@centralping/ergo 0.1.0-beta.3 → 0.1.0-beta.4

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to this project will be documented in this file.
 
+## [Unreleased]
+
+## [0.1.0-beta.4] - 2026-05-29
+
+### Added
+
+- JSON Schema `format` keyword support via `ajv-formats`. Standard formats (`email`, `uri`,
+  `date-time`, `uuid`, etc.) are validated by default. Opt out with `formats: false` or select
+  specific formats with an array (e.g. `formats: ['email', 'uri']`). (#58)
+
+### Fixed
+
+- **BREAKING**: `accepts()` now defaults `throwIfFail` to `true`, enforcing 406 responses for unsatisfied content negotiation per the Fast Fail pipeline contract. Set `throwIfFail: false` to restore the previous informational-only behavior. (#55)
+- `body()` default types now include `application/merge-patch+json` (RFC 7386) and `application/json-patch+json` (RFC 6902), resolving 415 rejections for valid PATCH content types that ergo-router's `strictPatch` allows. (#56)
+- `validate()` params validation now checks `acc.route.params` (ergo-router convention) with fallback to `acc.params` (standalone), fixing silent no-op validation when used with ergo-router. (#57)
+
 ## [0.1.0-beta.1] - 2026-05-20
 
 ### Changed

package/README.md

@@ -135,4 +135,4 @@ npm run format      # Prettier
 
 ## License
 
-[MIT](LICENSE) © 2019-present Jason Cust
+[MIT](https://github.com/CentralPing/ergo/blob/main/LICENSE) © 2019-present Jason Cust

package/http/accepts.js

@@ -5,9 +5,9 @@
  * `Accept-Charset`, and `Accept-Encoding` request headers and determine the best
  * matching content type, language, charset, and encoding for the response.
  *
- * When `throwIfFail` is true, returns `{response: {statusCode: 406, detail}}` for any
- * header that cannot be satisfied, enforcing strict content negotiation in the
- * Fast Fail pipeline.
+ * By default, returns `{response: {statusCode: 406, detail}}` for any header
+ * that cannot be satisfied, enforcing strict content negotiation in the Fast
+ * Fail pipeline. Set `throwIfFail: false` for informational-only negotiation.
  *
  * @module http/accepts
  * @since 0.1.0
@@ -37,14 +37,14 @@ const headerMap = {
  * Creates a content negotiation middleware.
  *
  * @param {object} [options] - Negotiation configuration
- * @param {boolean} [options.throwIfFail=false] - Return `{response: {statusCode: 406, detail}}` if any negotiation key is undefined
+ * @param {boolean} [options.throwIfFail=true] - Return `{response: {statusCode: 406, detail}}` if any negotiation key is undefined
  * @param {string[]} [options.types] - Acceptable media types
  * @param {string[]} [options.languages] - Acceptable languages
  * @param {string[]} [options.charsets] - Acceptable character sets
  * @param {string[]} [options.encodings] - Acceptable content encodings
  * @returns {function} - Middleware `(req) => {type, language, charset, encoding}` on success, or `{response: {statusCode: 406, detail: string}}` when `throwIfFail` is true and any negotiation value is undefined
  */
-export default ({throwIfFail = false, ...options} = {}) => {
+export default ({throwIfFail = true, ...options} = {}) => {
   const acceptor = accepts(options);
 
   return ({headers = {}} = {}) => {

package/http/body.js

@@ -2,7 +2,8 @@
  * @fileoverview HTTP middleware factory for request body parsing.
  *
  * Reads and parses the request body according to the declared `Content-Type`. Supports:
- * - `application/json` and `application/vnd.api+json` — parsed via `JSON.parse`
+ * - `application/json`, `application/vnd.api+json`, `application/merge-patch+json`
+ *   (RFC 7386), and `application/json-patch+json` (RFC 6902) — parsed via `JSON.parse`
  * - `application/x-www-form-urlencoded` — parsed via the query string parser
  * - `multipart/form-data` — parsed via the RFC 7578 streaming multipart parser
  *
@@ -128,6 +129,8 @@ export default ({
     types = [
       'application/vnd.api+json',
       'application/json',
+      'application/merge-patch+json',
+      'application/json-patch+json',
       'application/x-www-form-urlencoded',
       'multipart/form-data'
     ],

package/http/validate.js

@@ -1,8 +1,10 @@
 /**
  * @fileoverview HTTP middleware factory for JSON Schema validation.
  *
- * Validates properties from the accumulator (body, url, params) against provided JSON
- * Schemas using AJV. Schemas are compiled once at middleware creation time for performance.
+ * Validates properties from the accumulator (body, url, route params) against provided
+ * JSON Schemas using AJV. Schemas are compiled once at middleware creation time for
+ * performance. Route params are resolved from `acc.route.params` (ergo-router) with
+ * fallback to `acc.params` (standalone).
  *
  * Returns `{response: {statusCode: 422, detail: ...}}` with structured error details on validation failure.
  * Must be placed after `body()` and/or `url()` in the pipeline so accumulator values
@@ -39,8 +41,10 @@ import createValidator from '../lib/validate.js';
  * @param {object} [schemas] - Schema map; each key corresponds to an accumulator property
  * @param {object} [schemas.body] - JSON Schema for the parsed request body
  * @param {object} [schemas.query] - JSON Schema for parsed query parameters
- * @param {object} [schemas.params] - JSON Schema for route path parameters
+ * @param {object} [schemas.params] - JSON Schema for route path parameters (reads `acc.route.params` or `acc.params`)
  * @param {object} [options] - AJV options forwarded to each compiled validator
+ * @param {boolean|Array<string>|object} [options.formats] - Format keyword support via
+ *   `ajv-formats`; forwarded to `createValidator`. Defaults to all standard formats enabled
  * @returns {function} - Ergo middleware `(req, res, acc) => void` that returns `{response: {statusCode: 422}}`
  *   (with `detail` and `details` from AJV) on validation failure
  */
@@ -67,8 +71,8 @@ export default (schemas = {}, options = {}) => {
         validators.query(acc.url.query);
       }
 
