@rotorsoft/act-http 1.11.1 → 1.11.3

package/dist/hono/index.js

@@ -1,16 +1,16 @@
 import {
   make_dispatch
-} from "../chunk-5KZI37IT.js";
+} from "../chunk-QSH2Y3YR.js";
 import {
   SseConnectionCounter,
   fireAndForget,
   resolveSseConfig,
   runSseSubscription,
   toApiError
-} from "../chunk-FSN52BXM.js";
+} from "../chunk-YEDAY2PC.js";
 import "../chunk-WZ6QI2OI.js";
-import "../chunk-EERALS5E.js";
-import "../chunk-MKD3SM3N.js";
+import "../chunk-CVCTDLJA.js";
+import "../chunk-BOJG4555.js";
 import "../chunk-PZ5AY32C.js";
 
 // ../../node_modules/.pnpm/@hono+zod-validator@0.9.1_hono@4.13.13_zod@4.6.7/node_modules/@hono/zod-validator/dist/index.mjs

package/dist/hono/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../node_modules/.pnpm/@hono+zod-validator@0.9.1_hono@4.13.13_zod@4.6.7/node_modules/@hono/zod-validator/src/index.ts","../../src/hono/index.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport type { Context, Env, Input, MiddlewareHandler, TypedResponse, ValidationTargets } from 'hono'\nimport { validator } from 'hono/validator'\nimport type { InferInput } from 'hono/validator'\nimport type * as v3 from 'zod/v3'\nimport type { ZodSafeParseResult as v4ZodSafeParseResult } from 'zod/v4'\nimport type * as v4 from 'zod/v4/core'\n\ntype ZodSchema = v3.ZodType | v4.$ZodType\ntype ZodError<T extends ZodSchema> = T extends v4.$ZodType\n  ? v4.$ZodError<v4.output<T>>\n  : v3.ZodError\ntype ZodSafeParseResult<T, T2, T3 extends ZodSchema> = T3 extends v4.$ZodType\n  ? v4ZodSafeParseResult<T>\n  : v3.SafeParseReturnType<T, T2>\ntype zInput<T> = T extends v3.ZodType ? v3.input<T> : T extends v4.$ZodType ? v4.input<T> : never\ntype zOutput<T> = T extends v3.ZodType ? v3.output<T> : T extends v4.$ZodType ? v4.output<T> : never\ntype zInfer<T> = T extends v3.ZodType ? v3.infer<T> : T extends v4.$ZodType ? v4.infer<T> : never\n\n// Failure variant of `safeParseAsync`'s return value.\n// Mirrors the runtime body returned by `c.json(result, 400)` on validation failure.\ntype ZodValidatorFailureBody<T extends ZodSchema> = T extends v4.$ZodType\n  ? Extract<v4ZodSafeParseResult<v4.output<T>>, { success: false }>\n  : T extends v3.ZodType\n    ? Extract<v3.SafeParseReturnType<v3.input<T>, v3.output<T>>, { success: false }>\n    : never\n\ntype ZodValidatorFailureResponse<T extends ZodSchema> = Response &\n  TypedResponse<ZodValidatorFailureBody<T>, 400, 'json'>\n\nexport type Hook<\n  T,\n  E extends Env,\n  P extends string,\n  Target extends keyof ValidationTargets = keyof ValidationTargets,\n  O = {},\n  Schema extends ZodSchema = any,\n> = (\n  result: ({ success: true; data: T } | { success: false; error: ZodError<Schema>; data: T }) & {\n    target: Target\n  },\n  c: Context<E, P>\n) => Response | void | TypedResponse<O> | Promise<Response | void | TypedResponse<O>>\n\ntype HasUndefined<T> = undefined extends T ? true : false\n\ntype ExtractValidationResponse<VF> = VF extends (value: any, c: any) => infer R\n  ? R extends Promise<infer PR>\n    ? PR extends TypedResponse<infer T, infer S, infer F>\n      ? Response & TypedResponse<T, S, F>\n      : PR extends Response\n        ? PR\n        : PR extends undefined\n          ? never\n          : never\n    : R extends TypedResponse<infer T, infer S, infer F>\n      ? Response & TypedResponse<T, S, F>\n      : R extends Response\n        ? R\n        : R extends undefined\n          ? never\n          : never\n  : never\n\ntype ValidationFunctionOption<T extends ZodSchema, Target extends keyof ValidationTargets> = {\n  validationFunction: (\n    schema: T,\n    value: ValidationTargets[Target]\n  ) => ZodSafeParseResult<any, any, T> | Promise<ZodSafeParseResult<any, any, T>>\n}\n\ntype DefaultInput<Target extends keyof ValidationTargets, In, Out> = {\n  in: HasUndefined<In> extends true\n    ? {\n        [K in Target]?: [In] extends [ValidationTargets[K]] ? In : InferInput<In, K>\n      }\n    : {\n        [K in Target]: [In] extends [ValidationTargets[K]] ? In : InferInput<In, K>\n      }\n  out: { [K in Target]: Out }\n}\n\n// without hook (with or without options)\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n>(\n  target: Target,\n  schema: T,\n  hook?: undefined,\n  options?: ValidationFunctionOption<T, Target>\n): MiddlewareHandler<E, P, V, ZodValidatorFailureResponse<T>>\n\n// with hook and options\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  HookFn extends Hook<InferredValue, E, P, Target, {}, T>,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n  InferredValue = zInfer<T>,\n>(\n  target: Target,\n  schema: T,\n  hook?: HookFn,\n  options?: ValidationFunctionOption<T, Target>\n): MiddlewareHandler<E, P, V, ExtractValidationResponse<HookFn>>\n\n// implementation\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  HookFn extends Hook<InferredValue, E, P, Target, {}, T>,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n  InferredValue = zInfer<T>,\n>(\n  target: Target,\n  schema: T,\n  hook?: HookFn,\n  options?: ValidationFunctionOption<T, Target>\n):\n  | MiddlewareHandler<E, P, V, ZodValidatorFailureResponse<T>>\n  | MiddlewareHandler<E, P, V, ExtractValidationResponse<HookFn>> {\n  const caseInsensitiveKeymap =\n    target === 'header' && ('_def' in schema || '_zod' in schema)\n      ? Object.fromEntries(\n          // @ts-expect-error the schema is a Zod Schema\n          Object.keys('in' in schema ? schema.in.shape : schema.shape).map((key) => [\n            key.toLowerCase(),\n            key,\n          ])\n        )\n      : undefined\n\n  // @ts-expect-error not typed well\n  return validator(target, async (value: ValidationTargets[Target], c) => {\n    let validatorValue = value\n\n    // in case where our `target` === `header`, Hono parses all of the headers into lowercase.\n    // this might not match the Zod schema, so we want to make sure that we account for that when parsing the schema.\n    if (caseInsensitiveKeymap) {\n      validatorValue = Object.fromEntries(\n        Object.entries(value).map(([key, value]) => [caseInsensitiveKeymap[key] || key, value])\n      )\n    }\n\n    const result =\n      options && options.validationFunction\n        ? await options.validationFunction(schema, validatorValue)\n        : // @ts-expect-error z4.$ZodType has safeParseAsync\n          await schema.safeParseAsync(validatorValue)\n\n    if (hook) {\n      const hookResult = await hook({ data: validatorValue, ...result, target }, c)\n      if (hookResult) {\n        if (hookResult instanceof Response) {\n          return hookResult\n        }\n\n        if ('response' in hookResult) {\n          return hookResult.response\n        }\n      }\n    }\n\n    if (!result.success) {\n      return c.json(result, 400)\n    }\n\n    return result.data as zInfer<T>\n  })\n}\n\nexport const zValidator: typeof zValidatorFunction = zValidatorFunction\n","/**\n * @packageDocumentation\n * @module act-http/hono\n *\n * Hono subpath for the auto-generated API epic (#835). Walks the\n * registry of a built `Act` once at function call and emits a Hono\n * app with one `POST /actions/<name>` route per registered action,\n * Zod-validated bodies, and the shared error envelope.\n *\n * Usage:\n *\n * ```ts\n * import { hono } from \"@rotorsoft/act-http/hono\";\n *\n * const api = hono(app, {\n *   // the extractor receives `unknown`; it is the Hono Context\n *   actor: (c) => ({ id: (c as Context).req.header(\"x-user-id\")!, name: \"...\" }),\n *   stream: (action, input, c) => `tenant-${c.req.header(\"x-tenant\")}`,\n * });\n *\n * // Mounts at /api by default — pass `basePath` to override.\n * // POST /api/actions/OpenTicket  body: { title }  → 200 Snapshot[] | 4xx ApiError\n * ```\n *\n * The route shape matches the flat tRPC sibling at\n * `@rotorsoft/act-http/trpc`: one endpoint per action, no\n * state-name tier. Action names are unique across the registry —\n * the framework enforces no duplicates — so an extra namespace\n * level would be overhead. Queries live in a follow-up; this\n * slice is mutations only.