glasswork 0.6.1 → 0.7.0

package/dist/openapi/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/openapi/defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAO/C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,CAAC,gBA8FhD,CAAC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/openapi/defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAU/C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,CAAC,gBA8FhD,CAAC"}

package/dist/openapi/defaults.js

@@ -1,5 +1,7 @@
 import { toJsonSchema } from '@valibot/to-json-schema';
 import { ErrorResponseDto, ValidationErrorResponseDto, ValidationIssueDto, } from '../http/error-response.dto.js';
+/** Maximum value for a signed 32-bit integer */
+const INT32_MAX = 2_147_483_647;
 /**
  * Default OpenAPI components provided by Glasswork.
  * These include headers for features implemented by the framework:
@@ -69,7 +71,7 @@ export const defaultOpenAPIComponents = {
                 type: 'integer',
                 format: 'int32',
                 minimum: 0,
-                maximum: 2147483647, // Max int32
+                maximum: INT32_MAX
             },
         },
         'X-Total-Pages': {
@@ -78,7 +80,7 @@ export const defaultOpenAPIComponents = {
                 type: 'integer',
                 format: 'int32',
                 minimum: 0,
-                maximum: 2147483647, // Max int32
+                maximum: INT32_MAX
             },
         },
         'X-Current-Page': {
@@ -87,7 +89,7 @@ export const defaultOpenAPIComponents = {
                 type: 'integer',
                 format: 'int32',
                 minimum: 1,
-                maximum: 2147483647, // Max int32
+                maximum: INT32_MAX
             },
         },
         'X-Page-Size': {

package/dist/openapi/defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/openapi/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA+B;IAClE,OAAO,EAAE;QACP,uDAAuD;QACvD,aAAa,EAAE,YAAY,CAAC,gBAAgB,CAA2B;QACvE,uBAAuB,EAAE,YAAY,CAAC,0BAA0B,CAA2B;QAC3F,eAAe,EAAE,YAAY,CAAC,kBAAkB,CAA2B;KAC5E;IACD,OAAO,EAAE;QACP,eAAe;QACf,6BAA6B,EAAE;YAC7B,WAAW,EAAE,kCAAkC;YAC/C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,qCAAqC;aAC/C;SACF;QAED,6CAA6C;QAC7C,iBAAiB,EAAE;YACjB,WAAW,EAAE,mDAAmD;YAChE,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK;aACf;SACF;QACD,qBAAqB,EAAE;YACrB,WAAW,EAAE,0CAA0C;YACvD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK;aACf;SACF;QACD,iBAAiB,EAAE;YACjB,WAAW,EAAE,4CAA4C;YACzD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;aACd;SACF;QACD,aAAa,EAAE;YACb,WAAW,EAAE,4DAA4D;YACzE,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;aACd;SACF;QAED,uCAAuC;QACvC,eAAe,EAAE;YACf,WAAW,EAAE,iCAAiC;YAC9C,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,UAAU,EAAE,YAAY;aAClC;SACF;QACD,eAAe,EAAE;YACf,WAAW,EAAE,uBAAuB;YACpC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,UAAU,EAAE,YAAY;aAClC;SACF;QACD,gBAAgB,EAAE;YAChB,WAAW,EAAE,qBAAqB;YAClC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,UAAU,EAAE,YAAY;aAClC;SACF;QACD,aAAa,EAAE;YACb,WAAW,EAAE,0BAA0B;YACvC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG;aACb;SACF;KACF;CACF,CAAC"}
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/openapi/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAEvC,gDAAgD;AAChD,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA+B;IAClE,OAAO,EAAE;QACP,uDAAuD;QACvD,aAAa,EAAE,YAAY,CAAC,gBAAgB,CAA2B;QACvE,uBAAuB,EAAE,YAAY,CAAC,0BAA0B,CAA2B;QAC3F,eAAe,EAAE,YAAY,CAAC,kBAAkB,CAA2B;KAC5E;IACD,OAAO,EAAE;QACP,eAAe;QACf,6BAA6B,EAAE;YAC7B,WAAW,EAAE,kCAAkC;YAC/C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,qCAAqC;aAC/C;SACF;QAED,6CAA6C;QAC7C,iBAAiB,EAAE;YACjB,WAAW,EAAE,mDAAmD;YAChE,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK;aACf;SACF;QACD,qBAAqB,EAAE;YACrB,WAAW,EAAE,0CAA0C;YACvD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK;aACf;SACF;QACD,iBAAiB,EAAE;YACjB,WAAW,EAAE,4CAA4C;YACzD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;aACd;SACF;QACD,aAAa,EAAE;YACb,WAAW,EAAE,4DAA4D;YACzE,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;aACd;SACF;QAED,uCAAuC;QACvC,eAAe,EAAE;YACf,WAAW,EAAE,iCAAiC;YAC9C,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,SAAS;aACnB;SACF;QACD,eAAe,EAAE;YACf,WAAW,EAAE,uBAAuB;YACpC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,SAAS;aACnB;SACF;QACD,gBAAgB,EAAE;YAChB,WAAW,EAAE,qBAAqB;YAClC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,SAAS;aACnB;SACF;QACD,aAAa,EAAE;YACb,WAAW,EAAE,0BAA0B;YACvC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG;aACb;SACF;KACF;CACF,CAAC"}

