@veloxts/router 0.7.1 → 0.7.3

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @veloxts/router
 
+## 0.7.3
+
+### Patch Changes
+
+- feat(cli): auto-populate Zod schemas from Prisma model fields
+- Updated dependencies
+  - @veloxts/core@0.7.3
+  - @veloxts/validation@0.7.3
+
+## 0.7.2
+
+### Patch Changes
+
+- simplify code for clarity and maintainability
+- Updated dependencies
+  - @veloxts/core@0.7.2
+
 ## 0.7.1
 
 ### Patch Changes

package/GUIDE.md

@@ -503,7 +503,7 @@ export const userProcedures = procedures('users', {
     .input(z.object({ id: z.string().uuid() }))
     .query(async ({ input, ctx }) => {
       const user = await ctx.db.user.findUniqueOrThrow({ where: { id: input.id } });
-      return resource(user, UserSchema).forAnonymous();
+      return resource(user, UserSchema.public);
     }),
 
   // Conditional projection based on ownership
@@ -514,9 +514,9 @@ export const userProcedures = procedures('users', {
       const user = await ctx.db.user.findUniqueOrThrow({ where: { id: input.id } });
       // Show more fields if viewing own profile
       if (user.id === ctx.user?.id) {
-        return resource(user, UserSchema).forAuthenticated();
+        return resource(user, UserSchema.authenticated);
       }
-      return resource(user, UserSchema).forAnonymous();
+      return resource(user, UserSchema.public);
     }),
 
   // Admin with explicit projection
@@ -525,7 +525,7 @@ export const userProcedures = procedures('users', {
     .input(z.object({ id: z.string().uuid() }))
     .query(async ({ input, ctx }) => {
       const user = await ctx.db.user.findUniqueOrThrow({ where: { id: input.id } });
-      return resource(user, UserSchema).forAdmin();
+      return resource(user, UserSchema.admin);
     }),
 });
 ```
@@ -554,7 +554,7 @@ const listUsersManual = procedure()
   .guard(authenticated)
   .query(async ({ ctx }) => {
     const users = await ctx.db.user.findMany({ take: 50 });
-    return resourceCollection(users, UserSchema).forAuthenticated();
+    return resourceCollection(users, UserSchema.authenticated);
   });
 ```
 
@@ -577,9 +577,9 @@ const getUser = procedure()
 
 | Method | Fields Included | Use Case |
 |--------|-----------------|----------|
-| `.forAnonymous()` | `public` only | Public APIs, unauthenticated users |
-| `.forAuthenticated()` | `public` + `authenticated` | Logged-in users |
-| `.forAdmin()` | All fields | Admin dashboards, internal tools |
+| `UserSchema.public` | `public` only | Public APIs, unauthenticated users |
+| `UserSchema.authenticated` | `public` + `authenticated` | Logged-in users |
+| `UserSchema.admin` | All fields | Admin dashboards, internal tools |
 | `.for(ctx)` | Auto-detected from context | Dynamic access control |
 
 ### Type Safety
@@ -596,14 +596,14 @@ const getProfile = procedure()
   });
 // Return type: { id: string; name: string; email: string; createdAt: Date }
 
-// Manual projection - type inferred from method
-const result = resource(user, UserSchema).forAnonymous();
+// Tagged view projection - type inferred from schema view
+const result = resource(user, UserSchema.public);
 // Type: { id: string; name: string }
 
-const authResult = resource(user, UserSchema).forAuthenticated();
+const authResult = resource(user, UserSchema.authenticated);
 // Type: { id: string; name: string; email: string; createdAt: Date }
 
