@suveren/gateway 0.38.0 → 0.40.0

package/node_modules/zod/src/v4/mini/tests/object.test.ts

@@ -1,5 +1,5 @@
 import { expect, expectTypeOf, test } from "vitest";
-import * as z from "zod/v4-mini";
+import * as z from "zod/mini";
 
 test("z.object", () => {
   const a = z.object({
@@ -17,7 +17,7 @@ test("z.object", () => {
   expectTypeOf<a>().toEqualTypeOf<{
     name: string;
     age: number;
-    points?: number;
+    points?: number | undefined;
     "test?": boolean;
   }>();
   expect(z.parse(a, { name: "john", age: 30, "test?": true })).toEqual({
@@ -89,6 +89,12 @@ test("z.keyof", () => {
   type UserKeys = z.infer<typeof userKeysSchema>;
   expectTypeOf<UserKeys>().toEqualTypeOf<"name" | "age" | "email">();
   expect(userKeysSchema).toBeDefined();
+  expect(userKeysSchema._zod.def.type).toBe("enum");
+  expect(userKeysSchema._zod.def.entries).toEqual({
+    name: "name",
+    age: "age",
+    email: "email",
+  });
   expect(z.safeParse(userKeysSchema, "name").success).toBe(true);
   expect(z.safeParse(userKeysSchema, "age").success).toBe(true);
   expect(z.safeParse(userKeysSchema, "email").success).toBe(true);
@@ -103,17 +109,47 @@ test("z.extend", () => {
   expectTypeOf<ExtendedUser>().toEqualTypeOf<{
     name: string;
     age: number;
-    email?: string;
+    email?: string | undefined;
     isAdmin: boolean;
   }>();
   expect(extendedSchema).toBeDefined();
   expect(z.safeParse(extendedSchema, { name: "John", age: 30, isAdmin: true }).success).toBe(true);
 });
 
+test("z.merge", () => {
+  const mergedSchema = z.merge(userSchema, z.object({ isAdmin: z.boolean() }));
+  type MergedUser = z.infer<typeof mergedSchema>;
+  expectTypeOf<MergedUser>().toEqualTypeOf<{
+    name: string;
+    age: number;
+    email?: string | undefined;
+    isAdmin: boolean;
+  }>();
+  expect(z.safeParse(mergedSchema, { name: "John", age: 30, isAdmin: true }).success).toBe(true);
+
+  // the second schema's catchall wins, matching classic
+  const strict = z.merge(userSchema, z.strictObject({ isAdmin: z.boolean() }));
+  expect(z.safeParse(strict, { name: "John", age: 30, isAdmin: true, extra: 1 }).success).toBe(false);
+
+  expect(() =>
+    // @ts-expect-error second argument is a schema, not a shape
+    z.merge(userSchema, { isAdmin: z.boolean() })
+  ).toThrow("Invalid input to merge");
+});
+
+test("z.safeExtend", () => {
+  const extended = z.safeExtend(userSchema, { name: z.string() });
+  expect(z.safeParse(extended, { name: "John", age: 30 }).success).toBe(true);
+  type Extended = z.infer<typeof extended>;
+  expectTypeOf<Extended>().toEqualTypeOf<{ name: string; age: number; email?: string | undefined }>();
+  // @ts-expect-error
+  z.safeExtend(userSchema, { name: z.number() });
+});
+
 test("z.pick", () => {
   const pickedSchema = z.pick(userSchema, { name: true, email: true });
   type PickedUser = z.infer<typeof pickedSchema>;
-  expectTypeOf<PickedUser>().toEqualTypeOf<{ name: string; email?: string }>();
+  expectTypeOf<PickedUser>().toEqualTypeOf<{ name: string; email?: string | undefined }>();
   expect(pickedSchema).toBeDefined();
   expect(z.safeParse(pickedSchema, { name: "John", email: "john@example.com" }).success).toBe(true);
 });
@@ -134,9 +170,9 @@ test("z.partial", () => {
   const partialSchema = z.partial(userSchema);
   type PartialUser = z.infer<typeof partialSchema>;
   expectTypeOf<PartialUser>().toEqualTypeOf<{
-    name?: string;
-    age?: number;
-    email?: string;
+    name?: string | undefined;
+    age?: number | undefined;
+    email?: string | undefined;
   }>();
   expect(z.safeParse(partialSchema, { name: "John" }).success).toBe(true);
 });
@@ -145,14 +181,85 @@ test("z.partial with mask", () => {
   const partialSchemaWithMask = z.partial(userSchema, { name: true });
   type PartialUserWithMask = z.infer<typeof partialSchemaWithMask>;
   expectTypeOf<PartialUserWithMask>().toEqualTypeOf<{
-    name?: string;
+    name?: string | undefined;
     age: number;
-    email?: string;
+    email?: string | undefined;
   }>();
   expect(z.safeParse(partialSchemaWithMask, { age: 30 }).success).toBe(true);
   expect(z.safeParse(partialSchemaWithMask, { name: "John" }).success).toBe(false);
 });
 
