@springbrand/http 0.1.0-alpha.4 → 0.1.0-alpha.6

package/.agents/skills/dune-react-http/SKILL.md

@@ -5,6 +5,8 @@ description: Use SpringBrand shared HTTP contracts, Axios request clients, Query
 
 # Dune React HTTP
 
+Shared error codes, canonical statuses and their HTTP statuses are defined in `@springbrand/errors`; this package reads them and does not restate them.
+
 Read the installed declarations and README before configuring a client. Public entry points own different runtime needs; import only the capability needed.
 
 | Entry point | Responsibility |
@@ -13,7 +15,7 @@ Read the installed declarations and README before configuring a client. Public e
 | @springbrand/http/errors | Error definitions, cancellation and transient failure classification |
 | @springbrand/http/client | Axios client and standard HTTP error parsing |
 | @springbrand/http/query | Optional TanStack React Query integration |
-| @springbrand/http/catalog | Project error catalog: typed HttpError, Zod response schemas, client decoder (zod peer) |
+| @springbrand/http/catalog | Project error catalog: typed HttpError, Zod response schemas, client decoder (zod peer). Codes registered in `@springbrand/errors` must use the registered HTTP status |
 | @springbrand/http/hono | Hono responders with TypedResponse types for zod-openapi (hono peer) |
 | @springbrand/http/types | Type-only entry for every public type, so consumers emitting declarations stay portable |
 | @springbrand/http/server | Standard Response helpers, bounded body reading, If-Match, Content-Disposition, log diagnostics and service authentication |
@@ -24,7 +26,7 @@ Create one client per trusted API origin. Inject getToken; do not copy Token sto
 
 Pass params for query serialization and signal/timeoutMs for cancellation/deadlines. Null/undefined query values are omitted; use a string for literal null. Do not duplicate query encoding or timeout controllers in domain clients.
 
-Use get/post/put/patch/delete for payloads, request for data plus status and headers. Explicitly choose json, text or blob for endpoints without the standard success envelope. FormData owns its boundary. Pass Query's signal through; do not wrap cancellation as network failure.
+Use get/post/put/patch/delete for payloads, request for data plus status and headers. Explicitly choose json, text or blob for endpoints without the standard success envelope. FormData owns its boundary. The client sends no User-Agent of its own (Safari and Firefox would otherwise require every cross-origin API to allow it in CORS); set one explicitly only for a server-to-server call that needs it. Pass Query's signal through; do not wrap cancellation as network failure.
 
 ## Error handling
 

package/dist/catalog.js

@@ -1,3 +1,4 @@
+import { isRegisteredErrorCode, httpStatusOf } from "@springbrand/errors";
 import { z } from "zod";
 import { ApiError } from "./errors.js";
 import { parseHttpError } from "./response.js";
@@ -24,6 +25,9 @@ function defineErrorCatalog(definitions, options = {}) {
     if (definition.status !== 0 && !(Number.isInteger(definition.status) && definition.status >= 400 && definition.status <= 599)) {
       throw new RangeError(`Error ${code} must use status 0 or a 4xx/5xx status`);
     }
+    if (isRegisteredErrorCode(code) && definition.status !== (httpStatusOf(code) ?? 0)) {
+      throw new RangeError(`Error ${code} must use status ${httpStatusOf(code) ?? 0} registered in @springbrand/errors`);
+    }
   }
   const codes = Object.keys(definitions).filter((code) => definitions[code].status !== 0);
   for (const code of Object.keys(detailSchemas)) {

package/dist/client.js

@@ -57,6 +57,7 @@ function createHttpClient(config) {
       if (options.body instanceof FormData) headers.delete("Content-Type");
       if (timeout > 0) timer = setTimeout(() => controller.abort(sdkError("REQUEST_TIMEOUT", { status: 0, kind: "timeout" })), timeout);
       const requestHeaders = new axios.AxiosHeaders(Object.fromEntries(headers));
+      if (!requestHeaders.has("User-Agent")) requestHeaders.set("User-Agent", false);
       if (options.body instanceof FormData) requestHeaders.setContentType("multipart/form-data");
       const response = await transport.request({
         url: url.href,

