[{"_1":2,"_176":-5,"_177":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","4e736cb42e83c17c10d9f33412034a74b06f3941","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_173":174,"_175":-5},"handle","ianmenethil","name","ZenServer","path","src/utils/openApiLoader.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":73,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":116,"_118":-5,"_119":32,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","619e7f00-58a9-11f0-a700-f69ea79377d9","createdAt",["D",1751614495896],"deletedAt","legacyEnvVars","privacy","unlisted","description","imageUrl","5856754a-b1b9-4358-87d1-77f1d9f79e45","pinnedFileId","9f5c41ce-58a9-11f0-947f-f69ea79377d9","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","7559f40a-a274-4a9b-8f8b-7486509c3949","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ycXU1U2ZIVEk3NnhGTXRySE0wbWdYQncxSnYifQ","org",{"_94":95,"_135":132,"_12":112},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",883,"619ecc08-58a9-11f0-a700-f69ea79377d9","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":153,"_154":155,"_156":157,"_158":140,"_159":160,"_161":116,"_104":162,"_138":163,"_164":165,"_166":167,"_168":20,"_169":-5,"_98":170},"cf610c3c-5ffd-11f0-ac8f-0224a6c84d84","openApiLoader.ts","fileId","ed887f80-5af6-11f0-abb3-f69ea79377d9","parentId","9f14f27e-58a9-11f0-9a99-f69ea79377d9","branchId","branchVersion",853,"latest",["D",1752420415902],14,"fileType","script","content","// v4 - Fixed RouteHandler usage and added dual-source loading\r\n/**\r\n * OpenAPI Loader v4 for ZenServer\r\n *\r\n * Complete implementation that:\r\n * - Loads OpenAPI specifications from JSON (dev) or blob storage (prod/Val Town)\r\n * - Converts OpenAPI schemas to Zod schemas\r\n * - Dynamically generates routes with proper type safety\r\n * - Handles validation automatically via @hono/zod-openapi\r\n */\r\n\r\nimport { OpenAPIHono, createRoute, z } from \"npm:@hono/zod-openapi@0.19.9\";\r\nimport type { RouteConfig, RouteHandler } from \"npm:@hono/zod-openapi@0.19.9\";\r\nimport type { Context } from \"https://esm.sh/hono@4.2.7\";\r\nimport { logger, logInfo, logError, logDebug } from \"../utils/logger.ts\";\r\nimport { environment } from \"../config/environment.ts\";\r\n\r\nlet blob: any;\r\ntry {\r\n const blobModule = await import(\"https://esm.town/v/std/blob\");\r\n blob = blobModule.blob;\r\n} catch (e) {\r\n console.log(`Not in Val Town environment error: ${e}`);\r\n blob = null;\r\n}\r\n\r\n// ========================================\r\n// Type Definitions\r\n// ========================================\r\n\r\nexport type HttpMethod =\r\n | \"get\"\r\n | \"post\"\r\n | \"put\"\r\n | \"delete\"\r\n | \"patch\"\r\n | \"options\"\r\n | \"head\";\r\n\r\n// Updated HandlerMap to use proper RouteHandler type\r\nexport interface HandlerMap {\r\n [operationId: string]: RouteHandler;\r\n}\r\n\r\n// Alternative handler function type for backwards compatibility\r\nexport type HandlerFunction = (params: {\r\n request: Request;\r\n context: Context;\r\n params?: any;\r\n query?: any;\r\n body?: any;\r\n headers?: any;\r\n}) => Response | Promise;\r\n\r\nexport interface OpenAPISpec {\r\n openapi: string;\r\n info: any;\r\n servers?: any[];\r\n paths: Record>;\r\n components?: {\r\n schemas?: Record;\r\n securitySchemes?: Record;\r\n parameters?: Record;\r\n requestBodies?: Record;\r\n responses?: Record;\r\n headers?: Record;\r\n };\r\n tags?: any[];\r\n}\r\n\r\nexport interface LoaderOptions {\r\n enableValidation?: boolean;\r\n enableLogging?: boolean;\r\n defaultResponses?: boolean;\r\n useBlob?: boolean; // Force blob storage usage\r\n blobKey?: string; // Key for blob storage\r\n}\r\n\r\n// ========================================\r\n// OpenAPI to Zod Schema Converter\r\n// ========================================\r\n\r\nclass SchemaConverter {\r\n private schemas: Map = new Map();\r\n private spec: OpenAPISpec;\r\n\r\n constructor(spec: OpenAPISpec) {\r\n this.spec = spec;\r\n this.initializeSchemas();\r\n }\r\n\r\n /**\r\n * Initialize all component schemas\r\n */\r\n private initializeSchemas(): void {\r\n if (this.spec.components?.schemas) {\r\n Object.entries(this.spec.components.schemas).forEach(([name, schema]) => {\r\n this.schemas.set(name, this.convertSchema(schema, name));\r\n });\r\n }\r\n }\r\n\r\n /**\r\n * Convert OpenAPI schema to Zod schema\r\n */\r\n convertSchema(schema: any, schemaName?: string): z.ZodSchema {\r\n // Handle $ref\r\n if (schema.