package/dist/openapi/openapi-processors.d.ts

@@ -0,0 +1,51 @@
+import type { OpenAPIProcessorContext, OpenAPIResponseObject, OpenAPIResponseProcessor } from '../core/types.js';
+/**
+ * Create a processor that adds CORS headers to responses.
+ * Auto-enabled when middleware.cors is configured.
+ */
+export declare function createCorsHeadersProcessor(enabled: boolean): OpenAPIResponseProcessor;
+/**
+ * Create a processor that adds rate limiting headers to responses.
+ * Auto-enabled when rateLimit.enabled is true.
+ */
+export declare function createRateLimitHeadersProcessor(enabled: boolean): OpenAPIResponseProcessor;
+/**
+ * Processor that adds pagination headers to 200 responses.
+ * Auto-enabled when the route query schema includes pagination fields (page, pageSize).
+ */
+export declare const paginationHeadersProcessor: OpenAPIResponseProcessor;
+/**
+ * Processor that adds response headers defined in route config.
+ * Supports both simple array format and flexible status-code-specific format.
+ *
+ * @example
+ * ```typescript
+ * // Simple: applies to all responses
+ * openapi: { responseHeaders: ['Api-Version', 'Server-Timing'] }
+ *
+ * // Flexible: status-code specific
+ * openapi: {
+ *   responseHeaders: {
+ *     '200': ['X-Total-Count'],
+ *     'default': ['Api-Version']
+ *   }
+ * }
+ * ```
+ */
+export declare const responseHeadersProcessor: OpenAPIResponseProcessor;
+/**
+ * Create built-in processors based on bootstrap configuration.
+ *
+ * @internal
+ */
+export declare function createBuiltinProcessors(config: {
+    corsEnabled: boolean;
+    rateLimitEnabled: boolean;
+}): OpenAPIResponseProcessor[];
+/**
+ * Apply all processors to a response object.
+ *
+ * @internal
+ */
+export declare function applyProcessors(response: OpenAPIResponseObject, context: OpenAPIProcessorContext, processors: OpenAPIResponseProcessor[]): OpenAPIResponseObject;
+//# sourceMappingURL=openapi-processors.d.ts.map

package/dist/openapi/openapi-processors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-processors.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi-processors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,kBAAkB,CAAC;AAE1B;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAcrF;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAgC1F;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,wBA0BxC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,EAAE,wBA4CtC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,GAAG,wBAAwB,EAAE,CAO7B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,wBAAwB,EAAE,GACrC,qBAAqB,CAMvB"}

