prisma-generator-express 1.67.0 → 1.69.0

package/dist/utils/mcpGate.js

@@ -0,0 +1,118 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertMcpGuardCompatibility = assertMcpGuardCompatibility;
+exports.parseSemver = parseSemver;
+exports.compareSemver = compareSemver;
+exports.resolveInstalledGuardVersion = resolveInstalledGuardVersion;
+exports.assertMcpGuardVersion = assertMcpGuardVersion;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+function assertMcpGuardCompatibility(mcp, dropGuard) {
+    if (mcp && dropGuard) {
+        throw new Error('Generator option mcp=true cannot be combined with dropGuard=true. ' +
+            'MCP is fail-closed: every tool enforces a guard shape, so a ' +
+            'guard-dropped generation refuses to emit MCP support.');
+    }
+}
+const MCP_MIN_GUARD = '1.33.0';
+function parseSemver(v) {
+    const numeric = '0|[1-9]' + '\\d*';
+    const ident = '[0-9A-Za-z-]+';
+    const dotted = ident + '(?:\\.' + ident + ')*';
+    const m = new RegExp(`^(${numeric})\\.(${numeric})\\.(${numeric})(?:-(${dotted}))?(?:\\+(${dotted}))?$`).exec(v.trim());
+    if (!m)
+        return null;
+    const pre = m[4] ? m[4].split('.') : [];
+    for (const ident of pre) {
+        if (/^[0-9]+$/.test(ident) && ident.length > 1 && ident.startsWith('0')) {
+            return null;
+        }
+    }
+    return {
+        core: [Number(m[1]), Number(m[2]), Number(m[3])],
+        pre,
+    };
+}
+function compareSemver(a, b) {
+    const va = parseSemver(a);
+    const vb = parseSemver(b);
+    if (!va || !vb) {
+        return va ? 1 : vb ? -1 : 0;
+    }
+    for (let i = 0; i < 3; i++) {
+        if (va.core[i] !== vb.core[i])
+            return va.core[i] - vb.core[i];
+    }
+    if (va.pre.length === 0 && vb.pre.length === 0)
+        return 0;
+    if (va.pre.length === 0)
+        return 1;
+    if (vb.pre.length === 0)
+        return -1;
+    const len = Math.max(va.pre.length, vb.pre.length);
+    for (let i = 0; i < len; i++) {
+        const x = va.pre[i];
+        const y = vb.pre[i];
+        if (x === undefined)
+            return -1;
+        if (y === undefined)
+            return 1;
+        const xn = /^\d+$/.test(x);
+        const yn = /^\d+$/.test(y);
+        if (xn && yn) {
+            if (Number(x) !== Number(y))
+                return Number(x) - Number(y);
+        }
+        else if (xn)
+            return -1;
+        else if (yn)
+            return 1;
+        else if (x !== y)
+            return x < y ? -1 : 1;
+    }
+    return 0;
+}
+function resolveInstalledGuardVersion(schemaPath) {
+    const schemaDir = node_path_1.default.dirname(node_path_1.default.resolve(schemaPath));
+    let dir = schemaDir;
+    while (dir) {
+        const pkgPath = node_path_1.default.join(dir, 'node_modules', 'prisma-guard', 'package.json');
+        try {
+            const version = JSON.parse(node_fs_1.default.readFileSync(pkgPath, 'utf8')).version;
+            if (typeof version === 'string')
+                return version;
+        }
+        catch {
+        }
+        const parent = node_path_1.default.dirname(dir);
+        dir = parent !== dir ? parent : undefined;
+    }
+    return null;
+}
+function assertMcpGuardVersion(mcp, schemaPath, resolve = resolveInstalledGuardVersion) {
+    if (!mcp)
+        return;
+    const version = resolve(schemaPath);
+    if (version === null) {
+        throw new Error('mcp=true requires prisma-guard >= ' +
+            MCP_MIN_GUARD +
+            ', but prisma-guard could not be resolved from the schema project. ' +
+            'Install it (npm install prisma-guard@^' +
+            MCP_MIN_GUARD +
+            ') or turn mcp off.');
+    }
+    if (compareSemver(version, MCP_MIN_GUARD) < 0) {
+        throw new Error('mcp=true requires prisma-guard >= ' +
+            MCP_MIN_GUARD +
+            ' (MCP tool schemas mirror 1.33 semantics: unique-selector where, ' +
+            'operator configs, forced-value merging). Found prisma-guard ' +
+            version +
+            '. Upgrade it (npm install prisma-guard@^' +
+            MCP_MIN_GUARD +
+            ') or turn mcp off.');
+    }
+}
+//# sourceMappingURL=mcpGate.js.map

