@markwharton/pwa-core 1.2.0 → 1.3.0

package/dist/__tests__/client/api.test.js

@@ -0,0 +1,334 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+// Mock fetch globally
+const mockFetch = vitest_1.vi.fn();
+global.fetch = mockFetch;
+(0, vitest_1.describe)('API client', () => {
+    (0, vitest_1.beforeEach)(() => {
+        vitest_1.vi.resetModules();
+        mockFetch.mockReset();
+    });
+    (0, vitest_1.describe)('initApiClient', () => {
+        (0, vitest_1.it)('sets token getter', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'test-token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                text: () => Promise.resolve('{"data": "test"}')
+            });
+            await apiCall('/api/test');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/test', vitest_1.expect.objectContaining({
+                headers: vitest_1.expect.objectContaining({
+                    Authorization: 'Bearer test-token'
+                })
+            }));
+        });
+        (0, vitest_1.it)('sets onUnauthorized callback', async () => {
+            const onUnauthorized = vitest_1.vi.fn();
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token', onUnauthorized });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 401,
+                json: () => Promise.resolve({ error: 'Unauthorized' })
+            });
+            await (0, vitest_1.expect)(apiCall('/api/test')).rejects.toThrow();
+            (0, vitest_1.expect)(onUnauthorized).toHaveBeenCalled();
+        });
+    });
+    (0, vitest_1.describe)('apiCall', () => {
+        (0, vitest_1.it)('makes authenticated request', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'my-token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                text: () => Promise.resolve('{"result": "success"}')
+            });
+            const result = await apiCall('/api/endpoint');
+            (0, vitest_1.expect)(result).toEqual({ result: 'success' });
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/endpoint', vitest_1.expect.objectContaining({
+                headers: vitest_1.expect.objectContaining({
+                    'Content-Type': 'application/json',
+                    Authorization: 'Bearer my-token'
+                })
+            }));
+        });
+        (0, vitest_1.it)('handles request without token', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => null });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                text: () => Promise.resolve('{}')
+            });
+            await apiCall('/api/public');
+            const headers = mockFetch.mock.calls[0][1].headers;
+            (0, vitest_1.expect)(headers.Authorization).toBeUndefined();
+        });
+        (0, vitest_1.it)('throws ApiError on non-ok response', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            const { ApiError: LocalApiError } = await Promise.resolve().then(() => __importStar(require('../../client/apiError')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 400,
+                json: () => Promise.resolve({ error: 'Invalid input' })
+            });
+            await (0, vitest_1.expect)(apiCall('/api/test')).rejects.toThrow(LocalApiError);
+            await (0, vitest_1.expect)(apiCall('/api/test')).rejects.toMatchObject({
+                status: 400,
+                message: 'Invalid input'
+            });
+        });
+        (0, vitest_1.it)('handles empty response body', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                text: () => Promise.resolve('')
+            });
+            const result = await apiCall('/api/delete');
+            (0, vitest_1.expect)(result).toEqual({});
+        });
+        (0, vitest_1.it)('handles JSON parse error in error response', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 500,
+                json: () => Promise.reject(new Error('Invalid JSON'))
+            });
+            await (0, vitest_1.expect)(apiCall('/api/test')).rejects.toMatchObject({
+                status: 500,
+                message: 'Request failed'
+            });
+        });
+        (0, vitest_1.it)('uses default error message when error field is missing', async () => {
+            const { initApiClient, apiCall } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 400,
+                json: () => Promise.resolve({ message: 'not the error field' })
+            });
+            await (0, vitest_1.expect)(apiCall('/api/test')).rejects.toMatchObject({
+                status: 400,
+                message: 'Request failed'
+            });
+        });
+    });
+    (0, vitest_1.describe)('HTTP method helpers', () => {
+        (0, vitest_1.beforeEach)(async () => {
+            const { initApiClient } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                text: () => Promise.resolve('{"data": "test"}')
+            });
+        });
+        (0, vitest_1.it)('apiGet uses GET method', async () => {
+            const { apiGet } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiGet('/api/resource');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'GET'
+            }));
+        });
+        (0, vitest_1.it)('apiPost uses POST method with body', async () => {
+            const { apiPost } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPost('/api/resource', { name: 'test' });
