feat(api): init hono with rest and trpc

apps/api/src/index.ts

@@ -0,0 +1,85 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { Scalar } from "@scalar/hono-api-reference";
+import { cors } from "hono/cors";
+import { secureHeaders } from "hono/secure-headers";
+
+import { checkHealth } from "@/utils/health";
+
+const app = new OpenAPIHono();
+
+app.use(secureHeaders());
+
+app.use(
+  "*",
+  cors({
+    allowHeaders: [
+      "Authorization",
+      "Content-Type",
+      "accept-language",
+      "x-trpc-source",
+      "x-user-locale",
+      "x-user-timezone",
+      "x-user-country",
+    ],
+    allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH"],
+    exposeHeaders: ["Content-Length"],
+    maxAge: 86400,
+    origin: process.env.BASANGO_API_ALLOWED_ORIGINS?.split(",") ?? [],
+  }),
+);
+
+app.get("/health", async (c) => {
+  try {
+    await checkHealth();
+
+    return c.json({ status: "ok" }, 200);
+  } catch (error) {
+    return c.json(
+      {
+        message: error instanceof Error ? error.message : "Unknown error",
+        status: "error",
+      },
+      500,
+    );
+  }
+});
+
+app.doc("/openapi", {
+  info: {
+    contact: {
+      email: "engineer@basango.io",
+      name: "Basango",
+      url: "https://basango.io",
+    },
+    description: "Basango is a platform that leverages AI to revolutionize news curation.",
+    license: {
+      name: "AGPL-3.0 license",
+      url: "https://github.com/midday-ai/midday/blob/main/LICENSE",
+    },
+    title: "Basango API",
+    version: "0.0.1",
+  },
+  openapi: "3.1.0",
+  security: [
+    {
+      oauth2: [],
+    },
+    { token: [] },
+  ],
+  servers: [
+    {
+      description: "Production API",
+      url: "https://api.basango.io",
+    },
+  ],
+});
+
+// Register security scheme
+app.openAPIRegistry.registerComponent("securitySchemes", "token", {
+  description: "Default authentication mechanism",
+  scheme: "bearer",
+  type: "http",
+  "x-speakeasy-example": "BASANGO_API_KEY",
+});
+
+app.get("/", Scalar({ pageTitle: "Basango API", theme: "saturn", url: "/openapi" }));

apps/api/src/utils/geo.ts

@@ -0,0 +1,17 @@
+import type { HonoRequest } from "hono";
+
+export function getGeoContext(req: HonoRequest) {
+  const headers = req.header();
+
+  const country = headers["x-user-country"]?.toUpperCase() ?? null;
+  const locale = headers["x-user-locale"] ?? null;
+  const timezone = headers["x-user-timezone"] ?? null;
+  const ip = headers["x-forwarded-for"] ?? null;
+
+  return {
+    country,
+    ip,
+    locale,
+    timezone,
+  };
+}

apps/api/src/utils/health.ts

@@ -0,0 +1,5 @@
+import { checkHealth as checkDbHealth } from "@basango/db/utils/health";
+
+export async function checkHealth(): Promise<void> {
+  await checkDbHealth();
+}

apps/api/src/utils/parse.ts

@@ -0,0 +1,4 @@
+export function parseInputValue(value?: string | null) {
+  if (value === null) return null;
+  return value ? JSON.parse(value) : undefined;
+}

apps/api/src/utils/search.ts

@@ -0,0 +1,16 @@
+export function buildSearchQuery(input: string) {
+  const trimmed = input.trim();
+  if (!trimmed) {
+    return "";
+  }
+
+  return trimmed
+    .split(/\s+/)
+    .map((term) => {
+      // Escape special characters for PostgreSQL full-text search
+      // Special characters: & | ! ( ) : * ' " + - ~
+      const escaped = term.toLowerCase().replace(/[&|!():*'"+~-]/g, "\\$&");
+      return `${escaped}:*`;
+    })
+    .join(" & ");
+}

apps/api/src/utils/validate-response.ts

@@ -0,0 +1,21 @@
+import { logger } from "@basango/logger";
+import { z } from "zod";
+
+export function validateResponse(data: unknown, schema: z.ZodSchema) {
+  const result = schema.safeParse(data);
+
+  if (!result.success) {
+    const cause = z.treeifyError(result.error);
+
+    logger.error(cause);
+
+    return {
+      data: null,
+      details: cause,
+      error: "Response validation failed",
+      success: false,
+    };
+  }
+
+  return result.data;
+}