@suveren/gateway 0.38.0 → 0.40.0

package/node_modules/zod/src/v4/classic/tests/function.test.ts

@@ -32,38 +32,38 @@ test("function inference 1", () => {
   expectTypeOf<func1>().toEqualTypeOf<(k: string) => number>();
 });
 
-// test("method parsing", () => {
-//   const methodObject = z.object({
-//     property: z.number(),
-//     method: z
-//       .function()
-//       .input(z.tuple([z.string()]))
-//       .output(z.number()),
-//   });
-//   const methodInstance = {
-//     property: 3,
-//     method: function (s: string) {
-//       return s.length + this.property;
-//     },
-//   };
-//   const parsed = methodObject.parse(methodInstance);
-//   expect(parsed.method("length=8")).toBe(11); // 8 length + 3 property
-// });
+test("method parsing", () => {
+  const methodObject = z.object({
+    property: z.number(),
+    method: z
+      .function()
+      .input(z.tuple([z.string()]))
+      .output(z.number()),
+  });
+  const methodInstance = {
+    property: 3,
+    method: function (s: string) {
+      return s.length + this.property;
+    },
+  };
+  const parsed = methodObject.parse(methodInstance);
+  expect(parsed.method("length=8")).toBe(11); // 8 length + 3 property
+});
 
-// test("async method parsing", async () => {
-//   const methodObject = z.object({
-//     property: z.number(),
-//     method: z.function().input(z.string()).output(z.promise(z.number())),
-//   });
-//   const methodInstance = {
-//     property: 3,
-//     method: async function (s: string) {
-//       return s.length + this.property;
-//     },
-//   };
-//   const parsed = methodObject.parse(methodInstance);
-//   expect(await parsed.method("length=8")).toBe(11); // 8 length + 3 property
-// });
+test("async method parsing", async () => {
+  const methodObject = z.object({
+    property: z.number(),
+    method: z.function().input([z.string()]).output(z.promise(z.number())),
+  });
+  const methodInstance = {
+    property: 3,
+    method: async function (s: string) {
+      return s.length + this.property;
+    },
+  };
+  const parsed = methodObject.parse(methodInstance);
+  expect(await parsed.method("length=8")).toBe(11); // 8 length + 3 property
+});
 
 test("args method", () => {
   const t1 = z.function();
@@ -130,6 +130,46 @@ test("valid function run", () => {
   });
 });
 
+const args3 = [
+  z.object({
+    f1: z.number(),
+    f2: z.string().nullable(),
+    f3: z.array(z.boolean().optional()).optional(),
+  }),
+] as const;
+const returns3 = z.union([z.string(), z.number()]);
+
+const func3 = z.function({
+  input: args3,
+  output: returns3,
+});
+
+test("function inference 3", () => {
+  type func3 = (typeof func3)["_input"];
+
+  expectTypeOf<func3>().toEqualTypeOf<
+    (arg: {
+      f3?: (boolean | undefined)[] | undefined;
+      f1: number;
+      f2: string | null;
+    }) => string | number
+  >();
+});
+
+test("valid function run", () => {
+  const validFunc3Instance = func3.implement((_x) => {
+    _x.f2;
+    _x.f3![0];
+    return "adf" as any;
+  });
+
+  validFunc3Instance({
+    f1: 21,
+    f2: "asdf",
+    f3: [true, false],
+  });
+});
+
 test("input validation error", () => {
   const schema = z.function({
     input: z.tuple([z.string()]),
@@ -146,12 +186,12 @@ test("input validation error", () => {
     expect(e.issues).toMatchInlineSnapshot(`
       [
         {
-          "code": "invalid_type",
-          "expected": "string",
-          "message": "Invalid input: expected string, received undefined",
-          "path": [
-            0,
-          ],
+          "code": "too_small",
+          "inclusive": true,
+          "message": "Too small: expected array to have >=1 items",
+          "minimum": 1,
+          "origin": "array",
+          "path": [],
         },
       ]
     `);
@@ -234,6 +274,58 @@ test("function with async refinements", async () => {
   expect(results).toEqual(["fail", "success"]);
 });
 
