@apifuse/provider-sdk 2.2.0-beta.3 → 2.2.0-beta.4

package/src/runtime/stt.ts

@@ -1,4 +1,4 @@
-import { ProviderError, TransportError, ValidationError } from "../errors";
+import { ProviderError, TransportError, ValidationError } from "../errors.js";
 import type {
 	Bcp47Locale,
 	ProviderSttConfig,
@@ -13,16 +13,14 @@ import type {
 	VerificationCodeCandidate,
 	VerificationCodeCandidateSource,
 	VerificationCodeExtractionResult,
-} from "../types";
+} from "../types.js";
 
 export const APIFUSE__STT__BACKEND_ENV = "APIFUSE__STT__BACKEND";
 export const APIFUSE__STT__MODEL_ENV = "APIFUSE__STT__MODEL";
 export const CLOUDFLARE_ACCOUNT_ID_ENV = "APIFUSE__CLOUDFLARE__ACCOUNT_ID";
-export const APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV =
-	"APIFUSE__STT__CLOUDFLARE_API_TOKEN";
+export const APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV = "APIFUSE__STT__CLOUDFLARE_API_TOKEN";
 export const CLOUDFLARE_WORKERS_AI_STT_BACKEND = "cloudflare-workers-ai";
-export const DEFAULT_CLOUDFLARE_WORKERS_AI_STT_MODEL =
-	"@cf/openai/whisper-large-v3-turbo";
+export const DEFAULT_CLOUDFLARE_WORKERS_AI_STT_MODEL = "@cf/openai/whisper-large-v3-turbo";
 export const DEFAULT_STT_MAX_AUDIO_BYTES = 10 * 1024 * 1024;
 export const DEFAULT_STT_TIMEOUT_MS = 30_000;
 
@@ -45,10 +43,7 @@ type ErrorSttClientOptions = {
 	fix?: string;
 };
 
-function providerError(
-	message: string,
-	options: { code: string; fix?: string },
-): ProviderError {
+function providerError(message: string, options: { code: string; fix?: string }): ProviderError {
 	return new ProviderError(message, options);
 }
 
@@ -82,9 +77,7 @@ export function createSttClientFromEnv(
 	env: EnvLike = process.env,
 ): SttContext {
 	if (!config) {
-		return createUnsupportedSttClient(
-			"Provider does not declare STT capability",
-		);
+		return createUnsupportedSttClient("Provider does not declare STT capability");
 	}
 
 	const backend = normalizedEnvValue(env, APIFUSE__STT__BACKEND_ENV);
@@ -116,25 +109,17 @@ export function createSttClientFromEnv(
 		accountId,
 		apiToken,
 		model:
-			normalizedEnvValue(env, APIFUSE__STT__MODEL_ENV) ??
-			DEFAULT_CLOUDFLARE_WORKERS_AI_STT_MODEL,
+			normalizedEnvValue(env, APIFUSE__STT__MODEL_ENV) ?? DEFAULT_CLOUDFLARE_WORKERS_AI_STT_MODEL,
 	});
 }
 
 function base64ByteLength(data: string): number {
 	const normalized = data.trim();
-	const padding = normalized.endsWith("==")
-		? 2
-		: normalized.endsWith("=")
-			? 1
-			: 0;
+	const padding = normalized.endsWith("==") ? 2 : normalized.endsWith("=") ? 1 : 0;
 	return Math.floor((normalized.length * 3) / 4) - padding;
 }
 
