@venizia/ignis-kernel 0.2.0-8 → 0.2.0

package/dist/cjs/base/controllers/factory/definition.js

@@ -1,374 +1,470 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.defineControllerRouteConfigs = exports.resolveCreateConfig = exports.resolveFindOneConfig = exports.resolveFindByIdConfig = exports.resolveFindConfig = exports.resolveCountConfig = exports.conditionalCountResponse = void 0;
-const types_1 = require("../../../base/models/common/types");
-const common_1 = require("../../../base/repositories/common");
-const query_schemas_1 = require("../../../base/repositories/query-schemas");
+exports.defineControllerRouteConfigs = exports.resolveCreateConfig = exports.resolveFindOneConfig = exports.resolveFindByIdConfig = exports.resolveFindConfig = exports.resolveCountConfig = exports.conditionalCountResponse = exports.RouteConfigResolver = void 0;
+const common_1 = require("../../models/common");
+const common_2 = require("../../repositories/common");
+const query_schemas_1 = require("../../repositories/query-schemas");
 const zod_openapi_1 = require("@hono/zod-openapi");
-const common_2 = require("@venizia/ignis-helpers/common");
-const common_3 = require("../common");
-/** Path params always reach the validator as strings, so a number-typed id must be coerced before `z.number()` sees it - `idParamsSchema` alone rejects `/accounts/7`. */
-const idPathParamsSchema = (opts) => {
-    const { idType } = opts;
-    if (idType !== 'number') {
-        return (0, types_1.idParamsSchema)({ idType });
+const common_3 = require("@venizia/ignis-helpers/common");
+const core_1 = require("@venizia/ignis-helpers/core");
+const common_4 = require("../common");
+/**
+ * Every method here is an unbound static, called from the exported aliases below without a
+ * receiver - a method must call another via `RouteConfigResolver.other(...)`, never
+ * `this.other(...)`, or `this` is `undefined` at the call site.
+ */
+class RouteConfigResolver {
+    /** Path params always reach the validator as strings, so a number-typed id must be coerced before `z.number()` sees it - `idParamsSchema` alone rejects `/accounts/7`. */
+    static idPathParamsSchema(opts) {
+        const { idType } = opts;
+        if (idType !== 'number') {
+            return (0, common_1.idParamsSchema)({ idType });
+        }
+        return zod_openapi_1.z.object({
+            id: zod_openapi_1.z.coerce.number().openapi({
+                param: { name: 'id', in: 'path', description: 'The unique id of the resource' },
+                examples: [1, 2, 3],
+            }),
+        });
     }
-    return zod_openapi_1.z.object({
-        id: zod_openapi_1.z.coerce.number().openapi({
-            param: { name: 'id', in: 'path', description: 'The unique id of the resource' },
-            examples: [1, 2, 3],
-        }),
-    });
-};
-/** Picks the caller's per-route `request.params` override, else the entity's id path-param schema. */
-const resolveIdParams = (opts) => {
-    const { config, idType } = opts;
-    return config?.request?.params ?? idPathParamsSchema({ idType });
-};
-/** Creates conditional count response schema. */
-const conditionalCountResponse = (dataSchema) => {
-    return zod_openapi_1.z.union([
-        common_1.CountSchema.extend({ data: dataSchema }).openapi({
-            description: 'Response with count (when x-request-count header is "true" or omitted)',
-        }),
-        dataSchema.openapi({
-            description: 'Data only response (when x-request-count header is "false")',
-        }),
-    ]);
-};
-exports.conditionalCountResponse = conditionalCountResponse;
-/** Resolves a route's response schema - user override or default. Holds the one cast every `resolve*Config` needs: generic `C` is only known by its wider structural constraint, so it cannot be proven at the value level to collapse to `TResolvedResponseSchema`. */
-const resolveResponseSchema = (opts) => {
-    const { config, defaultSchema } = opts;
-    return (config?.response?.schema ?? defaultSchema);
-};
-const resolveCountConfig = (opts) => {
-    const { config, isStrict } = opts;
-    const defaultQuery = zod_openapi_1.z
-        .object({
-        where: isStrict
-            ? query_schemas_1.WhereSchema
-            : zod_openapi_1.z.optional(query_schemas_1.WhereSchema).openapi({ description: 'Filter conditions' }),
-    })
-        .openapi({ description: 'Count query params' });
-    return {
-        request: {
-            query: config?.request?.query ?? defaultQuery,
-            headers: config?.request?.headers ?? common_3.trackableHeaders,
-        },
-        response: {
-            description: 'Total count of matching records',
-            schema: resolveResponseSchema({ config, defaultSchema: common_1.CountSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-exports.resolveCountConfig = resolveCountConfig;
-const resolveFindConfig = (opts) => {
-    const { config, selectSchema } = opts;
-    const defaultQuery = query_schemas_1.FilterQuerySchema;
-    const defaultSchema = (0, exports.conditionalCountResponse)(zod_openapi_1.z.array(selectSchema));