+test("implement async with transforms", async () => {
+  const typeGuard = (data: string): data is "1234" => data === "1234";
+  const codeSchema = z.string().transform((data, ctx) => {
+    if (typeGuard(data)) {
+      return data;
+    } else {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "Invalid code",
+      });
+      return z.NEVER;
+    }
+  });
+  const inputSchema = z.object({
+    code: codeSchema,
+  });
+  const outputSchema = z.object({
+    data: z.array(z.string()).default([]),
+  });
+  const fnImplementation = async (data: z.infer<typeof inputSchema>): Promise<z.infer<typeof outputSchema>> => {
+    return {
+      data: [data.code],
+    };
+  };
+  const schema = z.function().input([inputSchema]).output(outputSchema);
+
+  const func = schema.implementAsync(fnImplementation);
+  type TheInterface = {
+    myFunction: (data: z.infer<typeof inputSchema>) => Promise<z.infer<typeof outputSchema>>;
+  };
+  const theImplementation: TheInterface = {
+    myFunction: func,
+  };
+  const results = [];
+  try {
+    await theImplementation.myFunction({
+      code: "1234",
+    });
+    results.push("success");
+  } catch (_) {
+    results.push("fail");
+  }
+  try {
+    await func({ data: "asdflkjasdflkjsf" } as any);
+    results.push("success");
+  } catch (_) {
+    results.push("fail");
+  }
+
+  expect(results).toEqual(["success", "fail"]);
+});
+
 test("non async function with async refinements should fail", async () => {
   const func = z
     .function()
@@ -266,3 +358,34 @@ test("extra parameters with rest", () => {
   const filteredList = ["apple", "orange", "pear", "banana", "strawberry"].filter(maxLength5);
   expect(filteredList.length).toEqual(2);
 });
+
+test("implement exposes the function schema at runtime", () => {
+  const schema = z.function({ input: [z.string()], output: z.number() });
+  const fn = schema.implement((s) => s.length);
+
+  // Deliberately absent from implement()'s return type: reaching `_zod` takes a cast, so an implemented function never reads as a schema to TypeScript even though it does at runtime.
+  type HasZod = "_zod" extends keyof typeof fn ? true : false;
+  expectTypeOf<HasZod>().toEqualTypeOf<false>();
+
+  expect((fn as any)._zod).toBe(schema._zod);
+  expect((fn as any)._zod.def.input).toBe(schema._def.input);
+  expect((fn as any)._zod.def.output).toBe(schema._def.output);
+  expect(Object.keys(fn)).toEqual([]);
+  expect(Object.getOwnPropertyDescriptor(fn, "_zod")).toMatchObject({ enumerable: false, writable: false });
+  expect(fn("asdf")).toBe(4);
+});
+
+test("implementAsync exposes the function schema at runtime", async () => {
+  const schema = z.function({ input: [z.string()], output: z.promise(z.number()) });
+  const fn = schema.implementAsync(async (s) => s.length);
+
+  expect((fn as any)._zod).toBe(schema._zod);
+  await expect(fn("asdf")).resolves.toBe(4);
+});
+
+test("parsing through a function schema exposes it the same way", () => {
+  const schema = z.function({ input: [z.string()], output: z.number() });
+  const { handler } = z.object({ handler: schema }).parse({ handler: (s: string) => s.length });
+
+  expect((handler as any)._zod).toBe(schema._zod);
+});

