@schemavaults/openapi-operations 0.1.4

package/dist/runtime/create-operations-app.js

@@ -0,0 +1,92 @@
+import { Hono } from "hono";
+import { assertUniqueOperations } from "../operation";
+import { openApiPathToHonoPath } from "../openapi/path-format";
+import { OPERATION_ERROR_CODES, OperationError, jsonResponse } from "./errors";
+import { validateRequest } from "./validate-request";
+import { assertResolversForOperations, resolveAuth } from "./resolve-auth";
+function buildHandlerContext(c, operation, validated, auth, context) {
+    const declaredStatuses = new Set(Object.keys(operation.responses).map(Number));
+    const assertDeclared = (status) => {
+        if (!declaredStatuses.has(status)) {
+            throw new TypeError(`${operation.method.toUpperCase()} ${operation.path} responded with undeclared status ${status}`);
+        }
+    };
+    return {
+        params: validated.params,
+        query: validated.query,
+        headers: validated.headers,
+        body: validated.body,
+        auth,
+        context,
+        request: c.req.raw,
+        url: new URL(c.req.url),
+        json(status, body, init) {
+            assertDeclared(status);
+            return jsonResponse(status, body, init?.headers);
+        },
+        empty(status, init) {
+            assertDeclared(status);
+            return new Response(null, { status, headers: init?.headers });
+        },
+        redirect(location, status = 302) {
+            return new Response(null, { status, headers: { Location: location } });
+        },
+    };
+}
+/**
+ * Builds a Hono app that routes, validates, authenticates and dispatches
+ * the given operations. Mount it on Vercel functions with
+ * `toVercelHandler()` or Next.js route handlers with `toNextRouteHandlers()`.
+ */
+export function createOperationsApp(options) {
+    assertUniqueOperations(options.operations);
+    const resolvers = options.authResolvers ?? {};
+    assertResolversForOperations(options.operations, resolvers);
+    const root = new Hono();
+    const app = options.basePath ? root.basePath(options.basePath) : root;
+    options.configure?.(app);
+    if (options.openapi) {
+        const { document, path = "/openapi.json" } = options.openapi;
+        app.get(path, async (c) => {
+            const resolved = typeof document === "function" ? await document(c) : document;
+            return c.json(resolved);
+        });
+    }
+    for (const operation of options.operations) {
+        app.on(operation.method.toUpperCase(), openApiPathToHonoPath(operation.path), async (c) => {
+            try {
+                const context = options.context ? await options.context(c) : undefined;
+                const auth = await resolveAuth(c, operation.auth, resolvers);
+                const validated = await validateRequest(c, operation);
+                const ctx = buildHandlerContext(c, operation, validated, auth, context);
+                const result = await operation.handler(ctx);
+                if (!(result instanceof Response)) {
+                    throw new TypeError(`${operation.method.toUpperCase()} ${operation.path} handler must return a Response (use ctx.json / ctx.empty)`);
+                }
+                return result;
+            }
+            catch (error) {
+                if (error instanceof OperationError)
+                    return error.toResponse();
+                if (options.onError) {
+                    try {
+                        await options.onError(error, c);
+                    }
+                    catch {
+                        // never let error reporting mask the response
+                    }
+                }
+                else {
+                    console.error(`[openapi-operations] ${operation.method.toUpperCase()} ${operation.path} failed:`, error);
+                }
+                return jsonResponse(500, {
+                    success: false,
+                    error: OPERATION_ERROR_CODES.internal,
+                    message: "Internal Server Error",
+                });
+            }
+        });
+    }
+    return root;
+}
+//# sourceMappingURL=create-operations-app.js.map