$ref) {\r\n const refName = schema.$ref.split(\"/\").pop();\r\n const cached = this.schemas.get(refName);\r\n if (cached) return cached;\r\n\r\n const refSchema = this.spec.components?.schemas?.[refName];\r\n if (!refSchema) {\r\n throw new Error(`Referenced schema not found: ${refName}`);\r\n }\r\n return this.convertSchema(refSchema, refName);\r\n }\r\n\r\n // Handle oneOf\r\n if (schema.oneOf) {\r\n const unions = schema.oneOf.map((s: any) => this.convertSchema(s));\r\n return z.union(unions as [z.ZodSchema, z.ZodSchema, ...z.ZodSchema[]]);\r\n }\r\n\r\n // Handle allOf\r\n if (schema.allOf) {\r\n const schemas = schema.allOf.map((s: any) => this.convertSchema(s));\r\n // Merge all schemas - simplified approach\r\n return schemas.reduce(\r\n (acc: any, curr: any) => acc.merge(curr),\r\n z.object({})\r\n );\r\n }\r\n\r\n // Handle anyOf\r\n if (schema.anyOf) {\r\n const unions = schema.anyOf.map((s: any) => this.convertSchema(s));\r\n return z.union(unions as [z.ZodSchema, z.ZodSchema, ...z.ZodSchema[]]);\r\n }\r\n\r\n // Handle different types\r\n switch (schema.type) {\r\n case \"string\":\r\n return this.convertStringSchema(schema);\r\n case \"number\":\r\n case \"integer\":\r\n return this.convertNumberSchema(schema);\r\n case \"boolean\":\r\n return z.boolean();\r\n case \"array\":\r\n return this.convertArraySchema(schema);\r\n case \"object\":\r\n return this.convertObjectSchema(schema, schemaName);\r\n case \"null\":\r\n return z.null();\r\n default:\r\n // If no type specified, try to infer from properties\r\n if (schema.properties || schema.additionalProperties) {\r\n return this.convertObjectSchema(schema, schemaName);\r\n }\r\n return z.any();\r\n }\r\n }\r\n\r\n /**\r\n * Convert string schema with validations\r\n */\r\n private convertStringSchema(schema: any): z.ZodSchema {\r\n // Handle enum first, as it returns a different type\r\n if (schema.enum) {\r\n const enumSchema = z.enum(schema.enum as [string, ...string[]]);\r\n\r\n // Add OpenAPI metadata to enum\r\n if (schema.description || schema.example) {\r\n return enumSchema.openapi({\r\n description: schema.description,\r\n example: schema.example,\r\n });\r\n }\r\n return enumSchema;\r\n }\r\n\r\n // Now handle regular string schemas\r\n let zodSchema = z.string();\r\n\r\n if (schema.minLength !== undefined) {\r\n zodSchema = zodSchema.min(schema.minLength);\r\n }\r\n if (schema.maxLength !== undefined) {\r\n zodSchema = zodSchema.max(schema.maxLength);\r\n }\r\n if (schema.pattern) {\r\n zodSchema = zodSchema.regex(new RegExp(schema.pattern));\r\n }\r\n if (schema.format) {\r\n switch (schema.format) {\r\n case \"email\":\r\n zodSchema = zodSchema.email();\r\n break;\r\n case \"uuid\":\r\n zodSchema = zodSchema.uuid();\r\n break;\r\n case \"date-time\":\r\n zodSchema = zodSchema.datetime();\r\n break;\r\n case \"date\":\r\n zodSchema = zodSchema.regex(/^\\d{4}-\\d{2}-\\d{2}$/);\r\n break;\r\n case \"uri\":\r\n zodSchema = zodSchema.url();\r\n break;\r\n }\r\n }\r\n\r\n // Add OpenAPI metadata\r\n if (schema.description || schema.example) {\r\n zodSchema = zodSchema.openapi({\r\n description: schema.description,\r\n example: schema.example,\r\n });\r\n }\r\n\r\n return zodSchema;\r\n }\r\n\r\n /**\r\n * Convert number schema with validations\r\n */\r\n private convertNumberSchema(schema: any): z.ZodSchema {\r\n let zodSchema = schema.type === \"integer\" ? z.number().int() : z.number();\r\n\r\n if (schema.minimum !== undefined) {\r\n zodSchema = zodSchema.min(schema.minimum);\r\n }\r\n if (schema.maximum !== undefined) {\r\n zodSchema = zodSchema.max(schema.maximum);\r\n }\r\n if (schema.multipleOf !== undefined) {\r\n zodSchema = zodSchema.multipleOf(schema.multipleOf);\r\n }\r\n\r\n // Add OpenAPI metadata\r\n if (schema.description || schema.example) {\r\n zodSchema = zodSchema.openapi({\r\n description: schema.description,\r\n example: schema.example,\r\n });\r\n }\r\n\r\n return zodSchema;\r\n }\r\n\r\n /**\r\n * Convert array schema\r\n */\r\n private convertArraySchema(schema: any): z.ZodSchema {\r\n if (!schema.items) {\r\n return z.array(z.any());\r\n }\r\n\r\n const itemSchema = this.convertSchema(schema.items);\r\n let zodSchema = z.array(itemSchema);\r\n\r\n if (schema.minItems !== undefined) {\r\n zodSchema = zodSchema.min(schema.minItems);\r\n }\r\n if (schema.maxItems !