zitejs 0.9.114 → 0.9.115

package/dist/cjs/sync/sdkNames.js

@@ -50,7 +50,8 @@ function toCamelCase(name) {
 }
 /**
  * camelCase for a FRESH sdkName, reading acronym runs as words: "VIP" ->
- * "vip", "APIKey" -> "apiKey" (plain toCamelCase yields "vIP" / "aPIKey").
+ * "vip", "APIKey" -> "apiKey" (plain toCamelCase yields "vIP" / "aPIKey"), and
+ * folding a diacritic into its base letter: "Filières" -> "filieres".
  *
  * Deliberately not folded into toCamelCase: that also derives endpoint
  * identifiers from existing filenames on every generate, where normalizing
@@ -58,7 +59,22 @@ function toCamelCase(name) {
  * chosen for the first time — generateSchema preserves existing sdkNames.
  */
 function toSdkName(name) {
+    // Decompose, then drop the combining marks, so an accented letter keeps its
+    // base rather than being read as punctuation. `toPascalCase` treats anything
+    // outside [a-zA-Z0-9] as a word separator and uppercases what follows it, so
+    // without this a table called "Fiches Filières" allocates `fichesFiliRes`.
+    //
+    // The bar is not "looks nicer" — it is Zite 1.0, which sanitised names this
+    // exact way (`getIntegrationNameMapping`) and therefore allocated
+    // `fichesFilieres`. Every app carried over from 1.0 compiles against that
+    // name, so a generator that disagrees hands a non-English base an accessor
+    // nobody would write and nothing resolves to.
+    //
+    // Only Latin diacritics fold. A name with no ASCII letters at all (Cyrillic,
+    // CJK, emoji) still collapses to `_` here, exactly as it did in 1.0.
     const deAcronymed = name
+        .normalize("NFD")
+        .replace(/[\u0300-\u036f]/g, "")
         .replace(/([A-Z]+)([A-Z][a-z])/g, (_, run, next) => run.charAt(0) + run.slice(1).toLowerCase() + next)
         .replace(/([A-Z])([A-Z]+)/g, (_, first, rest) => first + rest.toLowerCase());
     return toCamelCase(deAcronymed);

package/dist/cjs/sync/sdkNames.test.js

@@ -235,3 +235,51 @@ const recordTypeKeys = (source, typeName) => {
         (0, vitest_1.expect)(schema.tables[0].name).toBe("Deals");
     });
 });
+/**
+ * `toPascalCase` reads anything outside [a-zA-Z0-9] as a word separator and
+ * uppercases what follows, so an accent used to split the word it sat inside:
+ * "Filières" -> `filiRes`. Zite 1.0 stripped the combining mark instead, and
+ * every app carried over from it compiles against THAT name — so this is a
+ * disagreement with the apps in the wild, not a cosmetic preference.
+ */
+(0, vitest_1.describe)("diacritics in a fresh sdkName", () => {
+    const nameFor = (tableName) => (0, lib_js_1.generateSchema)(database([{ id: "tbl_1", name: tableName, fields: [] }]))
+        .tables[0].sdkName;
+    vitest_1.it.each([
+        ["Fiches Filières", "fichesFilieres"],
+        ["Recherches Métiers", "recherchesMetiers"],
+        ["Profil Compétences", "profilCompetences"],
+        ["Café Menu", "cafeMenu"],
+        ["Señor Clients", "senorClients"],
+        // Real, from a migrated base: an all-caps name where the accent sits inside
+        // an acronym run, so the de-acronym pass has to see the folded letter.
+        ["XICOH TRÁMITES", "xicohTramites"],
+    ])("folds %s into %s", (display, sdkName) => {
+        (0, vitest_1.expect)(nameFor(display)).toBe(sdkName);
+    });
+    (0, vitest_1.it)("folds a field name the same way", () => {
+        const schema = (0, lib_js_1.generateSchema)(database([
+            {
+                id: "tbl_1",
+                name: "Trámites",
+                fields: [field("fld_1", "Horario de Atención")],
+            },
+        ]));
+        (0, vitest_1.expect)(schema.tables[0].fields[0].sdkName).toBe("horarioDeAtencion");
+    });
+    (0, vitest_1.it)("leaves a name with no ASCII letters degenerate, as 1.0 did", () => {
+        // NFD only folds Latin diacritics. Nothing here to fold onto, so this
+        // collapses exactly as before — called out so the narrower scope is a
+        // decision on the record rather than an oversight.
+        (0, vitest_1.expect)(nameFor("Посещения")).toBe("_");
+    });
+    (0, vitest_1.it)("does not rename a table already locked to the old spelling", () => {
+        // The whole point of the lock: an app compiling against `fichesFiliRes`
+        // keeps it. Only names allocated from here on change.
+        const existingSchema = {
+            tables: [{ id: "tbl_1", sdkName: "fichesFiliRes", fields: [] }],
+        };
+        const schema = (0, lib_js_1.generateSchema)(database([{ id: "tbl_1", name: "Fiches Filières", fields: [] }]), existingSchema);
+        (0, vitest_1.expect)(schema.tables[0].sdkName).toBe("fichesFiliRes");
+    });
+});

