@voyant-travel/hono 0.116.1 → 0.117.0

package/dist/app.d.ts

@@ -1,5 +1,10 @@
-import { Hono } from "hono";
+import type { Hono } from "hono";
 import type { VoyantAppConfig, VoyantBindings, VoyantVariables } from "./types.js";
+/** The composed app's Hono env (bindings + framework request variables). */
+type MountEnv<TBindings extends VoyantBindings> = {
+    Bindings: TBindings;
+    Variables: VoyantVariables;
+};
 /**
  * App handle returned alongside the Hono instance. Carries `ready()` for
  * headless / sibling-process deployments that need to fire the lazy
@@ -43,8 +48,6 @@ export interface VoyantAppExtensions<TBindings = unknown> {
  * from a manifest + registry + capabilities and delegates here. Use `mountApp`
  * directly only when you have the resolved set in hand (tests, advanced hosts).
  */
-export declare function mountApp<TBindings extends VoyantBindings>(config: VoyantAppConfig<TBindings>): Hono<{
-    Bindings: TBindings;
-    Variables: VoyantVariables;
-}> & VoyantAppExtensions<TBindings>;
+export declare function mountApp<TBindings extends VoyantBindings>(config: VoyantAppConfig<TBindings>): Hono<MountEnv<TBindings>> & VoyantAppExtensions<TBindings>;
+export {};
 //# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAkC3B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAyB5F;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;CACjD;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,eAAe,CAAA;CAAE,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAke5F"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAkChC,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAY,eAAe,EAAE,MAAM,YAAY,CAAA;AAI5F,4EAA4E;AAC5E,KAAK,QAAQ,CAAC,SAAS,SAAS,cAAc,IAAI;IAChD,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,eAAe,CAAA;CAC3B,CAAA;AAuBD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB,CAAC,SAAS,GAAG,OAAO;IACtD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE,OAAO,qBAAqB,EAAE,QAAQ,CAAA;CACjD;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,SAAS,cAAc,EACvD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAue5D"}

package/dist/app.js

@@ -1,6 +1,8 @@
+// agent-quality: file-size exception — app.ts is the framework composition root;
+// splitting it is intentional follow-up work, not part of voyant#2114.
+import { OpenAPIHono } from "@hono/zod-openapi";
 import { createContainer, createEventBus, createQueryRunner, } from "@voyant-travel/core";
 import { createOutboxEventStore } from "@voyant-travel/db/outbox";
-import { Hono } from "hono";
 import { assembleAnonymousPaths } from "./anonymous-paths.js";
 import { containerToServiceResolver, makeFrameworkLogger, wireWorkflowRuntime, } from "./app-workflows.js";
 import { mountLazyRoutePaths, mountLazyRoutesAt } from "./lazy-routes.js";
@@ -45,7 +47,13 @@ function buildRateLimitPolicy(config, env, bucket, defaults) {
  * directly only when you have the resolved set in hand (tests, advanced hosts).
  */
 export function mountApp(config) {
-    const app = new Hono();
+    // Composed root is an OpenAPIHono (a drop-in Hono superclass) so module routes
+    // authored with `.openapi()` register here and the spec can be generated via
+    // `@voyant-travel/hono/openapi` at build time. The doc *generator*
+    // (`@asteasolutions/zod-to-openapi` + `openapi3-ts`) is only reachable through
+    // `getOpenAPIDocument`, so it tree-shakes out of the Worker bundle; the
+    // OpenAPIHono registry + validator glue (~35 KB) is the only runtime cost.
+    const app = new OpenAPIHono();
     // Observability sink (RFC #1553) — resolved once and reused by both the
     // outer onError and the forwarded auth sub-app catch point below.
     const reporter = config.reporter ?? noopReporter;