package/dist/runtime/create-operations-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-operations-app.js","sourceRoot":"","sources":["../../src/runtime/create-operations-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAG1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAsB,MAAM,gBAAgB,CAAC;AA8C/F,SAAS,mBAAmB,CAC1B,CAAU,EACV,SAAiC,EACjC,SAA+E,EAC/E,IAAa,EACb,OAAgB;IAEhB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,CAAC,MAAc,EAAQ,EAAE;QAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CACjB,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,qCAAqC,MAAM,EAAE,CACjG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;QAClB,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI;YACrB,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,IAAI;YAChB,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG;YAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAoD;IAEpD,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAyB,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IACpE,4BAA4B,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,GAAG,CAAC,EAAE,CACJ,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,EAC9B,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,EACrC,KAAK,EAAE,CAAU,EAAqB,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,SAAsB,CAAC;gBACrF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC7D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACxE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,SAAS,CACjB,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,4DAA4D,CAChH,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,KAAK,YAAY,cAAc;oBAAE,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAClC,CAAC;oBAAC,MAAM,CAAC;wBACP,8CAA8C;oBAChD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CACX,wBAAwB,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,UAAU,EAClF,KAAK,CACN,CAAC;gBACJ,CAAC;gBACD,OAAO,YAAY,CAAC,GAAG,EAAE;oBACvB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,qBAAqB,CAAC,QAAQ;oBACrC,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/errors.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Wire format for every error produced by the operations runtime. Matches
+ * the `{ success: false, message }` envelope used throughout the auth
+ * server, with a machine readable `error` code in addition.
+ */
+export interface OperationErrorBody {
+    readonly success: false;
+    readonly error: string;
+    readonly message: string;
+    readonly issues?: readonly OperationValidationIssue[];
+    /** Extra machine readable details (e.g. missing scopes). */
+    readonly details?: Readonly<Record<string, unknown>>;
+}
+export interface OperationValidationIssue {
+    /** Which part of the request failed. */
+    readonly location: "params" | "query" | "headers" | "body";
+    readonly path: string;
+    readonly message: string;
+    readonly code: string;
+}
+export declare const OPERATION_ERROR_CODES: {
+    readonly validation: "validation_error";
+    readonly unauthorized: "unauthorized";
+    readonly forbidden: "forbidden";
+    readonly insufficientScope: "insufficient_scope";
+    readonly organizationRequired: "organization_required";
+    readonly notMember: "not_an_organization_member";
+    readonly unsupportedMediaType: "unsupported_media_type";
+    readonly internal: "internal_server_error";
+};
+/**
+ * Throw from a handler (or an auth resolver) to short-circuit with a
+ * specific status and error body.
+ */
+export declare class OperationError extends Error {
+    readonly status: number;
+    readonly body: OperationErrorBody;
+    readonly headers: Readonly<Record<string, string>>;
+    constructor(status: number, body: Omit<OperationErrorBody, "success">, headers?: Readonly<Record<string, string>>);
+    toResponse(): Response;
+}
+export declare function jsonResponse(status: number, body: unknown, headers?: HeadersInit): Response;

package/dist/runtime/errors.js

@@ -0,0 +1,37 @@
+export const OPERATION_ERROR_CODES = {
+    validation: "validation_error",
+    unauthorized: "unauthorized",
+    forbidden: "forbidden",
+    insufficientScope: "insufficient_scope",
+    organizationRequired: "organization_required",
+    notMember: "not_an_organization_member",
+    unsupportedMediaType: "unsupported_media_type",
+    internal: "internal_server_error",
+};
+/**
+ * Throw from a handler (or an auth resolver) to short-circuit with a
+ * specific status and error body.
+ */
+export class OperationError extends Error {
+    status;
+    body;
+    headers;
+    constructor(status, body, headers = {}) {
+        super(body.message);
+        this.name = "OperationError";
+        this.status = status;
+        this.body = { success: false, ...body };
+        this.headers = headers;
+    }
+    toResponse() {
+        return jsonResponse(this.status, this.body, this.headers);
+    }
+}
+export function jsonResponse(status, body, headers) {
+    const merged = new Headers(headers);
+    if (!merged.has("content-type")) {
+        merged.set("content-type", "application/json; charset=utf-8");
+    }
+    return new Response(JSON.stringify(body), { status, headers: merged });
+}
+//# sourceMappingURL=errors.js.map