-function assertBase64Audio(
-	audio: SttAudioInput,
-	maxAudioBytes: number | undefined,
-): number {
+function assertBase64Audio(audio: SttAudioInput, maxAudioBytes: number | undefined): number {
 	if (audio.kind !== "base64") {
 		throw new ValidationError("Unsupported STT audio input kind", {
 			code: "UNSUPPORTED_STT_OPTION",
@@ -142,32 +127,22 @@ function assertBase64Audio(
 		});
 	}
 	const data = audio.data.trim();
-	if (
-		data.length === 0 ||
-		data.length % 4 !== 0 ||
-		!BASE64_AUDIO_PATTERN.test(data)
-	) {
-		throw new ValidationError(
-			"STT audio.data must be a base64-encoded string",
-			{
-				code: "INVALID_STT_AUDIO",
-			},
-		);
+	if (data.length === 0 || data.length % 4 !== 0 || !BASE64_AUDIO_PATTERN.test(data)) {
+		throw new ValidationError("STT audio.data must be a base64-encoded string", {
+			code: "INVALID_STT_AUDIO",
+		});
 	}
 	const bytes = base64ByteLength(data);
 	const maxBytes = maxAudioBytes ?? DEFAULT_STT_MAX_AUDIO_BYTES;
 	if (bytes > maxBytes) {
-		throw new ValidationError(
-			`STT audio exceeds maxAudioBytes (${bytes} > ${maxBytes})`,
-			{ code: "STT_AUDIO_TOO_LARGE" },
-		);
+		throw new ValidationError(`STT audio exceeds maxAudioBytes (${bytes} > ${maxBytes})`, {
+			code: "STT_AUDIO_TOO_LARGE",
+		});
 	}
 	return bytes;
 }
 
-export function resolveSttPrompt(
-	request: SttTranscribeRequest,
-): string | undefined {
+export function resolveSttPrompt(request: SttTranscribeRequest): string | undefined {
 	const policy = effectivePromptPolicy(request);
 	if (policy === "none") return undefined;
 	if (policy === "default-hint") return DEFAULT_OTP_HINT;
@@ -183,17 +158,14 @@ function warnOrThrowUnsupportedOption(
 	request: SttTranscribeRequest,
 	message: string,
 ): { code: "UNSUPPORTED_STT_OPTION"; message: string } | undefined {
-	const policy: SttUnsupportedOptionPolicy =
-		request.unsupportedOptionPolicy ?? "warn";
+	const policy: SttUnsupportedOptionPolicy = request.unsupportedOptionPolicy ?? "warn";
 	if (policy === "error") {
 		throw new ProviderError(message, { code: "UNSUPPORTED_STT_OPTION" });
 	}
 	return { code: "UNSUPPORTED_STT_OPTION", message };
 }
 
-function normalizeCloudflareLanguage(
-	language: Bcp47Locale | undefined,
-): string | undefined {
+function normalizeCloudflareLanguage(language: Bcp47Locale | undefined): string | undefined {
 	return language?.split("-")[0]?.toLowerCase();
 }
 
@@ -232,9 +204,7 @@ function createTimeoutController(signalTimeoutMs: number): {
 	return { controller, clear: () => clearTimeout(timeout) };
 }
 
