve({ filter: /^@open-mercato\\// }, (args: any) => {\n        const withoutScope = args.path.slice('@open-mercato/'.length)\n        const slashIdx = withoutScope.indexOf('/')\n        const pkg = slashIdx === -1 ? withoutScope : withoutScope.slice(0, slashIdx)\n        const rest = slashIdx === -1 ? '' : withoutScope.slice(slashIdx + 1)\n\n        const base = rest\n          ? path.join(projectRoot, 'packages', pkg, 'src', rest)\n          : path.join(projectRoot, 'packages', pkg, 'src', 'index')\n\n        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx']) {\n          if (fs.existsSync(base + ext)) return { path: base + ext }\n        }\n        return undefined\n      })\n\n      // @/.mercato/* \u2192 apps/mercato/.mercato/* (tsconfig paths)\n      build.onResolve({ filter: /^@\\/\\.mercato\\// }, (args: any) => {\n        const rest = args.path.slice('@/'.length) // '.mercato/generated/...'\n        const base = path.join(appRoot, rest)\n        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx', '']) {\n          if (fs.existsSync(base + ext)) return { path: base + ext }\n        }\n        return undefined\n      })\n\n      // @/* \u2192 apps/mercato/src/* (tsconfig paths)\n      build.onResolve({ filter: /^@\\// }, (args: any) => {\n        const rest = args.path.slice('@/'.length)\n        const base = path.join(appRoot, 'src', rest)\n        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx']) {\n          if (fs.existsSync(base + ext)) return { path: base + ext }\n        }\n        return undefined\n      })\n\n      // #generated/* \u2192 packages/core/generated/* (Node subpath imports)\n      build.onResolve({ filter: /^#generated\\// }, (args: any) => {\n        const rest = args.path.slice('#generated/'.length)\n        const coreGenerated = path.join(projectRoot, 'packages', 'core', 'generated')\n        const base = path.join(coreGenerated, rest)\n        for (const ext of ['.ts', '/index.ts']) {\n          if (fs.existsSync(base + ext)) return { path: base + ext }\n        }\n        return undefined\n      })\n    },\n  }\n\n  // Plugin: externalize installed packages, stub missing ones\n  const nodeBuiltins = new Set([\n    'assert', 'buffer', 'child_process', 'cluster', 'console', 'constants',\n    'crypto', 'dgram', 'dns', 'domain', 'events', 'fs', 'http', 'http2',\n    'https', 'module', 'net', 'os', 'path', 'perf_hooks', 'process',\n    'punycode', 'querystring', 'readline', 'repl', 'stream', 'string_decoder',\n    'sys', 'timers', 'tls', 'tty', 'url', 'util', 'v8', 'vm', 'wasi',\n    'worker_threads', 'zlib', 'async_hooks', 'diagnostics_channel', 'inspector',\n    'trace_events',\n  ])\n  const externalNonWorkspacePlugin = {\n    name: 'external-non-workspace',\n    setup(build: any) {\n      build.onResolve({ filter: /^[^./]/ }, (args: any) => {\n        if (args.path.startsWith('@open-mercato/')) return undefined\n        if (args.path.startsWith('@/')) return undefined\n        if (args.path.startsWith('#generated/')) return undefined\n        if (args.path.startsWith('next')) return undefined\n        // Let esbuild handle Node builtins (with or without node: prefix)\n        if (args.path.startsWith('node:')) return undefined\n        const topLevel = args.path.split('/')[0]\n        if (nodeBuiltins.has(topLevel)) return undefined\n\n        // Extract package name (handle scoped packages like @mikro-orm/core)\n        const pkgName = args.path.startsWith('@')\n          ? args.path.split('/').slice(0, 2).join('/')\n          : topLevel\n        const pkgDir = path.join(projectRoot, 'node_modules', pkgName)\n        if (fs.existsSync(pkgDir)) return { external: true }\n\n        // Package not installed \u2014 provide CJS stub (allows any named import)\n        return { path: args.path, namespace: 'missing-pkg' }\n      })\n      build.onLoad({ filter: /.