stitchkit 0.0.1 → 0.2.0

package/dist/contract/define.d.ts

@@ -0,0 +1,94 @@
+import type { ZodType, z } from 'zod';
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+export declare const ALL_TRANSPORTS: readonly ["HTTP", "MCP", "AGENT"];
+export type Transport = (typeof ALL_TRANSPORTS)[number];
+export type TransportSource = 'http' | 'mcp' | 'agent';
+interface EndpointDefBase {
+    method: HttpMethod;
+    path: string;
+    desc: string;
+    scope?: string;
+    params?: ZodType<unknown>;
+    input?: ZodType<unknown>;
+    output?: ZodType<unknown>;
+    multipart?: string;
+    /**
+     * HTTP client timeout in ms for this endpoint. Use it for slow synchronous
+     * endpoints (AI generation) that need more than the client default. A
+     * property of the endpoint — declared once, the typed client applies it.
+     */
+    timeout?: number;
+}
+interface HttpOnlyEndpointDef extends EndpointDefBase {
+    expose: readonly ['HTTP'];
+    toolName?: never;
+}
+interface ToolEndpointDef extends EndpointDefBase {
+    toolName?: string;
+    expose?: readonly Transport[];
+}
+export type EndpointDef = HttpOnlyEndpointDef | ToolEndpointDef;
+export interface ContractMeta<TScope extends string = string> {
+    prefix: string;
+    scope?: TScope;
+}
+export interface ContractDef<T extends Record<string, EndpointDef> = Record<string, EndpointDef>, TScope extends string = string> {
+    meta: ContractMeta<TScope>;
+    endpoints: T;
+}
+/**
+ * Declare an API contract — a `prefix` plus a map of endpoints (method, path,
+ * Zod `params` / `input` / `output`, `scope`, `expose`). One contract drives
+ * the HTTP routes, the MCP and agent tools, and the typed client. Throws at
+ * definition time on a duplicate `toolName`.
+ */
+export declare function defineContract<const T extends Record<string, EndpointDef>>(meta: {
+    prefix: string;
+}, endpoints: T): ContractDef<T, 'public'>;
+export declare function defineContract<TScope extends string, const T extends Record<string, EndpointDef>>(meta: {
+    prefix: string;
+    scope: TScope;
+}, endpoints: T): ContractDef<T, TScope>;
+export interface RuntimeContext {
+    params: unknown;
+    input: unknown;
+    file?: File;
+    source: TransportSource;
+    traceId?: string;
+    spanId?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    [key: string]: unknown;
+}
+export interface HandlerContext<TParams = undefined, TInput = undefined> {
+    params: TParams;
+    input: TInput;
+    file?: File;
+    source: TransportSource;
+    traceId?: string;
+    spanId?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    [key: string]: unknown;
+}
+type Prop<T, K extends string> = K extends keyof T ? T[K] : undefined;
+type InferInput<S> = S extends ZodType ? z.input<S> : unknown;
+type MultipartArgs<E> = E extends {
+    multipart: infer K extends string;
+} ? {
+    [P in K]: Blob;
+} : unknown;
+type EndpointArgs<E> = InferInput<Prop<E, 'params'>> & InferInput<Prop<E, 'input'>> & MultipartArgs<E>;
+type EndpointOutput<E> = Prop<E, 'output'> extends ZodType<infer O> ? O : undefined;
+export type EndpointFn<E> = [keyof EndpointArgs<E>] extends [never] ? () => Promise<EndpointOutput<E>> : (args: EndpointArgs<E>) => Promise<EndpointOutput<E>>;
+export type TypedClient<C extends Record<string, EndpointDef>> = {
+    [K in keyof C]: EndpointFn<C[K]>;
+};
+type ExposesHttp<E> = E extends {
+    expose: readonly Transport[];
+} ? 'HTTP' extends E['expose'][number] ? true : false : true;
+export type TypedHttpClient<C extends Record<string, EndpointDef>> = {
+    [K in keyof C as ExposesHttp<C[K]> extends true ? K : never]: EndpointFn<C[K]>;
+};
+export {};
+//# sourceMappingURL=define.d.ts.map