package/dist/utils/mcpGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpGate.js","sourceRoot":"","sources":["../../src/utils/mcpGate.ts"],"names":[],"mappings":";;;;;AAcA,kEAWC;AAUD,kCAuBC;AAGD,sCA8BC;AAQD,oEA0BC;AAED,sDA6BC;AA5JD,sDAAwB;AACxB,0DAA4B;AAa5B,SAAgB,2BAA2B,CACzC,GAAY,EACZ,SAAkB;IAElB,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,oEAAoE;YAClE,8DAA8D;YAC9D,uDAAuD,CAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,QAAQ,CAAA;AAQ9B,SAAgB,WAAW,CAAC,CAAS;IAInC,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;IAClC,MAAM,KAAK,GAAG,eAAe,CAAA;IAC7B,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAA;IAC9C,MAAM,CAAC,GAAG,IAAI,MAAM,CAClB,KAAK,OAAO,QAAQ,OAAO,QAAQ,OAAO,SAAS,MAAM,aAAa,MAAM,MAAM,CACnF,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAChB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAGvC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,GAAG;KACJ,CAAA;AACH,CAAC;AAGD,SAAgB,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IACzB,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IACzB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAEf,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACxD,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3D,CAAC;aAAM,IAAI,EAAE;YACX,OAAO,CAAC,CAAC,CAAA;aACN,IAAI,EAAE;YAAE,OAAO,CAAC,CAAA;aAChB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAQD,SAAgB,4BAA4B,CAC1C,UAAkB;IAElB,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IACxD,IAAI,GAAG,GAAuB,SAAS,CAAA;IACvC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CACvB,GAAG,EACH,cAAc,EACd,cAAc,EACd,cAAc,CACf,CAAA;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GACX,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAG5C,CAAC,OAAO,CAAA;YACT,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QACD,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,GAAG,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAgB,qBAAqB,CACnC,GAAY,EACZ,UAAkB,EAClB,UAAiD,4BAA4B;IAE7E,IAAI,CAAC,GAAG;QAAE,OAAM;IAChB,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,oCAAoC;YAClC,aAAa;YACb,oEAAoE;YACpE,wCAAwC;YACxC,aAAa;YACb,oBAAoB,CACvB,CAAA;IACH,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oCAAoC;YAClC,aAAa;YACb,mEAAmE;YACnE,8DAA8D;YAC9D,OAAO;YACP,0CAA0C;YAC1C,aAAa;YACb,oBAAoB,CACvB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/utils/writeFileSafely.js

@@ -62,6 +62,12 @@ async function writeFileSafely({ content, options, model, operation, }) {
         case 'relationModelsIndex':
             filePath = path.join(outputPath, 'relationModels.ts');
             break;
+        case 'mcpApp':
+            filePath = path.join(outputPath, 'mcp.ts');
+            break;
+        case 'mcpMount':
+            filePath = path.join(outputPath, 'mcpMount.ts');
+            break;
         default:
             if (!model)
                 throw new Error('Model required for operation: ' + operation);

