@toa.io/boot 1.0.0-alpha.282 → 1.0.0-alpha.284

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.0.0-alpha.284](https://github.com/toa-io/toa/compare/v1.0.0-alpha.283...v1.0.0-alpha.284) (2026-09-05)
+
+**Note:** Version bump only for package @toa.io/boot
+
+
+
+
+
+# [1.0.0-alpha.283](https://github.com/toa-io/toa/compare/v1.0.0-alpha.282...v1.0.0-alpha.283) (2026-09-04)
+
+### Bug Fixes
+
+* **core:** an operation returns the errors it declares, and nothing else ([1c2b819](https://github.com/toa-io/toa/commit/1c2b8193ae7fbe86bc1a25053a6044ee4dd16a4a))
+* **exposition:** declare the errors the built-in components return ([27200c3](https://github.com/toa-io/toa/commit/27200c348ab09068d58c52c3e83208cb29cd7290))
+
+
 # [1.0.0-alpha.282](https://github.com/toa-io/toa/compare/v1.0.0-alpha.281...v1.0.0-alpha.282) (2026-09-03)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/boot",
-  "version": "1.0.0-alpha.282",
+  "version": "1.0.0-alpha.284",
   "type": "module",
   "description": "Toa Boot",
   "author": "temich <tema.gurtovoy@gmail.com>",
@@ -21,14 +21,14 @@
     "test": "echo \"Error: run tests from root\" && exit 1"
   },
   "dependencies": {
-    "@toa.io/atomicity": "1.0.0-alpha.282",
-    "@toa.io/core": "1.0.0-alpha.282",
-    "@toa.io/generic": "1.0.0-alpha.282",
-    "@toa.io/norm": "1.0.0-alpha.282",
-    "@toa.io/schemas": "1.0.0-alpha.282",
+    "@toa.io/atomicity": "1.0.0-alpha.284",
+    "@toa.io/core": "1.0.0-alpha.284",
+    "@toa.io/generic": "1.0.0-alpha.283",
+    "@toa.io/norm": "1.0.0-alpha.284",
+    "@toa.io/schemas": "1.0.0-alpha.283",
     "clone-deep": "4.0.1",
     "dotenv": "17.4.2",
     "openspan": "1.0.0-alpha.277"
   },
-  "gitHead": "4007c814725dd015d3bbebb9a28e28a247645c4f"
+  "gitHead": "006755556879e91e8d68fa86753aa3b475bdf4bf"
 }

package/src/contract.js

@@ -12,7 +12,10 @@ export const request = (definition, entity) => {
 
 export const reply = (output, errors) => {
   const reply = Reply.schema(output, errors)
-  const schema = schemas.schema(reply)
+
+  // a reply is read, not shaped: what the operation returned is what the caller gets,
+  // and a value that only fits once coerced does not fit
+  const schema = schemas.schema(reply, { coerceTypes: false, useDefaults: false })
 
   return new Reply(schema)
 }

package/src/env.js

@@ -1,14 +1,15 @@
 import dotenv from 'dotenv'
 import { findUp } from '@toa.io/generic'
 
-async function setup () {
-  const path = findUp('.env')
+/*
+ * A local run reads what `toa env` wrote. `dotenv` leaves a variable that is already set
+ * alone, so what the environment says still wins and reading the file costs nothing where
+ * there is none — a deployment has no `.env` to find.
+ *
+ * It used to be read only where `TOA_ENV` was unset, taking that one variable as proof the
+ * environment had been injected. Setting it for any other reason then dropped the file
+ * whole, and every variable in it with it.
+ */
+const path = findUp('.env')
 
-  if (path !== undefined) dotenv.config({ path })
-}
-
-if (!('TOA_ENV' in process.env)) {
-  (async () => {
-    await setup()
-  })()
-}
+if (path !== undefined) dotenv.config({ path })

package/src/operation.js

@@ -4,7 +4,7 @@ import * as boot from './index.js'
 
 export async function operation (manifest, endpoint, definition, context, scope, preflight) {
   const cascade = await boot.cascade(manifest, endpoint, definition, context, preflight)
-  const reply = boot.contract.reply(definition.output, definition.error)
+  const reply = boot.contract.reply(definition.output, definition.errors)
   const input = definition.input
   const request = boot.contract.request({ input }, manifest.entity)
   const contracts = { reply, request }