package/dist/contract/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/contract/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE,eAAO,MAAM,cAAc,mCAAoC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEvD,UAAU,eAAe;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,mBAAoB,SAAQ,eAAe;IACnD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED,UAAU,eAAgB,SAAQ,eAAe;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,eAAe,CAAC;AAEhE,MAAM,WAAW,YAAY,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW,CAC1B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACnE,MAAM,SAAS,MAAM,GAAG,MAAM;IAE9B,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACxE,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EACxB,SAAS,EAAE,CAAC,GACX,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC5B,wBAAgB,cAAc,CAC5B,MAAM,SAAS,MAAM,EACrB,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC3C,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAmDjF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,cAAc,CAAC,OAAO,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;AAYtE,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;AAE9D,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;CAAE,GACnE;KAAG,CAAC,IAAI,CAAC,GAAG,IAAI;CAAE,GAClB,OAAO,CAAC;AAEZ,KAAK,YAAY,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAClD,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAC5B,aAAa,CAAC,CAAC,CAAC,CAAC;AAEnB,KAAK,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;AAEpF,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAC/D,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAChC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1D,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KAC9D,CAAC,IAAI,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,GAC5D,MAAM,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAChC,IAAI,GACJ,KAAK,GACP,IAAI,CAAC;AAET,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KAClE,CAAC,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/E,CAAC"}

package/dist/contract/errors.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The public error envelope — the JSON shape of every HTTP error response, and
+ * the one type the server (`AppError.toJSON`) and the typed HTTP client are
+ * declared against. Tool (MCP / agent) errors use a flatter, model-facing
+ * shape instead — see `formatToolError` in `tools/mount.ts`.
+ */
+export interface ErrorEnvelope {
+    error: {
+        /** Stable, machine-readable error code. */
+        code: string;
+        /** Human-readable message. */
+        message?: string;
+        /** Structured error context. */
+        details?: unknown;
+        /** A remediation hint. */
+        hint?: string;
+    };
+}
+/**
+ * The framework's error model — a stable `code`, an HTTP `status`, optional
+ * structured `details` and a `hint`. `toJSON()` renders the public error
+ * envelope. Throw it directly, or via the typed helpers below.
+ */
+export declare class AppError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly details?: Record<string, unknown> | undefined;
+    readonly hint?: string | undefined;
+    constructor(code: string, message?: string, status?: number, details?: Record<string, unknown> | undefined, hint?: string | undefined);
+    static is(err: unknown): err is AppError;
+    toJSON(): ErrorEnvelope;
+}
+/** Throw a `404 NOT_FOUND` error. */
+export declare function notFound(message?: string): never;
+/** Throw a `400 BAD_REQUEST` error, optionally with structured `details`. */
+export declare function badRequest(message: string, details?: Record<string, unknown>): never;
+/** Throw a `401 UNAUTHORIZED` error. */
+export declare function unauthorized(message?: string): never;
+/** Throw a `403 FORBIDDEN` error. */
+export declare function forbidden(message?: string): never;
+/** Throw a `409 CONFLICT` error, optionally with structured `details`. */
+export declare function conflict(message?: string, details?: Record<string, unknown>): never;
+/** Throw a `429 RATE_LIMITED` error. */
+export declare function rateLimited(message?: string): never;
+/** Throw an `AppError` for any `code`, mapping known codes to their HTTP status (else 500). */
+export declare function appError(code: string, message?: string, details?: Record<string, unknown>): never;
+//# sourceMappingURL=errors.d.ts.map

package/dist/contract/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/contract/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,2CAA2C;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,8BAA8B;QAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,gCAAgC;QAChC,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,0BAA0B;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;;;GAIG;AACH,qBAAa,QAAS,SAAQ,KAAK;aAEf,IAAI,EAAE,MAAM;aAEZ,MAAM,EAAE,MAAM;aACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;aACjC,IAAI,CAAC,EAAE,MAAM;gBAJb,IAAI,EAAE,MAAM,EAC5B,OAAO,CAAC,EAAE,MAAM,EACA,MAAM,GAAE,MAAY,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA,EACjC,IAAI,CAAC,EAAE,MAAM,YAAA;IAM/B,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,QAAQ;IAIxC,MAAM,IAAI,aAAa;CAUxB;AAED,qCAAqC;AACrC,wBAAgB,QAAQ,CAAC,OAAO,SAAc,GAAG,KAAK,CAErD;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAEpF;AAED,wCAAwC;AACxC,wBAAgB,YAAY,CAAC,OAAO,SAAiB,GAAG,KAAK,CAE5D;AAED,qCAAqC;AACrC,wBAAgB,SAAS,CAAC,OAAO,SAAc,GAAG,KAAK,CAEtD;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,OAAO,SAAa,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAEvF;AAED,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,OAAO,SAAsB,GAAG,KAAK,CAEhE;AAaD,+FAA+F;AAC/F,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,KAAK,CAEP"}