*/, namespace: 'missing-pkg' }, () => ({\n        contents: 'var h={get:(_,k)=>k===\"__esModule\"?true:p};var p=new Proxy(function(){return p},{get:h.get,apply:()=>p,construct:()=>p});module.exports=p;',\n        loader: 'js' as const,\n      }))\n    },\n  }\n\n  try {\n    await esbuild.build({\n      stdin: {\n        contents: entryScript,\n        resolveDir: projectRoot,\n        sourcefile: 'openapi-entry.ts',\n        loader: 'ts',\n      },\n      bundle: true,\n      format: 'esm',\n      platform: 'node',\n      target: 'node18',\n      outfile: bundlePath,\n      write: true,\n      tsconfig: tsconfigPath,\n      logLevel: 'silent',\n      jsx: 'automatic',\n      plugins: [stubNextPlugin, resolveWorkspacePlugin, externalNonWorkspacePlugin],\n    })\n\n    const stdout = execFileSync(process.execPath, [bundlePath], {\n      timeout: 60_000,\n      maxBuffer: 20 * 1024 * 1024,\n      encoding: 'utf-8',\n      env: { ...process.env, NODE_NO_WARNINGS: '1' },\n      cwd: projectRoot,\n    })\n\n    const lastLine = stdout.trim().split('\\n').pop()!\n    const doc = JSON.parse(lastLine) as Record<string, any>\n\n    if (!quiet) {\n      const pathCount = Object.keys(doc.paths || {}).length\n      const withBody = Object.values(doc.paths || {}).reduce((n: number, methods: any) => {\n        for (const m of Object.values(methods)) {\n          if ((m as any)?.requestBody) n++\n        }\n        return n\n      }, 0)\n      console.log(`[OpenAPI] Bundle approach: ${pathCount} paths, ${withBody} with requestBody schemas`)\n    }\n\n    return doc\n  } catch (err) {\n    const errMsg = err instanceof Error ? err.message : String(err)\n    const stderr = (err as any)?.stderr\n    const esbuildErrors = (err as any)?.errors as Array<{ text: string; location?: { file: string } }> | undefined\n    if (!quiet) {\n      console.log(`[OpenAPI] Bundle approach failed, will use static fallback: ${errMsg.split('\\n')[0]}`)\n      if (esbuildErrors?.length) {\n        const unique = new Map<string, string>()\n        for (const e of esbuildErrors) {\n          const key = e.text\n          if (!unique.has(key)) unique.set(key, e.location?.file ?? '')\n        }\n        for (const [text, file] of [...unique.entries()].slice(0, 10)) {\n          console.log(`[OpenAPI]   ${text}${file ? ` (${path.basename(file)})` : ''}`)\n        }\n        if (unique.size > 10) console.log(`[OpenAPI]   ... and ${unique.size - 10} more`)\n      }\n      if (stderr) {\n        for (const line of String(stderr).trim().split('\\n').slice(0, 3)) {\n          console.log(`[OpenAPI]   ${line}`)\n        }\n      }\n    }\n    return null\n  } finally {\n    // Clean up old files from previous tsx-based approach\n    for (const file of ['_openapi-register.mjs', '_openapi-loader.mjs', '_next-stub.cjs']) {\n      try { fs.unlinkSync(path.join(cacheDir, file)) } catch {}\n    }\n  }\n}\n\n/**\n * Build OpenAPI paths from discovered routes.\n * Extracts basic operation info from route files statically.\n */\nfunction buildOpenApiPaths(routes: ApiRouteInfo[]): Record<string, any> {\n  const paths: Record<string, any> = {}\n\n  for (const route of routes) {\n    const pathEntry: Record<string, any> = {}\n\n    // Try to extract OpenAPI specs from source\n    const openApiSpec = parseOpenApiFromSource(route.path)\n\n    for (const method of route.methods) {\n      const methodLower = method.toLowerCase()\n      const spec = openApiSpec?.[method]\n\n      // Generate a default operationId if not found\n      const pathSegments = route.openApiPath\n        .replace(/^\\/api\\//, '')\n        .replace(/\\{[^}]+\\}/g, 'by_id')\n        .split('/')\n        .filter(Boolean)\n        .join('_')\n      const defaultOperationId = `${methodLower}_${pathSegments}`\n\n      pathEntry[methodLower] = {\n        operationId: spec?.operationId || defaultOperationId,\n        summary: spec?.summary || `${method} ${route.openApiPath}`,\n        description: spec?.description || `${method} operation for ${route.openApiPath}`,\n        tags: spec?.tags || [route.openApiPath.split('/')[2] || 'api'],\n        responses: {\n          '200': {\n            description: 'Successful response',\n          },\n        },\n      }\n    }\n\n    if (Object.keys(pathEntry).length > 0) {\n      paths[route.openApiPath] = pathEntry\n    }\n  }\n\n  return paths\n}\n\n/**\n * Generate the OpenAPI JSON file.