== undefined) {\r\n zodSchema = zodSchema.max(schema.maxItems);\r\n }\r\n\r\n return zodSchema;\r\n }\r\n\r\n /**\r\n * Convert object schema\r\n */\r\n private convertObjectSchema(schema: any, schemaName?: string): z.ZodSchema {\r\n const shape: Record = {};\r\n\r\n if (schema.properties) {\r\n Object.entries(schema.properties).forEach(([key, propSchema]) => {\r\n let propZodSchema = this.convertSchema(propSchema as any);\r\n\r\n // Make optional if not required\r\n if (!schema.required?.includes(key)) {\r\n propZodSchema = propZodSchema.optional();\r\n }\r\n\r\n shape[key] = propZodSchema;\r\n });\r\n }\r\n\r\n // Create the base object schema\r\n let zodSchema: z.ZodTypeAny = z.object(shape);\r\n\r\n // Handle additionalProperties\r\n if (schema.additionalProperties === false) {\r\n zodSchema = z.object(shape).strict();\r\n } else if (schema.additionalProperties === true) {\r\n zodSchema = z.object(shape).passthrough();\r\n } else if (typeof schema.additionalProperties === \"object\") {\r\n // For specific additional properties schema, use passthrough\r\n zodSchema = z.object(shape).passthrough();\r\n }\r\n\r\n // Add OpenAPI metadata\r\n if (schemaName && typeof schemaName === \"string\") {\r\n // Use the two-parameter version when we have a schema name\r\n zodSchema = zodSchema.openapi(schemaName, {\r\n description: schema.description,\r\n });\r\n } else if (schema.description) {\r\n // Use the single-parameter version with just metadata\r\n zodSchema = zodSchema.openapi({\r\n description: schema.description,\r\n });\r\n }\r\n\r\n return zodSchema;\r\n }\r\n}\r\n\r\n// ========================================\r\n// Route Generator\r\n// ========================================\r\n\r\nclass RouteGenerator {\r\n private converter: SchemaConverter;\r\n private spec: OpenAPISpec;\r\n\r\n constructor(spec: OpenAPISpec, converter: SchemaConverter) {\r\n this.spec = spec;\r\n this.converter = converter;\r\n }\r\n\r\n /**\r\n * Generate route configuration from OpenAPI path\r\n */\r\n generateRoute(path: string, method: string, pathSpec: any): RouteConfig {\r\n const config: RouteConfig = {\r\n method: method as HttpMethod,\r\n path: this.convertPath(path),\r\n tags: pathSpec.tags || [],\r\n summary: pathSpec.summary,\r\n description: pathSpec.description,\r\n operationId: pathSpec.operationId,\r\n responses: {},\r\n };\r\n\r\n // Add security\r\n if (pathSpec.security) {\r\n config.security = pathSpec.security;\r\n }\r\n\r\n // Build request schema\r\n const request: any = {};\r\n\r\n // Path parameters\r\n if (pathSpec.parameters) {\r\n const pathParams: Record = {};\r\n const queryParams: Record = {};\r\n const headerParams: Record = {};\r\n\r\n pathSpec.parameters.forEach((param: any) => {\r\n // Handle $ref in parameters\r\n if (param.$ref) {\r\n const refName = param.$ref.split(\"/\").pop();\r\n param = this.spec.components?.parameters?.[refName] || param;\r\n }\r\n\r\n const paramSchema = this.convertParameterSchema(param);\r\n\r\n switch (param.in) {\r\n case \"path\":\r\n pathParams[param.name] = paramSchema;\r\n break;\r\n case \"query\":\r\n queryParams[param.name] = paramSchema;\r\n break;\r\n case \"header\":\r\n headerParams[param.name] = paramSchema;\r\n break;\r\n }\r\n });\r\n\r\n if (Object.keys(pathParams).length > 0) {\r\n request.params = z.object(pathParams);\r\n }\r\n if (Object.keys(queryParams).length > 0) {\r\n request.query = z.object(queryParams);\r\n }\r\n if (Object.keys(headerParams).length > 0) {\r\n request.headers = z.object(headerParams);\r\n }\r\n }\r\n\r\n // Request body\r\n if (pathSpec.requestBody) {\r\n const requestBody = this.resolveRef(pathSpec.requestBody);\r\n if (requestBody.content?.[\"application/json\"]?.schema) {\r\n const bodySchema = this.converter.convertSchema(\r\n requestBody.content[\"application/json\"].schema\r\n );\r\n request.body = {\r\n content: {\r\n \"application/json\": {\r\n schema: bodySchema,\r\n },\r\n },\r\n required: requestBody.required !== false,\r\n };\r\n }\r\n }\r\n\r\n if (Object.keys(request).length > 0) {\r\n config.request = request;\r\n }\r\n\r\n // Responses\r\n Object.entries(pathSpec.responses || {}).forEach(\r\n ([statusCode, response]: [string, any]) => {\r\n const resolvedResponse = this.resolveRef(response);\r\n const responseConfig: any = {\r\n description: resolvedResponse.description || `Response ${statusCode}`,\r\n };\r\n\r\n if (resolvedResponse.content?.