@lovrozagar/honey 0.1.0 → 0.2.0

package/docs/sdk.md

@@ -19,24 +19,24 @@ The rest of this page is the capability matrix and "how to do X" snippets. All s
 
 ## Capability matrix
 
-| §   | Capability                                             | TS  | Python | Go  | Rust |
-| --- | ------------------------------------------------------ | --- | ------ | --- | ---- |
-| 1   | Typed operations (request, response, params, bodies)   | ✓   | ✓      | ✓   | ✓    |
-| 2   | Typed error hierarchy + `.data` typed payload          | ✓   | ✓      | ✓   | ✓    |
-| 3   | `onAuthExpired` callback + 1x 401 retry                | ✓   | ✓      | ✓   | ✓    |
-| 4   | Cancellation (idiomatic per lang)                      | ✓   | ✓      | ✓   | ✓    |
-| 5   | Per-call timeout override                              | ✓   | ✓      | ✓   | ✓    |
-| 6   | Per-call headers merge                                 | ✓   | ✓      | ✓   | ✓    |
-| 7   | `onRequest` / `onResponse` hook chain                  | ✓   | ✓      | ✓   | ✓    |
-| 8   | Invalidation + `isStale`                               | ✓   | ✓      | ✓   | ✓    |
-| 9   | SSE iteration                                          | ✓   | ✓      | ✓   | ✓    |
-| 10  | Realtime (`x-realtime`) + `TransportAdapter` fallback  | ✓   | ✓      | ✓   | ✓    |
-| 11  | WebSocket (`x-websocket`) bidi                         | ✓   | ✓      | ✓   | ✓    |
-| 12  | Streaming request body                                 | ✓   | ✓      | ✓   | ✓    |
-| 13  | Sync runtime                                           | —   | ✓      | —   | ✓    |
-| 14  | `onLog` lifecycle hook                                 | ✓   | ✓      | ✓   | ✓    |
-| 15  | `x-deprecated`                                         | ✓   | ✓      | ✓   | ✓    |
-| 16  | `x-idempotency-key`                                    | ✓   | ✓      | ✓   | ✓    |
+| §   | Capability                                            | TS  | Python | Go  | Rust |
+| --- | ----------------------------------------------------- | --- | ------ | --- | ---- |
+| 1   | Typed operations (request, response, params, bodies)  | ✓   | ✓      | ✓   | ✓    |
+| 2   | Typed error hierarchy + `.data` typed payload         | ✓   | ✓      | ✓   | ✓    |
+| 3   | `onAuthExpired` callback + 1x 401 retry               | ✓   | ✓      | ✓   | ✓    |
+| 4   | Cancellation (idiomatic per lang)                     | ✓   | ✓      | ✓   | ✓    |
+| 5   | Per-call timeout override                             | ✓   | ✓      | ✓   | ✓    |
+| 6   | Per-call headers merge                                | ✓   | ✓      | ✓   | ✓    |
+| 7   | `onRequest` / `onResponse` hook chain                 | ✓   | ✓      | ✓   | ✓    |
+| 8   | Invalidation + `isStale`                              | ✓   | ✓      | ✓   | ✓    |
+| 9   | SSE iteration                                         | ✓   | ✓      | ✓   | ✓    |
+| 10  | Realtime (`x-realtime`) + `TransportAdapter` fallback | ✓   | ✓      | ✓   | ✓    |
+| 11  | WebSocket (`x-websocket`) bidi                        | ✓   | ✓      | ✓   | ✓    |
+| 12  | Streaming request body                                | ✓   | ✓      | ✓   | ✓    |
+| 13  | Sync runtime                                          | —   | ✓      | —   | ✓    |
+| 14  | `onLog` lifecycle hook                                | ✓   | ✓      | ✓   | ✓    |
+| 15  | `x-deprecated`                                        | ✓   | ✓      | ✓   | ✓    |
+| 16  | `x-idempotency-key`                                   | ✓   | ✓      | ✓   | ✓    |
 
 Sync runtime is not idiomatic in TS (no sync HTTP in browsers or workerd) or Go (goroutines + `context.Context` are the async model). Python and Rust ship dual async + sync generation.
 
