@suveren/gateway 0.38.0 → 0.40.0

package/node_modules/zod/src/v4/classic/tests/default.test.ts

@@ -311,3 +311,145 @@ test("partial should not clobber defaults", () => {
     }
   `);
 });
+
+test("defaulted object schema returns shallow clone", () => {
+  const schema = z
+    .object({
+      a: z.string(),
+    })
+    .default({ a: "x" });
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  expect(result1).not.toBe(result2);
+  expect(result1).toEqual(result2);
+});
+
+test("defaulted array schema returns shallow clone", () => {
+  const schema = z.array(z.string()).default(["x"]);
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  expect(result1).not.toBe(result2);
+  expect(result1).toEqual(result2);
+});
+
+test("defaulted Map schema returns shallow clone", () => {
+  const schema = z.map(z.string(), z.number()).default(new Map([["a", 1]]));
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  expect(result1).not.toBe(result2);
+  expect(result1).toEqual(result2);
+});
+
+test("defaulted Set schema returns shallow clone", () => {
+  const schema = z.set(z.string()).default(new Set(["x"]));
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  expect(result1).not.toBe(result2);
+  expect(result1).toEqual(result2);
+});
+
+test("mutations on defaulted Map do not affect subsequent parses", () => {
+  const schema = z.map(z.string(), z.number()).default(new Map());
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  result1.set("key1", 1);
+  result2.set("key2", 2);
+  expect(result1.size).toBe(1);
+  expect(result1.get("key1")).toBe(1);
+  expect(result1.has("key2")).toBe(false);
+  expect(result2.size).toBe(1);
+  expect(result2.get("key2")).toBe(2);
+  expect(result2.has("key1")).toBe(false);
+});
+
+test("mutations on defaulted Set do not affect subsequent parses", () => {
+  const schema = z.set(z.string()).default(new Set());
+  const result1 = schema.parse(undefined);
+  const result2 = schema.parse(undefined);
+  result1.add("item1");
+  result2.add("item2");
+  expect(result1.size).toBe(1);
+  expect(result1.has("item1")).toBe(true);
+  expect(result1.has("item2")).toBe(false);
+  expect(result2.size).toBe(1);
+  expect(result2.has("item2")).toBe(true);
+  expect(result2.has("item1")).toBe(false);
+});
+
+test("direction-aware defaults", () => {
+  const schema = z.string().default("hello");
+
+  // Forward direction (regular parse): defaults should be applied
+  expect(schema.parse(undefined)).toBe("hello");
+  expect(schema.parse("hello")).toBe("hello");
+
+  // Reverse direction (encode): defaults should NOT be applied, undefined should fail validation
+  expect(() => z.encode(schema, undefined as any)).toThrow();
+
+  // But valid values should still work in reverse
+  expect(z.safeEncode(schema, "world")).toMatchInlineSnapshot(`
+    {
+      "data": "world",
+      "success": true,
+    }
+  `);
+  expect(z.safeEncode(schema, undefined as any)).toMatchInlineSnapshot(`
+    {
+      "error": [ZodError: [
+      {
+        "expected": "string",
+        "code": "invalid_type",
+        "path": [],
+        "message": "Invalid input: expected string, received undefined"
+      }
+    ]],
+      "success": false,
+    }
+  `);
+});
+
+test("default factory runs once per parse inside a container", () => {
+  let calls = 0;
+  const schema = z.object({
+    a: z.string().default(() => {
+      calls++;
+      return "d";
+    }),
+  });
+
+  expect(schema.parse({})).toEqual({ a: "d" });
+  expect(calls).toBe(1);
+
+  // the key is present, so the factory has nothing to produce
+  expect(schema.parse({ a: "given" })).toEqual({ a: "given" });
+  expect(calls).toBe(1);
+});
+
+test("prefault factory runs once per parse inside a container", () => {
+  let calls = 0;
+  const schema = z.object({
+    a: z.string().prefault(() => {
+      calls++;
+      return "d";
+    }),
+  });
+
+  expect(schema.parse({})).toEqual({ a: "d" });
+  expect(calls).toBe(1);
+});
+
+test("default factory does not run at compile time", () => {
+  let calls = 0;
+  const compiled = z.compile(
+    z.object({
+      a: z.string().default(() => {
+        calls++;
+        return "d";
+      }),
+    })
+  );
+
+  expect(calls).toBe(0);
+  expect(compiled.parse({})).toEqual({ a: "d" });
+  expect(calls).toBe(1);
+});