[\"application/json\"]?.schema) {\r\n const responseSchema = this.converter.convertSchema(\r\n resolvedResponse.content[\"application/json\"].schema\r\n );\r\n responseConfig.content = {\r\n \"application/json\": {\r\n schema: responseSchema,\r\n },\r\n };\r\n }\r\n\r\n config.responses[\r\n statusCode === \"default\" ? \"default\" : parseInt(statusCode)\r\n ] = responseConfig;\r\n }\r\n );\r\n\r\n return config;\r\n }\r\n\r\n /**\r\n * Convert OpenAPI path to Hono path format\r\n */\r\n private convertPath(path: string): string {\r\n // Convert {param} to :param\r\n return path.replace(/\\{([^}]+)\\}/g, \":$1\");\r\n }\r\n\r\n /**\r\n * Convert parameter to Zod schema\r\n */\r\n private convertParameterSchema(param: any): z.ZodSchema {\r\n let schema: z.ZodSchema;\r\n\r\n if (param.schema) {\r\n schema = this.converter.convertSchema(param.schema);\r\n } else {\r\n // Fallback for older OpenAPI specs\r\n schema = z.string();\r\n }\r\n\r\n // Apply parameter-specific validations\r\n if (param.required !== false && param.in === \"path\") {\r\n // Path params are always required\r\n } else if (!param.required) {\r\n schema = schema.optional();\r\n }\r\n\r\n // Add OpenAPI metadata\r\n if (param.description || param.example) {\r\n schema = schema.openapi({\r\n param: {\r\n name: param.name,\r\n in: param.in,\r\n },\r\n description: param.description,\r\n example: param.example,\r\n });\r\n }\r\n\r\n return schema;\r\n }\r\n\r\n /**\r\n * Resolve $ref in responses/requestBodies\r\n */\r\n private resolveRef(obj: any): any {\r\n if (obj.$ref) {\r\n const parts = obj.$ref.split(\"/\");\r\n const component = parts[parts.length - 2];\r\n const name = parts[parts.length - 1];\r\n\r\n switch (component) {\r\n case \"responses\":\r\n return this.spec.components?.responses?.[name] || obj;\r\n case \"requestBodies\":\r\n return this.spec.components?.requestBodies?.[name] || obj;\r\n default:\r\n return obj;\r\n }\r\n }\r\n return obj;\r\n }\r\n}\r\n\r\n// ========================================\r\n// OpenAPI Loader Class\r\n// ========================================\r\n\r\nexport class OpenAPILoader {\r\n private spec: OpenAPISpec;\r\n private app?: OpenAPIHono;\r\n private converter: SchemaConverter;\r\n private generator: RouteGenerator;\r\n private options: LoaderOptions;\r\n private endpoints: Array<{\r\n method: string;\r\n path: string;\r\n operationId?: string;\r\n }> = [];\r\n\r\n constructor(spec: OpenAPISpec, options: LoaderOptions = {}) {\r\n this.spec = spec;\r\n this.options = {\r\n enableValidation: true,\r\n enableLogging: true,\r\n defaultResponses: true,\r\n ...options,\r\n };\r\n this.converter = new SchemaConverter(spec);\r\n this.generator = new RouteGenerator(spec, this.converter);\r\n this.collectEndpoints();\r\n }\r\n\r\n /**\r\n * Get the OpenAPI specification\r\n */\r\n getSpec(): OpenAPISpec {\r\n return this.spec;\r\n }\r\n\r\n /**\r\n * Get all endpoints\r\n */\r\n getEndpoints(): Array<{\r\n method: string;\r\n path: string;\r\n operationId?: string;\r\n }> {\r\n return this.endpoints;\r\n }\r\n\r\n /**\r\n * Check if schema validation is enabled\r\n */\r\n isSchemaValidationEnabled(): boolean {\r\n return this.options.enableValidation || false;\r\n }\r\n\r\n /**\r\n * Collect all endpoints from spec\r\n */\r\n private collectEndpoints(): void {\r\n Object.entries(this.spec.paths).forEach(([path, methods]) => {\r\n Object.entries(methods).forEach(([method, spec]) => {\r\n if (typeof spec === \"object\" && !method.startsWith(\"x-\")) {\r\n this.endpoints.push({\r\n method: method.toUpperCase(),\r\n path,\r\n operationId: spec.operationId,\r\n });\r\n }\r\n });\r\n });\r\n }\r\n\r\n /**\r\n * Create a proper RouteHandler from a handler function\r\n */\r\n private createRouteHandler(\r\n handler: HandlerFunction | RouteHandler\r\n ): RouteHandler {\r\n // Always wrap handlers since they all use the { request, context } pattern\r\n // This ensures dynamic compatibility with all handler formats\r\n return async (c) => {\r\n try {\r\n // Debug logging\r\n if (!c) {\r\n console.error(\r\n \"CRITICAL: Hono context 'c' is undefined in createRouteHandler\"\r\n );\r\n return new Response(\"Internal Server Error: No context\", {\r\n status: 500,\r\n });\r\n }\r\n\r\n const handlerFunc = handler as HandlerFunction;\r\n const params: any = {\r\n request: c.req?.raw || c.req, // Fallback to c.request if c.req is undefined\r\n context: c,\r\n };\r\n\r\n // Extract parameters and data from Hono context\r\n try {\r\n // Extract path parameters\r\n params.params = c.req.param ? c.req.param() : {};\r\n\r\n // Extract query parameters\r\n params.query = c.req.query ? c.req.query() : {};\r\n\r\n // Extract request body\r\n