\n *\n * **Actor lives on the context.** The generator wires an internal\n * middleware that runs the host's\n * {@link HonoOptions.actor | actor extractor} once per call and\n * stashes the resolved {@link Actor} under `c.get(\"actor\")`. Every\n * generated route reads from there — auth resolves at one seam,\n * downstream middleware (logging, tracing) sees the same actor.\n * The middleware factory is also exported as {@link authenticated}\n * for hosts that want to compose it into their own Hono chain\n * alongside hand-written routes.\n *\n * Composes the shared utilities at `@rotorsoft/act-http/api`:\n * {@link ActorExtractor} for the auth seam, {@link toApiError} for\n * the uniform error → status / code mapping, {@link withIdempotency}\n * for `Idempotency-Key` dedup. Three transports (tRPC, this one,\n * OpenAPI) ride the same utilities so a client speaking two of\n * them never sees two shapes for the same framework error.\n */\nimport { zValidator } from \"@hono/zod-validator\";\nimport type { Actor } from \"@rotorsoft/act\";\nimport type { IdempotencyStore } from \"@rotorsoft/act-ops/idempotency\";\nimport type { Context, MiddlewareHandler } from \"hono\";\nimport { Hono } from \"hono\";\nimport { streamSSE } from \"hono/streaming\";\nimport { type ActSurface, make_dispatch } from \"../api/dispatch.js\";\nimport {\n  type ActorExtractor,\n  type ApiError,\n  fireAndForget,\n  resolveSseConfig,\n  runSseSubscription,\n  SseConnectionCounter,\n  type SseOptions,\n  toApiError,\n} from \"../api/index.js\";\n\n/**\n * Hono context variables this subpath contributes. The generic on\n * the returned middleware threads it through so routes downstream\n * of {@link authenticated} see `c.get(\"actor\")` typed without a\n * manual cast.\n */\nexport type ActMiddlewareVariables = {\n  actor: Actor;\n};\n\n/**\n * Per-call options for {@link hono}. The host supplies the four\n * seams the package can't make decisions on:\n *\n * - `actor` — auth resolver. Receives the Hono context, returns the\n *   `Actor` that flows onto `c.get(\"actor\")` for every generated\n *   route (via an internal {@link authenticated}).\n * - `stream` — stream-id resolver. Receives the action name, the\n *   validated body, and the Hono context; returns the target\n *   stream. Singleton aggregates return a constant; per-tenant\n *   aggregates pull from headers, path, or body.\n * - `expectedVersion` (optional) — optimistic-concurrency resolver.\n *   Hosts typically read it from an `If-Match` header on the\n *   request, or from the client's last-known snapshot. Returning\n *   `undefined` skips the check for that call — handy when only\n *   some actions are concurrency-sensitive.\n * - `idempotency` (optional) — when set, the route honors\n *   `Idempotency-Key` via {@link withIdempotency}. The host\n *   supplies the `IdempotencyStore`; `keyFrom` defaults to reading\n *   the `Idempotency-Key` header. A duplicate of a key that already\n *   succeeded gets `409 Conflict` — the contract intentionally doesn't\n *   cache the original handler's result. A duplicate that arrives\n *   while the original is still running gets a retryable\n *   `503` + `Retry-After` instead, because the original may yet fail\n *   and release the key, and a client told \"already used\" would never\n *   retry.\n * - `basePath` (optional, default `\"/api\"`) — Hono basePath the\n *   routes mount under.\n */\nexport type HonoOptions = {\n  readonly actor: ActorExtractor;\n  readonly stream: (\n    action_name: string,\n    input: unknown,\n    c: Context\n  ) => string | Promise<string>;\n  readonly expectedVersion?: (\n    action_name: string,\n    input: unknown,\n    c: Context\n  ) => number | undefined | Promise<number | undefined>;\n  readonly idempotency?: {\n    readonly store: IdempotencyStore;\n    readonly keyFrom?: (c: Context) => string | undefined;\n  };\n  /**\n   * Optional SSE wiring. When set, the generator emits one\n   * `GET <basePath>/sse/<stateName>?stream=<streamId>` per unique\n   * state name in the registry. The endpoint runs the host\n   * {@link actor} extractor, looks up the streamId from\n   * `?stream=...`, opens a `text/event-stream`, yields the cached\n   * state (if any), and forwards every patch published to the\n   * shared {@link SseOptions.channel}. A heartbeat keeps proxies\n   * from idling the connection out; the per-process connection cap\n   * returns `503 Service Unavailable` (with `Retry-After: 1`) when\n   * full so operators never see silent stalls.\n   *\n   * Off by default — most APIs don't expose live state to every\n   * client, and opening one is widening both the auth and cost\n   * surface.\n   */\n  readonly sse?: SseOptions;\n  readonly basePath?: string;\n};\n\n/**\n * Build a Hono middleware that runs an {@link ActorExtractor} once\n * per call and stashes the resolved {@link Actor} under\n * `c.set(\"actor\", ...)` so downstream routes can read it via\n * `c.get(\"actor\")`. The generator at {@link hono} uses this\n * internally; it's also exported so hosts that want to compose\n * their own route chain (logging, tracing, custom auth flavors)\n * can wire it directly:\n *\n * ```ts\n * import { Hono } from \"hono\";\n * import { authenticated, type ActMiddlewareVariables } from \"@rotorsoft/act-http/hono\";\n *\n * const api = new Hono<{ Variables: ActMiddlewareVariables }>();\n * api.use(\"*\", authenticated((c) => resolveUserFromJwt(c)));\n * api.get(\"/me\", (c) => c.json(c.get(\"actor\"))); // typed\n * ```\n *\n * Errors thrown by the extractor surface as `401 Unauthorized` with\n * the shared {@link ApiError} envelope.\n */\nexport function authenticated(\n  extractor: ActorExtractor\n): MiddlewareHandler<{ Variables: ActMiddlewareVariables }> {\n  return async (c, next) => {\n    try {\n      const actor = await extractor(c);\n      c.set(\"actor\", actor);\n      await next();\n    } catch (err) {\n      const body: ApiError = {\n        error: \"Unauthorized\",\n        detail: err instanceof Error ? err.message : undefined,\n        code: \"UNAUTHORIZED\",\n      };\n      return c.json(body, 401);\n    }\n  };\n}\n\nconst default_key_from = (c: Context): string | undefined =>\n  c.req.header(\"idempotency-key\");\n\n/**\n * Build a typed Hono REST surface from a built `Act` instance.\n *\n * Walks `app.registry.actions` once and emits one\n * `POST /actions/<actionName>` per action under the configured\n * `basePath` (default `/api`). Each route:\n *\n * 1. Runs the internal {@link authenticated} middleware —\n *    `options.actor` resolves the {@link Actor} once and stashes\n *    it under `c.get(\"actor\")`.\n * 2. Validates the JSON body against the action's Zod schema via\n *    `@hono/zod-validator`. Failures short-circuit with `422`.\n * 3. Resolves the target stream via\n *    `options.stream(name, input, c)`.\n * 4. (Optionally) resolves `expectedVersion` for optimistic\n *    concurrency.\n * 5. (Optionally) claims the `Idempotency-Key` via\n *    {@link withIdempotency} — responds `409` on a duplicate of a\n *    committed key, `503` on a duplicate of one still in flight.\n * 6. Calls\n *    `app.do(name, { stream, actor, expectedVersion? }, input)`.\n * 7. Maps any thrown framework error onto the shared\n *    {@link ApiError} envelope via {@link toApiError}, returning\n *    the conventional HTTP status (`409` / `412` for concurrency,\n *    `422` for validation, `400` for non-retryable, etc.).\n *\n * @param app A built `Act` orchestrator.\n * @param options Auth, stream, expected-version, idempotency, and\n *   base-path seams.\n * @returns A Hono app covering every registered action under\n *   `<basePath>/actions/<name>`.