@constructive-io/errors 0.9.0 → 0.10.0

package/README.md

@@ -15,6 +15,9 @@ service or client without pulling in pgpm.
   registry, e.g. `throw errors.MODULE_NOT_FOUND({ name })`.
 - **`classify(code)`** — `public` or `internal`; unknown codes are `internal`
   (fail safe) so transports never leak unregistered errors.
+- **`httpStatusFor(code)`** — the canonical code → HTTP status mapping, so no
+  transport keeps its own table. Unregistered codes answer `500` *and are
+  reported*, never silently.
 
 ```ts
 import { parse, format, errors, classify } from '@constructive-io/errors';
@@ -46,6 +49,32 @@ throw errors.ACCOUNT_EXISTS();
     pgpm CLI codes). These override the generated entries.
 - Unregistered codes still `parse()` and are classified `internal` (masked).
 
+## HTTP status
+
+Every registry entry carries `http`, so an HTTP surface never needs its own
+code → status table: `toError(err).http`, or `httpStatusFor(code)` when all you
+have is a code.
+
+```ts
+import { httpStatusFor, setUnmappedStatusReporter, toError } from '@constructive-io/errors';
+
+setUnmappedStatusReporter(code => log.warn({ code }, 'error code has no HTTP status'));
+
+const err = toError(caught);
+res.status(err.http).json(err.toExtensions());
+
+httpStatusFor('ACCOUNT_DISABLED'); // { status: 403, mapped: true }
+httpStatusFor('BRAND_NEW_CODE');   // { status: 500, mapped: false } + one report
+```
+
+`mapped: false` is the one case where a 500 does not mean "the server broke" —
+it means the code never reached the registry. That is the failure mode this
+exists to make loud: a refusal that is plainly a 403 or a 409 answering 500
+looks like a crash, and the codes most likely to be missing are the newest ones.
+When a constructive-db release adds codes, refresh the registry (below);
+`__tests__/registry-sync.test.ts` fails if the snapshot and the generated
+registry disagree.
+
 ## Regenerating the full registry
 
 The generated layer is produced from a committed audit snapshot:

package/esm/generated/registry.generated.d.ts

@@ -1,7 +1,7 @@
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
  *
- * Source of truth: the constructive-db error audit (531 distinct codes
+ * Source of truth: the constructive-db error audit (546 distinct codes
  * raised via EXCEPTION/THROW across deploy sources + generated output).
  * Regenerate with `python3 scripts/generate-registry.py` (see README.md).
  *
@@ -9,7 +9,7 @@
  * codes carry their raw message (with %-args rendered as {{argN}}). Curated
  * entries in `registry.ts` override anything here (typed context + refined copy).
  *
- * Counts: 531 total, 401 public, 130 internal.
+ * Counts: 546 total, 410 public, 136 internal.
  */
 import { type DefinedError } from '../define';
 import type { ErrorContext } from '../types';
@@ -24,4 +24,4 @@ export declare const generatedRegistry: Record<string, DefinedError<ErrorContext
 /** Audit metadata for each generated code. */
 export declare const GENERATED_CODE_META: Record<string, GeneratedCodeMeta>;
 /** Total number of codes collected from constructive-db. */
-export declare const GENERATED_CODE_COUNT = 531;
+export declare const GENERATED_CODE_COUNT = 546;

package/esm/generated/registry.generated.js

@@ -2,7 +2,7 @@
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
  *
- * Source of truth: the constructive-db error audit (531 distinct codes
+ * Source of truth: the constructive-db error audit (546 distinct codes
  * raised via EXCEPTION/THROW across deploy sources + generated output).
  * Regenerate with `python3 scripts/generate-registry.py` (see README.md).
  *
@@ -10,14 +10,14 @@
  * codes carry their raw message (with %-args rendered as {{argN}}). Curated
  * entries in `registry.ts` override anything here (typed context + refined copy).
  *
- * Counts: 531 total, 401 public, 130 internal.
+ * Counts: 546 total, 410 public, 136 internal.