\n */\nexport async function generateOpenApi(options: GenerateOpenApiOptions): Promise<GeneratorResult> {\n  const { resolver, quiet = false } = options\n  const result = createGeneratorResult()\n\n  const outputDir = resolver.getOutputDir()\n  const outFile = path.join(outputDir, 'openapi.generated.json')\n  const checksumFile = path.join(outputDir, 'openapi.generated.checksum')\n\n  // Ensure output directory exists\n  if (!fs.existsSync(outputDir)) {\n    fs.mkdirSync(outputDir, { recursive: true })\n  }\n\n  // Find all API routes\n  const routes = await findApiRoutes(resolver)\n\n  if (!quiet) {\n    console.log(`[OpenAPI] Found ${routes.length} API route files`)\n  }\n\n  // Determine project root (cli package is at packages/cli/src/lib/generators/)\n  const projectRoot = path.resolve(\n    path.dirname(new URL(import.meta.url).pathname),\n    '../../../../..'\n  )\n\n  // Try esbuild bundle approach first \u2014 produces full requestBody/response schemas\n  let doc: Record<string, any> | null = await generateOpenApiViaBundle(routes, projectRoot, quiet)\n\n  // Fallback to static regex approach (extracts operationId/summary/tags but no schemas)\n  if (!doc) {\n    if (!quiet) {\n      console.log('[OpenAPI] Falling back to static regex approach')\n    }\n    const paths = buildOpenApiPaths(routes)\n    doc = {\n      openapi: '3.1.0',\n      info: {\n        title: 'Open Mercato API',\n        version: '1.0.0',\n        description: 'Auto-generated OpenAPI specification',\n      },\n      servers: [\n        { url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' },\n      ],\n      paths,\n      components: {\n        securitySchemes: {\n          bearerAuth: {\n            type: 'http',\n            scheme: 'bearer',\n            bearerFormat: 'JWT',\n            description: 'Send an `Authorization: Bearer <token>` header with a valid API token.',\n          },\n        },\n      },\n    }\n  }\n\n  const output = JSON.stringify(doc, null, 2)\n  const checksum = calculateChecksum(output)\n\n  // Check if unchanged\n  const existingChecksums = readChecksumRecord(checksumFile)\n  if (existingChecksums && existingChecksums.content === checksum && fs.existsSync(outFile)) {\n    result.filesUnchanged.push(outFile)\n    if (!quiet) {\n      console.log(`[OpenAPI] Skipped (unchanged): ${outFile}`)\n    }\n    return result\n  }\n\n  // Write the file\n  fs.writeFileSync(outFile, output)\n  writeChecksumRecord(checksumFile, { content: checksum, structure: '' })\n\n  result.filesWritten.push(outFile)\n\n  if (!quiet) {\n    logGenerationResult(outFile, true)\n    const pathCount = Object.keys(doc.paths || {}).length\n    console.log(`[OpenAPI] Generated ${pathCount} API paths`)\n  }\n\n  return result\n}\n"],
+  "mappings": "AAQA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAEtB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAkBP,eAAe,cAAc,UAAoD;AAC/E,QAAM,SAAyB,CAAC;AAChC,QAAM,UAAU,SAAS,mBAAmB;AAE5C,aAAW,SAAS,SAAS;AAC3B,UAAM,QAAQ,MAAM;AACpB,UAAM,QAAQ,SAAS,eAAe,KAAK;AAE3C,UAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK;AAC7C,UAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK;AAG7C,UAAM,aAAgE,CAAC;AAEvE,UAAM,UAAU,CAAC,KAAa,MAAgB,CAAC,MAAM;AACnD,UAAI,CAAC,GAAG,WAAW,GAAG,EAAG;AACzB,iBAAW,KAAK,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG;AAC5D,YAAI,EAAE,YAAY,GAAG;AACnB,cAAI,EAAE,SAAS,eAAe,EAAE,SAAS,YAAa;AACtD,kBAAQ,KAAK,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;AAAA,QAClD,WAAW,EAAE,OAAO,KAAK,EAAE,SAAS,YAAY;AAC9C,qBAAW,KAAK;AAAA,YACd,cAAc,CAAC,GAAG,GAAG,EAAE,KAAK,GAAG;AAAA,YAC/B,UAAU,KAAK,KAAK,KAAK,EAAE,IAAI;AAAA,UACjC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAGA,QAAI,GAAG,WAAW,MAAM,EAAG,SAAQ,MAAM;AACzC,QAAI,GAAG,WAAW,MAAM,EAAG,SAAQ,MAAM;AAGzC,UAAM,OAAO,oBAAI,IAAY;AAC7B,eAAW,EAAE,cAAc,SAAS,KAAK,YAAY;AACnD,UAAI,KAAK,IAAI,YAAY,EAAG;AAC5B,WAAK,IAAI,YAAY;AAGrB,YAAM,YAAY,eAAe,aAAa,MAAM,GAAG,IAAI,CAAC;AAC5D,YAAM,UAAU,QAAQ,KAAK,GAAG,UAAU,SAAS,MAAM,UAAU,KAAK,GAAG,IAAI,EAAE,GAE9E,QAAQ,iBAAiB,MAAM;AAElC,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,SAAS,MAAM,cAAc,QAAQ;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAKA,eAAe,cAAc,UAAyC;AACpE,QAAM,UAAwB,CAAC;AAC/B,QAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AAEjD,QAAM,iBAA+B,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ;AAC7E,aAAW,UAAU,gBAAgB;AAEnC,UAAM,WAAW;AAAA,MACf,IAAI,OAAO,mDAAmD,MAAM,KAAK;AAAA,MACzE,IAAI,OAAO,wBAAwB,MAAM,aAAa;AAAA,IACxD;AACA,QAAI,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG;AACzC,cAAQ,KAAK,MAAM;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AACT;AAMA,SAAS,uBAAuB,UAA8C;AAC5E,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AAGjD,QAAI,