@valbuild/server 0.91.3 → 0.92.0

package/LICENSE.md

@@ -0,0 +1,7 @@
+Copyright (c) 2025 Fredrik Ekholdt and Blank AS
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/declarations/src/ValFS.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="node" />
-/// <reference types="node" />
 /**
  * A filesystem that can update and read files.
  * It does not support creating new files or directories.

package/dist/declarations/src/ValFSHost.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="node" />
-/// <reference types="node" />
 import ts from "typescript";
 import { ValFS } from "./ValFS.js";
 import { Buffer } from "buffer";

package/dist/declarations/src/ValServer.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="node" />
-/// <reference types="node" />
 import { ValModules, ValConfig } from "@valbuild/core";
 import { Api, ServerOf } from "@valbuild/shared/internal";
 import { z } from "zod";
@@ -41,19 +39,7 @@ declare const IntegratedServerJwtPayload: z.ZodObject<{
     token: z.ZodString;
     org: z.ZodString;
     project: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    project: string;
-    sub: string;
-    token: string;
-    exp: number;
-    org: string;
-}, {
-    project: string;
-    sub: string;
-    token: string;
-    exp: number;
-    org: string;
-}>;
+}, z.core.$strip>;
 export type IntegratedServerJwtPayload = z.infer<typeof IntegratedServerJwtPayload>;
 export declare const ENABLE_COOKIE_VALUE: {
     readonly value: "true";
@@ -62,7 +48,7 @@ export declare const ENABLE_COOKIE_VALUE: {
         readonly sameSite: "lax";
     };
 };
-export declare function bufferToReadableStream(buffer: Buffer): ReadableStream<any>;
+export declare function bufferToReadableStream(buffer: Buffer): import("node:stream/web").ReadableStream<any>;
 export declare function getRedirectUrl(query: {
     redirect_to?: string | undefined;
 }, overrideHost: string | undefined): string | {

package/dist/declarations/src/getSettings.d.ts

@@ -3,22 +3,8 @@ declare const SettingsSchema: z.ZodObject<{
     publicProjectId: z.ZodString;
     remoteFileBuckets: z.ZodArray<z.ZodObject<{
         bucket: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        bucket: string;
-    }, {
-        bucket: string;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    publicProjectId: string;
-    remoteFileBuckets: {
-        bucket: string;
-    }[];
-}, {
-    publicProjectId: string;
-    remoteFileBuckets: {
-        bucket: string;
-    }[];
-}>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 type Settings = z.infer<typeof SettingsSchema>;
 export declare function getSettings(projectName: string, auth: {
     pat: string;

package/dist/declarations/src/uploadRemoteFile.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="node" />
-/// <reference types="node" />
 export declare function uploadRemoteFile(contentHost: string, project: string, bucket: string, fileHash: string, fileExt: string, fileBuffer: Buffer, auth: {
     pat: string;
 } | {

package/dist/valbuild-server.cjs.dev.js

@@ -1064,9 +1064,7 @@ const MAX_CACHE_SIZE = 100 * 1024 * 1024; // 100 mb
 const MAX_OBJECT_KEY_SIZE = 2 ** 27; // https://stackoverflow.com/questions/13367391/is-there-a-limit-on-length-of-the-key-string-in-js-object
 