+test("z.exactPartial", () => {
+  const partialSchema = z.exactPartial(userSchema);
+  type PartialUser = z.infer<typeof partialSchema>;
+  expectTypeOf<PartialUser>().toEqualTypeOf<{
+    name?: string;
+    age?: number;
+    email?: string | undefined;
+  }>();
+  expect(z.safeParse(partialSchema, { name: "John" }).success).toBe(true);
+  expect(z.safeParse(partialSchema, {}).success).toBe(true);
+  expect(z.safeParse(partialSchema, { name: undefined }).success).toBe(false);
+  expect(z.safeParse(partialSchema, { email: undefined }).success).toBe(true);
+});
+
+test("z.exactPartial with mask", () => {
+  const partialSchemaWithMask = z.exactPartial(userSchema, { name: true });
+  type PartialUserWithMask = z.infer<typeof partialSchemaWithMask>;
+  expectTypeOf<PartialUserWithMask>().toEqualTypeOf<{
+    name?: string;
+    age: number;
+    email?: string | undefined;
+  }>();
+  expect(z.safeParse(partialSchemaWithMask, { age: 30 }).success).toBe(true);
+  expect(z.safeParse(partialSchemaWithMask, { age: 30, name: undefined }).success).toBe(false);
+});
+
+test("z.required", () => {
+  const requiredSchema = z.required(userSchema);
+  type RequiredUser = z.infer<typeof requiredSchema>;
+  expectTypeOf<RequiredUser>().toEqualTypeOf<{ name: string; age: number; email: string }>();
+  expect(requiredSchema.shape.email).toBeInstanceOf(z.ZodMiniNonOptional);
+  expect(z.safeParse(requiredSchema, { name: "John", age: 30 }).success).toBe(false);
+  expect(z.safeParse(requiredSchema, { name: "John", age: 30, email: "john@example.com" }).success).toBe(true);
+});
+
+test("z.required with mask", () => {
+  const schema = z.object({ name: z.optional(z.string()), age: z.optional(z.number()) });
+  const requiredSchemaWithMask = z.required(schema, { name: true });
+  type RequiredWithMask = z.infer<typeof requiredSchemaWithMask>;
+  expectTypeOf<RequiredWithMask>().toEqualTypeOf<{ name: string; age?: number | undefined }>();
+  expect(requiredSchemaWithMask.shape.name).toBeInstanceOf(z.ZodMiniNonOptional);
+  expect(requiredSchemaWithMask.shape.age).toBeInstanceOf(z.ZodMiniOptional);
+});
+
+test("z.pick/omit/partial/required - do not allow unknown keys", () => {
+  const schema = z.object({
+    name: z.string(),
+    age: z.number(),
+  });
+
+  // Mixed valid + invalid keys - throws at parse time (lazy evaluation)
+  // @ts-expect-error
+  expect(() => z.parse(z.pick(schema, { name: true, asdf: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.omit(schema, { name: true, asdf: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.partial(schema, { name: true, asdf: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.required(schema, { name: true, asdf: true }), {})).toThrow();
+
+  // Only invalid keys
+  // @ts-expect-error
+  expect(() => z.parse(z.pick(schema, { $unknown: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.omit(schema, { $unknown: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.partial(schema, { $unknown: true }), {})).toThrow();
+  // @ts-expect-error
+  expect(() => z.parse(z.required(schema, { $unknown: true }), {})).toThrow();
+});
+
 test("z.catchall", () => {
   // z.catchall()
   const schema = z.catchall(