-const adminResult = resource(user, UserSchema).forAdmin();
+const adminResult = resource(user, UserSchema.admin);
 // Type: { id: string; name: string; email: string; createdAt: Date; internalNotes: string | null; lastLoginIp: string | null }
 ```
 
@@ -612,8 +612,8 @@ const adminResult = resource(user, UserSchema).forAdmin();
 | Scenario | Approach |
 |----------|----------|
 | Guard determines access level | **Automatic** (`.guardNarrow().resource()`) |
-| Public endpoints (no guard) | Manual (`.forAnonymous()`) |
-| Conditional/dynamic projection | Manual (`.forX()` in handler) |
+| Public endpoints (no guard) | Tagged view (`UserSchema.public`) |
+| Conditional/dynamic projection | Tagged view or `.for(ctx)` in handler |
 | Simple, declarative code | **Automatic** |
 | Complex access logic | Manual
 

package/dist/openapi/generator.js

@@ -201,6 +201,42 @@ function hasProperties(schema) {
 // ============================================================================
 // Response Generation
 // ============================================================================
+/**
+ * Creates a standard error response schema with the given example code
+ *
+ * @param exampleCode - Example error code (e.g., 'VALIDATION_ERROR', 'NOT_FOUND')
+ * @param extraProperties - Additional properties on the error object (e.g., details)
+ */
+function createErrorSchema(exampleCode, extraProperties) {
+    return {
+        type: 'object',
+        properties: {
+            error: {
+                type: 'object',
+                properties: {
+                    code: { type: 'string', example: exampleCode },
+                    message: { type: 'string' },
+                    ...extraProperties,
+                },
+                required: ['code', 'message'],
+            },
+        },
+        required: ['error'],
+    };
+}
+/**
+ * Creates a standard error response with the given description and example code
+ */
+function createErrorResponse(description, exampleCode) {
+    return {
+        description,
+        content: {
+            'application/json': {
+                schema: createErrorSchema(exampleCode),
+            },
+        },
+    };
+}
 /**
  * Builds response definitions for an operation
  */
@@ -211,7 +247,6 @@ function buildResponses(method, outputSchema, hasAuth) {
     const successDescription = getSuccessDescription(method);
     // Success response
     if (successCode === '204') {
-        // No content
         responses['204'] = { description: successDescription };
     }
     else {
@@ -224,120 +259,26 @@ function buildResponses(method, outputSchema, hasAuth) {
             }),
         };
     }
-    // Error responses
+    // Validation error
     responses['400'] = {
         description: 'Bad Request - Validation error',
         content: {
             'application/json': {
-                schema: {
-                    type: 'object',
-                    properties: {
-                        error: {
-                            type: 'object',
-                            properties: {
-                                code: { type: 'string', example: 'VALIDATION_ERROR' },
-                                message: { type: 'string' },
-                                details: { type: 'object' },
-                            },
-                            required: ['code', 'message'],
-                        },
-                    },
-                    required: ['error'],
-                },
+                schema: createErrorSchema('VALIDATION_ERROR', { details: { type: 'object' } }),
             },
         },
     };
     // Auth-related responses
     if (hasAuth) {
-        responses['401'] = {
-            description: 'Unauthorized - Authentication required',
-            content: {
-                'application/json': {
-                    schema: {
-                        type: 'object',
-                        properties: {
-                            error: {
-                                type: 'object',
-                                properties: {
-                                    code: { type: 'string', example: 'UNAUTHORIZED' },
-                                    message: { type: 'string' },
-                                },
-                                required: ['code', 'message'],
-                            },
-                        },
-                        required: ['error'],
-                    },
-                },
-            },
-        };
-        responses['403'] = {
-            description: 'Forbidden - Insufficient permissions',
-            content: {
-                'application/json': {
-                    schema: {
-                        type: 'object',
-                        properties: {
-                            error: {
-                                type: 'object',
-                                properties: {
-                                    code: { type: 'string', example: 'FORBIDDEN' },
-                                    message: { type: 'string' },
-                                },