 class ValModuleLoader {
-  constructor(projectRoot,
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  compilerOptions,
+  constructor(projectRoot, compilerOptions,
   // TODO: remove this?
   sourceFileHandler, host = {
     ...ts__default["default"].sys,
@@ -1280,7 +1278,7 @@ export default new Proxy({}, {
       return {
         value: moduleLoader.getModule(modulePath)
       };
-    } catch (e) {
+    } catch {
       return {
         error: Error(`Could not resolve module: '${modulePath}'`)
       };
@@ -1529,7 +1527,7 @@ class ValOps {
         collector.push("[");
         for (let i = 0; i < item.length; i++) {
           this.collectObjectRecursive(item[i], collector);
-          i !== item.length - 1 && collector.push(",");
+          if (i !== item.length - 1) collector.push(",");
         }
         collector.push("]");
       } else {
@@ -1538,7 +1536,7 @@ class ValOps {
         keys.forEach((key, i) => {
           collector.push(`"${key}":`);
           this.collectObjectRecursive(item[key], collector);
-          i !== keys.length - 1 && collector.push(",");
+          if (i !== keys.length - 1) collector.push(",");
         });
         collector.push("}");
       }
@@ -2495,7 +2493,7 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
       ...authHeader,
       "Content-Type": "application/octet-stream"
     },
-    body: fileBuffer
+    body: new Uint8Array(fileBuffer)
   });
   if (!res.ok) {
     var _res$headers$get;
@@ -2507,17 +2505,11 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
     }
     if ((_res$headers$get = res.headers.get("content-type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
       const json = await res.json();
-      if (json.message) {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${json.message}.`
-        };
-      } else {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${JSON.stringify(json)}.`
-        };
-      }
+      const message = internal.getErrorMessageFromUnknownJson(json, JSON.stringify(json));
+      return {
+        success: false,
+        error: `Failed to upload remote file: ${message}.`
+      };
     }
     return {
       success: false,
@@ -3042,7 +3034,7 @@ class ValOpsFS extends ValOps {
         }]
       };
     }
-    const metadataParseRes = this.parseJsonFile(metadataFilePath, zod.z.record(zod.z.union([zod.z.string(), zod.z.number()])));
+    const metadataParseRes = this.parseJsonFile(metadataFilePath, zod.z.record(zod.z.string(), zod.z.union([zod.z.string(), zod.z.number()])));
     if (metadataParseRes.error) {
       return {
         errors: [metadataParseRes.error]
@@ -3416,7 +3408,7 @@ class FSOpsHost {
       fs__default["default"].mkdirSync(path__namespace["default"].dirname(path), {
         recursive: false
       });
-    } catch (e) {
+    } catch {
       // ignore
     }
     try {
@@ -3479,7 +3471,7 @@ const MetadataRes = zod.z.object({
   type: zod.z.union([zod.z.literal("file"), zod.z.literal("image")]).nullable()
 });
 const SummaryResponse = zod.z.object({
-  commitSummary: zod.z.string().nullable()
+  commitSummary: zod.z.string()
 });
 const GetApplicablePatches = zod.z.object({
   patches: zod.z.array(zod.z.object({
@@ -3566,6 +3558,10 @@ const ProfilesResponse = zod.z.object({
     }).nullable()
   }))
 });
+const NonceResponse = zod.z.object({
+  nonce: zod.z.string(),
+  url: zod.z.string()
+});
 class ValOpsHttp extends ValOps {
   constructor(contentUrl, project, commitSha,
   // TODO: CommitSha
@@ -3634,20 +3630,19 @@ class ValOpsHttp extends ValOps {
           }
         };
       }
+      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get = res.headers.get("Content-Type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Presigned auth nonce error:", json.message);
-          return {
-            status: "error",
-            statusCode: 500,
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = internal.getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Presigned auth nonce error:", message);
+        return {
+          status: "error",
+          statusCode: 500,
+          error: {
+            message
+          }
+        };
       }
-      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       console.error(unknownErrorMessage);
       return {
         status: "error",
@@ -3707,14 +3702,13 @@ class ValOpsHttp extends ValOps {
       const unknownErrorMessage = `Could not get summary. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get2 = res.headers.get("Content-Type")) !== null && _res$headers$get2 !== void 0 && _res$headers$get2.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Summary error:", json.message);
-          return {
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = internal.getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Summary error:", message);
+        return {
+          error: {
+            message
+          }
+        };
       }
       console.error(unknownErrorMessage);
       return {
@@ -3823,38 +3817,39 @@ class ValOpsHttp extends ValOps {
       }
     }).then(async res => {
       if (res.ok) {
-        const json = await res.json();
-        if (typeof json.nonce !== "string" || typeof json.url !== "string") {
+        const json = NonceResponse.safeParse(await res.json());
+        if (!json.success) {
           return {
             status: "error",
             error: {
-              message: "Invalid nonce response: " + JSON.stringify(json)
+              message: "Invalid nonce response: " + zodValidationError.fromError(json.error).toString()
             }
           };
         }
-        if (!json.url.startsWith("ws://") && !json.url.startsWith("wss://")) {
+        if (!json.data.url.startsWith("ws://") && !json.data.url.startsWith("wss://")) {
           return {
             status: "error",
             error: {
-              message: "Invalid websocket url: " + json.url
+              message: "Invalid websocket url: " + json.data.url
             }
           };
         }
         return {
           status: "success",
           data: {
-            nonce: json.nonce,
-            url: json.url
+            nonce: json.data.nonce,
+            url: json.data.url
           }
         };
       }
       const contentType = res.headers.get("Content-Type") || "";
       if (contentType.startsWith("application/json")) {
         const json = await res.json();
+        const message = internal.getErrorMessageFromUnknownJson(json, "Could not get nonce. Unexpected error (no error message). Status: " + res.status);
         return {
           status: "error",
           error: {
-            message: "Could not get nonce." + (json.message || "Unexpected error (no error message). Status: " + res.status)
+            message: "Could not get nonce." + message
           }
         };
       }
@@ -4054,9 +4049,10 @@ class ValOpsHttp extends ValOps {
       }
       if ((_res$headers$get3 = res.headers.get("Content-Type")) !== null && _res$headers$get3 !== void 0 && _res$headers$get3.includes("application/json")) {
         const json = await res.json();
+        const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
         return fp.result.err({
           errorType: "other",
-          message: json.message || "Unknown error"
+          message
         });
       }
       return fp.result.err({
@@ -4349,15 +4345,24 @@ class ValOpsHttp extends ValOps {
     });
     if (res.ok) {
       const json = await res.json();
+      const parsed = SummaryResponse.safeParse(json);
+      if (parsed.success) {
+        return {
+          commitSummary: parsed.data.commitSummary
+        };
+      }
       return {
-        commitSummary: json.commitSummary
+        error: {
+          message: `Could not parse commit summary response. Error: ${zodValidationError.fromError(parsed.error)}`
+        }
       };
     }
     if ((_res$headers$get4 = res.headers.get("Content-Type")) !== null && _res$headers$get4 !== void 0 && _res$headers$get4.includes("application/json")) {
       const json = await res.json();
+      const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
       return {
         error: {
-          message: json.message
+          message
         }
       };
     }
@@ -4407,8 +4412,10 @@ class ValOpsHttp extends ValOps {
         };
       }
       if ((_res$headers$get5 = res.headers.get("Content-Type")) !== null && _res$headers$get5 !== void 0 && _res$headers$get5.includes("application/json")) {
-        const json = await res.json();
-        if (json.isNotFastForward) {
+        const json = zod.z.object({
+          isNotFastForward: zod.z.boolean().optional()
+        }).safeParse(await res.json());
+        if (json.success && json.data.isNotFastForward) {
           return {
             isNotFastForward: true,
             error: {
@@ -4416,9 +4423,10 @@ class ValOpsHttp extends ValOps {
             }
           };
         }
+        const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
         return {
           error: {
-            message: json.message
+            message
           }
         };
       }
@@ -4455,7 +4463,8 @@ class ValOpsHttp extends ValOps {
     }
     if ((_res$headers$get6 = res.headers.get("Content-Type")) !== null && _res$headers$get6 !== void 0 && _res$headers$get6.includes("application/json")) {
       const json = await res.json();
-      throw Error(`Could not get profiles (status: ${res.status}): ${"message" in json ? json.message : "Unknown error"}`);
+      const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
+      throw Error(`Could not get profiles (status: ${res.status}): ${message}`);
     }
     throw Error(`Could not get profiles. Got status: ${res.status}`);
   }
@@ -4503,7 +4512,7 @@ async function getSettings(projectName, auth) {
       success: true,
       data: parseRes.data
     };
-  } catch (err) {
+  } catch {
     return {
       success: false,
       message: `Failed to get project id. Check network connection and try again.`
@@ -5112,20 +5121,42 @@ const ValServer = (valModules, options, callbacks) => {
             headers: getAuthHeaders(data.token, "application/json")
           });
           if (fetchRes.status === 200) {
-            return {
-              status: fetchRes.status,
-              json: {
-                mode: "proxy",
-                enabled: await callbacks.isEnabled(),
-                ...(await fetchRes.json())
-              }
-            };
+            const json = zod.z.object({
+              member_role: zod.z.union([zod.z.literal("owner"), zod.z.literal("developer"), zod.z.literal("editor")]).optional(),
+              id: zod.z.string(),
+              full_name: zod.z.string().optional(),
+              username: zod.z.string().optional(),
+              avatar_url: zod.z.string().optional()
+            }).safeParse(await fetchRes.json());
+            if (json.success) {
+              return {
+                status: fetchRes.status,
+                json: {
+                  mode: "proxy",
+                  enabled: await callbacks.isEnabled(),
+                  ...json.data
+                }
+              };
+            } else {
+              const message = internal.getErrorMessageFromUnknownJson(json, "Could not parse session response. Unexpected error (no error message). Status: " + fetchRes.status);
+              return {
+                status: 500,
+                json: {
+                  message: message,
+                  ...json
+                }
+              };
+            }
           } else {
+            const json = zod.z.object({
+              message: zod.z.string()
+            }).safeParse(await fetchRes.json());
+            const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
             return {
               status: fetchRes.status,
               json: {
-                message: "Failed to authorize",
-                ...(await fetchRes.json())
+                message: message,
+                ...json
               }
             };
           }
@@ -5544,7 +5575,7 @@ const ValServer = (valModules, options, callbacks) => {
         return {
           status: 200,
           json: {
-            patches,
+            patches: patches,
             baseSha: await serverOps.getBaseSha()
           }
         };
@@ -5872,7 +5903,7 @@ const ValServer = (valModules, options, callbacks) => {
             status: 400,
             json: {
               message: "Invalid body: " + zodValidationError.fromError(bodyRes.error).toString(),
-              details: bodyRes.error.errors
+              details: bodyRes.error.issues
             }
           };
         }
@@ -6452,7 +6483,7 @@ async function safeReadGit(cwd) {
           branch: undefined
         };
       }
-    } catch (error) {
+    } catch {
       const parentDir = path__namespace.dirname(currentDir);
 
