@zudojs/rpc 0.1.0 → 1.0.0

package/dist/rpc/validation/rpcValidation.core.js

@@ -0,0 +1,125 @@
+/**
+ * @zudojs/rpc/validation
+ *
+ * Request-level checks applied before a payload reaches a handler.
+ *
+ * Requests arrive from an untrusted peer over a transport, so these are
+ * the first checks the server runs, not the last.
+ */
+import { RPCInvalidRequestError, RPCValidationError, } from "../errors/rpc.errors.js";
+import { MAX_PROCEDURE_NAME_LENGTH, MAX_RPC_PAYLOAD_SIZE, PROCEDURE_NAME_PATTERN, } from "../constants/rpcConstants.core.js";
+/**
+ * Validates a procedure name.
+ *
+ * Length is checked before the pattern so a pathological name cannot
+ * drive regex backtracking.
+ */
+export function assertValidProcedureName(name) {
+    if (typeof name !== "string" || name.length === 0) {
+        throw new RPCInvalidRequestError("Procedure name must be a non-empty string.");
+    }
+    if (name.length > MAX_PROCEDURE_NAME_LENGTH) {
+        throw new RPCInvalidRequestError(`Procedure name exceeds ${MAX_PROCEDURE_NAME_LENGTH} characters.`);
+    }
+    if (!PROCEDURE_NAME_PATTERN.test(name)) {
+        throw new RPCInvalidRequestError(`Procedure name "${name}" must be dot-separated identifiers, e.g. "users.getUser".`);
+    }
+}
+/**
+ * Measures the encoded size of a payload in bytes.
+ *
+ * Returns `undefined` for a payload that cannot be encoded, which the
+ * caller reports as an invalid request rather than passing on.
+ */
+export function measurePayloadBytes(payload) {
+    if (payload === undefined) {
+        return 0;
+    }
+    try {
+        const encoded = JSON.stringify(payload);
+        if (encoded === undefined) {
+            return undefined;
+        }
+        return Buffer.byteLength(encoded, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Validates the shape and size of an incoming request.
+ *
+ * @throws {RPCInvalidRequestError} when the frame is malformed or the
+ * payload exceeds the configured limit.
+ */
+export function assertValidRequest(request, limits = {}) {
+    if (typeof request !== "object" || request === null) {
+        throw new RPCInvalidRequestError("Request must be an object.");
+    }
+    const candidate = request;
+    if (typeof candidate.id !== "string" || candidate.id.length === 0) {
+        throw new RPCInvalidRequestError("Request id must be a non-empty string.");
+    }
+    if (limits.enforceProcedureNamePattern ?? true) {
+        assertValidProcedureName(candidate.procedure);
+    }
+    else if (typeof candidate.procedure !== "string" ||
+        candidate.procedure.length === 0) {
+        throw new RPCInvalidRequestError("Procedure name must be a non-empty string.", undefined);
+    }
+    if (candidate.metadata !== undefined &&
+        (typeof candidate.metadata !== "object" || candidate.metadata === null)) {
+        throw new RPCInvalidRequestError("Request metadata must be an object.", candidate.procedure);
+    }
+    const maxBytes = limits.maxPayloadBytes ?? MAX_RPC_PAYLOAD_SIZE;
+    if (maxBytes > 0) {
+        const size = measurePayloadBytes(candidate.payload);
+        if (size === undefined) {
+            throw new RPCInvalidRequestError("Request payload could not be encoded.", candidate.procedure);
+        }
+        if (size > maxBytes) {
+            throw new RPCInvalidRequestError(`Request payload of ${size} bytes exceeds the ${maxBytes} byte limit.`, candidate.procedure);
+        }
+    }
+}
+/**
+ * Converts schema issues into metadata safe to return to a caller.
+ *
+ * Only the path, code and message travel; the received input is dropped
+ * so a validation response cannot echo back data the caller sent.
+ */
+export function toValidationIssues(issues) {
+    return issues.map((issue) => ({
+        path: issue.path.map(String).join("."),
+        code: String(issue.code),
+        message: issue.message,
+    }));
+}
+/**
+ * Parses caller input against a schema.
+ *
+ * @throws {RPCValidationError} carrying the issues, which are safe to
+ * return: they describe the caller's own input.
+ */
+export function parseInput(schema, value, procedureName) {
+    const result = schema.safeParse(value);
+    if (result.success) {
+        return result.data;
+    }
+    throw new RPCValidationError(`Invalid input for procedure "${procedureName}".`, toValidationIssues(result.issues), procedureName);
+}
+/**
+ * Parses a handler's result against its output schema.
+ *
+ * An invalid output is a server defect rather than a caller mistake, so
+ * the issues describe internal shape and stay server-side: the thrown
+ * error carries no issue detail.
+ */
+export function parseOutput(schema, value, procedureName) {
+    const result = schema.safeParse(value);
+    if (result.success) {
+        return result.data;
+    }
+    throw new RPCValidationError(`Procedure "${procedureName}" produced a response that does not match its output schema.`, undefined, procedureName);
+}
+//# sourceMappingURL=rpcValidation.core.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zudojs/rpc",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "Remote procedure call infrastructure for Zudojs applications.",
   "license": "MIT",
   "type": "module",
@@ -14,26 +14,22 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "!dist/**/*.map",
+    "!dist/**/*.tsbuildinfo",
+    "!dist/.tsbuildinfo"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "clean": "rm -rf dist",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
   "engines": {
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@zudojs/errors": "0.1.0",
-    "@zudojs/constants": "0.1.0",
-    "@zudojs/types": "0.1.0",
-    "@zudojs/schema": "0.1.0"
+    "@zudojs/errors": "1.0.0",
+    "@zudojs/constants": "1.0.0",
+    "@zudojs/types": "1.0.0",
+    "@zudojs/schema": "1.0.0"
   },
   "devDependencies": {
-    "typescript": "^7.0.2",
+    "typescript": "7.0.2",
     "vitest": "^4.1.11"
   },
   "publishConfig": {
@@ -46,8 +42,19 @@
     "procedure"
   ],
   "homepage": "https://github.com/oyinlola-tech/zudo#readme",
+  "bugs": {
+    "url": "https://github.com/oyinlola-tech/zudo/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "https://github.com/oyinlola-tech/zudo"
+    "url": "https://github.com/oyinlola-tech/zudo",
+    "directory": "packages/rpc"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}