\n */\nexport function hono<TApp extends ActSurface = ActSurface>(\n  app: TApp,\n  options: HonoOptions\n): Hono<{ Variables: ActMiddlewareVariables }> {\n  const base_path = options.basePath ?? \"/api\";\n  const api = new Hono<{ Variables: ActMiddlewareVariables }>().basePath(\n    base_path\n  );\n  api.use(\"*\", authenticated(options.actor));\n\n  const key_from = options.idempotency?.keyFrom ?? default_key_from;\n  const dispatch = make_dispatch<Context>(\n    app,\n    options,\n    options.idempotency?.store\n  );\n\n  // Wire SSE subscriptions before the mutation routes so the\n  // `/sse/*` paths sit alongside `/actions/*`. The cap counter is\n  // shared by every state-name's GET route on this generator\n  // instance so a noisy room on one state doesn't get a free pass\n  // on another.\n  if (options.sse) {\n    const sse_config = resolveSseConfig(options.sse);\n    const sse_counter = new SseConnectionCounter(sse_config.maxConnections);\n    const state_names = new Set(\n      Object.values(app.registry.actions).map((a) => a.name)\n    );\n    for (const state_name of state_names) {\n      api.get(`/sse/${state_name}`, async (c) => {\n        const stream_id = c.req.query(\"stream\");\n        if (!stream_id) {\n          const body: ApiError = {\n            error: \"BadRequest\",\n            detail: \"stream query parameter is required\",\n            code: \"BAD_REQUEST\",\n          };\n          return c.json(body, 400);\n        }\n        if (!sse_counter.acquire()) {\n          c.header(\"Retry-After\", \"1\");\n          const body: ApiError = {\n            error: \"ServiceUnavailable\",\n            detail: \"max concurrent SSE connections reached\",\n            code: \"SSE_BUSY\",\n          };\n          return c.json(body, 503);\n        }\n        // The route already acquired the slot above so streamSSE\n        // could return `503` before writing headers if the cap was\n        // full. The shared loop runs without accounting; the route\n        // releases the slot in `finally`.\n        const controller = new AbortController();\n        return streamSSE(c, async (sse_stream) => {\n          sse_stream.onAbort(() => controller.abort());\n          const heartbeat = setInterval(() => {\n            fireAndForget(() =>\n              sse_stream.writeSSE({ event: \"ping\", data: \"\" })\n            );\n          }, sse_config.heartbeatMs);\n          try {\n            for await (const frame of runSseSubscription(\n              sse_config.channel,\n              stream_id,\n              undefined,\n              controller.signal,\n              { maxPending: sse_config.maxPendingPerConnection }\n            )) {\n              await sse_stream.writeSSE({\n                event: frame.kind,\n                data: JSON.stringify(frame.data),\n              });\n            }\n          } finally {\n            clearInterval(heartbeat);\n            sse_counter.release();\n          }\n        });\n      });\n    }\n  }\n\n  for (const [action_name, state] of Object.entries(app.registry.actions)) {\n    const schema = state.actions[action_name];\n    api.post(\n      `/actions/${action_name}`,\n      // Custom hook funnels body-schema failures through the same\n      // ApiError envelope + 422 status an in-`do` ValidationError maps\n      // to (ERROR_MAP.ValidationError). Without it, @hono/zod-validator\n      // short-circuits with its own 400 + raw body — two statuses and\n      // two shapes for the same \"malformed input\" failure class on one\n      // endpoint. The OpenAPI doc only documents the 422/ApiError path.\n      // A JSON body that doesn't parse gets the same envelope: the\n      // validator would throw its own plain-text 400 before the hook runs.\n      async (c, next) => {\n        if (is_json(c.req.header(\"content-type\")))\n          try {\n            await c.req.json();\n          } catch {\n            return c.json(\n              validation_error(\"Malformed JSON in request body\"),\n              422\n            );\n          }\n        await next();\n      },\n      zValidator(\"json\", schema as never, (result, c) => {\n        if (!result.success)\n          // `result.error` is a ZodError; the schema's `never` typing\n          // erases its shape, so read `.message` through a narrow cast.\n          return c.json(\n            validation_error((result.error as { message?: string }).message),\n            422\n          );\n      }),\n      async (c) => {\n        try {\n          // The resolvers get the validated value; `app.do` gets the raw\n          // body, because it parses again itself and a second parse of the\n          // validator's output would run every `.transform()` twice. The\n          // json validator only reads a JSON body (no or non-JSON\n          // Content-Type validates `{}`), so take the raw value from the same\n          // place it did: re-reading the body regardless would throw on an\n          // empty request and hand `app.do` a body the resolvers never saw\n          // (#1777). Hono caches the body, so reading it again is free.\n          const input = c.req.valid(\"json\" as never) as unknown;\n          const raw: unknown = is_json(c.req.header(\"content-type\"))\n            ? await c.req.json()\n            : {};\n          const outcome = await dispatch(\n            action_name,\n            input,\n            raw,\n            c,\n            c.get(\"actor\"),\n            () => key_from(c)\n          );\n          if (outcome.kind === \"done\") return c.json(outcome.result);\n          if (outcome.kind === \"missing-key\") {\n            const body: ApiError = {\n              error: \"BadRequest\",\n              detail: \"Idempotency-Key required\",\n              code: \"BAD_REQUEST\",\n            };\n            return c.json(body, 400);\n          }\n          if (outcome.kind === \"in-flight\") {\n            const body: ApiError = {\n              error: \"ServiceUnavailable\",\n              detail:\n                \"Idempotency-Key in flight; the original request has not finished, retry later\",\n              code: \"IN_FLIGHT\",\n            };\n            c.header(\"Retry-After\", \"1\");\n            return c.json(body, 503);\n          }\n          const body: ApiError = {\n            error: \"Conflict\",\n            detail: \"Idempotency-Key already used; original result not cached\",\n            code: \"CONFLICT\",\n          };\n          return c.json(body, 409);\n        } catch (err) {\n          const { status, body } = toApiError(err);\n          // Hono types narrow `status` to its known status-number union;\n          // `toApiError` returns a numeric status from a closed set that\n          // matches but TypeScript can't prove it through the union.\n          return c.json(body, status as 400 | 409 | 410 | 412 | 422 | 500);\n        }\n      }\n    );\n  }\n\n  return api;\n}\n\n/**\n * Hono's json validator reads the body only for a JSON Content-Type\n * (`application/json`, or a `+json` suffix, optionally with parameters);\n * anything else validates `{}`. Same test, so the route reads the raw body\n * exactly when the validator did.\n */\nconst JSON_CONTENT_TYPE =\n  /^application\\/([a-z-.]