package/dist/utils/writeFileSafely.js.map

@@ -1 +1 @@
-{"version":3,"file":"writeFileSafely.js","sourceRoot":"","sources":["../../src/utils/writeFileSafely.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,0CAuCC;AA1DD,uCAAwB;AACxB,2CAA4B;AAC5B,wDAA+B;AAS/B,IAAI,gBAAqD,CAAA;AAEzD,KAAK,UAAU,kBAAkB;IAC/B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAA;IAC3D,gBAAgB,GAAG,MAAM,kBAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,EACpC,OAAO,EACP,OAAO,EACP,KAAK,EACL,SAAS,GACQ;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAA;IAClD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAE3D,IAAI,QAAgB,CAAA;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,cAAc;YACjB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;YACnD,MAAK;QACP,KAAK,cAAc;YACjB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;YACnD,MAAK;QACP,KAAK,qBAAqB;YACxB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;YACrD,MAAK;QACP;YACE,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,SAAS,CAAC,CAAA;YACzE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAClB,UAAU,EACV,KAAK,CAAC,IAAI,EACV,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,KAAK,CAC/B,CAAA;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvE,MAAM,eAAe,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAClD,MAAM,gBAAgB,GAAG,MAAM,kBAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QACtD,GAAG,eAAe;QAClB,MAAM,EAAE,YAAY;KACrB,CAAC,CAAA;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAC9C,CAAC"}
+{"version":3,"file":"writeFileSafely.js","sourceRoot":"","sources":["../../src/utils/writeFileSafely.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,0CA6CC;AAhED,uCAAwB;AACxB,2CAA4B;AAC5B,wDAA+B;AAS/B,IAAI,gBAAqD,CAAA;AAEzD,KAAK,UAAU,kBAAkB;IAC/B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAA;IAC3D,gBAAgB,GAAG,MAAM,kBAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,EACpC,OAAO,EACP,OAAO,EACP,KAAK,EACL,SAAS,GACQ;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAA;IAClD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAE3D,IAAI,QAAgB,CAAA;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,cAAc;YACjB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;YACnD,MAAK;QACP,KAAK,cAAc;YACjB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;YACnD,MAAK;QACP,KAAK,qBAAqB;YACxB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;YACrD,MAAK;QACP,KAAK,QAAQ;YACX,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YAC1C,MAAK;QACP,KAAK,UAAU;YACb,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;YAC/C,MAAK;QACP;YACE,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,SAAS,CAAC,CAAA;YACzE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAClB,UAAU,EACV,KAAK,CAAC,IAAI,EACV,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,KAAK,CAC/B,CAAA;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvE,MAAM,eAAe,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAClD,MAAM,gBAAgB,GAAG,MAAM,kBAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QACtD,GAAG,eAAe;QAClB,MAAM,EAAE,YAAY;KACrB,CAAC,CAAA;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAC9C,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "prisma-generator-express",
-  "description": "Prisma generator for Express, Fastify, and Hono CRUD APIs with OpenAPI documentation",
-  "version": "1.67.0",
+  "description": "Prisma generator for Express, Fastify, and Hono CRUD APIs with OpenAPI and guarded MCP tools",
+  "version": "1.69.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -35,6 +35,8 @@
     "yaml": "^2.9.0"
   },
   "peerDependencies": {
+    "@modelcontextprotocol/node": "^2.0.0",
+    "@modelcontextprotocol/server": "^2.0.0",
     "@prisma/client": ">=6.0.0",
     "express": ">=4.0.0",
     "fastify": "^5.0.0",
@@ -44,6 +46,12 @@
     "prisma-sql": ">=1.0.0"
   },
   "peerDependenciesMeta": {
+    "@modelcontextprotocol/node": {
+      "optional": true
+    },
+    "@modelcontextprotocol/server": {
+      "optional": true
+    },
     "express": {
       "optional": true
     },
@@ -64,12 +72,17 @@
     }
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "^2.1.0",
+    "@modelcontextprotocol/express": "^2.0.1",
+    "@modelcontextprotocol/node": "^2.1.0",
+    "@modelcontextprotocol/server": "^2.1.0",
     "@prisma/client": "7.5.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "24.7.2",
     "@types/prettier": "3.0.0",
     "@vitest/coverage-v8": "^4.1.0",
     "better-sqlite3": "^12.5.0",
+    "esbuild": "^0.28.2",
     "express": "^5.2.1",
     "fast-xml-parser": "^5.3.3",
     "fastify": "^5.6.2",
@@ -78,9 +91,11 @@
     "pino": "^10.1.0",
     "pino-pretty": "^13.0.0",
     "prisma": "7.5.0",
+    "prisma-guard": "1.33.0",
     "semantic-release": "^24.2.9",
     "typescript": "5.9.3",
-    "vitest": "^4.1.0"
+    "vitest": "^4.1.0",
+    "zod": "^4.0.0"
   },
   "homepage": "https://github.com/multipliedtwice/prisma-generator-express",
   "repository": {