package/dist/index.d.ts

@@ -12,6 +12,7 @@ export { clientIpKey, consoleLoggerProvider, cors, DEFAULT_IDEMPOTENCY_TTL_MS, d
 export type { HonoExtension, HonoModule } from "./module.js";
 export type { ErrorEvent, Reporter } from "./observability/index.js";
 export { consoleReporter, getRequestId, noopReporter, runWithRequestId, safeCaptureException, } from "./observability/index.js";
+export { openApiValidationHook } from "./openapi-validation.js";
 export type { ExpandedHonoBundles, ExpandedHonoPlugins, HonoBundle, HonoPlugin, } from "./plugin.js";
 export { defineHonoBundle, defineHonoPlugin, expandHonoBundles, expandHonoPlugins, } from "./plugin.js";
 export type { CreatePublicCapabilityOptions, PublicCapabilityCookieOptions, PublicCapabilityPayload, VerifyPublicCapabilityOptions, } from "./public-capability.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EACV,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAA;AACtE,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACvF,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,IAAI,EACJ,0BAA0B,EAC1B,EAAE,EACF,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,EAC1B,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,2BAA2B,EAC3B,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,iCAAiC,EACjC,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EACV,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAA;AACtE,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACvF,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,IAAI,EACJ,0BAA0B,EAC1B,EAAE,EACF,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,EAC1B,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,2BAA2B,EAC3B,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC5D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,iCAAiC,EACjC,sCAAsC,EACtC,kCAAkC,EAClC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,iBAAiB,CAAA"}

package/dist/index.js

@@ -7,6 +7,7 @@ export { createLazyRouteHandler, mountLazyRoutePaths, mountLazyRoutesAt, } from
 export { createPathDbSelector } from "./lib/db-selector.js";
 export { clientIpKey, consoleLoggerProvider, cors, DEFAULT_IDEMPOTENCY_TTL_MS, db, enforceRateLimit, errorBoundary, handleApiError, idempotencyKey, isStaffRbacEnforced, LIVE_LIMITS, logger, purgeExpiredIdempotencyKeys, rateLimit, requestId, requireActor, requireAuth, requirePermission, } from "./middleware/index.js";
 export { consoleReporter, getRequestId, noopReporter, runWithRequestId, safeCaptureException, } from "./observability/index.js";
+export { openApiValidationHook } from "./openapi-validation.js";
 export { defineHonoBundle, defineHonoPlugin, expandHonoBundles, expandHonoPlugins, } from "./plugin.js";
 export { createPublicCapabilityToken, extractPublicCapabilityToken, serializePublicCapabilityCookie, verifyPublicCapabilityToken, } from "./public-capability.js";
 export { createDrizzlePublicDocumentDeliveryGrantStore, createPublicDocumentDeliveryGrant, createPublicDocumentDeliveryHonoModule, createPublicDocumentDeliveryRoutes, resolvePublicDocumentDeliveryGrant, revokePublicDocumentDeliveryGrant, } from "./public-document-delivery.js";

package/dist/openapi-validation.d.ts

@@ -0,0 +1,20 @@
+import type { Hook } from "@hono/zod-openapi";
+/**
+ * Shared `OpenAPIHono` `defaultHook` (voyant#2114).
+ *
+ * `@hono/zod-openapi` validates `request` schemas before the handler runs;
+ * without a hook it returns `@hono/zod-validator`'s raw `safeParse` result as a
+ * bare 400, bypassing the framework's `parseQuery`/`parseJsonBody` path and the
+ * shared `{ error, code: "invalid_request", requestId, details }` contract that
+ * clients and the error-boundary rely on. This hook re-routes failures through
+ * the same `RequestValidationError` so `.openapi()` routes stay on-contract.
+ *
+ * Every module that constructs an `OpenAPIHono` must pass it:
+ *
+ *     new OpenAPIHono<Env>({ defaultHook: openApiValidationHook })
+ *
+ * (Validation runs on the instance that owns the route, so a hook on the
+ * composed root app does NOT cover mounted module sub-apps.)
+ */
+export declare const openApiValidationHook: Hook<any, any, any, unknown>;
+//# sourceMappingURL=openapi-validation.d.ts.map