@@ -50,14 +50,14 @@ Config is mechanism, not policy. You pick retry, logging, auth refresh, and inva
 
 ```ts
 const sdk = new MockSDK({
-  baseURL: BASE_URL,
-  headers: { Authorization: "Bearer expired-token" },
-  onAuthExpired: () => Promise.resolve("valid-token"),
-  onLog: (entry) => console.debug(entry.event, entry.operation, entry.duration_ms, entry.status),
-  onRequest: [addTrace, addApp],
-  onResponse: [inspect5xx],
-  throwOnError: true,
-  timeout: 10_000,
+	baseURL: BASE_URL,
+	headers: { Authorization: "Bearer expired-token" },
+	onAuthExpired: () => Promise.resolve("valid-token"),
+	onLog: (entry) => console.debug(entry.event, entry.operation, entry.duration_ms, entry.status),
+	onRequest: [addTrace, addApp],
+	onResponse: [inspect5xx],
+	throwOnError: true,
+	timeout: 10_000,
 })
 ```
 
@@ -138,15 +138,15 @@ Every SDK emits the unified taxonomy: `BadRequestError`, `UnauthorizedError`, `N
 
 ```ts
 try {
-  await sdk.createUser({ json: input })
+	await sdk.createUser({ json: input })
 } catch (e) {
-  if (e instanceof BadRequestError) console.error("400", e.status)
-  else if (e instanceof UnauthorizedError) console.error("401")
-  else if (e instanceof NotFoundError) console.error("404")
-  else if (e instanceof RateLimitError) console.error("429")
-  else if (e instanceof InternalServerError) console.error("500")
-  else if (isClientError(e)) console.error("unknown:", e.status)
-  else throw e
+	if (e instanceof BadRequestError) console.error("400", e.status)
+	else if (e instanceof UnauthorizedError) console.error("401")
+	else if (e instanceof NotFoundError) console.error("404")
+	else if (e instanceof RateLimitError) console.error("429")
+	else if (e instanceof InternalServerError) console.error("500")
+	else if (isClientError(e)) console.error("unknown:", e.status)
+	else throw e
 }
 ```
 
@@ -203,11 +203,11 @@ When an operation declares a `4xx` response schema in OpenAPI, the parsed payloa
 
 ```ts
 try {
-  await sdk.createUser({ json: bad })
+	await sdk.createUser({ json: bad })
 } catch (e) {
-  if (e instanceof BadRequestError) {
-    console.error("400 data:", e.data, "body:", e.body)
-  }
+	if (e instanceof BadRequestError) {
+		console.error("400 data:", e.data, "body:", e.body)
+	}
 }
 ```
 
@@ -266,9 +266,9 @@ Each SDK uses the language's native cancellation primitive. Cancellation propaga
 const ctrl = new AbortController()
 setTimeout(() => ctrl.abort(), 25)
 try {
-  await sdk.slow({ search: { ms: 500 }, signal: ctrl.signal })
+	await sdk.slow({ search: { ms: 500 }, signal: ctrl.signal })
 } catch (e) {
-  console.error("cancelled:", (e as Error).name)
+	console.error("cancelled:", (e as Error).name)
 }
 ```
 
@@ -335,8 +335,8 @@ Per-call headers merge over config headers; per-call wins per key. Useful for re
 
 ```ts
 await sdk.getUser({
-  headers: { "X-Both": "call-wins" },
-  params: { id: "u1" },
+	headers: { "X-Both": "call-wins" },
+	params: { id: "u1" },
 })
 ```
 
@@ -478,8 +478,8 @@ Operations with `produces: text/event-stream` return a typed async iterable of e
 
 ```ts
 for await (const ev of sdk.streamEvents()) {
-  console.log("sse event:", ev)
-  break
+	console.log("sse event:", ev)
+	break
 }
 ```
 
@@ -513,10 +513,12 @@ Operations with `x-websocket: true` yield a typed bidirectional channel: `Send`
 
 ```ts
 const ws = sdk.connectWs()
-await new Promise<void>((resolve) => { ws.on("open", () => resolve()) })
+await new Promise<void>((resolve) => {
+	ws.on("open", () => resolve())
+})
 ws.on("message", (data: string) => {
-  console.log("ws recv:", data)
-  ws.close(1000, "done")
+	console.log("ws recv:", data)
+	ws.close(1000, "done")
 })
 ws.send("hello")
 ```
@@ -555,27 +557,36 @@ ws.close(1000, "done").await?;
 