-    return {
-        request: {
-            query: config?.request?.query ?? defaultQuery,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Array of matching records (with optional count)',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.findResponseHeaders,
-        },
-    };
-};
-exports.resolveFindConfig = resolveFindConfig;
-const resolveFindByIdConfig = (opts) => {
-    const { config, selectSchema, idType } = opts;
-    const defaultQuery = query_schemas_1.FilterQuerySchema.openapi({
-        description: 'Filter with fields, order, include (where ignored)',
-    });
-    const defaultSchema = (0, exports.conditionalCountResponse)(selectSchema);
-    return {
-        request: {
-            params: resolveIdParams({ config, idType }),
-            query: config?.request?.query ?? defaultQuery,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Single record matching ID or null',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-exports.resolveFindByIdConfig = resolveFindByIdConfig;
-const resolveFindOneConfig = (opts) => {
-    const { config, selectSchema } = opts;
-    const defaultQuery = query_schemas_1.FilterQuerySchema.openapi({
-        description: 'Filter with where, fields, order, include',
-    });
-    const defaultSchema = (0, exports.conditionalCountResponse)(selectSchema);
-    return {
-        request: {
-            query: config?.request?.query ?? defaultQuery,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'First matching record or null',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-exports.resolveFindOneConfig = resolveFindOneConfig;
-const resolveCreateConfig = (opts) => {
-    const { config, selectSchema, createSchema } = opts;
-    const defaultSchema = (0, exports.conditionalCountResponse)(selectSchema);
-    return {
-        request: {
-            body: config?.request?.body ?? createSchema,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Created record with generated fields (id, createdAt, etc.)',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-exports.resolveCreateConfig = resolveCreateConfig;
-const resolveUpdateByIdConfig = (opts) => {
-    const { config, selectSchema, updateSchema, idType } = opts;
-    const defaultSchema = (0, exports.conditionalCountResponse)(selectSchema);
-    return {
-        request: {
-            params: resolveIdParams({ config, idType }),
-            body: config?.request?.body ?? updateSchema,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Updated record with all current fields',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-const resolveUpdateByConfig = (opts) => {
-    const { config, selectSchema, updateSchema } = opts;
-    const defaultQuery = zod_openapi_1.z.object({ where: query_schemas_1.WhereSchema }).openapi({
-        description: 'Required where condition to select records for update',
-    });
-    const defaultSchema = (0, exports.conditionalCountResponse)(zod_openapi_1.z.array(selectSchema));
-    return {
-        request: {
-            query: config?.request?.query ?? defaultQuery,
-            body: config?.request?.body ?? updateSchema,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Array of updated records',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-const resolveDeleteByIdConfig = (opts) => {
-    const { config, selectSchema, idType } = opts;
-    const defaultSchema = (0, exports.conditionalCountResponse)(selectSchema);
-    return {
-        request: {
-            params: resolveIdParams({ config, idType }),
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Deleted record data',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-const resolveDeleteByConfig = (opts) => {
-    const { config, selectSchema } = opts;
-    const defaultQuery = zod_openapi_1.z.object({ where: query_schemas_1.WhereSchema }).openapi({
-        description: 'Required where condition to select records for deletion',
-    });
-    const defaultSchema = (0, exports.conditionalCountResponse)(zod_openapi_1.z.array(selectSchema));
-    return {
-        request: {
-            query: config?.request?.query ?? defaultQuery,
-            headers: config?.request?.headers ?? common_3.defaultRequestHeaders,
-        },
-        response: {
-            description: 'Array of deleted records',
-            schema: resolveResponseSchema({ config, defaultSchema }),
-            headers: config?.response?.headers ?? common_3.commonResponseHeaders,
-        },
-    };
-};
-/** Generates complete route configurations for a CRUD controller. */
-const defineControllerRouteConfigs = (opts) => {
-    const { isStrict, idType, authenticate: controllerAuth = {}, authorize: controllerAuthorize, schema: { select: selectSchema, create: createSchema, update: updateSchema }, routes, } = opts;
-    const { strategies: defaultStrategies = [], mode: defaultMode } = controllerAuth;
-    // `Routes` is caller-bound but otherwise unconstrained here, so `{}` cannot be proven to satisfy it structurally even though every field ICustomizableRoutes declares is optional.