package/dist/openapi-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-validation.d.ts","sourceRoot":"","sources":["../src/openapi-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAG7C;;;;;;;;;;;;;;;;GAgBG;AAIH,eAAO,MAAM,qBAAqB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAI9D,CAAA"}

package/dist/openapi-validation.js

@@ -0,0 +1,26 @@
+import { normalizeValidationError, RequestValidationError } from "./validation.js";
+/**
+ * Shared `OpenAPIHono` `defaultHook` (voyant#2114).
+ *
+ * `@hono/zod-openapi` validates `request` schemas before the handler runs;
+ * without a hook it returns `@hono/zod-validator`'s raw `safeParse` result as a
+ * bare 400, bypassing the framework's `parseQuery`/`parseJsonBody` path and the
+ * shared `{ error, code: "invalid_request", requestId, details }` contract that
+ * clients and the error-boundary rely on. This hook re-routes failures through
+ * the same `RequestValidationError` so `.openapi()` routes stay on-contract.
+ *
+ * Every module that constructs an `OpenAPIHono` must pass it:
+ *
+ *     new OpenAPIHono<Env>({ defaultHook: openApiValidationHook })
+ *
+ * (Validation runs on the instance that owns the route, so a hook on the
+ * composed root app does NOT cover mounted module sub-apps.)
+ */
+// Typed as the library's own `defaultHook` shape (`Hook<any, E, any, any>`) so
+// it stays assignable for every module's specific `OpenAPIHono<Env>`.
+// biome-ignore lint/suspicious/noExplicitAny: matches @hono/zod-openapi's defaultHook signature
+export const openApiValidationHook = (result) => {
+    if (!result.success) {
+        throw normalizeValidationError(result.error) ?? new RequestValidationError("Invalid request");
+    }
+};

package/dist/openapi.d.ts

@@ -0,0 +1,58 @@
+import type { OpenAPIHono } from "@hono/zod-openapi";
+import type { Hono } from "hono";
+/**
+ * OpenAPI document generation for composed Voyant apps (voyant#2114).
+ *
+ * The app returned by `createApp`/`mountApp` is an `OpenAPIHono` under the hood
+ * (typed as `Hono` for callers), so the helpers here cast to reach
+ * `getOpenAPIDocument`. Only routes authored via `createRoute(...).openapi(...)`
+ * contribute operations — plain routes are absent until migrated.
+ *
+ * Import these from `@voyant-travel/hono/openapi`, never from the package
+ * barrel: `getOpenAPIDocument` pulls in `@asteasolutions/zod-to-openapi`, which
+ * must stay out of the Worker runtime bundle. This module is meant for
+ * build-time generation only.
+ */
+export interface OpenApiInfo {
+    title: string;
+    version: string;
+    description?: string;
+    /** OpenAPI spec extension fields (`x-*`), matching the doc's `InfoObject`. */
+    [extension: `x-${string}`]: unknown;
+}
+export interface OpenApiServer {
+    url: string;
+    description?: string;
+    [extension: `x-${string}`]: unknown;
+}
+export interface GenerateOpenApiOptions {
+    info: OpenApiInfo;
+    servers?: OpenApiServer[];
+}
+type AnyApp = Hono<any, any, any>;
+/**
+ * An OpenAPI 3.1 document, as produced by `OpenAPIHono`. Named via the direct
+ * dependency's method type so the inferred type stays portable (TS2883).
+ */
+export type OpenApiDocument = ReturnType<OpenAPIHono["getOpenAPI31Document"]>;
+/**
+ * Generate a single OpenAPI 3.1 document covering every `.openapi()` route
+ * mounted on the composed app, with module base paths already merged in
+ * (honojs/middleware#952).
+ */
+export declare function generateOpenApiDocument(app: AnyApp, options: GenerateOpenApiOptions): OpenApiDocument;
+/**
+ * Voyant's two published API surfaces, keyed by path prefix. Admin routes mount
+ * under `/v1/admin/*` and storefront/public routes under `/v1/public/*`; the
+ * legacy `/v1/*` surface is intentionally excluded from the published docs.
+ */
+export type ApiSurface = "admin" | "storefront";
+/**
+ * Narrow a composed document to a single surface by path prefix, producing the
+ * `framework-admin` / `framework-storefront` documents that replace the
+ * hand-authored specs. Components are carried over verbatim (the generator may
+ * over-include shared component schemas, which is harmless).
+ */
+export declare function selectSurface(doc: OpenApiDocument, surface: ApiSurface): OpenApiDocument;
+export {};
+//# sourceMappingURL=openapi.d.ts.map