package/dist/esm/backend/index.d.ts

@@ -82,6 +82,12 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
      * `{ user: null }` for a webhook fire exactly as it does for a cron one.
      */
     webhook?: TWebhook;
+    /**
+     * Set by {@link createEndpoint}, not by hand. The worker validates
+     * `inputSchema` for bundles built before this did, and skips ones that
+     * declare it — parsing twice would apply a schema's transforms twice.
+     */
+    validatesInput?: boolean;
     execute: (params: {
         input: TInput;
         context: TSchedule extends ZiteSchedule ? ZiteRequestContext | ZiteScheduledContext : TWebhook extends ZiteWebhook ? ZiteRequestContext | ZiteScheduledContext : ZiteRequestContext;
@@ -89,4 +95,11 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
         stream: ZiteStreamInterface;
     } : {})) => Promise<TOutput> | TOutput;
 }
+/**
+ * Create an endpoint definition, parsing `input` against `inputSchema` before
+ * `execute` runs. Nothing downstream parses it — the worker calls `execute` on
+ * whatever this returns — so while this was a bare `return config` a required
+ * field could be missing and the endpoint ran anyway. Parsing here is also what
+ * makes `TRawInput` -> `TInput` (defaults, transforms) true at runtime.
+ */
 export declare function createEndpoint<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput>(config: EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>): EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>;