+\\+)?json(;\\s*[a-zA-Z0-9-]+=([^;]+))*$/i;\nfunction validation_error(detail: string | undefined): ApiError {\n  return { error: \"ValidationError\", detail, code: \"VALIDATION\" };\n}\n\nfunction is_json(content_type: string | undefined): boolean {\n  return !!content_type && JSON_CONTENT_TYPE.test(content_type);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuHA,SAAS,mBAYP,QACA,QACA,MACA,SAGgE;AAChE,QAAM,wBACJ,WAAW,aAAa,UAAU,UAAU,UAAU,UAClD,OAAO,YAEL,OAAO,KAAK,QAAQ,SAAS,OAAO,GAAG,QAAQ,OAAO,KAAK,EAAE,IAAA,CAAK,QAAQ,CACxE,IAAI,YAAY,GAChB,GACF,CAAC,CACH,IACA;AAGN,SAAO,UAAU,QAAQ,OAAO,OAAkC,MAAM;AACtE,QAAI,iBAAiB;AAIrB,QAAI,sBACF,kBAAiB,OAAO,YACtB,OAAO,QAAQ,KAAK,EAAE,IAAA,CAAK,CAAC,KAAKA,MAAA,MAAW,CAAC,sBAAsB,GAAA,KAAQ,KAAKA,MAAK,CAAC,CACxF;AAGF,UAAM,SACJ,WAAW,QAAQ,qBACf,MAAM,QAAQ,mBAAmB,QAAQ,cAAc,IAEvD,MAAM,OAAO,eAAe,cAAc;AAEhD,QAAI,MAAM;AACR,YAAM,aAAa,MAAM,KAAK;QAAE,MAAM;QAAgB,GAAG;QAAQ;MAAO,GAAG,CAAC;AAC5E,UAAI,YAAY;AACd,YAAI,sBAAsB,SACxB,QAAO;AAGT,YAAI,cAAc,WAChB,QAAO,WAAW;MAEtB;IACF;AAEA,QAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK,QAAQ,GAAG;AAG3B,WAAO,OAAO;EAChB,CAAC;AACH;AAEA,IAAa,aAAwC;;;ACxIrD,SAAS,YAAY;AACrB,SAAS,iBAAiB;AA6GnB,SAAS,cACd,WAC0D;AAC1D,SAAO,OAAO,GAAG,SAAS;AACxB,QAAI;AACF,YAAM,QAAQ,MAAM,UAAU,CAAC;AAC/B,QAAE,IAAI,SAAS,KAAK;AACpB,YAAM,KAAK;AAAA,IACb,SAAS,KAAK;AACZ,YAAM,OAAiB;AAAA,QACrB,OAAO;AAAA,QACP,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,QAC7C,MAAM;AAAA,MACR;AACA,aAAO,EAAE,KAAK,MAAM,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAEA,IAAM,mBAAmB,CAAC,MACxB,EAAE,IAAI,OAAO,iBAAiB;AAkCzB,SAAS,KACd,KACA,SAC6C;AAC7C,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,MAAM,IAAI,KAA4C,EAAE;AAAA,IAC5D;AAAA,EACF;AACA,MAAI,IAAI,KAAK,cAAc,QAAQ,KAAK,CAAC;AAEzC,QAAM,WAAW,QAAQ,aAAa,WAAW;AACjD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA,QAAQ,aAAa;AAAA,EACvB;AAOA,MAAI,QAAQ,KAAK;AACf,UAAM,aAAa,iBAAiB,QAAQ,GAAG;AAC/C,UAAM,cAAc,IAAI,qBAAqB,WAAW,cAAc;AACtE,UAAM,cAAc,IAAI;AAAA,MACtB,OAAO,OAAO,IAAI,SAAS,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACvD;AACA,eAAW,cAAc,aAAa;AACpC,UAAI,IAAI,QAAQ,UAAU,IAAI,OAAO,MAAM;AACzC,cAAM,YAAY,EAAE,IAAI,MAAM,QAAQ;AACtC,YAAI,CAAC,WAAW;AACd,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB;AACA,YAAI,CAAC,YAAY,QAAQ,GAAG;AAC1B,YAAE,OAAO,eAAe,GAAG;AAC3B,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB;AAKA,cAAM,aAAa,IAAI,gBAAgB;AACvC,eAAO,UAAU,GAAG,OAAO,eAAe;AACxC,qBAAW,QAAQ,MAAM,WAAW,MAAM,CAAC;AAC3C,gBAAM,YAAY,YAAY,MAAM;AAClC;AAAA,cAAc,MACZ,WAAW,SAAS,EAAE,OAAO,QAAQ,MAAM,GAAG,CAAC;AAAA,YACjD;AAAA,UACF,GAAG,WAAW,WAAW;AACzB,cAAI;AACF,6BAAiB,SAAS;AAAA,cACxB,WAAW;AAAA,cACX;AAAA,cACA;AAAA,cACA,WAAW;AAAA,cACX,EAAE,YAAY,WAAW,wBAAwB;AAAA,YACnD,GAAG;AACD,oBAAM,WAAW,SAAS;AAAA,gBACxB,OAAO,MAAM;AAAA,gBACb,MAAM,KAAK,UAAU,MAAM,IAAI;AAAA,cACjC,CAAC;AAAA,YACH;AAAA,UACF,UAAE;AACA,0BAAc,SAAS;AACvB,wBAAY,QAAQ;AAAA,UACtB;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,aAAW,CAAC,aAAa,KAAK,KAAK,OAAO,QAAQ,IAAI,SAAS,OAAO,GAAG;AACvE,UAAM,SAAS,MAAM,QAAQ,WAAW;AACxC,QAAI;AAAA,MACF,YAAY,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASvB,OAAO,GAAG,SAAS;AACjB,YAAI,QAAQ,EAAE,IAAI,OAAO,cAAc,CAAC;AACtC,cAAI;AACF,kBAAM,EAAE,IAAI,KAAK;AAAA,UACnB,QAAQ;AACN,mBAAO,EAAE;AAAA,cACP,iBAAiB,gCAAgC;AAAA,cACjD;AAAA,YACF;AAAA,UACF;AACF,cAAM,KAAK;AAAA,MACb;AAAA,MACA,WAAW,QAAQ,QAAiB,CAAC,QAAQ,MAAM;AACjD,YAAI,CAAC,OAAO;AAGV,iBAAO,EAAE;AAAA,YACP,iBAAkB,OAAO,MAA+B,OAAO;AAAA,YAC/D;AAAA,UACF;AAAA,MACJ,CAAC;AAAA,MACD,OAAO,MAAM;AACX,YAAI;AASF,gBAAM,QAAQ,EAAE,IAAI,MAAM,MAAe;AACzC,gBAAM,MAAe,QAAQ,EAAE,IAAI,OAAO,cAAc,CAAC,IACrD,MAAM,EAAE,IAAI,KAAK,IACjB,CAAC;AACL,gBAAM,UAAU,MAAM;AAAA,YACpB;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,EAAE,IAAI,OAAO;AAAA,YACb,MAAM,SAAS,CAAC;AAAA,UAClB;AACA,cAAI,QAAQ,SAAS,OAAQ,QAAO,EAAE,KAAK,QAAQ,MAAM;AACzD,cAAI,QAAQ,SAAS,eAAe;AAClC,kBAAMC,QAAiB;AAAA,cACrB,OAAO;AAAA,cACP,QAAQ;AAAA,cACR,MAAM;AAAA,YACR;AACA,mBAAO,EAAE,KAAKA,OAAM,GAAG;AAAA,UACzB;AACA,cAAI,QAAQ,SAAS,aAAa;AAChC,kBAAMA,QAAiB;AAAA,cACrB,OAAO;AAAA,cACP,QACE;AAAA,cACF,MAAM;AAAA,YACR;AACA,cAAE,OAAO,eAAe,GAAG;AAC3B,mBAAO,EAAE,KAAKA,OAAM,GAAG;AAAA,UACzB;AACA,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB,SAAS,KAAK;AACZ,gBAAM,EAAE,QAAQ,KAAK,IAAI,WAAW,GAAG;AAIvC,iBAAO,EAAE,KAAK,MAAM,MAA2C;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAQA,IAAM,oBACJ;AACF,SAAS,iBAAiB,QAAsC;AAC9D,SAAO,EAAE,OAAO,mBAAmB,QAAQ,MAAM,aAAa;AAChE;AAEA,SAAS,QAAQ,cAA2C;AAC1D,SAAO,CAAC,CAAC,gBAAgB,kBAAkB,KAAK,YAAY;AAC9D;","names":["value","body"]}
+{"version":3,"sources":["../../../../node_modules/.pnpm/@hono+zod-validator@0.9.1_hono@4.13.13_zod@4.6.7/node_modules/@hono/zod-validator/src/index.ts","../../src/hono/index.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport type { Context, Env, Input, MiddlewareHandler, TypedResponse, ValidationTargets } from 'hono'\nimport { validator } from 'hono/validator'\nimport type { InferInput } from 'hono/validator'\nimport type * as v3 from 'zod/v3'\nimport type { ZodSafeParseResult as v4ZodSafeParseResult } from 'zod/v4'\nimport type * as v4 from 'zod/v4/core'\n\ntype ZodSchema = v3.ZodType | v4.$ZodType\ntype ZodError<T extends ZodSchema> = T extends v4.$ZodType\n  ? v4.$ZodError<v4.output<T>>\n  : v3.ZodError\ntype ZodSafeParseResult<T, T2, T3 extends ZodSchema> = T3 extends v4.$ZodType\n  ? v4ZodSafeParseResult<T>\n  : v3.SafeParseReturnType<T, T2>\ntype zInput<T> = T extends v3.ZodType ? v3.input<T> : T extends v4.$ZodType ? v4.input<T> : never\ntype zOutput<T> = T extends v3.ZodType ? v3.output<T> : T extends v4.$ZodType ? v4.output<T> : never\ntype zInfer<T> = T extends v3.ZodType ? v3.infer<T> : T extends v4.$ZodType ? v4.infer<T> : never\n\n// Failure variant of `safeParseAsync`'s return value.\n// Mirrors the runtime body returned by `c.json(result, 400)` on validation failure.\ntype ZodValidatorFailureBody<T extends ZodSchema> = T extends v4.$ZodType\n  ? Extract<v4ZodSafeParseResult<v4.output<T>>, { success: false }>\n  : T extends v3.ZodType\n    ? Extract<v3.SafeParseReturnType<v3.input<T>, v3.output<T>>, { success: false }>\n    : never\n\ntype ZodValidatorFailureResponse<T extends ZodSchema> = Response &\n  TypedResponse<ZodValidatorFailureBody<T>, 400, 'json'>\n\nexport type Hook<\n  T,\n  E extends Env,\n  P extends string,\n  Target extends keyof ValidationTargets = keyof ValidationTargets,\n  O = {},\n  Schema extends ZodSchema = any,\n> = (\n  result: ({ success: true; data: T } | { success: false; error: ZodError<Schema>; data: T }) & {\n    target: Target\n  },\n  c: Context<E, P>\n) => Response | void | TypedResponse<O> | Promise<Response | void | TypedResponse<O>>\n\ntype HasUndefined<T> = undefined extends T ? true : false\n\ntype ExtractValidationResponse<VF> = VF extends (value: any, c: any) => infer R\n  ? R extends Promise<infer PR>\n    ? PR extends TypedResponse<infer T, infer S, infer F>\n      ? Response & TypedResponse<T, S, F>\n      : PR extends Response\n        ? PR\n        : PR extends undefined\n          ? never\n          : never\n    : R extends TypedResponse<infer T, infer S, infer F>\n      ? Response & TypedResponse<T, S, F>\n      : R extends Response\n        ? R\n        : R extends undefined\n          ? never\n          : never\n  : never\n\ntype ValidationFunctionOption<T extends ZodSchema, Target extends keyof ValidationTargets> = {\n  validationFunction: (\n    schema: T,\n    value: ValidationTargets[Target]\n  ) => ZodSafeParseResult<any, any, T> | Promise<ZodSafeParseResult<any, any, T>>\n}\n\ntype DefaultInput<Target extends keyof ValidationTargets, In, Out> = {\n  in: HasUndefined<In> extends true\n    ? {\n        [K in Target]?: [In] extends [ValidationTargets[K]] ? In : InferInput<In, K>\n      }\n    : {\n        [K in Target]: [In] extends [ValidationTargets[K]] ? In : InferInput<In, K>\n      }\n  out: { [K in Target]: Out }\n}\n\n// without hook (with or without options)\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n>(\n  target: Target,\n  schema: T,\n  hook?: undefined,\n  options?: ValidationFunctionOption<T, Target>\n): MiddlewareHandler<E, P, V, ZodValidatorFailureResponse<T>>\n\n// with hook and options\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  HookFn extends Hook<InferredValue, E, P, Target, {}, T>,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n  InferredValue = zInfer<T>,\n>(\n  target: Target,\n  schema: T,\n  hook?: HookFn,\n  options?: ValidationFunctionOption<T, Target>\n): MiddlewareHandler<E, P, V, ExtractValidationResponse<HookFn>>\n\n// implementation\nfunction zValidatorFunction<\n  T extends ZodSchema,\n  Target extends keyof ValidationTargets,\n  E extends Env,\n  P extends string,\n  HookFn extends Hook<InferredValue, E, P, Target, {}, T>,\n  In = zInput<T>,\n  Out = zOutput<T>,\n  I extends Input = DefaultInput<Target, In, Out>,\n  V extends I = I,\n  InferredValue = zInfer<T>,\n>(\n  target: Target,\n  schema: T,\n  hook?: HookFn,\n  options?: ValidationFunctionOption<T, Target>\n):\n  | MiddlewareHandler<E, P, V, ZodValidatorFailureResponse<T>>\n  | MiddlewareHandler<E, P, V, ExtractValidationResponse<HookFn>> {\n  const caseInsensitiveKeymap =\n    target === 'header' && ('_def' in schema || '_zod' in schema)\n      ? Object.fromEntries(\n          // @ts-expect-error the schema is a Zod Schema\n          Object.keys('in' in schema ? schema.in.shape : schema.shape).map((key) => [\n            key.toLowerCase(),\n            key,\n          ])\n        )\n      : undefined\n\n  // @ts-expect-error not typed well\n  return validator(target, async (value: ValidationTargets[Target], c) => {\n    let validatorValue = value\n\n    // in case where our `target` === `header`, Hono parses all of the headers into lowercase.