CAAC,QAAQ,SAAS,sBAAsB,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG;AACtF,aAAO;AAAA,IACT;AAGA,UAAM,SAA8B,CAAC;AACrC,UAAM,UAAU,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ;AAExD,eAAW,UAAU,SAAS;AAG5B,YAAM,gBAAgB,IAAI;AAAA,QACxB,GAAG,MAAM;AAAA,QACT;AAAA,MACF;AACA,YAAM,cAAc,QAAQ,MAAM,aAAa;AAE/C,UAAI,aAAa;AACf,cAAM,gBAAgB,YAAY,CAAC;AACnC,cAAM,OAA4B,CAAC;AAGnC,cAAM,YAAY,cAAc,MAAM,oCAAoC;AAC1E,YAAI,UAAW,MAAK,cAAc,UAAU,CAAC;AAG7C,cAAM,eAAe,cAAc,MAAM,gCAAgC;AACzE,YAAI,aAAc,MAAK,UAAU,aAAa,CAAC;AAG/C,cAAM,YAAY,cAAc,MAAM,oCAAoC;AAC1E,YAAI,UAAW,MAAK,cAAc,UAAU,CAAC;AAG7C,cAAM,YAAY,cAAc,MAAM,yBAAyB;AAC/D,YAAI,WAAW;AACb,gBAAM,cAAc,UAAU,CAAC;AAC/B,gBAAM,OAAO,YAAY,MAAM,mBAAmB;AAClD,cAAI,MAAM;AACR,iBAAK,OAAO,KAAK,IAAI,OAAK,EAAE,QAAQ,SAAS,EAAE,CAAC;AAAA,UAClD;AAAA,QACF;AAEA,YAAI,OAAO,KAAK,IAAI,EAAE,SAAS,GAAG;AAChC,iBAAO,MAAM,IAAI;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,eAAe,yBACb,QACA,aACA,OACqC;AACrC,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,SAAS;AAAA,EAClC,QAAQ;AACN,QAAI,CAAC,MAAO,SAAQ,IAAI,2DAA2D;AACnF,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAoB;AAE1D,QAAM,WAAW,KAAK,KAAK,aAAa,gBAAgB,QAAQ;AAChE,MAAI,CAAC,GAAG,WAAW,QAAQ,EAAG,IAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AAExE,QAAM,aAAa,KAAK,KAAK,UAAU,qBAAqB;AAC5D,QAAM,eAAe,KAAK,KAAK,aAAa,oBAAoB;AAChE,QAAM,gBAAgB,KAAK;AAAA,IACzB;AAAA,IAAa;AAAA,IAAY;AAAA,IAAU;AAAA,IAAO;AAAA,IAAO;AAAA,IAAW;AAAA,EAC9D;AAGA,QAAM,cAAwB;AAAA,IAC5B,wCAAwC,KAAK,UAAU,aAAa,CAAC;AAAA,EACvE;AACA,QAAM,gBAA0B,CAAC;AAEjC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,QAAQ,OAAO,CAAC;AACtB,gBAAY,KAAK,gBAAgB,CAAC,SAAS,KAAK,UAAU,MAAM,IAAI,CAAC,GAAG;AAExE,UAAM,cAAc,MAAM,YAAY,QAAQ,gBAAgB,MAAM;AACpE,kBAAc,KAAK,MAAM,KAAK,UAAU,WAAW,CAAC,MAAM,CAAC,IAAI;AAAA,EACjE;AAEA,QAAM,cAAc,GAAG,YAAY,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,EAG7C,cAAc,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+CxB,QAAM,iBAAiB;AAAA,IACrB,MAAM;AAAA,IACN,MAAM,OAAY;AAChB,YAAM,UAAU,EAAE,QAAQ,cAAc,GAAG,OAAO;AAAA,QAChD,MAAM;AAAA,QACN,WAAW;AAAA,MACb,EAAE;AACF,YAAM,OAAO,EAAE,QAAQ,MAAM,WAAW,YAAY,GAAG,OAAO;AAAA,QAC5D,UAAU;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,EAAE,KAAK,IAAI;AAAA,QACX,QAAQ;AAAA,MACV,EAAE;AAAA,IACJ;AAAA,EACF;AAGA,QAAM,UAAU,KAAK,KAAK,aAAa,QAAQ,SAAS;AACxD,QAAM,yBAAyB;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,OAAY;AAEhB,YAAM,UAAU,EAAE,QAAQ,mBAAmB,GAAG,CAAC,SAAc;AAC7D,cAAM,eAAe,KAAK,KAAK,MAAM,iBAAiB,MAAM;AAC5D,cAAM,WAAW,aAAa,QAAQ,GAAG;AACzC,cAAM,MAAM,aAAa,KAAK,eAAe,aAAa,MAAM,GAAG,QAAQ;AAC3E,cAAM,OAAO,aAAa,KAAK,KAAK,aAAa,MAAM,WAAW,CAAC;AAEnE,cAAM,OAAO,OACT,KAAK,KAAK,aAAa,YAAY,KAAK,OAAO,IAAI,IACnD,KAAK,KAAK,aAAa,YAAY,KAAK,OAAO,OAAO;AAE1D,mBAAW,OAAO,CAAC,OAAO,QAAQ,aAAa,YAAY,GAAG;AAC5D,cAAI,GAAG,WAAW,OAAO,GAAG,EAAG,QAAO,EAAE,MAAM,OAAO,IAAI;AAAA,QAC3D;AACA,eAAO;AAAA,MACT,CAAC;AAGD,YAAM,UAAU,EAAE,QAAQ,kBAAkB,GAAG,CAAC,SAAc;AAC5D,cAAM,OAAO,KAAK,KAAK,MAAM,KAAK,MAAM;AACxC,cAAM,OAAO,KAAK,KAAK,SAAS,IAAI;AACpC,mBAAW,OAAO,CAAC,OAAO,QAAQ,aAAa,cAAc,EAAE,GAAG;AAChE,cAAI,GAAG,WAAW,OAAO,GAAG,EAAG,QAAO,EAAE,MAAM,OAAO,IAAI;AAAA,QAC3D;AACA,eAAO;AAAA,MACT,CAAC;AAGD,YAAM,UAAU,EAAE,QAAQ,OAAO,GAAG,CAAC,SAAc;AACjD,cAAM,OAAO,KAAK,KAAK,MAAM,KAAK,MAAM;AACxC,cAAM,OAAO,KAAK,KAAK,SAAS,OAAO,IAAI;AAC3C,mBAAW,OAAO,CAAC,OAAO,QAAQ,aAAa,YAAY,GAAG;AAC5D,cAAI,GAAG,WAAW,OAAO,GAAG,EAAG,QAAO,EAAE,MAAM,OAAO,IAAI;AAAA,QAC3D;AACA,eAAO;AAAA,MACT,CAAC;AAGD,YAAM,UAAU,EAAE,QAAQ,gBAAgB,GAAG,CAAC,SAAc;AAC1D,cAAM,OAAO,KAAK,KAAK,MAAM,cAAc,MAAM;AACjD,cAAM,gBAAgB,KAAK,KAAK,aAAa,YAAY,QAAQ,WAAW;AAC5E,cAAM,OAAO,KAAK,KAAK,eAAe,IAAI;AAC1C,mBAAW,OAAO,CAAC,OAAO,WAAW,GAAG;AACtC,cAAI,GAAG,WAAW,OAAO,GAAG,EAAG,QAAO,EAAE,MAAM,OAAO,IAAI;AAAA,QAC3D;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,eAAe,oBAAI,IAAI;AAAA,IAC3B;AAAA,IAAU;AAAA,IAAU;AAAA,IAAiB;AAAA,IAAW;AAAA,IAAW;AAAA,IAC3D;AAAA,IAAU;AAAA,IAAS;AAAA,IAAO;AAAA,IAAU;AAAA,IAAU;AAAA,IAAM;AAAA,IAAQ;AAAA,IAC5D;AAAA,IAAS;AAAA,IAAU;AAAA,IAAO;AAAA,IAAM;AAAA,IAAQ;AAAA,IAAc;AAAA,IACtD;AAAA,IAAY;AAAA,IAAe;AAAA,IAAY;AAAA,IAAQ;AAAA,IAAU;AAAA,IACzD;AAAA,IAAO;AAAA,IAAU;AAAA,IAAO;AAAA,IAAO;AAAA,IAAO;AAAA,IAAQ;AAAA,IAAM;AAAA,IAAM;AAAA,IAC1D;AAAA,IAAkB;AAAA,IAAQ;AAAA,IAAe;AAAA,IAAuB;AAAA,IAChE;AAAA,EACF,CAAC;AACD,QAAM,6BAA6B;AAAA,IACjC,MAAM;AAAA,IACN,MAAM,OAAY;AAChB,YAAM,UAAU,EAAE,QAAQ,SAAS,GAAG,CAAC,SAAc;AACnD,YAAI,KAAK,KAAK,WAAW,gBAAgB,EAAG,QAAO;AACnD,YAAI,KAAK,KAAK,WAAW,IAAI,EAAG,QAAO;AACvC,YAAI,KAAK,KAAK,WAAW,aAAa,EAAG,QAAO;AAChD,YAAI,KAAK,KAAK,WAAW,MAAM,EAAG,QAAO;AAEzC,YAAI,KAAK,KAAK,WAAW,OAAO,EAAG,QAAO;AAC1C,cAAM,WAAW,KAAK,KAAK,MAAM,GAAG,EAAE,CAAC;AACvC,YAAI,aAAa,IAAI,QAAQ,EAAG,QAAO;AAGvC,cAAM,UAAU,KAAK,KAAK,WAAW,GAAG,IACpC,KAAK,KAAK,MAAM,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,IACzC;AACJ,cAAM,SAAS,KAAK,KAAK,aAAa,gBAAgB,OAAO;AAC7D,YAAI,GAAG,WAAW,MAAM,EAAG,QAAO,EAAE,UAAU,KAAK;AAGnD,eAAO,EAAE,MAAM,KAAK,MAAM,WAAW,cAAc;AAAA,MACrD,CAAC;AACD,YAAM,OAAO,EAAE,QAAQ,MAAM,WAAW,cAAc,GAAG,OAAO;AAAA,QAC9D,UAAU;AAAA,QACV,QAAQ;AAAA,MACV,EAAE;AAAA,IACJ;AAAA,EACF;AAEA,MAAI;AACF,UAAM,QAAQ,MAAM;AAAA,MAClB,OAAO;AAAA,QACL,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,MACV,KAAK;AAAA,MACL,SAAS,CAAC,gBAAgB,wBAAwB,0BAA0B;AAAA,IAC9E,CAAC;AAED,UAAM,SAAS,aAAa,QAAQ,UAAU,CAAC,UAAU,GAAG;AAAA,MAC1D,SAAS;AAAA,MACT,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,KAAK,kBAAkB,IAAI;AAAA,MAC7C,KAAK;AAAA,IACP,CAAC;AAED,UAAM,WAAW,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,IAAI;AAC/C,UAAM,MAAM,KAAK,MAAM,QAAQ;AAE/B,QAAI,CAAC,OAAO;AACV,YAAM,YAAY,OAAO,KAAK,IAAI,SAAS,CAAC,CAAC,EAAE;AAC/C,YAAM,WAAW,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,GAAW,YAAiB;AAClF,mBAAW,KAAK,OAAO,OAAO,OAAO,GAAG;AACtC,cAAK,GAAW,YAAa;AAAA,QAC/B;AACA,eAAO;AAAA,MACT,GAAG,CAAC;AACJ,cAAQ,IAAI,8BAA8B,SAAS,WAAW,QAAQ,2BAA2B;AAAA,IACnG;AAEA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,UAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAM,SAAU,KAAa;AAC7B,UAAM,gBAAiB,KAAa;AACpC,QAAI,CAAC,OAAO;AACV,cAAQ,IAAI,+DAA+D,OAAO,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE;AAClG,UAAI,eAAe,QAAQ;AACzB,cAAM,SAAS,oBAAI,IAAoB;AACvC,mBAAW,KAAK,eAAe;AAC7B,gBAAM,MAAM,EAAE;AACd,cAAI,CAAC,OAAO,IAAI,GAAG,EAAG,QAAO,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE;AAAA,QAC9D;AACA,mBAAW,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,MAAM,GAAG,EAAE,GAAG;AAC7D,kBAAQ,IAAI,eAAe,IAAI,GAAG,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,QAC7E;AACA,YAAI,OAAO,OAAO,GAAI,SAAQ,IAAI,uBAAuB,OAAO,OAAO,EAAE,OAAO;AAAA,MAClF;AACA,UAAI,QAAQ;AACV,mBAAW,QAAQ,OAAO,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG;AAChE,kBAAQ,IAAI,eAAe,IAAI,EAAE;AAAA,QACnC;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT,UAAE;AAEA,eAAW,QAAQ,CAAC,yBAAyB,uBAAuB,gBAAgB,GAAG;AACrF,UAAI;AAAE,WAAG,WAAW,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,MAAE,QAAQ;AAAA,MAAC;AAAA,IAC1D;AAAA,EACF;AACF;AAMA,SAAS,kBAAkB,QAA6C;AACtE,QAAM,QAA6B,CAAC;AAEpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAiC,CAAC;AAGxC,UAAM,cAAc,uBAAuB,MAAM,IAAI;AAErD,eAAW,UAAU,MAAM,SAAS;AAClC,YAAM,cAAc,OAAO,YAAY;AACvC,YAAM,OAAO,cAAc,MAAM;AAGjC,YAAM,eAAe,MAAM,YACxB,QAAQ,YAAY,EAAE,EACtB,QAAQ,cAAc,OAAO,EAC7B,MAAM,GAAG,EACT,OAAO,OAAO,EACd,KAAK,GAAG;AACX,YAAM,qBAAqB,GAAG,WAAW,IAAI,YAAY;AAEzD,gBAAU,WAAW,IAAI;AAAA,QACvB,aAAa,MAAM,eAAe;AAAA,QAClC,SAAS,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,WAAW;AAAA,QACxD,aAAa,MAAM,eAAe,GAAG,MAAM,kBAAkB,MAAM,WAAW;AAAA,QAC9E,MAAM,MAAM,QAAQ,CAAC,MAAM,YAAY,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK;AAAA,QAC7D,WAAW;AAAA,UACT,OAAO;AAAA,YACL,aAAa;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,KAAK,SAAS,EAAE,SAAS,GAAG;AACrC,YAAM,MAAM,WAAW,IAAI;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO;AACT;AAKA,eAAsB,gBAAgB,SAA2D;AAC/F,QAAM,EAAE,UAAU,QAAQ,MAAM,IAAI;AACpC,QAAM,SAAS,sBAAsB;AAErC,QAAM,YAAY,SAAS,aAAa;AACxC,QAAM,UAAU,KAAK,KAAK,WAAW,wBAAwB;AAC7D,QAAM,eAAe,KAAK,KAAK,WAAW,4BAA4B;AAGtE,MAAI,CAAC,GAAG,WAAW,SAAS,GAAG;AAC7B,OAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EAC7C;AAGA,QAAM,SAAS,MAAM,cAAc,QAAQ;AAE3C,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,mBAAmB,OAAO,MAAM,kBAAkB;AAAA,EAChE;AAGA,QAAM,cAAc,KAAK;AAAA,IACvB,KAAK,QAAQ,IAAI,IAAI,YAAY,GAAG,EAAE,QAAQ;AAAA,IAC9C;AAAA,EACF;AAGA,MAAI,MAAkC,MAAM,yBAAyB,QAAQ,aAAa,KAAK;AAG/F,MAAI,CAAC,KAAK;AACR,QAAI,CAAC,OAAO;AACV,cAAQ,IAAI,iDAAiD;AAAA,IAC/D;AACA,UAAM,QAAQ,kBAAkB,MAAM;AACtC,UAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM;AAAA,QACJ,OAAO;AAAA,QACP,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,MACA,SAAS;AAAA,QACP,EAAE,KAAK,QAAQ,IAAI,uBAAuB,wBAAwB;AAAA,MACpE;AAAA,MACA;AAAA,MACA,YAAY;AAAA,QACV,iBAAiB;AAAA,UACf,YAAY;AAAA,YACV,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,cAAc;AAAA,YACd,aAAa;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC;AAC1C,QAAM,WAAW,kBAAkB,MAAM;AAGzC,QAAM,oBAAoB,mBAAmB,YAAY;AACzD,MAAI,qBAAqB,kBAAkB,YAAY,YAAY,GAAG,WAAW,OAAO,GAAG;AACzF,WAAO,eAAe,KAAK,OAAO;AAClC,QAAI,CAAC,OAAO;AACV,cAAQ,IAAI,kCAAkC,OAAO,EAAE;AAAA,IACzD;AACA,WAAO;AAAA,EACT;AAGA,KAAG,cAAc,SAAS,MAAM;AAChC,sBAAoB,cAAc,EAAE,SAAS,UAAU,WAAW,GAAG,CAAC;AAEtE,SAAO,aAAa,KAAK,OAAO;AAEhC,MAAI,CAAC,OAAO;AACV,wBAAoB,SAAS,IAAI;AACjC,UAAM,YAAY,OAAO,KAAK,IAAI,SAAS,CAAC,CAAC,EAAE;AAC/C,YAAQ,IAAI,uBAAuB,SAAS,YAAY;AAAA,EAC1D;AAEA,SAAO;AACT;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/cli",