package/node_modules/zod/src/v4/mini/tests/prototypes.test.ts

@@ -1,5 +1,5 @@
 import { expect, test } from "vitest";
-import * as z from "zod/v4-mini";
+import * as z from "zod/mini";
 
 declare module "zod/v4/core" {
   interface $ZodType {

package/node_modules/zod/src/v4/mini/tests/recursive-types.test.ts

@@ -1,5 +1,21 @@
 import { expect, expectTypeOf, test } from "vitest";
-import { z } from "zod/v4-mini";
+import { z } from "zod/mini";
+
+test("recursive object schema type aliases", () => {
+  type ObjectField = z.ZodMiniObject<{ [k: string]: ObjectField }>;
+  type Field = z.ZodMiniString<string> | z.ZodMiniObject<{ [k: string]: Field }>;
+  type ObjectValue = { [k: string]: ObjectValue };
+  type Value = string | { [k: string]: Value };
+  expectTypeOf<z.input<ObjectField>>().toEqualTypeOf<ObjectValue>();
+  expectTypeOf<z.output<ObjectField>>().toEqualTypeOf<ObjectValue>();
+  expectTypeOf<keyof z.input<ObjectField>>().toEqualTypeOf<string>();
+  expectTypeOf<keyof z.output<ObjectField>>().toEqualTypeOf<string>();
+  expectTypeOf<z.input<Field>>().toEqualTypeOf<Value>();
+  expectTypeOf<z.output<Field>>().toEqualTypeOf<Value>();
+  const schema: Field = z.object({ nested: z.object({ name: z.string() }) });
+  expect(schema.parse({ nested: { name: "a", extra: true } })).toEqual({ nested: { name: "a" } });
+  expect(schema.safeParse({ nested: { name: 123 } }).success).toBe(false);
+});
 
 test("recursion with z.lazy", () => {
   const data = {
@@ -33,7 +49,7 @@ test("recursion with z.lazy", () => {
   type Category = z.infer<typeof Category>;
   interface _Category {
     name: string;
-    subcategories?: _Category[];
+    subcategories?: _Category[] | undefined;
   }
   expectTypeOf<Category>().toEqualTypeOf<_Category>();
 });
@@ -273,3 +289,53 @@ test("recursion compatibility", () => {
     },
   });
 });
+
+test("shape stays writeable through object/strictObject/looseObject/extend with getters", () => {
+  const Cat = z.object({
+    name: z.string(),
+    get sub(): z.ZodMiniArray<typeof Cat> {
+      return z.array(Cat);
+    },
+  });
+  type CatShape = (typeof Cat)["shape"];
+  expectTypeOf<CatShape>().toEqualTypeOf<{
+    name: z.ZodMiniString<string>;
+    sub: z.ZodMiniArray<typeof Cat>;
+  }>();
+
+  const StrictCat = z.strictObject({
+    name: z.string(),
+    get sub(): z.ZodMiniArray<typeof StrictCat> {
+      return z.array(StrictCat);
+    },
+  });
+  type StrictShape = (typeof StrictCat)["shape"];
+  expectTypeOf<StrictShape>().toEqualTypeOf<{
+    name: z.ZodMiniString<string>;
+    sub: z.ZodMiniArray<typeof StrictCat>;
+  }>();
+
+  const LooseCat = z.looseObject({
+    name: z.string(),
+    get sub(): z.ZodMiniArray<typeof LooseCat> {
+      return z.array(LooseCat);
+    },
+  });
+  type LooseShape = (typeof LooseCat)["shape"];
+  expectTypeOf<LooseShape>().toEqualTypeOf<{
+    name: z.ZodMiniString<string>;
+    sub: z.ZodMiniArray<typeof LooseCat>;
+  }>();
+
+  const Base = z.object({ name: z.string() });
+  const Extended = z.extend(Base, {
+    get sub(): z.ZodMiniArray<typeof Extended> {
+      return z.array(Extended);
+    },
+  });
+  type ExtendedShape = (typeof Extended)["shape"];
+  expectTypeOf<ExtendedShape>().toEqualTypeOf<{
+    name: z.ZodMiniString<string>;
+    sub: z.ZodMiniArray<typeof Extended>;
+  }>();
+});