  */
 import { defineError } from '../define';
 /** Every constructive-db error code, keyed by code. */
 export const generatedRegistry = {
-    'ACCOUNT_DISABLED': defineError({ code: 'ACCOUNT_DISABLED', class: 'public', http: 403, message: 'Your account has been disabled. Please contact support for assistance.' }),
-    'ACCOUNT_EXISTS': defineError({ code: 'ACCOUNT_EXISTS', class: 'public', http: 409, message: 'An account with this email already exists. Please sign in or use a different email.' }),
-    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS': defineError({ code: 'ACCOUNT_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Your account has been temporarily locked due to too many failed login attempts. Please try again later or reset your password.' }),
+    'ACCOUNT_DISABLED': defineError({ code: 'ACCOUNT_DISABLED', class: 'public', http: 403, message: 'Account disabled.' }),
+    'ACCOUNT_EXISTS': defineError({ code: 'ACCOUNT_EXISTS', class: 'public', http: 409, message: 'Account exists.' }),
+    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS': defineError({ code: 'ACCOUNT_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Account locked exceed attempts.' }),
     'ACCOUNT_NOT_FOUND': defineError({ code: 'ACCOUNT_NOT_FOUND', class: 'public', http: 404, message: 'Account not found.' }),
     'ALREADY_SCHEDULED': defineError({ code: 'ALREADY_SCHEDULED', class: 'public', http: 409, message: 'Already scheduled.' }),
     'ALTER_TABLE_ADD_COLUMN': defineError({ code: 'ALTER_TABLE_ADD_COLUMN', class: 'internal', http: 500, message: 'ALTER_TABLE_ADD_COLUMN: a column cannot be both generated and an identity column' }),
@@ -27,6 +27,8 @@ export const generatedRegistry = {
     'APPLY_RLS': defineError({ code: 'APPLY_RLS', class: 'internal', http: 500, message: 'Apply rls.' }),
     'APPLY_RLS_BAD_ARGS': defineError({ code: 'APPLY_RLS_BAD_ARGS', class: 'internal', http: 500, message: 'Apply rls bad args.' }),
     'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND': defineError({ code: 'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Apply table step up table not found.' }),
+    'APP_INSTALLATION_MISSING': defineError({ code: 'APP_INSTALLATION_MISSING', class: 'public', http: 400, message: 'App installation missing.' }),
+    'APP_INSTALL_NO_SERVICE': defineError({ code: 'APP_INSTALL_NO_SERVICE', class: 'public', http: 400, message: 'App install no service.' }),
     'ASSIGN_PROFILES_PERMISSION_REQUIRED': defineError({ code: 'ASSIGN_PROFILES_PERMISSION_REQUIRED', class: 'public', http: 403, message: 'Assign profiles permission required.' }),
     'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED': defineError({ code: 'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED', class: 'public', http: 400, message: 'Authz column security authz node required.' }),
     'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED': defineError({ code: 'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED', class: 'public', http: 400, message: 'Authz column security columns required.' }),
@@ -62,6 +64,7 @@ export const generatedRegistry = {
     'BAD_PRIVILEGE_FOR_POLICY': defineError({ code: 'BAD_PRIVILEGE_FOR_POLICY', class: 'public', http: 400, message: 'Bad privilege for policy.' }),
     'BAD_RLS_EXPRESSION': defineError({ code: 'BAD_RLS_EXPRESSION', class: 'public', http: 400, message: 'Bad rls expression.' }),
     'BAD_VIEW_EXPRESSION': defineError({ code: 'BAD_VIEW_EXPRESSION', class: 'public', http: 400, message: 'Bad view expression.' }),
+    'BEHAVIOR_FRAGMENT_EMPTY': defineError({ code: 'BEHAVIOR_FRAGMENT_EMPTY', class: 'internal', http: 500, message: 'Behavior fragment empty.' }),
     'BM25': defineError({ code: 'BM25', class: 'public', http: 400, message: 'Bm25.' }),
     'BOOTSTRAP_DATABASE_MISSING': defineError({ code: 'BOOTSTRAP_DATABASE_MISSING', class: 'internal', http: 500, message: 'Bootstrap database missing.' }),
     'BOOTSTRAP_SOURCE_MISSING': defineError({ code: 'BOOTSTRAP_SOURCE_MISSING', class: 'internal', http: 500, message: 'Bootstrap source missing.' }),
@@ -98,6 +101,7 @@ export const generatedRegistry = {
     'CROSS_DATABASE_CHECK': defineError({ code: 'CROSS_DATABASE_CHECK', class: 'public', http: 400, message: 'Cross database check.' }),
     'CROSS_DATABASE_REF': defineError({ code: 'CROSS_DATABASE_REF', class: 'public', http: 400, message: 'Cross database ref.' }),
     'CSRF_TOKEN_REQUIRED': defineError({ code: 'CSRF_TOKEN_REQUIRED', class: 'public', http: 401, message: 'Csrf token required.' }),