-                                required: ['code', 'message'],
-                            },
-                        },
-                        required: ['error'],
-                    },
-                },
-            },
-        };
+        responses['401'] = createErrorResponse('Unauthorized - Authentication required', 'UNAUTHORIZED');
+        responses['403'] = createErrorResponse('Forbidden - Insufficient permissions', 'FORBIDDEN');
     }
     // Not found for single-resource operations
     if (['GET', 'PUT', 'PATCH', 'DELETE'].includes(method)) {
-        responses['404'] = {
-            description: 'Not Found - Resource does not exist',
-            content: {
-                'application/json': {
-                    schema: {
-                        type: 'object',
-                        properties: {
-                            error: {
-                                type: 'object',
-                                properties: {
-                                    code: { type: 'string', example: 'NOT_FOUND' },
-                                    message: { type: 'string' },
-                                },
-                                required: ['code', 'message'],
-                            },
-                        },
-                        required: ['error'],
-                    },
-                },
-            },
-        };
+        responses['404'] = createErrorResponse('Not Found - Resource does not exist', 'NOT_FOUND');
     }
     // Internal server error
-    responses['500'] = {
-        description: 'Internal Server Error',
-        content: {
-            'application/json': {
-                schema: {
-                    type: 'object',
-                    properties: {
-                        error: {
-                            type: 'object',
-                            properties: {
-                                code: { type: 'string', example: 'INTERNAL_ERROR' },
-                                message: { type: 'string' },
-                            },
-                            required: ['code', 'message'],
-                        },
-                    },
-                    required: ['error'],
-                },
-            },
-        },
-    };
+    responses['500'] = createErrorResponse('Internal Server Error', 'INTERNAL_ERROR');
     return responses;
 }
 /**

package/dist/openapi/path-extractor.js

@@ -97,7 +97,7 @@ export function parsePathParameters(path, schemas) {
  * @returns True if path contains parameters
  */
 export function hasPathParameters(path) {
-    return PATH_PARAM_REGEX.test(path);
+    return path.includes(':');
 }
 /**
  * Extracts query parameters from a JSON Schema

package/dist/procedure/builder.js

@@ -199,26 +199,6 @@ function createBuilder(state) {
         mutation(handler) {
             return compileProcedure('mutation', handler, state);
         },
-        /**
-         * Sets the output type based on a resource schema
-         *
-         * Accepts either a plain `ResourceSchema` or a tagged schema
-         * (e.g., `UserSchema.authenticated`) for declarative auto-projection.
-         *
-         * @example
-         * ```typescript
-         * // Tagged schema — auto-projects to authenticated fields
-         * procedure()
-         *   .guard(authenticated)
-         *   .resource(UserSchema.authenticated)
-         *   .query(handler);
-         *
-         * // Plain schema — defaults to public, or derives from guardNarrow
-         * procedure()
-         *   .resource(UserSchema)
-         *   .query(handler);
-         * ```
-         */
         /**
          * Sets the output type based on a resource schema
          *
@@ -248,9 +228,7 @@ function compileProcedure(type, handler, state) {
     const typedMiddlewares = state.middlewares;
     // Pre-compile the middleware chain executor if middlewares exist
     // This avoids rebuilding the chain on every request
-    const precompiledExecutor = typedMiddlewares.length > 0
-        ? createPrecompiledMiddlewareExecutor(typedMiddlewares, handler)
-        : undefined;
+    const precompiledExecutor = typedMiddlewares.length > 0 ? createMiddlewareExecutor(typedMiddlewares, handler) : undefined;
     // Create the final procedure object
     return {
         type,
@@ -272,18 +250,6 @@ function compileProcedure(type, handler, state) {
         _resourceLevel: state.resourceLevel,
     };
 }
-/**
- * Creates a pre-compiled middleware chain executor
- *
- * PERFORMANCE: This function builds the middleware chain once during procedure
- * compilation, creating a single reusable function that executes the entire chain.
- * This eliminates the need to rebuild closures on every request.
- *
- * @internal
- */
-function createPrecompiledMiddlewareExecutor(middlewares, handler) {
-    return createMiddlewareExecutor(middlewares, handler);
-}
 /**
  * Defines a collection of procedures under a namespace
  *
@@ -477,7 +443,7 @@ export async function executeProcedure(procedure, rawInput, ctx) {
     }
     else {
         // Fallback: Build middleware chain dynamically (should not normally happen)