       // We've reached the root directory
@@ -6478,7 +6509,7 @@ async function safeReadGit(cwd) {
 async function readCommit(gitDir, branchName) {
   try {
     return (await fs.promises.readFile(path__namespace.join(gitDir, ".git", "refs", "heads", branchName), "utf-8")).trim();
-  } catch (err) {
+  } catch {
     return undefined;
   }
 }
@@ -6668,7 +6699,7 @@ function createValApiRouter(route, valServerPromise, convert) {
   };
 }
 function formatZodErrorString(error) {
-  const errors = zodValidationError.fromZodError(error).toString();
+  const errors = zodValidationError.fromError(error).toString();
   return errors.length > 640 ? `${errors.slice(0, 640)}...` : errors;
 }
 function zodErrorResult(error, message) {
@@ -6909,7 +6940,7 @@ async function getFileBufferFromRemote(ref, fileExt, currentFileHash, projectRoo
       await fs__default["default"].promises.unlink(remoteFilePath);
       throw Error(`Cached file hash does not match the expected hash: ${computedFileHash} !== ${currentFileHash}`);
     }
-  } catch (err) {
+  } catch {
     try {
       await fs__default["default"].promises.mkdir(remoteFileCacheDir, {
         recursive: true

package/dist/valbuild-server.cjs.prod.js

@@ -1064,9 +1064,7 @@ const MAX_CACHE_SIZE = 100 * 1024 * 1024; // 100 mb
 const MAX_OBJECT_KEY_SIZE = 2 ** 27; // https://stackoverflow.com/questions/13367391/is-there-a-limit-on-length-of-the-key-string-in-js-object
 