package/dist/contract/index.d.ts

@@ -0,0 +1,4 @@
+export { ALL_TRANSPORTS, type ContractDef, type ContractMeta, defineContract, type EndpointDef, type EndpointFn, type HandlerContext, type HttpMethod, type RuntimeContext, type Transport, type TransportSource, type TypedClient, type TypedHttpClient, } from './define';
+export { AppError, appError, badRequest, conflict, type ErrorEnvelope, forbidden, notFound, rateLimited, unauthorized, } from './errors';
+export { type Paginated, paginatedSchema } from './pagination';
+//# sourceMappingURL=index.d.ts.map

package/dist/contract/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,KAAK,aAAa,EAClB,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,KAAK,SAAS,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/dist/contract/index.js

@@ -0,0 +1,26 @@
+import {
+  ALL_TRANSPORTS,
+  AppError,
+  appError,
+  badRequest,
+  conflict,
+  defineContract,
+  forbidden,
+  notFound,
+  paginatedSchema,
+  rateLimited,
+  unauthorized
+} from "../index-kckky6zw.js";
+export {
+  unauthorized,
+  rateLimited,
+  paginatedSchema,
+  notFound,
+  forbidden,
+  defineContract,
+  conflict,
+  badRequest,
+  appError,
+  AppError,
+  ALL_TRANSPORTS
+};

package/dist/contract/pagination.d.ts

@@ -0,0 +1,19 @@
+import { type ZodType, z } from 'zod';
+/**
+ * Cursor-paginated response envelope — the family standard.
+ *
+ * Every list endpoint returns this shape: an `items` array plus an opaque
+ * `nextCursor` (`null` at the end). One envelope → one infinite-query helper
+ * (`createCursorQuery`) with zero per-endpoint accessors. Domain extras (a
+ * `total` counter, `stats`) are added alongside via `.extend()`.
+ */
+export interface Paginated<T> {
+    items: T[];
+    nextCursor: string | null;
+}
+/** Zod schema for a `Paginated<T>` response of `itemSchema`. */
+export declare function paginatedSchema<T extends ZodType>(itemSchema: T): z.ZodObject<{
+    items: z.ZodArray<T>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=pagination.d.ts.map

package/dist/contract/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/contract/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,CAAC,SAAS,OAAO,EAAE,UAAU,EAAE,CAAC;;;kBAK/D"}