-      if (validators.params && acc.params) {
-        validators.params(acc.params);
+      if (validators.params && (acc.route?.params ?? acc.params)) {
+        validators.params(acc.route?.params ?? acc.params);
       }
     } catch (err) {
       return {

package/lib/validate.js

@@ -10,6 +10,7 @@
  * @module lib/validate
  * @since 0.1.0
  * @requires ajv
+ * @requires ajv-formats
  * @requires ../utils/http-errors.js
  *
  * @example
@@ -25,6 +26,7 @@
  * validate({});                    // throws 422 with details
  */
 import Ajv from 'ajv';
+import addFormats from 'ajv-formats';
 import httpErrors from '../utils/http-errors.js';
 
 /**
@@ -34,6 +36,11 @@ import httpErrors from '../utils/http-errors.js';
  * @param {object} [options] - Validator options
  * @param {boolean} [options.allErrors=true] - Report all errors instead of stopping at the first
  * @param {boolean} [options.coerceTypes=false] - Coerce input values to match schema types
+ * @param {boolean|Array<string>|object} [options.formats] - Format keyword support via
+ *   `ajv-formats`. `undefined` or `true` enables all standard formats; `false` disables (AJV
+ *   strict mode rejects unknown formats); an array enables selective formats
+ *   (e.g. `['email', 'uri']`); an object is passed as the full plugin config
+ *   (e.g. `{mode: 'fast'}`)
  * @param {object} [options.ajv] - Additional AJV constructor options
  * @returns {function} - `validateData(data)` — returns `data` on success, throws 422 on failure
  * @throws {Error} 422 with `details` array if schema validation fails
@@ -45,6 +52,13 @@ export default function createValidator(schema, options = {}) {
     ...options.ajv
   });
 
+  if (options.formats !== false) {
+    addFormats(
+      ajv,
+      options.formats === true || options.formats === undefined ? undefined : options.formats
+    );
+  }
+
   const validate = ajv.compile(schema);
 
   return function validateData(data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centralping/ergo",
-  "version": "0.1.0-beta.3",
+  "version": "0.1.0-beta.4",
   "description": "A Fast Fail REST API toolkit for Node.js -- composable middleware with structured Negotiation, Authorization, Validation, and Execution stages.",
   "main": "http/index.js",
   "type": "module",
@@ -116,6 +116,7 @@
   },
   "dependencies": {
     "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "content-type": "^2.0.0",
     "etag": "^1.8.1",
     "negotiator": "^1.0.0"

package/types/http/main.d.ts

@@ -113,7 +113,9 @@ declare const _default: {
         body?: object | undefined;
         query?: object | undefined;
         params?: object | undefined;
-    }, options?: object) => Function;
+    }, options?: {
+        formats?: boolean | object | string[] | undefined;
+    }) => Function;
 };
 export default _default;
 import compose from '../utils/compose-with.js';

package/types/http/validate.d.ts

@@ -2,5 +2,7 @@ declare function _default(schemas?: {
     body?: object | undefined;
     query?: object | undefined;
     params?: object | undefined;
-}, options?: object): Function;
+}, options?: {
+    formats?: boolean | object | string[] | undefined;
+}): Function;
 export default _default;

package/types/lib/validate.d.ts

@@ -5,6 +5,11 @@
  * @param {object} [options] - Validator options
  * @param {boolean} [options.allErrors=true] - Report all errors instead of stopping at the first
  * @param {boolean} [options.coerceTypes=false] - Coerce input values to match schema types
+ * @param {boolean|Array<string>|object} [options.formats] - Format keyword support via
+ *   `ajv-formats`. `undefined` or `true` enables all standard formats; `false` disables (AJV
+ *   strict mode rejects unknown formats); an array enables selective formats
+ *   (e.g. `['email', 'uri']`); an object is passed as the full plugin config
+ *   (e.g. `{mode: 'fast'}`)
  * @param {object} [options.ajv] - Additional AJV constructor options
  * @returns {function} - `validateData(data)` — returns `data` on success, throws 422 on failure
  * @throws {Error} 422 with `details` array if schema validation fails
@@ -12,5 +17,6 @@
 export default function createValidator(schema: object, options?: {
     allErrors?: boolean | undefined;
     coerceTypes?: boolean | undefined;
+    formats?: boolean | object | string[] | undefined;
     ajv?: object | undefined;
 }): Function;