+    'DATABASE_CLAIM_REQUIRED': defineError({ code: 'DATABASE_CLAIM_REQUIRED', class: 'internal', http: 500, message: 'Database claim required.' }),
     'DATABASE_FIELD_RESERVED_WORD': defineError({ code: 'DATABASE_FIELD_RESERVED_WORD', class: 'public', http: 400, message: 'Database field reserved word.' }),
     'DATABASE_NOT_FOUND': defineError({ code: 'DATABASE_NOT_FOUND', class: 'public', http: 404, message: 'Database not found.' }),
     'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED': defineError({ code: 'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED', class: 'public', http: 400, message: 'Database settings tables scope required.' }),
@@ -129,6 +133,10 @@ export const generatedRegistry = {
     'DATA_GENERATED_TABLE_NOT_FOUND': defineError({ code: 'DATA_GENERATED_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Data generated table not found.' }),
     'DATA_GENERATED_TARGET_REQUIRED': defineError({ code: 'DATA_GENERATED_TARGET_REQUIRED', class: 'public', http: 400, message: 'Data generated target required.' }),
     'DATA_GENERATED_UNKNOWN_KIND': defineError({ code: 'DATA_GENERATED_UNKNOWN_KIND', class: 'public', http: 400, message: 'Data generated unknown kind.' }),
+    'DATA_HISTORY_NO_COPY_FIELDS': defineError({ code: 'DATA_HISTORY_NO_COPY_FIELDS', class: 'public', http: 400, message: 'Data history no copy fields.' }),
+    'DATA_HISTORY_ON_HISTORY_TABLE': defineError({ code: 'DATA_HISTORY_ON_HISTORY_TABLE', class: 'public', http: 400, message: 'Data history on history table.' }),
+    'DATA_HISTORY_REQUIRES_PK': defineError({ code: 'DATA_HISTORY_REQUIRES_PK', class: 'public', http: 403, message: 'Data history requires pk.' }),
+    'DATA_HISTORY_TABLE_NOT_FOUND': defineError({ code: 'DATA_HISTORY_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Data history table not found.' }),
     'DATA_I18N_FIELDS_REQUIRED': defineError({ code: 'DATA_I18N_FIELDS_REQUIRED', class: 'public', http: 400, message: 'Data i18n fields required.' }),
     'DATA_I18N_FIELD_NOT_FOUND': defineError({ code: 'DATA_I18N_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data i18n field not found.' }),
     'DATA_I18N_MODULE_NOT_PROVISIONED': defineError({ code: 'DATA_I18N_MODULE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Data i18n module not provisioned.' }),
@@ -154,6 +162,7 @@ export const generatedRegistry = {
     'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT': defineError({ code: 'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT', class: 'public', http: 400, message: 'Data job trigger conditions watch fields conflict.' }),
     'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND': defineError({ code: 'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger condition field not found.' }),
     'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT': defineError({ code: 'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT', class: 'public', http: 400, message: 'Data job trigger condition field watch fields conflict.' }),
+    'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND': defineError({ code: 'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger database id field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND': defineError({ code: 'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger entity field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND': defineError({ code: 'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger entity lookup obj field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED': defineError({ code: 'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED', class: 'public', http: 400, message: 'Data job trigger entity lookup obj field required.' }),
@@ -205,7 +214,7 @@ export const generatedRegistry = {
     'DOMAIN_ROOT_NOT_PUBLISHED': defineError({ code: 'DOMAIN_ROOT_NOT_PUBLISHED', class: 'internal', http: 500, message: 'Domain root not published.' }),
     'DOMAIN_VERIFY_BAD_METHOD': defineError({ code: 'DOMAIN_VERIFY_BAD_METHOD', class: 'internal', http: 500, message: 'DOMAIN_VERIFY_BAD_METHOD: unsupported verification method {{arg0}}', positional: ['arg0'] }),
     'DOMAIN_VERIFY_NO_CHALLENGE': defineError({ code: 'DOMAIN_VERIFY_NO_CHALLENGE', class: 'internal', http: 500, message: 'DOMAIN_VERIFY_NO_CHALLENGE: no outstanding {{arg0}} challenge for managed_domain {{arg1}}', positional: ['arg0', 'arg1'] }),
-    'EMAIL_NOT_VERIFIED': defineError({ code: 'EMAIL_NOT_VERIFIED', class: 'public', http: 400, message: 'Please verify your email before accepting this invitation.' }),
+    'EMAIL_NOT_VERIFIED': defineError({ code: 'EMAIL_NOT_VERIFIED', class: 'public', http: 400, message: 'Email not verified.' }),