 ```ts
 function makeCustomAdapter(): TransportAdapter {
-  return {
-    connect(_url, _opts): TransportConnection {
-      let onFrame: (f: ServerFrame) => void = () => {}
-      const conn: TransportConnection = {
-        close() {},
-        onClose: () => {}, onError: () => {},
-        get onFrame() { return onFrame }, set onFrame(cb) { onFrame = cb },
-        send(_data) {},
-      }
-      queueMicrotask(() => onFrame({ data: { kind: "tick" }, id: 1, t: "msg" }))
-      return conn
-    },
-  }
+	return {
+		connect(_url, _opts): TransportConnection {
+			let onFrame: (f: ServerFrame) => void = () => {}
+			const conn: TransportConnection = {
+				close() {},
+				onClose: () => {},
+				onError: () => {},
+				get onFrame() {
+					return onFrame
+				},
+				set onFrame(cb) {
+					onFrame = cb
+				},
+				send(_data) {},
+			}
+			queueMicrotask(() => onFrame({ data: { kind: "tick" }, id: 1, t: "msg" }))
+			return conn
+		},
+	}
 }
 const rc = createResumableConnection({
-  maxReconnectAttempts: 5,
-  reconnectDelayMs: 100,
-  transports: [makeCustomAdapter()],
-  url: `${BASE_URL}/rt`,
+	maxReconnectAttempts: 5,
+	reconnectDelayMs: 100,
+	transports: [makeCustomAdapter()],
+	url: `${BASE_URL}/rt`,
 })
-for await (const ev of rc) { console.log("rt:", ev); break }
+for await (const ev of rc) {
+	console.log("rt:", ev)
+	break
+}
 rc.close()
 ```
 
@@ -632,12 +643,15 @@ Binary or multipart uploads flow as a stream. No buffering — the SDK pipes the
 
