@sungen/driver-api 3.2.22-beta.1 → 3.2.22-beta.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sungen/driver-api",
-  "version": "3.2.22-beta.1",
+  "version": "3.2.22-beta.2",
   "description": "Sungen API capability — the @api annotation, API catalog, OpenAPI import + `sungen api import`, and the specs/api.ts runtime template. Plugs into @sun-asterisk/sungen via the capability SPI.",
   "main": "src/index.ts",
   "types": "src/index.ts",
@@ -13,7 +13,7 @@
   "author": "eqe team (engineer & quality) — Sun Asterisk",
   "license": "MIT",
   "dependencies": {
-    "@sun-asterisk/sungen": "3.2.22-beta.1",
+    "@sun-asterisk/sungen": "3.2.22-beta.2",
     "commander": "^14.0.2",
     "yaml": "^2.8.2"
   },

package/src/api-catalog.ts

@@ -176,6 +176,13 @@ export function validateApiEntry(entry: ApiEntry, datasourceNames: string[] | nu
     // files are always sent as multipart; an explicit json/form encoding contradicts that.
     if (entry.encoding && entry.encoding !== 'multipart') errs.push(`api "${entry.name}": has files: but encoding: ${entry.encoding} — a file upload must be multipart (omit encoding).`);
   }
+  // A GET/HEAD request may not carry a body — fetch/undici refuses one, so the runtime would have to
+  // drop it. Catch the contradiction HERE, in the catalog the author wrote, rather than let a request
+  // go out silently shorter than the entry says it is.
+  const carriesBody = entry.body !== undefined || !!(entry.files && Object.keys(entry.files).length) || !!entry.bodyFile;
+  if ((entry.method === 'GET' || entry.method === 'HEAD') && carriesBody) {
+    errs.push(`api "${entry.name}": a ${entry.method} request cannot carry a body — remove body:/files:/bodyFile:, or change method: to POST/PUT/PATCH.`);
+  }
   if (entry.bodyFile && !entry.bodyFile.path) errs.push(`api "${entry.name}": bodyFile has no path.`);
   if (entry.bodyFile && entry.files) errs.push(`api "${entry.name}": use either files: (multipart form parts) or bodyFile: (raw binary body), not both.`);
   if (entry.bodyFile && entry.body !== undefined) errs.push(`api "${entry.name}": bodyFile: (raw binary body) cannot combine with a body:.`);