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'POST',
+                body: '{"name":"test"}'
+            }));
+        });
+        (0, vitest_1.it)('apiPost works without body', async () => {
+            const { apiPost } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPost('/api/resource');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'POST',
+                body: undefined
+            }));
+        });
+        (0, vitest_1.it)('apiPut uses PUT method with body', async () => {
+            const { apiPut } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPut('/api/resource', { name: 'updated' });
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'PUT',
+                body: '{"name":"updated"}'
+            }));
+        });
+        (0, vitest_1.it)('apiPut works without body', async () => {
+            const { apiPut } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPut('/api/resource');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'PUT',
+                body: undefined
+            }));
+        });
+        (0, vitest_1.it)('apiPatch uses PATCH method with body', async () => {
+            const { apiPatch } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPatch('/api/resource', { field: 'value' });
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'PATCH',
+                body: '{"field":"value"}'
+            }));
+        });
+        (0, vitest_1.it)('apiPatch works without body', async () => {
+            const { apiPatch } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiPatch('/api/resource');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'PATCH',
+                body: undefined
+            }));
+        });
+        (0, vitest_1.it)('apiDelete uses DELETE method', async () => {
+            const { apiDelete } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            await apiDelete('/api/resource');
+            (0, vitest_1.expect)(mockFetch).toHaveBeenCalledWith('/api/resource', vitest_1.expect.objectContaining({
+                method: 'DELETE'
+            }));
+        });
+    });
+    (0, vitest_1.describe)('apiCallSafe', () => {
+        (0, vitest_1.it)('returns ok response with data', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                status: 200,
+                text: () => Promise.resolve('{"user": "john"}')
+            });
+            const result = await apiCallSafe('/api/user');
+            (0, vitest_1.expect)(result.ok).toBe(true);
+            (0, vitest_1.expect)(result.status).toBe(200);
+            (0, vitest_1.expect)(result.data).toEqual({ user: 'john' });
+        });
+        (0, vitest_1.it)('preserves actual status code', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                status: 201,
+                text: () => Promise.resolve('{"id": "123"}')
+            });
+            const result = await apiCallSafe('/api/create');
+            (0, vitest_1.expect)(result.status).toBe(201);
+        });
+        (0, vitest_1.it)('returns error response for non-ok status', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 404,
+                json: () => Promise.resolve({ error: 'Not found' })
+            });
+            const result = await apiCallSafe('/api/missing');
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.status).toBe(404);
+            (0, vitest_1.expect)(result.error).toBe('Not found');
+        });
+        (0, vitest_1.it)('handles network errors', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockRejectedValue(new Error('Network failure'));
+            const result = await apiCallSafe('/api/test');
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.status).toBe(0);
+            (0, vitest_1.expect)(result.error).toBe('Network error');
+        });
+        (0, vitest_1.it)('calls onUnauthorized for 401', async () => {
+            const onUnauthorized = vitest_1.vi.fn();
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token', onUnauthorized });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 401,
+                json: () => Promise.resolve({ error: 'Token expired' })
+            });
+            await apiCallSafe('/api/protected');
+            (0, vitest_1.expect)(onUnauthorized).toHaveBeenCalled();
+        });
+        (0, vitest_1.it)('handles empty success response', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                status: 204,
+                text: () => Promise.resolve('')
+            });
+            const result = await apiCallSafe('/api/delete');
+            (0, vitest_1.expect)(result.ok).toBe(true);
+            (0, vitest_1.expect)(result.status).toBe(204);
+            (0, vitest_1.expect)(result.data).toBeUndefined();
+        });
+        (0, vitest_1.it)('handles request without token', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => null });
+            mockFetch.mockResolvedValue({
+                ok: true,
+                status: 200,
+                text: () => Promise.resolve('{}')
+            });
+            await apiCallSafe('/api/public');
+            const headers = mockFetch.mock.calls[0][1].headers;
+            (0, vitest_1.expect)(headers.Authorization).toBeUndefined();
+        });
+        (0, vitest_1.it)('uses default error message when error field is missing', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 400,