 ```ts
 const stream = new ReadableStream<Uint8Array>({
-  pull(controller) {
-    if (sent >= TOTAL) { controller.close(); return }
-    const chunk = new Uint8Array(Math.min(CHUNK, TOTAL - sent))
-    sent += chunk.length
-    controller.enqueue(chunk)
-  },
+	pull(controller) {
+		if (sent >= TOTAL) {
+			controller.close()
+			return
+		}
+		const chunk = new Uint8Array(Math.min(CHUNK, TOTAL - sent))
+		sent += chunk.length
+		controller.enqueue(chunk)
+	},
 })
 const uploaded = await sdk.uploadBlob({ body: stream })
 console.log("uploaded:", uploaded.size, uploaded.hash)
@@ -671,8 +685,8 @@ println!("uploaded: {} {}", uploaded.size, uploaded.hash);
 Operations marked `x-idempotency-key: true` auto-send an `Idempotency-Key` header with a UUID when the caller doesn't supply one. Precedence: `headers["Idempotency-Key"]` wins over the explicit opts field, which wins over the auto UUID.
 
 ```ts
-const auto      = await sdk.idempotentCreate()
-const explicit  = await sdk.idempotentCreate({ idempotencyKey: "user-supplied-123" })
+const auto = await sdk.idempotentCreate()
+const explicit = await sdk.idempotentCreate({ idempotencyKey: "user-supplied-123" })
 const viaHeader = await sdk.idempotentCreate({ headers: { "Idempotency-Key": "header-wins-456" } })
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@lovrozagar/honey",
-	"version": "0.1.0",
+	"version": "0.2.0",
 	"description": "Type-safe API framework built on Web Standards. Builder-pattern DX, precompiled radix tree in production.",
 	"keywords": [
 		"api",
@@ -11,18 +11,22 @@
 		"type-safe",
 		"web-standards"
 	],
+	"homepage": "https://github.com/lovrozagar/honey#readme",
+	"bugs": {
+		"url": "https://github.com/lovrozagar/honey/issues"
+	},
 	"license": "MIT",
+	"author": "lovrozagar",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/lovrozagar/honey"
-	},
-	"publishConfig": {
-		"access": "public"
+		"url": "git+https://github.com/lovrozagar/honey.git",
+		"directory": "packages/core"
 	},
 	"bin": {
 		"honey": "./src/cli.ts"
 	},
 	"files": [
+		"dist",
 		"docs",
 		"src"
 	],
@@ -33,53 +37,193 @@
 		"./src/serve-register.ts"
 	],
 	"exports": {
-		".": "./src/index.ts",
-		"./accepts": "./src/accepts.ts",
-		"./body-limit": "./src/body-limit.ts",
-		"./build": "./src/build/index.ts",
-		"./cli": "./src/cli.ts",
-		"./client": "./src/client/index.ts",
-		"./client/sdk": "./src/client/sdk.ts",
-		"./codegen": "./src/codegen.ts",
-		"./codegen-go-cli": "./src/codegen-go-cli.ts",
-		"./codegen/extract": "./src/type-extractor.ts",
-		"./cookie": "./src/cookie.ts",
-		"./cookie-sign": "./src/cookie-sign.ts",
-		"./cors": "./src/cors.ts",
-		"./crypto": "./src/crypto.ts",
-		"./curl-logger": "./src/curl-logger.ts",
-		"./csrf": "./src/csrf.ts",
-		"./errors": "./src/errors.ts",
-		"./etag": "./src/etag.ts",
-		"./i18n": "./src/i18n.ts",
-		"./input": "./src/input.ts",
-		"./ip-restrict": "./src/ip-restrict.ts",
-		"./logger": "./src/logger.ts",
-		"./node": "./src/node.ts",
-		"./openapi": "./src/openapi/register.ts",
-		"./openapi/spec": "./src/openapi/spec.ts",
-		"./openapi/scalar": "./src/openapi/scalar.ts",
-		"./openapi/swagger": "./src/openapi/swagger.ts",
-		"./plugin": "./src/plugin.ts",
-		"./powered-by": "./src/powered-by.ts",
-		"./pretty-json": "./src/pretty-json.ts",
-		"./proxy": "./src/proxy.ts",
-		"./request-to-curl": "./src/request-to-curl.ts",
-		"./request-id": "./src/request-id.ts",
-		"./secure-headers": "./src/secure-headers.ts",
-		"./serve": "./src/serve-register.ts",
-		"./server-timing": "./src/server-timing.ts",
-		"./static": "./src/static.ts",
-		"./telemetry/otel": "./src/telemetry/otel.ts",
-		"./testing": "./src/testing.ts",
-		"./timeout": "./src/timeout.ts",
-		"./tree": "./src/tree.ts",
-		"./ws/bun": "./src/ws/bun.ts",