package/node_modules/zod/src/v4/classic/tests/describe-meta-checks.test.ts

@@ -0,0 +1,27 @@
+import { describe, expect, it } from "vitest";
+import * as z from "../index.js";
+
+describe("z.describe() check", () => {
+  it("registers description in globalRegistry", () => {
+    const schema = z.string().check(z.describe("A string"));
+    expect(z.globalRegistry.get(schema)?.description).toBe("A string");
+  });
+});
+
+describe("z.meta() check", () => {
+  it("registers metadata in globalRegistry", () => {
+    const schema = z.number().check(z.meta({ title: "Age", description: "User's age" }));
+    const meta = z.globalRegistry.get(schema);
+    expect(meta?.title).toBe("Age");
+    expect(meta?.description).toBe("User's age");
+  });
+});
+
+describe("combined usage", () => {
+  it("works with multiple checks", () => {
+    const schema = z.string().check(z.describe("Email address"), z.meta({ title: "Email" }));
+    const meta = z.globalRegistry.get(schema);
+    expect(meta?.description).toBe("Email address");
+    expect(meta?.title).toBe("Email");
+  });
+});

package/node_modules/zod/src/v4/classic/tests/detached-methods.test.ts

@@ -0,0 +1,221 @@
+import { expect, test, vi } from "vitest";
+import * as z from "zod/v4";
+
+/**
+ * Schema methods are exposed in a way that works when detached from the
+ * schema instance — `const opt = schema.optional; opt()` must produce a
+ * working `ZodOptional`, not a corrupt one. This pattern is used in real
+ * code (e.g. `arr.map(schema.parse)`, `arr.map(schema.optional)`,
+ * destructuring inside utility functions).
+ *
+ * This test caught a regression in colinhacks/zod#5870 where a memory
+ * optimization moved methods to the prototype and made `this`-binding
+ * required, silently breaking any detached usage.
+ */
+
+const probeArgs: Record<string, unknown[]> = {
+  // ZodType
+  optional: [],
+  exactOptional: [],
+  nullable: [],
+  nullish: [],
+  array: [],
+  describe: ["x"],
+  brand: [],
+  readonly: [],
+  default: ["fallback"],
+  catch: ["fallback"],
+  // _ZodString
+  min: [1],
+  max: [10],
+  length: [5],
+  nonempty: [],
+  trim: [],
+  toLowerCase: [],
+  toUpperCase: [],
+  // ZodString format methods
+  email: [],
+  url: [],
+  uuid: [],
+  cuid: [],
+  cuid2: [],
+  ulid: [],
+  base64: [],
+  base64url: [],
+  ipv4: [],
+  ipv6: [],
+  // ZodNumber
+  int: [],
+  positive: [],
+  negative: [],
+  finite: [],
+};
+
+test("detached parse-family methods work without `this` binding", () => {
+  const schema = z.string();
+  const { parse, safeParse } = schema;
+
+  expect(parse("hello")).toBe("hello");
+  expect(safeParse("hello").success).toBe(true);
+});
+
+test("detached schema.optional() returns a working ZodOptional", () => {
+  const schema = z.string();
+  const opt = schema.optional;
+
+  const detached = opt();
+
+  expect(detached).toBeInstanceOf(z.ZodOptional);
+  expect(detached.safeParse("hello").success).toBe(true);
+  expect(detached.safeParse(undefined).success).toBe(true);
+  expect(detached.safeParse(123).success).toBe(false);
+});
+
+test("detached schema.nullable() returns a working ZodNullable", () => {
+  const schema = z.string();
+  const nul = schema.nullable;
+
+  const detached = nul();
+
+  expect(detached).toBeInstanceOf(z.ZodNullable);
+  expect(detached.safeParse("hello").success).toBe(true);
+  expect(detached.safeParse(null).success).toBe(true);
+  expect(detached.safeParse(123).success).toBe(false);
+});
+
+test("detached schema.array() returns a working ZodArray", () => {
+  const schema = z.string();
+  const arr = schema.array;
+
+  const detached = arr();
+
+  expect(detached).toBeInstanceOf(z.ZodArray);
+  expect(detached.safeParse(["a", "b"]).success).toBe(true);
+  expect(detached.safeParse([1, 2]).success).toBe(false);
+});
+
+test("detached schema.describe() returns a described schema", () => {
+  const schema = z.string();
+  const describe = schema.describe;
+
+  const described = describe("hello world");
+
+  expect(described.description).toBe("hello world");
+});
+
+test("detached refinement still validates", () => {
+  const schema = z.string();
+  const refine = schema.refine;
+
+  const refined = refine((s: string) => s.startsWith("x"), "must start with x");
+
+  expect(refined.safeParse("xhello").success).toBe(true);
+  expect(refined.safeParse("hello").success).toBe(false);