-function toCloudflareInput(
-	request: SttTranscribeRequest,
-): Record<string, unknown> {
+function toCloudflareInput(request: SttTranscribeRequest): Record<string, unknown> {
 	const prompt = resolveSttPrompt(request);
 	const input: Record<string, unknown> = {
 		audio: request.audio.data.trim(),
@@ -273,8 +243,7 @@ function parseSegments(value: unknown): SttSegment[] | undefined {
 					: typeof segment.endMs === "number"
 						? segment.endMs
 						: undefined,
-			confidence:
-				typeof segment.confidence === "number" ? segment.confidence : undefined,
+			confidence: typeof segment.confidence === "number" ? segment.confidence : undefined,
 		});
 	}
 	return segments.length > 0 ? segments : undefined;
@@ -288,13 +257,10 @@ function toSttTranscript(payload: unknown, audioBytes: number): SttTranscript {
 		(typeof result?.text === "string" ? result.text : undefined) ??
 		(typeof info?.text === "string" ? info.text : undefined);
 	if (!text) {
-		throw new TransportError(
-			"STT upstream response did not include transcript text",
-			{
-				code: "STT_UPSTREAM_FAILED",
-				status: 502,
-			},
-		);
+		throw new TransportError("STT upstream response did not include transcript text", {
+			code: "STT_UPSTREAM_FAILED",
+			status: 502,
+		});
 	}
 	const durationMs =
 		typeof result?.durationMs === "number"
@@ -327,23 +293,15 @@ export function createCloudflareWorkersAiSttClient(
 	return {
 		async transcribe(request) {
 			const warnings = [];
-			if (
-				request.initialPrompt &&
-				effectivePromptPolicy(request) !== "custom-hint"
-			) {
+			if (request.initialPrompt && effectivePromptPolicy(request) !== "custom-hint") {
 				const warning = warnOrThrowUnsupportedOption(
 					request,
 					"initialPrompt is honored only when promptPolicy is custom-hint",
 				);
 				if (warning) warnings.push(warning);
 			}
-			const audioBytes = assertBase64Audio(
-				request.audio,
-				request.maxAudioBytes,
-			);
-			const timeout = createTimeoutController(
-				request.timeoutMs ?? DEFAULT_STT_TIMEOUT_MS,
-			);
+			const audioBytes = assertBase64Audio(request.audio, request.maxAudioBytes);
+			const timeout = createTimeoutController(request.timeoutMs ?? DEFAULT_STT_TIMEOUT_MS);
 			try {
 				let response: Response;
 				try {
@@ -388,10 +346,7 @@ export function createCloudflareWorkersAiSttClient(
 				if (request.mode === "otp" || request.verificationCode) {
 					return {
 						...withWarnings,
-						verificationCode: extractVerificationCode(
-							withWarnings.text,
-							request.verificationCode,
-						),
+						verificationCode: extractVerificationCode(withWarnings.text, request.verificationCode),
 					};
 				}
 				return withWarnings;
@@ -433,12 +388,9 @@ const KO_DIGITS: Record<string, string> = {
 	구: "9",
 };
 
-function lengthSet(
-	codeLengths: SttVerificationCodeOptions["codeLengths"],
-): Set<number> {
+function lengthSet(codeLengths: SttVerificationCodeOptions["codeLengths"]): Set<number> {
 	if (codeLengths === undefined) return new Set([4, 5, 6, 7, 8]);
-	if (typeof codeLengths === "number")
-		return new Set([validCodeLength(codeLengths)]);
+	if (typeof codeLengths === "number") return new Set([validCodeLength(codeLengths)]);
 	if (Array.isArray(codeLengths)) {
 		const values = codeLengths.map((length) => validCodeLength(length));
 		return new Set(values);
@@ -469,10 +421,9 @@ function lengthSet(
 
 function validCodeLength(value: number): number {
 	if (!Number.isInteger(value) || value < 1 || value > 32) {
-		throw new ValidationError(
-			"STT verification code length must be an integer between 1 and 32",
-			{ code: "INVALID_STT_VERIFICATION_CODE_OPTIONS" },
-		);
+		throw new ValidationError("STT verification code length must be an integer between 1 and 32", {
+			code: "INVALID_STT_VERIFICATION_CODE_OPTIONS",
+		});
 	}
 	return value;
 }
@@ -554,11 +505,7 @@ function tokenizeDigits(text: string): DigitToken[] {
 	return tokens.sort((a, b) => a.startIndex - b.startIndex);
 }
 
-function isAdjacent(
-	left: DigitToken,
-	right: DigitToken,
-	text: string,
-): boolean {
+function isAdjacent(left: DigitToken, right: DigitToken, text: string): boolean {
 	const between = text.slice(left.endIndex, right.startIndex);
 	return /^[\s,.:;\-_/]*$/u.test(between);
 }
@@ -608,12 +555,9 @@ export function extractVerificationCode(
 	}
 	const candidates = [...candidatesByCode.values()];
 	if (candidates.length === 0) {
-		throw new ProviderError(
-			"No verification code candidate found in transcript",
-			{
-				code: "NO_CODE_FOUND",
-			},
-		);
+		throw new ProviderError("No verification code candidate found in transcript", {
+			code: "NO_CODE_FOUND",
+		});
 	}
 	if (candidates.length > 1) {
 		throw new ProviderError("Multiple verification code candidates found", {

package/src/runtime/trace.ts

@@ -5,8 +5,8 @@ import type {
 	TraceAttributeValue,
 	TraceConfig,
 	TraceSpan,
-} from "../types";
-import { exportSpansOTLP, type OTLPExportOptions } from "./otlp";
+} from "../types.js";
+import { exportSpansOTLP, type OTLPExportOptions } from "./otlp.js";
 
 export type SpanAttributeValue = TraceAttributeValue;
 