-    const routesConfig = (routes ?? {});
-    /** Priority: endpoint authenticate > controller authenticate. */
-    const resolveRouteAuth = (routeKey) => {
-        const endpointConfig = routesConfig[routeKey];
-        const authConfig = endpointConfig?.authenticate;
-        if (authConfig == null) {
-            return { strategies: defaultStrategies, mode: defaultMode };
+    /**
+     * The default body of a write route: the entity schema without the keys the entity stamps, and on
+     * an update without `id` - the path or `where` names the rows. Zod strips a left-out key a client
+     * sends. With nothing to leave out the schema itself is the body, refinements and OpenAPI name kept.
+     */
+    static toWriteBodySchema(opts) {
+        const { schema, route, serverStampedKeys } = opts;
+        const droppedKeys = route === 'create' ? serverStampedKeys : [...serverStampedKeys, 'id'];
+        // A `.transform()` pipe has no shape to read, so every key it might hold counts.
+        const isObjectSchema = schema instanceof zod_openapi_1.z.ZodObject;
+        const omittedKeys = isObjectSchema
+            ? droppedKeys.filter(key => Object.hasOwn(schema.shape, key))
+            : droppedKeys;
+        if (omittedKeys.length === 0) {
+            return schema;
+        }
+        if (!isObjectSchema || schema.def.checks?.length) {
+            throw (0, core_1.getError)({
+                message: `[defineControllerRouteConfigs] Cannot build the default ${route} body | keys to leave out: ${omittedKeys.join(', ')} | The schema is refined or transformed, so zod cannot remove them | Pass routes.${route}.request.body`,
+            });
         }
-        if (authConfig.skip === true) {
-            return { strategies: [] };
+        const mask = {};
+        for (const key of omittedKeys) {
+            mask[key] = true;
         }
+        return schema.omit(mask);
+    }
+    /** Picks the caller's per-route `request.params` override, else the entity's id path-param schema. */
+    static resolveIdParams(opts) {
+        const { config, idType } = opts;
+        return config?.request?.params ?? RouteConfigResolver.idPathParamsSchema({ idType });
+    }
+    /** Creates conditional count response schema. */
+    static conditionalCountResponse(dataSchema) {
+        return zod_openapi_1.z.union([
+            common_2.CountSchema.extend({ data: dataSchema }).openapi({
+                description: 'Response with count (when x-request-count header is "true" or omitted)',
+            }),
+            dataSchema.openapi({
+                description: 'Data only response (when x-request-count header is "false")',
+            }),
+        ]);
+    }
+    /** Resolves a route's response schema - user override or default. Holds the one cast every `resolve*Config` needs: generic `C` is only known by its wider structural constraint, so it cannot be proven at the value level to collapse to `TResolvedResponseSchema`. */
+    static resolveResponseSchema(opts) {
+        const { config, defaultSchema } = opts;
+        return (config?.response?.schema ?? defaultSchema);
+    }
+    static resolveCountConfig(opts) {
+        const { config, isStrict } = opts;
+        const defaultQuery = zod_openapi_1.z
+            .object({
+            where: isStrict
+                ? query_schemas_1.WhereSchema
+                : zod_openapi_1.z.optional(query_schemas_1.WhereSchema).openapi({ description: 'Filter conditions' }),
+        })
+            .openapi({ description: 'Count query params' });
         return {
-            strategies: authConfig.strategies ?? defaultStrategies,
-            mode: authConfig.mode ?? defaultMode,
+            request: {
+                query: config?.request?.query ?? defaultQuery,
+                headers: config?.request?.headers ?? common_4.trackableHeaders,
+            },
+            response: {
+                description: 'Total count of matching records',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema: common_2.CountSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