-        result = await executeMiddlewareChainFallback(procedure.middlewares, input, ctxWithLevel, async () => procedure.handler({ input, ctx: ctxWithLevel }));
+        result = await executeMiddlewareChain(procedure.middlewares, input, ctxWithLevel, async () => procedure.handler({ input, ctx: ctxWithLevel }));
     }
     // Step 4: Auto-project if resource schema is set
     if (procedure._resourceSchema) {
@@ -508,17 +474,6 @@ export async function executeProcedure(procedure, rawInput, ctx) {
     }
     return result;
 }
-/**
- * Fallback middleware chain executor for edge cases
- *
- * This function is only used when _precompiledExecutor is not available,
- * which should be rare in normal operation.
- *
- * @internal
- */
-async function executeMiddlewareChainFallback(middlewares, input, ctx, handler) {
-    return executeMiddlewareChain(middlewares, input, ctx, handler);
-}
 // ============================================================================
 // Type Utilities
 // ============================================================================

package/dist/rest/adapter.js

@@ -222,10 +222,8 @@ function gatherInput(request, route) {
         (route.procedure.parentResources !== undefined && route.procedure.parentResources.length > 0);
     switch (route.method) {
         case 'GET':
-            // GET: params (for :id and all parent params) + query (for filters/pagination)
-            return { ...params, ...query };
         case 'DELETE':
-            // DELETE: params (for :id and all parent params) + query (for options), no body per REST conventions
+            // GET/DELETE: params (for :id and all parent params) + query (for filters/pagination/options)
             return { ...params, ...query };
         case 'PUT':
         case 'PATCH':
@@ -320,24 +318,7 @@ export function registerRestRoutes(server, collections, options = {}) {
             // When used in legacy mode, we prepend the prefix manually.
             const fullPath = _prefixHandledByFastify ? route.path : `${prefix}${route.path}`;
             const handler = createRouteHandler(route);
-            // Register route based on method
-            switch (route.method) {
-                case 'GET':
-                    server.get(fullPath, handler);
-                    break;
-                case 'POST':
-                    server.post(fullPath, handler);
-                    break;
-                case 'PUT':
-                    server.put(fullPath, handler);
-                    break;
-                case 'PATCH':
-                    server.patch(fullPath, handler);
-                    break;
-                case 'DELETE':
-                    server.delete(fullPath, handler);
-                    break;
-            }
+            server.route({ method: route.method, url: fullPath, handler });
         }
     }
 }

package/dist/trpc/adapter.js

@@ -86,38 +86,22 @@ function buildTRPCProcedure(t, procedure) {
     if (procedure.outputSchema) {
         builder = builder.output(procedure.outputSchema);
     }
-    // Select handler based on whether input is expected
-    const handler = procedure.inputSchema
-        ? createHandler(procedure)
-        : createNoInputHandler(procedure);
+    // Create handler that works with or without input
+    const handler = createProcedureHandler(procedure);
     // Finalize as query or mutation
     return procedure.type === 'query' ? builder.query(handler) : builder.mutation(handler);
 }
 /**
- * Create a handler function for a procedure with input
+ * Create a tRPC handler function from a compiled procedure
  *
- * @internal
- */
-function createHandler(procedure) {
-    return async (opts) => {
-        const { input, ctx } = opts;
-        // Execute middleware chain if any
-        if (procedure.middlewares.length > 0) {
-            return executeWithMiddleware(procedure, input, ctx);
-        }
-        // Direct handler execution
-        return procedure.handler({ input, ctx });
-    };
-}
-/**
- * Create a handler function for a procedure without input
+ * Works for both procedures with and without input schemas.
  *
  * @internal
  */
-function createNoInputHandler(procedure) {
+function createProcedureHandler(procedure) {
     return async (opts) => {
         const { ctx } = opts;
-        const input = undefined;
+        const input = opts.input ?? undefined;
         // Execute middleware chain if any
         if (procedure.middlewares.length > 0) {
             return executeWithMiddleware(procedure, input, ctx);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veloxts/router",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Procedure definitions with tRPC and REST routing for VeloxTS framework",
   "type": "module",
   "main": "dist/index.js",
@@ -39,8 +39,8 @@
   "dependencies": {
     "@trpc/server": "11.10.0",
     "fastify": "5.7.4",
-    "@veloxts/core": "0.7.1",
-    "@veloxts/validation": "0.7.1"
+    "@veloxts/core": "0.7.3",
+    "@veloxts/validation": "0.7.3"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "4.0.18",