feat: replace koa-jsonapi-zod with @jsonapi-serde/integration-koa

- Drop koa-jsonapi-zod
- Add @jsonapi-serde/integration-koa and @jsonapi-serde/server
- Sort type now imported from @jsonapi-serde/server/request
- Add type cast on Router onMethodNotAllowed to bridge tree-router's
  @types/koa@2 against integration-koa's Koa v3 types

Author: nclaywell

skeleton/packages/api/package.json.liquid

@@ -20,6 +20,8 @@
         {%- if features contains "app-config" %}
         "@{{project.name}}/app-config": "workspace:*",
         {%- endif %}
+        "@jsonapi-serde/integration-koa": "^1.2.8",
+        "@jsonapi-serde/server": "^1.9.0",
         "@koa/bodyparser": "^6.1.0",
         "@koa/cors": "^5.0.0",
         "body-parser": "^2.2.0",
@@ -32,7 +34,6 @@
         "koa": "^3.2.0",
         "koa-cache-control": "^2.0.0",
         "koa-compress": "^5.1.1",
-        "koa-jsonapi-zod": "^3.6.0",
         "koa-tree-router": "^0.13.0",
         "logforth": "^1.2.2",
         "nanoid": "^5.1.5",

skeleton/packages/api/src/index.ts.liquid

@@ -1,15 +1,15 @@
 import * as zlib from "node:zlib";
+import {
+    jsonApiErrorMiddleware,
+    jsonApiRequestMiddleware,
+    treeRouterMethodNotAllowedHandler,
+} from "@jsonapi-serde/integration-koa";
+import { bodyParser } from "@koa/bodyparser";
 import cors from "@koa/cors";
 import gracefulShutdown from "http-graceful-shutdown";
 import Koa from "koa";
-import { bodyParser } from "@koa/bodyparser";
 import cacheControl from "koa-cache-control";
 import compress from "koa-compress";
-import {
-    jsonApiErrorMiddleware,
-    jsonApiRequestMiddleware,
-    methodNotAllowedHandler,
-} from "koa-jsonapi-zod";
 import Router from "koa-tree-router";
 {%- if features contains "app-config" %}
 import { appConfigHandler } from "@{{project.name}}/app-config";
@@ -67,7 +67,11 @@ app.use(bodyParser());
 app.use(requestContextMiddleware);
 {%- endif %}
 
-const router = new Router({ onMethodNotAllowed: methodNotAllowedHandler });
+// Type assertion needed: koa-tree-router still types against @types/koa@2,
+// while @jsonapi-serde/integration-koa expects Koa v3 types. Compatible at runtime.
+const router = new Router({
+    onMethodNotAllowed: treeRouterMethodNotAllowedHandler as unknown as Router.Middleware,
+});
 registerRoutes(router);
 app.use(router.routes());
 

skeleton/packages/api/src/util/mikro-orm.ts

@@ -1,9 +1,9 @@
+import type { Sort } from "@jsonapi-serde/server/request";
 import { type QueryOrderMap, RequestContext } from "@mikro-orm/core";
 import { MikroORM } from "@mikro-orm/postgresql";
 import fnv1a from "@sindresorhus/fnv1a";
 import { unflatten } from "flat";
 import type { Next, ParameterizedContext } from "koa";
-import type { Sort } from "koa-jsonapi-zod";
 
 export const orm = await MikroORM.init();
 export const em = orm.em;