@igstack/app-catalog-backend-core 5.0.0 → 5.0.1-alpha-20260923024813

package/dist/server/trpcSetup.mjs

@@ -2,8 +2,12 @@ import { TRPCError, initTRPC } from "@trpc/server";
 
 //#region src/server/trpcSetup.ts
 const t = initTRPC.context().create({ errorFormatter({ error, shape }) {
+	if (shape.data.httpStatus < 500) {
+		console.info(`[tRPC] ${error.code} ${shape.data.path ?? "<no path>"}: ${error.message}`);
+		return shape;
+	}
 	console.error("[tRPC Error]", {
-		path: shape.data?.path,
+		path: shape.data.path,
 		code: error.code,
 		message: error.message,
 		cause: error.cause,

package/dist/server/trpcSetup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"trpcSetup.mjs","names":[],"sources":["../../src/server/trpcSetup.ts"],"sourcesContent":["import { TRPCError, initTRPC } from '@trpc/server'\nimport type { AcTrpcContext } from './acTrpcContext'\n\nexport const t = initTRPC.context<AcTrpcContext>().create({\n  errorFormatter({ error, shape }: { error: unknown; shape: unknown }) {\n    console.error('[tRPC Error]', {\n      path: (shape as { data?: { path?: string } }).data?.path,\n      code: (error as { code?: string }).code,\n      message: (error as { message?: string }).message,\n      cause: (error as { cause?: unknown }).cause,\n      stack: (error as { stack?: string }).stack,\n    })\n    return shape\n  },\n})\n\n/**\n * Export reusable router and procedure helpers\n */\nexport const router = t.router\nexport const publicProcedure = t.procedure\n\n/**\n * Middleware to check if user is authenticated\n */\nconst isAuthenticated = t.middleware(({ ctx, next }) => {\n  if (!ctx.user) {\n    throw new TRPCError({\n      code: 'UNAUTHORIZED',\n      message: 'You must be logged in to access this resource',\n    })\n  }\n  return next({\n    ctx: {\n      ...ctx,\n      user: ctx.user,\n    },\n  })\n})\n\n/**\n * Middleware to check if user is an admin\n */\nconst isAdminMiddleware = t.middleware(({ ctx, next }) => {\n  if (!ctx.user) {\n    throw new TRPCError({\n      code: 'UNAUTHORIZED',\n      message: 'You must be logged in',\n    })\n  }\n  if (!ctx.isAdmin) {\n    throw new TRPCError({\n      code: 'FORBIDDEN',\n      message: 'Admin access required',\n    })\n  }\n  return next({\n    ctx: {\n      ...ctx,\n      user: ctx.user,\n    },\n  })\n})\n\n/**\n * Admin procedure that requires admin permissions\n */\nexport const adminProcedure = t.procedure.use(isAdminMiddleware)\n\n/**\n * Protected procedure that requires authentication (but not admin)\n */\nexport const protectedProcedure = t.procedure.use(isAuthenticated)\n"],"mappings":";;;AAGA,MAAa,IAAI,SAAS,SAAwB,CAAC,OAAO,EACxD,eAAe,EAAE,OAAO,SAA6C;AACnE,SAAQ,MAAM,gBAAgB;EAC5B,MAAO,MAAuC,MAAM;EACpD,MAAO,MAA4B;EACnC,SAAU,MAA+B;EACzC,OAAQ,MAA8B;EACtC,OAAQ,MAA6B;EACtC,CAAC;AACF,QAAO;GAEV,CAAC;;;;AAKF,MAAa,SAAS,EAAE;AACxB,MAAa,kBAAkB,EAAE;;;;AAKjC,MAAM,kBAAkB,EAAE,YAAY,EAAE,KAAK,WAAW;AACtD,KAAI,CAAC,IAAI,KACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,QAAO,KAAK,EACV,KAAK;EACH,GAAG;EACH,MAAM,IAAI;EACX,EACF,CAAC;EACF;;;;AAKF,MAAM,oBAAoB,EAAE,YAAY,EAAE,KAAK,WAAW;AACxD,KAAI,CAAC,IAAI,KACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,KAAI,CAAC,IAAI,QACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,QAAO,KAAK,EACV,KAAK;EACH,GAAG;EACH,MAAM,IAAI;EACX,EACF,CAAC;EACF;;;;AAKF,MAAa,iBAAiB,EAAE,UAAU,IAAI,kBAAkB;;;;AAKhE,MAAa,qBAAqB,EAAE,UAAU,IAAI,gBAAgB"}