package/dist/esm/backend/index.js

@@ -26,6 +26,68 @@ export class ZiteError extends Error {
         this.name = "ZiteError";
     }
 }
+/** Injected by the runner on a platform-fired run — see `isPlatformTriggeredInput`. */
+const PLATFORM_TRIGGER_KEYS = ["__cron", "__webhook"];
+function isPlatformTriggeredInput(input) {
+    if (typeof input !== "object" || input === null)
+        return false;
+    return PLATFORM_TRIGGER_KEYS.some((key) => Object.prototype.hasOwnProperty.call(input, key));
+}
+function isIssueBearingError(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        Array.isArray(error.issues));
+}
+function describeIssues(error) {
+    return error.issues
+        .map((issue) => {
+        const path = issue.path.map((part) => String(part)).join(".");
+        return path ? `${path}: ${issue.message}` : issue.message;
+    })
+        .join("; ");
+}
+/**
+ * Create an endpoint definition, parsing `input` against `inputSchema` before
+ * `execute` runs. Nothing downstream parses it — the worker calls `execute` on
+ * whatever this returns — so while this was a bare `return config` a required
+ * field could be missing and the endpoint ran anyway. Parsing here is also what
+ * makes `TRawInput` -> `TInput` (defaults, transforms) true at runtime.
+ */
 export function createEndpoint(config) {
-    return config;
+    const { inputSchema, execute } = config;
+    const firesWithoutARequest = Boolean(config.schedule || config.webhook);
+    // An `inputSchema` that isn't a validator stays inert, as it was.
+    if (!inputSchema || typeof inputSchema.parse !== "function")
+        return config;
+    return {
+        ...config,
+        validatesInput: true,
+        // `async` so a schema failure rejects: `execute` may be declared sync, and
+        // a sync throw would escape the caller's `.catch()`.
+        execute: async (params) => {
+            // Cron and webhook fires carry no request body, so a schema written for
+            // request callers doesn't describe them.
+            if (isPlatformTriggeredInput(params.input))
+                return execute(params);
+            // Same, for a fire with no input object to hold the sentinel: the runner
+            // only merges `__cron` into a plain object.
+            if (firesWithoutARequest && params.input === undefined) {
+                return execute(params);
+            }
+            let parsed;
+            try {
+                parsed = inputSchema.parse(params.input);
+            }
+            catch (error) {
+                throw new ZiteError({
+                    code: "BAD_REQUEST",
+                    message: isIssueBearingError(error)
+                        ? `Invalid input: ${describeIssues(error)}`
+                        : `Invalid input: ${String(error?.message ?? error)}`,
+                    userFacingMessage: "Some of the information sent with this request was missing or invalid.",
+                });
+            }
+            return execute({ ...params, input: parsed });
+        },
+    };
 }

package/dist/esm/backend/index.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/backend/index.test.js