if (c.req.header(\"content-type\")?.includes(\"application/json\")) {\r\n try {\r\n params.body = await c.req.json();\r\n } catch (e) {\r\n params.body = {};\r\n }\r\n } else {\r\n params.body = {};\r\n }\r\n\r\n // Extract headers\r\n const headers: Record = {};\r\n for (const [key, value] of c.req.raw.headers.entries()) {\r\n headers[key.toLowerCase()] = value;\r\n }\r\n params.headers = headers;\r\n } catch (e) {\r\n console.log(\"Error extracting parameters:\", e);\r\n // Provide empty defaults\r\n params.params = {};\r\n params.query = {};\r\n params.body = {};\r\n params.headers = {};\r\n }\r\n\r\n // Call the handler function\r\n const response = await handlerFunc(params);\r\n return response;\r\n } catch (error) {\r\n console.error(\"Error in createRouteHandler wrapper:\", error);\r\n return new Response(`Handler Error: ${error.message}`, { status: 500 });\r\n }\r\n };\r\n }\r\n\r\n /**\r\n * Register routes on OpenAPIHono app\r\n */\r\n registerRoutes(\r\n app: OpenAPIHono,\r\n handlers: HandlerMap | Record\r\n ): void {\r\n this.app = app;\r\n\r\n // Register security schemes\r\n if (this.spec.components?.securitySchemes) {\r\n Object.entries(this.spec.components.securitySchemes).forEach(\r\n ([name, scheme]) => {\r\n app.openAPIRegistry.registerComponent(\r\n \"securitySchemes\",\r\n name,\r\n scheme\r\n );\r\n }\r\n );\r\n if (this.options.enableLogging) {\r\n logInfo(\"🔐 Registered security schemes\");\r\n }\r\n }\r\n\r\n // Register all routes\r\n let registeredCount = 0;\r\n Object.entries(this.spec.paths).forEach(([path, pathSpec]) => {\r\n Object.entries(pathSpec).forEach(([method, operationSpec]) => {\r\n if (typeof operationSpec === \"object\" && !method.startsWith(\"x-\")) {\r\n this.registerRoute(app, path, method, operationSpec, handlers);\r\n registeredCount++;\r\n }\r\n });\r\n });\r\n\r\n if (this.options.enableLogging) {\r\n logInfo(`📍 Registered ${registeredCount} routes from OpenAPI spec`);\r\n }\r\n\r\n // Setup documentation endpoint\r\n app.doc(\"/doc\", {\r\n openapi: this.spec.openapi,\r\n info: this.spec.info,\r\n servers: this.spec.servers,\r\n tags: this.spec.tags,\r\n });\r\n }\r\n\r\n /**\r\n * Register a single route\r\n */\r\n private registerRoute(\r\n app: OpenAPIHono,\r\n path: string,\r\n method: string,\r\n operationSpec: any,\r\n handlers: HandlerMap | Record\r\n ): void {\r\n const operationId = operationSpec.operationId;\r\n const handler = handlers[operationId];\r\n\r\n if (!handler) {\r\n logError(`No handler found for operationId: ${operationId}`);\r\n return;\r\n }\r\n\r\n try {\r\n const routeConfig = this.generator.generateRoute(\r\n path,\r\n method,\r\n operationSpec\r\n );\r\n const route = createRoute(routeConfig);\r\n\r\n // Convert handler to proper RouteHandler type\r\n const routeHandler = this.createRouteHandler(handler);\r\n\r\n // Register with type-safe handler\r\n app.openapi(route, routeHandler);\r\n\r\n if (this.options.enableLogging) {\r\n logDebug(\r\n `Registered: ${method.toUpperCase()} ${\r\n routeConfig.path\r\n } -> ${operationId}`\r\n );\r\n }\r\n } catch (error) {\r\n logError(`Failed to register route ${method} ${path}: ${error}`);\r\n }\r\n }\r\n\r\n /**\r\n * Display startup information\r\n */\r\n displayStartupInfo(): void {\r\n const info = this.spec.info;\r\n console.log(`\r\n╔═══════════════════════════════════════════════════════════════╗\r\n║ ${info.title.padEnd(61)} ║\r\n║ Version: ${info.version.padEnd(52)} ║\r\n║ ${info.description?.substring(0, 61).padEnd(61) || \"\"} ║\r\n╠═══════════════════════════════════════════════════════════════╣\r\n║ Endpoints: ${this.endpoints.length.toString().padEnd(50)} ║\r\n║ Validation: ${(this.options.enableValidation ? \"Enabled\" : \"Disabled\").padEnd(\r\n 49\r\n )} ║\r\n╚═══════════════════════════════════════════════════════════════╝\r\n `);\r\n\r\n if (this.options.enableLogging) {\r\n console.log(\"\\n📚 Registered Endpoints:\");\r\n this.endpoints.forEach(({ method, path, operationId }) => {\r\n console.log(\r\n ` ${method.padEnd(7)} ${path.padEnd(30)} → ${\r\n operationId || \"no-operation-id\"\r\n }`\r\n );\r\n });\r\n }\r\n }\r\n}\r\n\r\n/**\r\n * Load OpenAPI spec from appropriate source based on environment\r\n * Dynamically determines the best source and includes fallback mechanisms\r\n */\r\nasync function loadOpenAPISpec(\r\n specPath: string,\r\n options?: LoaderOptions\r\n): Promise {\r\n const isProduction = environment.APP_ENV === \"prod\";\r\n const blobKey =\r\n