Variable CaddyRouteMatcherSchemaConst

Caddy route matcher schema — covers every http.matchers.* module except vars_regexp (internal Caddy variable matching). file (http.matchers.file) is generated in caddy-fileserver.ts rather than caddy-http.ts — see matcher-schema-consistency.test.ts's NON_MATCHER_HELPER_TYPES/scope note — but is composed here from the real generated matchFileSchema, same as the other matchers below.

protocol, remote_ip, client_ip, header_regexp, and tls are the real, correctly tygo-generated matchProtocolSchema/ matchRemoteIpSchema/matchClientIpSchema/matchHeaderReSchema/ matchTlsSchema from caddy-http.zod.ts — composed here, not duplicated by hand.

not, expression, and path_regexp are hand-overridden (not composed from the generated matchNotSchema/matchExpressionSchema/ matchPathReSchema) because all three have custom JSON marshaling or anonymous Go struct embedding that tygo's naive extraction gets wrong — verified against real Caddy via caddy validate, not just inferred from the generated struct shape:

• not (http.matchers.not, Go type MatchNot) is an array of matcher sets (each an object keyed by matcher name); the generated matchNotSchema is z.object({}) (empty), reflecting Go's empty interface rather than the true custom-unmarshaled shape.
• expression (http.matchers.expression, Go type MatchExpression) is a plain CEL string; the generated matchExpressionSchema is z.object({ expr, name }), reflecting misleading Go struct fields — the doc comment explicitly says "this matcher's JSON interface is actually a string, not a struct".
• path_regexp (http.matchers.path_regexp, Go type MatchPathRE) flattens to { name?, pattern } directly; the generated matchPathReSchema wraps it as { MatchRegexp: { name?, pattern } } — an anonymous-embedding artifact (same class of bug as caddy-dns/route53's wrapper, see DEPENDENCIES.md) — Caddy rejects the nested form with json: unknown field "MatchRegexp". If any of these three Go types' custom marshaling/embedding ever changes, tygo/zod-to-json-schema won't catch it — re-verify with caddy validate before trusting a regen here.