@zeroxsolutions/server 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -1,3 +1,26 @@
+## 0.5.0 (2026-09-29)
+
+### 🩹 Fixes
+
+- ⚠️  **server:** read the negotiation headers, never the request body ([cf83e29](https://github.com/zeroxsolutions/zeroxsolutions/commit/cf83e29))
+
+### ⚠️  Breaking Changes
+
+- **server:** read the negotiation headers, never the request body  ([cf83e29](https://github.com/zeroxsolutions/zeroxsolutions/commit/cf83e29))
+  jsonApiContentNegotiation no longer refuses a body sent
+  with no Content-Type or in another media type, and judges a Content-Type
+  on a bodyless request too. NEGOTIATION_RESPONSES describes the two
+  refusals that remain.
+
+### ❤️ Thank You
+
+- Claude Opus 5.5 (1M context)
+- Lương Văn Tú
+
+## 0.4.1 (2026-09-28)
+
+This was a version bump only for @zeroxsolutions/server to align it with other projects, there were no code changes.
+
 ## 0.4.0 (2026-09-28)
 
 ### 🚀 Features

package/dist/content-negotiation.d.ts

@@ -4,11 +4,9 @@ import type { SurfaceVocabulary } from './surface-vocabulary.js';
  * Hono adapter over {@link negotiateJsonApi}: rejects with 415/406 per JSON:API v1.1 content
  * negotiation, then labels a JSON:API response body with the JSON:API media type.
  *
- * `Content-Type` is read only where the request carries content - a bodyless `Request` has `body === null`,
- * a write's is a stream - because a header describes a representation and a read route has none, so an
- * unconditional read would cost a client sending a blanket default the whole collection. A write that does
- * carry a body but sent no `Content-Type` reads as `''`, which the negotiator refuses (415): a wildcard never
- * stands in for the one type this surface reads.
+ * The decision reads the two headers and never the body. A runtime decides for itself whether a bodyless
+ * request has a `body`: workerd hands every POST a stream, empty or not, so a decision keyed on the body
+ * refused every bodyless POST there while passing it under Node.
  *
  * The response side only labels a body `c.json` left as `application/json` (or with no `Content-Type` at all):
  * a route that answers `c.text(...)` or `c.body(null, 204)` keeps its own header, since neither is a JSON:API

package/dist/content-negotiation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-negotiation.d.ts","sourceRoot":"","sources":["../src/content-negotiation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GAAG;IAAE,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACvE,iBAAiB,CAanB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGxB,CAAC"}
+{"version":3,"file":"content-negotiation.d.ts","sourceRoot":"","sources":["../src/content-negotiation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GAAG;IAAE,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACvE,iBAAiB,CAWnB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOxB,CAAC"}

package/dist/content-negotiation.js

@@ -4,11 +4,9 @@ import { errorResponse, JSON_API_MEDIA_TYPE } from '@zeroxsolutions/response';
  * Hono adapter over {@link negotiateJsonApi}: rejects with 415/406 per JSON:API v1.1 content
  * negotiation, then labels a JSON:API response body with the JSON:API media type.
  *
- * `Content-Type` is read only where the request carries content - a bodyless `Request` has `body === null`,
- * a write's is a stream - because a header describes a representation and a read route has none, so an
- * unconditional read would cost a client sending a blanket default the whole collection. A write that does
- * carry a body but sent no `Content-Type` reads as `''`, which the negotiator refuses (415): a wildcard never
- * stands in for the one type this surface reads.
+ * The decision reads the two headers and never the body. A runtime decides for itself whether a bodyless
+ * request has a `body`: workerd hands every POST a stream, empty or not, so a decision keyed on the body
+ * refused every bodyless POST there while passing it under Node.
  *
  * The response side only labels a body `c.json` left as `application/json` (or with no `Content-Type` at all):
  * a route that answers `c.text(...)` or `c.body(null, 204)` keeps its own header, since neither is a JSON:API
@@ -22,9 +20,7 @@ import { errorResponse, JSON_API_MEDIA_TYPE } from '@zeroxsolutions/response';
 export function jsonApiContentNegotiation(options) {
     const supported = new Set(options.supportedExtensions ?? []);
     return async (c, next) => {
-        // A body sent without a Content-Type is judged as an empty one, which the negotiator refuses.
-        const contentType = c.req.raw.body === null ? undefined : (c.req.header('Content-Type') ?? '');
-        const error = negotiateJsonApi(contentType, c.req.header('Accept'), options.namespace, supported);
+        const error = negotiateJsonApi(c.req.header('Content-Type'), c.req.header('Accept'), options.namespace, supported);
         if (error)
             throw error;
         await next();
@@ -45,6 +41,6 @@ export function jsonApiContentNegotiation(options) {
  * ```
  */
 export const NEGOTIATION_RESPONSES = {
-    406: errorResponse('The Accept header names no type this surface answers in'),
-    415: errorResponse('The Content-Type header names a type this surface does not read'),
+    406: errorResponse('Every JSON:API media type the Accept header names carries a parameter this surface does not answer'),
+    415: errorResponse('The JSON:API media type in the Content-Type header carries a parameter this surface does not read'),
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zeroxsolutions/server",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -21,9 +21,9 @@
   },
   "dependencies": {
     "tslib": "^2.3.0",
-    "@zeroxsolutions/jsonapi": "0.12.0",
-    "@zeroxsolutions/query": "0.7.0",
-    "@zeroxsolutions/response": "0.14.0"
+    "@zeroxsolutions/jsonapi": "0.13.0",
+    "@zeroxsolutions/response": "0.14.2",
+    "@zeroxsolutions/query": "0.7.1"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.0.0",