options?.blobKey || environment.OPENAPI_BLOB_KEY || \"openapi-spec\";\r\n const errors: string[] = [];\r\n\r\n // Production: Try blob first, then URL as fallback\r\n if (isProduction) {\r\n // Try blob storage first if available\r\n if (blob) {\r\n try {\r\n logInfo(\r\n `Loading OpenAPI spec from Val Town blob storage (key: ${blobKey})`\r\n );\r\n const spec = await blob.getJSON(blobKey);\r\n if (spec) {\r\n logInfo(\"✅ Successfully loaded OpenAPI spec from blob storage\");\r\n return spec as OpenAPISpec;\r\n }\r\n // If spec is null/undefined, treat as not found\r\n logInfo(\"No spec found in blob storage, trying URL fallback\");\r\n } catch (error) {\r\n logError(`Failed to load from blob storage: ${error}`);\r\n errors.push(`blob: ${error}`);\r\n // Continue to URL fallback\r\n }\r\n } else {\r\n logInfo(\"Blob storage not available, trying URL\");\r\n }\r\n\r\n // Always try URL as fallback in production\r\n try {\r\n const url = environment.OPENAPI_PUBLIC_URL;\r\n if (!url) {\r\n throw new Error(\"OPENAPI_PUBLIC_URL not configured\");\r\n }\r\n\r\n logInfo(`Loading OpenAPI spec from URL: ${url}`);\r\n const response = await fetch(url);\r\n if (!response.ok) {\r\n throw new Error(`HTTP error! status: ${response.status}`);\r\n }\r\n const spec = (await response.json()) as OpenAPISpec;\r\n logInfo(\"✅ Successfully loaded OpenAPI spec from URL\");\r\n\r\n // Try to cache to blob for next time\r\n if (blob) {\r\n try {\r\n await blob.setJSON(blobKey, spec);\r\n logInfo(\"📦 Cached OpenAPI spec to blob storage for future use\");\r\n } catch (e) {\r\n logDebug(\"Could not cache to blob storage:\", e);\r\n }\r\n }\r\n\r\n return spec;\r\n } catch (error) {\r\n logError(`Failed to load from URL: ${error}`);\r\n errors.push(`URL: ${error}`);\r\n throw new Error(\r\n `Could not load OpenAPI spec in production. Attempted sources failed: ${errors.join(\r\n \", \"\r\n )}`\r\n );\r\n }\r\n }\r\n\r\n // Development: Load from local file\r\n try {\r\n const localPath =\r\n specPath || environment.OPENAPI_LOCAL_PATH || \"./openapi.json\";\r\n logInfo(`Loading OpenAPI spec from file: ${localPath}`);\r\n const specContent = await Deno.readTextFile(localPath);\r\n const spec = JSON.parse(specContent) as OpenAPISpec;\r\n logInfo(\"✅ Successfully loaded OpenAPI spec from local file\");\r\n return spec;\r\n } catch (error) {\r\n logError(`Failed to load OpenAPI spec from file: ${error}`);\r\n throw error;\r\n }\r\n}\r\nexport async function createOpenAPILoader(\r\n specPath?: string, // Make optional\r\n enableValidation: boolean = true,\r\n options?: LoaderOptions\r\n): Promise {\r\n try {\r\n // Use environment config if no path provided\r\n const effectivePath = specPath || environment.OPENAPI_LOCAL_PATH;\r\n const effectiveOptions = {\r\n ...options,\r\n blobKey: options?.blobKey || environment.OPENAPI_BLOB_KEY,\r\n };\r\n\r\n const spec = await loadOpenAPISpec(effectivePath, effectiveOptions);\r\n\r\n return new OpenAPILoader(spec, {\r\n enableValidation,\r\n enableLogging: true,\r\n defaultResponses: true,\r\n ...effectiveOptions,\r\n });\r\n } catch (error) {\r\n logError(`Failed to create OpenAPI loader: ${error}`);\r\n throw error;\r\n }\r\n}\r\n\r\ninterface SchemaProperty {\r\n type: string;\r\n format?: string;\r\n pattern?: string;\r\n enum?: string[];\r\n items?: SchemaProperty;\r\n properties?: Record;\r\n required?: string[];\r\n additionalProperties?: boolean | SchemaProperty;\r\n minimum?: number;\r\n maximum?: number;\r\n minLength?: number;\r\n maxLength?: number;\r\n}\r\n\r\ninterface ValidationResult {\r\n valid: boolean;\r\n errors: string[];\r\n}\r\n\r\n/**\r\n * Dynamic schema validation service that validates requests/responses\r\n * against OpenAPI schemas for complete automation\r\n */\r\nexport class SchemaValidationService {\r\n private static schemas: Record = {};\r\n\r\n /**\r\n * Load schemas from OpenAPI specification\r\n */\r\n static loadSchemas(openApiSpec: any): void {\r\n if (openApiSpec.components?.schemas) {\r\n this.schemas = openApiSpec.components.schemas;\r\n logger.info(\"Schemas loaded for validation\", {\r\n schemaCount: Object.keys(this.schemas).length,\r\n });\r\n }\r\n }\r\n\r\n /**\r\n * Validate request body against schema\r\n */\r\n static validateRequestBody(\r\n endpoint: string,\r\n method: string,\r\n body: any,\r\n openApiSpec: any\r\n ): ValidationResult {\r\n try {\r\n const pathSpec = openApiSpec.paths?.[endpoint]?.[method.toLowerCase()];\r\n if (!pathSpec?.requestBody?.content?.