package/dist/runtime/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/runtime/errors.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,kBAAkB;IAC9B,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,iBAAiB,EAAE,oBAAoB;IACvC,oBAAoB,EAAE,uBAAuB;IAC7C,SAAS,EAAE,4BAA4B;IACvC,oBAAoB,EAAE,wBAAwB;IAC9C,QAAQ,EAAE,uBAAuB;CACzB,CAAC;AAEX;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAS;IACf,IAAI,CAAqB;IACzB,OAAO,CAAmC;IAEnD,YACE,MAAc,EACd,IAAyC,EACzC,UAA4C,EAAE;QAE9C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,UAAU;QACR,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,IAAa,EACb,OAAqB;IAErB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,8 @@
+export { createOperationsApp } from "./create-operations-app";
+export type { CreateOperationsAppOptions, OpenApiDocumentRouteOptions, } from "./create-operations-app";
+export { OperationError, OPERATION_ERROR_CODES, jsonResponse } from "./errors";
+export type { OperationErrorBody, OperationValidationIssue } from "./errors";
+export { resolveAuth, grantedScopes, missingScopes } from "./resolve-auth";
+export type { AuthResolver, AuthResolvers } from "./resolve-auth";
+export { validateRequest, queryToObject, headersToObject, readRequestBody } from "./validate-request";
+export type { ValidatedRequest } from "./validate-request";

package/dist/runtime/index.js

@@ -0,0 +1,5 @@
+export { createOperationsApp } from "./create-operations-app";
+export { OperationError, OPERATION_ERROR_CODES, jsonResponse } from "./errors";
+export { resolveAuth, grantedScopes, missingScopes } from "./resolve-auth";
+export { validateRequest, queryToObject, headersToObject, readRequestBody } from "./validate-request";
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAK9D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE/E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE3E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/runtime/resolve-auth.d.ts

@@ -0,0 +1,21 @@
+import type { Context } from "hono";
+import type { AuthSchemeDefinition, OperationAuth } from "../auth-scheme";
+import type { AnyOperationDefinition, AuthPrincipal } from "../operation";
+/**
+ * Verifies the credential transported by one auth scheme. Returns null when
+ * the request carries no credential for the scheme (so the next accepted
+ * scheme is tried); throws {@link OperationError} to reject outright (e.g.
+ * a credential that IS present but invalid).
+ */
+export type AuthResolver<TUser = unknown> = (c: Context, scheme: AuthSchemeDefinition) => Promise<AuthPrincipal<TUser> | null> | AuthPrincipal<TUser> | null;
+export type AuthResolvers<TUser = unknown> = Readonly<Record<string, AuthResolver<TUser>>>;
+export declare function assertResolversForOperations(operations: readonly AnyOperationDefinition[], resolvers: AuthResolvers): void;
+export declare function grantedScopes(principal: AuthPrincipal): string[];
+export declare function missingScopes(principal: AuthPrincipal, required: readonly string[]): string[];
+/**
+ * Applies an operation's {@link OperationAuth} to the request: tries each
+ * accepted scheme's resolver in order, then enforces the route guard,
+ * required scopes, and organization membership. Returns the principal, or
+ * null for public operations.
+ */
+export declare function resolveAuth<TUser>(c: Context, auth: OperationAuth, resolvers: AuthResolvers<TUser>): Promise<AuthPrincipal<TUser> | null>;