@@ -0,0 +1,201 @@
+import { describe, it, expect, afterEach, vi } from "vitest";
+import { z } from "zod";
+import { createEndpoint, ZiteError } from "./index.js";
+import { createTableClient } from "../runtime/index.js";
+const requestContext = { user: { id: "u1", email: "a@b.c" } };
+afterEach(() => {
+    vi.unstubAllGlobals();
+});
+describe("createEndpoint input validation", () => {
+    it("rejects input that does not satisfy inputSchema, without running execute", async () => {
+        const execute = vi.fn();
+        const endpoint = createEndpoint({
+            inputSchema: z.object({ token: z.string().min(10) }),
+            execute,
+        });
+        await expect(endpoint.execute({ input: {}, context: requestContext })).rejects.toBeInstanceOf(ZiteError);
+        expect(execute).not.toHaveBeenCalled();
+    });
+    it("surfaces the failure as BAD_REQUEST and names the offending field", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.object({ token: z.string().min(10) }),
+            execute: async () => "unreachable",
+        });
+        await expect(endpoint.execute({ input: {}, context: requestContext })).rejects.toMatchObject({
+            code: "BAD_REQUEST",
+            message: expect.stringContaining("token"),
+        });
+    });
+    it("rejects a call with no input at all", async () => {
+        const execute = vi.fn();
+        const endpoint = createEndpoint({
+            inputSchema: z.object({ token: z.string().min(10) }),
+            execute,
+        });
+        await expect(endpoint.execute({
+            input: undefined,
+            context: requestContext,
+        })).rejects.toMatchObject({ code: "BAD_REQUEST" });
+        expect(execute).not.toHaveBeenCalled();
+    });
+    it("hands execute the parsed value, so schema defaults finally apply", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.object({
+                token: z.string(),
+                limit: z.number().default(10),
+            }),
+            execute: async ({ input }) => input,
+        });
+        await expect(endpoint.execute({
+            input: { token: "abc" },
+            context: requestContext,
+        })).resolves.toEqual({ token: "abc", limit: 10 });
+    });
+    it("passes valid input through untouched", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.object({
+                token: z.string().min(10),
+                action: z.enum(["load", "accept"]),
+            }),
+            execute: async ({ input }) => input.action,
+        });
+        await expect(endpoint.execute({
+            input: { token: "b69779ae-eeea", action: "load" },
+            context: requestContext,
+        })).resolves.toBe("load");
+    });
+    it("declares that it validates, so the worker does not parse a second time", () => {
+        const withSchema = createEndpoint({
+            inputSchema: z.object({ token: z.string() }),
+            execute: async () => null,
+        });
+        const withoutSchema = createEndpoint({ execute: async () => null });
+        expect(withSchema.validatesInput).toBe(true);
+        expect(withoutSchema.validatesInput).toBeUndefined();
+    });
+    it("leaves an endpoint without an inputSchema exactly as it was", async () => {
+        const endpoint = createEndpoint({
+            execute: async ({ input }) => input,
+        });
+        await expect(endpoint.execute({
+            input: { anything: true },
+            context: requestContext,
+        })).resolves.toEqual({ anything: true });
+    });
+    it("preserves the stream handle for streaming endpoints", async () => {
+        const stream = { write: async () => { }, forward: async () => "" };
+        const endpoint = createEndpoint({
+            stream: true,
+            inputSchema: z.object({ prompt: z.string() }),
+            execute: async (params) => params.stream === stream,
+        });
+        await expect(endpoint.execute({
+            input: { prompt: "hi" },
+            context: requestContext,
+            stream,
+        })).resolves.toBe(true);
+    });
+});
+describe("platform-triggered runs", () => {
+    it("does not validate a cron fire, and leaves __cron readable", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.object({ token: z.string().min(10) }),