     'ENTITY_NOT_FOUND': defineError({ code: 'ENTITY_NOT_FOUND', class: 'internal', http: 500, message: 'Entity not found.' }),
     'ENTITY_TYPE_NOT_FOUND': defineError({ code: 'ENTITY_TYPE_NOT_FOUND', class: 'internal', http: 500, message: 'Entity type not found.' }),
     'ENTITY_TYPE_PROVISION': defineError({ code: 'ENTITY_TYPE_PROVISION', class: 'internal', http: 500, message: 'Entity type provision.' }),
@@ -238,10 +247,11 @@ export const generatedRegistry = {
     'EVENT_TRACKER_UNKNOWN_EVENT': defineError({ code: 'EVENT_TRACKER_UNKNOWN_EVENT', class: 'public', http: 400, message: 'Event tracker unknown event.' }),
     'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND': defineError({ code: 'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Event tracker watch field not found.' }),
     'EXECUTION_NOT_FOUND': defineError({ code: 'EXECUTION_NOT_FOUND', class: 'internal', http: 500, message: 'Execution not found.' }),
-    'EXPIRED_TOKEN': defineError({ code: 'EXPIRED_TOKEN', class: 'public', http: 400, message: 'This reset link has expired. Please request a new one.' }),
+    'EXPIRED_TOKEN': defineError({ code: 'EXPIRED_TOKEN', class: 'internal', http: 500, message: 'Expired token.' }),
     'EXTERNAL_MEMBERS_NOT_ALLOWED': defineError({ code: 'EXTERNAL_MEMBERS_NOT_ALLOWED', class: 'public', http: 403, message: 'External members not allowed.' }),
     'FEATURE_DISABLED': defineError({ code: 'FEATURE_DISABLED', class: 'public', http: 403, message: 'Feature disabled.', positional: ['arg0'] }),
     'FIELDS_MISMATCH': defineError({ code: 'FIELDS_MISMATCH', class: 'public', http: 400, message: 'Fields mismatch.' }),
+    'FOREIGN_KEY_CONSTRAINT_NOT_FOUND': defineError({ code: 'FOREIGN_KEY_CONSTRAINT_NOT_FOUND', class: 'internal', http: 500, message: 'Foreign key constraint not found.' }),
     'FUNCTION_GRAPH_NOT_FOUND': defineError({ code: 'FUNCTION_GRAPH_NOT_FOUND', class: 'internal', http: 500, message: 'Function graph not found.' }),
     'FUNCTION_SCHEDULES': defineError({ code: 'FUNCTION_SCHEDULES', class: 'internal', http: 500, message: 'FUNCTION_SCHEDULES: function definition does not allow the cron access channel' }),
     'FUNCTION_SCHEDULES_INTERVAL': defineError({ code: 'FUNCTION_SCHEDULES_INTERVAL', class: 'internal', http: 500, message: 'FUNCTION_SCHEDULES_INTERVAL (min_schedule_interval)' }),
@@ -280,6 +290,7 @@ export const generatedRegistry = {
     'HIERARCHY_DEPTH_EXCEEDED': defineError({ code: 'HIERARCHY_DEPTH_EXCEEDED', class: 'internal', http: 500, message: 'Hierarchy depth exceeded.' }),
     'HIERARCHY_INACTIVE_MEMBER': defineError({ code: 'HIERARCHY_INACTIVE_MEMBER', class: 'internal', http: 500, message: 'HIERARCHY_INACTIVE_MEMBER: Cannot add user {{arg0}} to hierarchy - user must be an active member of the organization first', positional: ['arg0'] }),
     'HIERARCHY_MEMBER_IN_USE': defineError({ code: 'HIERARCHY_MEMBER_IN_USE', class: 'internal', http: 500, message: 'HIERARCHY_MEMBER_IN_USE: Cannot deactivate user {{arg0}} - user must be removed from the organization hierarchy first', positional: ['arg0'] }),
+    'HISTORY': defineError({ code: 'HISTORY', class: 'internal', http: 500, message: 'HISTORY: history {{arg0}}.{{arg1}} registration has no copy_fields', positional: ['arg0', 'arg1'] }),
     'HOSTNAME_BINDING_SYNC': defineError({ code: 'HOSTNAME_BINDING_SYNC', class: 'internal', http: 500, message: 'HOSTNAME_BINDING_SYNC: unknown event {{arg0}}, expected UPSERT or DELETE', positional: ['arg0'] }),
     'HTTP_ROUTE_TARGET_NOT_FOUND': defineError({ code: 'HTTP_ROUTE_TARGET_NOT_FOUND', class: 'internal', http: 500, message: 'HTTP_ROUTE_TARGET_NOT_FOUND:' }),
     'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE': defineError({ code: 'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE', class: 'internal', http: 500, message: 'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE:' }),
@@ -296,7 +307,7 @@ export const generatedRegistry = {
     'IMMUTABLE_PROPERTY': defineError({ code: 'IMMUTABLE_PROPERTY', class: 'internal', http: 500, message: 'Immutable property.' }),
     'IMMUTABLE_PROPS': defineError({ code: 'IMMUTABLE_PROPS', class: 'public', http: 403, message: 'Immutable props.' }),
     'IMMUTABLE_TIMESTAMPS': defineError({ code: 'IMMUTABLE_TIMESTAMPS', class: 'public', http: 403, message: 'Immutable timestamps.' }),
-    'INCORRECT_PASSWORD': defineError({ code: 'INCORRECT_PASSWORD', class: 'public', http: 401, message: 'The password you entered is incorrect. Please try again.' }),
+    'INCORRECT_PASSWORD': defineError({ code: 'INCORRECT_PASSWORD', class: 'public', http: 401, message: 'Incorrect password.' }),