package/dist/runtime/resolve-auth.js

@@ -0,0 +1,95 @@
+import { OPERATION_ERROR_CODES, OperationError } from "./errors";
+export function assertResolversForOperations(operations, resolvers) {
+    for (const operation of operations) {
+        if (operation.auth.type !== "required")
+            continue;
+        for (const scheme of operation.auth.schemes) {
+            if (typeof resolvers[scheme.name] !== "function") {
+                throw new TypeError(`${operation.method.toUpperCase()} ${operation.path} accepts auth scheme "${scheme.name}" but no resolver was registered for it`);
+            }
+        }
+    }
+}
+function challengeHeader(schemes) {
+    const challenges = schemes
+        .map((scheme) => scheme.challenge)
+        .filter((challenge) => typeof challenge === "string");
+    return challenges.length > 0 ? { "WWW-Authenticate": challenges.join(", ") } : {};
+}
+export function grantedScopes(principal) {
+    if (typeof principal.scope !== "string")
+        return [];
+    return principal.scope.split(" ").filter((scope) => scope.length > 0);
+}
+export function missingScopes(principal, required) {
+    const granted = new Set(grantedScopes(principal));
+    return required.filter((scope) => !granted.has(scope));
+}
+/**
+ * Applies an operation's {@link OperationAuth} to the request: tries each
+ * accepted scheme's resolver in order, then enforces the route guard,
+ * required scopes, and organization membership. Returns the principal, or
+ * null for public operations.
+ */
+export async function resolveAuth(c, auth, resolvers) {
+    if (auth.type === "public")
+        return null;
+    let principal = null;
+    for (const scheme of auth.schemes) {
+        const resolver = resolvers[scheme.name];
+        if (!resolver)
+            continue;
+        principal = await resolver(c, scheme);
+        if (principal)
+            break;
+    }
+    if (!principal) {
+        throw new OperationError(401, { error: OPERATION_ERROR_CODES.unauthorized, message: "Authentication required" }, challengeHeader(auth.schemes));
+    }
+    if ((auth.routeGuard ?? "authenticated") === "admin" && !principal.isAdmin) {
+        throw new OperationError(403, {
+            error: OPERATION_ERROR_CODES.forbidden,
+            message: "Administrator access required",
+        });
+    }
+    const required = auth.requiredScopes ?? [];
+    if (required.length > 0) {
+        const missing = missingScopes(principal, required);
+        if (missing.length > 0) {
+            throw new OperationError(403, {
+                error: OPERATION_ERROR_CODES.insufficientScope,
+                message: `The presented credential is missing required scope(s): ${missing.join(" ")}`,
+                details: { required_scopes: [...required], missing_scopes: missing },
+            }, {
+                "WWW-Authenticate": `Bearer error="insufficient_scope", scope="${required.join(" ")}"`,
+            });
+        }
+    }
+    if (auth.organization) {
+        const { parameter, roles, adminBypass } = auth.organization;
+        const organizationId = c.req.param(parameter) ?? c.req.query(parameter) ?? undefined;
+        if (typeof organizationId !== "string" || organizationId.length === 0) {
+            throw new OperationError(400, {
+                error: OPERATION_ERROR_CODES.organizationRequired,
+                message: `Request parameter "${parameter}" (organization id) is required`,
+            });
+        }
+        const bypass = (adminBypass ?? true) && principal.isAdmin;
+        if (!bypass) {
+            const role = principal.getOrganizationRole
+                ? await principal.getOrganizationRole(organizationId)
+                : false;
+            const allowed = role !== false && (roles.length === 0 || roles.includes(role));
+            if (!allowed) {
+                throw new OperationError(403, {
+                    error: OPERATION_ERROR_CODES.notMember,
+                    message: roles.length === 0
+                        ? "You are not a member of this organization"
+                        : `This operation requires one of the organization roles: ${roles.join(", ")}`,
+                });
+            }
+        }
+    }
+    return principal;
+}
+//# sourceMappingURL=resolve-auth.js.map

package/dist/runtime/resolve-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-auth.js","sourceRoot":"","sources":["../../src/runtime/resolve-auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAejE,MAAM,UAAU,4BAA4B,CAC1C,UAA6C,EAC7C,SAAwB;IAExB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACjD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACjD,MAAM,IAAI,SAAS,CACjB,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,yBAAyB,MAAM,CAAC,IAAI,yCAAyC,CACjI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwC;IAC/D,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;SACjC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAwB,EAAE,QAA2B;IACjF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAU,EACV,IAAmB,EACnB,SAA+B;IAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,SAAS,GAAgC,IAAI,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,SAAS,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,SAAS;YAAE,MAAM;IACvB,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CACtB,GAAG,EACH,EAAE,KAAK,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,EACjF,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAC9B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC3E,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;YAC5B,KAAK,EAAE,qBAAqB,CAAC,SAAS;YACtC,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CACtB,GAAG,EACH;gBACE,KAAK,EAAE,qBAAqB,CAAC,iBAAiB;gBAC9C,OAAO,EAAE,0DAA0D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACtF,OAAO,EAAE,EAAE,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE;aACrE,EACD;gBACE,kBAAkB,EAAE,6CAA6C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;aACvF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAC5D,MAAM,cAAc,GAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAChE,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;gBAC5B,KAAK,EAAE,qBAAqB,CAAC,oBAAoB;gBACjD,OAAO,EAAE,sBAAsB,SAAS,iCAAiC;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,SAAS,CAAC,mBAAmB;gBACxC,CAAC,CAAC,MAAM,SAAS,CAAC,mBAAmB,CAAC,cAAc,CAAC;gBACrD,CAAC,CAAC,KAAK,CAAC;YACV,MAAM,OAAO,GACX,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAK,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;oBAC5B,KAAK,EAAE,qBAAqB,CAAC,SAAS;oBACtC,OAAO,EACL,KAAK,CAAC,MAAM,KAAK,CAAC;wBAChB,CAAC,CAAC,2CAA2C;wBAC7C,CAAC,CAAC,0DAA0D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/runtime/validate-request.d.ts