+            schedule: {
+                scheduleType: "recurring",
+                schedule: { frequency: "hourly", interval: 6 },
+                timezone: "UTC",
+            },
+            execute: async ({ input }) => input,
+        });
+        await expect(endpoint.execute({
+            input: { __cron: { scheduleId: "s1" } },
+            context: { user: null },
+        })).resolves.toEqual({ __cron: { scheduleId: "s1" } });
+    });
+    it("does not validate a scheduled fire that carries no input object", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.string(),
+            schedule: {
+                scheduleType: "recurring",
+                schedule: { frequency: "hourly", interval: 6 },
+                timezone: "UTC",
+            },
+            execute: async ({ input }) => input ?? "(no input)",
+        });
+        await expect(endpoint.execute({ input: undefined, context: { user: null } })).resolves.toBe("(no input)");
+    });
+    it("still validates an ordinary endpoint called with no input", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.string(),
+            execute: async ({ input }) => input,
+        });
+        await expect(endpoint.execute({ input: undefined, context: requestContext })).rejects.toMatchObject({ code: "BAD_REQUEST" });
+    });
+    it("does not validate a webhook fire", async () => {
+        const endpoint = createEndpoint({
+            inputSchema: z.object({ token: z.string().min(10) }),
+            webhook: {},
+            execute: async ({ input }) => input,
+        });
+        await expect(endpoint.execute({
+            input: { __webhook: { headers: {} }, id: 7 },
+            context: { user: null },
+        })).resolves.toEqual({ __webhook: { headers: {} }, id: 7 });
+    });
+});
+/**
+ * The failure this was written for: an endpoint that looks a customer up by a
+ * token, called with no token. The undefined was dropped on the way to the
+ * database and the unfiltered lookup returned the first row of the table.
+ * Either guard alone stops it; they fail at different layers, so both are here.
+ */
+describe("regression: token lookup on an endpoint called without a token", () => {
+    function buildEndpoint(onMatch) {
+        const clients = createTableClient("Clients");
+        return createEndpoint({
+            inputSchema: z.object({
+                token: z.string().min(10),
+                action: z.enum(["load", "accept"]),
+            }),
+            execute: async ({ input }) => {
+                const row = await clients.findOne({ filters: { token: input.token } });
+                if (!row)
+                    return "invalid_token";
+                onMatch(row.nom);
+                return "ok";
+            },
+        });
+    }
+    it("stops at the schema, so the database is never reached", async () => {
+        const dispatched = [];
+        vi.stubGlobal("__wrapSdkCall", async (_i, _c, m) => {
+            dispatched.push(m);
+            return { id: "1", token: "", nom: "an unrelated customer" };
+        });
+        const matched = [];
+        await expect(buildEndpoint((nom) => matched.push(nom)).execute({
+            input: {},
+            context: requestContext,
+        })).rejects.toMatchObject({ code: "BAD_REQUEST" });
+        expect(dispatched).toEqual([]);
+        expect(matched).toEqual([]);
+    });
+    it("stops at the query too, if an undefined token reaches it another way", async () => {
+        const dispatched = [];
+        vi.stubGlobal("__wrapSdkCall", async (_i, _c, m) => {
+            dispatched.push(m);
+            return { id: "1", token: "", nom: "an unrelated customer" };
+        });
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
+        const clients = createTableClient("Clients");
+        const token = undefined;
+        // Answers "no match" rather than throwing: `if (!row) return
+        // { status: 'invalid_token' }` is what the endpoint already does, so this
+        // makes the incident path correct without the app changing anything.
+        const row = await clients.findOne({ filters: { token } });
+        expect(row).toBeUndefined();
+        expect(dispatched).toEqual([]);
+        expect(warn).toHaveBeenCalled();
+        warn.mockRestore();
+    });
+});

