qwik-city: add validator$ to server$

[wmertens]

Problem

server$ can be called by anyone, with any arguments. It's easy to write a server$ without realizing that your arguments can be malicious.

---

Proposed Solution / Feature

What do you propose?

server$ has a second argument for options. Add a validate$ option. Also allow passing a function directly for the second argument, it is then treated as validate$.

We already have validators, so we should keep the same API.

Code examples

const foo = server$(name => `hello ${name}`, zod$([name: z.string()]))

const foo = server$(name => `hello ${name}`, {validate$: validator$((ev, args) => {
  if (!ev.sharedMap.get('session').isAdmin) return {error: 'not admin'}
  const name = args[0]
  if (typeof name !== 'string' || !name.length || name.length > 100) return {error: 'not a name'}
  return { success: true }
}})

---

Links / References

https://qwik.dev/docs/validator/

[wmertens]

closing this in favor of #18