\n    // this might not match the Zod schema, so we want to make sure that we account for that when parsing the schema.\n    if (caseInsensitiveKeymap) {\n      validatorValue = Object.fromEntries(\n        Object.entries(value).map(([key, value]) => [caseInsensitiveKeymap[key] || key, value])\n      )\n    }\n\n    const result =\n      options && options.validationFunction\n        ? await options.validationFunction(schema, validatorValue)\n        : // @ts-expect-error z4.$ZodType has safeParseAsync\n          await schema.safeParseAsync(validatorValue)\n\n    if (hook) {\n      const hookResult = await hook({ data: validatorValue, ...result, target }, c)\n      if (hookResult) {\n        if (hookResult instanceof Response) {\n          return hookResult\n        }\n\n        if ('response' in hookResult) {\n          return hookResult.response\n        }\n      }\n    }\n\n    if (!result.success) {\n      return c.json(result, 400)\n    }\n\n    return result.data as zInfer<T>\n  })\n}\n\nexport const zValidator: typeof zValidatorFunction = zValidatorFunction\n","/**\n * @packageDocumentation\n * @module act-http/hono\n *\n * Hono subpath of the auto-generated API. Walks the\n * registry of a built `Act` once at function call and emits a Hono\n * app with one `POST /actions/<name>` route per registered action,\n * Zod-validated bodies, and the shared error envelope.\n *\n * Usage:\n *\n * ```ts\n * import { hono } from \"@rotorsoft/act-http/hono\";\n *\n * const api = hono(app, {\n *   // the extractor receives `unknown`; it is the Hono Context\n *   actor: (c) => ({ id: (c as Context).req.header(\"x-user-id\")!, name: \"...\" }),\n *   stream: (action, input, c) => `tenant-${c.req.header(\"x-tenant\")}`,\n * });\n *\n * // Mounts at /api by default — pass `basePath` to override.\n * // POST /api/actions/OpenTicket  body: { title }  → 200 Snapshot[] | 4xx ApiError\n * ```\n *\n * The route shape matches the flat tRPC sibling at\n * `@rotorsoft/act-http/trpc`: one endpoint per action, no\n * state-name tier. Action names are unique across the registry —\n * the framework enforces no duplicates — so an extra namespace\n * level would be overhead. Queries live in a follow-up; this\n * slice is mutations only.\n *\n * **Actor lives on the context.** The generator wires an internal\n * middleware that runs the host's\n * {@link HonoOptions.actor | actor extractor} once per call and\n * stashes the resolved {@link Actor} under `c.get(\"actor\")`. Every\n * generated route reads from there — auth resolves at one seam,\n * downstream middleware (logging, tracing) sees the same actor.\n * The middleware factory is also exported as {@link authenticated}\n * for hosts that want to compose it into their own Hono chain\n * alongside hand-written routes.\n *\n * Composes the shared utilities at `@rotorsoft/act-http/api`:\n * {@link ActorExtractor} for the auth seam, {@link toApiError} for\n * the uniform error → status / code mapping, {@link withIdempotency}\n * for `Idempotency-Key` dedup. Three transports (tRPC, this one,\n * OpenAPI) ride the same utilities so a client speaking two of\n * them never sees two shapes for the same framework error.\n */\nimport { zValidator } from \"@hono/zod-validator\";\nimport type { Actor } from \"@rotorsoft/act\";\nimport type { IdempotencyStore } from \"@rotorsoft/act-ops/idempotency\";\nimport type { Context, MiddlewareHandler } from \"hono\";\nimport { Hono } from \"hono\";\nimport { streamSSE } from \"hono/streaming\";\nimport type { MergePath, TypedResponse } from \"hono/types\";\nimport type { JSONParsed } from \"hono/utils/types\";\nimport {\n  type ActionResult,\n  type ActSurface,\n  type AppActions,\n  type AppStateNames,\n  make_dispatch,\n  type ResolverArgs,\n} from \"../api/dispatch.js\";\nimport {\n  type ActorExtractor,\n  type ApiError,\n  fireAndForget,\n  resolveSseConfig,\n  runSseSubscription,\n  SseConnectionCounter,\n  type SseOptions,\n  toApiError,\n} from \"../api/index.js\";\n\n/**\n * Hono context variables this subpath contributes. The generic on\n * the returned middleware threads it through so routes downstream\n * of {@link authenticated} see `c.get(\"actor\")` typed without a\n * manual cast.\n */\nexport type ActMiddlewareVariables = {\n  actor: Actor;\n};\n\n/**\n * Per-call options for {@link hono}. The host supplies the four\n * seams the package can't make decisions on:\n *\n * - `actor` — auth resolver. Receives the Hono context, returns the\n *   `Actor` that flows onto `c.get(\"actor\")` for every generated\n *   route (via an internal {@link authenticated}).\n * - `stream` — stream-id resolver. Receives the action name, the\n *   validated body, and the Hono context; returns the target\n *   stream. Singleton aggregates return a constant; per-tenant\n *   aggregates pull from headers, path, or body.\n * - `expectedVersion` (optional) — optimistic-concurrency resolver.\n *   Hosts typically read it from an `If-Match` header on the\n *   request, or from the client's last-known snapshot. Returning\n *   `undefined` leaves the call to the version the action loads; a\n *   number pins it, and a pinned conflict is never retried.\n * - `idempotency` (optional) — when set, the route honors\n *   `Idempotency-Key` via {@link withIdempotency}. The host\n *   supplies the `IdempotencyStore`; `keyFrom` defaults to reading\n *   the `Idempotency-Key` header. A duplicate of a key that already\n *   succeeded gets `409 Conflict` — the contract intentionally doesn't\n *   cache the original handler's result. A duplicate that arrives\n *   while the original is still running gets a retryable\n *   `503` + `Retry-After` instead, because the original may yet fail\n *   and release the key, and a client told \"already used\" would never\n *   retry.\n * - `basePath` (optional, default `\"/api\"`) — Hono basePath the\n *   routes mount under.\n */\nexport type HonoOptions<TApp = ActSurface> = {\n  readonly actor: ActorExtractor<Context>;\n  readonly stream: (\n    ...args: ResolverArgs<TApp, Context>\n  ) => string | Promise<string>;\n  readonly expectedVersion?: (\n    ...args: ResolverArgs<TApp, Context>\n  ) => number | undefined | Promise<number | undefined>;\n  readonly idempotency?: {\n    readonly store: IdempotencyStore;\n    readonly keyFrom?: (c: Context) => string | undefined;\n  };\n  /**\n   * Optional SSE wiring. When set, the generator emits one\n   * `GET <basePath>/sse/<stateName>?stream=<streamId>` per unique\n   * state name in the registry. The endpoint runs the host\n   * {@link actor} extractor, looks up the streamId from\n   * `?stream=...`, opens a `text/event-stream`, yields the cached\n   * state (if any), and forwards every patch published to the\n   * shared {@link SseOptions.channel}. A heartbeat keeps proxies\n   * from idling the connection out; the per-process connection cap\n   * returns `503 Service Unavailable` (with `Retry-After: 1`) when\n   * full so operators never see silent stalls.\n   *\n   * Off by default — most APIs don't expose live state to every\n   * client, and opening one is widening both the auth and cost\n   * surface.\n   */\n  readonly sse?: SseOptions;\n  readonly basePath?: string;\n};\n\n/**\n * Build a Hono middleware that runs an {@link ActorExtractor} once\n * per call and stashes the resolved {@link Actor} under\n * `c.set(\"actor\", ...)