     'INFRA_API_NOT_PROVISIONED': defineError({ code: 'INFRA_API_NOT_PROVISIONED', class: 'public', http: 400, message: 'Infra api not provisioned.' }),
     'INSERT_GRAPH_EXECUTION_MODULE': defineError({ code: 'INSERT_GRAPH_EXECUTION_MODULE', class: 'internal', http: 500, message: 'Insert graph execution module.' }),
     'INTERNAL_ERROR': defineError({ code: 'INTERNAL_ERROR', class: 'internal', http: 500, message: 'Internal error.' }),
@@ -312,12 +323,12 @@ export const generatedRegistry = {
     'INVALID_MFA_CHALLENGE': defineError({ code: 'INVALID_MFA_CHALLENGE', class: 'public', http: 403, message: 'Invalid mfa challenge.' }),
     'INVALID_MFA_LEVEL': defineError({ code: 'INVALID_MFA_LEVEL', class: 'public', http: 403, message: 'Invalid mfa level.' }),
     'INVALID_ORGANIZATION': defineError({ code: 'INVALID_ORGANIZATION', class: 'public', http: 400, message: 'Invalid organization.' }),
-    'INVALID_TOKEN': defineError({ code: 'INVALID_TOKEN', class: 'public', http: 401, message: 'This reset link is invalid. Please request a new one.' }),
+    'INVALID_TOKEN': defineError({ code: 'INVALID_TOKEN', class: 'public', http: 401, message: 'Invalid token.' }),
     'INVALID_USER': defineError({ code: 'INVALID_USER', class: 'public', http: 400, message: 'Invalid user.' }),
     'INVALID_WORKER_ID': defineError({ code: 'INVALID_WORKER_ID', class: 'internal', http: 500, message: 'Invalid worker id.' }),
-    'INVITE_EMAIL_NOT_FOUND': defineError({ code: 'INVITE_EMAIL_NOT_FOUND', class: 'public', http: 404, message: 'This invitation was sent to a different email address.' }),
-    'INVITE_LIMIT': defineError({ code: 'INVITE_LIMIT', class: 'public', http: 429, message: 'This invitation has reached its usage limit.' }),
-    'INVITE_NOT_FOUND': defineError({ code: 'INVITE_NOT_FOUND', class: 'public', http: 404, message: 'This invitation was not found.' }),
+    'INVITE_EMAIL_NOT_FOUND': defineError({ code: 'INVITE_EMAIL_NOT_FOUND', class: 'public', http: 404, message: 'Invite email not found.' }),
+    'INVITE_LIMIT': defineError({ code: 'INVITE_LIMIT', class: 'public', http: 429, message: 'Invite limit.' }),
+    'INVITE_NOT_FOUND': defineError({ code: 'INVITE_NOT_FOUND', class: 'public', http: 404, message: 'Invite not found.' }),
     'INVOCATION_QUOTA_GATE': defineError({ code: 'INVOCATION_QUOTA_GATE', class: 'internal', http: 500, message: 'INVOCATION_QUOTA_GATE: quota_schema and quota_function are required — the generator must only build this trigger when billing is provisioned' }),
     'INVOCATION_USAGE': defineError({ code: 'INVOCATION_USAGE', class: 'internal', http: 500, message: 'INVOCATION_USAGE: billing_schema and record_usage_fn are required — the generator must only build this trigger when billing is provisioned' }),
     'LIMIT_ENFORCE_AGGREGATE_ENTITY_FIELD_NOT_FOUND': defineError({ code: 'LIMIT_ENFORCE_AGGREGATE_ENTITY_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Limit enforce aggregate entity field not found.' }),
@@ -401,10 +412,11 @@ export const generatedRegistry = {
     'ORG_API_KEY_NOT_FOUND': defineError({ code: 'ORG_API_KEY_NOT_FOUND', class: 'public', http: 404, message: 'Org api key not found.' }),
     'OWNER_FIELD_NOT_FOUND': defineError({ code: 'OWNER_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Owner field not found.' }),
     'OWNER_FIELD_NOT_IN_OWNER_TABLE': defineError({ code: 'OWNER_FIELD_NOT_IN_OWNER_TABLE', class: 'public', http: 400, message: 'Owner field not in owner table.' }),
+    'PAGES_MODULE': defineError({ code: 'PAGES_MODULE', class: 'internal', http: 500, message: 'Pages module.' }),
     'PARENT_ENTITY_TYPE_NOT_FOUND': defineError({ code: 'PARENT_ENTITY_TYPE_NOT_FOUND', class: 'internal', http: 500, message: 'Parent entity type not found.' }),
     'PARENT_EXECUTION_NOT_FOUND': defineError({ code: 'PARENT_EXECUTION_NOT_FOUND', class: 'internal', http: 500, message: 'Parent execution not found.' }),
-    'PASSWORD_INSECURE': defineError({ code: 'PASSWORD_INSECURE', class: 'public', http: 400, message: 'This password is not secure enough. Please choose a stronger password.' }),
-    'PASSWORD_LEN': defineError({ code: 'PASSWORD_LEN', class: 'public', http: 400, message: 'Password must be between 8 and 63 characters long.' }),
+    'PASSWORD_INSECURE': defineError({ code: 'PASSWORD_INSECURE', class: 'public', http: 400, message: 'Password insecure.' }),
+    'PASSWORD_LEN': defineError({ code: 'PASSWORD_LEN', class: 'public', http: 400, message: 'Password len.' }),
     'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS': defineError({ code: 'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Password reset locked exceed attempts.' }),
     'PASSWORD_SIGN_IN_DISABLED': defineError({ code: 'PASSWORD_SIGN_IN_DISABLED', class: 'public', http: 403, message: 'Password sign in disabled.' }),
     'PASSWORD_SIGN_UP_DISABLED': defineError({ code: 'PASSWORD_SIGN_UP_DISABLED', class: 'public', http: 403, message: 'Password sign up disabled.' }),
@@ -491,7 +503,7 @@ export const generatedRegistry = {
     'SEED_PLAN_PLAN_NAME_REQUIRED': defineError({ code: 'SEED_PLAN_PLAN_NAME_REQUIRED', class: 'internal', http: 500, message: 'Seed plan plan name required.' }),
     'SESSION_NOT_FOUND': defineError({ code: 'SESSION_NOT_FOUND', class: 'public', http: 404, message: 'Session not found.' }),
     'SETTINGS_SURFACE_NOT_PROVISIONED': defineError({ code: 'SETTINGS_SURFACE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Settings surface not provisioned.' }),
-    'SIGN_UP_DISABLED': defineError({ code: 'SIGN_UP_DISABLED', class: 'public', http: 403, message: 'New registrations are currently disabled.' }),
+    'SIGN_UP_DISABLED': defineError({ code: 'SIGN_UP_DISABLED', class: 'public', http: 403, message: 'Sign up disabled.' }),
     'SITE_NOT_PROVISIONED': defineError({ code: 'SITE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Site not provisioned.' }),
     'SITE_SURFACE_NOT_PROVISIONED': defineError({ code: 'SITE_SURFACE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Site surface not provisioned.' }),
     'SMS_SIGN_IN_DISABLED': defineError({ code: 'SMS_SIGN_IN_DISABLED', class: 'public', http: 403, message: 'Sms sign in disabled.' }),
@@ -500,12 +512,15 @@ export const generatedRegistry = {
     'SOURCE_EMAILS_NOT_FOUND': defineError({ code: 'SOURCE_EMAILS_NOT_FOUND', class: 'internal', http: 500, message: 'Source emails not found.' }),
     'SOURCE_SECRETS_NOT_FOUND': defineError({ code: 'SOURCE_SECRETS_NOT_FOUND', class: 'internal', http: 500, message: 'Source secrets not found.' }),
     'SOURCE_USERS_NOT_FOUND': defineError({ code: 'SOURCE_USERS_NOT_FOUND', class: 'internal', http: 500, message: 'Source users not found.' }),
+    'STATIC_SITES_LIMIT': defineError({ code: 'STATIC_SITES_LIMIT', class: 'public', http: 429, message: 'Static sites limit.' }),
     'STEP_UP_INVALID_TYPE': defineError({ code: 'STEP_UP_INVALID_TYPE', class: 'public', http: 403, message: 'This action requires verification that is not configured correctly. Please contact support.' }),
-    'STEP_UP_REQUIRED': defineError({ code: 'STEP_UP_REQUIRED', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
+    'STEP_UP_REQUIRED': defineError({ code: 'STEP_UP_REQUIRED', class: 'public', http: 403, message: 'Step up required.' }),
     'STEP_UP_REQUIRED_FRESH_AUTH': defineError({ code: 'STEP_UP_REQUIRED_FRESH_AUTH', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
     'STEP_UP_REQUIRED_MFA': defineError({ code: 'STEP_UP_REQUIRED_MFA', class: 'public', http: 403, message: 'Please enter a code from your authenticator app to continue.' }),
     'STEP_UP_REQUIRED_PASSWORD': defineError({ code: 'STEP_UP_REQUIRED_PASSWORD', class: 'public', http: 403, message: 'Please re-enter your password to continue.' }),
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA': defineError({ code: 'STEP_UP_REQUIRED_PASSWORD_OR_MFA', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
+    'SUBDOMAIN_APEX_NOT_PUBLISHED': defineError({ code: 'SUBDOMAIN_APEX_NOT_PUBLISHED', class: 'public', http: 400, message: 'Subdomain apex not published.' }),
+    'SUBDOMAIN_LABEL_EXHAUSTED': defineError({ code: 'SUBDOMAIN_LABEL_EXHAUSTED', class: 'public', http: 400, message: 'Subdomain label exhausted.' }),
+    'SUBDOMAIN_LABEL_INVALID': defineError({ code: 'SUBDOMAIN_LABEL_INVALID', class: 'public', http: 400, message: 'Subdomain label invalid.' }),
     'SUPER_CONSTRUCTIVE_REQUIRED': defineError({ code: 'SUPER_CONSTRUCTIVE_REQUIRED', class: 'public', http: 400, message: 'Super constructive required.' }),
     'TABLE_MODULE': defineError({ code: 'TABLE_MODULE', class: 'internal', http: 500, message: 'Table module.' }),
     'TABLE_MODULE_TABLE_NOT_FOUND': defineError({ code: 'TABLE_MODULE_TABLE_NOT_FOUND', class: 'internal', http: 500, message: 'Table module table not found.' }),
@@ -561,6 +576,8 @@ export const GENERATED_CODE_META = {
     'APPLY_RLS': { class: 'internal', dynamic: false, generatedOnly: false },
     'APPLY_RLS_BAD_ARGS': { class: 'internal', dynamic: false, generatedOnly: false },
     'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
+    'APP_INSTALLATION_MISSING': { class: 'public', dynamic: false, generatedOnly: false },