@@ -44,16 +44,10 @@ type CompletedSpanEntry = {
 };
 
 export interface TraceRecorder {
-	runSpan<T>(
-		name: string,
-		fn: () => Promise<T> | T,
-		options?: SpanHookOptions<T>,
-	): Promise<T>;
+	runSpan<T>(name: string, fn: () => Promise<T> | T, options?: SpanHookOptions<T>): Promise<T>;
 }
 
-export const TRACE_RECORDER = Symbol.for(
-	"@apifuse/provider-sdk/runtime/trace-recorder",
-);
+export const TRACE_RECORDER = Symbol.for("@apifuse/provider-sdk/runtime/trace-recorder");
 
 type InternalTraceContext = TraceContext & {
 	[TRACE_RECORDER]: TraceRecorder;
@@ -61,9 +55,7 @@ type InternalTraceContext = TraceContext & {
 	_resourceAttributes?: Record<string, string>;
 };
 
-function buildOTLPExportOptions(
-	config?: TraceConfig,
-): OTLPExportOptions | undefined {
+function buildOTLPExportOptions(config?: TraceConfig): OTLPExportOptions | undefined {
 	if (config?.exporter !== "otlp") {
 		return undefined;
 	}
@@ -80,9 +72,7 @@ function buildOTLPExportOptions(
 	};
 }
 
-export function resolveTraceContextOptions(
-	config?: TraceConfig,
-): CreateTraceContextOptions {
+export function resolveTraceContextOptions(config?: TraceConfig): CreateTraceContextOptions {
 	return {
 		maxSpans: config?.maxSpans,
 		onSpan: config?.onSpan,
@@ -90,14 +80,8 @@ export function resolveTraceContextOptions(
 	};
 }
 
-function normalizeAttributeValue(
-	value: unknown,
-): SpanAttributeValue | undefined {
-	if (
-		typeof value === "string" ||
-		typeof value === "number" ||
-		typeof value === "boolean"
-	) {
+function normalizeAttributeValue(value: unknown): SpanAttributeValue | undefined {
+	if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
 		return value;
 	}
 
@@ -117,10 +101,7 @@ function normalizeAttributes(
 
 	const normalizedEntries = Object.entries(attributes)
 		.map(([key, value]) => [key, normalizeAttributeValue(value)] as const)
-		.filter(
-			(entry): entry is readonly [string, SpanAttributeValue] =>
-				entry[1] !== undefined,
-		);
+		.filter((entry): entry is readonly [string, SpanAttributeValue] => entry[1] !== undefined);
 
 	return Object.fromEntries(normalizedEntries);
 }
@@ -130,9 +111,7 @@ function insertCompletedSpan(
 	entry: CompletedSpanEntry,
 	maxSpans: number,
 ): void {
-	const insertAt = completed.findIndex(
-		(existingEntry) => existingEntry.sequence > entry.sequence,
-	);
+	const insertAt = completed.findIndex((existingEntry) => existingEntry.sequence > entry.sequence);
 
 	if (insertAt === -1) {
 		completed.push(entry);
@@ -145,15 +124,11 @@ function insertCompletedSpan(
 	}
 }
 
-export function getTraceRecorder(
-	trace: BaseTraceContext,
-): TraceRecorder | null {
+export function getTraceRecorder(trace: BaseTraceContext): TraceRecorder | null {
 	return (trace as Partial<InternalTraceContext>)[TRACE_RECORDER] ?? null;
 }
 