         };
-    };
-    /** Priority: endpoint authenticate.skip > endpoint authorize.skip > endpoint authorize > controller authorize. */
-    const resolveRouteAuthorize = (routeKey) => {
-        const endpointConfig = routesConfig[routeKey];
-        if (endpointConfig?.authenticate?.skip === true) {
-            return undefined;
-        }
-        const authorize = endpointConfig?.authorize;
-        if (authorize == null) {
-            return controllerAuthorize;
-        }
-        if (Array.isArray(authorize)) {
-            return authorize;
-        }
-        if ('skip' in authorize) {
-            return undefined;
-        }
-        return authorize;
-    };
-    const count = (0, exports.resolveCountConfig)({ config: routesConfig.count, isStrict });
-    const find = (0, exports.resolveFindConfig)({ config: routesConfig.find, selectSchema });
-    const findById = (0, exports.resolveFindByIdConfig)({ config: routesConfig.findById, selectSchema, idType });
-    const findOne = (0, exports.resolveFindOneConfig)({ config: routesConfig.findOne, selectSchema });
-    const create = (0, exports.resolveCreateConfig)({ config: routesConfig.create, selectSchema, createSchema });
-    const updateById = resolveUpdateByIdConfig({
-        config: routesConfig.updateById,
-        selectSchema,
-        updateSchema,
-        idType,
-    });
-    const updateBy = resolveUpdateByConfig({
-        config: routesConfig.updateBy,
-        selectSchema,
-        updateSchema,
-    });
-    const deleteById = resolveDeleteByIdConfig({
-        config: routesConfig.deleteById,
-        selectSchema,
-        idType,
-    });
-    const deleteBy = resolveDeleteByConfig({ config: routesConfig.deleteBy, selectSchema });
-    const rs = {
-        COUNT: {
-            method: common_2.HTTP.Methods.GET,
-            path: common_3.RestPaths.COUNT,
-            description: 'Count records matching where condition',
-            authenticate: resolveRouteAuth('count'),
-            authorize: resolveRouteAuthorize('count'),
-            request: count.request,
-            responses: (0, types_1.jsonResponse)(count.response),
-        },
-        FIND: {
-            method: common_2.HTTP.Methods.GET,
-            path: common_3.RestPaths.ROOT,
-            description: 'Find records with filter, pagination, sorting, and relations',
-            authenticate: resolveRouteAuth('find'),
-            authorize: resolveRouteAuthorize('find'),
-            request: find.request,
-            responses: (0, types_1.jsonResponse)(find.response),
-        },
-        FIND_BY_ID: {
-            method: common_2.HTTP.Methods.GET,
-            path: '/{id}',
-            description: 'Find single record by ID',
-            authenticate: resolveRouteAuth('findById'),
-            authorize: resolveRouteAuthorize('findById'),
-            request: findById.request,
-            responses: (0, types_1.jsonResponse)(findById.response),
-        },
-        FIND_ONE: {
-            method: common_2.HTTP.Methods.GET,
-            path: common_3.RestPaths.FIND_ONE,
-            description: 'Find first record matching filter',
-            authenticate: resolveRouteAuth('findOne'),
-            authorize: resolveRouteAuthorize('findOne'),
-            request: findOne.request,
-            responses: (0, types_1.jsonResponse)(findOne.response),
-        },
-        CREATE: {
-            method: common_2.HTTP.Methods.POST,
-            path: common_3.RestPaths.ROOT,
-            description: 'Create new record',
-            authenticate: resolveRouteAuth('create'),
-            authorize: resolveRouteAuthorize('create'),
+    }
+    static resolveFindConfig(opts) {
+        const { config, selectSchema } = opts;
+        const defaultQuery = query_schemas_1.FilterQuerySchema;
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(zod_openapi_1.z.array(selectSchema));
+        return {