 class ValModuleLoader {
-  constructor(projectRoot,
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  compilerOptions,
+  constructor(projectRoot, compilerOptions,
   // TODO: remove this?
   sourceFileHandler, host = {
     ...ts__default["default"].sys,
@@ -1280,7 +1278,7 @@ export default new Proxy({}, {
       return {
         value: moduleLoader.getModule(modulePath)
       };
-    } catch (e) {
+    } catch {
       return {
         error: Error(`Could not resolve module: '${modulePath}'`)
       };
@@ -1529,7 +1527,7 @@ class ValOps {
         collector.push("[");
         for (let i = 0; i < item.length; i++) {
           this.collectObjectRecursive(item[i], collector);
-          i !== item.length - 1 && collector.push(",");
+          if (i !== item.length - 1) collector.push(",");
         }
         collector.push("]");
       } else {
@@ -1538,7 +1536,7 @@ class ValOps {
         keys.forEach((key, i) => {
           collector.push(`"${key}":`);
           this.collectObjectRecursive(item[key], collector);
-          i !== keys.length - 1 && collector.push(",");
+          if (i !== keys.length - 1) collector.push(",");
         });
         collector.push("}");
       }
@@ -2495,7 +2493,7 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
       ...authHeader,
       "Content-Type": "application/octet-stream"
     },
-    body: fileBuffer
+    body: new Uint8Array(fileBuffer)
   });
   if (!res.ok) {
     var _res$headers$get;
@@ -2507,17 +2505,11 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
     }
     if ((_res$headers$get = res.headers.get("content-type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
       const json = await res.json();
-      if (json.message) {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${json.message}.`
-        };
-      } else {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${JSON.stringify(json)}.`
-        };
-      }
+      const message = internal.getErrorMessageFromUnknownJson(json, JSON.stringify(json));
+      return {
+        success: false,
+        error: `Failed to upload remote file: ${message}.`
+      };
     }
     return {
       success: false,
@@ -3042,7 +3034,7 @@ class ValOpsFS extends ValOps {
         }]
       };
     }
-    const metadataParseRes = this.parseJsonFile(metadataFilePath, zod.z.record(zod.z.union([zod.z.string(), zod.z.number()])));
+    const metadataParseRes = this.parseJsonFile(metadataFilePath, zod.z.record(zod.z.string(), zod.z.union([zod.z.string(), zod.z.number()])));
     if (metadataParseRes.error) {
       return {
         errors: [metadataParseRes.error]
@@ -3416,7 +3408,7 @@ class FSOpsHost {
       fs__default["default"].mkdirSync(path__namespace["default"].dirname(path), {
         recursive: false
       });
-    } catch (e) {
+    } catch {
       // ignore
     }
     try {
@@ -3479,7 +3471,7 @@ const MetadataRes = zod.z.object({
   type: zod.z.union([zod.z.literal("file"), zod.z.literal("image")]).nullable()
 });
 const SummaryResponse = zod.z.object({
-  commitSummary: zod.z.string().nullable()
+  commitSummary: zod.z.string()
 });
 const GetApplicablePatches = zod.z.object({
   patches: zod.z.array(zod.z.object({
@@ -3566,6 +3558,10 @@ const ProfilesResponse = zod.z.object({
     }).nullable()
   }))
 });
+const NonceResponse = zod.z.object({
+  nonce: zod.z.string(),
+  url: zod.z.string()
+});
 class ValOpsHttp extends ValOps {
   constructor(contentUrl, project, commitSha,
   // TODO: CommitSha
@@ -3634,20 +3630,19 @@ class ValOpsHttp extends ValOps {
           }
         };
       }
+      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get = res.headers.get("Content-Type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Presigned auth nonce error:", json.message);
-          return {
-            status: "error",
-            statusCode: 500,
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = internal.getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Presigned auth nonce error:", message);
+        return {
+          status: "error",
+          statusCode: 500,
+          error: {
+            message
+          }
+        };
       }
-      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       console.error(unknownErrorMessage);
       return {
         status: "error",
@@ -3707,14 +3702,13 @@ class ValOpsHttp extends ValOps {
       const unknownErrorMessage = `Could not get summary. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get2 = res.headers.get("Content-Type")) !== null && _res$headers$get2 !== void 0 && _res$headers$get2.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Summary error:", json.message);
-          return {
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = internal.getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Summary error:", message);
+        return {
+          error: {
+            message
+          }
+        };
       }
       console.error(unknownErrorMessage);
       return {
@@ -3823,38 +3817,39 @@ class ValOpsHttp extends ValOps {
       }
     }).then(async res => {
       if (res.ok) {
-        const json = await res.json();
-        if (typeof json.nonce !== "string" || typeof json.url !== "string") {
+        const json = NonceResponse.safeParse(await res.json());
+        if (!json.success) {
           return {
             status: "error",
             error: {
-              message: "Invalid nonce response: " + JSON.stringify(json)
+              message: "Invalid nonce response: " + zodValidationError.fromError(json.error).toString()
             }
           };
         }
-        if (!json.url.startsWith("ws://") && !json.url.startsWith("wss://")) {
+        if (!json.data.url.startsWith("ws://") && !json.data.url.startsWith("wss://")) {
           return {
             status: "error",
             error: {
-              message: "Invalid websocket url: " + json.url
+              message: "Invalid websocket url: " + json.data.url
             }
           };
         }
         return {
           status: "success",
           data: {
-            nonce: json.nonce,
-            url: json.url
+            nonce: json.data.nonce,
+            url: json.data.url
           }
         };
       }
       const contentType = res.headers.get("Content-Type") || "";
       if (contentType.startsWith("application/json")) {
         const json = await res.json();
+        const message = internal.getErrorMessageFromUnknownJson(json, "Could not get nonce. Unexpected error (no error message). Status: " + res.status);
         return {
           status: "error",
           error: {
-            message: "Could not get nonce." + (json.message || "Unexpected error (no error message). Status: " + res.status)
+            message: "Could not get nonce." + message
           }
         };
       }
@@ -4054,9 +4049,10 @@ class ValOpsHttp extends ValOps {
       }
       if ((_res$headers$get3 = res.headers.get("Content-Type")) !== null && _res$headers$get3 !== void 0 && _res$headers$get3.includes("application/json")) {
         const json = await res.json();
+        const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
         return fp.result.err({
           errorType: "other",
-          message: json.message || "Unknown error"
+          message
         });
       }
       return fp.result.err({
@@ -4349,15 +4345,24 @@ class ValOpsHttp extends ValOps {
     });
     if (res.ok) {
       const json = await res.json();
+      const parsed = SummaryResponse.safeParse(json);
+      if (parsed.success) {
+        return {
+          commitSummary: parsed.data.commitSummary
+        };
+      }
       return {
-        commitSummary: json.commitSummary
+        error: {
+          message: `Could not parse commit summary response. Error: ${zodValidationError.fromError(parsed.error)}`
+        }
       };
     }
     if ((_res$headers$get4 = res.headers.get("Content-Type")) !== null && _res$headers$get4 !== void 0 && _res$headers$get4.includes("application/json")) {
       const json = await res.json();
+      const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
       return {
         error: {
-          message: json.message
+          message
         }
       };
     }
@@ -4407,8 +4412,10 @@ class ValOpsHttp extends ValOps {
         };
       }
       if ((_res$headers$get5 = res.headers.get("Content-Type")) !== null && _res$headers$get5 !== void 0 && _res$headers$get5.includes("application/json")) {
-        const json = await res.json();
-        if (json.isNotFastForward) {
+        const json = zod.z.object({
+          isNotFastForward: zod.z.boolean().optional()
+        }).safeParse(await res.json());
+        if (json.success && json.data.isNotFastForward) {
           return {
             isNotFastForward: true,
             error: {
@@ -4416,9 +4423,10 @@ class ValOpsHttp extends ValOps {
             }
           };
         }
+        const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
         return {
           error: {
-            message: json.message
+            message
           }
         };
       }
@@ -4455,7 +4463,8 @@ class ValOpsHttp extends ValOps {
     }
     if ((_res$headers$get6 = res.headers.get("Content-Type")) !== null && _res$headers$get6 !== void 0 && _res$headers$get6.includes("application/json")) {
       const json = await res.json();
-      throw Error(`Could not get profiles (status: ${res.status}): ${"message" in json ? json.message : "Unknown error"}`);
+      const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
+      throw Error(`Could not get profiles (status: ${res.status}): ${message}`);
     }
     throw Error(`Could not get profiles. Got status: ${res.status}`);
   }
@@ -4503,7 +4512,7 @@ async function getSettings(projectName, auth) {
       success: true,
       data: parseRes.data
     };
-  } catch (err) {
+  } catch {
     return {
       success: false,
       message: `Failed to get project id. Check network connection and try again.`
@@ -5112,20 +5121,42 @@ const ValServer = (valModules, options, callbacks) => {
             headers: getAuthHeaders(data.token, "application/json")
           });
           if (fetchRes.status === 200) {
-            return {
-              status: fetchRes.status,
-              json: {
-                mode: "proxy",
-                enabled: await callbacks.isEnabled(),
-                ...(await fetchRes.json())
-              }
-            };
+            const json = zod.z.object({
+              member_role: zod.z.union([zod.z.literal("owner"), zod.z.literal("developer"), zod.z.literal("editor")]).optional(),
+              id: zod.z.string(),
+              full_name: zod.z.string().optional(),
+              username: zod.z.string().optional(),
+              avatar_url: zod.z.string().optional()
+            }).safeParse(await fetchRes.json());
+            if (json.success) {
+              return {
+                status: fetchRes.status,
+                json: {
+                  mode: "proxy",
+                  enabled: await callbacks.isEnabled(),
+                  ...json.data
+                }
+              };
+            } else {
+              const message = internal.getErrorMessageFromUnknownJson(json, "Could not parse session response. Unexpected error (no error message). Status: " + fetchRes.status);
+              return {
+                status: 500,
+                json: {
+                  message: message,
+                  ...json
+                }
+              };
+            }
           } else {
+            const json = zod.z.object({
+              message: zod.z.string()
+            }).safeParse(await fetchRes.json());
+            const message = internal.getErrorMessageFromUnknownJson(json, "Unknown error");
             return {
               status: fetchRes.status,
               json: {
-                message: "Failed to authorize",
-                ...(await fetchRes.json())
+                message: message,
+                ...json
               }
             };
           }
@@ -5544,7 +5575,7 @@ const ValServer = (valModules, options, callbacks) => {
         return {
           status: 200,
           json: {
-            patches,
+            patches: patches,
             baseSha: await serverOps.getBaseSha()
           }
         };
@@ -5872,7 +5903,7 @@ const ValServer = (valModules, options, callbacks) => {
             status: 400,
             json: {
               message: "Invalid body: " + zodValidationError.fromError(bodyRes.error).toString(),
-              details: bodyRes.error.errors
+              details: bodyRes.error.issues
             }
           };
         }
@@ -6452,7 +6483,7 @@ async function safeReadGit(cwd) {
           branch: undefined
         };
       }
-    } catch (error) {
+    } catch {
       const parentDir = path__namespace.dirname(currentDir);
 