-export function createTraceContext(
-	options: CreateTraceContextOptions = {},
-): TraceContext {
+export function createTraceContext(options: CreateTraceContextOptions = {}): TraceContext {
 	const maxSpans = options.maxSpans ?? 1000;
 	const completed: CompletedSpanEntry[] = [];
 	const activeSpanStorage = new AsyncLocalStorage<PendingSpan | undefined>();
@@ -214,11 +189,7 @@ export function createTraceContext(
 					...(pendingSpan.parentId ? { parentId: pendingSpan.parentId } : {}),
 				};
 
-				insertCompletedSpan(
-					completed,
-					{ sequence: pendingSpan.sequence, span },
-					maxSpans,
-				);
+				insertCompletedSpan(completed, { sequence: pendingSpan.sequence, span }, maxSpans);
 				options.onSpan?.(span);
 
 				if (!pendingSpan.parentId) {
@@ -233,8 +204,7 @@ export function createTraceContext(
 					finalize("ok", successAttributes ?? undefined);
 					return value;
 				} catch (error) {
-					const errorMessage =
-						error instanceof Error ? error.message : String(error);
+					const errorMessage = error instanceof Error ? error.message : String(error);
 					const errorAttributes = spanOptions.onError?.(error);
 					finalize("error", errorAttributes ?? undefined, errorMessage);
 					throw error;

package/src/runtime/waterfall.ts

@@ -1,4 +1,4 @@
-import type { Span } from "./trace";
+import type { Span } from "./trace.js";
 
 export type WaterfallRequest = {
 	method: string;
@@ -52,11 +52,7 @@ export function renderWaterfall(
 
 	for (const node of tree) {
 		const operationDuration = formatDuration(node.span.duration_ms);
-		const operationBar = renderBar(
-			node.span.duration_ms,
-			totalDuration,
-			maxBarWidth,
-		);
+		const operationBar = renderBar(node.span.duration_ms, totalDuration, maxBarWidth);
 		const operationColor = spanColor(node.span, slowThresholdMs);
 
 		lines.push(
@@ -104,14 +100,9 @@ function renderChildren(
 		const provider = isLast ? "└─" : "├─";
 
 		const duration = formatDuration(node.span.duration_ms);
-		const bar = renderBar(
-			node.span.duration_ms,
-			ctx.totalDuration,
-			ctx.maxBarWidth,
-		);
+		const bar = renderBar(node.span.duration_ms, ctx.totalDuration, ctx.maxBarWidth);
 		const color = spanColor(node.span, ctx.slowThresholdMs);
-		const star =
-			node.span.id === ctx.bottleneckId ? `  ${ANSI.yellow}★${ANSI.reset}` : "";
+		const star = node.span.id === ctx.bottleneckId ? `  ${ANSI.yellow}★${ANSI.reset}` : "";
 		const barSuffix = bar ? ` ${bar}` : "";
 
 		const nameWidth = 20;
@@ -190,11 +181,7 @@ function findBottleneck(roots: SpanNode[]): string | null {
 	return longest.id;
 }
 
-function renderBar(
-	durationMs: number,
-	totalMs: number,
-	maxWidth: number,
-): string {
+function renderBar(durationMs: number, totalMs: number, maxWidth: number): string {
 	if (totalMs <= 0 || durationMs <= 0) {
 		return "";
 	}

package/src/schema.ts

@@ -1,13 +1,13 @@
 import { type ZodString, type ZodType, z } from "zod";
 
-import { ValidationError } from "./errors";
-import { providerLocaleKey } from "./i18n/keys";
+import { ValidationError } from "./errors.js";
+import { providerLocaleKey } from "./i18n/keys.js";
 import type {
 	InferSchemaOutput,
 	ProviderLocaleKey,
 	SchemaLike,
 	StandardSchemaV1,
-} from "./types";
+} from "./types.js";
 
 export { z };
 