+});
+
+test("detached chained calls work — schema.optional then parse", () => {
+  const schema = z.string();
+  const opt = schema.optional;
+  const optionalSchema = opt();
+  const { parse } = optionalSchema;
+
+  expect(parse("hi")).toBe("hi");
+  expect(parse(undefined)).toBe(undefined);
+});
+
+test("detached parse can be called as a free function", () => {
+  const schema = z.string();
+  const parse = schema.parse;
+  const inputs = ["a", "b", "c"];
+
+  const results = inputs.map((v) => parse(v));
+
+  expect(results).toEqual(["a", "b", "c"]);
+});
+
+test("detached methods on z.number() work", () => {
+  const schema = z.number();
+
+  const min = schema.min;
+  const max = schema.max;
+  const positive = schema.positive;
+
+  expect(min(5).safeParse(3).success).toBe(false);
+  expect(max(5).safeParse(7).success).toBe(false);
+  expect(positive().safeParse(-1).success).toBe(false);
+});
+
+test("detached object methods work", () => {
+  const schema = z.object({ a: z.string(), b: z.number() });
+
+  const pick = schema.pick;
+  const omit = schema.omit;
+  const partial = schema.partial;
+  const exactPartial = schema.exactPartial;
+  const extend = schema.extend;
+
+  expect(Object.keys(pick({ a: true })._zod.def.shape)).toEqual(["a"]);
+  expect(Object.keys(omit({ a: true })._zod.def.shape)).toEqual(["b"]);
+  expect(partial().safeParse({}).success).toBe(true);
+  expect(exactPartial().safeParse({}).success).toBe(true);
+  expect(exactPartial().safeParse({ a: undefined }).success).toBe(false);
+  const extended = extend({ c: z.boolean() });
+  expect(Object.keys(extended._zod.def.shape).sort()).toEqual(["a", "b", "c"]);
+});
+
+// Sweep across many builder methods at once. If any of them break with the `const m = schema.foo; m(...)` pattern, this test will report which.
+test("broad sweep: detaching builder methods does not throw or produce a corrupt schema", () => {
+  const stringSchema = z.string();
+  const numberSchema = z.number();
+
+  const broken: Array<{ method: string; reason: string }> = [];
+
+  for (const [methodName, args] of Object.entries(probeArgs)) {
+    const target: any = methodName in stringSchema ? stringSchema : methodName in numberSchema ? numberSchema : null;
+    if (!target) continue;
+
+    const detached = target[methodName] as Function | undefined;
+    if (typeof detached !== "function") continue;
+
+    try {
+      const result = detached(...args);
+      // If the detached call returned a schema, sanity-check it parses its base type. (e.g. `optional()` should accept its inner type.)
+      if (result && typeof result === "object" && "_zod" in result && typeof (result as any).safeParse === "function") {
+        const probeValue = target === stringSchema ? "x" : 1;
+        const r = (result as any).safeParse(probeValue);
+        // success or a clean failure are both fine — we only fail on throw or on a schema with corrupt internal state (innerType undefined etc).
+        if (r === undefined || (typeof r === "object" && !("success" in r))) {
+          broken.push({ method: methodName, reason: "safeParse returned malformed result" });
+        }
+      }
+    } catch (err: any) {
+      broken.push({ method: methodName, reason: err?.message ?? String(err) });
+    }
+  }
+
+  expect(broken).toEqual([]);
+});
+
+test("vi.spyOn wraps a prototype method that was never read", () => {
+  const schema = z.object({ a: z.string() });
+  const spy = vi.spyOn(schema, "safeParse").mockReturnValue({ success: true, data: { a: "mocked" } });
+
+  expect(schema.safeParse({})).toEqual({ success: true, data: { a: "mocked" } });
+  expect(spy).toHaveBeenCalledOnce();
+
+  spy.mockRestore();
+  expect(schema.safeParse({ a: "x" })).toEqual({ success: true, data: { a: "x" } });
+  expect(schema.safeParse({}).success).toBe(false);
+
+  const json = vi.spyOn(schema, "toJSONSchema").mockReturnValue({ type: "null" } as any);
+  expect(schema.toJSONSchema()).toEqual({ type: "null" });
+  json.mockRestore();
+  expect(schema.toJSONSchema().type).toBe("object");
+});
+
+test("a getter member answers a bare read without a receiver", () => {
+  const schema = z.string();
+  const get = Object.getOwnPropertyDescriptor(Object.getPrototypeOf(schema), "spa")!.get!;
+  expect(get.call(undefined)).toBeUndefined();
+  expect(schema.spa).toBe(schema.safeParseAsync);
+});