lambder 10.0.1 → 10.0.2

package/CHANGELOG.md

@@ -9,6 +9,19 @@ sit on its first published patch, and later patches list only what they changed.
 Releases up to 3.2.6 carry git tags; the ones after it were published without
 one, so versions are not cross-linked to tag comparisons here.
 
+## [10.0.2] - 2026-09-28
+
+### Fixed
+
+- **A guard an init's `guard()` builds inside a map held to `LambderApiGuard`**
+  (`{ ... } satisfies Record<string, LambderApiGuard<any, any, any>>`, the
+  shape an app's guards file takes) did not compile when it named no
+  `refusals`: the map's contextual type widened the guard's refusals to
+  `readonly string[]`, which the vocabulary check read as codes it does not
+  hold, so every such guard was asked for a `refusals` option. The refusals in
+  a built guard's type are no longer an inference site, so a guard that names
+  none declares none wherever it is built.
+
 ## [10.0.1] - 2026-09-28
 
 A major that makes both sides of an API answer exact. A success is only ever

package/dist/api/LambderApiGuards.d.ts

@@ -168,7 +168,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
         session: true;
         handler: (ctx: TSessionCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: z.output<TInput>, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         apiInput: TInput;
         guardInput?: undefined;
         session: true;
@@ -178,7 +178,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
         apiInput: TInput;
         handler: (ctx: TCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: z.output<TInput>, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         apiInput: TInput;
         guardInput?: undefined;
         session?: undefined;
@@ -189,7 +189,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
         session: true;
         handler: (ctx: TSessionCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: z.output<TInput>, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         guardInput: TInput;
         apiInput?: undefined;
         session: true;
@@ -199,7 +199,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
         guardInput: TInput;
         handler: (ctx: TCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: z.output<TInput>, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         guardInput: TInput;
         apiInput?: undefined;
         session?: undefined;
@@ -209,7 +209,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
         session: true;
         handler: (ctx: TSessionCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: undefined, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         apiInput?: undefined;
         guardInput?: undefined;
         session: true;
@@ -218,7 +218,7 @@ export type LambderGuardBuilder<TCtx, TSessionCtx, TVocabulary = never, TCodesRe
     <TParam = undefined, TOutput = void, const TRefusals extends readonly string[] = readonly []>(guard: {
         handler: (ctx: TCtx & LambderGuardRefuse<TVocabulary, TRefusals, TCodesRequired>, payload: undefined, param: TParam) => TOutput | Promise<TOutput>;
     } & LambderGuardPlacement & LambderGuardRefusals<TRefusals> & LambderGuardRefusalsKnownIn<TVocabulary, TRefusals> & LambderGuardAnswerCheck<TOutput>): LambderGuardOf<TOutput, {
-        refusals?: TRefusals;
+        refusals?: NoInfer<TRefusals>;
         apiInput?: undefined;
         guardInput?: undefined;
         session?: undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lambder",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "sideEffects": false,
   "description": "Opinionated serverless web framework for TypeScript on AWS Lambda: type-safe APIs from Zod schemas, DynamoDB sessions, and declarative rate limits, authorization guards and idempotency.",
   "keywords": [