package/dist/index-5sxnvwb1.js

@@ -0,0 +1,368 @@
+import {
+  isRecord,
+  mapObject,
+  typedEntries
+} from "./index-809wc1tt.js";
+
+// src/browser/http.ts
+import ky, { isHTTPError } from "ky";
+class ApiError extends Error {
+  code;
+  status;
+  details;
+  hint;
+  constructor(code, status = 0, details, message, hint) {
+    super(message ?? `API Error: ${code}`);
+    this.code = code;
+    this.status = status;
+    this.details = details;
+    this.hint = hint;
+    this.name = "ApiError";
+  }
+  static is(error) {
+    return error instanceof ApiError;
+  }
+}
+function parseApiErrorBody(body) {
+  if (!isRecord(body) || !isRecord(body.error))
+    return null;
+  const error = body.error;
+  if (typeof error.code !== "string")
+    return null;
+  return {
+    code: error.code,
+    message: typeof error.message === "string" ? error.message : undefined,
+    details: error.details,
+    hint: typeof error.hint === "string" ? error.hint : undefined
+  };
+}
+function createHttpClient(config) {
+  let ssrCookies = null;
+  let isLoggedOut = false;
+  const listeners = new Set;
+  const authEndpoints = config.authEndpoints ?? ["auth/"];
+  const parseError = config.parseError ?? parseApiErrorBody;
+  function emit(event) {
+    for (const fn of listeners) {
+      try {
+        fn(event);
+      } catch {}
+    }
+  }
+  const client = ky.create({
+    prefix: config.baseUrl,
+    credentials: config.credentials ?? "include",
+    timeout: config.timeout ?? 30000,
+    retry: {
+      limit: config.retry?.limit ?? 2,
+      methods: config.retry?.methods ?? ["get"],
+      statusCodes: config.retry?.statusCodes ?? []
+    },
+    hooks: {
+      beforeRequest: [
+        ({ request: request2 }) => {
+          if (ssrCookies) {
+            request2.headers.set("Cookie", ssrCookies);
+          }
+          const extra = typeof config.headers === "function" ? config.headers() : config.headers;
+          if (extra) {
+            for (const [key, value] of Object.entries(extra)) {
+              request2.headers.set(key, value);
+            }
+          }
+        }
+      ],
+      afterResponse: [
+        async ({ request: request2, response }) => {
+          if (response.status === 401) {
+            const url = new URL(request2.url).pathname;
+            if (!isLoggedOut && !authEndpoints.some((path) => url.includes(path))) {
+              isLoggedOut = true;
+              emit({ type: "unauthorized" });
+            }
+          }
+          if (!response.ok) {
+            const body = await response.clone().json().catch(() => null);
+            if (body) {
+              const parsed = parseError(body);
+              if (parsed) {
+                throw new ApiError(parsed.code, response.status, parsed.details, parsed.message, parsed.hint);
+              }
+            }
+          }
+        }
+      ]
+    }
+  });
+  async function request(method, url, data, options = {}) {
+    const kyOptions = {
+      timeout: options.timeout
+    };
+    if (options.params) {
+      const searchParams = new URLSearchParams;
+      for (const [key, value] of Object.entries(options.params)) {
+        if (value === undefined)
+          continue;
+        if (Array.isArray(value)) {
+          for (const item of value)
+            searchParams.append(key, String(item));
+        } else {
+          searchParams.set(key, String(value));
+        }
+      }
+      if (searchParams.size > 0) {
+        kyOptions.searchParams = searchParams;
+      }
+    }
+    if (data instanceof FormData) {
+      kyOptions.body = data;
+    } else if (data !== undefined) {
+      kyOptions.json = data;
+    }
+    try {
+      if (options.responseType === "blob") {
+        return client[method](url, kyOptions).blob();
+      }
+      const response = await client[method](url, kyOptions);
+      if (response.status === 204 || response.headers.get("content-length") === "0") {
+        return;
+      }
+      return response.json();
+    } catch (error) {
+      if (ApiError.is(error))
+        throw error;
+      const isAbort = error instanceof Error && error.name === "AbortError";
+      if (!isAbort) {
+        emit({ type: "network_error" });
+      }
+      const status = isAbort ? 0 : isHTTPError(error) ? error.response.status : 0;
+      const msg = error instanceof Error ? error.message : undefined;
+      throw new ApiError("UNKNOWN_ERROR", status, msg ? { message: msg } : undefined);
+    }
+  }
+  return {
+    get: (url, options) => request("get", url, undefined, options),
+    post: (url, data, options) => request("post", url, data, options),
+    put: (url, data, options) => request("put", url, data, options),
+    patch: (url, data, options) => request("patch", url, data, options),
+    delete: (url, options) => request("delete", url, undefined, options),
+    setServerContext(cookies) {
+      ssrCookies = cookies;
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    logout() {
+      isLoggedOut = true;
+      emit({ type: "logout" });
+    },
+    resetLogoutState() {
+      isLoggedOut = false;
+    }
+  };
+}
+
+// src/browser/client.ts
+function withTimeout(options, timeout) {
+  if (timeout === undefined)
+    return options;
+  return { ...options, timeout };
+}
+function isParamArray(value) {
+  return Array.isArray(value) && value.every((v) => typeof v === "string" || typeof v === "number");
+}
+function collectQueryParams(args, skipKeys) {
+  const params = {};
+  let hasParams = false;
+  for (const [key, value] of Object.entries(args)) {
+    if (skipKeys.has(key) || value === undefined || value === null)
+      continue;
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean" || isParamArray(value)) {
+      params[key] = value;
+      hasParams = true;
+    }
+  }
+  return hasParams ? params : undefined;
+}
+function createClient(contract, configOrClient, contractConfig) {
+  const client = {};
+  const makeMethod = isHttpAdapter(configOrClient) ? (endpoint) => createHttpMethod(endpoint, contract.meta.prefix, configOrClient, contractConfig) : (endpoint) => createFetchMethod(endpoint, contract.meta.prefix, configOrClient);
+  for (const [key, endpoint] of typedEntries(contract.endpoints)) {
+    if (endpoint.expose && !endpoint.expose.includes("HTTP"))
+      continue;
+    setClientMethod(client, key, makeMethod(endpoint));
+  }
+  return client;
+}
+function createClients(contracts, http) {
+  return mapObject(contracts, (_key, contract) => createClient(contract, http));