package/node_modules/zod/src/v4/mini/tests/standard-schema.test.ts

@@ -0,0 +1,50 @@
+import { expect, test } from "vitest";
+import type { StandardSchemaWithJSON } from "../../core/standard-schema.js";
+import * as z from "../index.js";
+
+function acceptSchema(schema: StandardSchemaWithJSON) {
+  return schema;
+}
+
+test("Zod Mini schemas are NOT assignable to StandardJSONSchema", () => {
+  const schema = z.string();
+
+  // @ts-expect-error
+  const _standard: StandardSchemaWithJSON["~standard"] = schema;
+
+  // @ts-expect-error
+  acceptSchema(schema);
+});
+
+test("toJSONSchema result ~standard.jsonSchema works with objects", () => {
+  const schema = z.object({
+    firstName: z.string(),
+    lastName: z.string(),
+  });
+
+  const jsonSchema = z.toJSONSchema(schema);
+
+  // Call ~standard.jsonSchema.input - this should not throw
+  const inputSchema = jsonSchema["~standard"].jsonSchema.input({ target: "draft-07" });
+
+  expect(inputSchema).toMatchObject({
+    type: "object",
+    properties: {
+      firstName: { type: "string" },
+      lastName: { type: "string" },
+    },
+    required: ["firstName", "lastName"],
+  });
+
+  // Call ~standard.jsonSchema.output - this should not throw
+  const outputSchema = jsonSchema["~standard"].jsonSchema.output({ target: "draft-07" });
+
+  expect(outputSchema).toMatchObject({
+    type: "object",
+    properties: {
+      firstName: { type: "string" },
+      lastName: { type: "string" },
+    },
+    required: ["firstName", "lastName"],
+  });
+});

package/node_modules/zod/src/v4/mini/tests/string.test.ts

@@ -1,5 +1,5 @@
 import { expect, expectTypeOf, test } from "vitest";
-import * as z from "zod/v4-mini";
+import * as z from "zod/mini";
 
 const FAIL = { success: false };
 
@@ -177,6 +177,13 @@ test("z.nanoid", () => {
   expect(() => z.parse(a, "abc")).toThrow();
 });
 
+test("z.nanoid custom length", () => {
+  const a = z.nanoid({ length: 64 });
+  const id = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+  expect(z.parse(a, id)).toEqual(id);
+  expect(() => z.parse(a, "8FHZpIxleEK3axQRBNNjN")).toThrow();
+});
+
 test("z.cuid", () => {
   const a = z.cuid();
   expect(z.parse(a, "cixs7y0c0000f7x3b1z6m3w6r")).toEqual("cixs7y0c0000f7x3b1z6m3w6r");
@@ -241,6 +248,38 @@ test("z.ipv6", () => {
   expect(() => z.parse(a, 123)).toThrow();
 });
 
+test("z.mac", () => {
+  const a = z.mac();
+  // valid mac
+  expect(z.parse(a, "00:1A:2B:3C:4D:5E")).toEqual("00:1A:2B:3C:4D:5E");
+  // invalid mac (dash delimiter not accepted by default)
+  expect(() => z.parse(a, "01-23-45-67-89-AB")).toThrow();
+  expect(() => z.parse(a, "00:1A:2B::4D:5E")).toThrow();
+  expect(() => z.parse(a, "00:1a-2B:3c-4D:5e")).toThrow();
+  expect(() => z.parse(a, "hello")).toThrow();
+  // wrong type
+  expect(() => z.parse(a, 123)).toThrow();
+});
+
+test("z.mac with custom delimiter", () => {
+  const a = z.mac({ delimiter: ":" });
+  // valid mac with colon
+  expect(z.parse(a, "00:1A:2B:3C:4D:5E")).toEqual("00:1A:2B:3C:4D:5E");
+  // invalid mac with dash
+  expect(() => z.parse(a, "00-1A-2B-3C-4D-5E")).toThrow();
+
+  const b = z.mac({ delimiter: "-" });
+  // valid mac with dash
+  expect(z.parse(b, "00-1A-2B-3C-4D-5E")).toEqual("00-1A-2B-3C-4D-5E");
+  // invalid mac with colon
+  expect(() => z.parse(b, "00:1A:2B:3C:4D:5E")).toThrow();
+
+  const c = z.mac({ delimiter: ":" });
+  // colon-only mac
+  expect(z.parse(c, "00:1A:2B:3C:4D:5E")).toEqual("00:1A:2B:3C:4D:5E");
+  expect(() => z.parse(c, "00-1A-2B-3C-4D-5E")).toThrow();
+});
+
 test("z.base64", () => {
   const a = z.base64();
   // valid base64
@@ -250,6 +289,11 @@ test("z.base64", () => {
   expect(() => z.parse(a, "SGVsbG8gd29ybGQ")).toThrow();
   expect(() => z.parse(a, "U29tZSBvdGhlciBzdHJpbmc")).toThrow();
   expect(() => z.parse(a, "hello")).toThrow();
+  // whitespace is not allowed (atob would otherwise strip it)
+  expect(() => z.parse(a, "123 ")).toThrow();
+  expect(() => z.parse(a, "SGVsbG8gd29ybGQ= ")).toThrow();
+  expect(() => z.parse(a, "SGVsbG8gd29ybGQ=\n")).toThrow();
+  expect(() => z.parse(a, "SGVs bG8gd29ybGQ=")).toThrow();
   // wrong type
   expect(() => z.parse(a, 123)).toThrow();
 });
@@ -280,6 +324,36 @@ test("z.e164", () => {
   expect(() => z.parse(a, 123)).toThrow();
 });
 