+            request: {
+                query: config?.request?.query ?? defaultQuery,
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Array of matching records (with optional count)',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.findResponseHeaders,
+            },
+        };
+    }
+    static resolveFindByIdConfig(opts) {
+        const { config, selectSchema, idType } = opts;
+        const defaultQuery = query_schemas_1.FilterQuerySchema.openapi({
+            description: 'Filter with fields, order, include (where ignored)',
+        });
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(selectSchema);
+        return {
+            request: {
+                params: RouteConfigResolver.resolveIdParams({ config, idType }),
+                query: config?.request?.query ?? defaultQuery,
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Single record matching ID or null',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
+        };
+    }
+    static resolveFindOneConfig(opts) {
+        const { config, selectSchema } = opts;
+        const defaultQuery = query_schemas_1.FilterQuerySchema.openapi({
+            description: 'Filter with where, fields, order, include',
+        });
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(selectSchema);
+        return {
+            request: {
+                query: config?.request?.query ?? defaultQuery,
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'First matching record or null',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
+        };
+    }
+    /** `serverStampedKeys` - what the entity reports from `getServerStampedKeys()`; the default body leaves them out. */
+    static resolveCreateConfig(opts) {
+        const { config, selectSchema, createSchema, serverStampedKeys = [] } = opts;
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(selectSchema);
+        return {
+            request: {
+                body: config?.request?.body ??
+                    RouteConfigResolver.toWriteBodySchema({
+                        schema: createSchema,
+                        route: 'create',
+                        serverStampedKeys,
+                    }),
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Created record with generated fields (id, createdAt, etc.)',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
+        };
+    }
+    static resolveUpdateByIdConfig(opts) {
+        const { config, selectSchema, updateSchema, idType, serverStampedKeys } = opts;
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(selectSchema);
+        return {
+            request: {
+                params: RouteConfigResolver.resolveIdParams({ config, idType }),
+                body: config?.request?.body ??
+                    RouteConfigResolver.toWriteBodySchema({
+                        schema: updateSchema,
+                        route: 'updateById',
+                        serverStampedKeys,
+                    }),
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Updated record with all current fields',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
+        };
+    }
+    static resolveUpdateByConfig(opts) {
+        const { config, selectSchema, updateSchema, serverStampedKeys } = opts;
+        const defaultQuery = zod_openapi_1.z.object({ where: query_schemas_1.WhereSchema.optional() }).openapi({
+            description: 'Where condition selecting the records to update - here or in the body, not both',
+        });
+        // Built only without a custom body: a custom body must not trip the entity schema's checks.
+        const buildDefaultBody = () => {
+            const writableSchema = RouteConfigResolver.toWriteBodySchema({
+                schema: updateSchema,
+                route: 'updateBy',
+                serverStampedKeys,
+            });
+            // A model with a real `where` column keeps it: the body reserves the name only when it is
+            // free, and the handler then simply finds no `where` there.