package/node_modules/zod/src/v4/classic/tests/global-config.test.ts

@@ -0,0 +1,32 @@
+import { afterEach, expect, test } from "vitest";
+import * as z from "zod/v4";
+import * as core from "zod/v4/core";
+
+// `globalConfig` is attached to `globalThis.__zod_globalConfig` so that a
+// single config object is shared across CJS/ESM builds and across multiple
+// bundled copies of Zod in a monorepo. This mirrors the existing
+// `globalRegistry` -> `globalThis.__zod_globalRegistry` treatment.
+//
+// See #5789 for the footgun this fixes: users with both CJS and ESM instances of Zod loaded had to call `z.config({ jitless: true })` twice — once per instance — because each module-scope `globalConfig` was a different object. With this change, one call updates state seen by every loaded copy.
+
+afterEach(() => {
+  // Don't leak config mutations into other test files.
+  delete core.globalConfig.jitless;
+});
+
+test("globalConfig is singleton and attached to globalThis", () => {
+  expect(core.globalConfig).toBe((globalThis as any).__zod_globalConfig);
+});
+
+test("z.config writes are observed via globalThis.__zod_globalConfig", () => {
+  z.config({ jitless: true });
+  expect((globalThis as any).__zod_globalConfig.jitless).toBe(true);
+});
+
+test("pre-set globalThis.__zod_globalConfig is preserved on import", () => {
+  // Object identity is preserved across reloads of the module: anyone who pre-populates `globalThis.__zod_globalConfig` before Zod loads (e.g. an inline script before the bundle) keeps that exact object as the source of truth. Mutating it directly is equivalent to z.config().
+  const direct = (globalThis as any).__zod_globalConfig;
+  direct.jitless = true;
+  expect(core.globalConfig.jitless).toBe(true);
+  expect(z.config()).toBe(core.globalConfig);
+});

package/node_modules/zod/src/v4/classic/tests/hash.test.ts

@@ -0,0 +1,67 @@
+import { expect, expectTypeOf, test } from "vitest";
+import { type ZodCustomStringFormat, hash } from "zod"; // adjust path as needed
+
+test("hash() API — types and runtime across all alg/enc combinations", async () => {
+  const { createHash } = await import("node:crypto");
+
+  type Alg = "md5" | "sha1" | "sha256" | "sha384" | "sha512";
+  // type Enc = "hex" | "base64" | "base64url";
+
+  const toB64Url = (b64: string) => b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+
+  const makeDigests = (alg: Alg, input: string) => {
+    const buf = createHash(alg).update(input).digest();
+    const hex = buf.toString("hex");
+    const base64 = buf.toString("base64");
+    const base64url = toB64Url(base64);
+    return { hex, base64, base64url };
+  };
+
+  const algs: ReadonlyArray<Alg> = ["md5", "sha1", "sha256", "sha384", "sha512"];
+  const input = "zodasklfjaasdf";
+
+  // --- Type-level checks (ensure the literal format string is encoded in the return type)
+  expectTypeOf(hash("md5")).toEqualTypeOf<ZodCustomStringFormat<"md5_hex">>();
+  expectTypeOf(hash("sha1")).toEqualTypeOf<ZodCustomStringFormat<"sha1_hex">>();
+  expectTypeOf(hash("sha256", { enc: "base64" as const })).toEqualTypeOf<ZodCustomStringFormat<"sha256_base64">>();
+  expectTypeOf(hash("sha384", { enc: "base64url" as const })).toEqualTypeOf<
+    ZodCustomStringFormat<"sha384_base64url">
+  >();
+
+  // Test generic format types are correctly inferred and Enc defaults to "hex"
+  expectTypeOf(hash("sha256")).toEqualTypeOf<ZodCustomStringFormat<"sha256_hex">>();
+
+  // --- Runtime matrix (success + a few sharp-edged failures per combo)
+  for (const alg of algs) {
+    const { hex, base64, base64url } = makeDigests(alg, input);
+
+    // Success cases
+    expect(hash(alg).parse(hex)).toBe(hex); // default enc=hex
+    expect(hash(alg, { enc: "hex" }).parse(hex)).toBe(hex);
+    expect(hash(alg, { enc: "base64" }).parse(base64)).toBe(base64);
+    expect(hash(alg, { enc: "base64url" }).parse(base64url)).toBe(base64url);
+
+    // Failure cases (wrong encoding to schema)
+    expect(() => hash(alg, { enc: "hex" }).parse(base64)).toThrow();
+    expect(() => hash(alg, { enc: "base64" }).parse(hex)).toThrow();
+    expect(() => hash(alg, { enc: "base64url" }).parse(base64)).toThrow();
+
+    // Encoding-specific failures hex: uppercase allowed, wrong length should fail
+    hash(alg, { enc: "hex" }).parse(hex.toUpperCase());
+    expect(() => hash(alg, { enc: "hex" }).parse(hex.slice(0, -1))).toThrow();
+
+    // base64: missing required padding should fail (only for algorithms that require padding)
+    if (base64.includes("=")) {
+      const base64NoPad = base64.replace(/=+$/g, "");
+      expect(() => hash(alg, { enc: "base64" }).parse(base64NoPad)).toThrow();
+    }
+
+    // base64url: adding padding or using invalid characters should fail
+    expect(() => hash(alg, { enc: "base64url" }).parse(base64url + "=")).toThrow();
+    expect(() => hash(alg, { enc: "base64url" }).parse(base64url + "!")).toThrow();
+
+    // Param object present but enc omitted should still default to hex at runtime
+    const schemaWithEmptyParams = hash(alg, {} as any);
+    expect(schemaWithEmptyParams.parse(hex)).toBe(hex);
+  }
+});