+    'APP_INSTALL_NO_SERVICE': { class: 'public', dynamic: false, generatedOnly: false },
     'ASSIGN_PROFILES_PERMISSION_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -596,6 +613,7 @@ export const GENERATED_CODE_META = {
     'BAD_PRIVILEGE_FOR_POLICY': { class: 'public', dynamic: false, generatedOnly: false },
     'BAD_RLS_EXPRESSION': { class: 'public', dynamic: false, generatedOnly: false },
     'BAD_VIEW_EXPRESSION': { class: 'public', dynamic: false, generatedOnly: false },
+    'BEHAVIOR_FRAGMENT_EMPTY': { class: 'internal', dynamic: false, generatedOnly: false },
     'BM25': { class: 'public', dynamic: false, generatedOnly: false },
     'BOOTSTRAP_DATABASE_MISSING': { class: 'internal', dynamic: false, generatedOnly: false },
     'BOOTSTRAP_SOURCE_MISSING': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -632,6 +650,7 @@ export const GENERATED_CODE_META = {
     'CROSS_DATABASE_CHECK': { class: 'public', dynamic: false, generatedOnly: false },
     'CROSS_DATABASE_REF': { class: 'public', dynamic: false, generatedOnly: false },
     'CSRF_TOKEN_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATABASE_CLAIM_REQUIRED': { class: 'internal', dynamic: false, generatedOnly: true },
     'DATABASE_FIELD_RESERVED_WORD': { class: 'public', dynamic: false, generatedOnly: false },
     'DATABASE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -663,6 +682,10 @@ export const GENERATED_CODE_META = {
     'DATA_GENERATED_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_GENERATED_TARGET_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_GENERATED_UNKNOWN_KIND': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_NO_COPY_FIELDS': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_ON_HISTORY_TABLE': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_REQUIRES_PK': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_FIELDS_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_MODULE_NOT_PROVISIONED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -688,6 +711,7 @@ export const GENERATED_CODE_META = {
     'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -772,10 +796,11 @@ export const GENERATED_CODE_META = {
     'EVENT_TRACKER_UNKNOWN_EVENT': { class: 'public', dynamic: false, generatedOnly: false },
     'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'EXECUTION_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
-    'EXPIRED_TOKEN': { class: 'public', dynamic: false, generatedOnly: false },
+    'EXPIRED_TOKEN': { class: 'internal', dynamic: false, generatedOnly: false },
     'EXTERNAL_MEMBERS_NOT_ALLOWED': { class: 'public', dynamic: false, generatedOnly: false },
     'FEATURE_DISABLED': { class: 'public', dynamic: true, generatedOnly: false },
     'FIELDS_MISMATCH': { class: 'public', dynamic: false, generatedOnly: false },
+    'FOREIGN_KEY_CONSTRAINT_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_GRAPH_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_SCHEDULES': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_SCHEDULES_INTERVAL': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -814,6 +839,7 @@ export const GENERATED_CODE_META = {
     'HIERARCHY_DEPTH_EXCEEDED': { class: 'internal', dynamic: false, generatedOnly: false },
     'HIERARCHY_INACTIVE_MEMBER': { class: 'internal', dynamic: true, generatedOnly: false },
     'HIERARCHY_MEMBER_IN_USE': { class: 'internal', dynamic: true, generatedOnly: false },
+    'HISTORY': { class: 'internal', dynamic: true, generatedOnly: false },
     'HOSTNAME_BINDING_SYNC': { class: 'internal', dynamic: true, generatedOnly: false },
     'HTTP_ROUTE_TARGET_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -935,6 +961,7 @@ export const GENERATED_CODE_META = {
     'ORG_API_KEY_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'OWNER_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'OWNER_FIELD_NOT_IN_OWNER_TABLE': { class: 'public', dynamic: false, generatedOnly: false },
+    'PAGES_MODULE': { class: 'internal', dynamic: false, generatedOnly: false },
     'PARENT_ENTITY_TYPE_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'PARENT_EXECUTION_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'PASSWORD_INSECURE': { class: 'public', dynamic: false, generatedOnly: false },
@@ -1034,12 +1061,15 @@ export const GENERATED_CODE_META = {
     'SOURCE_EMAILS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'SOURCE_SECRETS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'SOURCE_USERS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
