@cratestack/validator-yup 0.5.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stephane Segning
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,30 @@
+# @cratestack/validator-yup
+
+An [`RpcLink`](https://github.com/cratestack/cratestack/tree/main/packages/cratestack-ts-types)
+([issue #182](https://github.com/cratestack/cratestack/issues/182)) for CrateStack's generated
+TypeScript RPC client (`transport rpc` schemas) that validates `request.input` against a per-op
+[yup](https://github.com/jquense/yup) schema before the call reaches the network — client-side
+validation with the exact same schema shape your server-side procedure/model input already has,
+instead of hoping the generated types alone catch a bad call at compile time.
+
+## Usage
+
+```ts
+import { createYupValidatorLink } from "@cratestack/validator-yup";
+import { CratestackRpcRuntime } from "./generated/runtime"; // your project's generated client
+import * as yup from "yup";
+
+const runtime = new CratestackRpcRuntime("https://api.example.com", {
+  links: [
+    createYupValidatorLink({
+      "model.Order.create": yup.object({ total: yup.number().positive().required() }),
+    }),
+  ],
+});
+```
+
+Ops with no configured schema pass through unvalidated — this is opt-in per op, not a blanket
+gate. On success, the schema's *cast* output (defaults, type coercion) becomes the actual request
+`input`, not just a type-level assertion. On failure, the chain short-circuits — the real network
+call never happens — and the call rejects the same way a server-side validation failure would,
+with an `RpcErrorBody` carrying `code: "invalid_argument"`.

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+import type { RpcLink } from "@cratestack/ts-types";
+import type { AnySchema } from "yup";
+/** Maps a `request.opId` to the schema its `input` must satisfy. Ops
+ *  with no entry pass through unvalidated — this link is opt-in per op,
+ *  not a blanket gate. */
+export type YupValidatorSchemas = Record<string, AnySchema>;
+/** Validates `request.input` against a per-op `yup` schema before
+ *  calling `next()`, shipped as an
+ *  [`RpcLink`](https://github.com/cratestack/cratestack/tree/main/packages/cratestack-ts-types)
+ *  ([issue #182](https://github.com/cratestack/cratestack/issues/182)) so it composes with
+ *  `@cratestack/link-batch`/`@cratestack/link-logger` instead of requiring its own call site.
+ *
+ *  On success, `next()` receives the schema's *cast* output as `input`
+ *  — so defaults/type coercion actually take effect on the wire, not
+ *  just at the type level. On failure, the chain short-circuits:
+ *  `next()` is never called and the link resolves its own `Response`
+ *  carrying an `RpcErrorBody` with `code: "invalid_argument"`,
+ *  mirroring what the server itself would return for a rejected input
+ *  (see `docs/design/rpc-transport.md`). */
+export declare function createYupValidatorLink(schemas: YupValidatorSchemas): RpcLink;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC;AAGrC;;0BAE0B;AAC1B,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE5D;;;;;;;;;;;;4CAY4C;AAC5C,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAsB5E"}

package/dist/index.js

@@ -0,0 +1,38 @@
+import { ValidationError } from "yup";
+/** Validates `request.input` against a per-op `yup` schema before
+ *  calling `next()`, shipped as an
+ *  [`RpcLink`](https://github.com/cratestack/cratestack/tree/main/packages/cratestack-ts-types)
+ *  ([issue #182](https://github.com/cratestack/cratestack/issues/182)) so it composes with
+ *  `@cratestack/link-batch`/`@cratestack/link-logger` instead of requiring its own call site.
+ *
+ *  On success, `next()` receives the schema's *cast* output as `input`
+ *  — so defaults/type coercion actually take effect on the wire, not
+ *  just at the type level. On failure, the chain short-circuits:
+ *  `next()` is never called and the link resolves its own `Response`
+ *  carrying an `RpcErrorBody` with `code: "invalid_argument"`,
+ *  mirroring what the server itself would return for a rejected input
+ *  (see `docs/design/rpc-transport.md`). */
+export function createYupValidatorLink(schemas) {
+    return async (request, next) => {
+        const schema = schemas[request.opId];
+        if (!schema) {
+            return next(request);
+        }
+        try {
+            const value = await schema.validate(request.input, { abortEarly: false, stripUnknown: true });
+            return next({ ...request, input: value });
+        }
+        catch (error) {
+            if (!(error instanceof ValidationError)) {
+                throw error;
+            }
+            const body = {
+                code: "invalid_argument",
+                message: `input for "${request.opId}" failed validation`,
+                details: error.errors,
+            };
+            return { response: new Response(request.codec.encode(body), { status: 400 }) };
+        }
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAOtC;;;;;;;;;;;;4CAY4C;AAC5C,MAAM,UAAU,sBAAsB,CAAC,OAA4B;IACjE,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,eAAe,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAiB;gBACzB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,cAAc,OAAO,CAAC,IAAI,qBAAqB;gBACxD,OAAO,EAAE,KAAK,CAAC,MAAM;aACtB,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@cratestack/validator-yup",
+  "version": "0.5.2",
+  "description": "An RpcLink for CrateStack's generated TypeScript RPC client that validates request input against per-op yup schemas.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cratestack/cratestack.git",
+    "directory": "packages/cratestack-validator-yup"
+  },
+  "homepage": "https://cratestack.dev",
+  "bugs": "https://github.com/cratestack/cratestack/issues",
+  "keywords": ["cratestack", "cstack", "rpc", "yup", "validation", "trpc-links"],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "lint": "biome check ."
+  },
+  "dependencies": {
+    "@cratestack/ts-types": "0.5.2"
+  },
+  "peerDependencies": {
+    "yup": "^1.4.0"
+  },
+  "peerDependenciesMeta": {
+    "yup": { "optional": true }
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0",
+    "yup": "^1.4.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}