+}
+function isHttpAdapter(value) {
+  return typeof value === "object" && "get" in value && typeof value.get === "function";
+}
+function setClientMethod(target, key, method) {
+  target[key] = method;
+}
+function createHttpMethod(endpoint, prefix, client, config) {
+  const httpMethod = endpoint.method.toLowerCase();
+  const isGet = httpMethod === "get";
+  const paramNames = extractParamNames(endpoint.path);
+  const prefixKeys = new Set([...config?.stripPrefixKeys ?? [], ...paramNames]);
+  return (...args) => {
+    const firstArg = args[0] ?? {};
+    let pathPrefixStr = "";
+    if (config?.pathPrefix) {
+      pathPrefixStr = typeof config.pathPrefix === "function" ? config.pathPrefix(firstArg) : config.pathPrefix;
+      if (pathPrefixStr && !pathPrefixStr.endsWith("/"))
+        pathPrefixStr += "/";
+    }
+    let url = `${pathPrefixStr}${prefix}${endpoint.path}`;
+    for (const name of paramNames) {
+      const value = firstArg[name];
+      if (value === undefined || value === null) {
+        throw new Error(`Missing path param: ${name}`);
+      }
+      url = url.replace(`:${name}`, encodeURIComponent(String(value)));
+    }
+    if (url.endsWith("/"))
+      url = url.slice(0, -1);
+    if (endpoint.multipart) {
+      const file = firstArg[endpoint.multipart];
+      if (!(file instanceof Blob)) {
+        throw new Error(`Missing multipart file field: ${endpoint.multipart}`);
+      }
+      const formData = new FormData;
+      formData.append(endpoint.multipart, file);
+      appendFormFields(formData, firstArg, new Set([...prefixKeys, endpoint.multipart]));
+      return client.post(url, formData, withTimeout(undefined, endpoint.timeout));
+    }
+    if (isGet) {
+      const params = collectQueryParams(firstArg, prefixKeys);
+      return client.get(url, withTimeout(params ? { params } : undefined, endpoint.timeout));
+    }
+    if (httpMethod === "delete") {
+      const params = collectQueryParams(firstArg, prefixKeys);
+      return client.delete(url, withTimeout(params ? { params } : undefined, endpoint.timeout));
+    }
+    const payload = {};
+    for (const [key, value] of Object.entries(firstArg)) {
+      if (!prefixKeys.has(key) && value !== undefined) {
+        payload[key] = value;
+      }
+    }
+    return client[httpMethod](url, Object.keys(payload).length > 0 ? payload : undefined, withTimeout(undefined, endpoint.timeout));
+  };
+}
+function createFetchMethod(endpoint, prefix, config) {
+  return async (args) => {
+    let url = buildFetchUrl(config.baseUrl, prefix, endpoint.path, args);
+    const headers = {
+      Accept: "application/json",
+      ...typeof config.headers === "function" ? config.headers() : config.headers
+    };
+    const isQuery = endpoint.method === "GET" || endpoint.method === "DELETE";
+    const hasBody = !isQuery && !endpoint.multipart && endpoint.input && args;
+    if (isQuery && args) {
+      const remaining = stripParams(args, endpoint.path);
+      const searchParams = new URLSearchParams;
+      for (const [k, v] of Object.entries(remaining)) {
+        if (v === undefined || v === null)
+          continue;
+        if (isParamArray(v)) {
+          for (const item of v)
+            searchParams.append(k, String(item));
+        } else if (typeof v !== "object") {
+          searchParams.set(k, String(v));
+        }
+      }
+      if (searchParams.size > 0)
+        url += `?${searchParams}`;
+    }
+    if (hasBody)
+      headers["Content-Type"] = "application/json";
+    if (endpoint.multipart && args) {
+      const file = args[endpoint.multipart];
+      if (!(file instanceof Blob)) {
+        throw new Error(`Missing multipart file field: ${endpoint.multipart}`);
+      }
+      const formData = new FormData;
+      formData.append(endpoint.multipart, file);
+      appendFormFields(formData, stripParams(args, endpoint.path), new Set([endpoint.multipart]));
+      const res2 = await fetch(url, {
+        method: endpoint.method,
+        headers,
+        credentials: config.credentials,
+        body: formData
+      });
+      if (!res2.ok) {
+        await throwForErrorResponse(res2, config, null);
+      }
+      if (res2.status === 204)
+        return;
+      const json2 = await res2.json();
+      return endpoint.output ? endpoint.output.parse(json2) : json2;
+    }
+    const res = await fetch(url, {
+      method: endpoint.method,
+      headers,
+      credentials: config.credentials,
+      ...hasBody && { body: JSON.stringify(stripParams(hasBody, endpoint.path)) }
+    });
+    if (!res.ok) {
+      await throwForErrorResponse(res, config, { error: res.statusText });
+    }
+    if (res.status === 204)
+      return;
+    const json = await res.json();
+    return endpoint.output ? endpoint.output.parse(json) : json;
+  };
+}
+function appendFormFields(formData, values, skipKeys) {
+  for (const [key, value] of Object.entries(values)) {
+    if (skipKeys.has(key) || value === undefined || value === null)
+      continue;
+    formData.append(key, typeof value === "string" ? value : JSON.stringify(value));
+  }
+}
+async function throwForErrorResponse(res, config, fallbackBody) {
+  const body = await res.json().catch(() => fallbackBody);
+  config.onError?.(res.status, body);
+  const parsed = parseApiErrorBody(body);
+  if (parsed) {
+    throw new ApiError(parsed.code, res.status, parsed.details, parsed.message, parsed.hint);
+  }
+  throw new ApiError("HTTP_ERROR", res.status, { body });
+}
+function extractParamNames(path) {
+  const matches = path.match(/:(\w+)/g);
+  return matches ? matches.map((m) => m.slice(1)) : [];
+}
+function buildFetchUrl(baseUrl, prefix, path, args) {
+  let fullPath = `/${prefix}${path === "/" ? "" : path}`;
+  if (args) {
+    fullPath = fullPath.replace(/:(\w+)/g, (_, key) => {
+      const val = args[key];
+      if (val === undefined || val === null) {
+        throw new Error(`Missing path param: ${key}`);
+      }
+      return encodeURIComponent(String(val));
+    });
+  }
+  return `${baseUrl}${fullPath}`;
+}
+function stripParams(args, path) {
+  const paramNames = new Set;
+  for (const match of path.matchAll(/:(\w+)/g)) {
+    if (match[1])
+      paramNames.add(match[1]);
+  }
+  const result = {};
+  for (const [k, v] of Object.entries(args)) {
+    if (!paramNames.has(k))
+      result[k] = v;
+  }
+  return result;
+}
+
+export { ApiError, createHttpClient, createClient, createClients };