       // We've reached the root directory
@@ -6478,7 +6509,7 @@ async function safeReadGit(cwd) {
 async function readCommit(gitDir, branchName) {
   try {
     return (await fs.promises.readFile(path__namespace.join(gitDir, ".git", "refs", "heads", branchName), "utf-8")).trim();
-  } catch (err) {
+  } catch {
     return undefined;
   }
 }
@@ -6668,7 +6699,7 @@ function createValApiRouter(route, valServerPromise, convert) {
   };
 }
 function formatZodErrorString(error) {
-  const errors = zodValidationError.fromZodError(error).toString();
+  const errors = zodValidationError.fromError(error).toString();
   return errors.length > 640 ? `${errors.slice(0, 640)}...` : errors;
 }
 function zodErrorResult(error, message) {
@@ -6909,7 +6940,7 @@ async function getFileBufferFromRemote(ref, fileExt, currentFileHash, projectRoo
       await fs__default["default"].promises.unlink(remoteFilePath);
       throw Error(`Cached file hash does not match the expected hash: ${computedFileHash} !== ${currentFileHash}`);
     }
-  } catch (err) {
+  } catch {
     try {
       await fs__default["default"].promises.mkdir(remoteFileCacheDir, {
         recursive: true

package/dist/valbuild-server.esm.js

@@ -8,12 +8,12 @@ import path__default from 'path';
 import fs, { promises } from 'fs';
 import { transform } from 'sucrase';
 import { VAL_CSS_PATH, VAL_APP_ID, VAL_OVERLAY_ID } from '@valbuild/ui';
-import { filterRoutesByPatterns, validateRoutePatterns, Patch, ParentRef, VAL_ENABLE_COOKIE_NAME, VAL_STATE_COOKIE, VAL_SESSION_COOKIE, Api } from '@valbuild/shared/internal';
+import { filterRoutesByPatterns, validateRoutePatterns, getErrorMessageFromUnknownJson, Patch, ParentRef, VAL_ENABLE_COOKIE_NAME, VAL_STATE_COOKIE, VAL_SESSION_COOKIE, Api } from '@valbuild/shared/internal';
 import { createUIRequestHandler } from '@valbuild/ui/server';
 import crypto$1 from 'crypto';
 import { z } from 'zod';
 import sizeOf from 'image-size';
-import { fromError, fromZodError } from 'zod-validation-error';
+import { fromError } from 'zod-validation-error';
 import http from 'http';
 import https from 'https';
 
@@ -1033,9 +1033,7 @@ const MAX_CACHE_SIZE = 100 * 1024 * 1024; // 100 mb
 const MAX_OBJECT_KEY_SIZE = 2 ** 27; // https://stackoverflow.com/questions/13367391/is-there-a-limit-on-length-of-the-key-string-in-js-object
 