package/dist/esm/runtime/index.js

@@ -1,5 +1,77 @@
 import { getSdkCall } from "../internal/sdkCall.js";
 const DB_INTEGRATION_ID = "databases";
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Not thrown — the miss is the answer. Logged so the author can still find out
+ * their value was missing, since a silent null looks exactly like a legitimate
+ * no-match and would otherwise hide the bug that caused it.
+ */
+function warnEmptySelector(className, method, detail) {
+    console.warn(`${className}.${method}: ${detail} is undefined, so this query would have ` +
+        "run unnarrowed and returned an arbitrary record. Returning no match " +
+        "instead. Check the value before querying, or pass null to match " +
+        "records where the field is empty.");
+}
+/**
+ * Whether a selector was written with nothing in it.
+ *
+ * `JSON.stringify` drops an undefined value, so `{ filters: { token: undefined } }`
+ * reaches base-runner as `{ filters: {} }` — a valid request for no filter.
+ * `findOne` answers that with the first row of the table, and the caller reads
+ * it back as a match.
+ *
+ * `findOne` treats it as "matched nothing" instead, which is what asking for
+ * `token === undefined` should mean. Callers already handle the miss —
+ * `if (!row) return { status: 'invalid_token' }` — so the shape that caused the
+ * incident becomes correct on its own, with no app change and nothing to break.
+ *
+ * **`findOne` only.** On `findAll`, "no filter" is a coherent request, and
+ * `filters: { status: maybeUndefined }` meaning "don't narrow on status" is an
+ * idiom that type-checks today (`RecordFilters` is a `?:` map, and apps build
+ * without `exactOptionalPropertyTypes`). It is also what Prisma does with
+ * `undefined` in a `where`. Only `findOne` has no sane reading, because an
+ * unnarrowed single-row query returns an arbitrary record rather than everything.
+ *
+ * A key the caller never wrote is untouched: `findOne({ filters: {} })` still
+ * means "no filter" and still returns the first row. Only a key written with
+ * nothing in it counts. (Unknown filter keys have the same consequence — see
+ * `RecordFilters` — but those are `keyof T` and caught at build time.)
+ */
+function selectorMatchesNothing(className, method, params) {
+    if (!params)
+        return false;
+    const { filters } = params;
+    if (isPlainObject(filters)) {
+        for (const [key, value] of Object.entries(filters)) {
+            if (value === undefined) {
+                warnEmptySelector(className, method, `filter "${key}"`);
+                return true;
+            }
+            // `{ field: { contains: undefined } }` collapses to `{ field: {} }` — no
+            // condition on that field at all.
+            if (isPlainObject(value)) {
+                for (const [operator, operand] of Object.entries(value)) {
+                    if (operand === undefined) {
+                        warnEmptySelector(className, method, `filter "${key}.${operator}"`);
+                        return true;
+                    }
+                }
+            }
+        }
+    }
+    // An undefined `id` leaves the query with no selector at all. Only counts
+    // when nothing else narrows it, so `findOne({ id: maybeId, filters: {...} })`
+    // still runs on the filters.
+    const wroteId = Object.prototype.hasOwnProperty.call(params, "id");
+    const hasFilters = isPlainObject(filters) && Object.keys(filters).length > 0;
+    if (wroteId && params.id === undefined && !hasFilters) {
+        warnEmptySelector(className, method, "`id`");
+        return true;
+    }
+    return false;
+}
 function getBaseId() {
     try {
         return (globalThis.__ZITE_EXECUTION_CONFIG__?.baseId ??
@@ -26,16 +98,22 @@ function resolveTableId(className) {
 }
 export function createTableClient(className) {
     return {
-        findAll: (params) => getSdkCall()(DB_INTEGRATION_ID, className, "findAll", {
-            baseId: getBaseId(),
-            tableId: resolveTableId(className),
-            ...params,
-        }),
-        findOne: (params) => getSdkCall()(DB_INTEGRATION_ID, className, "findOne", {
-            baseId: getBaseId(),
-            tableId: resolveTableId(className),
-            ...params,
-        }),
+        findAll: async (params) => {
+            return getSdkCall()(DB_INTEGRATION_ID, className, "findAll", {
+                baseId: getBaseId(),
+                tableId: resolveTableId(className),
+                ...params,
+            });
+        },
+        findOne: async (params) => {
+            if (selectorMatchesNothing(className, "findOne", params))
+                return undefined;
+            return getSdkCall()(DB_INTEGRATION_ID, className, "findOne", {
+                baseId: getBaseId(),
+                tableId: resolveTableId(className),
+                ...params,
+            });
+        },
         create: (params) => getSdkCall()(DB_INTEGRATION_ID, className, "create", {
             baseId: getBaseId(),
             tableId: resolveTableId(className),
@@ -66,10 +144,12 @@ export function createSqlClient() {
 }
 export function createAuthClient() {
     return {
-        findAllUsers: (options) => getSdkCall()(DB_INTEGRATION_ID, "Auth", "findAllUsers", {
-            baseId: getBaseId(),
-            ...options,
-        }),
+        findAllUsers: async (options) => {
+            return getSdkCall()(DB_INTEGRATION_ID, "Auth", "findAllUsers", {
+                baseId: getBaseId(),
+                ...options,
+            });
+        },
         updateUserProfile: (userId, profile) => getSdkCall()(DB_INTEGRATION_ID, "Auth", "updateUserProfile", {
             baseId: getBaseId(),
             userId,
@@ -79,14 +159,20 @@ export function createAuthClient() {
 }
 export function createAirtableClient(integrationId, className, implicitParams) {
     return {
-        findAll: (params) => getSdkCall()(integrationId, className, "findAll", {
-            ...implicitParams,
-            ...params,
-        }),
-        findOne: (params) => getSdkCall()(integrationId, className, "findOne", {
-            ...implicitParams,
-            ...params,
-        }),
+        findAll: async (params) => {
+            return getSdkCall()(integrationId, className, "findAll", {
+                ...implicitParams,
+                ...params,
+            });
+        },
+        findOne: async (params) => {
+            if (selectorMatchesNothing(className, "findOne", params))
+                return undefined;
+            return getSdkCall()(integrationId, className, "findOne", {
+                ...implicitParams,
+                ...params,
+            });
+        },
         create: (params) => getSdkCall()(integrationId, className, "create", {
             ...implicitParams,
             ...params,

package/dist/esm/runtime/index.test.d.ts

@@ -0,0 +1 @@
+export {};