package/dist/openapi/openapi-processors.js

@@ -0,0 +1,166 @@
+/**
+ * Create a processor that adds CORS headers to responses.
+ * Auto-enabled when middleware.cors is configured.
+ */
+export function createCorsHeadersProcessor(enabled) {
+    return (response, _context) => {
+        if (!enabled)
+            return response;
+        return {
+            ...response,
+            headers: {
+                ...response.headers,
+                'Access-Control-Allow-Origin': {
+                    $ref: '#/components/headers/Access-Control-Allow-Origin',
+                },
+            },
+        };
+    };
+}
+/**
+ * Create a processor that adds rate limiting headers to responses.
+ * Auto-enabled when rateLimit.enabled is true.
+ */
+export function createRateLimitHeadersProcessor(enabled) {
+    return (response, context) => {
+        if (!enabled)
+            return response;
+        const { statusCode } = context;
+        const headers = {
+            'RateLimit-Limit': {
+                $ref: '#/components/headers/RateLimit-Limit',
+            },
+            'RateLimit-Remaining': {
+                $ref: '#/components/headers/RateLimit-Remaining',
+            },
+            'RateLimit-Reset': {
+                $ref: '#/components/headers/RateLimit-Reset',
+            },
+        };
+        // Add Retry-After header for 429 responses
+        if (statusCode === '429') {
+            headers['Retry-After'] = {
+                $ref: '#/components/headers/Retry-After',
+            };
+        }
+        return {
+            ...response,
+            headers: {
+                ...response.headers,
+                ...headers,
+            },
+        };
+    };
+}
+/**
+ * Processor that adds pagination headers to 200 responses.
+ * Auto-enabled when the route query schema includes pagination fields (page, pageSize).
+ */
+export const paginationHeadersProcessor = (response, context) => {
+    const { statusCode, hasPagination } = context;
+    // Only add pagination headers to 200 responses with pagination
+    if (statusCode !== '200' || !hasPagination) {
+        return response;
+    }
+    return {
+        ...response,
+        headers: {
+            ...response.headers,
+            'X-Total-Count': {
+                $ref: '#/components/headers/X-Total-Count',
+            },
+            'X-Total-Pages': {
+                $ref: '#/components/headers/X-Total-Pages',
+            },
+            'X-Current-Page': {
+                $ref: '#/components/headers/X-Current-Page',
+            },
+            'X-Page-Size': {
+                $ref: '#/components/headers/X-Page-Size',
+            },
+        },
+    };
+};
+/**
+ * Processor that adds response headers defined in route config.
+ * Supports both simple array format and flexible status-code-specific format.
+ *
+ * @example
+ * ```typescript
+ * // Simple: applies to all responses
+ * openapi: { responseHeaders: ['Api-Version', 'Server-Timing'] }
+ *
+ * // Flexible: status-code specific
+ * openapi: {
+ *   responseHeaders: {
+ *     '200': ['X-Total-Count'],
+ *     'default': ['Api-Version']
+ *   }
+ * }
+ * ```
+ */
+export const responseHeadersProcessor = (response, context) => {
+    const { statusCode, routeConfig } = context;
+    const responseHeaders = routeConfig.openapi?.responseHeaders;
+    if (!responseHeaders) {
+        return response;
+    }
+    let headersToAdd = [];
+    if (Array.isArray(responseHeaders)) {
+        // Simple format: applies to all responses
+        headersToAdd = responseHeaders;
+    }
+    else {
+        // Flexible format: status-code specific
+        const statusSpecific = responseHeaders[statusCode];
+        const defaultHeaders = responseHeaders['default'];
+        if (statusSpecific) {
+            headersToAdd = [...headersToAdd, ...statusSpecific];
+        }
+        if (defaultHeaders) {
+            headersToAdd = [...headersToAdd, ...defaultHeaders];
+        }
+    }
+    if (headersToAdd.length === 0) {
+        return response;
+    }
+    const newHeaders = {};
+    for (const header of headersToAdd) {
+        newHeaders[header] = {
+            $ref: `#/components/headers/${header}`,
+        };
+    }
+    return {
+        ...response,
+        headers: {
+            ...response.headers,
+            ...newHeaders,
+        },
+    };
+};
+/**
+ * Create built-in processors based on bootstrap configuration.
+ *
+ * @internal
+ */
+export function createBuiltinProcessors(config) {
+    return [
+        createCorsHeadersProcessor(config.corsEnabled),
+        createRateLimitHeadersProcessor(config.rateLimitEnabled),
+        paginationHeadersProcessor,
+        responseHeadersProcessor,
+    ];
+}
+/**
+ * Apply all processors to a response object.
+ *
+ * @internal
+ */
+export function applyProcessors(response, context, processors) {
+    let result = response;
+    for (const processor of processors) {
+        result = processor(result, context);
+    }
+    return result;
+}
+//# sourceMappingURL=openapi-processors.js.map