+test("z.creditCard", () => {
+  const a = z.creditCard();
+  // valid credit card
+  expect(z.parse(a, "4111111111111111")).toEqual("4111111111111111");
+  expect(z.parse(a, "4111 1111 1111 1111")).toEqual("4111 1111 1111 1111");
+  // failed Luhn checksum
+  expect(() => z.parse(a, "4111111111111112")).toThrow();
+  // outside the 12-19 digit range
+  expect(() => z.parse(a, "40000000006")).toThrow();
+  expect(() => z.parse(a, "hello")).toThrow();
+  // wrong type
+  expect(() => z.parse(a, 123)).toThrow();
+});
+
+test("z.iban", () => {
+  const a = z.iban();
+  // valid iban
+  expect(z.parse(a, "DE89370400440532013000")).toEqual("DE89370400440532013000");
+  expect(z.parse(a, "NO9386011117947")).toEqual("NO9386011117947");
+  // failed mod 97 checksum
+  expect(() => z.parse(a, "DE89370400440532013001")).toThrow();
+  // formatting violations
+  expect(() => z.parse(a, "de89370400440532013000")).toThrow();
+  expect(() => z.parse(a, "DE89 3704 0044 0532 0130 00")).toThrow();
+  expect(() => z.parse(a, "NO938601111794")).toThrow();
+  expect(() => z.parse(a, "hello")).toThrow();
+  // wrong type
+  expect(() => z.parse(a, 123)).toThrow();
+});
+
 test("z.jwt", () => {
   const a = z.jwt();
   // valid jwt
@@ -297,3 +371,26 @@ test("z.jwt", () => {
   // wrong type
   expect(() => z.parse(a, 123)).toThrow();
 });
+
+test("z.hash generic format", () => {
+  expect(z.hash("sha256").parse("a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3")).toBe(
+    "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3"
+  );
+
+  // --- Type-level checks (ensure the literal format string is encoded in the return type)
+  expectTypeOf(z.hash("md5")).toEqualTypeOf<z.ZodMiniCustomStringFormat<"md5_hex">>();
+  expectTypeOf(z.hash("sha1")).toEqualTypeOf<z.ZodMiniCustomStringFormat<"sha1_hex">>();
+  expectTypeOf(z.hash("sha256", { enc: "base64" as const })).toEqualTypeOf<
+    z.ZodMiniCustomStringFormat<"sha256_base64">
+  >();
+  expectTypeOf(z.hash("sha384", { enc: "base64url" as const })).toEqualTypeOf<
+    z.ZodMiniCustomStringFormat<"sha384_base64url">
+  >();
+});
+
+test("z.currencyCode", () => {
+  const a = z.currencyCode();
+  expectTypeOf(a).toEqualTypeOf<z.ZodMiniCustomStringFormat<"currency_code">>();
+  expect(z.parse(a, "EUR")).toBe("EUR");
+  expect(z.safeParse(a, "eur")).toMatchObject(FAIL);
+});