@@ -25,15 +25,11 @@ function isFailureResult<Output>(
 	return "issues" in result;
 }
 function isPromiseResult<Output>(
-	result:
-		| StandardSchemaV1.Result<Output>
-		| Promise<StandardSchemaV1.Result<Output>>,
+	result: StandardSchemaV1.Result<Output> | Promise<StandardSchemaV1.Result<Output>>,
 ): result is Promise<StandardSchemaV1.Result<Output>> {
 	return result instanceof Promise;
 }
-function formatStandardSchemaIssues(
-	issues: readonly StandardSchemaV1.Issue[],
-): string {
+function formatStandardSchemaIssues(issues: readonly StandardSchemaV1.Issue[]): string {
 	return issues.map((issue) => issue.message).join("; ");
 }
 export function parseSchema<TSchema extends SchemaLike>(
@@ -46,8 +42,7 @@ export async function parseSchema(
 	value: unknown,
 	fieldPath: string,
 ): Promise<unknown> {
-	if ("parse" in schema && typeof schema.parse === "function")
-		return schema.parse(value);
+	if ("parse" in schema && typeof schema.parse === "function") return schema.parse(value);
 	const result = schema["~standard"].validate(value);
 	const resolved = isPromiseResult(result) ? await result : result;
 	if (isFailureResult(resolved))
@@ -78,8 +73,7 @@ export function safeParseSchemaSync(
 					`Schema validation for ${fieldPath} returned a Promise. defineProvider fixture validation requires synchronous Standard Schema validation.`,
 				),
 			};
-		if (isFailureResult(result))
-			return { success: false, error: result.issues };
+		if (isFailureResult(result)) return { success: false, error: result.issues };
 		return { success: true, data: result.value };
 	} catch (error) {
 		return { success: false, error };
@@ -147,9 +141,7 @@ const describeKeyMethod = function <TSchema extends ZodType>(
 };
 
 function installDescribeKeyOnPrototype(prototype: unknown): void {
-	const target = prototype as
-		| (Record<string, unknown> & { describeKey?: unknown })
-		| null;
+	const target = prototype as (Record<string, unknown> & { describeKey?: unknown }) | null;
 	if (!target || typeof target.describeKey === "function") {
 		return;
 	}
@@ -201,12 +193,8 @@ export function field<TSchema extends ZodType>(
 	const metadata = described.meta() ?? {};
 	return described.meta({
 		...metadata,
-		...((options.sensitive ?? true)
-			? { [APIFUSE_SENSITIVE_META_KEY]: true }
-			: {}),
-		...(options.kind
-			? { [APIFUSE_SENSITIVE_KIND_META_KEY]: options.kind }
-			: {}),
+		...((options.sensitive ?? true) ? { [APIFUSE_SENSITIVE_META_KEY]: true } : {}),
+		...(options.kind ? { [APIFUSE_SENSITIVE_KIND_META_KEY]: options.kind } : {}),
 	});
 }
 
@@ -222,10 +210,7 @@ function sensitiveString(
 	description: string,
 	options: { description?: string; minLength?: number } = {},
 ): ZodString {
-	const schema =
-		options.minLength === undefined
-			? z.string()
-			: z.string().min(options.minLength);
+	const schema = options.minLength === undefined ? z.string() : z.string().min(options.minLength);
 	return field(schema, {
 		kind,
 		description: options.description ?? description,
@@ -234,33 +219,17 @@ function sensitiveString(
 
 export const fields = {
 	apiKey: (options?: { description?: string }) =>
-		sensitiveString(
-			"api_key",
-			"Provider API key or credential secret.",
-			options,
-		),
+		sensitiveString("api_key", "Provider API key or credential secret.", options),
 	authorization: (options?: { description?: string }) =>
-		sensitiveString(
-			"authorization",
-			"Authorization header value or bearer credential.",
-			options,
-		),
+		sensitiveString("authorization", "Authorization header value or bearer credential.", options),
 	cookie: (options?: { description?: string }) =>
-		sensitiveString(
-			"cookie",
-			"Cookie header or browser session secret.",
-			options,
-		),
+		sensitiveString("cookie", "Cookie header or browser session secret.", options),
 	otp: (options?: { description?: string }) =>
 		sensitiveString("otp", "One-time verification code.", options),
 	password: (options?: { description?: string; minLength?: number }) =>
 		sensitiveString("password", "Password credential.", options),
 	paymentUrl: (options?: { description?: string }) =>
-		sensitiveString(
-			"payment_url",
-			"Sensitive payment or checkout URL.",
-			options,
-		),
+		sensitiveString("payment_url", "Sensitive payment or checkout URL.", options),
 	phone: (options?: { description?: string }) =>
 		sensitiveString("phone", "Phone number or phone-based identity.", options),
 	secret: (options?: { description?: string }) =>
@@ -271,10 +240,7 @@ export const fields = {
 