package/dist/openapi/openapi-processors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-processors.js","sourceRoot":"","sources":["../../src/openapi/openapi-processors.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAE9B,OAAO;YACL,GAAG,QAAQ;YACX,OAAO,EAAE;gBACP,GAAG,QAAQ,CAAC,OAAO;gBACnB,6BAA6B,EAAE;oBAC7B,IAAI,EAAE,kDAAkD;iBACzD;aACF;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,OAAO,GAAqC;YAChD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,sCAAsC;aAC7C;YACD,qBAAqB,EAAE;gBACrB,IAAI,EAAE,0CAA0C;aACjD;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,sCAAsC;aAC7C;SACF,CAAC;QAEF,2CAA2C;QAC3C,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,aAAa,CAAC,GAAG;gBACvB,IAAI,EAAE,kCAAkC;aACzC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,QAAQ;YACX,OAAO,EAAE;gBACP,GAAG,QAAQ,CAAC,OAAO;gBACnB,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACxF,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAE9C,+DAA+D;IAC/D,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,eAAe,EAAE;gBACf,IAAI,EAAE,oCAAoC;aAC3C;YACD,eAAe,EAAE;gBACf,IAAI,EAAE,oCAAoC;aAC3C;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE,qCAAqC;aAC5C;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,kCAAkC;aACzC;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACtF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC5C,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC;IAE7D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,YAAY,GAAa,EAAE,CAAC;IAEhC,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,0CAA0C;QAC1C,YAAY,GAAG,eAAe,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,wCAAwC;QACxC,MAAM,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,cAAc,EAAE,CAAC;YACnB,YAAY,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,YAAY,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,UAAU,CAAC,MAAM,CAAC,GAAG;YACnB,IAAI,EAAE,wBAAwB,MAAM,EAAE;SACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,GAAG,UAAU;SACd;KACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAGvC;IACC,OAAO;QACL,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC;QAC9C,+BAA+B,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACxD,0BAA0B;QAC1B,wBAAwB;KACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAA+B,EAC/B,OAAgC,EAChC,UAAsC;IAEtC,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/openapi/openapi.d.ts

@@ -7,6 +7,27 @@ export interface ConfigureOpenAPIOptions {
     rateLimit?: RateLimitOptions;
     middleware?: MiddlewareOptions;
 }
+/**
+ * Result from configuring OpenAPI, includes optional write function.
+ */
+export interface ConfigureOpenAPIResult {
+    /**
+     * Write the OpenAPI spec to a file.
+     * Call this after all routes have been registered.
+     *
+     * @returns Promise that resolves when the file has been written
+     *
+     * @example
+     * ```typescript
+     * const app = await bootstrap(config);
+     * const { writeSpec } = configureOpenAPI({ app, ... });
+     *
+     * // After all routes are registered:
+     * await writeSpec?.();
+     * ```
+     */
+    writeSpec?: () => Promise<void>;
+}
 /**
  * Configure OpenAPI documentation for the application.
  *
@@ -15,10 +36,22 @@ export interface ConfigureOpenAPIOptions {
  * - production: No serving by default
  * - test: Disabled by default
  *
- * This function automatically sets up response hooks based on enabled features
- * and merges them with any application-provided hooks.
+ * Note: Response processors are now configured in bootstrap.ts and stored
+ * per-app instance via setOpenAPIContext. This eliminates global state.
  *
  * @param options - Configuration options
+ * @returns Object with optional `writeSpec` function for writing the spec to file
+ *
+ * @example
+ * ```typescript
+ * // Basic usage (auto-write with delay)
+ * configureOpenAPI({ app, environment, openapi });
+ *
+ * // Explicit write after routes are registered (recommended)
+ * const { writeSpec } = configureOpenAPI({ app, environment, openapi });
+ * // ... register all routes ...
+ * await writeSpec?.();
+ * ```
  */
-export declare function configureOpenAPI(options: ConfigureOpenAPIOptions): void;
+export declare function configureOpenAPI(options: ConfigureOpenAPIOptions): ConfigureOpenAPIResult;
 //# sourceMappingURL=openapi.d.ts.map

package/dist/openapi/openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGjC,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAW1B,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,IAAI,CAAC;IACV,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAyFvE"}
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGjC,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,IAAI,CAAC;IACV,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,sBAAsB,CA2EzF"}