@@ -0,0 +1,13 @@
+import type { Context } from "hono";
+import type { AnyOperationDefinition, RequestBodyDefinition } from "../operation";
+/** Query string as an object: single values as strings, repeated keys as arrays. */
+export declare function queryToObject(c: Context): Record<string, string | string[]>;
+export declare function headersToObject(c: Context): Record<string, string>;
+export declare function readRequestBody(c: Context, definition: RequestBodyDefinition): Promise<unknown>;
+export interface ValidatedRequest {
+    readonly params: Readonly<Record<string, unknown>>;
+    readonly query: Readonly<Record<string, unknown>>;
+    readonly headers: Readonly<Record<string, unknown>>;
+    readonly body: unknown;
+}
+export declare function validateRequest(c: Context, operation: AnyOperationDefinition): Promise<ValidatedRequest>;

package/dist/runtime/validate-request.js

@@ -0,0 +1,121 @@
+import { OPERATION_ERROR_CODES, OperationError, } from "./errors";
+async function parseWith(schema, value, location) {
+    const result = await schema.safeParseAsync(value);
+    if (result.success)
+        return result.data;
+    const issues = result.error.issues.map((issue) => ({
+        location,
+        path: issue.path.map((segment) => String(segment)).join("."),
+        message: issue.message,
+        code: issue.code,
+    }));
+    throw new OperationError(400, {
+        error: OPERATION_ERROR_CODES.validation,
+        message: `Invalid request ${location}`,
+        issues,
+    });
+}
+/** Query string as an object: single values as strings, repeated keys as arrays. */
+export function queryToObject(c) {
+    const result = {};
+    for (const [key, values] of Object.entries(c.req.queries())) {
+        if (values.length === 1) {
+            const [single] = values;
+            if (typeof single === "string")
+                result[key] = single;
+        }
+        else if (values.length > 1) {
+            result[key] = values;
+        }
+    }
+    return result;
+}
+export function headersToObject(c) {
+    const result = {};
+    c.req.raw.headers.forEach((value, key) => {
+        result[key.toLowerCase()] = value;
+    });
+    return result;
+}
+function mediaTypeOf(c) {
+    const header = c.req.header("content-type");
+    if (typeof header !== "string")
+        return null;
+    const [type] = header.split(";");
+    return type?.trim().toLowerCase() ?? null;
+}
+export async function readRequestBody(c, definition) {
+    const expected = (definition.contentType ?? "application/json").toLowerCase();
+    const required = definition.required ?? true;
+    const actual = mediaTypeOf(c);
+    const contentLength = c.req.header("content-length");
+    const looksEmpty = actual === null && (contentLength === undefined || contentLength === "0");
+    if (looksEmpty) {
+        if (!required)
+            return undefined;
+        throw new OperationError(400, {
+            error: OPERATION_ERROR_CODES.validation,
+            message: `A ${expected} request body is required`,
+            issues: [
+                { location: "body", path: "", message: "Request body is required", code: "required" },
+            ],
+        });
+    }
+    if (actual !== expected && !(expected === "text/plain" && actual?.startsWith("text/"))) {
+        throw new OperationError(415, {
+            error: OPERATION_ERROR_CODES.unsupportedMediaType,
+            message: `Expected a ${expected} request body but received ${actual ?? "none"}`,
+        });
+    }
+    try {
+        switch (expected) {
+            case "application/json":
+                return await c.req.json();
+            case "application/x-www-form-urlencoded":
+            case "multipart/form-data":
+                return await c.req.parseBody({ all: true });
+            case "text/plain":
+                return await c.req.text();
+            default:
+                if (expected.endsWith("+json"))
+                    return await c.req.json();
+                return await c.req.text();
+        }
+    }
+    catch (e) {
+        throw new OperationError(400, {
+            error: OPERATION_ERROR_CODES.validation,
+            message: `Malformed ${expected} request body`,
+            issues: [
+                {
+                    location: "body",
+                    path: "",
+                    message: e instanceof Error ? e.message : "Could not parse body",
+                    code: "malformed",
+                },
+            ],
+        });
+    }
+}
+const EMPTY = Object.freeze({});
+export async function validateRequest(c, operation) {
+    const { params, query, headers, body } = operation.request;
+    const parsedParams = params
+        ? (await parseWith(params, c.req.param(), "params"))
+        : EMPTY;
+    const parsedQuery = query
+        ? (await parseWith(query, queryToObject(c), "query"))
+        : EMPTY;
+    const parsedHeaders = headers
+        ? (await parseWith(headers, headersToObject(c), "headers"))
+        : EMPTY;
+    let parsedBody = undefined;
+    if (body) {
+        const raw = await readRequestBody(c, body);
+        if (raw !== undefined || (body.required ?? true)) {
+            parsedBody = await parseWith(body.schema, raw, "body");
+        }
+    }
+    return { params: parsedParams, query: parsedQuery, headers: parsedHeaders, body: parsedBody };
+}
+//# sourceMappingURL=validate-request.js.map