` so downstream routes can read it via\n * `c.get(\"actor\")`. The generator at {@link hono} uses this\n * internally; it's also exported so hosts that want to compose\n * their own route chain (logging, tracing, custom auth flavors)\n * can wire it directly:\n *\n * ```ts\n * import { Hono } from \"hono\";\n * import { authenticated, type ActMiddlewareVariables } from \"@rotorsoft/act-http/hono\";\n *\n * const api = new Hono<{ Variables: ActMiddlewareVariables }>();\n * api.use(\"*\", authenticated((c) => resolveUserFromJwt(c)));\n * api.get(\"/me\", (c) => c.json(c.get(\"actor\"))); // typed\n * ```\n *\n * Errors thrown by the extractor surface as `401 Unauthorized` with\n * the shared {@link ApiError} envelope. Mounted on a route\n * (`api.get(\"/me\", authenticated(extract), handler)`), the `401` is in\n * the route's type, so `hc` and `testClient` see it.\n */\nexport function authenticated(\n  extractor: ActorExtractor<Context>\n): MiddlewareHandler<\n  { Variables: ActMiddlewareVariables },\n  string,\n  {},\n  Response & TypedResponse<JSONParsed<ApiError>, 401, \"json\">\n> {\n  return async (c, next) => {\n    try {\n      const actor = await extractor(c);\n      c.set(\"actor\", actor);\n      await next();\n    } catch (err) {\n      const body: ApiError = {\n        error: \"Unauthorized\",\n        detail: err instanceof Error ? err.message : undefined,\n        code: \"UNAUTHORIZED\",\n      };\n      return c.json(body, 401);\n    }\n  };\n}\n\nconst default_key_from = (c: Context): string | undefined =>\n  c.req.header(\"idempotency-key\");\n\n/**\n * Build a typed Hono REST surface from a built `Act` instance.\n *\n * Walks `app.registry.actions` once and emits one\n * `POST /actions/<actionName>` per action under the configured\n * `basePath` (default `/api`). Each route:\n *\n * 1. Runs the internal {@link authenticated} middleware —\n *    `options.actor` resolves the {@link Actor} once and stashes\n *    it under `c.get(\"actor\")`.\n * 2. Validates the JSON body against the action's Zod schema via\n *    `@hono/zod-validator`. Failures short-circuit with `422`.\n * 3. Resolves the target stream via\n *    `options.stream(name, input, c)`.\n * 4. (Optionally) resolves `expectedVersion` for optimistic\n *    concurrency.\n * 5. (Optionally) claims the `Idempotency-Key` via\n *    {@link withIdempotency} — responds `409` on a duplicate of a\n *    committed key, `503` on a duplicate of one still in flight.\n * 6. Calls\n *    `app.do(name, { stream, actor, expectedVersion? }, input)`.\n * 7. Maps any thrown framework error onto the shared\n *    {@link ApiError} envelope via {@link toApiError}, returning\n *    the conventional HTTP status (`409` / `412` for concurrency,\n *    `422` for validation, `400` for non-retryable, etc.).\n *\n * @param app A built `Act` orchestrator.\n * @param options Auth, stream, expected-version, idempotency, and\n *   base-path seams.\n * @returns A Hono app covering every registered action under\n *   `<basePath>/actions/<name>`.\n */\nexport function hono<\n  TApp extends ActSurface = ActSurface,\n  TBase extends string = \"/api\",\n>(\n  app: TApp,\n  options: HonoOptions<TApp> & {\n    readonly basePath?: TBase;\n    readonly sse: NonNullable<HonoOptions[\"sse\"]>;\n  }\n): Hono<\n  { Variables: ActMiddlewareVariables },\n  ActionRoutes<TApp, TBase> & SseRoutes<TApp, TBase>,\n  TBase\n>;\nexport function hono<\n  TApp extends ActSurface = ActSurface,\n  TBase extends string = \"/api\",\n>(\n  app: TApp,\n  options: HonoOptions<TApp> & { readonly basePath?: TBase }\n): Hono<\n  { Variables: ActMiddlewareVariables },\n  ActionRoutes<TApp, TBase>,\n  TBase\n>;\nexport function hono<TApp extends ActSurface>(\n  app: TApp,\n  options: HonoOptions\n): unknown {\n  const base_path = options.basePath ?? \"/api\";\n  const api = new Hono<{ Variables: ActMiddlewareVariables }>().basePath(\n    base_path\n  );\n  api.use(\"*\", authenticated(options.actor));\n\n  const key_from = options.idempotency?.keyFrom ?? default_key_from;\n  const dispatch = make_dispatch<Context>(\n    app,\n    options,\n    options.idempotency?.store\n  );\n\n  // Wire SSE subscriptions before the mutation routes so the\n  // `/sse/*` paths sit alongside `/actions/*`. The cap counter is\n  // shared by every state-name's GET route on this generator\n  // instance so a noisy room on one state doesn't get a free pass\n  // on another.\n  if (options.sse) {\n    const sse_config = resolveSseConfig(options.sse);\n    const sse_counter = new SseConnectionCounter(sse_config.maxConnections);\n    const state_names = new Set(\n      Object.values(app.registry.actions).map((a) => a.name)\n    );\n    for (const state_name of state_names) {\n      api.get(`/sse/${state_name}`, async (c) => {\n        const stream_id = c.req.query(\"stream\");\n        if (!stream_id) {\n          const body: ApiError = {\n            error: \"BadRequest\",\n            detail: \"stream query parameter is required\",\n            code: \"BAD_REQUEST\",\n          };\n          return c.json(body, 400);\n        }\n        if (!sse_counter.acquire()) {\n          c.header(\"Retry-After\", \"1\");\n          const body: ApiError = {\n            error: \"ServiceUnavailable\",\n            detail: \"max concurrent SSE connections reached\",\n            code: \"SSE_BUSY\",\n          };\n          return c.json(body, 503);\n        }\n        // The route already acquired the slot above so streamSSE\n        // could return `503` before writing headers if the cap was\n        // full. The shared loop runs without accounting; the route\n        // releases the slot in `finally`.\n        const controller = new AbortController();\n        return streamSSE(c, async (sse_stream) => {\n          sse_stream.onAbort(() => controller.abort());\n          const heartbeat = setInterval(() => {\n            fireAndForget(() =>\n              sse_stream.writeSSE({ event: \"ping\", data: \"\" })\n            );\n          }, sse_config.heartbeatMs);\n          try {\n            for await (const frame of runSseSubscription(\n              sse_config.channel,\n              stream_id,\n              undefined,\n              controller.signal,\n              { maxPending: sse_config.maxPendingPerConnection }\n            )) {\n              await sse_stream.writeSSE({\n                event: frame.kind,\n                data: JSON.stringify(frame.data),\n              });\n            }\n          } finally {\n            clearInterval(heartbeat);\n            sse_counter.release();\n          }\n        });\n      });\n    }\n  }\n\n  for (const [action_name, state] of Object.entries(app.registry.actions)) {\n    const schema = state.actions[action_name];\n    api.post(\n      `/actions/${action_name}`,\n      // Custom hook funnels body-schema failures through the same\n      // ApiError envelope + 422 status an in-`do` ValidationError maps\n      // to (ERROR_MAP.ValidationError). Without it, @hono/zod-validator\n      // short-circuits with its own 400 + raw body — two statuses and\n      // two shapes for the same \"malformed input\" failure class on one\n      // endpoint. The OpenAPI doc only documents the 422/ApiError path.\n      // A JSON body that doesn't parse gets the same envelope: the\n      // validator would throw its own plain-text 400 before the hook runs.\n      async (c, next) => {\n        if (is_json(c.req.header(\"content-type\")))\n          try {\n            await c.req.json();\n          } catch {\n            return c.json(\n              validation_error(\"Malformed JSON in request body\"),\n              422\n            );\n          }\n        await next();\n      },\n      zValidator(\"json\", schema as never, (result, c) => {\n        if (!result.success)\n          // `result.error` is a ZodError; the schema's `never` typing\n          // erases its shape, so read `.message` through a narrow cast.