package/dist/openapi/openapi.js

@@ -1,11 +1,11 @@
 import { writeFile } from 'node:fs/promises';
 import { swaggerUI } from '@hono/swagger-ui';
 import { openAPIRouteHandler } from 'hono-openapi';
-import { setGlobalResponseHooks, setGlobalSecuritySchemes } from '../http/route-helpers.js';
 import { deepMerge } from '../utils/deep-merge.js';
 import { createLogger } from '../utils/logger.js';
 import { defaultOpenAPIComponents } from './defaults.js';
-import { createCorsHeadersHook, createPaginationHeadersHook, createRateLimitHeadersHook, } from './hooks.js';
+/** Default delay before writing OpenAPI spec (ms). Allows routes to register. */
+const DEFAULT_WRITE_DELAY_MS = 1000;
 /**
  * Configure OpenAPI documentation for the application.
  *
@@ -14,30 +14,31 @@ import { createCorsHeadersHook, createPaginationHeadersHook, createRateLimitHead
  * - production: No serving by default
  * - test: Disabled by default
  *
- * This function automatically sets up response hooks based on enabled features
- * and merges them with any application-provided hooks.
+ * Note: Response processors are now configured in bootstrap.ts and stored
+ * per-app instance via setOpenAPIContext. This eliminates global state.
  *
  * @param options - Configuration options
+ * @returns Object with optional `writeSpec` function for writing the spec to file
+ *
+ * @example
+ * ```typescript
+ * // Basic usage (auto-write with delay)
+ * configureOpenAPI({ app, environment, openapi });
+ *
+ * // Explicit write after routes are registered (recommended)
+ * const { writeSpec } = configureOpenAPI({ app, environment, openapi });
+ * // ... register all routes ...
+ * await writeSpec?.();
+ * ```
  */
 export function configureOpenAPI(options) {
     const { app, environment, openapi, rateLimit, middleware } = options;
     if (!openapi.enabled) {
-        return;
+        return {};
     }
     const logger = createLogger('Glasswork:OpenAPI', true);
     const shouldServeSpecs = openapi.serveSpecs ?? environment === 'development';
     const shouldServeUI = openapi.serveUI ?? environment === 'development';
-    // Build response hooks based on enabled features
-    const frameworkHooks = [
-        createCorsHeadersHook(!!middleware?.cors),
-        createRateLimitHeadersHook(rateLimit?.enabled ?? false),
-        createPaginationHeadersHook(),
-    ];
-    // Merge with application-provided hooks
-    const allHooks = [...frameworkHooks, ...(openapi.responseHooks || [])];
-    // Make hooks available to route definitions globally
-    // This must be done synchronously before routes are mounted
-    setGlobalResponseHooks(allHooks);
     // Filter components based on enabled features (only include headers that are actually used)
     const filteredComponents = filterComponentsByFeatures(defaultOpenAPIComponents, {
         rateLimitEnabled: rateLimit?.enabled ?? false,
@@ -45,13 +46,6 @@ export function configureOpenAPI(options) {
     });
     // Merge application documentation with filtered Glasswork defaults
     const mergedDocumentation = deepMerge({ components: filteredComponents }, openapi.documentation || {});
-    // Extract security scheme names from the merged documentation and make them available globally
-    // This allows route definitions to reference the actual security schemes defined in the app
-    const securitySchemes = extractSecuritySchemeNames(mergedDocumentation);
-    setGlobalSecuritySchemes(securitySchemes);
-    if (securitySchemes.length > 0) {
-        logger.info(`Security schemes: ${securitySchemes.join(', ')}`);
-    }
     // Serve OpenAPI spec endpoint (development only by default)
     if (shouldServeSpecs) {
         app.get('/api/openapi.json', openAPIRouteHandler(app, { documentation: mergedDocumentation }));
@@ -60,12 +54,11 @@ export function configureOpenAPI(options) {
     if (shouldServeUI) {
         app.get('/api', swaggerUI({ url: '/api/openapi.json' }));
     }
-    // Write OpenAPI spec to file (optional)
+    // Create writeSpec function if file writing is configured
+    let writeSpec;
     if (openapi.writeToFile) {
         const filePath = openapi.writeToFile;
-        // Generate spec and write to file
-        // This happens after routes are registered
-        setTimeout(async () => {
+        writeSpec = async () => {
             try {
                 let specContent;
                 if (shouldServeSpecs) {
@@ -87,19 +80,14 @@ export function configureOpenAPI(options) {
             catch (error) {
                 logger.error('Failed to write OpenAPI spec:', error);
             }
-        }, 1000); // Wait for routes to be registered
-    }
-}
-/**
- * Extract security scheme names from OpenAPI documentation.
- * Returns an array of scheme names that can be used in route security definitions.
- */
-function extractSecuritySchemeNames(documentation) {
-    const securitySchemes = documentation.components?.securitySchemes;
-    if (!securitySchemes || typeof securitySchemes !== 'object') {
-        return [];
+        };
+        // Auto-write with delay for backward compatibility
+        // NOTE: For more reliable writes, call writeSpec() explicitly after registering routes
+        setTimeout(() => {
+            writeSpec?.();
+        }, DEFAULT_WRITE_DELAY_MS);
     }
-    return Object.keys(securitySchemes);
+    return { writeSpec };
 }
 /**
  * Filter component headers based on enabled features.