package/node_modules/zod/src/v4-mini/index.ts

@@ -1 +1,3 @@
-export * from "../v4/mini/index.js";
+import * as z from "../v4/mini/external.js";
+export * from "../v4/mini/external.js";
+export { z };

package/node_modules/zod/v3/ZodError.cjs

@@ -75,21 +75,31 @@ class ZodError extends Error {
                     while (i < issue.path.length) {
                         const el = issue.path[i];
                         const terminal = i === issue.path.length - 1;
-                        if (!terminal) {
-                            curr[el] = curr[el] || { _errors: [] };
-                            // if (typeof el === "string") {
-                            //   curr[el] = curr[el] || { _errors: [] };
-                            // } else if (typeof el === "number") {
-                            //   const errorArray: any = [];
-                            //   errorArray._errors = [];
-                            //   curr[el] = curr[el] || errorArray;
-                            // }
+                        // `_errors` is reserved by this legacy format, so merge a matching path segment into the current node instead of treating its array as a child.
+                        if (el === "_errors") {
+                            if (terminal)
+                                curr._errors.push(mapper(issue));
+                            i++;
+                            continue;
                         }
-                        else {
-                            curr[el] = curr[el] || { _errors: [] };
-                            curr[el]._errors.push(mapper(issue));
+                        // Create `el` as an own data property. A segment naming an inherited member ("toString", "constructor") would otherwise read through to the prototype, and assigning "__proto__" would hit the setter and walk into Object.prototype.
+                        if (!Object.prototype.hasOwnProperty.call(curr, el)) {
+                            if (el === "__proto__") {
+                                Object.defineProperty(curr, el, {
+                                    value: { _errors: [] },
+                                    writable: true,
+                                    enumerable: true,
+                                    configurable: true,
+                                });
+                            }
+                            else {
+                                curr[el] = { _errors: [] };
+                            }
                         }
                         curr = curr[el];
+                        if (terminal) {
+                            curr._errors.push(mapper(issue));
+                        }
                         i++;
                     }
                 }
@@ -113,7 +123,7 @@ class ZodError extends Error {
         return this.issues.length === 0;
     }
     flatten(mapper = (issue) => issue.message) {
-        const fieldErrors = {};
+        const fieldErrors = Object.create(null);
         const formErrors = [];
         for (const sub of this.issues) {
             if (sub.path.length > 0) {
@@ -136,3 +146,22 @@ ZodError.create = (issues) => {
     const error = new ZodError(issues);
     return error;
 };
+
+// seal-cjs-exports
+(function () {
+  var keys = Object.getOwnPropertyNames(exports);
+  for (var i = 0; i < keys.length; i++) {
+    var desc = Object.getOwnPropertyDescriptor(exports, keys[i]);
+    if (!desc || !desc.get || !desc.configurable) continue;
+    var value;
+    try {
+      value = desc.get();
+    } catch (e) {
+      continue;
+    }
+    // a circular require may not have settled this one yet, so leave it live
+    if (value === undefined) continue;
+    Object.defineProperty(exports, keys[i], { value: value, writable: false, enumerable: desc.enumerable, configurable: false });
+  }
+  Object.freeze(exports);
+})();

package/node_modules/zod/v3/ZodError.d.cts

@@ -11,20 +11,20 @@ export type typeToFlattenedError<T, U = string> = {
 };
 export declare const ZodIssueCode: {
     invalid_type: "invalid_type";
-    invalid_literal: "invalid_literal";
-    custom: "custom";
+    too_big: "too_big";
+    too_small: "too_small";
+    not_multiple_of: "not_multiple_of";
+    unrecognized_keys: "unrecognized_keys";
     invalid_union: "invalid_union";
+    custom: "custom";
+    invalid_literal: "invalid_literal";
     invalid_union_discriminator: "invalid_union_discriminator";
     invalid_enum_value: "invalid_enum_value";
-    unrecognized_keys: "unrecognized_keys";
     invalid_arguments: "invalid_arguments";
     invalid_return_type: "invalid_return_type";
     invalid_date: "invalid_date";
     invalid_string: "invalid_string";
-    too_small: "too_small";
-    too_big: "too_big";
     invalid_intersection_types: "invalid_intersection_types";
-    not_multiple_of: "not_multiple_of";
     not_finite: "not_finite";
 };
 export type ZodIssueCode = keyof typeof ZodIssueCode;