\n          return c.json(\n            validation_error((result.error as { message?: string }).message),\n            422\n          );\n      }),\n      async (c) => {\n        try {\n          // The resolvers get the validated value; `app.do` gets the raw\n          // body, because it parses again itself and a second parse of the\n          // validator's output would run every `.transform()` twice. The\n          // json validator only reads a JSON body (no or non-JSON\n          // Content-Type validates `{}`), so take the raw value from the same\n          // place it did: re-reading the body regardless would throw on an\n          // empty request and hand `app.do` a body the resolvers never saw.\n          // Hono caches the body, so reading it again is free.\n          const input = c.req.valid(\"json\" as never) as unknown;\n          const raw: unknown = is_json(c.req.header(\"content-type\"))\n            ? await c.req.json()\n            : {};\n          const outcome = await dispatch(\n            action_name,\n            input,\n            raw,\n            c,\n            c.get(\"actor\"),\n            () => key_from(c)\n          );\n          if (outcome.kind === \"done\") return c.json(outcome.result);\n          if (outcome.kind === \"missing-key\") {\n            const body: ApiError = {\n              error: \"BadRequest\",\n              detail: \"Idempotency-Key required\",\n              code: \"BAD_REQUEST\",\n            };\n            return c.json(body, 400);\n          }\n          if (outcome.kind === \"in-flight\") {\n            const body: ApiError = {\n              error: \"ServiceUnavailable\",\n              detail:\n                \"Idempotency-Key in flight; the original request has not finished, retry later\",\n              code: \"IN_FLIGHT\",\n            };\n            c.header(\"Retry-After\", \"1\");\n            return c.json(body, 503);\n          }\n          const body: ApiError = {\n            error: \"Conflict\",\n            detail: \"Idempotency-Key already used; original result not cached\",\n            code: \"CONFLICT\",\n          };\n          return c.json(body, 409);\n        } catch (err) {\n          const { status, body } = toApiError(err);\n          // Hono types narrow `status` to its known status-number union;\n          // `toApiError` returns a numeric status from a closed set that\n          // matches but TypeScript can't prove it through the union.\n          return c.json(body, status as 400 | 409 | 410 | 412 | 422 | 500);\n        }\n      }\n    );\n  }\n\n  // Built in a loop over the registry, so its type is the overloads'.\n  return api;\n}\n\n/**\n * One `GET <basePath>/sse/<state>?stream=<id>` per state of `TApp`, with\n * `sse`: an event stream on `200`, {@link ApiError} on an error status.\n */\nexport type SseRoutes<TApp, TBase extends string> = {\n  [N in AppStateNames<TApp> as MergePath<TBase, `/sse/${N}`>]: {\n    $get:\n      | {\n          input: { query: { stream: string } };\n          output: {};\n          outputFormat: \"body\";\n          status: 200;\n        }\n      | {\n          input: { query: { stream: string } };\n          output: ApiError;\n          outputFormat: \"json\";\n          status: 400 | 401 | 503;\n        };\n  };\n};\n\n/** Every status a generated action route answers with the error envelope. */\ntype ErrorStatus = 400 | 401 | 409 | 410 | 412 | 422 | 500 | 503;\n\n/**\n * The routes {@link hono} builds, one `POST <basePath>/actions/<name>` per\n * action of `TApp`: the action's payload as the JSON body, the snapshots\n * `app.do` returns (as JSON) on `200`, and {@link ApiError} on an error\n * status. `hc<typeof api>` and `testClient(api)` read it.\n */\nexport type ActionRoutes<TApp, TBase extends string> = {\n  [K in keyof AppActions<TApp> & string as MergePath<TBase, `/actions/${K}`>]: {\n    $post:\n      | {\n          input: { json: AppActions<TApp>[K] };\n          output: JSONParsed<ActionResult<TApp, K>>;\n          outputFormat: \"json\";\n          status: 200;\n        }\n      | {\n          input: { json: AppActions<TApp>[K] };\n          output: ApiError;\n          outputFormat: \"json\";\n          status: ErrorStatus;\n        };\n  };\n};\n\n/**\n * Hono's json validator reads the body only for a JSON Content-Type\n * (`application/json`, or a `+json` suffix, optionally with parameters);\n * anything else validates `{}`. Same test, so the route reads the raw body\n * exactly when the validator did.\n */\nconst JSON_CONTENT_TYPE =\n  /^application\\/([a-z-.]+\\+)?json(;\\s*[a-zA-Z0-9-]+=([^;]+))*$/i;\nfunction validation_error(detail: string | undefined): ApiError {\n  return { error: \"ValidationError\", detail, code: \"VALIDATION\" };\n}\n\nfunction is_json(content_type: string | undefined): boolean {\n  return !!content_type && JSON_CONTENT_TYPE.test(content_type);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuHA,SAAS,mBAYP,QACA,QACA,MACA,SAGgE;AAChE,QAAM,wBACJ,WAAW,aAAa,UAAU,UAAU,UAAU,UAClD,OAAO,YAEL,OAAO,KAAK,QAAQ,SAAS,OAAO,GAAG,QAAQ,OAAO,KAAK,EAAE,IAAA,CAAK,QAAQ,CACxE,IAAI,YAAY,GAChB,GACF,CAAC,CACH,IACA;AAGN,SAAO,UAAU,QAAQ,OAAO,OAAkC,MAAM;AACtE,QAAI,iBAAiB;AAIrB,QAAI,sBACF,kBAAiB,OAAO,YACtB,OAAO,QAAQ,KAAK,EAAE,IAAA,CAAK,CAAC,KAAKA,MAAA,MAAW,CAAC,sBAAsB,GAAA,KAAQ,KAAKA,MAAK,CAAC,CACxF;AAGF,UAAM,SACJ,WAAW,QAAQ,qBACf,MAAM,QAAQ,mBAAmB,QAAQ,cAAc,IAEvD,MAAM,OAAO,eAAe,cAAc;AAEhD,QAAI,MAAM;AACR,YAAM,aAAa,MAAM,KAAK;QAAE,MAAM;QAAgB,GAAG;QAAQ;MAAO,GAAG,CAAC;AAC5E,UAAI,YAAY;AACd,YAAI,sBAAsB,SACxB,QAAO;AAGT,YAAI,cAAc,WAChB,QAAO,WAAW;MAEtB;IACF;AAEA,QAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK,QAAQ,GAAG;AAG3B,WAAO,OAAO;EAChB,CAAC;AACH;AAEA,IAAa,aAAwC;;;ACxIrD,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAoHnB,SAAS,cACd,WAMA;AACA,SAAO,OAAO,GAAG,SAAS;AACxB,QAAI;AACF,YAAM,QAAQ,MAAM,UAAU,CAAC;AAC/B,QAAE,IAAI,SAAS,KAAK;AACpB,YAAM,KAAK;AAAA,IACb,SAAS,KAAK;AACZ,YAAM,OAAiB;AAAA,QACrB,OAAO;AAAA,QACP,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,QAC7C,MAAM;AAAA,MACR;AACA,aAAO,EAAE,KAAK,MAAM,GAAG;AAAA,IACzB;AAAA,EACF;AACF;AAEA,IAAM,mBAAmB,CAAC,MACxB,EAAE,IAAI,OAAO,iBAAiB;AA2DzB,SAAS,KACd,KACA,SACS;AACT,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,MAAM,IAAI,KAA4C,EAAE;AAAA,IAC5D;AAAA,EACF;AACA,MAAI,IAAI,KAAK,cAAc,QAAQ,KAAK,CAAC;AAEzC,QAAM,WAAW,QAAQ,aAAa,WAAW;AACjD,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA,QAAQ,aAAa;AAAA,EACvB;AAOA,MAAI,QAAQ,KAAK;AACf,UAAM,aAAa,iBAAiB,QAAQ,GAAG;AAC/C,UAAM,cAAc,IAAI,qBAAqB,WAAW,cAAc;AACtE,UAAM,cAAc,IAAI;AAAA,MACtB,OAAO,OAAO,IAAI,SAAS,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACvD;AACA,eAAW,cAAc,aAAa;AACpC,UAAI,IAAI,QAAQ,UAAU,IAAI,OAAO,MAAM;AACzC,cAAM,YAAY,EAAE,IAAI,MAAM,QAAQ;AACtC,YAAI,CAAC,WAAW;AACd,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB;AACA,YAAI,CAAC,YAAY,QAAQ,GAAG;AAC1B,YAAE,OAAO,eAAe,GAAG;AAC3B,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB;AAKA,cAAM,aAAa,IAAI,gBAAgB;AACvC,eAAO,UAAU,GAAG,OAAO,eAAe;AACxC,qBAAW,QAAQ,MAAM,WAAW,MAAM,CAAC;AAC3C,gBAAM,YAAY,YAAY,MAAM;AAClC;AAAA,cAAc,MACZ,WAAW,SAAS,EAAE,OAAO,QAAQ,MAAM,GAAG,CAAC;AAAA,YACjD;AAAA,UACF,GAAG,WAAW,WAAW;AACzB,cAAI;AACF,6BAAiB,SAAS;AAAA,cACxB,WAAW;AAAA,cACX;AAAA,cACA;AAAA,cACA,WAAW;AAAA,cACX,EAAE,YAAY,WAAW,wBAAwB;AAAA,YACnD,GAAG;AACD,oBAAM,WAAW,SAAS;AAAA,gBACxB,OAAO,MAAM;AAAA,gBACb,MAAM,KAAK,UAAU,MAAM,IAAI;AAAA,cACjC,CAAC;AAAA,YACH;AAAA,UACF,UAAE;AACA,0BAAc,SAAS;AACvB,wBAAY,QAAQ;AAAA,UACtB;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,aAAW,CAAC,aAAa,KAAK,KAAK,OAAO,QAAQ,IAAI,SAAS,OAAO,GAAG;AACvE,UAAM,SAAS,MAAM,QAAQ,WAAW;AACxC,QAAI;AAAA,MACF,YAAY,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASvB,OAAO,GAAG,SAAS;AACjB,YAAI,QAAQ,EAAE,IAAI,OAAO,cAAc,CAAC;AACtC,cAAI;AACF,kBAAM,EAAE,IAAI,KAAK;AAAA,UACnB,QAAQ;AACN,mBAAO,EAAE;AAAA,cACP,iBAAiB,gCAAgC;AAAA,cACjD;AAAA,YACF;AAAA,UACF;AACF,cAAM,KAAK;AAAA,MACb;AAAA,MACA,WAAW,QAAQ,QAAiB,CAAC,QAAQ,MAAM;AACjD,YAAI,CAAC,OAAO;AAGV,iBAAO,EAAE;AAAA,YACP,iBAAkB,OAAO,MAA+B,OAAO;AAAA,YAC/D;AAAA,UACF;AAAA,MACJ,CAAC;AAAA,MACD,OAAO,MAAM;AACX,YAAI;AASF,gBAAM,QAAQ,EAAE,IAAI,MAAM,MAAe;AACzC,gBAAM,MAAe,QAAQ,EAAE,IAAI,OAAO,cAAc,CAAC,IACrD,MAAM,EAAE,IAAI,KAAK,IACjB,CAAC;AACL,gBAAM,UAAU,MAAM;AAAA,YACpB;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA,EAAE,IAAI,OAAO;AAAA,YACb,MAAM,SAAS,CAAC;AAAA,UAClB;AACA,cAAI,QAAQ,SAAS,OAAQ,QAAO,EAAE,KAAK,QAAQ,MAAM;AACzD,cAAI,QAAQ,SAAS,eAAe;AAClC,kBAAMC,QAAiB;AAAA,cACrB,OAAO;AAAA,cACP,QAAQ;AAAA,cACR,MAAM;AAAA,YACR;AACA,mBAAO,EAAE,KAAKA,OAAM,GAAG;AAAA,UACzB;AACA,cAAI,QAAQ,SAAS,aAAa;AAChC,kBAAMA,QAAiB;AAAA,cACrB,OAAO;AAAA,cACP,QACE;AAAA,cACF,MAAM;AAAA,YACR;AACA,cAAE,OAAO,eAAe,GAAG;AAC3B,mBAAO,EAAE,KAAKA,OAAM,GAAG;AAAA,UACzB;AACA,gBAAM,OAAiB;AAAA,YACrB,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,MAAM;AAAA,UACR;AACA,iBAAO,EAAE,KAAK,MAAM,GAAG;AAAA,QACzB,SAAS,KAAK;AACZ,gBAAM,EAAE,QAAQ,KAAK,IAAI,WAAW,GAAG;AAIvC,iBAAO,EAAE,KAAK,MAAM,MAA2C;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AACT;AAyDA,IAAM,oBACJ;AACF,SAAS,iBAAiB,QAAsC;AAC9D,SAAO,EAAE,OAAO,mBAAmB,QAAQ,MAAM,aAAa;AAChE;AAEA,SAAS,QAAQ,cAA2C;AAC1D,SAAO,CAAC,CAAC,gBAAgB,kBAAkB,KAAK,YAAY;AAC9D;","names":["value","body"]}