package/dist/openapi/openapi.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../src/openapi/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAQnD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AAUpB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAErE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAEvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,KAAK,aAAa,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,KAAK,aAAa,CAAC;IAEvE,iDAAiD;IACjD,MAAM,cAAc,GAAG;QACrB,qBAAqB,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC;QACzC,0BAA0B,CAAC,SAAS,EAAE,OAAO,IAAI,KAAK,CAAC;QACvD,2BAA2B,EAAE;KAC9B,CAAC;IAEF,wCAAwC;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvE,qDAAqD;IACrD,4DAA4D;IAC5D,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEjC,4FAA4F;IAC5F,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,wBAAwB,EAAE;QAC9E,gBAAgB,EAAE,SAAS,EAAE,OAAO,IAAI,KAAK;QAC7C,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI;KAChC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,mBAAmB,GAAG,SAAS,CACnC,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAClC,OAAO,CAAC,aAAa,IAAI,EAAE,CAC5B,CAAC;IAEF,+FAA+F;IAC/F,4FAA4F;IAC5F,MAAM,eAAe,GAAG,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IACxE,wBAAwB,CAAC,eAAe,CAAC,CAAC;IAE1C,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,qBAAqB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,iDAAiD;IACjD,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;QACrC,kCAAkC;QAClC,2CAA2C;QAC3C,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC;gBACH,IAAI,WAAmB,CAAC;gBAExB,IAAI,gBAAgB,EAAE,CAAC;oBACrB,6DAA6D;oBAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;oBACxD,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,0CAA0C;oBAC1C,sCAAsC;oBACtC,GAAG,CAAC,GAAG,CACL,4BAA4B,EAC5B,mBAAmB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CACjE,CAAC;oBACF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;oBACjE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;oBAC7D,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,mCAAmC;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,aAA0C;IAC5E,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,EAAE,eAAe,CAAC;IAElE,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CACjC,UAAsC,EACtC,QAA6D;IAE7D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC3F,CAAC;IAEF,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,EAAE,gBAAgB,EAAE,WAAW,EAAuD;IAEtF,gFAAgF;IAChF,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,KAAK,6BAA6B,EAAE,CAAC;QACjD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,8DAA8D;IAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,mCAAmC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../src/openapi/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAQnD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEzD,iFAAiF;AACjF,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAgCpC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAErE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAEvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,KAAK,aAAa,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,KAAK,aAAa,CAAC;IAEvE,4FAA4F;IAC5F,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,wBAAwB,EAAE;QAC9E,gBAAgB,EAAE,SAAS,EAAE,OAAO,IAAI,KAAK;QAC7C,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI;KAChC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,mBAAmB,GAAG,SAAS,CACnC,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAClC,OAAO,CAAC,aAAa,IAAI,EAAE,CAC5B,CAAC;IAEF,4DAA4D;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,iDAAiD;IACjD,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,0DAA0D;IAC1D,IAAI,SAA4C,CAAC;IAEjD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;QAErC,SAAS,GAAG,KAAK,IAAI,EAAE;YACrB,IAAI,CAAC;gBACH,IAAI,WAAmB,CAAC;gBAExB,IAAI,gBAAgB,EAAE,CAAC;oBACrB,6DAA6D;oBAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;oBACxD,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,0CAA0C;oBAC1C,sCAAsC;oBACtC,GAAG,CAAC,GAAG,CACL,4BAA4B,EAC5B,mBAAmB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CACjE,CAAC;oBACF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;oBACjE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;oBAC7D,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC;QAEF,mDAAmD;QACnD,uFAAuF;QACvF,UAAU,CAAC,GAAG,EAAE;YACd,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CACjC,UAAsC,EACtC,QAA6D;IAE7D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC3F,CAAC;IAEF,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,eAAe;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,EAAE,gBAAgB,EAAE,WAAW,EAAuD;IAEtF,gFAAgF;IAChF,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,KAAK,6BAA6B,EAAE,CAAC;QACjD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,8DAA8D;IAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,mCAAmC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/serialize-prisma-types.d.ts