+                json: () => Promise.resolve({ details: 'not the error field' })
+            });
+            const result = await apiCallSafe('/api/test');
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.error).toBe('Request failed');
+        });
+        (0, vitest_1.it)('handles JSON parse error in error response', async () => {
+            const { initApiClient, apiCallSafe } = await Promise.resolve().then(() => __importStar(require('../../client/api')));
+            initApiClient({ getToken: () => 'token' });
+            mockFetch.mockResolvedValue({
+                ok: false,
+                status: 500,
+                json: () => Promise.reject(new Error('Invalid JSON'))
+            });
+            const result = await apiCallSafe('/api/test');
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.error).toBe('Request failed');
+        });
+    });
+});

package/dist/__tests__/client/apiError.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/client/apiError.test.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const apiError_1 = require("../../client/apiError");
+(0, vitest_1.describe)('ApiError', () => {
+    (0, vitest_1.describe)('constructor', () => {
+        (0, vitest_1.it)('sets status, message, and name', () => {
+            const error = new apiError_1.ApiError(404, 'Not found');
+            (0, vitest_1.expect)(error.status).toBe(404);
+            (0, vitest_1.expect)(error.message).toBe('Not found');
+            (0, vitest_1.expect)(error.name).toBe('ApiError');
+        });
+        (0, vitest_1.it)('sets optional details', () => {
+            const error = new apiError_1.ApiError(400, 'Validation failed', 'Field "email" is required');
+            (0, vitest_1.expect)(error.details).toBe('Field "email" is required');
+        });
+        (0, vitest_1.it)('extends Error', () => {
+            const error = new apiError_1.ApiError(500, 'Server error');
+            (0, vitest_1.expect)(error).toBeInstanceOf(Error);
+        });
+    });
+    (0, vitest_1.describe)('isUnauthorized', () => {
+        (0, vitest_1.it)('returns true for 401 status', () => {
+            const error = new apiError_1.ApiError(401, 'Unauthorized');
+            (0, vitest_1.expect)(error.isUnauthorized()).toBe(true);
+        });
+        (0, vitest_1.it)('returns false for other statuses', () => {
+            (0, vitest_1.expect)(new apiError_1.ApiError(400, 'Bad request').isUnauthorized()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(403, 'Forbidden').isUnauthorized()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(404, 'Not found').isUnauthorized()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(500, 'Server error').isUnauthorized()).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)('isNotFound', () => {
+        (0, vitest_1.it)('returns true for 404 status', () => {
+            const error = new apiError_1.ApiError(404, 'Not found');
+            (0, vitest_1.expect)(error.isNotFound()).toBe(true);
+        });
+        (0, vitest_1.it)('returns false for other statuses', () => {
+            (0, vitest_1.expect)(new apiError_1.ApiError(400, 'Bad request').isNotFound()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(401, 'Unauthorized').isNotFound()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(403, 'Forbidden').isNotFound()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(500, 'Server error').isNotFound()).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)('isBadRequest', () => {
+        (0, vitest_1.it)('returns true for 400 status', () => {
+            const error = new apiError_1.ApiError(400, 'Bad request');
+            (0, vitest_1.expect)(error.isBadRequest()).toBe(true);
+        });
+        (0, vitest_1.it)('returns false for other statuses', () => {
+            (0, vitest_1.expect)(new apiError_1.ApiError(401, 'Unauthorized').isBadRequest()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(403, 'Forbidden').isBadRequest()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(404, 'Not found').isBadRequest()).toBe(false);
+            (0, vitest_1.expect)(new apiError_1.ApiError(500, 'Server error').isBadRequest()).toBe(false);
+        });
+    });
+});

package/dist/__tests__/http/responses.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/http/responses.test.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const responses_1 = require("../../http/responses");
+const status_1 = require("../../http/status");
+(0, vitest_1.describe)('HTTP response helpers', () => {
+    (0, vitest_1.describe)('badRequestResponse', () => {
+        (0, vitest_1.it)('returns 400 status with error message', () => {
+            const response = (0, responses_1.badRequestResponse)('Invalid input');
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.BAD_REQUEST);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Invalid input' });
+        });
+    });
+    (0, vitest_1.describe)('unauthorizedResponse', () => {
+        (0, vitest_1.it)('returns 401 status with default message', () => {
+            const response = (0, responses_1.unauthorizedResponse)();
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.UNAUTHORIZED);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Unauthorized' });
+        });