package/src/copy/buildModelOpenApi.ts

@@ -1,5 +1,9 @@
 import { stringify as yamlStringify } from 'yaml'
-import type { RouteConfig, WriteStrategy } from './routeConfig'
+import type {
+  RouteConfig,
+  WriteStrategy,
+  OpenApiSecuritySchemeConfig,
+} from './routeConfig'
 import { OPERATION_BY_NAME, isOperationEnabled } from './operationDefinitions'
 import { normalizePrefix, removeTrailingSlash } from './misc'
 import { NUMERIC_SCALAR_TYPES, STRING_NUMERIC_TYPES } from './scalarTypes'
@@ -20,14 +24,51 @@ type SchemaObject = {
 
 type RefObject = { $ref: string; description?: string }
 
+type ContentObject = {
+  'application/json'?: { schema: SchemaObject | RefObject }
+  'application/yaml'?: { schema: SchemaObject | RefObject }
+}
+
+type ResponseObject = {
+  description: string
+  content?: ContentObject
+}
+
+type RequestBodyObject = {
+  required?: boolean
+  content: ContentObject
+}
+
+type ParameterSchema = Record<string, string | string[]>
+
+type ParameterObject = {
+  name: string
+  in: 'query' | 'header'
+  schema?: ParameterSchema
+  description?: string
+  required?: boolean
+}
+
+type OperationObject = {
+  tags?: string[]
+  summary?: string
+  operationId?: string
+  description?: string
+  parameters?: ParameterObject[]
+  requestBody?: RequestBodyObject
+  responses: Record<string, ResponseObject>
+}
+
+type PathItem = Record<string, OperationObject>
+
 type OpenApiSpec = {
   openapi: string
   info: { title: string; description: string; version: string }
   servers?: Array<{ url: string; description?: string }>
-  paths: Record<string, any>
+  paths: Record<string, PathItem>
   components: {
     schemas: Record<string, SchemaObject>
-    securitySchemes?: Record<string, any>
+    securitySchemes?: Record<string, OpenApiSecuritySchemeConfig>
   }
   security?: Array<Record<string, string[]>>
 }
@@ -125,7 +166,7 @@ const AGGREGATE_PROPS: Record<string, SchemaObject> = {
 
 function opEnabled(config: RouteConfig, name: string): boolean {
   const meta = OPERATION_BY_NAME[name]
-  return meta ? isOperationEnabled(config as Record<string, any>, meta) : false
+  return meta ? isOperationEnabled(config, meta) : false
 }
 
 function opPath(basePath: string, name: string): string {
@@ -160,7 +201,10 @@ const COMMON_ERRORS: Record<number, string> = {
   503: 'Service unavailable — database connection pool timeout',
 }
 
-function addErrorResponses(operation: any, codes: readonly number[]): void {
+function addErrorResponses(
+  operation: OperationObject,
+  codes: readonly number[],
+): void {
   for (const code of codes) {
     operation.responses[String(code)] = errorResponse(
       COMMON_ERRORS[code] || 'Error',
@@ -174,7 +218,7 @@ function queryParam(
   schema: Record<string, string> = { type: 'string' },
   required?: boolean,
 ) {
-  const param: any = { name, in: 'query' as const, schema, description }
+  const param: ParameterObject = { name, in: 'query', schema, description }
   if (required) param.required = true
   return param
 }
@@ -219,101 +263,7 @@ function listScalarUpdateOperations(
   }
 }
 