-  "version": "0.4.9-develop-8c36c096d5",
+  "version": "0.4.9-develop-31d1a87765",
   "type": "module",
   "main": "./dist/index.js",
   "exports": {
@@ -58,16 +58,16 @@
     "@mikro-orm/core": "^6.6.2",
     "@mikro-orm/migrations": "^6.6.2",
     "@mikro-orm/postgresql": "^6.6.2",
-    "@open-mercato/shared": "0.4.9-develop-8c36c096d5",
+    "@open-mercato/shared": "0.4.9-develop-31d1a87765",
     "pg": "8.20.0",
     "testcontainers": "^11.12.0",
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.4.9-develop-8c36c096d5"
+    "@open-mercato/shared": "0.4.9-develop-31d1a87765"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.4.9-develop-8c36c096d5",
+    "@open-mercato/shared": "0.4.9-develop-31d1a87765",
     "@types/jest": "^30.0.0",
     "jest": "^30.2.0",
     "ts-jest": "^29.4.6"

package/src/lib/generators/openapi.ts

@@ -176,6 +176,296 @@ function parseOpenApiFromSource(filePath: string): Record<string, any> | null {
   }
 }
 
+/**
+ * Generate a complete OpenAPI document by bundling route files with esbuild
+ * and executing the bundle to call buildOpenApiDocument from @open-mercato/shared.
+ *
+ * esbuild compiles TypeScript with legacy decorator support (reads experimentalDecorators
+ * from tsconfig.json), avoiding the TC39 decorator mismatch that breaks tsx-based imports.
+ * External packages (zod, mikro-orm, etc.) are resolved from node_modules at runtime.
+ */
+async function generateOpenApiViaBundle(
+  routes: ApiRouteInfo[],
+  projectRoot: string,
+  quiet: boolean
+): Promise<Record<string, any> | null> {
+  let esbuild: typeof import('esbuild')
+  try {
+    esbuild = await import('esbuild')
+  } catch {
+    if (!quiet) console.log('[OpenAPI] esbuild not available, skipping bundle approach')
+    return null
+  }
+
+  const { execFileSync } = await import('node:child_process')
+
+  const cacheDir = path.join(projectRoot, 'node_modules', '.cache')
+  if (!fs.existsSync(cacheDir)) fs.mkdirSync(cacheDir, { recursive: true })
+
+  const bundlePath = path.join(cacheDir, '_openapi-bundle.mjs')
+  const tsconfigPath = path.join(projectRoot, 'tsconfig.base.json')
+  const generatorPath = path.join(
+    projectRoot, 'packages', 'shared', 'src', 'lib', 'openapi', 'generator.ts'
+  )
+
+  // Build the entry script that imports all routes and calls buildOpenApiDocument
+  const importLines: string[] = [
+    `import { buildOpenApiDocument } from ${JSON.stringify(generatorPath)};`,
+  ]
+  const routeMapLines: string[] = []
+
+  for (let i = 0; i < routes.length; i++) {
+    const route = routes[i]
+    importLines.push(`import * as R${i} from ${JSON.stringify(route.path)};`)
+    // Use [param] format so normalizePath in buildOpenApiDocument extracts path params
+    const bracketPath = route.openApiPath.replace(/\{([^}]+)\}/g, '[$1]')
+    routeMapLines.push(`  [${JSON.stringify(bracketPath)}, R${i}],`)
+  }
+
+  const entryScript = `${importLines.join('\n')}
+
+const routeEntries = [
+${routeMapLines.join('\n')}
+];
+
+const modules = new Map();
+for (const [apiPath, mod] of routeEntries) {
+  const moduleId = apiPath.replace(/^\\/api\\//, '').split('/')[0];
+  if (!modules.has(moduleId)) modules.set(moduleId, { id: moduleId, apis: [] });
+  modules.get(moduleId).apis.push({
+    path: apiPath,
+    handlers: mod,
+    metadata: mod.metadata,
+  });
+}
+
+const doc = buildOpenApiDocument([...modules.values()], {
+  title: 'Open Mercato API',
+  version: '1.0.0',
+  description: 'Auto-generated OpenAPI specification',
+  servers: [{ url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' }],
+});
+
+// Deep-clone to break shared object references before serializing.
+// The zodToJsonSchema memo cache returns the same object instance for
+// fields like currencyCode that appear on both parent and child schemas.