+        (0, vitest_1.it)('returns 401 status with custom message', () => {
+            const response = (0, responses_1.unauthorizedResponse)('Token expired');
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.UNAUTHORIZED);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Token expired' });
+        });
+    });
+    (0, vitest_1.describe)('forbiddenResponse', () => {
+        (0, vitest_1.it)('returns 403 status with default message', () => {
+            const response = (0, responses_1.forbiddenResponse)();
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.FORBIDDEN);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Forbidden' });
+        });
+        (0, vitest_1.it)('returns 403 status with custom message', () => {
+            const response = (0, responses_1.forbiddenResponse)('Admin access required');
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.FORBIDDEN);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Admin access required' });
+        });
+    });
+    (0, vitest_1.describe)('notFoundResponse', () => {
+        (0, vitest_1.it)('returns 404 status with resource name', () => {
+            const response = (0, responses_1.notFoundResponse)('User');
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.NOT_FOUND);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'User not found' });
+        });
+    });
+    (0, vitest_1.describe)('conflictResponse', () => {
+        (0, vitest_1.it)('returns 409 status with error message', () => {
+            const response = (0, responses_1.conflictResponse)('Resource already exists');
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.CONFLICT);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Resource already exists' });
+        });
+    });
+    (0, vitest_1.describe)('handleFunctionError', () => {
+        (0, vitest_1.it)('logs error and returns 500 response', () => {
+            const mockContext = {
+                error: vitest_1.vi.fn()
+            };
+            const error = new Error('Database connection failed');
+            const response = (0, responses_1.handleFunctionError)(error, mockContext);
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.INTERNAL_ERROR);
+            (0, vitest_1.expect)(response.jsonBody).toEqual({ error: 'Internal server error' });
+            (0, vitest_1.expect)(mockContext.error).toHaveBeenCalledWith('Function error: Database connection failed');
+        });
+        (0, vitest_1.it)('handles non-Error objects', () => {
+            const mockContext = {
+                error: vitest_1.vi.fn()
+            };
+            const response = (0, responses_1.handleFunctionError)('string error', mockContext);
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.INTERNAL_ERROR);
+            (0, vitest_1.expect)(mockContext.error).toHaveBeenCalledWith('Function error: Unknown error');
+        });
+        (0, vitest_1.it)('handles null/undefined errors', () => {
+            const mockContext = {
+                error: vitest_1.vi.fn()
+            };
+            const response = (0, responses_1.handleFunctionError)(null, mockContext);
+            (0, vitest_1.expect)(response.status).toBe(status_1.HTTP_STATUS.INTERNAL_ERROR);
+            (0, vitest_1.expect)(mockContext.error).toHaveBeenCalledWith('Function error: Unknown error');
+        });
+    });
+    (0, vitest_1.describe)('isNotFoundError', () => {
+        (0, vitest_1.it)('returns true for 404 error', () => {
+            const error = Object.assign(new Error('Not found'), { statusCode: 404 });
+            (0, vitest_1.expect)((0, responses_1.isNotFoundError)(error)).toBe(true);
+        });
+        (0, vitest_1.it)('returns false for other status codes', () => {
+            const error = Object.assign(new Error('Conflict'), { statusCode: 409 });
+            (0, vitest_1.expect)((0, responses_1.isNotFoundError)(error)).toBe(false);
+        });
+        (0, vitest_1.it)('returns false for non-Error objects', () => {
+            (0, vitest_1.expect)((0, responses_1.isNotFoundError)({ statusCode: 404 })).toBe(false);
+        });
+        (0, vitest_1.it)('returns false for errors without statusCode', () => {
+            (0, vitest_1.expect)((0, responses_1.isNotFoundError)(new Error('Not found'))).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)('isConflictError', () => {
+        (0, vitest_1.it)('returns true for 409 error', () => {
+            const error = Object.assign(new Error('Conflict'), { statusCode: 409 });
+            (0, vitest_1.expect)((0, responses_1.isConflictError)(error)).toBe(true);
+        });
+        (0, vitest_1.it)('returns false for other status codes', () => {
+            const error = Object.assign(new Error('Not found'), { statusCode: 404 });
+            (0, vitest_1.expect)((0, responses_1.isConflictError)(error)).toBe(false);
+        });
+        (0, vitest_1.it)('returns false for non-Error objects', () => {
+            (0, vitest_1.expect)((0, responses_1.isConflictError)({ statusCode: 409 })).toBe(false);
+        });
+        (0, vitest_1.it)('returns false for errors without statusCode', () => {
+            (0, vitest_1.expect)((0, responses_1.isConflictError)(new Error('Conflict'))).toBe(false);
+        });
+    });
+});