package/node_modules/zod/src/v4/classic/tests/iban.test.ts

@@ -0,0 +1,81 @@
+import { describe, expect, test } from "vitest";
+import * as z from "zod";
+
+describe("z.iban", () => {
+  const valid: [string, string][] = [
+    ["Norway (15, minimum)", "NO9386011117947"],
+    ["Belgium (16)", "BE68539007547034"],
+    ["Netherlands (18)", "NL91ABNA0417164300"],
+    ["Germany (22)", "DE89370400440532013000"],
+    ["Great Britain (22)", "GB29NWBK60161331926819"],
+    ["Turkey (26)", "TR610000100000000000000001"],
+    ["France (27)", "FR1420041010050500013M02606"],
+    ["Cyprus (28)", "CY17002001280000001200527600"],
+    ["Malta (31)", "MT84MALT011000012345MTLCAST001S"],
+    ["Maximum length (34)", "AA73AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"],
+    ["Maximum length mixed (34)", "ZZ560123456789ABCDEFGHIJKLMNOPQRST"],
+  ];
+
+  test.each(valid)("accepts %s", (_label, n) => {
+    expect(z.iban().parse(n)).toBe(n);
+  });
+
+  test("rejects lowercase characters", () => {
+    expect(() => z.iban().parse("no9386011117947")).toThrow();
+    expect(() => z.iban().parse("de89370400440532013000")).toThrow();
+    expect(() => z.iban().parse("FR1420041010050500013m02606")).toThrow();
+  });
+
+  test("rejects spaces and hyphens", () => {
+    expect(() => z.iban().parse("NO93 8601 1117 947")).toThrow();
+    expect(() => z.iban().parse(" DE89370400440532013000")).toThrow();
+    expect(() => z.iban().parse("DE89370400440532013000 ")).toThrow();
+    expect(() => z.iban().parse("NO93-8601-1117-947")).toThrow();
+    expect(() => z.iban().parse("DE89-3704-0044-0532-0130-00")).toThrow();
+  });
+
+  test("rejects special characters", () => {
+    expect(() => z.iban().parse("NO938601111794!")).toThrow();
+    expect(() => z.iban().parse("DE8937040044053201300@")).toThrow();
+    expect(() => z.iban().parse("")).toThrow();
+  });
+
+  test("rejects inputs outside length bounds (15-34)", () => {
+    expect(() => z.iban().parse("NO938601111794")).toThrow();
+    expect(() => z.iban().parse("AA73AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA")).toThrow();
+  });
+
+  test("rejects invalid check digits (checksum failure)", () => {
+    expect(() => z.iban().parse("NO9386011117948")).toThrow();
+    expect(() => z.iban().parse("DE89370400440532013001")).toThrow();
+    expect(() => z.iban().parse("FR1420041010050500013M02607")).toThrow();
+  });
+
+  test("rejects check digits outside 02-98", () => {
+    // mod 97 alone accepts all three; `98 - remainder` can only ever emit 02-98
+    expect(() => z.iban().parse("DE00000000000000000066")).toThrow();
+    expect(() => z.iban().parse("DE01000000000000000048")).toThrow();
+    expect(() => z.iban().parse("DE99000000000000000030")).toThrow();
+  });
+
+  test("carries the shape regex as its JSON Schema pattern", () => {
+    expect(z.toJSONSchema(z.iban())).toMatchObject({
+      format: "iban",
+      pattern: z.regexes.iban.source,
+    });
+  });
+
+  test("round-trips through JSON Schema with the checksum intact", () => {
+    const schema = z.fromJSONSchema(z.toJSONSchema(z.iban()));
+    expect(schema.safeParse("DE89370400440532013000").success).toBe(true);
+    expect(schema.safeParse("DE89370400440532013001").success).toBe(false);
+  });
+
+  test("error message references IBAN", () => {
+    const result = z.iban().safeParse("not-an-iban");
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      expect(result.error.issues[0]?.message).toMatch(/IBAN/i);
+    }
+  });
+});

