stitchkit 0.8.0 → 0.8.1

package/dist/cli.js

@@ -4,14 +4,10 @@ import {
   emitResult,
   parseCliArgs,
   pollUntilDone
-} from "./index-tr7r1530.js";
+} from "./index-f39j6twc.js";
 import"./index-0ed3bx43.js";
-import"./index-x3fcszf8.js";
-import"./index-wjwj5bz2.js";
-import"./index-eq29zkrx.js";
-import"./index-kzfs85xp.js";
-import"./index-809wc1tt.js";
-import"./index-37x76zdn.js";
+import"./index-jgpsd7dy.js";
+import"./index-tm7dqzxc.js";
 export {
   pollUntilDone,
   parseCliArgs,

package/dist/contract/index.js

@@ -15,7 +15,6 @@ import {
   rateLimited,
   unauthorized
 } from "../index-eq29zkrx.js";
-import"../index-37x76zdn.js";
 export {
   unauthorized,
   rateLimited,

package/dist/{index-za2p453b.js → index-031q8xmx.js}

@@ -1,7 +1,7 @@
 import {
   getClientInfo,
   resolveSocketIp
-} from "./index-mwmpw6j1.js";
+} from "./index-p9m9c0jw.js";
 
 // src/observability/trace.ts
 var TRACEPARENT_RE = /^00-([0-9a-f]{32})-([0-9a-f]{16})-[0-9a-f]{2}$/i;

package/dist/{index-5qe31283.js → index-9zrq8x5z.js}

@@ -1,14 +1,12 @@
 import {
   forbidden,
   unauthorized
-} from "./index-eq29zkrx.js";
+} from "./index-jgpsd7dy.js";
 import {
+  isRecord,
   isUnsafeKey,
   safeJsonParse
-} from "./index-kzfs85xp.js";
-import {
-  isRecord
-} from "./index-809wc1tt.js";
+} from "./index-tm7dqzxc.js";
 
 // src/server/middleware/cookies.ts
 function parseCookies(header) {
@@ -216,4 +214,9 @@ async function verifyPkce(verifier, challenge) {
   return derived === challenge;
 }
 
-export { parseCookies, serializeCookie, defineCookie, verifyJwt, signJwt, extractToken, createAuthHook, createBearerResolver, deriveCodeChallenge, verifyPkce };
+// src/internal/http-input.ts
+function inputIsQuery(method) {
+  return method === "GET" || method === "DELETE";
+}
+
+export { parseCookies, serializeCookie, defineCookie, verifyJwt, signJwt, extractToken, createAuthHook, createBearerResolver, deriveCodeChallenge, verifyPkce, inputIsQuery };

package/dist/{index-tr7r1530.js → index-f39j6twc.js}

@@ -2,21 +2,17 @@ import {
   jsonSchemaFields,
   toJsonSchema
 } from "./index-0ed3bx43.js";
-import {
-  isWithinDir
-} from "./index-x3fcszf8.js";
 import {
   formatZodError,
+  isWithinDir,
   normalizeError,
   validateHandlerOutput
-} from "./index-wjwj5bz2.js";
+} from "./index-jgpsd7dy.js";
 import {
+  isRecord,
   isUnsafeKey,
   safeJsonParse
-} from "./index-kzfs85xp.js";
-import {
-  isRecord
-} from "./index-809wc1tt.js";
+} from "./index-tm7dqzxc.js";
 
 // src/tools/coerce.ts
 import { z } from "zod";