-		"./ws/cloudflare": "./src/ws/cloudflare.ts",
-		"./ws/deno": "./src/ws/deno.ts",
-		"./ws/node": "./src/ws/node.ts"
+		".": {
+			"types": "./dist/index.d.ts",
+			"default": "./src/index.ts"
+		},
+		"./accepts": {
+			"types": "./dist/accepts.d.ts",
+			"default": "./src/accepts.ts"
+		},
+		"./body-limit": {
+			"types": "./dist/body-limit.d.ts",
+			"default": "./src/body-limit.ts"
+		},
+		"./build": {
+			"types": "./dist/build/index.d.ts",
+			"default": "./src/build/index.ts"
+		},
+		"./cli": {
+			"types": "./dist/cli.d.ts",
+			"default": "./src/cli.ts"
+		},
+		"./client": {
+			"types": "./dist/client/index.d.ts",
+			"default": "./src/client/index.ts"
+		},
+		"./client/sdk": {
+			"types": "./dist/client/sdk.d.ts",
+			"default": "./src/client/sdk.ts"
+		},
+		"./codegen": {
+			"types": "./dist/codegen.d.ts",
+			"default": "./src/codegen.ts"
+		},
+		"./codegen-go-cli": {
+			"types": "./dist/codegen-go-cli.d.ts",
+			"default": "./src/codegen-go-cli.ts"
+		},
+		"./codegen/extract": {
+			"types": "./dist/type-extractor.d.ts",
+			"default": "./src/type-extractor.ts"
+		},
+		"./cookie": {
+			"types": "./dist/cookie.d.ts",
+			"default": "./src/cookie.ts"
+		},
+		"./cookie-sign": {
+			"types": "./dist/cookie-sign.d.ts",
+			"default": "./src/cookie-sign.ts"
+		},
+		"./cors": {
+			"types": "./dist/cors.d.ts",
+			"default": "./src/cors.ts"
+		},
+		"./crypto": {
+			"types": "./dist/crypto.d.ts",
+			"default": "./src/crypto.ts"
+		},
+		"./curl-logger": {
+			"types": "./dist/curl-logger.d.ts",
+			"default": "./src/curl-logger.ts"
+		},
+		"./csrf": {
+			"types": "./dist/csrf.d.ts",
+			"default": "./src/csrf.ts"
+		},
+		"./errors": {
+			"types": "./dist/errors.d.ts",
+			"default": "./src/errors.ts"
+		},
+		"./etag": {
+			"types": "./dist/etag.d.ts",
+			"default": "./src/etag.ts"
+		},
+		"./i18n": {
+			"types": "./dist/i18n.d.ts",
+			"default": "./src/i18n.ts"
+		},
+		"./input": {
+			"types": "./dist/input.d.ts",
+			"default": "./src/input.ts"
+		},
+		"./ip-restrict": {
+			"types": "./dist/ip-restrict.d.ts",
+			"default": "./src/ip-restrict.ts"
+		},
+		"./logger": {
+			"types": "./dist/logger.d.ts",
+			"default": "./src/logger.ts"
+		},
+		"./node": {
+			"types": "./dist/node.d.ts",
+			"default": "./src/node.ts"
+		},
+		"./openapi": {
+			"types": "./dist/openapi/register.d.ts",
+			"default": "./src/openapi/register.ts"
+		},
+		"./openapi/spec": {
+			"types": "./dist/openapi/spec.d.ts",
+			"default": "./src/openapi/spec.ts"
+		},
+		"./openapi/scalar": {
+			"types": "./dist/openapi/scalar.d.ts",
+			"default": "./src/openapi/scalar.ts"
+		},
+		"./openapi/swagger": {
+			"types": "./dist/openapi/swagger.d.ts",
+			"default": "./src/openapi/swagger.ts"
+		},
+		"./plugin": {
+			"types": "./dist/plugin.d.ts",
+			"default": "./src/plugin.ts"
+		},
+		"./powered-by": {
+			"types": "./dist/powered-by.d.ts",
+			"default": "./src/powered-by.ts"
+		},
+		"./pretty-json": {
+			"types": "./dist/pretty-json.d.ts",
+			"default": "./src/pretty-json.ts"
+		},
+		"./proxy": {
+			"types": "./dist/proxy.d.ts",
+			"default": "./src/proxy.ts"
+		},
+		"./request-to-curl": {
+			"types": "./dist/request-to-curl.d.ts",
+			"default": "./src/request-to-curl.ts"
+		},
+		"./request-id": {
+			"types": "./dist/request-id.d.ts",
+			"default": "./src/request-id.ts"
+		},
+		"./secure-headers": {
+			"types": "./dist/secure-headers.d.ts",
+			"default": "./src/secure-headers.ts"
+		},
+		"./serve": {
+			"types": "./dist/serve-register.d.ts",
+			"default": "./src/serve-register.ts"
+		},
+		"./server-timing": {
+			"types": "./dist/server-timing.d.ts",
+			"default": "./src/server-timing.ts"
+		},
+		"./static": {
+			"types": "./dist/static.d.ts",
+			"default": "./src/static.ts"
