@luckystack/server 0.7.6 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0] - 2026-07-27
+
+### Added
+
+- Routed GET API calls can carry a lossless typed payload through the reserved `__luckystack_data` query value while public key-per-query callers remain compatible.
+
 ## [0.7.6] - 2026-07-23
 
 ### Fixed

package/dist/index.js

@@ -9,7 +9,7 @@ import {
 
 // src/createServer.ts
 import http from "http";
-import { registerBindAddress, registerBoundAddress, writeBootUuid, startBootUuidHeartbeat, getLogger as getLogger13, getProjectConfig as getProjectConfig15, tryCatch as tryCatch10, tryCatchSync as tryCatchSync2, resolveEnvKey as resolveEnvKey5, dispatchHook as dispatchHook8 } from "@luckystack/core";
+import { registerBindAddress, registerBoundAddress, writeBootUuid, startBootUuidHeartbeat, getLogger as getLogger13, getProjectConfig as getProjectConfig15, tryCatch as tryCatch10, tryCatchSync as tryCatchSync3, resolveEnvKey as resolveEnvKey5, dispatchHook as dispatchHook8 } from "@luckystack/core";
 
 // src/httpHandler.ts
 import { randomUUID } from "crypto";
@@ -24,7 +24,7 @@ import {
   normalizeOrigin,
   readSession as readSession3,
   tryCatch as tryCatch7,
-  tryCatchSync
+  tryCatchSync as tryCatchSync2
 } from "@luckystack/core";
 
 // src/logSanitize.ts
@@ -921,7 +921,8 @@ import {
   dispatchHook as dispatchHook3,
   extractTokenFromRequest,
   getLogger as getLogger4,
-  tryCatch as tryCatch4
+  tryCatch as tryCatch4,
+  tryCatchSync
 } from "@luckystack/core";
 import { handleHttpApiRequest } from "@luckystack/api";
 
@@ -1038,8 +1039,25 @@ var handleApiRoute = async ({
       res.end(JSON.stringify(response));
       return true;
     }
-    const apiData = typeof params === "object" ? { ...params } : {};
+    let apiData = typeof params === "object" ? { ...params } : {};
     delete apiData.stream;
+    const routedData = apiData.__luckystack_data;
+    if (typeof routedData === "string") {
+      const [parseError, parsed] = tryCatchSync(() => JSON.parse(routedData));
+      if (parseError || parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        const response = {
+          status: "error",
+          httpStatus: 400,
+          message: "api.invalidRequestFormat",
+          errorCode: "api.invalidRequestFormat"
+        };
+        res.setHeader("Content-Type", "application/json");
+        res.writeHead(400);
+        res.end(JSON.stringify(response));
+        return true;
+      }
+      apiData = { ...parsed };
+    }
     const requesterIp = resolveRequesterIp(req);
     const result = await handleHttpApiRequest({
       name: apiName,
@@ -1390,7 +1408,7 @@ var setSecurityHeaders = (req, res, origin) => {
   res.setHeader("X-Content-Type-Options", securityHeaders.contentTypeOptions);
   const builder = getSecurityHeadersBuilder();
   if (builder) {
-    const [error] = tryCatchSync(() => {
+    const [error] = tryCatchSync2(() => {
       const custom = builder(req);
       if (custom) {
         for (const [name, value] of Object.entries(custom)) {
@@ -1509,7 +1527,7 @@ var handleHttpRequestInner = async (req, res, options) => {
   );
   const url = req.url ?? "/";
   const [routePathRaw, queryStringRaw] = url.split("?");
-  const [decodeError, decodedPath] = tryCatchSync(() => decodeURIComponent(routePathRaw ?? "/"));
+  const [decodeError, decodedPath] = tryCatchSync2(() => decodeURIComponent(routePathRaw ?? "/"));
   if (decodeError || decodedPath === null) {
     res.statusCode = 400;
     res.setHeader("Content-Type", "text/plain");
@@ -2398,8 +2416,8 @@ var listenLuckyStackServer = (httpServer, ip, port, callback) => new Promise((re
         process.once("exit", clearDevServerInfo);
       }
       if (attemptPort !== startPort && !production) {
-        const configuredCallbackBase = tryCatchSync2(() => getProjectConfig15().oauthCallbackBase)[1] ?? "";
-        const callbackPort = tryCatchSync2(() => {
+        const configuredCallbackBase = tryCatchSync3(() => getProjectConfig15().oauthCallbackBase)[1] ?? "";
+        const callbackPort = tryCatchSync3(() => {
           const callbackUrl = new URL(configuredCallbackBase);
           return callbackUrl.port || (callbackUrl.protocol === "https:" ? "443" : "80");
         })[1] ?? "";