package/dist/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8EAA8E;IAC9E,CAAC,SAAS,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,CAAC,SAAS,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAA;CAC1B;AAGD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAEjC;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAAA;AAE7E;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,sBAAsB,GAC9B,eAAe,CASjB;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,YAAY,CAAA;AAO/C;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,GAAG,eAAe,CAMxF"}

package/dist/openapi.js

@@ -0,0 +1,30 @@
+/**
+ * Generate a single OpenAPI 3.1 document covering every `.openapi()` route
+ * mounted on the composed app, with module base paths already merged in
+ * (honojs/middleware#952).
+ */
+export function generateOpenApiDocument(app, options) {
+    // The composed app is an `OpenAPIHono` (built in `mountApp`) presented to
+    // callers as `Hono`; this build-time seam narrows it back to read the doc.
+    const oapi = app;
+    return oapi.getOpenAPI31Document({
+        openapi: "3.1.0",
+        info: options.info,
+        ...(options.servers ? { servers: options.servers } : {}),
+    });
+}
+const SURFACE_PREFIX = {
+    admin: "/v1/admin",
+    storefront: "/v1/public",
+};
+/**
+ * Narrow a composed document to a single surface by path prefix, producing the
+ * `framework-admin` / `framework-storefront` documents that replace the
+ * hand-authored specs. Components are carried over verbatim (the generator may
+ * over-include shared component schemas, which is harmless).
+ */
+export function selectSurface(doc, surface) {
+    const prefix = SURFACE_PREFIX[surface];
+    const paths = Object.fromEntries(Object.entries(doc.paths ?? {}).filter(([path]) => path.startsWith(prefix)));
+    return { ...doc, paths };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/hono",
-  "version": "0.116.1",
+  "version": "0.117.0",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -14,6 +14,11 @@
       "import": "./dist/app.js",
       "default": "./dist/app.js"
     },
+    "./openapi": {
+      "types": "./dist/openapi.d.ts",
+      "import": "./dist/openapi.js",
+      "default": "./dist/openapi.js"
+    },
     "./module": {
       "types": "./dist/module.d.ts",
       "import": "./dist/module.js",
@@ -49,6 +54,11 @@
       "import": "./dist/observability/index.js",
       "default": "./dist/observability/index.js"
     },
+    "./observability/reporter": {
+      "types": "./dist/observability/reporter.d.ts",
+      "import": "./dist/observability/reporter.js",
+      "default": "./dist/observability/reporter.js"
+    },
     "./middleware": {
       "types": "./dist/middleware/index.d.ts",
       "import": "./dist/middleware/index.js",
@@ -121,22 +131,23 @@
     }
   },
   "dependencies": {
+    "@hono/zod-openapi": "^1.4.0",
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.10",
     "zod": "^4.3.6",
     "@voyant-travel/core": "^0.111.0",
+    "@voyant-travel/db": "^0.109.4",
     "@voyant-travel/storage": "^0.105.0",
-    "@voyant-travel/db": "^0.109.2",
     "@voyant-travel/types": "^0.106.0",
     "@voyant-travel/utils": "^0.105.4",
-    "@voyant-travel/workflows": "^0.111.7"
+    "@voyant-travel/workflows": "^0.111.9"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260426.1",
     "typescript": "^6.0.2",
     "vitest": "^4.1.2",
     "@voyant-travel/voyant-typescript-config": "^0.1.0",
-    "@voyant-travel/workflows-orchestrator": "^0.111.7"
+    "@voyant-travel/workflows-orchestrator": "^0.111.9"
   },
   "files": [
     "dist"