+// A naive WeakSet-based circular-ref guard would drop the second occurrence,
+// causing properties to vanish from the generated spec (while the field
+// still appears in the 'required' array, since those are plain strings).
+const deepClone = (v, ancestors = []) => {
+  if (v === null || typeof v !== 'object') return v;
+  if (typeof v === 'bigint') return Number(v);
+  if (typeof v === 'function') return undefined;
+  if (ancestors.includes(v)) return undefined;  // true circular ref
+  const next = [...ancestors, v];
+  if (Array.isArray(v)) return v.map((item) => deepClone(item, next));
+  const out = {};
+  for (const [k, val] of Object.entries(v)) {
+    const cloned = deepClone(val, next);
+    if (cloned !== undefined) out[k] = cloned;
+  }
+  return out;
+};
+process.stdout.write(JSON.stringify(deepClone(doc), (_, v) =>
+  typeof v === 'bigint' ? Number(v) : v
+));
+`
+
+  // Plugin: stub next/* imports (not available outside Next.js app context)
+  const stubNextPlugin = {
+    name: 'stub-next',
+    setup(build: any) {
+      build.onResolve({ filter: /^next($|\/)/ }, () => ({
+        path: 'next-stub',
+        namespace: 'next-stub',
+      }))
+      build.onLoad({ filter: /.*/, namespace: 'next-stub' }, () => ({
+        contents: [
+          'const p = new Proxy(function(){}, {',
+          '  get(_, k) { return k === "__esModule" ? true : k === "default" ? p : p; },',
+          '  apply() { return p; },',
+          '  construct() { return p; },',
+          '});',
+          'export default p;',
+          'export const NextRequest = p, NextResponse = p, headers = p, cookies = p;',
+          'export const redirect = p, notFound = p, useRouter = p, usePathname = p;',
+          'export const useSearchParams = p, permanentRedirect = p, revalidatePath = p;',
+        ].join('\n'),
+        loader: 'js' as const,
+      }))
+    },
+  }
+
+  // Plugin: resolve workspace imports, aliases, and subpath imports
+  const appRoot = path.join(projectRoot, 'apps', 'mercato')
+  const resolveWorkspacePlugin = {
+    name: 'resolve-workspace',
+    setup(build: any) {
+      // @open-mercato/<pkg>/<path> → packages/<pkg>/src/<path>.ts
+      build.onResolve({ filter: /^@open-mercato\// }, (args: any) => {
+        const withoutScope = args.path.slice('@open-mercato/'.length)
+        const slashIdx = withoutScope.indexOf('/')
+        const pkg = slashIdx === -1 ? withoutScope : withoutScope.slice(0, slashIdx)
+        const rest = slashIdx === -1 ? '' : withoutScope.slice(slashIdx + 1)
+
+        const base = rest
+          ? path.join(projectRoot, 'packages', pkg, 'src', rest)
+          : path.join(projectRoot, 'packages', pkg, 'src', 'index')
+
+        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx']) {
+          if (fs.existsSync(base + ext)) return { path: base + ext }
+        }
+        return undefined
+      })
+
+      // @/.mercato/* → apps/mercato/.mercato/* (tsconfig paths)
+      build.onResolve({ filter: /^@\/\.mercato\// }, (args: any) => {
+        const rest = args.path.slice('@/'.length) // '.mercato/generated/...'
+        const base = path.join(appRoot, rest)
+        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx', '']) {
+          if (fs.existsSync(base + ext)) return { path: base + ext }
+        }
+        return undefined
+      })
+
+      // @/* → apps/mercato/src/* (tsconfig paths)
+      build.onResolve({ filter: /^@\// }, (args: any) => {
+        const rest = args.path.slice('@/'.length)
+        const base = path.join(appRoot, 'src', rest)
+        for (const ext of ['.ts', '.tsx', '/index.ts', '/index.tsx']) {
+          if (fs.existsSync(base + ext)) return { path: base + ext }
+        }
+        return undefined
+      })
+
+      // #generated/* → packages/core/generated/* (Node subpath imports)
+      build.onResolve({ filter: /^#generated\// }, (args: any) => {
+        const rest = args.path.slice('#generated/'.length)
+        const coreGenerated = path.join(projectRoot, 'packages', 'core', 'generated')
+        const base = path.join(coreGenerated, rest)
+        for (const ext of ['.ts', '/index.ts']) {
+          if (fs.existsSync(base + ext)) return { path: base + ext }
+        }
+        return undefined
+      })
+    },
+  }
+
+  // Plugin: externalize installed packages, stub missing ones
+  const nodeBuiltins = new Set([
+    'assert', 'buffer', 'child_process', 'cluster', 'console', 'constants',
+    'crypto', 'dgram', 'dns', 'domain', 'events', 'fs', 'http', 'http2',
+    'https', 'module', 'net', 'os', 'path', 'perf_hooks', 'process',
+    'punycode', 'querystring', 'readline', 'repl', 'stream', 'string_decoder',
+    'sys', 'timers', 'tls', 'tty', 'url', 'util', 'v8', 'vm', 'wasi',
+    'worker_threads', 'zlib', 'async_hooks', 'diagnostics_channel', 'inspector',
+    'trace_events',
+  ])
+  const externalNonWorkspacePlugin = {
+    name: 'external-non-workspace',
+    setup(build: any) {
+      build.onResolve({ filter: /^[^./]/ }, (args: any) => {
+        if (args.path.startsWith('@open-mercato/')) return undefined
+        if (args.path.startsWith('@/')) return undefined
+        if (args.path.startsWith('#generated/')) return undefined
+        if (args.path.startsWith('next')) return undefined
+        // Let esbuild handle Node builtins (with or without node: prefix)
+        if (args.path.startsWith('node:')) return undefined
+        const topLevel = args.path.split('/')[0]
+        if (nodeBuiltins.has(topLevel)) return undefined
+
+        // Extract package name (handle scoped packages like @mikro-orm/core)
+        const pkgName = args.path.startsWith('@')
+          ? args.path.split('/').slice(0, 2).join('/')
+          : topLevel
+        const pkgDir = path.join(projectRoot, 'node_modules', pkgName)
+        if (fs.existsSync(pkgDir)) return { external: true }
+
+        // Package not installed — provide CJS stub (allows any named import)
+        return { path: args.path, namespace: 'missing-pkg' }
+      })
+      build.onLoad({ filter: /.*/, namespace: 'missing-pkg' }, () => ({
+        contents: 'var h={get:(_,k)=>k==="__esModule"?true:p};var p=new Proxy(function(){return p},{get:h.get,apply:()=>p,construct:()=>p});module.exports=p;',
+        loader: 'js' as const,
+      }))
+    },
+  }
+
+  try {
+    await esbuild.build({
+      stdin: {
+        contents: entryScript,
+        resolveDir: projectRoot,
+        sourcefile: 'openapi-entry.ts',
+        loader: 'ts',
+      },
+      bundle: true,
+      format: 'esm',
+      platform: 'node',
+      target: 'node18',
+      outfile: bundlePath,
+      write: true,
+      tsconfig: tsconfigPath,
+      logLevel: 'silent',
+      jsx: 'automatic',
+      plugins: [stubNextPlugin, resolveWorkspacePlugin, externalNonWorkspacePlugin],
+    })
+
+    const stdout = execFileSync(process.execPath, [bundlePath], {
+      timeout: 60_000,
+      maxBuffer: 20 * 1024 * 1024,
+      encoding: 'utf-8',
+      env: { ...process.env, NODE_NO_WARNINGS: '1' },
+      cwd: projectRoot,
+    })
+
+    const lastLine = stdout.trim().split('\n').pop()!
