@clivly/sdk 0.9.7 → 0.10.1

package/README.md

@@ -460,7 +460,7 @@ is honoured. Other `4xx` responses return immediately.
 | `retry.maxAttempts` / `retry.baseDelayMs` | `number` | `3` / `500` | |
 | `syncTrigger.path` / `.url` / `.secret` | `string` | — | See above |
 | `verifyToken` | `string` | — | For `createAuthVerifyHandler`. **Nothing calls that endpoint today** |
-| `introspector` | `NamespaceIntrospector` | — | `drizzleIntrospector(db)`. Used only by `doctor()` |
+| `introspector` | `NamespaceIntrospector` | — | `drizzleIntrospector(db)`. Used by `doctor()`, derived-object previews, and dashboard-authored derived-object sync |
 | `namespaceReady` | `boolean` | `false` | Self-reported; no live check |
 | `env` | `Record<string, string \| undefined>` | `process.env` | For trigger-URL discovery in non-Node runtimes |
 | `framework` / `orm` / `sdkVersion` | `string` | — | Reported for dashboard display |

package/dist/index.cjs

@@ -1559,6 +1559,24 @@ function timingSafeEqual(a, b) {
 }
 const RUN_ID_HEADER = "x-clivly-run-id";
 const SIGNATURE_HEADER = "x-clivly-signature";
+/**
+* An error the mounted trigger route should answer with a specific HTTP
+* status, rather than the generic 500 it uses for a genuinely unhandled
+* error. A fail-safe rejection (e.g. an unresolvable sample `entityKey`) is a
+* configuration mismatch the caller can fix — surfacing it as "your app
+* crashed" sends a developer hunting through their own sync handler instead.
+*/
+var TriggerRequestError = class extends Error {
+	status;
+	constructor(status, message) {
+		super(message);
+		this.name = new.target.name;
+		this.status = status;
+	}
+};
+function triggerErrorStatus(error) {
+	return error instanceof TriggerRequestError ? error.status : 500;
+}
 const SIGNATURE_TOLERANCE_SECONDS = 300;
 const SIGNATURE_HEADER_RE = /^t=(\d+),v1=([0-9a-f]+)$/;
 const SECONDS_PER_MS = 1e3;
@@ -1884,7 +1902,7 @@ function createClivlySDK(config) {
 	};
 	const runSampleSync = async (entityKey, runId) => {
 		const resolved = resolveSampleSource(config, entityKey);
-		if (!resolved) throw new Error(`Clivly sync: sample entityKey "${entityKey}" did not resolve to a configured source`);
+		if (!resolved) throw new TriggerRequestError(400, `Clivly sync: no source is configured for entity "${entityKey}". The dashboard maps this table, but clivly.config declares no matching entity — add it to \`entities\`, or remove the mapping in Integrations → Mapping.`);
 		lastPushFailure = null;
 		if (!await syncOne(resolved.source, resolved.path, "delta", resolved.objectType, runId, SAMPLE_BATCH_SIZE, SAMPLE_BATCH_SIZE, false)) throw new Error(describePushFailure([resolved.source.entity]));
 	};
@@ -2123,7 +2141,9 @@ function createClivlySDK(config) {
 	const parseTriggerBody = (rawBody) => {
 		if (!rawBody) return {};
 		try {
-			return JSON.parse(rawBody);
+			const parsed = JSON.parse(rawBody);
+			if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+			return parsed;
 		} catch {
 			return {};
 		}
@@ -2156,7 +2176,7 @@ function createClivlySDK(config) {
 				ok: false,
 				runId,
 				error: error instanceof Error ? error.message : String(error)
-			}, 500);
+			}, triggerErrorStatus(error));
 		}
 	};
 	const start = async () => {

package/dist/index.mjs

@@ -1558,6 +1558,24 @@ function timingSafeEqual(a, b) {
 }
 const RUN_ID_HEADER = "x-clivly-run-id";
 const SIGNATURE_HEADER = "x-clivly-signature";
+/**
+* An error the mounted trigger route should answer with a specific HTTP
+* status, rather than the generic 500 it uses for a genuinely unhandled
+* error. A fail-safe rejection (e.g. an unresolvable sample `entityKey`) is a
+* configuration mismatch the caller can fix — surfacing it as "your app
+* crashed" sends a developer hunting through their own sync handler instead.
+*/
+var TriggerRequestError = class extends Error {
+	status;
+	constructor(status, message) {
+		super(message);
+		this.name = new.target.name;
+		this.status = status;
+	}
+};
+function triggerErrorStatus(error) {
+	return error instanceof TriggerRequestError ? error.status : 500;
+}
 const SIGNATURE_TOLERANCE_SECONDS = 300;
 const SIGNATURE_HEADER_RE = /^t=(\d+),v1=([0-9a-f]+)$/;
 const SECONDS_PER_MS = 1e3;
@@ -1883,7 +1901,7 @@ function createClivlySDK(config) {
 	};
 	const runSampleSync = async (entityKey, runId) => {
 		const resolved = resolveSampleSource(config, entityKey);
-		if (!resolved) throw new Error(`Clivly sync: sample entityKey "${entityKey}" did not resolve to a configured source`);
+		if (!resolved) throw new TriggerRequestError(400, `Clivly sync: no source is configured for entity "${entityKey}". The dashboard maps this table, but clivly.config declares no matching entity — add it to \`entities\`, or remove the mapping in Integrations → Mapping.`);
 		lastPushFailure = null;
 		if (!await syncOne(resolved.source, resolved.path, "delta", resolved.objectType, runId, SAMPLE_BATCH_SIZE, SAMPLE_BATCH_SIZE, false)) throw new Error(describePushFailure([resolved.source.entity]));
 	};
@@ -2122,7 +2140,9 @@ function createClivlySDK(config) {
 	const parseTriggerBody = (rawBody) => {
 		if (!rawBody) return {};
 		try {
-			return JSON.parse(rawBody);
+			const parsed = JSON.parse(rawBody);
+			if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+			return parsed;
 		} catch {
 			return {};
 		}
@@ -2155,7 +2175,7 @@ function createClivlySDK(config) {
 				ok: false,
 				runId,
 				error: error instanceof Error ? error.message : String(error)
-			}, 500);
+			}, triggerErrorStatus(error));
 		}
 	};
 	const start = async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clivly/sdk",
-  "version": "0.9.7",
+  "version": "0.10.1",
   "private": false,
   "type": "module",
   "description": "Clivly SDK — connect your app to Clivly Cloud (heartbeat, discovery, auth bridge).",
@@ -55,7 +55,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@clivly/core": "0.9.7"
+    "@clivly/core": "0.10.1"
   },
   "peerDependencies": {
     "drizzle-orm": ">=0.30 || >=1.0.0-rc.0",