feat: add schema validation, RPC, testing utilities, typebox & zod adapters

@mqttkit/core 0.2.0:
- Standard Schema v1 payload validation with ctx.body type inference
- SchemaProvider extension point (addSchemaProvider) for non-Standard libs
- app.request() / ctx.reply() RPC over MQTT 5 responseTopic + correlationData
- Structured onError lifecycle (route + app level, phase-tagged)
- New @mqttkit/core/testing subpath with in-memory TestBroker

@mqttkit/aedes 0.2.0:
- Forward MQTT 5 publish properties so RPC round-trips work

@mqttkit/asyncapi 0.2.0:
- Resolve Standard Schema -> JSON Schema via ~jsonSchema convention
- README schema integration guide

@mqttkit/typebox 0.1.0 (new):
- typeboxProvider for raw Type.X(...) schemas, full Static<T> inference

@mqttkit/zod 0.1.0 (new):
- jsonify() attaches JSON Schema for AsyncAPI doc generation

Examples: schema-validation, rpc; asyncapi-docs gains a dev:zod variant.
Docs: root + per-package READMEs, root CHANGELOG.md.
Publish script: include typebox & zod, add per-package aliases.

Author: keyp-dev

CHANGELOG.md

@@ -0,0 +1,97 @@
+# Changelog
+
+All notable changes to this monorepo are recorded here. Releases for each
+package follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html); the
+entries below are grouped by version-date so cross-package changes that ship
+together stay readable.
+
+The format is loosely based on [Keep a Changelog](https://keepachangelog.com/).
+
+## 2026-06-22
+
+`@mqttkit/core@0.2.0`, `@mqttkit/aedes@0.2.0`, `@mqttkit/asyncapi@0.2.0`,
+`@mqttkit/typebox@0.1.0` (initial), `@mqttkit/zod@0.1.0` (initial).
+
+### Added — `@mqttkit/core` 0.2.0
+
+- **Schema validation**. `topic({ schema })` accepts any [Standard
+  Schema v1](https://standardschema.dev/) validator (zod ≥3.24, valibot ≥1,
+  arktype, …). Validated output is exposed on `ctx.body` with full type
+  inference. `validate` option controls direction (`'inbound' | 'outbound' |
+  'both' | false`).
+- **SchemaProvider extension point**. `app.addSchemaProvider(provider)` lets
+  non-Standard-Schema libraries (e.g. raw TypeBox) plug in without core
+  depending on them. `MqttkitInferExtensions<T>` provides type-only registration
+  for `ctx.body` inference.
+- **RPC**. `app.request(topic, payload, options?)` sends a request using
+  MQTT 5 `responseTopic` + `correlationData` and resolves on reply.
+  `ctx.reply(payload)` answers on the device side.
+- **Error lifecycle**. `app.onError(handler)` and per-route `onError` receive
+  a structured `{ error, topic, phase, route, ctx }` payload. `phase` is one of
+  `middleware | handler | validation | policy | publish`. Validation failures
+  emit a `SchemaValidationError` and skip `onMessage`.
+- **Testing entry**. New `@mqttkit/core/testing` sub-export ships
+  `createTestApp()` and an in-memory `TestBroker` with `dispatch()` / `onPublish`
+  hooks. Lets apps be unit-tested without spawning aedes.
+- **Pattern module**. Topic-pattern matching extracted into `pattern.ts` and
+  exported from the package root.
+
+### Added — `@mqttkit/aedes` 0.2.0
+
+- Forwards MQTT 5 publish properties (`responseTopic`, `correlationData`,
+  `contentType`, `messageExpiryInterval`, `userProperties`,
+  `payloadFormatIndicator`) when calling `broker.publish`. Required for
+  `app.request()` RPC round-trips.
+- Bumps `@mqttkit/core` peer to `^0.2.0`.
+
+### Added — `@mqttkit/asyncapi` 0.2.0
+
+- `resolvePayloadSchema()`: route schemas that implement Standard Schema are
+  now reduced to a JSON Schema for the generated document. Order:
+  1. raw JSON Schema object — used as-is
+  2. Standard Schema with `~jsonSchema` attached — uses the attached schema
+  3. fallback: `{ description: 'Validated by <vendor>' }`
+- Lets `@mqttkit/zod`'s `jsonify()` (and TypeBox's native JSON Schema layout)
+  flow into the AsyncAPI document.
+- Bumps `@mqttkit/core` peer to `^0.2.0`.
+
+### Added — `@mqttkit/typebox` 0.1.0 (initial)
+
+- `typeboxProvider`: register with `app.addSchemaProvider(typeboxProvider)` and
+  pass raw `Type.X(...)` schemas directly to `topic({ schema })`. TypeBox
+  schemas detected by the `Kind` symbol and validated via
+  `@sinclair/typebox/value`.
+- Type-only module augmentation so `ctx.body` is inferred via `Static<T>`.
+- TypeBox schemas are JSON Schema natively, so `@mqttkit/asyncapi` outputs the
+  full payload automatically.
+
+### Added — `@mqttkit/zod` 0.1.0 (initial)
+
+- `jsonify(schema, options?)`: attaches a JSON Schema representation under
+  `~jsonSchema` and returns the same zod instance. Closes the gap where
+  `@mqttkit/asyncapi` falls back to `Validated by zod` because zod 3.x doesn't
+  expose JSON Schema by default.
+- zod ≥3.24 already implements Standard Schema, so runtime validation works
+  without `jsonify` — this helper is only needed when emitting AsyncAPI docs.
+
+### Examples
+
+- New `examples/schema-validation` with `zod`, `typebox`, `coexist`, and
+  `manual` variants.
+- New `examples/rpc` demonstrating `app.request()` / `ctx.reply()`.
+- `examples/asyncapi-docs` now defaults to the TypeBox variant; added a `dev:zod`
+  script that shows zod + `jsonify` flowing into the AsyncAPI document.
+
+### Internal
+
+- Root `tsconfig.json` excludes `**/dist/**` to avoid a parallel-build race
+  where one package's tsup pass discovered another package's mid-clean dist.
+
+## 2026-XX-XX — initial release
+
+`@mqttkit/core@0.1.0`, `@mqttkit/aedes@0.1.0`, `@mqttkit/asyncapi@0.1.0`.
+
+Initial publish of the framework: ordered middleware, topic router, typed
+context with `decorate()` service injection, broker lifecycle events,
+`app.publish()` for service-side push, Aedes TCP + MQTT-over-WebSocket
+adapter, and the AsyncAPI 3.0 documentation plugin.