package/dist/runtime/validate-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-request.js","sourceRoot":"","sources":["../../src/runtime/validate-request.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EACrB,cAAc,GAEf,MAAM,UAAU,CAAC;AAElB,KAAK,UAAU,SAAS,CACtB,MAAe,EACf,KAAc,EACd,QAA8C;IAE9C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,MAAM,GAA+B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,QAAQ;QACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;QAC5B,KAAK,EAAE,qBAAqB,CAAC,UAAU;QACvC,OAAO,EAAE,mBAAmB,QAAQ,EAAE;QACtC,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;YACxB,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACvD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,CAAU,EACV,UAAiC;IAEjC,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,UAAU,GACd,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,GAAG,CAAC,CAAC;IAE5E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;YAC5B,KAAK,EAAE,qBAAqB,CAAC,UAAU;YACvC,OAAO,EAAE,KAAK,QAAQ,2BAA2B;YACjD,MAAM,EAAE;gBACN,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,UAAU,EAAE;aACtF;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;YAC5B,KAAK,EAAE,qBAAqB,CAAC,oBAAoB;YACjD,OAAO,EAAE,cAAc,QAAQ,8BAA8B,MAAM,IAAI,MAAM,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,kBAAkB;gBACrB,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,mCAAmC,CAAC;YACzC,KAAK,qBAAqB;gBACxB,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,KAAK,YAAY;gBACf,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B;gBACE,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE;YAC5B,KAAK,EAAE,qBAAqB,CAAC,UAAU;YACvC,OAAO,EAAE,aAAa,QAAQ,eAAe;YAC7C,MAAM,EAAE;gBACN;oBACE,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,EAAE;oBACR,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;oBAChE,IAAI,EAAE,WAAW;iBAClB;aACF;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AASD,MAAM,KAAK,GAAoC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,CAAU,EACV,SAAiC;IAEjC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC;IAC3D,MAAM,YAAY,GAAG,MAAM;QACzB,CAAC,CAAE,CAAC,MAAM,SAAS,CAAC,MAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAA6B;QAC9F,CAAC,CAAC,KAAK,CAAC;IACV,MAAM,WAAW,GAAG,KAAK;QACvB,CAAC,CAAE,CAAC,MAAM,SAAS,CAAC,KAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAA6B;QAC/F,CAAC,CAAC,KAAK,CAAC;IACV,MAAM,aAAa,GAAG,OAAO;QAC3B,CAAC,CAAE,CAAC,MAAM,SAAS,CAAC,OAAoB,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAA6B;QACrG,CAAC,CAAC,KAAK,CAAC;IACV,IAAI,UAAU,GAAY,SAAS,CAAC;IACpC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;YACjD,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAChG,CAAC"}