package/dist/server/body.js

@@ -1,6 +1,7 @@
+import { httpStatusOf } from "@springbrand/errors";
 import { ApiError } from "../errors.js";
-const invalidJson = (cause) => new ApiError({ status: 400, code: "REQUEST_INVALID_JSON", message: "Expected a JSON object", kind: "http", cause });
-const tooLarge = () => new ApiError({ status: 413, code: "REQUEST_PAYLOAD_TOO_LARGE", message: "Request body is too large", kind: "http" });
+const invalidJson = (cause) => new ApiError({ status: httpStatusOf("REQUEST_INVALID_JSON"), code: "REQUEST_INVALID_JSON", message: "Expected a JSON object", kind: "http", cause });
+const tooLarge = () => new ApiError({ status: httpStatusOf("REQUEST_PAYLOAD_TOO_LARGE"), code: "REQUEST_PAYLOAD_TOO_LARGE", message: "Request body is too large", kind: "http" });
 async function readJson(request) {
   try {
     return await request.json();
@@ -53,7 +54,7 @@ function requireIfMatchRevision(request, subject) {
   const match = /^"([1-9]\d*)"$/.exec(request.headers.get("if-match") ?? "");
   const revision = match ? Number(match[1]) : Number.NaN;
   if (!Number.isSafeInteger(revision)) {
-    throw new ApiError({ status: 400, code: "REQUEST_INVALID_INPUT", message: `If-Match must contain the current ${subject}, for example "3"`, kind: "http" });
+    throw new ApiError({ status: httpStatusOf("REQUEST_INVALID_INPUT"), code: "REQUEST_INVALID_INPUT", message: `If-Match must contain the current ${subject}, for example "3"`, kind: "http" });
   }
   return revision;
 }

package/dist/server/response.js

@@ -1,3 +1,4 @@
+import { httpStatusOf } from "@springbrand/errors";
 import { ApiError, errorDefinitions } from "../errors.js";
 function responseHeaders(options) {
   const requestId = options.requestId ?? crypto.randomUUID();
@@ -22,7 +23,7 @@ function toErrorResponse(error, options = {}) {
   if (error instanceof ApiError && error.kind === "http" && Number.isInteger(error.status) && error.status >= 400 && error.status <= 599 && /^[A-Z][A-Z0-9_]{0,127}$/.test(error.code) && !["NETWORK_ERROR", "REQUEST_TIMEOUT", "RESPONSE_TOO_LARGE"].includes(error.code)) {
     return fail({ status: error.status, code: error.code, message: error.message, errors: error.errors, details: error.details, requestId: options.requestId ?? error.requestId, headers: options.headers });
   }
-  return fail({ status: 500, code: "INTERNAL_ERROR", message: errorDefinitions.INTERNAL_ERROR, ...options });
+  return fail({ status: httpStatusOf("INTERNAL_ERROR"), code: "INTERNAL_ERROR", message: errorDefinitions.INTERNAL_ERROR, ...options });
 }
 export {
   fail,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@springbrand/http",
-  "version": "0.1.0-alpha.4",
+  "version": "0.1.0-alpha.6",
   "license": "MIT",
   "type": "module",
   "publishConfig": {
@@ -58,16 +58,10 @@
     },
     "./package.json": "./package.json"
   },
-  "scripts": {
-    "build": "vite build && tsc -p tsconfig.build.json",
-    "watch": "vite build --watch",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src tests --ext ts --max-warnings 0",
-    "test": "vitest run"
-  },
   "dependencies": {
     "axios": "1.20.0",
-    "content-disposition": "2.0.1"
+    "content-disposition": "2.0.1",
+    "@springbrand/errors": "^0.1.0-alpha.0"
   },
   "peerDependencies": {
     "@tanstack/react-query": "^5.104.1",
@@ -95,5 +89,12 @@
     "vite": "^5.4.19",
     "vitest": "3.2.6",
     "zod": "4.6.5"
+  },
+  "scripts": {
+    "build": "vite build && tsc -p tsconfig.build.json",
+    "watch": "vite build --watch",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src tests --ext ts --max-warnings 0",
+    "test": "vitest run"
   }
-}
+}