+{"version":3,"file":"trpcSetup.mjs","names":[],"sources":["../../src/server/trpcSetup.ts"],"sourcesContent":["import { TRPCError, initTRPC } from '@trpc/server'\nimport type { AcTrpcContext } from './acTrpcContext'\n\nexport const t = initTRPC.context<AcTrpcContext>().create({\n  errorFormatter({ error, shape }) {\n    // A 4xx is the caller's mistake (unknown path, bad input, no session). One\n    // plain line on stdout is enough; a stack on stderr would make log collectors\n    // file it as status:error next to real failures.\n    if (shape.data.httpStatus < 500) {\n      console.info(\n        `[tRPC] ${error.code} ${shape.data.path ?? '<no path>'}: ${error.message}`,\n      )\n      return shape\n    }\n    console.error('[tRPC Error]', {\n      path: shape.data.path,\n      code: error.code,\n      message: error.message,\n      cause: error.cause,\n      stack: error.stack,\n    })\n    return shape\n  },\n})\n\n/**\n * Export reusable router and procedure helpers\n */\nexport const router = t.router\nexport const publicProcedure = t.procedure\n\n/**\n * Middleware to check if user is authenticated\n */\nconst isAuthenticated = t.middleware(({ ctx, next }) => {\n  if (!ctx.user) {\n    throw new TRPCError({\n      code: 'UNAUTHORIZED',\n      message: 'You must be logged in to access this resource',\n    })\n  }\n  return next({\n    ctx: {\n      ...ctx,\n      user: ctx.user,\n    },\n  })\n})\n\n/**\n * Middleware to check if user is an admin\n */\nconst isAdminMiddleware = t.middleware(({ ctx, next }) => {\n  if (!ctx.user) {\n    throw new TRPCError({\n      code: 'UNAUTHORIZED',\n      message: 'You must be logged in',\n    })\n  }\n  if (!ctx.isAdmin) {\n    throw new TRPCError({\n      code: 'FORBIDDEN',\n      message: 'Admin access required',\n    })\n  }\n  return next({\n    ctx: {\n      ...ctx,\n      user: ctx.user,\n    },\n  })\n})\n\n/**\n * Admin procedure that requires admin permissions\n */\nexport const adminProcedure = t.procedure.use(isAdminMiddleware)\n\n/**\n * Protected procedure that requires authentication (but not admin)\n */\nexport const protectedProcedure = t.procedure.use(isAuthenticated)\n"],"mappings":";;;AAGA,MAAa,IAAI,SAAS,SAAwB,CAAC,OAAO,EACxD,eAAe,EAAE,OAAO,SAAS;AAI/B,KAAI,MAAM,KAAK,aAAa,KAAK;AAC/B,UAAQ,KACN,UAAU,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ,YAAY,IAAI,MAAM,UAClE;AACD,SAAO;;AAET,SAAQ,MAAM,gBAAgB;EAC5B,MAAM,MAAM,KAAK;EACjB,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO,MAAM;EACd,CAAC;AACF,QAAO;GAEV,CAAC;;;;AAKF,MAAa,SAAS,EAAE;AACxB,MAAa,kBAAkB,EAAE;;;;AAKjC,MAAM,kBAAkB,EAAE,YAAY,EAAE,KAAK,WAAW;AACtD,KAAI,CAAC,IAAI,KACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,QAAO,KAAK,EACV,KAAK;EACH,GAAG;EACH,MAAM,IAAI;EACX,EACF,CAAC;EACF;;;;AAKF,MAAM,oBAAoB,EAAE,YAAY,EAAE,KAAK,WAAW;AACxD,KAAI,CAAC,IAAI,KACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,KAAI,CAAC,IAAI,QACP,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,QAAO,KAAK,EACV,KAAK;EACH,GAAG;EACH,MAAM,IAAI;EACX,EACF,CAAC;EACF;;;;AAKF,MAAa,iBAAiB,EAAE,UAAU,IAAI,kBAAkB;;;;AAKhE,MAAa,qBAAqB,EAAE,UAAU,IAAI,gBAAgB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igstack/app-catalog-backend-core",
-  "version": "5.0.0",
+  "version": "5.0.1-alpha-20260923024813",
   "description": "Backend core library for App Catalog",
   "homepage": "https://github.com/lislon/app-catalog",
   "repository": {
@@ -45,8 +45,8 @@
     "tsyringe": "^4.10.0",
     "yaml": "^2.8.0",
     "zod": "^4.3.5",
-    "@igstack/app-catalog-shared-core": "5.0.0",
-    "@igstack/app-catalog-table-sync": "5.0.0"
+    "@igstack/app-catalog-shared-core": "5.0.1-alpha-20260923024813",
+    "@igstack/app-catalog-table-sync": "5.0.1-alpha-20260923024813"
   },
   "devDependencies": {
     "@tanstack/vite-config": "^0.4.3",
@@ -73,7 +73,7 @@
   "engines": {
     "node": ">=24"
   },
-  "gitHead": "6858ad093a344473e13ab3187e1c8a5b11211b9d",
+  "gitHead": "c43d402ba1478450c2865bfab1e736652c6d53fa",
   "scripts": {
     "build": "tsdown",
     "build:lenient": "tsdown",

