scorezilla 0.1.0-next.0 → 0.1.0-next.3

package/dist/index.js

@@ -16,24 +16,10 @@ function validateConfig(cfg) {
   }
   let auth;
   if (hasPublic) {
-    const pk = cfg.publicKey;
-    if (typeof pk !== "string" || !PUBLIC_KEY_PATTERN.test(pk)) {
-      throw new Error(
-        `scorezilla: publicKey must match ${PUBLIC_KEY_PATTERN.toString()} (got: ${typeof pk === "string" ? pk.slice(0, 12) + "\u2026" : typeof pk})`
-      );
-    }
-    auth = { kind: "public", key: pk };
+    auth = { kind: "public", key: validatePublicKeyValue(cfg.publicKey) };
   } else {
-    const sk = cfg.secretKey;
-    if (!sk || typeof sk !== "object" || typeof sk.id !== "string" || typeof sk.secret !== "string") {
-      throw new Error("scorezilla: secretKey must be an object with string `id` and `secret`");
-    }
-    if (!sk.secret.startsWith(SECRET_KEY_PREFIX)) {
-      throw new Error(
-        `scorezilla: secretKey.secret must start with "${SECRET_KEY_PREFIX}" (live keys only)`
-      );
-    }
-    auth = { kind: "secret", keyId: sk.id, secret: sk.secret };
+    const resolved = validateSecretKey(cfg);
+    auth = { kind: "secret", keyId: resolved.keyId, secret: resolved.secret };
   }
   const baseUrlRaw = cfg.baseUrl ?? DEFAULT_BASE_URL;
   if (typeof baseUrlRaw !== "string" || baseUrlRaw.length === 0) {
@@ -44,10 +30,40 @@ function validateConfig(cfg) {
     fetch: cfg.fetch,
     timeoutMs: cfg.timeoutMs,
     maxRetries: cfg.maxRetries,
+    sleepImpl: cfg.sleepImpl,
     userAgent: cfg.userAgent,
     auth
   };
 }
+function validatePublicKeyValue(pk) {
+  if (typeof pk !== "string" || !PUBLIC_KEY_PATTERN.test(pk)) {
+    const shape = typeof pk === "string" ? `string of length ${pk.length}` : typeof pk;
+    throw new Error(
+      `scorezilla: publicKey must match ${PUBLIC_KEY_PATTERN.toString()} (got: ${shape})`
+    );
+  }
+  return pk;
+}
+var SECRET_KEY_PATTERN = /^sk_live_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})_[A-Za-z0-9]+$/;
+function validateSecretKey(cfg) {
+  if (!cfg || typeof cfg !== "object") {
+    throw new Error("scorezilla/server: config must be an object with a secretKey field");
+  }
+  const sk = cfg.secretKey;
+  if (typeof sk !== "string") {
+    throw new Error(
+      `scorezilla/server: secretKey must be a single string of the shape ${SECRET_KEY_PREFIX}<keyId>_<random> (got: ${typeof sk})`
+    );
+  }
+  const match = SECRET_KEY_PATTERN.exec(sk);
+  if (!match) {
+    const shape = `string of length ${sk.length}`;
+    throw new Error(
+      `scorezilla/server: secretKey must match ${SECRET_KEY_PATTERN.toString()} (got: ${shape}). v0.1.0-next.2 switched to a single-token format \u2014 if you have a pre-next.2 pair, issue a fresh key in the dashboard to upgrade.`
+    );
+  }
+  return { keyId: match[1], secret: sk };
+}
 