package/node_modules/zod/src/v4/classic/tests/in-out.test.ts

@@ -0,0 +1,159 @@
+import { describe, expect, test } from "vitest";
+import * as z from "zod";
+
+describe("z.input / z.output", () => {
+  test("flat codec: input/output give the right side", () => {
+    const c = z.codec(z.string(), z.bigint(), {
+      decode: (s) => BigInt(s),
+      encode: (n) => n.toString(),
+    });
+    expect(z.input(c).parse("1")).toBe("1");
+    expect(z.output(c).parse(1n)).toBe(1n);
+  });
+
+  test("codec nested in object: output works recursively (regression #5224)", () => {
+    const c = z.codec(z.string(), z.bigint(), {
+      decode: (s) => BigInt(s),
+      encode: (n) => n.toString(),
+    });
+    const obj = z.object({ b: c });
+
+    const decoded = z.output(obj);
+    expect(decoded.parse({ b: 1n })).toEqual({ b: 1n });
+
+    const encoded = z.input(obj);
+    expect(encoded.parse({ b: "1" })).toEqual({ b: "1" });
+  });
+
+  test("nested across record / map: matches the use case in #5224", () => {
+    const keyCodec = z.codec(z.string(), z.enum(["a", "b"]), {
+      decode: (s) => (s === "a" || s === "b" ? s : z.NEVER),
+      encode: (s) => s,
+    });
+    const valueObject = z.object({
+      n: z.codec(z.string(), z.bigint(), { decode: (s) => BigInt(s), encode: (n) => n.toString() }),
+    });
+
+    const fullCodec = z.codec(
+      z.record(z.input(keyCodec), z.input(valueObject)),
+      z.map(z.output(keyCodec), z.output(valueObject)),
+      {
+        decode: (input) => {
+          const m = new Map<"a" | "b", { n: bigint }>();
+          for (const [k, v] of Object.entries(input)) {
+            m.set(keyCodec.decode(k), valueObject.decode(v));
+          }
+          return m;
+        },
+        encode: (input) => {
+          const out: Record<string, { n: string }> = {};
+          for (const [k, v] of input.entries()) {
+            out[keyCodec.encode(k)] = valueObject.encode(v);
+          }
+          return out;
+        },
+      }
+    );
+
+    expect(fullCodec.decode({ a: { n: "1" } })).toEqual(new Map([["a", { n: 1n }]]));
+    expect(fullCodec.encode(new Map([["b", { n: 2n }]]))).toEqual({ b: { n: "2" } });
+  });
+
+  test("schema without pipes is returned with identity (no clone)", () => {
+    const s = z.object({ a: z.string() });
+    expect(z.input(s)).toBe(s);
+    expect(z.output(s)).toBe(s);
+  });
+
+  test("z.output carries checks attached to a pipe", () => {
+    const c = z
+      .codec(z.string(), z.number().int(), { decode: Number, encode: String })
+      .refine((n) => n > 10, { error: "gt10" });
+    const obj = z.object({ list: z.array(c) });
+    const decoded = z.output(obj);
+
+    expect(decoded.parse({ list: [50] })).toEqual({ list: [50] });
+    // The pipe's own check and the one already on its out side both survive, in that order.
+    expect(() => decoded.parse({ list: [5] })).toThrow("gt10");
+    expect(() => decoded.parse({ list: [50.5] })).toThrow();
+    // A pipe's checks run on the decoded value in both directions, so encode enforces them too.
+    expect(() => decoded.encode({ list: [5] })).toThrow("gt10");
+    // Carrying them clones the out side rather than mutating it.
+    expect(c._zod.def.out._zod.def.checks).toHaveLength(1);
+  });
+
+  test("z.input drops a pipe's checks, which constrain a value the input side never produces", () => {