+            return 'where' in writableSchema.shape
+                ? writableSchema
+                : writableSchema.extend({ where: query_schemas_1.WhereSchema.optional() });
+        };
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(zod_openapi_1.z.array(selectSchema));
+        return {
             request: {
-                body: (0, types_1.jsonContent)({
-                    description: 'Record data (required fields must be provided)',
-                    schema: create.request.body,
-                }),
-                headers: create.request.headers,
+                query: config?.request?.query ?? defaultQuery,
+                body: config?.request?.body ?? buildDefaultBody(),
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Array of updated records',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
             },
-            responses: (0, types_1.jsonResponse)(create.response),
-        },
-        UPDATE_BY_ID: {
-            method: common_2.HTTP.Methods.PATCH,
-            path: '/{id}',
-            description: 'Partial update record by ID',
-            authenticate: resolveRouteAuth('updateById'),
-            authorize: resolveRouteAuthorize('updateById'),
+        };
+    }
+    static resolveDeleteByIdConfig(opts) {
+        const { config, selectSchema, idType } = opts;
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(selectSchema);
+        return {
             request: {
-                params: updateById.request.params,
-                body: (0, types_1.jsonContent)({
-                    description: 'Partial data (only changed fields)',
-                    schema: updateById.request.body,
-                }),
-                headers: updateById.request.headers,
+                params: RouteConfigResolver.resolveIdParams({ config, idType }),
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Deleted record data',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
             },
-            responses: (0, types_1.jsonResponse)(updateById.response),
-        },
-        UPDATE_BY: {
-            method: common_2.HTTP.Methods.PATCH,
-            path: common_3.RestPaths.ROOT,
-            description: 'Bulk update records matching where condition',
-            authenticate: resolveRouteAuth('updateBy'),
-            authorize: resolveRouteAuthorize('updateBy'),
+        };
+    }
+    static resolveDeleteByConfig(opts) {
+        const { config, selectSchema } = opts;
+        const defaultQuery = zod_openapi_1.z.object({ where: query_schemas_1.WhereSchema.optional() }).openapi({
+            description: 'Where condition selecting the records to delete - here or in the body, not both',
+        });
+        const defaultSchema = RouteConfigResolver.conditionalCountResponse(zod_openapi_1.z.array(selectSchema));
+        return {
             request: {
-                query: updateBy.request.query,
-                body: (0, types_1.jsonContent)({
-                    description: 'Partial data to apply to all matches',
-                    schema: updateBy.request.body,
-                }),
-                headers: updateBy.request.headers,
+                query: config?.request?.query ?? defaultQuery,
+                // No DEFAULT body schema. Declaring one makes `@hono/zod-openapi` gate the media type, and a
+                // client that sends `content-type: application/json` with no body then gets 400 where it used
+                // to get 200. The handler reads the body itself; name one here to get the Swagger editor.
+                body: config?.request?.body,
+                headers: config?.request?.headers ?? common_4.defaultRequestHeaders,
+            },
+            response: {
+                description: 'Array of deleted records',
+                schema: RouteConfigResolver.resolveResponseSchema({ config, defaultSchema }),
+                headers: config?.response?.headers ?? common_4.commonResponseHeaders,
+            },
+        };
+    }
+    /**
+     * Generates complete route configurations for a CRUD controller. `serverStampedKeys` - what the
+     * entity reports from `getServerStampedKeys()`; the default write bodies leave them out.
+     */
+    static defineControllerRouteConfigs(opts) {
+        const { isStrict, idType, authenticate: controllerAuth = {}, authorize: controllerAuthorize, schema: { select: selectSchema, create: createSchema, update: updateSchema }, serverStampedKeys = [], routes, } = opts;
+        const { strategies: defaultStrategies = [], mode: defaultMode } = controllerAuth;
+        // `Routes` is caller-bound but otherwise unconstrained here, so `{}` cannot be proven to satisfy it structurally even though every field ICustomizableRoutes declares is optional.