 class ValModuleLoader {
-  constructor(projectRoot,
-  // eslint-disable-next-line @typescript-eslint/no-unused-vars
-  compilerOptions,
+  constructor(projectRoot, compilerOptions,
   // TODO: remove this?
   sourceFileHandler, host = {
     ...ts.sys,
@@ -1249,7 +1247,7 @@ export default new Proxy({}, {
       return {
         value: moduleLoader.getModule(modulePath)
       };
-    } catch (e) {
+    } catch {
       return {
         error: Error(`Could not resolve module: '${modulePath}'`)
       };
@@ -1498,7 +1496,7 @@ class ValOps {
         collector.push("[");
         for (let i = 0; i < item.length; i++) {
           this.collectObjectRecursive(item[i], collector);
-          i !== item.length - 1 && collector.push(",");
+          if (i !== item.length - 1) collector.push(",");
         }
         collector.push("]");
       } else {
@@ -1507,7 +1505,7 @@ class ValOps {
         keys.forEach((key, i) => {
           collector.push(`"${key}":`);
           this.collectObjectRecursive(item[key], collector);
-          i !== keys.length - 1 && collector.push(",");
+          if (i !== keys.length - 1) collector.push(",");
         });
         collector.push("}");
       }
@@ -2464,7 +2462,7 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
       ...authHeader,
       "Content-Type": "application/octet-stream"
     },
-    body: fileBuffer
+    body: new Uint8Array(fileBuffer)
   });
   if (!res.ok) {
     var _res$headers$get;
@@ -2476,17 +2474,11 @@ async function uploadRemoteFile(contentHost, project, bucket, fileHash, fileExt,
     }
     if ((_res$headers$get = res.headers.get("content-type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
       const json = await res.json();
-      if (json.message) {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${json.message}.`
-        };
-      } else {
-        return {
-          success: false,
-          error: `Failed to upload remote file: ${JSON.stringify(json)}.`
-        };
-      }
+      const message = getErrorMessageFromUnknownJson(json, JSON.stringify(json));
+      return {
+        success: false,
+        error: `Failed to upload remote file: ${message}.`
+      };
     }
     return {
       success: false,
@@ -3011,7 +3003,7 @@ class ValOpsFS extends ValOps {
         }]
       };
     }
-    const metadataParseRes = this.parseJsonFile(metadataFilePath, z.record(z.union([z.string(), z.number()])));
+    const metadataParseRes = this.parseJsonFile(metadataFilePath, z.record(z.string(), z.union([z.string(), z.number()])));
     if (metadataParseRes.error) {
       return {
         errors: [metadataParseRes.error]
@@ -3385,7 +3377,7 @@ class FSOpsHost {
       fs.mkdirSync(path__default.dirname(path), {
         recursive: false
       });
-    } catch (e) {
+    } catch {
       // ignore
     }
     try {
@@ -3448,7 +3440,7 @@ const MetadataRes = z.object({
   type: z.union([z.literal("file"), z.literal("image")]).nullable()
 });
 const SummaryResponse = z.object({
-  commitSummary: z.string().nullable()
+  commitSummary: z.string()
 });
 const GetApplicablePatches = z.object({
   patches: z.array(z.object({
@@ -3535,6 +3527,10 @@ const ProfilesResponse = z.object({
     }).nullable()
   }))
 });
+const NonceResponse = z.object({
+  nonce: z.string(),
+  url: z.string()
+});
 class ValOpsHttp extends ValOps {
   constructor(contentUrl, project, commitSha,
   // TODO: CommitSha
@@ -3603,20 +3599,19 @@ class ValOpsHttp extends ValOps {
           }
         };
       }
+      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get = res.headers.get("Content-Type")) !== null && _res$headers$get !== void 0 && _res$headers$get.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Presigned auth nonce error:", json.message);
-          return {
-            status: "error",
-            statusCode: 500,
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Presigned auth nonce error:", message);
+        return {
+          status: "error",
+          statusCode: 500,
+          error: {
+            message
+          }
+        };
       }
-      const unknownErrorMessage = `Could not get presigned auth nonce. HTTP error: ${res.status} ${res.statusText}`;
       console.error(unknownErrorMessage);
       return {
         status: "error",
@@ -3676,14 +3671,13 @@ class ValOpsHttp extends ValOps {
       const unknownErrorMessage = `Could not get summary. HTTP error: ${res.status} ${res.statusText}`;
       if ((_res$headers$get2 = res.headers.get("Content-Type")) !== null && _res$headers$get2 !== void 0 && _res$headers$get2.includes("application/json")) {
         const json = await res.json();
-        if (json.message) {
-          console.error("Summary error:", json.message);
-          return {
-            error: {
-              message: json.message
-            }
-          };
-        }
+        const message = getErrorMessageFromUnknownJson(json, unknownErrorMessage);
+        console.error("Summary error:", message);
+        return {
+          error: {
+            message
+          }
+        };
       }
       console.error(unknownErrorMessage);
       return {
@@ -3792,38 +3786,39 @@ class ValOpsHttp extends ValOps {
       }
     }).then(async res => {
       if (res.ok) {
-        const json = await res.json();
-        if (typeof json.nonce !== "string" || typeof json.url !== "string") {
+        const json = NonceResponse.safeParse(await res.json());
+        if (!json.success) {
           return {
             status: "error",
             error: {
-              message: "Invalid nonce response: " + JSON.stringify(json)
+              message: "Invalid nonce response: " + fromError(json.error).toString()
             }
           };
         }
-        if (!json.url.startsWith("ws://") && !json.url.startsWith("wss://")) {
+        if (!json.data.url.startsWith("ws://") && !json.data.url.startsWith("wss://")) {
           return {
             status: "error",
             error: {
-              message: "Invalid websocket url: " + json.url
+              message: "Invalid websocket url: " + json.data.url
             }
           };
         }
         return {
           status: "success",
           data: {
-            nonce: json.nonce,
-            url: json.url
+            nonce: json.data.nonce,
+            url: json.data.url
           }
         };
       }
       const contentType = res.headers.get("Content-Type") || "";
       if (contentType.startsWith("application/json")) {