 export function isSensitiveSchema(schema: unknown): boolean {
 	const metadata = readZodMetadata(schema);
-	return (
-		metadata !== undefined &&
-		Reflect.get(metadata, APIFUSE_SENSITIVE_META_KEY) === true
-	);
+	return metadata !== undefined && Reflect.get(metadata, APIFUSE_SENSITIVE_META_KEY) === true;
 }
 
 export function collectSensitivePaths(schema: unknown): SensitivePath[] {
@@ -283,10 +249,7 @@ export function collectSensitivePaths(schema: unknown): SensitivePath[] {
 	return out;
 }
 
-export function redactPayload(
-	value: unknown,
-	paths: readonly SensitivePath[] = [],
-): unknown {
+export function redactPayload(value: unknown, paths: readonly SensitivePath[] = []): unknown {
 	return redactValue(value, [], paths);
 }
 
@@ -297,8 +260,7 @@ function collectSensitivePathsInto(
 	activeSchemas: Set<unknown>,
 	emittedPaths: Set<string>,
 ): void {
-	if (!schema || typeof schema !== "object" || activeSchemas.has(schema))
-		return;
+	if (!schema || typeof schema !== "object" || activeSchemas.has(schema)) return;
 	activeSchemas.add(schema);
 	try {
 		if (isSensitiveSchema(schema)) pushSensitivePath(out, emittedPaths, path);
@@ -308,13 +270,7 @@ function collectSensitivePathsInto(
 			case "object": {
 				const shape = readObjectShape(def);
 				for (const [key, child] of Object.entries(shape)) {
-					collectSensitivePathsInto(
-						child,
-						[...path, key],
-						out,
-						activeSchemas,
-						emittedPaths,
-					);
+					collectSensitivePathsInto(child, [...path, key], out, activeSchemas, emittedPaths);
 				}
 				break;
 			}
@@ -341,20 +297,8 @@ function collectSensitivePathsInto(
 				);
 				break;
 			case "pipe":
-				collectSensitivePathsInto(
-					Reflect.get(def, "in"),
-					path,
-					out,
-					activeSchemas,
-					emittedPaths,
-				);
-				collectSensitivePathsInto(
-					Reflect.get(def, "out"),
-					path,
-					out,
-					activeSchemas,
-					emittedPaths,
-				);
+				collectSensitivePathsInto(Reflect.get(def, "in"), path, out, activeSchemas, emittedPaths);
+				collectSensitivePathsInto(Reflect.get(def, "out"), path, out, activeSchemas, emittedPaths);
 				break;
 		}
 	} finally {
@@ -402,18 +346,13 @@ function pathMatches(
 ): boolean {
 	return patterns.some((pattern) => {
 		if (pattern.length !== path.length) return false;
-		return pattern.every(
-			(segment, index) => segment === "*" || segment === path[index],
-		);
+		return pattern.every((segment, index) => segment === "*" || segment === path[index]);
 	});
 }
 
 function isReservedSensitiveKey(key: string): boolean {
 	const normalized = key.toLowerCase().replace(/[-_\s]/g, "");
-	return (
-		RESERVED_SENSITIVE_KEYS.has(normalized) ||
-		RESERVED_SENSITIVE_KEYS.has(key.toLowerCase())
-	);
+	return RESERVED_SENSITIVE_KEYS.has(normalized) || RESERVED_SENSITIVE_KEYS.has(key.toLowerCase());
 }
 
 function readZodMetadata(schema: unknown): object | undefined {

package/src/serve.ts

@@ -1 +1 @@
-export { createServerApp, type ServeOptions, serve } from "./server/serve";
+export { createServerApp, type ServeOptions, serve } from "./server/serve.js";