Shared pure helpers for schema introspection and middleware matching.
Used by both http/route_spec.ts (input validation) and http/surface.ts (attack surface generation). Extracted to avoid circular dependencies between routes and middleware.
6 declarations
http/schema_helpers.ts view source
(schema: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>): boolean Check if a schema is exactly z.null().
Uses instanceof rather than runtime parsing to avoid false positives
from z.nullable(z.string()) or similar schemas that accept null
but also accept other values.
schemaZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>boolean http/schema_helpers.ts view source
(schema: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>): boolean Check if a schema is a strict object (z.strictObject()).
Strict objects set catchall to ZodNever to reject unknown keys.
Regular z.object() has catchall: undefined (strips unknown keys in Zod 4).
schemaZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>boolean http/schema_helpers.ts view source
(schema: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>): boolean Check if a schema is exactly z.void().
RPC action specs use z.void() to declare a parameterless method —
JSON-RPC 2.0 forbids params: null (params must be omitted or be a
Structured value), so z.void() is the correct schema for "no params"
and the dispatcher maps absent params to undefined for these specs.
schemaZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>boolean http/schema_helpers.ts view source
(spec: { auth: { account: "none" | "optional" | "required"; actor: "none" | "optional" | "required"; roles?: readonly string[] | undefined; credential_types?: readonly string[] | undefined; }; input: ZodType<unknown, unknown, $ZodTypeInternals<...>>; params?: ZodObject<...> | undefined; query?: ZodObject<...> | undefined; rate_limit?: "both" | ... 2 more ... | undefined; errors?: Partial<...> | undefined; }, middleware_errors?: Partial<...> | ... 1 more ... | undefined): Partial<...> | null Merge auto-derived, middleware, and explicit error schemas for a route spec.
Merge order: derived -> middleware -> explicit route errors. Later layers override earlier ones for the same status code.
specthe route spec (needs auth, input, params, rate_limit, errors)
{ auth: { account: "none" | "optional" | "required"; actor: "none" | "optional" | "required"; roles?: readonly string[] | undefined; credential_types?: readonly string[] | undefined; }; input: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>; params?: ZodObject<...> | undefined; query?: ZodObject<...> ...middleware_errors?errors contributed by middleware whose path matches the route
Partial<Record<number, ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>>> | null | undefinedPartial<Record<number, ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>>> | null merged error schemas, or null if empty
http/schema_helpers.ts view source
(mw_path: string, route_path: string): boolean Check if a middleware path pattern applies to a route path.
Supports Hono-style patterns:
- /api/* matches /api/anything
- /api/zap/* matches /api/zap/runs but not /api/account/login
- Exact match: /health matches /health
mw_pathstringroute_pathstringboolean http/schema_helpers.ts view source
(schema: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>): unknown Convert a Zod schema to a JSON-serializable representation for the surface.
Returns null for null schemas, JSON Schema for object schemas.
schemaZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>unknown