 // src/paths.ts
 function encodeSegment(value, label) {
@@ -87,6 +103,12 @@ function truncateMessage(raw) {
   const sliceEnd = Math.max(0, MESSAGE_MAX_CHARS - TRUNCATION_SUFFIX.length);
   return raw.slice(0, sliceEnd) + TRUNCATION_SUFFIX;
 }
+function truncateField(raw) {
+  if (typeof raw !== "string") return void 0;
+  if (raw.length <= MESSAGE_MAX_CHARS) return raw;
+  const sliceEnd = Math.max(0, MESSAGE_MAX_CHARS - TRUNCATION_SUFFIX.length);
+  return raw.slice(0, sliceEnd) + TRUNCATION_SUFFIX;
+}
 var ScorezillaError = class _ScorezillaError extends Error {
   /** HTTP status of the response, or {@link STATUS_NETWORK_ERROR} (0) for
    *  network / abort / timeout. */
@@ -117,11 +139,11 @@ var ScorezillaError = class _ScorezillaError extends Error {
     this.name = "ScorezillaError";
     this.status = init.status;
     this.code = init.code;
-    this.reason = init.reason;
+    this.reason = truncateField(init.reason);
     this.retryAfter = init.retryAfter;
-    this.requestId = init.requestId;
+    this.requestId = truncateField(init.requestId);
     this.bound = init.bound;
-    this.layer = init.layer;
+    this.layer = truncateField(init.layer);
     this.cause = init.cause;
     Object.setPrototypeOf(this, _ScorezillaError.prototype);
     if (typeof Error.captureStackTrace === "function") {
@@ -251,8 +273,9 @@ function shouldRetryError(err) {
 function generateIdempotencyKey() {
   const c = globalThis.crypto;
   if (!c || typeof c.randomUUID !== "function") {
-    throw new Error(
-      "scorezilla: globalThis.crypto.randomUUID is unavailable. The SDK requires Node \u2265 20 or a modern browser. Check your runtime."
+    throw new ScorezillaError(
+      "scorezilla: globalThis.crypto.randomUUID is unavailable. The SDK requires Node \u2265 20 or a modern browser. Check your runtime.",
+      { status: 0, code: "internal_error" }
     );
   }
   return c.randomUUID();
@@ -307,16 +330,24 @@ async function request(opts) {
   for (let attempt = 0; attempt <= maxRetries; attempt++) {
     const combined = combineSignalsWithTimeout(opts.signal, timeoutMs);
     try {
+      const bodyString = opts.body !== void 0 ? JSON.stringify(opts.body) : "";
+      const perAttemptHeaders = { ...opts.headers ?? {} };
+      if (opts.signRequest) {
+        perAttemptHeaders.Authorization = await opts.signRequest({
+          method: opts.method,
+          pathAndQuery: opts.path,
+          body: bodyString
+        });
+      }
       const init = {
         method: opts.method,
-        headers: buildHeaders(opts, idempotencyKey),
+        headers: buildHeaders({ ...opts, headers: perAttemptHeaders }, idempotencyKey),
         signal: combined.signal
       };
       if (opts.body !== void 0) {
-        init.body = JSON.stringify(opts.body);
+        init.body = bodyString;
       }
       const response = await fetchImpl(url, init);
-      combined.cleanup();
       if (response.ok) {
         return await parseJson(response);
       }
@@ -335,7 +366,6 @@ async function request(opts) {
       }
       throw err;
     } catch (caught) {
-      combined.cleanup();
       if (caught instanceof ScorezillaError) {
         if (shouldRetryError(caught) && attempt < maxRetries) {
           const delay = nextDelay(attempt, void 0, random);
@@ -353,6 +383,8 @@ async function request(opts) {
         continue;
       }
       throw mapped;
+    } finally {
+      combined.cleanup();
     }
   }
   throw lastError ?? new ScorezillaError("Request failed after retries", {
@@ -378,16 +410,38 @@ function buildHeaders(opts, idempotencyKey) {
   return headers;
 }
 async function parseJson(response) {
+  const requestId = response.headers.get("X-Request-Id") ?? void 0;
+  let parsed;
   try {
-    return await response.json();
+    parsed = await response.json();
   } catch (cause) {
     throw new ScorezillaError("Response body was not valid JSON", {
       status: response.status,
       code: "invalid_json",
-      requestId: response.headers.get("X-Request-Id") ?? void 0,
+      requestId,
       cause
     });
   }
+  if (parsed === null || typeof parsed !== "object") {
+    const observed = parsed === null ? "null" : typeof parsed;
+    throw new ScorezillaError(`Response body was not a JSON object (got ${observed})`, {
+      status: response.status,
+      code: "invalid_json",
+      requestId
+    });
+  }
+  const okField = parsed.ok;
+  if (okField !== true) {
+    throw new ScorezillaError(
+      `Response body on a 2xx is missing the \`ok: true\` discriminator (got ok=${String(okField)})`,
+      {
+        status: response.status,
+        code: "invalid_json",
+        requestId
+      }
+    );
+  }
+  return parsed;
 }
 async function safelyParseErrorBody(response) {
   try {
@@ -497,7 +551,7 @@ function validateMetadata(metadata) {
 }
 var Scorezilla = class _Scorezilla {
   /** The package version, injected at build time from `package.json`. */
-  static version = "0.1.0-next.0";
+  static version = "0.1.0-next.3";
   #config;
   #userAgent;
   #authHeader;
@@ -662,8 +716,11 @@ var Scorezilla = class _Scorezilla {
     if (opts.body !== void 0) requestOpts.body = opts.body;
     if (this.#config.fetch !== void 0) requestOpts.fetchImpl = this.#config.fetch;
     if (this.#config.timeoutMs !== void 0) requestOpts.timeoutMs = this.#config.timeoutMs;
-    if (this.#config.maxRetries !== void 0) {
-      requestOpts.retry = { maxRetries: this.#config.maxRetries };
+    if (this.#config.maxRetries !== void 0 || this.#config.sleepImpl !== void 0) {
+      requestOpts.retry = {
+        ...this.#config.maxRetries !== void 0 ? { maxRetries: this.#config.maxRetries } : {},
+        ...this.#config.sleepImpl !== void 0 ? { sleepImpl: this.#config.sleepImpl } : {}
+      };
     }
     return request(requestOpts);
   }
@@ -673,7 +730,7 @@ function createClient(config) {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.1.0-next.0";
+var SDK_VERSION = "0.1.0-next.3";
 
 export { SDK_VERSION, Scorezilla, ScorezillaError, createClient, detectRuntime };
 //# sourceMappingURL=index.js.map