+        const routesConfig = (routes ?? {});
+        /** Priority: endpoint authenticate > controller authenticate. */
+        const resolveRouteAuth = (routeKey) => {
+            const endpointConfig = routesConfig[routeKey];
+            const authConfig = endpointConfig?.authenticate;
+            if (authConfig == null) {
+                return { strategies: defaultStrategies, mode: defaultMode };
+            }
+            if (authConfig.skip === true) {
+                return { strategies: [] };
+            }
+            return {
+                strategies: authConfig.strategies ?? defaultStrategies,
+                mode: authConfig.mode ?? defaultMode,
+            };
+        };
+        /** Priority: endpoint authenticate.skip > endpoint authorize.skip > endpoint authorize > controller authorize. */
+        const resolveRouteAuthorize = (routeKey) => {
+            const endpointConfig = routesConfig[routeKey];
+            if (endpointConfig?.authenticate?.skip === true) {
+                return undefined;
+            }
+            const authorize = endpointConfig?.authorize;
+            if (authorize == null) {
+                return controllerAuthorize;
+            }
+            if (Array.isArray(authorize)) {
+                return authorize;
+            }
+            if ('skip' in authorize) {
+                return undefined;
+            }
+            return authorize;
+        };
+        const count = RouteConfigResolver.resolveCountConfig({ config: routesConfig.count, isStrict });
+        const find = RouteConfigResolver.resolveFindConfig({ config: routesConfig.find, selectSchema });
+        const findById = RouteConfigResolver.resolveFindByIdConfig({
+            config: routesConfig.findById,
+            selectSchema,
+            idType,
+        });
+        const findOne = RouteConfigResolver.resolveFindOneConfig({
+            config: routesConfig.findOne,
+            selectSchema,
+        });
+        const create = RouteConfigResolver.resolveCreateConfig({
+            config: routesConfig.create,
+            selectSchema,
+            createSchema,
+            serverStampedKeys,
+        });
+        const updateById = RouteConfigResolver.resolveUpdateByIdConfig({
+            config: routesConfig.updateById,
+            selectSchema,
+            updateSchema,
+            idType,
+            serverStampedKeys,
+        });
+        const updateBy = RouteConfigResolver.resolveUpdateByConfig({
+            config: routesConfig.updateBy,
+            selectSchema,
+            updateSchema,
+            serverStampedKeys,
+        });
+        const deleteById = RouteConfigResolver.resolveDeleteByIdConfig({
+            config: routesConfig.deleteById,
+            selectSchema,
+            idType,
+        });
+        const deleteBy = RouteConfigResolver.resolveDeleteByConfig({
+            config: routesConfig.deleteBy,
+            selectSchema,
+        });
+        const rs = {
+            COUNT: {
+                method: common_3.HTTP.Methods.GET,
+                path: common_4.RestPaths.COUNT,
+                description: 'Count records matching where condition',
+                authenticate: resolveRouteAuth('count'),
+                authorize: resolveRouteAuthorize('count'),
+                request: count.request,
+                responses: (0, common_1.jsonResponse)(count.response),
+            },
+            FIND: {
+                method: common_3.HTTP.Methods.GET,
+                path: common_4.RestPaths.ROOT,
+                description: 'Find records with filter, pagination, sorting, and relations',
+                authenticate: resolveRouteAuth('find'),
+                authorize: resolveRouteAuthorize('find'),
+                request: find.request,
+                responses: (0, common_1.jsonResponse)(find.response),
             },
-            responses: (0, types_1.jsonResponse)(updateBy.response),
-        },
-        DELETE_BY_ID: {
-            method: common_2.HTTP.Methods.DELETE,
-            path: '/{id}',
-            description: 'Delete record by ID (irreversible)',
-            authenticate: resolveRouteAuth('deleteById'),
-            authorize: resolveRouteAuthorize('deleteById'),
-            request: deleteById.request,
-            responses: (0, types_1.jsonResponse)(deleteById.response),
-        },
-        DELETE_BY: {
-            method: common_2.HTTP.Methods.DELETE,
-            path: common_3.RestPaths.ROOT,
-            description: 'Bulk delete records matching where condition (irreversible)',
-            authenticate: resolveRouteAuth('deleteBy'),
-            authorize: resolveRouteAuthorize('deleteBy'),
-            request: deleteBy.request,
-            responses: (0, types_1.jsonResponse)(deleteBy.response),
-        },
-    };
-    return rs;
-};
-exports.defineControllerRouteConfigs = defineControllerRouteConfigs;
+            FIND_BY_ID: {
+                method: common_3.HTTP.Methods.GET,
+                path: '/{id}',
+                description: 'Find single record by ID',