+    const doc = JSON.parse(lastLine) as Record<string, any>
+
+    if (!quiet) {
+      const pathCount = Object.keys(doc.paths || {}).length
+      const withBody = Object.values(doc.paths || {}).reduce((n: number, methods: any) => {
+        for (const m of Object.values(methods)) {
+          if ((m as any)?.requestBody) n++
+        }
+        return n
+      }, 0)
+      console.log(`[OpenAPI] Bundle approach: ${pathCount} paths, ${withBody} with requestBody schemas`)
+    }
+
+    return doc
+  } catch (err) {
+    const errMsg = err instanceof Error ? err.message : String(err)
+    const stderr = (err as any)?.stderr
+    const esbuildErrors = (err as any)?.errors as Array<{ text: string; location?: { file: string } }> | undefined
+    if (!quiet) {
+      console.log(`[OpenAPI] Bundle approach failed, will use static fallback: ${errMsg.split('\n')[0]}`)
+      if (esbuildErrors?.length) {
+        const unique = new Map<string, string>()
+        for (const e of esbuildErrors) {
+          const key = e.text
+          if (!unique.has(key)) unique.set(key, e.location?.file ?? '')
+        }
+        for (const [text, file] of [...unique.entries()].slice(0, 10)) {
+          console.log(`[OpenAPI]   ${text}${file ? ` (${path.basename(file)})` : ''}`)
+        }
+        if (unique.size > 10) console.log(`[OpenAPI]   ... and ${unique.size - 10} more`)
+      }
+      if (stderr) {
+        for (const line of String(stderr).trim().split('\n').slice(0, 3)) {
+          console.log(`[OpenAPI]   ${line}`)
+        }
+      }
+    }
+    return null
+  } finally {
+    // Clean up old files from previous tsx-based approach
+    for (const file of ['_openapi-register.mjs', '_openapi-loader.mjs', '_next-stub.cjs']) {
+      try { fs.unlinkSync(path.join(cacheDir, file)) } catch {}
+    }
+  }
+}
+
 /**
  * Build OpenAPI paths from discovered routes.
  * Extracts basic operation info from route files statically.
@@ -246,32 +536,43 @@ export async function generateOpenApi(options: GenerateOpenApiOptions): Promise<
     console.log(`[OpenAPI] Found ${routes.length} API route files`)
   }
 
-  // Build OpenAPI paths from routes
-  const paths = buildOpenApiPaths(routes)
-  const pathCount = Object.keys(paths).length
-
-  // Build OpenAPI document
-  const doc = {
-    openapi: '3.1.0',
-    info: {
-      title: 'Open Mercato API',
-      version: '1.0.0',
-      description: 'Auto-generated OpenAPI specification',
-    },
-    servers: [
-      { url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' },
-    ],
-    paths,
-    components: {
-      securitySchemes: {
-        bearerAuth: {
-          type: 'http',
-          scheme: 'bearer',
-          bearerFormat: 'JWT',
-          description: 'Send an `Authorization: Bearer <token>` header with a valid API token.',
+  // Determine project root (cli package is at packages/cli/src/lib/generators/)
+  const projectRoot = path.resolve(
+    path.dirname(new URL(import.meta.url).pathname),
+    '../../../../..'
+  )
+
+  // Try esbuild bundle approach first — produces full requestBody/response schemas
+  let doc: Record<string, any> | null = await generateOpenApiViaBundle(routes, projectRoot, quiet)
+
+  // Fallback to static regex approach (extracts operationId/summary/tags but no schemas)
+  if (!doc) {
+    if (!quiet) {
+      console.log('[OpenAPI] Falling back to static regex approach')
+    }
+    const paths = buildOpenApiPaths(routes)
+    doc = {
+      openapi: '3.1.0',
+      info: {
+        title: 'Open Mercato API',
+        version: '1.0.0',
+        description: 'Auto-generated OpenAPI specification',
+      },
+      servers: [
+        { url: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000' },
+      ],
+      paths,
+      components: {
+        securitySchemes: {
+          bearerAuth: {
+            type: 'http',
+            scheme: 'bearer',
+            bearerFormat: 'JWT',
+            description: 'Send an `Authorization: Bearer <token>` header with a valid API token.',
+          },
         },
       },
-    },
+    }
   }
 
   const output = JSON.stringify(doc, null, 2)
@@ -295,6 +596,7 @@ export async function generateOpenApi(options: GenerateOpenApiOptions): Promise<
 
   if (!quiet) {
     logGenerationResult(outFile, true)
+    const pathCount = Object.keys(doc.paths || {}).length
     console.log(`[OpenAPI] Generated ${pathCount} API paths`)
   }