README.md

@@ -11,10 +11,14 @@ mqttkit does not reimplement the MQTT protocol. A broker such as Aedes owns CONN
 - Ordered `use()` middleware for auth, logging, audit, validation, and interception.
 - `router().topic()` declares MQTT topic routes, publish policy, and subscribe policy.
 - `ctx.params` extracts topic params such as `devices/:uid/events`.
+- `ctx.body` carries the validated payload — any [Standard Schema](https://standardschema.dev/) validator (zod, valibot, arktype, …) works, with full type inference. Use `@mqttkit/typebox` / `@mqttkit/zod` for raw TypeBox or for attaching JSON Schema.
 - `ctx.services` injects Kafka, Redis, database, audit, or domain services.
+- `app.request()` does MQTT 5 RPC over `responseTopic` + `correlationData`; `ctx.reply()` answers on the device side.
+- `app.onError()` (and per-route `onError`) capture validation, handler, policy, middleware and publish failures with a structured `phase`.
 - `app.on()` observes broker lifecycle events such as client, publish, subscribe, ack, and errors.
 - `app.publish()` lets services, workers, and consumers push messages to MQTT clients through the broker.
-- `@mqttkit/aedes` provides TCP MQTT and MQTT-over-WebSocket support through Aedes.
+- `@mqttkit/core/testing` ships an in-memory `TestBroker` so apps can be unit-tested without spawning aedes.
+- `@mqttkit/aedes` provides TCP MQTT and MQTT-over-WebSocket support through Aedes (with MQTT 5 properties forwarded for RPC).
 - `@mqttkit/asyncapi` generates AsyncAPI 3.0 documentation from routes and serves a browsable docs page.
 - Built for Bun and TypeScript.
 
@@ -280,7 +284,9 @@ Use Aedes persistence adapters for offline queues, retain, QoS sessions, and dur
 - `examples/events`: broker lifecycle events.
 - `examples/service-push`: external service calls `app.publish()`, then Aedes delivers to subscribed MQTT clients.
 - `examples/kafka-bridge`: MQTT messages go to Kafka, and Kafka consumer messages are forwarded to MQTT clients.
-- `examples/asyncapi-docs`: AsyncAPI documentation served from `@mqttkit/asyncapi` (standalone HTTP).
+- `examples/schema-validation`: payload schemas with zod, TypeBox, and coexistence between the two.
+- `examples/rpc`: MQTT 5 RPC round-trip with `app.request()` and `ctx.reply()`.
+- `examples/asyncapi-docs`: AsyncAPI documentation served from `@mqttkit/asyncapi` (standalone HTTP). `dev:zod` variant shows zod + `jsonify` in the doc.
 - `examples/asyncapi-elysia`: share a single Elysia port for both AsyncAPI docs and MQTT-over-WebSocket (aedes ws attached to the same `http.Server`).
 
 Run an example:
@@ -308,6 +314,8 @@ bun run build
 
 ## Packages
 
-- `@mqttkit/core`: core application, router, middleware, context, event types, and broker adapter interface.
-- `@mqttkit/aedes`: Aedes adapter for TCP MQTT and MQTT-over-WebSocket.
+- `@mqttkit/core`: core application, router, middleware, context, schema validation, RPC, event types, broker adapter interface, and `@mqttkit/core/testing` in-memory broker.
+- `@mqttkit/aedes`: Aedes adapter for TCP MQTT and MQTT-over-WebSocket (forwards MQTT 5 properties for RPC).
 - `@mqttkit/asyncapi`: AsyncAPI 3.0 generator and HTTP plugin for browsable docs.
+- `@mqttkit/typebox`: TypeBox schema provider — register once, then pass raw `Type.X(...)` schemas directly.
+- `@mqttkit/zod`: zod helper that attaches a JSON Schema representation so AsyncAPI documents the full payload.