package/node_modules/zod/v3/ZodError.d.ts

@@ -11,20 +11,20 @@ export type typeToFlattenedError<T, U = string> = {
 };
 export declare const ZodIssueCode: {
     invalid_type: "invalid_type";
-    invalid_literal: "invalid_literal";
-    custom: "custom";
+    too_big: "too_big";
+    too_small: "too_small";
+    not_multiple_of: "not_multiple_of";
+    unrecognized_keys: "unrecognized_keys";
     invalid_union: "invalid_union";
+    custom: "custom";
+    invalid_literal: "invalid_literal";
     invalid_union_discriminator: "invalid_union_discriminator";
     invalid_enum_value: "invalid_enum_value";
-    unrecognized_keys: "unrecognized_keys";
     invalid_arguments: "invalid_arguments";
     invalid_return_type: "invalid_return_type";
     invalid_date: "invalid_date";
     invalid_string: "invalid_string";
-    too_small: "too_small";
-    too_big: "too_big";
     invalid_intersection_types: "invalid_intersection_types";
-    not_multiple_of: "not_multiple_of";
     not_finite: "not_finite";
 };
 export type ZodIssueCode = keyof typeof ZodIssueCode;

package/node_modules/zod/v3/ZodError.js

@@ -71,21 +71,31 @@ export class ZodError extends Error {
                     while (i < issue.path.length) {
                         const el = issue.path[i];
                         const terminal = i === issue.path.length - 1;
-                        if (!terminal) {
-                            curr[el] = curr[el] || { _errors: [] };
-                            // if (typeof el === "string") {
-                            //   curr[el] = curr[el] || { _errors: [] };
-                            // } else if (typeof el === "number") {
-                            //   const errorArray: any = [];
-                            //   errorArray._errors = [];
-                            //   curr[el] = curr[el] || errorArray;
-                            // }
+                        // `_errors` is reserved by this legacy format, so merge a matching path segment into the current node instead of treating its array as a child.
+                        if (el === "_errors") {
+                            if (terminal)
+                                curr._errors.push(mapper(issue));
+                            i++;
+                            continue;
                         }
-                        else {
-                            curr[el] = curr[el] || { _errors: [] };
-                            curr[el]._errors.push(mapper(issue));
+                        // Create `el` as an own data property. A segment naming an inherited member ("toString", "constructor") would otherwise read through to the prototype, and assigning "__proto__" would hit the setter and walk into Object.prototype.
+                        if (!Object.prototype.hasOwnProperty.call(curr, el)) {
+                            if (el === "__proto__") {
+                                Object.defineProperty(curr, el, {
+                                    value: { _errors: [] },
+                                    writable: true,
+                                    enumerable: true,
+                                    configurable: true,
+                                });
+                            }
+                            else {
+                                curr[el] = { _errors: [] };
+                            }
                         }
                         curr = curr[el];
+                        if (terminal) {
+                            curr._errors.push(mapper(issue));
+                        }
                         i++;
                     }
                 }
@@ -109,7 +119,7 @@ export class ZodError extends Error {
         return this.issues.length === 0;
     }
     flatten(mapper = (issue) => issue.message) {
-        const fieldErrors = {};
+        const fieldErrors = Object.create(null);
         const formErrors = [];
         for (const sub of this.issues) {
             if (sub.path.length > 0) {

package/node_modules/zod/v3/errors.cjs

@@ -15,3 +15,22 @@ function setErrorMap(map) {
 function getErrorMap() {
     return overrideErrorMap;
 }
+
+// seal-cjs-exports
+(function () {
+  var keys = Object.getOwnPropertyNames(exports);
+  for (var i = 0; i < keys.length; i++) {
+    var desc = Object.getOwnPropertyDescriptor(exports, keys[i]);
+    if (!desc || !desc.get || !desc.configurable) continue;
+    var value;
+    try {
+      value = desc.get();
+    } catch (e) {
+      continue;
+    }
+    // a circular require may not have settled this one yet, so leave it live
+    if (value === undefined) continue;
+    Object.defineProperty(exports, keys[i], { value: value, writable: false, enumerable: desc.enumerable, configurable: false });
+  }
+  Object.freeze(exports);
+})();