package/src/__tests__/trpcErrorLogging.test.ts

@@ -0,0 +1,66 @@
+import { fetchRequestHandler } from '@trpc/server/adapters/fetch'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { MockInstance } from 'vitest'
+import type { AcTrpcContext } from '../server/acTrpcContext'
+import { publicProcedure, router } from '../server/trpcSetup'
+
+// Every tRPC error passes through the errorFormatter in trpcSetup. A client mistake
+// (bad path, bad input, no session) must not reach the log as an error with a stack:
+// log collectors turn stderr into status:error and a probe at a guessed URL then
+// pollutes the same alerting a real failure feeds.
+const appRouter = router({
+  boom: publicProcedure.query(() => {
+    throw new Error('db exploded')
+  }),
+})
+
+function call(path: string) {
+  return fetchRequestHandler({
+    endpoint: '/api/trpc',
+    req: new Request(`http://localhost/api/trpc/${path}`),
+    router: appRouter,
+    createContext: () => ({}) as AcTrpcContext,
+  })
+}
+
+describe('tRPC error logging', () => {
+  let error: MockInstance
+  let info: MockInstance
+
+  beforeEach(() => {
+    error = vi.spyOn(console, 'error').mockImplementation(() => {})
+    info = vi.spyOn(console, 'info').mockImplementation(() => {})
+  })
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
+  it('logs an unknown procedure path as one info line, not an error', async () => {
+    const res = await call('appCatalog.getVersionInfo')
+
+    expect(res.status).toBe(404)
+    expect(error).not.toHaveBeenCalled()
+    expect(info).toHaveBeenCalledTimes(1)
+    expect(info).toHaveBeenCalledWith(
+      expect.stringContaining('NOT_FOUND appCatalog.getVersionInfo'),
+    )
+    expect(info).toHaveBeenCalledWith(expect.not.stringContaining('    at '))
+  })
+
+  it('keeps a procedure failure at error level with its stack', async () => {
+    const res = await call('boom')
+
+    expect(res.status).toBe(500)
+    expect(info).not.toHaveBeenCalled()
+    expect(error).toHaveBeenCalledTimes(1)
+    expect(error).toHaveBeenCalledWith(
+      '[tRPC Error]',
+      expect.objectContaining({
+        code: 'INTERNAL_SERVER_ERROR',
+        path: 'boom',
+        message: 'db exploded',
+        stack: expect.stringContaining('    at '),
+      }),
+    )
+  })
+})

package/src/server/trpcSetup.ts

@@ -2,13 +2,22 @@ import { TRPCError, initTRPC } from '@trpc/server'
 import type { AcTrpcContext } from './acTrpcContext'
 
 export const t = initTRPC.context<AcTrpcContext>().create({
-  errorFormatter({ error, shape }: { error: unknown; shape: unknown }) {
+  errorFormatter({ error, shape }) {
+    // A 4xx is the caller's mistake (unknown path, bad input, no session). One
+    // plain line on stdout is enough; a stack on stderr would make log collectors
+    // file it as status:error next to real failures.
+    if (shape.data.httpStatus < 500) {
+      console.info(
+        `[tRPC] ${error.code} ${shape.data.path ?? '<no path>'}: ${error.message}`,
+      )
+      return shape
+    }
     console.error('[tRPC Error]', {
-      path: (shape as { data?: { path?: string } }).data?.path,
-      code: (error as { code?: string }).code,
-      message: (error as { message?: string }).message,
-      cause: (error as { cause?: unknown }).cause,
-      stack: (error as { stack?: string }).stack,
+      path: shape.data.path,
+      code: error.code,
+      message: error.message,
+      cause: error.cause,
+      stack: error.stack,
     })
     return shape
   },