[\"application/json\"]?.schema) {\r\n return { valid: true, errors: [] }; // No schema to validate against\r\n }\r\n\r\n const schema = pathSpec.requestBody.content[\"application/json\"].schema;\r\n return this.validateAgainstSchema(body, schema, \"request body\");\r\n } catch (error) {\r\n logger.warn(\"Schema validation error\", {\r\n endpoint,\r\n method,\r\n error: error.message,\r\n });\r\n return { valid: false, errors: [`Validation error: ${error.message}`] };\r\n }\r\n }\r\n\r\n /**\r\n * Validate response against schema\r\n */\r\n static validateResponse(\r\n endpoint: string,\r\n method: string,\r\n statusCode: number,\r\n response: any,\r\n openApiSpec: any\r\n ): ValidationResult {\r\n try {\r\n const pathSpec = openApiSpec.paths?.[endpoint]?.[method.toLowerCase()];\r\n const responseSpec =\r\n pathSpec?.responses?.[statusCode.toString()]?.content?.[\r\n \"application/json\"\r\n ]?.schema;\r\n\r\n if (!responseSpec) {\r\n return { valid: true, errors: [] }; // No schema to validate against\r\n }\r\n\r\n return this.validateAgainstSchema(response, responseSpec, \"response\");\r\n } catch (error) {\r\n logger.warn(\"Response validation error\", {\r\n endpoint,\r\n method,\r\n statusCode,\r\n error: error.message,\r\n });\r\n return {\r\n valid: false,\r\n errors: [`Response validation error: ${error.message}`],\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Core validation logic against OpenAPI schema\r\n */\r\n private static validateAgainstSchema(\r\n data: any,\r\n schema: SchemaProperty,\r\n context: string = \"data\"\r\n ): ValidationResult {\r\n const errors: string[] = [];\r\n\r\n // Handle $ref references\r\n if (\"$ref\" in schema) {\r\n const refPath = (schema as any).$ref.split(\"/\").pop();\r\n const referencedSchema = this.schemas[refPath];\r\n if (referencedSchema) {\r\n return this.validateAgainstSchema(data, referencedSchema, context);\r\n } else {\r\n errors.push(`Referenced schema not found: ${refPath}`);\r\n return { valid: false, errors };\r\n }\r\n }\r\n\r\n // Handle allOf\r\n if (\"allOf\" in schema) {\r\n for (const subSchema of (schema as any).allOf) {\r\n const result = this.validateAgainstSchema(data, subSchema, context);\r\n if (!result.valid) {\r\n errors.push(...result.errors);\r\n }\r\n }\r\n return { valid: errors.length === 0, errors };\r\n }\r\n\r\n // Type validation\r\n if (schema.type) {\r\n const actualType = Array.isArray(data) ? \"array\" : typeof data;\r\n const expectedType = schema.type;\r\n\r\n if (\r\n expectedType === \"integer\" &&\r\n typeof data === \"number\" &&\r\n !Number.isInteger(data)\r\n ) {\r\n errors.push(`${context} must be an integer, got decimal number`);\r\n } else if (expectedType === \"number\" && typeof data !== \"number\") {\r\n errors.push(`${context} must be a number, got ${actualType}`);\r\n } else if (\r\n expectedType !== \"number\" &&\r\n expectedType !== \"integer\" &&\r\n actualType !== expectedType\r\n ) {\r\n errors.push(\r\n `${context} must be of type ${expectedType}, got ${actualType}`\r\n );\r\n }\r\n }\r\n\r\n // Null check\r\n if (data === null || data === undefined) {\r\n errors.push(`${context} cannot be null or undefined`);\r\n return { valid: false, errors };\r\n }\r\n\r\n // String validations\r\n if (schema.type === \"string\" && typeof data === \"string\") {\r\n if (schema.pattern && !new RegExp(schema.pattern).test(data)) {\r\n errors.push(\r\n `${context} does not match required pattern: ${schema.pattern}`\r\n );\r\n }\r\n if (schema.enum && !schema.enum.includes(data)) {\r\n errors.push(`${context} must be one of: ${schema.enum.join(\", \")}`);\r\n }\r\n if (schema.minLength !== undefined && data.length < schema.minLength) {\r\n errors.push(\r\n `${context} must be at least ${schema.minLength} characters long`\r\n );\r\n }\r\n if (schema.maxLength !== undefined && data.length > schema.maxLength) {\r\n errors.push(\r\n `${context} must be no more than ${schema.maxLength} characters long`\r\n );\r\n }\r\n if (schema.format) {\r\n const formatValidation = this.validateFormat(data, schema.format);\r\n if (!formatValidation.valid) {\r\n errors.push(\r\n ...formatValidation.errors.map((err) => `${context} ${err}`)\r\n );\r\n }\r\n }\r\n }\r\n\r\n // Number validations\r\n if (\r\n (schema.type === \"number\" || schema.type === \"integer\") &&\r\n typeof data === \"number\"\r\n ) {\r\n if (schema.minimum !== undefined && data < schema.minimum) {\r\n errors.push(`${context} must be at least ${schema.minimum}`);\r\n }\r\n if (schema.maximum !