package/dist/openapi/index.cjs

@@ -19753,22 +19753,53 @@ var API_ERROR_SCHEMA = {
   },
   required: ["error"]
 };
-var SNAPSHOT_ARRAY_SCHEMA = {
-  type: "array",
-  items: {
-    type: "object",
-    properties: {
-      state: { type: "object" },
-      event: { type: "object" },
-      version: { type: "integer" },
-      patches: { type: "integer" },
-      snaps: { type: "integer" },
-      cache_hit: { type: "boolean" },
-      replayed: { type: "integer" }
-    },
-    required: ["state", "version", "patches", "snaps", "cache_hit", "replayed"]
-  }
-};
+function snapshot_array(state, event) {
+  return {
+    type: "array",
+    items: {
+      type: "object",
+      properties: {
+        state,
+        event,
+        patch: patch_of(state),
+        id: { type: "integer" },
+        version: { type: "integer" },
+        patches: { type: "integer" },
+        snaps: { type: "integer" },
+        cache_hit: { type: "boolean" },
+        replayed: { type: "integer" }
+      },
+      required: [
+        "state",
+        "id",
+        "version",
+        "patches",
+        "snaps",
+        "cache_hit",
+        "replayed"
+      ]
+    }
+  };
+}
+var SNAPSHOT_ARRAY_SCHEMA = snapshot_array(
+  { type: "object" },
+  { type: "object" }
+);
+function patch_of(schema) {
+  const properties = schema.properties;
+  if (!properties) return schema;
+  const { required: _, ...rest } = schema;
+  return {
+    ...rest,
+    properties: Object.fromEntries(
+      Object.entries(properties).map(([key, value]) => [
+        key,
+        { anyOf: [patch_of(value), { type: "null" }] }
+      ])
+    )
+  };
+}
+var PII_MARKERS = { type: "string", enum: [import_act.REDACTED, import_act.SHREDDED] };
 var API_ERROR_RESPONSE = {
   description: "Error envelope per @rotorsoft/act-http/api's toApiError.",
   content: {
@@ -19826,7 +19857,51 @@ function mark_sensitive_fields(body_schema, zod_schema) {
   }
   return { ...body_schema, properties: next_properties };
 }
-function build_operation(action_name, body_schema, options) {
+function json_schema(schema, io) {
+  return strip_json_schema_meta(
+    external_exports.toJSONSchema(schema, { unrepresentable: "any", io })
+  );
+}
+function allow_markers(schema, fields) {
+  const properties = schema.properties;
+  const present = fields.filter((f) => properties?.[f]);
+  if (!properties || present.length === 0) return schema;
+  const next = { ...properties };
+  for (const f of present) next[f] = { anyOf: [properties[f], PII_MARKERS] };
+  return { ...schema, properties: next };
+}
+function state_snapshots(state, events) {
+  const sensitive = /* @__PURE__ */ new Set();
+  const variants = Object.entries(events).map(([name, data]) => {
+    const fields = (0, import_act.pii_fields)(data);
+    for (const f of fields) sensitive.add(f);
+    return {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        stream: { type: "string" },
+        version: { type: "integer" },
+        created: { type: "string", format: "date-time" },
+        name: { const: name },
+        data: allow_markers(json_schema(data, "output"), fields),
+        meta: {
+          type: "object",
+          properties: {
+            correlation: { type: "string" },
+            causation: { type: "object" }
+          },
+          required: ["correlation", "causation"]
+        }
+      },
+      required: ["id", "stream", "version", "created", "name", "data", "meta"]
+    };
+  });
+  return snapshot_array(
+    allow_markers(json_schema(state, "output"), [...sensitive]),
+    { oneOf: variants }
+  );
+}
+function build_operation(action_name, body_schema, response_ref, options) {
   const parameters = [];
   if (options.idempotency) {
     parameters.push({
@@ -19834,7 +19909,7 @@ function build_operation(action_name, body_schema, options) {
       in: "header",
       // Required: the generated route fail-closes with 400 when idempotency is
       // enabled and the header is absent, so the doc must not advertise it as
-      // optional (#1287).
+      // optional.
       required: true,
       description: "Required idempotency token. A duplicate of a request that already succeeded produces a 409 Conflict (the first result is not cached on the server). A duplicate that arrives while the original is still running produces a retryable 503 with Retry-After, because the original may yet fail.",
       schema: { type: "string" }
@@ -19865,7 +19940,7 @@ function build_operation(action_name, body_schema, options) {
         description: "Action committed; returns the snapshot array.",
         content: {
           "application/json": {
-            schema: { $ref: "#/components/schemas/SnapshotArray" }
+            schema: { $ref: response_ref }
           }
         }
       },
@@ -19883,27 +19958,19 @@ function openapi(app, options) {
   validate_options(options);
   const base_path = options.basePath ?? DEFAULT_BASE_PATH;
   const paths = {};
+  const state_schemas = {};
   for (const [action_name, state] of Object.entries(app.registry.actions)) {
     const zod_schema = state.actions[action_name];
     const body_schema = mark_sensitive_fields(
-      strip_json_schema_meta(
-        // `unrepresentable: "any"` emits an open (`{}`) schema for a Zod type
-        // with no JSON-Schema form (z.date/z.bigint/z.map/z.set/...) instead of
-        // Zod 4's default `"throw"`, which would abort the WHOLE document over
-        // one such field — while hono() serves the same action fine (#1328).
-        // `io: "input"` describes what a client must SEND: a `.default()`
-        // field is optional, extra keys are not rejected (Zod strips them),
-        // and a `.pipe()`/`.transform()` documents its input type. Zod's
-        // default, `"output"`, describes the parsed result instead.
-        external_exports.toJSONSchema(zod_schema, {
-          unrepresentable: "any",
-          io: "input"
-        })
-      ),
+      json_schema(zod_schema, "input"),
       zod_schema
     );
+    const snapshots = `${state.name}Snapshots`;
+    if (state.state && state.events && !state_schemas[snapshots])
+      state_schemas[snapshots] = state_snapshots(state.state, state.events);
+    const response_ref = state_schemas[snapshots] ? `#/components/schemas/${snapshots}` : "#/components/schemas/SnapshotArray";
     paths[`${base_path}/actions/${action_name}`] = {
-      post: build_operation(action_name, body_schema, options)
+      post: build_operation(action_name, body_schema, response_ref, options)
     };
   }
   return {
@@ -19914,7 +19981,8 @@ function openapi(app, options) {
     components: {
       schemas: {
         ApiError: API_ERROR_SCHEMA,
-        SnapshotArray: SNAPSHOT_ARRAY_SCHEMA
+        SnapshotArray: SNAPSHOT_ARRAY_SCHEMA,
+        ...state_schemas
       },
       responses: {
         ApiError: API_ERROR_RESPONSE