-function findManyBodySchema(): SchemaObject {
-  return {
-    type: 'object',
-    properties: {
-      where: WHERE_PROP,
-      orderBy: ORDERBY_PROP,
-      take: TAKE_PROP,
-      skip: SKIP_PROP,
-      ...PROJECTION_PROPS,
-      cursor: CURSOR_PROP,
-      distinct: DISTINCT_PROP,
-    },
-  }
-}
-
-function findUniqueBodySchema(): SchemaObject {
-  return {
-    type: 'object',
-    properties: {
-      where: { type: 'object', description: 'Unique selector' },
-      ...PROJECTION_PROPS,
-    },
-    required: ['where'],
-  }
-}
-
-function countBodySchema(): SchemaObject {
-  return {
-    type: 'object',
-    properties: {
-      where: WHERE_PROP,
-      orderBy: { description: 'Sort order' },
-      take: TAKE_PROP,
-      skip: SKIP_PROP,
-      cursor: CURSOR_PROP,
-      select: {
-        description:
-          'Count specific fields. When provided, returns per-field counts as an object instead of a single integer.',
-      },
-    },
-  }
-}
-
-function aggregateBodySchema(): SchemaObject {
-  return {
-    type: 'object',
-    properties: {
-      where: WHERE_PROP,
-      orderBy: { description: 'Sort order' },
-      cursor: CURSOR_PROP,
-      take: TAKE_PROP,
-      skip: SKIP_PROP,
-      ...AGGREGATE_PROPS,
-    },
-  }
-}
-
-function groupByBodySchema(): SchemaObject {
-  return {
-    type: 'object',
-    properties: {
-      by: {
-        type: 'array',
-        items: { type: 'string' },
-        description: 'Fields to group by',
-      },
-      where: WHERE_PROP,
-      orderBy: { description: 'Sort order. Required when using skip or take.' },
-      having: {
-        type: 'object',
-        description: 'Having conditions (filter object)',
-      },
-      take: TAKE_PROP,
-      skip: SKIP_PROP,
-      ...AGGREGATE_PROPS,
-    },
-    required: ['by'],
-  }
-}
-
-const POST_READ_BODY_SCHEMAS: Record<string, () => SchemaObject> = {
-  findMany: findManyBodySchema,
-  findFirst: findManyBodySchema,
-  findFirstOrThrow: findManyBodySchema,
-  findManyPaginated: findManyBodySchema,
-  findUnique: findUniqueBodySchema,
-  findUniqueOrThrow: findUniqueBodySchema,
-  count: countBodySchema,
-  aggregate: aggregateBodySchema,
-  groupBy: groupByBodySchema,
-}
-
-function getPostReadBodySchema(opName: string): SchemaObject {
-  return (POST_READ_BODY_SCHEMAS[opName] ?? findManyBodySchema)()
-}
+import { getPostReadBodySchema } from './operationSchemas'
 
 function applyWriteStrategy(
   spec: OpenApiSpec,
@@ -341,14 +291,14 @@ function applyWriteStrategy(
   }
 
   const injectProjectionAndArrayResponse = (
-    op: any,
+    op: OperationObject,
     successCode: '200' | '201',
     summary: string,
     description: string,
   ): void => {
     op.summary = summary
     op.description = description
-    const r = op.responses?.[successCode]
+    const r = op.responses[successCode]
     if (r?.content?.['application/json']) {
       r.content['application/json'].schema = {
         type: 'array',
@@ -356,7 +306,7 @@ function applyWriteStrategy(
       }
     }
     const reqSchema = op.requestBody?.content?.['application/json']?.schema
-    if (reqSchema && reqSchema.properties) {
+    if (reqSchema && !('$ref' in reqSchema) && reqSchema.properties) {
       Object.assign(reqSchema.properties, PROJECTION_PROPS)
     }
   }
@@ -808,11 +758,11 @@ function addPostReadOperation(
   modelName: string,
   opName: string,
   summary: string,
-  responseSchema: any,
+  responseSchema: SchemaObject | RefObject,
   errorCodes: readonly number[],
   description?: string,
 ) {
-  const op: any = {
+  const op: OperationObject = {
     tags: [modelName],
     summary: summary + ' (POST)',
     operationId: `${modelName}${opName.charAt(0).toUpperCase() + opName.slice(1)}Post`,
@@ -889,7 +839,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findMany')) {
     const meta = OPERATION_BY_NAME['findMany']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `List ${modelName}`,
       operationId: `${modelName}FindMany`,
@@ -923,7 +873,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findUnique')) {
     const meta = OPERATION_BY_NAME['findUnique']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Get ${modelName} by unique constraint`,
       operationId: `${modelName}FindUnique`,
@@ -956,7 +906,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findUniqueOrThrow')) {
     const meta = OPERATION_BY_NAME['findUniqueOrThrow']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Get ${modelName} by unique constraint (throws if not found)`,
       operationId: `${modelName}FindUniqueOrThrow`,
@@ -986,7 +936,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findFirst')) {
     const meta = OPERATION_BY_NAME['findFirst']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Get first ${modelName}`,
       operationId: `${modelName}FindFirst`,
@@ -1018,7 +968,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findFirstOrThrow')) {
     const meta = OPERATION_BY_NAME['findFirstOrThrow']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Get first ${modelName} (throws if not found)`,
       operationId: `${modelName}FindFirstOrThrow`,
@@ -1048,7 +998,7 @@ function generatePaths(
 