== undefined && data > schema.maximum) {\r\n errors.push(`${context} must be no more than ${schema.maximum}`);\r\n }\r\n }\r\n\r\n // Array validations\r\n if (schema.type === \"array\" && Array.isArray(data)) {\r\n if (schema.items) {\r\n data.forEach((item, index) => {\r\n const itemResult = this.validateAgainstSchema(\r\n item,\r\n schema.items!,\r\n `${context}[${index}]`\r\n );\r\n if (!itemResult.valid) {\r\n errors.push(...itemResult.errors);\r\n }\r\n });\r\n }\r\n }\r\n\r\n // Object validations\r\n if (\r\n schema.type === \"object\" &&\r\n typeof data === \"object\" &&\r\n !Array.isArray(data)\r\n ) {\r\n // Required properties\r\n if (schema.required) {\r\n for (const requiredProp of schema.required) {\r\n if (!(requiredProp in data)) {\r\n errors.push(\r\n `${context} is missing required property: ${requiredProp}`\r\n );\r\n }\r\n }\r\n }\r\n\r\n // Property validations\r\n if (schema.properties) {\r\n for (const [propName, propSchema] of Object.entries(\r\n schema.properties\r\n )) {\r\n if (propName in data) {\r\n const propResult = this.validateAgainstSchema(\r\n data[propName],\r\n propSchema,\r\n `${context}.${propName}`\r\n );\r\n if (!propResult.valid) {\r\n errors.push(...propResult.errors);\r\n }\r\n }\r\n }\r\n }\r\n\r\n // Additional properties\r\n if (schema.additionalProperties === false) {\r\n const allowedProps = schema.properties\r\n ? Object.keys(schema.properties)\r\n : [];\r\n for (const propName of Object.keys(data)) {\r\n if (!allowedProps.includes(propName)) {\r\n errors.push(`${context} contains unexpected property: ${propName}`);\r\n }\r\n }\r\n }\r\n }\r\n\r\n return { valid: errors.length === 0, errors };\r\n }\r\n\r\n /**\r\n * Validate string formats (email, uuid, date-time, etc.)\r\n */\r\n private static validateFormat(\r\n value: string,\r\n format: string\r\n ): ValidationResult {\r\n const errors: string[] = [];\r\n\r\n switch (format) {\r\n case \"email\":\r\n if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(value)) {\r\n errors.push(\"must be a valid email address\");\r\n }\r\n break;\r\n case \"uuid\":\r\n if (\r\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(\r\n value\r\n )\r\n ) {\r\n errors.push(\"must be a valid UUID\");\r\n }\r\n break;\r\n case \"date-time\":\r\n if (isNaN(Date.parse(value))) {\r\n errors.push(\"must be a valid ISO 8601 date-time\");\r\n }\r\n break;\r\n case \"uri\":\r\n try {\r\n new URL(value);\r\n } catch {\r\n errors.push(\"must be a valid URI\");\r\n }\r\n break;\r\n case \"decimal\":\r\n if (!/^\\d+(\\.\\d{2})?$/.test(value)) {\r\n errors.push(\"must be a valid decimal number\");\r\n }\r\n break;\r\n default:\r\n // Unknown format, skip validation\r\n break;\r\n }\r\n\r\n return { valid: errors.length === 0, errors };\r\n }\r\n\r\n /**\r\n * Get rate limit from OpenAPI path specification\r\n */\r\n static extractRateLimit(pathSpec: any): number | null {\r\n const description = pathSpec?.description || \"\";\r\n const rateLimitMatch = description.match(\r\n /(\\d+)\\s+requests?\\s+per\\s+minute/i\r\n );\r\n return rateLimitMatch ? parseInt(rateLimitMatch[1]) : null;\r\n }\r\n\r\n /**\r\n * Check if endpoint requires authentication based on security schemes\r\n */\r\n static requiresAuthentication(pathSpec: any): {\r\n requiresApiKey: boolean;\r\n requiresNonce: boolean;\r\n } {\r\n const security = pathSpec?.security || [];\r\n\r\n let requiresApiKey = false;\r\n let requiresNonce = false;\r\n\r\n for (const securityReq of security) {\r\n if (securityReq.ApiKeyAuth) {\r\n requiresApiKey = true;\r\n }\r\n if (securityReq.NonceAuth) {\r\n requiresNonce = true;\r\n }\r\n }\r\n\r\n return { requiresApiKey, requiresNonce };\r\n }\r\n}\r\n\r\n/**\r\n * Register OpenAPI routes on app\r\n */\r\n// In utils/openApiLoader.ts, make sure registerOpenApiRoutes has this signature:\r\nexport function registerOpenApiRoutes(\r\n app: OpenAPIHono,\r\n loader: OpenAPILoader,\r\n handlerMap: Record\r\n): void {\r\n loader.registerRoutes(app, handlerMap);\r\n}\r\n\r\n// ========================================\r\n// Export Everything\r\n// ========================================\r\n\r\nexport default {\r\n OpenAPILoader,\r\n createOpenAPILoader,\r\n registerOpenApiRoutes,\r\n SchemaConverter,\r\n RouteGenerator,\r\n};\r\n","deleted","label",[171,172,153],"src","utils","permalink","https://www.val.town/x/ianmenethil/ZenServer/code/src/utils/openApiLoader.ts","extension","actionData","errors"]