package/dist/__tests__/http/status.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/http/status.test.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const status_1 = require("../../http/status");
+(0, vitest_1.describe)('HTTP_STATUS', () => {
+    (0, vitest_1.it)('has correct status codes', () => {
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.OK).toBe(200);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.CREATED).toBe(201);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.NO_CONTENT).toBe(204);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.BAD_REQUEST).toBe(400);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.UNAUTHORIZED).toBe(401);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.FORBIDDEN).toBe(403);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.NOT_FOUND).toBe(404);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.CONFLICT).toBe(409);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.GONE).toBe(410);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.INTERNAL_ERROR).toBe(500);
+        (0, vitest_1.expect)(status_1.HTTP_STATUS.SERVICE_UNAVAILABLE).toBe(503);
+    });
+    (0, vitest_1.it)('is immutable (const assertion)', () => {
+        // TypeScript const assertion makes the object readonly
+        // This test verifies the values haven't been accidentally modified
+        const statusCodes = Object.values(status_1.HTTP_STATUS);
+        (0, vitest_1.expect)(statusCodes).toContain(200);
+        (0, vitest_1.expect)(statusCodes).toContain(404);
+        (0, vitest_1.expect)(statusCodes).toContain(500);
+    });
+});

package/dist/__tests__/server/auth/apiKey.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/server/auth/apiKey.test.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const apiKey_1 = require("../../../server/auth/apiKey");
+(0, vitest_1.describe)('API Key utilities', () => {
+    (0, vitest_1.describe)('extractApiKey', () => {
+        (0, vitest_1.it)('extracts API key from X-API-Key header', () => {
+            const request = {
+                headers: {
+                    get: (name) => name === 'X-API-Key' ? 'test-api-key' : null
+                }
+            };
+            (0, vitest_1.expect)((0, apiKey_1.extractApiKey)(request)).toBe('test-api-key');
+        });
+        (0, vitest_1.it)('returns null when header is missing', () => {
+            const request = {
+                headers: {
+                    get: () => null
+                }
+            };
+            (0, vitest_1.expect)((0, apiKey_1.extractApiKey)(request)).toBeNull();
+        });
+    });
+    (0, vitest_1.describe)('hashApiKey', () => {
+        (0, vitest_1.it)('produces consistent SHA-256 hash', () => {
+            const key = 'test-api-key';
+            const hash1 = (0, apiKey_1.hashApiKey)(key);
+            const hash2 = (0, apiKey_1.hashApiKey)(key);
+            (0, vitest_1.expect)(hash1).toBe(hash2);
+        });
+        (0, vitest_1.it)('produces 64-character hex string', () => {
+            const hash = (0, apiKey_1.hashApiKey)('any-key');
+            (0, vitest_1.expect)(hash).toHaveLength(64);
+            (0, vitest_1.expect)(hash).toMatch(/^[a-f0-9]+$/);
+        });
+        (0, vitest_1.it)('produces different hashes for different keys', () => {
+            const hash1 = (0, apiKey_1.hashApiKey)('key1');
+            const hash2 = (0, apiKey_1.hashApiKey)('key2');
+            (0, vitest_1.expect)(hash1).not.toBe(hash2);
+        });
+    });
+    (0, vitest_1.describe)('validateApiKey', () => {
+        (0, vitest_1.it)('returns ok for matching key', () => {
+            const key = 'valid-api-key';
+            const hash = (0, apiKey_1.hashApiKey)(key);
+            const result = (0, apiKey_1.validateApiKey)(key, hash);
+            (0, vitest_1.expect)(result.ok).toBe(true);
+        });
+        (0, vitest_1.it)('returns error for mismatched key', () => {
+            const hash = (0, apiKey_1.hashApiKey)('correct-key');
+            const result = (0, apiKey_1.validateApiKey)('wrong-key', hash);
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.error).toBe('Invalid API key');
+        });
+        (0, vitest_1.it)('returns error for empty key', () => {
+            const hash = (0, apiKey_1.hashApiKey)('some-key');
+            const result = (0, apiKey_1.validateApiKey)('', hash);
+            (0, vitest_1.expect)(result.ok).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)('generateApiKey', () => {
+        (0, vitest_1.it)('generates 64-character hex string', () => {
+            const key = (0, apiKey_1.generateApiKey)();
+            (0, vitest_1.expect)(key).toHaveLength(64);
+            (0, vitest_1.expect)(key).toMatch(/^[a-f0-9]+$/);
+        });
+        (0, vitest_1.it)('generates unique keys', () => {
+            const key1 = (0, apiKey_1.generateApiKey)();
+            const key2 = (0, apiKey_1.generateApiKey)();
+            (0, vitest_1.expect)(key1).not.toBe(key2);
+        });
+        (0, vitest_1.it)('generates cryptographically random keys', () => {
+            const keys = new Set();
+            for (let i = 0; i < 100; i++) {
+                keys.add((0, apiKey_1.generateApiKey)());
+            }
+            (0, vitest_1.expect)(keys.size).toBe(100);
+        });
+    });
+});

package/dist/__tests__/server/auth/token.test.d.ts

@@ -0,0 +1 @@
+export {};