   if (opEnabled(config, 'findManyPaginated')) {
     const meta = OPERATION_BY_NAME['findManyPaginated']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `List ${modelName} with pagination`,
       operationId: `${modelName}FindManyPaginated`,
@@ -1081,7 +1031,7 @@ function generatePaths(
 
   if (opEnabled(config, 'create')) {
     const meta = OPERATION_BY_NAME['create']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Create ${modelName}`,
       operationId: `${modelName}Create`,
@@ -1113,7 +1063,7 @@ function generatePaths(
 
   if (opEnabled(config, 'createMany')) {
     const meta = OPERATION_BY_NAME['createMany']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Create many ${modelName}`,
       operationId: `${modelName}CreateMany`,
@@ -1149,7 +1099,7 @@ function generatePaths(
 
   if (opEnabled(config, 'createManyAndReturn')) {
     const meta = OPERATION_BY_NAME['createManyAndReturn']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Create many ${modelName} and return records`,
       operationId: `${modelName}CreateManyAndReturn`,
@@ -1190,7 +1140,7 @@ function generatePaths(
 
   if (opEnabled(config, 'update')) {
     const meta = OPERATION_BY_NAME['update']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Update ${modelName}`,
       operationId: `${modelName}Update`,
@@ -1223,7 +1173,7 @@ function generatePaths(
 
   if (opEnabled(config, 'updateMany')) {
     const meta = OPERATION_BY_NAME['updateMany']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Update many ${modelName}`,
       operationId: `${modelName}UpdateMany`,
@@ -1255,7 +1205,7 @@ function generatePaths(
 
   if (opEnabled(config, 'updateManyAndReturn')) {
     const meta = OPERATION_BY_NAME['updateManyAndReturn']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Update many ${modelName} and return records`,
       operationId: `${modelName}UpdateManyAndReturn`,
@@ -1292,7 +1242,7 @@ function generatePaths(
 
   if (opEnabled(config, 'upsert')) {
     const meta = OPERATION_BY_NAME['upsert']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Upsert ${modelName}`,
       operationId: `${modelName}Upsert`,
@@ -1326,7 +1276,7 @@ function generatePaths(
 
   if (opEnabled(config, 'delete')) {
     const meta = OPERATION_BY_NAME['delete']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Delete ${modelName}`,
       operationId: `${modelName}Delete`,
@@ -1358,7 +1308,7 @@ function generatePaths(
 
   if (opEnabled(config, 'deleteMany')) {
     const meta = OPERATION_BY_NAME['deleteMany']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Delete many ${modelName}`,
       operationId: `${modelName}DeleteMany`,
@@ -1387,7 +1337,7 @@ function generatePaths(
 
   if (opEnabled(config, 'count')) {
     const meta = OPERATION_BY_NAME['count']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Count ${modelName}`,
       operationId: `${modelName}Count`,
@@ -1444,7 +1394,7 @@ function generatePaths(
 
   if (opEnabled(config, 'aggregate')) {
     const meta = OPERATION_BY_NAME['aggregate']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Aggregate ${modelName}`,
       operationId: `${modelName}Aggregate`,
@@ -1474,7 +1424,7 @@ function generatePaths(
 
   if (opEnabled(config, 'groupBy')) {
     const meta = OPERATION_BY_NAME['groupBy']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Group ${modelName}`,
       operationId: `${modelName}GroupBy`,
@@ -1511,7 +1461,7 @@ function generatePaths(
 
   if (opEnabled(config, 'updateEach')) {
     const meta = OPERATION_BY_NAME['updateEach']
-    const op: any = {
+    const op: OperationObject = {
       tags: [modelName],
       summary: `Update each ${modelName} (batch)`,
       operationId: `${modelName}UpdateEach`,
@@ -1558,7 +1508,7 @@ function addPath(
   spec: OpenApiSpec,
   path: string,
   method: string,
-  operation: any,
+  operation: OperationObject,
 ) {
   if (!spec.paths[path]) {
     spec.paths[path] = {}