         const json = await res.json();
+        const message = getErrorMessageFromUnknownJson(json, "Could not get nonce. Unexpected error (no error message). Status: " + res.status);
         return {
           status: "error",
           error: {
-            message: "Could not get nonce." + (json.message || "Unexpected error (no error message). Status: " + res.status)
+            message: "Could not get nonce." + message
           }
         };
       }
@@ -4023,9 +4018,10 @@ class ValOpsHttp extends ValOps {
       }
       if ((_res$headers$get3 = res.headers.get("Content-Type")) !== null && _res$headers$get3 !== void 0 && _res$headers$get3.includes("application/json")) {
         const json = await res.json();
+        const message = getErrorMessageFromUnknownJson(json, "Unknown error");
         return result.err({
           errorType: "other",
-          message: json.message || "Unknown error"
+          message
         });
       }
       return result.err({
@@ -4318,15 +4314,24 @@ class ValOpsHttp extends ValOps {
     });
     if (res.ok) {
       const json = await res.json();
+      const parsed = SummaryResponse.safeParse(json);
+      if (parsed.success) {
+        return {
+          commitSummary: parsed.data.commitSummary
+        };
+      }
       return {
-        commitSummary: json.commitSummary
+        error: {
+          message: `Could not parse commit summary response. Error: ${fromError(parsed.error)}`
+        }
       };
     }
     if ((_res$headers$get4 = res.headers.get("Content-Type")) !== null && _res$headers$get4 !== void 0 && _res$headers$get4.includes("application/json")) {
       const json = await res.json();
+      const message = getErrorMessageFromUnknownJson(json, "Unknown error");
       return {
         error: {
-          message: json.message
+          message
         }
       };
     }
@@ -4376,8 +4381,10 @@ class ValOpsHttp extends ValOps {
         };
       }
       if ((_res$headers$get5 = res.headers.get("Content-Type")) !== null && _res$headers$get5 !== void 0 && _res$headers$get5.includes("application/json")) {
-        const json = await res.json();
-        if (json.isNotFastForward) {
+        const json = z.object({
+          isNotFastForward: z.boolean().optional()
+        }).safeParse(await res.json());
+        if (json.success && json.data.isNotFastForward) {
           return {
             isNotFastForward: true,
             error: {
@@ -4385,9 +4392,10 @@ class ValOpsHttp extends ValOps {
             }
           };
         }
+        const message = getErrorMessageFromUnknownJson(json, "Unknown error");
         return {
           error: {
-            message: json.message
+            message
           }
         };
       }
@@ -4424,7 +4432,8 @@ class ValOpsHttp extends ValOps {
     }
     if ((_res$headers$get6 = res.headers.get("Content-Type")) !== null && _res$headers$get6 !== void 0 && _res$headers$get6.includes("application/json")) {
       const json = await res.json();
-      throw Error(`Could not get profiles (status: ${res.status}): ${"message" in json ? json.message : "Unknown error"}`);
+      const message = getErrorMessageFromUnknownJson(json, "Unknown error");
+      throw Error(`Could not get profiles (status: ${res.status}): ${message}`);
     }
     throw Error(`Could not get profiles. Got status: ${res.status}`);
   }
@@ -4472,7 +4481,7 @@ async function getSettings(projectName, auth) {
       success: true,
       data: parseRes.data
     };
-  } catch (err) {
+  } catch {
     return {
       success: false,
       message: `Failed to get project id. Check network connection and try again.`
@@ -5081,20 +5090,42 @@ const ValServer = (valModules, options, callbacks) => {
             headers: getAuthHeaders(data.token, "application/json")
           });
           if (fetchRes.status === 200) {
-            return {
-              status: fetchRes.status,
-              json: {
-                mode: "proxy",
-                enabled: await callbacks.isEnabled(),
-                ...(await fetchRes.json())
-              }
-            };
+            const json = z.object({
+              member_role: z.union([z.literal("owner"), z.literal("developer"), z.literal("editor")]).optional(),
+              id: z.string(),
+              full_name: z.string().optional(),
+              username: z.string().optional(),
+              avatar_url: z.string().optional()
+            }).safeParse(await fetchRes.json());
+            if (json.success) {
+              return {
+                status: fetchRes.status,
+                json: {
+                  mode: "proxy",
+                  enabled: await callbacks.isEnabled(),
+                  ...json.data
+                }
+              };
+            } else {
+              const message = getErrorMessageFromUnknownJson(json, "Could not parse session response. Unexpected error (no error message). Status: " + fetchRes.status);
+              return {
+                status: 500,
+                json: {
+                  message: message,
+                  ...json
+                }
+              };
+            }
           } else {
+            const json = z.object({
+              message: z.string()
+            }).safeParse(await fetchRes.json());
+            const message = getErrorMessageFromUnknownJson(json, "Unknown error");
             return {
               status: fetchRes.status,
               json: {
-                message: "Failed to authorize",
-                ...(await fetchRes.json())
+                message: message,
+                ...json
               }
             };
           }
@@ -5513,7 +5544,7 @@ const ValServer = (valModules, options, callbacks) => {
         return {
           status: 200,
           json: {
-            patches,
+            patches: patches,
             baseSha: await serverOps.getBaseSha()
           }
         };
@@ -5841,7 +5872,7 @@ const ValServer = (valModules, options, callbacks) => {
             status: 400,
             json: {
               message: "Invalid body: " + fromError(bodyRes.error).toString(),
-              details: bodyRes.error.errors
+              details: bodyRes.error.issues
             }
           };
         }
@@ -6421,7 +6452,7 @@ async function safeReadGit(cwd) {
           branch: undefined
         };
       }
-    } catch (error) {
+    } catch {
       const parentDir = path.dirname(currentDir);
 