package/dist/index-jgpsd7dy.js

@@ -0,0 +1,105 @@
+// src/contract/errors.ts
+class AppError extends Error {
+  code;
+  status;
+  details;
+  hint;
+  constructor(code, message, status = 500, details, hint) {
+    super(message ?? code);
+    this.code = code;
+    this.status = status;
+    this.details = details;
+    this.hint = hint;
+    this.name = "AppError";
+  }
+  static is(err) {
+    return err instanceof AppError;
+  }
+  toJSON() {
+    return {
+      error: {
+        code: this.code,
+        message: this.message,
+        ...this.details && { details: this.details },
+        ...this.hint && { hint: this.hint }
+      }
+    };
+  }
+}
+function notFound(message = "Not found") {
+  throw new AppError("NOT_FOUND", message, 404);
+}
+function badRequest(message, details) {
+  throw new AppError("BAD_REQUEST", message, 400, details);
+}
+function unauthorized(message = "Unauthorized") {
+  throw new AppError("UNAUTHORIZED", message, 401);
+}
+function forbidden(message = "Forbidden") {
+  throw new AppError("FORBIDDEN", message, 403);
+}
+function conflict(message = "Conflict", details) {
+  throw new AppError("CONFLICT", message, 409, details);
+}
+function rateLimited(message = "Too many requests") {
+  throw new AppError("RATE_LIMITED", message, 429);
+}
+var STITCH_ERROR_STATUS = {
+  BAD_REQUEST: 400,
+  UNAUTHORIZED: 401,
+  FORBIDDEN: 403,
+  NOT_FOUND: 404,
+  METHOD_NOT_ALLOWED: 405,
+  CONFLICT: 409,
+  RATE_LIMITED: 429,
+  VALIDATION_ERROR: 400,
+  INTERNAL_SERVER_ERROR: 500
+};
+function isStitchErrorCode(code) {
+  return code in STITCH_ERROR_STATUS;
+}
+function appError(code, message, details) {
+  throw new AppError(code, message, isStitchErrorCode(code) ? STITCH_ERROR_STATUS[code] : 500, details);
+}
+// src/contract/pagination.ts
+import { z } from "zod";
+// src/internal/errors.ts
+import { z as z2 } from "zod";
+function formatZodError(error) {
+  const issues = error.issues.slice(0, 5);
+  const lines = issues.map((issue) => {
+    const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+    return `${path}: ${issue.message}`;
+  });
+  const suffix = error.issues.length > 5 ? `
+...and ${error.issues.length - 5} more issues` : "";
+  return lines.join(`
+`) + suffix;
+}
+function normalizeError(err) {
+  if (AppError.is(err))
+    return err;
+  if (err instanceof z2.ZodError) {
+    return new AppError("VALIDATION_ERROR", formatZodError(err), 400);
+  }
+  console.error("[stitchkit] unhandled error:", err);
+  return new AppError("INTERNAL_SERVER_ERROR", "Internal server error", 500);
+}
+function validateHandlerOutput(schema, data) {
+  const parsed = schema.safeParse(data);
+  if (parsed.success)
+    return { ok: true, data: parsed.data };
+  return {
+    ok: false,
+    message: `Handler output does not match the contract: ${formatZodError(parsed.error)}`
+  };
+}
+
+// src/internal/within-dir.ts
+import { sep } from "node:path";
+function isWithinDir(root, target) {
+  const base = root.endsWith(sep) ? root.slice(0, -sep.length) : root;
+  return target === root || target === base || target.startsWith(base + sep);
+}
+
+export { AppError, notFound, badRequest, unauthorized, forbidden, conflict, rateLimited, STITCH_ERROR_STATUS, isStitchErrorCode, appError, formatZodError, normalizeError, validateHandlerOutput, isWithinDir };

package/dist/{index-mwmpw6j1.js → index-p9m9c0jw.js}

@@ -1,9 +1,7 @@
 import {
+  isRecord,
   isUnsafeKey
-} from "./index-kzfs85xp.js";
-import {
-  isRecord
-} from "./index-809wc1tt.js";
+} from "./index-tm7dqzxc.js";
 
 // src/server/request.ts
 function generateTraceId() {

package/dist/{index-5789sbt8.js → index-svvpy5bz.js}

@@ -1,31 +1,23 @@
 import {
-  isWithinDir
-} from "./index-x3fcszf8.js";
-import {
+  AppError,
+  badRequest,
+  isWithinDir,
   normalizeError,
   validateHandlerOutput
-} from "./index-wjwj5bz2.js";
-import {
-  AppError,
-  badRequest
-} from "./index-eq29zkrx.js";
+} from "./index-jgpsd7dy.js";
 import {
   extractIp,
   getClientInfo,
   parseQueryParams,
   resolveSocketIp,
   resolveTraceId
-} from "./index-mwmpw6j1.js";
+} from "./index-p9m9c0jw.js";
 import {
+  __require,
   isUnsafeKey,
-  safeJsonParse
-} from "./index-kzfs85xp.js";
-import {
+  safeJsonParse,
   typedEntries
-} from "./index-809wc1tt.js";
-import {
-  __require
-} from "./index-37x76zdn.js";
+} from "./index-tm7dqzxc.js";
 
 // src/server/multipart.ts
 var DEFAULT_MAX_UPLOAD_BYTES = 25 * 1024 * 1024;

package/dist/index-tm7dqzxc.js

@@ -0,0 +1,20 @@
+import { createRequire } from "node:module";
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/internal/safe-json.ts
+function isUnsafeKey(key) {
+  return key === "__proto__";
+}
+function safeJsonParse(text) {
+  return JSON.parse(text, (key, value) => isUnsafeKey(key) ? undefined : value);
+}
+
+// src/internal/typed.ts
+function typedEntries(value) {
+  return Object.entries(value);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+export { __require, isUnsafeKey, safeJsonParse, typedEntries, isRecord };