package/dist/zod-openapi.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Single zod entrypoint for this package.
+ *
+ * `@asteasolutions/zod-to-openapi` adds the `.openapi()` method to every zod
+ * schema (title, description, examples, refId for `components/schemas`, ...).
+ * The extension has to be installed exactly once per zod instance, before any
+ * schema that wants to call `.openapi()` is built, so consumers should import
+ * `z` from here (or call `extendZodWithOpenApi` themselves on the same zod
+ * instance) instead of importing zod directly.
+ */
+import { z } from "zod";
+export { z };
+export type { ZodType, ZodObject } from "zod";

package/dist/zod-openapi.js

@@ -0,0 +1,15 @@
+/**
+ * Single zod entrypoint for this package.
+ *
+ * `@asteasolutions/zod-to-openapi` adds the `.openapi()` method to every zod
+ * schema (title, description, examples, refId for `components/schemas`, ...).
+ * The extension has to be installed exactly once per zod instance, before any
+ * schema that wants to call `.openapi()` is built, so consumers should import
+ * `z` from here (or call `extendZodWithOpenApi` themselves on the same zod
+ * instance) instead of importing zod directly.
+ */
+import { z } from "zod";
+import { extendZodWithOpenApi } from "@asteasolutions/zod-to-openapi";
+extendZodWithOpenApi(z);
+export { z };
+//# sourceMappingURL=zod-openapi.js.map

package/dist/zod-openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-openapi.js","sourceRoot":"","sources":["../src/zod-openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAExB,OAAO,EAAE,CAAC,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@schemavaults/openapi-operations",
+  "description": "Define OpenAPI-representable HTTP operations (zod schemas + auth schemes + handlers) and serve them as Hono apps on Vercel functions / Next.js route handlers",
+  "version": "0.1.4",
+  "license": "UNLICENSED",
+  "private": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/schemavaults/auth.git",
+    "directory": "packages/openapi-operations"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "@asteasolutions/zod-to-openapi": "9.1.0",
+    "@schemavaults/auth-common": "0.26.6",
+    "hono": "4.13.7",
+    "openapi3-ts": "4.6.1",
+    "zod": "4.4.3"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.json && tsc-alias --project tsconfig.json",
+    "test": "NODE_ENV=test bun test",
+    "cleanup:compiled-tests-output": "find ./dist -type f \\( -name \"*.test.js\" -o -name \"*.test.js.map\" -o -name \"*.test.d.ts\" \\) -delete",
+    "cleanup": "bun run cleanup:compiled-tests-output",
+    "postbuild": "bun run cleanup",
+    "lint": "eslint src --ext .ts,.tsx",
+    "typecheck": "tsc --project tsconfig.json --noEmit"
+  },
+  "devDependencies": {
+    "typescript": "6.0.3",
+    "tsc-alias": "1.9.0",
+    "bun-types": "1.4.2",
+    "eslint": "9.39.1",
+    "@eslint/js": "9.39.1",
+    "globals": "16.5.0",
+    "@typescript-eslint/eslint-plugin": "8.48.1",
+    "@typescript-eslint/parser": "8.48.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "packageManager": "bun@1.4.2",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./runtime": {
+      "types": "./dist/runtime/index.d.ts",
+      "import": "./dist/runtime/index.js",
+      "require": "./dist/runtime/index.js"
+    },
+    "./vercel": {
+      "types": "./dist/adapters/vercel.d.ts",
+      "import": "./dist/adapters/vercel.js",
+      "require": "./dist/adapters/vercel.js"
+    },
+    "./nextjs": {
+      "types": "./dist/adapters/nextjs.d.ts",
+      "import": "./dist/adapters/nextjs.js",
+      "require": "./dist/adapters/nextjs.js"
+    },
+    "./*": {
+      "types": "./dist/*",
+      "import": "./dist/*",
+      "require": "./dist/*"
+    },
+    "./dist/*": {
+      "types": "./dist/*",
+      "import": "./dist/*",
+      "require": "./dist/*"
+    }
+  }
+}