generating-api-contracts

Generating API Contracts

Overview

Generate OpenAPI 3.0/3.1 specifications and consumer-driven contract tests from existing API implementations, design documents, or database schemas. Produce machine-readable contracts that serve as the single source of truth for code generation, documentation, testing, and gateway configuration, with Pact integration for consumer-driven contract verification.

Prerequisites

• API implementation with route definitions and handler logic, or design requirements document
• OpenAPI authoring tool: Swagger Editor, Stoplight Studio, or IDE with OpenAPI extension
• Consumer-driven contract framework: Pact (polyglot), Spring Cloud Contract (Java), or Dredd (generic)
• Schema validation tool: Spectral for OpenAPI linting
• Version control for contract files with diff-based review process

Instructions

1. Scan existing route handlers and controller files using Grep and Read to extract all endpoint paths, HTTP methods, request parameter names/types, and response body shapes.
2. Generate OpenAPI 3.0 specification from the extracted data, including info (title, version, description), servers (environment URLs), paths (operations), and components (reusable schemas).
3. Define request schemas with field-level constraints: type, format, required, minimum/maximum, pattern (regex), enum, and example values for every property.
4. Document all response status codes per endpoint with separate schemas: 200/201 for success, 400 for validation errors (with field-level error array), 401/403 for auth failures, and 404/500.
5. Add security scheme definitions (bearerAuth, apiKey, oauth2) and apply them to appropriate operations using the security field.
6. Create Pact consumer contract tests that capture expected interactions from the API consumer perspective, defining expected request/response pairs per endpoint.
7. Set up provider verification that replays Pact interactions against the actual API implementation, verifying the provider satisfies all consumer expectations.
8. Generate contract artifacts: OpenAPI spec file, Postman collection, and consumer contract (Pact JSON), all versioned alongside the API source code.

See ${CLAUDE_SKILL_DIR}/references/implementation.md for the full implementation guide.

Output

• ${CLAUDE_SKILL_DIR}/openapi.yaml - Complete OpenAPI 3.0/3.1 specification
• ${CLAUDE_SKILL_DIR}/contracts/pact/ - Consumer-driven contract definitions (Pact JSON)
• ${CLAUDE_SKILL_DIR}/contracts/postman/ - Generated Postman collection for API testing
• ${CLAUDE_SKILL_DIR}/tests/contract/consumer/ - Consumer contract test implementations
• ${CLAUDE_SKILL_DIR}/tests/contract/provider/ - Provider verification test suite
• ${CLAUDE_SKILL_DIR}/scripts/generate-contract.sh - Contract generation automation script

Error Handling

Error	Cause	Solution
Spec-code divergence	API implementation changed without updating the OpenAPI spec	Add CI check that generates spec from code and diffs against committed spec
Pact verification failure	Provider response does not match consumer expectation	Review consumer contract for correctness; update provider if contract is valid
Missing operation ID	Endpoint has no operationId, preventing code generation	Generate deterministic operation IDs from method + path (e.g., getUsers, createUser)
Circular schema reference	Components reference each other creating infinite recursion	Break cycles with allOf composition or introduce intermediate types
Example/schema mismatch	Example values do not validate against their own schema	Auto-validate all examples during spec generation; reject mismatched examples

Refer to ${CLAUDE_SKILL_DIR}/references/errors.md for comprehensive error patterns.

Examples

Code-first OpenAPI generation: Scan Express route decorators and Zod validation schemas to auto-generate a complete OpenAPI 3.1 spec with accurate request/response schemas, examples, and descriptions.

Consumer-driven contract testing: Frontend team publishes Pact contracts defining the API interactions they depend on; backend CI verifies every contract on each deployment, preventing breaking changes.

Design-first workflow: Author OpenAPI spec in Stoplight Studio, generate server stubs and client SDKs from the spec, then implement business logic in the stubs -- spec stays as the single source of truth.

See ${CLAUDE_SKILL_DIR}/references/examples.md for additional examples.

Resources

• OpenAPI Specification 3.1: https://spec.openapis.org/oas/v3.1.0
• Pact contract testing: https://pact.io/
• Swagger Editor: https://editor.swagger.io/
• Dredd API contract testing: https://dredd.org/