README.zh-CN.md

@@ -11,10 +11,14 @@ mqttkit 不重新实现 MQTT 协议。CONNECT、SUBSCRIBE、PUBLISH、QoS、reta
 - 有序 `use()` middleware，可用于鉴权、日志、审计、校验和拦截。
 - `router().topic()` 声明 MQTT topic route、发布策略和订阅策略。
 - `ctx.params` 自动提取 `devices/:uid/events` 这类 topic 参数。
+- `ctx.body` 承载校验后的 payload，任意 [Standard Schema](https://standardschema.dev/) 校验器（zod、valibot、arktype 等）都能直接用，并自动推断类型；原始 TypeBox 与给 zod 挂 JSON Schema 用 `@mqttkit/typebox` / `@mqttkit/zod`。
 - `ctx.services` 注入 Kafka、Redis、数据库、审计服务或业务服务。
+- `app.request()` 通过 MQTT 5 `responseTopic` + `correlationData` 做 RPC 往返；设备一侧用 `ctx.reply()` 回复。
+- `app.onError()`（以及路由级 `onError`）捕获 validation / handler / policy / middleware / publish 失败，并带结构化 `phase`。
 - `app.on()` 监听 client、publish、subscribe、ack、错误等 broker lifecycle events。
 - `app.publish()` 让外部服务、worker、consumer 通过 broker 主动推送消息给 MQTT client。
-- `@mqttkit/aedes` 基于 Aedes 提供 TCP MQTT 与 MQTT-over-WebSocket。
+- `@mqttkit/core/testing` 内置内存版 `TestBroker`，无需起 aedes 即可对 app 做单测。
+- `@mqttkit/aedes` 基于 Aedes 提供 TCP MQTT 与 MQTT-over-WebSocket（透传 MQTT 5 properties 给 RPC 用）。
 - `@mqttkit/asyncapi` 从路由生成 AsyncAPI 3.0 文档，并通过 HTTP 提供可浏览的文档页面。
 - 面向 Bun 与 TypeScript。
 
@@ -280,7 +284,9 @@ new MqttApp()
 - `examples/events`：监听 broker lifecycle events。
 - `examples/service-push`：外部服务调用 `app.publish()`，消息经 Aedes 投递到订阅中的 MQTT client。
 - `examples/kafka-bridge`：MQTT 消息写入 Kafka，并把 Kafka consumer 消息透传给 MQTT client。
-- `examples/asyncapi-docs`：通过 `@mqttkit/asyncapi` 提供 AsyncAPI 文档与浏览页面（独立 HTTP 端口）。
+- `examples/schema-validation`：zod、TypeBox 以及两者共存的 payload 校验示例。
+- `examples/rpc`：用 `app.request()` 与 `ctx.reply()` 完成 MQTT 5 RPC 往返。
+- `examples/asyncapi-docs`：通过 `@mqttkit/asyncapi` 提供 AsyncAPI 文档与浏览页面（独立 HTTP 端口），`dev:zod` 版本演示 zod + `jsonify`。
 - `examples/asyncapi-elysia`：Elysia 端口同时承载 AsyncAPI 文档与 MQTT-over-WebSocket（aedes ws 复用同一个 `http.Server`）。
 
 运行示例：
@@ -308,6 +314,8 @@ bun run build
 
 ## 包
 
-- `@mqttkit/core`：core application、router、middleware、context、event types 与 broker adapter 接口。
-- `@mqttkit/aedes`：Aedes adapter，提供 TCP MQTT 与 MQTT-over-WebSocket 接入。
+- `@mqttkit/core`：core application、router、middleware、context、schema 校验、RPC、event types、broker adapter 接口，以及 `@mqttkit/core/testing` 内存 broker。
+- `@mqttkit/aedes`：Aedes adapter，提供 TCP MQTT 与 MQTT-over-WebSocket（透传 MQTT 5 properties 给 RPC 用）。
 - `@mqttkit/asyncapi`：基于路由生成 AsyncAPI 3.0 文档与 HTTP 浏览页面。
+- `@mqttkit/typebox`：TypeBox schema 适配——注册一次，直接传原始 `Type.X(...)`。
+- `@mqttkit/zod`：给 zod schema 挂上 JSON Schema 表达，让 AsyncAPI 输出完整 payload。

bun.lock

@@ -4,11 +4,17 @@
   "type": "module",
   "scripts": {
     "dev": "bun run src/index.ts",
+    "dev:zod": "bun run src/zod.ts",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
     "@mqttkit/aedes": "workspace:*",
     "@mqttkit/asyncapi": "workspace:*",
-    "@mqttkit/core": "workspace:*"
+    "@mqttkit/core": "workspace:*",
+    "@mqttkit/typebox": "workspace:*",
+    "@mqttkit/zod": "workspace:*",
+    "@sinclair/typebox": "^0.34.49",
+    "zod": "^3.24.1",
+    "zod-to-json-schema": "^3.24.6"
   }
 }