+    const c = z.codec(z.string(), z.number(), { decode: Number, encode: String }).refine((n) => n > 10);
+    expect(z.input(c).parse("5")).toBe("5");
+
+    // Control: a check that isn't attached to a pipe is left alone.
+    expect(() => z.input(z.object({ s: z.string().min(2) })).parse({ s: "a" })).toThrow();
+  });
+
+  test("z.input resolves past a preprocess transform, which is not a real input side", () => {
+    const p = z.preprocess((v) => String(v), z.string().min(5));
+    const encoded = z.input(p);
+
+    expect(encoded.parse("abcde")).toBe("abcde");
+    // The bare transform used to come back here: it validated nothing and re-ran the preprocessor.
+    expect(() => encoded.parse(1)).toThrow();
+    expect(() => encoded.parse("abc")).toThrow();
+    // The same resolution the JSON Schema emitter already makes for this schema.
+    expect(z.toJSONSchema(p, { io: "input" })).toMatchObject({ type: "string", minLength: 5 });
+
+    // A check on the pipe itself travels with whichever side wins.
+    const checked = z.preprocess((v) => String(v), z.string()).refine((s) => s.startsWith("ok"));
+    expect(z.input(checked).parse("okay")).toBe("okay");
+    expect(() => z.input(checked).parse("nope")).toThrow();
+
+    // Control: a codec has two real sides, so its input side is still `in`, by identity.
+    const c = z.codec(z.string(), z.number(), { decode: Number, encode: String });
+    expect(z.input(c)).toBe(c._zod.def.in);
+  });
+
+  test("a wrapper's stored value survives only on the side it belongs to", () => {
+    const c = z.codec(z.string(), z.number(), { decode: Number, encode: String });
+
+    // A default and a catch hold output-side values, so the input projection sheds them.
+    expect(z.input(c.default(7)).parse(undefined)).toBe(undefined);
+    expect(z.input(c.default(7)).parse("1")).toBe("1");
+    expect(() => z.input(c.catch(9)).parse(123 as any)).toThrow();
+    expect(z.input(c.catch(9)).parse("1")).toBe("1");
+    expect(z.output(c.default(7)).parse(undefined)).toBe(7);
+    expect(z.output(c.catch(9)).parse("zz" as any)).toBe(9);
+
+    // A prefault is fed through the schema, so it is input-side and the output projection sheds it.
+    expect(z.input(c.prefault("5")).parse(undefined)).toBe("5");
+    expect(() => z.output(c.prefault("5")).parse(undefined as any)).toThrow();
+    expect(z.output(c.prefault("5")).parse(3)).toBe(3);
+  });
+
+  test("a wrapper over a pipe-free schema keeps both its value and its identity", () => {
+    const d = z.string().default("x");
+    const k = z.string().catch("y");
+    const f = z.string().prefault("z");
+
+    expect(z.input(d)).toBe(d);
+    expect(z.input(d).parse(undefined)).toBe("x");
+    expect(z.input(k)).toBe(k);
+    expect(z.output(f)).toBe(f);
+
+    const obj = z.object({ a: z.string().default("q") });
+    expect(z.input(obj)).toBe(obj);
+    expect(z.input(obj).parse({})).toEqual({ a: "q" });
+  });
+
+  test("runtime `z.input` agrees with type-level `z.input<T>`", () => {
+    const c = z.codec(z.string(), z.bigint(), {
+      decode: (s) => BigInt(s),
+      encode: (n) => n.toString(),
+    });
+    const obj = z.object({ b: c });
+
+    // Runtime: parse the input shape.
+    const parsed = z.input(obj).parse({ b: "1" });
+    // Type: matches the declared input type.
+    const asType: z.input<typeof obj> = parsed;
+    expect(asType).toEqual({ b: "1" });
+  });
+});