+		},
+		"./telemetry/otel": {
+			"types": "./dist/telemetry/otel.d.ts",
+			"default": "./src/telemetry/otel.ts"
+		},
+		"./testing": {
+			"types": "./dist/testing.d.ts",
+			"default": "./src/testing.ts"
+		},
+		"./timeout": {
+			"types": "./dist/timeout.d.ts",
+			"default": "./src/timeout.ts"
+		},
+		"./tree": {
+			"types": "./dist/tree.d.ts",
+			"default": "./src/tree.ts"
+		},
+		"./ws/bun": {
+			"types": "./dist/ws/bun.d.ts",
+			"default": "./src/ws/bun.ts"
+		},
+		"./ws/cloudflare": {
+			"types": "./dist/ws/cloudflare.d.ts",
+			"default": "./src/ws/cloudflare.ts"
+		},
+		"./ws/deno": {
+			"types": "./dist/ws/deno.d.ts",
+			"default": "./src/ws/deno.ts"
+		},
+		"./ws/node": {
+			"types": "./dist/ws/node.d.ts",
+			"default": "./src/ws/node.ts"
+		}
+	},
+	"publishConfig": {
+		"access": "public"
 	},
 	"scripts": {
+		"build:types": "tsc -p tsconfig.dts.json",
+		"prepack": "tsc -p tsconfig.dts.json",
 		"test": "vitest run",
 		"test:all": "vitest run --config vitest.all.config.ts",
 		"test:harness": "vitest run --config vitest.harness.config.ts",
@@ -93,8 +237,8 @@
 		"jiti": "2.7.0"
 	},
 	"devDependencies": {
-		"@honey/e2e-surface": "workspace:*",
 		"@honey/e2e-kitchen": "workspace:*",
+		"@honey/e2e-surface": "workspace:*",
 		"@modelcontextprotocol/sdk": "^1.29.0",
 		"@total-typescript/ts-reset": "catalog:",
 		"@types/node": "catalog:",

package/src/body-limit.ts

@@ -1,3 +1,4 @@
+import { namedMiddleware } from "./middleware.ts"
 import { HoneyError } from "./error.ts"
 import type { MiddlewareFn } from "./middleware.ts"
 import { EK, SK } from "./types.ts"
@@ -96,5 +97,5 @@ export function bodyLimit(opts: BodyLimitOptions): MiddlewareFn<{ req: Request }
 		return next()
 	}
 
-	return mw
+	return namedMiddleware("bodyLimit", mw)
 }

package/src/build/index.ts

@@ -108,10 +108,7 @@ const RESOLVED_BUILD_ENTRY = `\0${VIRTUAL_BUILD_ENTRY}`
 
 /* ---- Build plugin factory ---- */
 
-export function createBuildPlugin(
-	buildConfig: HoneyBuildConfig,
-	shared: { entry: string; export: string },
-) {
+export function createBuildPlugin(buildConfig: HoneyBuildConfig, shared: { entry: string; export: string }) {
 	const adapter = adapters[buildConfig.target]
 	const resolvedConfig: ResolvedBuildConfig = {
 		entry: shared.entry,
@@ -131,11 +128,7 @@ export function createBuildPlugin(
 					minify: buildConfig.minify ?? true,
 					outDir: buildConfig.outDir ?? "./dist",
 					rolldownOptions: {
-						external: [
-							...builtinModules,
-							...builtinModules.map((m) => `node:${m}`),
-							...(buildConfig.external ?? []),
-						],
+						external: [...builtinModules, ...builtinModules.map((m) => `node:${m}`), ...(buildConfig.external ?? [])],
 						input: VIRTUAL_BUILD_ENTRY,
 						output: { entryFileNames: "index.js" },
 					},

package/src/cli.ts

@@ -6,8 +6,7 @@ import type { HoneyGoCliConfig, HoneyVitePluginConfig } from "./plugin.ts"
 import { generateAndWrite, type getLastHoneyConfig, resolveHoneyConfig } from "./plugin.ts"
 
 const USAGE =
-	"Usage: honey generate [--watch] [--config <path>] [--app <path>] [flags]\n" +
-	"       honey init [--cf] [--force]"
+	"Usage: honey generate [--watch] [--config <path>] [--app <path>] [flags]\n" + "       honey init [--cf] [--force]"
 
 type CliFlags = {
 	app?: string
@@ -74,7 +73,7 @@ async function loadConfigFromVite(configPath: string): Promise<HoneyVitePluginCo
 	await jiti.import(configPath)
 
 	/* read stashed config from the same module graph */
-	const pluginMod = (await jiti.import("honey/plugin")) as Record<string, unknown>
+	const pluginMod = (await jiti.import("@lovrozagar/honey/plugin")) as Record<string, unknown>
 	const getter = pluginMod.getLastHoneyConfig as typeof getLastHoneyConfig | undefined
 	return getter?.()
 }