package/dist/index-809wc1tt.js

@@ -0,0 +1,18 @@
+// src/internal/typed.ts
+function typedEntries(value) {
+  return Object.entries(value);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function mapObject(source, mapper) {
+  const result = {};
+  for (const [key, value] of typedEntries(source)) {
+    const mapped = mapper(key, value);
+    if (mapped !== undefined)
+      result[key] = mapped;
+  }
+  return result;
+}
+
+export { typedEntries, isRecord, mapObject };

package/dist/index-a35v22fh.js

@@ -0,0 +1,29 @@
+import {
+  AppError
+} from "./index-kckky6zw.js";
+
+// src/internal/errors.ts
+import { z } from "zod";
+function formatZodError(error) {
+  const issues = error.issues.slice(0, 5);
+  const lines = issues.map((issue) => {
+    const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+    return `${path}: ${issue.message}`;
+  });
+  const suffix = error.issues.length > 5 ? `
+...and ${error.issues.length - 5} more issues` : "";
+  return lines.join(`
+`) + suffix;
+}
+function normalizeError(err) {
+  if (AppError.is(err))
+    return err;
+  if (err instanceof z.ZodError) {
+    return new AppError("VALIDATION_ERROR", formatZodError(err), 400);
+  }
+  const msg = err instanceof Error ? err.message : String(err);
+  const safeMessage = msg.length > 200 ? `${msg.slice(0, 200)}...` : msg;
+  return new AppError("INTERNAL_SERVER_ERROR", safeMessage, 500);
+}
+
+export { formatZodError, normalizeError };