@@ -110,31 +110,57 @@ export declare function serializePrismaTypes<T>(data: T, config?: SerializationC
  * Prisma's Decimal has constructor.name as string (not literal 'Decimal'),
  * so we match on the toNumber() method which is the key interface we need.
  */
-type PrismaDecimalLike = {
+export type PrismaDecimalLike = {
     toNumber(): number;
     constructor: {
         name: string;
     };
 };
+/**
+ * Common date field naming patterns used in databases.
+ * Fields matching these patterns will accept Date objects in AcceptPrismaTypes.
+ *
+ * Patterns:
+ * - `${string}At` - createdAt, updatedAt, deletedAt, expiresAt, etc.
+ * - `${string}Date` - birthDate, startDate, endDate, effectiveDate, etc.
+ * - `${string}Time` - startTime, endTime (when stored as Date/DateTime)
+ * - `${string}Timestamp` - loginTimestamp, etc.
+ * - Common standalone names: 'date', 'timestamp', 'datetime'
+ */
+type DateFieldPattern = `${string}At` | `${string}Date` | `${string}Time` | `${string}Timestamp` | 'date' | 'timestamp' | 'datetime';
 /**
  * Reverse type helper that accepts both serialized types AND their Prisma equivalents.
  * This allows handlers to return Prisma objects directly while TypeScript knows they'll be serialized.
  *
  * **How it works:**
- * - string → string | Date (accepts both)
- * - number → number | Decimal-like (accepts both)
- * - Recursively applies to objects and arrays
- *
- * ⚠️ **Important Trade-off:**
- * This type will accept Date for ANY string field and Decimal for ANY number field in your response.
- * While this may seem overly permissive, it's a pragmatic trade-off that:
- * - ✅ Enables seamless Prisma type serialization without manual type assertions
- * - ✅ Maintains structural type safety (correct shape, correct property names)
- * - ✅ Relies on schema validation for format correctness (which you should have anyway)
- * - ⚠️ Allows theoretically incorrect assignments (e.g., Date to a 'name' field)
- *
- * In practice, you're unlikely to accidentally pass `new Date()` to a name field, and if you do,
- * Valibot validation will likely catch it at runtime.
+ * - For Date fields: Only string fields with conventional date names (ending in `At`, `Date`, `Time`, etc.)
+ *   accept Date objects. Other string fields only accept strings.
+ * - For Decimal fields: All number fields accept Decimal-like objects (see rationale below).
+ * - Recursively applies to objects and arrays.
+ *
+ * **Date Field Detection:**
+ * Date fields are detected by naming convention. Fields ending in `At`, `Date`, `Time`, `Timestamp`,
+ * or named `date`/`timestamp`/`datetime` will accept Date objects.
+ *
+ * If you have unconventionally named date fields, you have two options:
+ * 1. Rename them to follow the convention (recommended)
+ * 2. Use `strictTypes: true` in your route and handle types manually
+ * 3. Provide additional patterns via the `AdditionalDatePatterns` type parameter
+ *
+ * **Why Decimal is still permissive:**
+ * Unlike date fields which follow predictable naming conventions (`createdAt`, `updatedAt`, etc.),
+ * Decimal fields have domain-specific names with no reliable pattern:
+ * - `price`, `amount`, `balance` (finance)
+ * - `density`, `thickness`, `weight` (physics/materials)
+ * - `discountPercentage`, `taxRate` (percentages)
+ * - `latitude`, `longitude` (coordinates)
+ *
+ * Since there's no reliable naming convention for Decimal fields, we keep them permissive.
+ * In practice, developers rarely pass Decimal objects to non-decimal fields accidentally,
+ * and runtime schema validation will catch any actual errors.
+ *
+ * @template T - The serialized type to transform
+ * @template AdditionalDatePatterns - Optional additional patterns to match for date fields
  *
  * @example
  * ```typescript
@@ -143,44 +169,51 @@ type PrismaDecimalLike = {
  *   id: v.string(),
  *   name: v.string(),
  *   createdAt: v.string(),  // Expects ISO string
- *   balance: v.number(),     // Expects number
+ *   balance: v.number(),    // Expects number
  * });
  *
  * // ✅ Intended usage: Prisma types are automatically handled
  * handler: async () => {
  *   const user = await prisma.user.findUnique({ where: { id } });
- *   // user.createdAt is Date, user.balance is Decimal
+ *   // user.createdAt is Date (matches 'At' pattern), user.balance is Decimal
  *   return user; // Works! Automatically serialized to match schema
  * }
  *
- * // ✅ Also works: Pre-serialized or mixed data
+ * // ✅ Date fields with conventional names accept Date objects
  * handler: async () => {
  *   return {
  *     id: '123',
  *     name: 'John',
- *     createdAt: new Date(),           // Date will be serialized
- *     balance: new Decimal('100.50'),  // Decimal will be serialized
+ *     createdAt: new Date(),           // ✅ 'createdAt' matches 'At' pattern
+ *     birthDate: new Date(),           // ✅ 'birthDate' matches 'Date' pattern
+ *     balance: new Decimal('100.50'),  // ✅ Decimal accepted for any number field
  *   };
  * }
  *
- * // ⚠️ Type system allows this (but you probably won't write this accidentally)
+ * // ❌ Non-date string fields no longer accept Date (compile-time error)
  * handler: async () => {
  *   return {
- *     id: '123',
- *     name: new Date(),  // Type allows, but weird - who would do this?
+ *     name: new Date(),  // ❌ Type error! 'name' doesn't match date patterns
  *     createdAt: '2025-01-01',
- *     balance: 100,
  *   };
  * }
- * // Note: Even if you did, schema validation might catch format issues
  *
- * // Type inference example
- * type ResponseType = AcceptPrismaTypes<{ createdAt: string; amount: number }>;
- * // Result: { createdAt: string | Date; amount: number | Decimal }
+ * // Using additional date patterns for unconventional field names
+ * type MyResponse = AcceptPrismaTypes<ResponseType, 'lastLogin' | 'nextRenewal'>;
  * ```
  */
-export type AcceptPrismaTypes<T> = T extends string ? string | Date : T extends number ? number | PrismaDecimalLike : T extends Array<infer U> ? Array<AcceptPrismaTypes<U>> : T extends object ? {
-    [K in keyof T]: AcceptPrismaTypes<T[K]>;
+/**
+ * Helper type to add Date support to string types (including nullable strings).
+ * Preserves null and undefined in unions.
+ */
+type WithDateSupport<T> = T extends string | infer Rest ? string | Date | Rest : T;
+/**
+ * Helper type to add Decimal support to number types (including nullable numbers).
+ * Preserves null and undefined in unions.
+ */
+type WithDecimalSupport<T> = T extends number | infer Rest ? number | PrismaDecimalLike | Rest : T;
+export type AcceptPrismaTypes<T, AdditionalDatePatterns extends string = never> = T extends object ? T extends Array<infer U> ? Array<AcceptPrismaTypes<U, AdditionalDatePatterns>> : {
+    [K in keyof T]: K extends string ? K extends DateFieldPattern | AdditionalDatePatterns ? T[K] extends string | null | undefined ? WithDateSupport<T[K]> : AcceptPrismaTypes<T[K], AdditionalDatePatterns> : T[K] extends number | null | undefined ? WithDecimalSupport<T[K]> : AcceptPrismaTypes<T[K], AdditionalDatePatterns> : AcceptPrismaTypes<T[K], AdditionalDatePatterns>;
 } : T;
 export {};
 //# sourceMappingURL=serialize-prisma-types.d.ts.map