+                authenticate: resolveRouteAuth('findById'),
+                authorize: resolveRouteAuthorize('findById'),
+                request: findById.request,
+                responses: (0, common_1.jsonResponse)(findById.response),
+            },
+            FIND_ONE: {
+                method: common_3.HTTP.Methods.GET,
+                path: common_4.RestPaths.FIND_ONE,
+                description: 'Find first record matching filter',
+                authenticate: resolveRouteAuth('findOne'),
+                authorize: resolveRouteAuthorize('findOne'),
+                request: findOne.request,
+                responses: (0, common_1.jsonResponse)(findOne.response),
+            },
+            CREATE: {
+                method: common_3.HTTP.Methods.POST,
+                path: common_4.RestPaths.ROOT,
+                description: 'Create new record',
+                authenticate: resolveRouteAuth('create'),
+                authorize: resolveRouteAuthorize('create'),
+                request: {
+                    body: (0, common_1.jsonContent)({
+                        description: 'Record data (required fields must be provided)',
+                        schema: create.request.body,
+                    }),
+                    headers: create.request.headers,
+                },
+                responses: (0, common_1.jsonResponse)(create.response),
+            },
+            UPDATE_BY_ID: {
+                method: common_3.HTTP.Methods.PATCH,
+                path: '/{id}',
+                description: 'Partial update record by ID',
+                authenticate: resolveRouteAuth('updateById'),
+                authorize: resolveRouteAuthorize('updateById'),
+                request: {
+                    params: updateById.request.params,
+                    body: (0, common_1.jsonContent)({
+                        description: 'Partial data (only changed fields)',
+                        schema: updateById.request.body,
+                    }),
+                    headers: updateById.request.headers,
+                },
+                responses: (0, common_1.jsonResponse)(updateById.response),
+            },
+            UPDATE_BY: {
+                method: common_3.HTTP.Methods.PATCH,
+                path: common_4.RestPaths.ROOT,
+                description: 'Bulk update records matching where condition',
+                authenticate: resolveRouteAuth('updateBy'),
+                authorize: resolveRouteAuthorize('updateBy'),
+                request: {
+                    query: updateBy.request.query,
+                    body: (0, common_1.jsonContent)({
+                        description: 'Partial data to apply to all matches',
+                        schema: updateBy.request.body,
+                    }),
+                    headers: updateBy.request.headers,
+                },
+                responses: (0, common_1.jsonResponse)(updateBy.response),
+            },
+            DELETE_BY_ID: {
+                method: common_3.HTTP.Methods.DELETE,
+                path: '/{id}',
+                description: 'Delete record by ID (irreversible)',
+                authenticate: resolveRouteAuth('deleteById'),
+                authorize: resolveRouteAuthorize('deleteById'),
+                request: deleteById.request,
+                responses: (0, common_1.jsonResponse)(deleteById.response),
+            },
+            DELETE_BY: {
+                method: common_3.HTTP.Methods.DELETE,
+                path: common_4.RestPaths.ROOT,
+                description: 'Bulk delete records matching where condition (irreversible)',
+                authenticate: resolveRouteAuth('deleteBy'),
+                authorize: resolveRouteAuthorize('deleteBy'),
+                request: {
+                    query: deleteBy.request.query,
+                    ...(deleteBy.request.body
+                        ? {
+                            body: (0, common_1.jsonContent)({
+                                description: 'Where condition, when it does not fit in the query',
+                                schema: deleteBy.request.body,
+                                required: false,
+                            }),
+                        }
+                        : {}),
+                    headers: deleteBy.request.headers,
+                },
+                responses: (0, common_1.jsonResponse)(deleteBy.response),
+            },
+        };
+        return rs;
+    }
+}
+exports.RouteConfigResolver = RouteConfigResolver;
+exports.conditionalCountResponse = RouteConfigResolver.conditionalCountResponse;
+exports.resolveCountConfig = RouteConfigResolver.resolveCountConfig;
+exports.resolveFindConfig = RouteConfigResolver.resolveFindConfig;
+exports.resolveFindByIdConfig = RouteConfigResolver.resolveFindByIdConfig;
+exports.resolveFindOneConfig = RouteConfigResolver.resolveFindOneConfig;
+exports.resolveCreateConfig = RouteConfigResolver.resolveCreateConfig;
+exports.defineControllerRouteConfigs = RouteConfigResolver.defineControllerRouteConfigs;
 //# sourceMappingURL=definition.js.map