       // We've reached the root directory
@@ -6447,7 +6478,7 @@ async function safeReadGit(cwd) {
 async function readCommit(gitDir, branchName) {
   try {
     return (await promises.readFile(path.join(gitDir, ".git", "refs", "heads", branchName), "utf-8")).trim();
-  } catch (err) {
+  } catch {
     return undefined;
   }
 }
@@ -6637,7 +6668,7 @@ function createValApiRouter(route, valServerPromise, convert) {
   };
 }
 function formatZodErrorString(error) {
-  const errors = fromZodError(error).toString();
+  const errors = fromError(error).toString();
   return errors.length > 640 ? `${errors.slice(0, 640)}...` : errors;
 }
 function zodErrorResult(error, message) {
@@ -6878,7 +6909,7 @@ async function getFileBufferFromRemote(ref, fileExt, currentFileHash, projectRoo
       await fs.promises.unlink(remoteFilePath);
       throw Error(`Cached file hash does not match the expected hash: ${computedFileHash} !== ${currentFileHash}`);
     }
-  } catch (err) {
+  } catch {
     try {
       await fs.promises.mkdir(remoteFileCacheDir, {
         recursive: true

package/package.json

@@ -16,33 +16,33 @@
     "./package.json": "./package.json"
   },
   "types": "dist/valbuild-server.cjs.d.ts",
-  "version": "0.91.3",
-  "scripts": {
-    "typecheck": "tsc --noEmit",
-    "test": "jest",
-    "test:watch": "jest --watch"
-  },
+  "version": "0.92.0",
   "devDependencies": {
-    "@prettier/sync": "^0.5.2",
-    "@types/jest": "^29.2.5"
+    "@prettier/sync": "^0.6.1",
+    "@types/jest": "^30.0.0"
   },
   "dependencies": {
-    "@valbuild/core": "~0.91.3",
-    "@valbuild/shared": "~0.91.3",
-    "@valbuild/ui": "~0.91.3",
-    "chokidar": "^4.0.1",
-    "image-size": "^1.0.2",
-    "minimatch": "^3.0.4",
+    "chokidar": "^5.0.0",
+    "image-size": "^2.0.2",
+    "minimatch": "^10.1.1",
     "quickjs-emscripten": "^0.21.1",
-    "sucrase": "^3.34.0",
-    "typescript": "^5.1.3",
-    "zod": "^3.20.6",
-    "zod-validation-error": "^3.3.0"
+    "sucrase": "^3.35.1",
+    "typescript": "^5.9.3",
+    "zod": "^4.3.5",
+    "zod-validation-error": "^5.0.0",
+    "@valbuild/core": "0.92.0",
+    "@valbuild/shared": "0.92.0",
+    "@valbuild/ui": "0.92.0"
   },
   "engines": {
     "node": ">=18.17.0"
   },
   "files": [
     "dist"
-  ]
-}
+  ],
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "jest",
+    "test:watch": "jest --watch"
+  }
+}