package/dist/utils/serialize-prisma-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialize-prisma-types.d.ts","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAC3C,MAAM,GACN,CAAC,SAAS;IAAE,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE,GAC5C,MAAM,GACN,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACtB,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GACzB,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACzC,CAAC,CAAC;AAEZ;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAsCD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,EAAE,mBAE3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,IAAI,EAAE,CAAC,EACP,MAAM,GAAE,mBAAmC,EAC3C,MAAM,SAAI,EACV,KAAK,kBAAwB,GAC5B,eAAe,CAAC,CAAC,CAAC,CAqDpB;AAED;;;;;GAKG;AACH,KAAK,iBAAiB,GAAG;IACvB,QAAQ,IAAI,MAAM,CAAC;IACnB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAC/C,MAAM,GAAG,IAAI,GACb,CAAC,SAAS,MAAM,GACd,MAAM,GAAG,iBAAiB,GAC1B,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACtB,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAC3B,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAC3C,CAAC,CAAC"}
+{"version":3,"file":"serialize-prisma-types.d.ts","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAC3C,MAAM,GACN,CAAC,SAAS;IAAE,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE,GAC5C,MAAM,GACN,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACtB,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GACzB,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACzC,CAAC,CAAC;AAEZ;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AA8ED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,EAAE,mBAE3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,IAAI,EAAE,CAAC,EACP,MAAM,GAAE,mBAAmC,EAC3C,MAAM,SAAI,EACV,KAAK,kBAAwB,GAC5B,eAAe,CAAC,CAAC,CAAC,CAqDpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,IAAI,MAAM,CAAC;IACnB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GACjB,GAAG,MAAM,IAAI,GACb,GAAG,MAAM,MAAM,GACf,GAAG,MAAM,MAAM,GACf,GAAG,MAAM,WAAW,GACpB,MAAM,GACN,WAAW,GACX,UAAU,CAAC;AAEf;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH;;;GAGG;AACH,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;AAEnF;;;GAGG;AACH,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,GAAG,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC;AAEnG,MAAM,MAAM,iBAAiB,CAC3B,CAAC,EACD,sBAAsB,SAAS,MAAM,GAAG,KAAK,IAC3C,CAAC,SAAS,MAAM,GAChB,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACtB,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,GACnD;KACG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,MAAM,GAC5B,CAAC,SAAS,gBAAgB,GAAG,sBAAsB,GACjD,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,SAAS,GACpC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GACrB,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,GACjD,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GACxB,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,GACnD,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;CACpD,GACH,CAAC,CAAC"}