+    'STATIC_SITES_LIMIT': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_INVALID_TYPE': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_FRESH_AUTH': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_MFA': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_PASSWORD': { class: 'public', dynamic: false, generatedOnly: false },
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA': { class: 'public', dynamic: false, generatedOnly: true },
+    'SUBDOMAIN_APEX_NOT_PUBLISHED': { class: 'public', dynamic: false, generatedOnly: false },
+    'SUBDOMAIN_LABEL_EXHAUSTED': { class: 'public', dynamic: false, generatedOnly: false },
+    'SUBDOMAIN_LABEL_INVALID': { class: 'public', dynamic: false, generatedOnly: false },
     'SUPER_CONSTRUCTIVE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'TABLE_MODULE': { class: 'internal', dynamic: false, generatedOnly: false },
     'TABLE_MODULE_TABLE_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -1082,4 +1112,4 @@ export const GENERATED_CODE_META = {
     'WITH_CHECK_NOT_ALLOWED': { class: 'public', dynamic: false, generatedOnly: false },
 };
 /** Total number of codes collected from constructive-db. */
-export const GENERATED_CODE_COUNT = 531;
+export const GENERATED_CODE_COUNT = 546;

package/esm/http.d.ts

@@ -0,0 +1,30 @@
+/** Status used when a code carries no mapping. */
+export declare const UNMAPPED_HTTP_STATUS = 500;
+export interface HttpStatusResolution {
+    /** The status a transport should send. */
+    status: number;
+    /**
+     * Whether `status` came from the registry. `false` means the code is not
+     * registered and `status` is the {@link UNMAPPED_HTTP_STATUS} fallback — the
+     * one case where a 500 does not mean "the server broke".
+     */
+    mapped: boolean;
+}
+/** Notified once per unmapped code. */
+export type UnmappedStatusReporter = (code: string) => void;
+/**
+ * Replace the unmapped-code reporter (pass `null` to restore the default, or a
+ * no-op to silence it). Transports with a real logger should route it there.
+ */
+export declare function setUnmappedStatusReporter(next: UnmappedStatusReporter | null): void;
+/** Test seam: forget which codes have already been reported. */
+export declare function resetUnmappedStatusReports(): void;
+/**
+ * Resolve the HTTP status for an error code.
+ *
+ * An unregistered code is reported (once per code) rather than silently
+ * degrading to 500: a refusal that is plainly a 403 or 409 turning into a 500
+ * looks like a crash, and the only way anyone notices is by reading the
+ * transport's source.
+ */
+export declare function httpStatusFor(code: string | null | undefined): HttpStatusResolution;

package/esm/http.js

@@ -0,0 +1,39 @@
+import { getDefinition } from './registry';
+/** Status used when a code carries no mapping. */
+export const UNMAPPED_HTTP_STATUS = 500;
+const reported = new Set();
+const defaultReporter = code => {
+    // eslint-disable-next-line no-console
+    console.warn(`[constructive-errors] no HTTP status mapping for ${code}; responding ${UNMAPPED_HTTP_STATUS}. ` +
+        'Register the code so intentional refusals stop surfacing as server errors.');
+};
+let reporter = defaultReporter;
+/**
+ * Replace the unmapped-code reporter (pass `null` to restore the default, or a
+ * no-op to silence it). Transports with a real logger should route it there.
+ */
+export function setUnmappedStatusReporter(next) {
+    reporter = next ?? defaultReporter;
+}
+/** Test seam: forget which codes have already been reported. */
+export function resetUnmappedStatusReports() {
+    reported.clear();
+}
+/**
+ * Resolve the HTTP status for an error code.
+ *
+ * An unregistered code is reported (once per code) rather than silently
+ * degrading to 500: a refusal that is plainly a 403 or 409 turning into a 500
+ * looks like a crash, and the only way anyone notices is by reading the
+ * transport's source.
+ */
+export function httpStatusFor(code) {
+    const def = code ? getDefinition(code) : undefined;
+    if (def)
+        return { status: def.http, mapped: true };
+    if (code && !reported.has(code)) {
+        reported.add(code);
+        reporter(code);
+    }
+    return { status: UNMAPPED_HTTP_STATUS, mapped: false };
+}

package/esm/index.d.ts

@@ -2,6 +2,7 @@ export * from './classify';
 export * from './error';
 export * from './factory';
 export * from './format';
+export * from './http';
 export * from './interpolate';
 export * from './parse';
 export * from './pg';

package/esm/index.js

@@ -2,6 +2,7 @@ export * from './classify';
 export * from './error';
 export * from './factory';
 export * from './format';
+export * from './http';
 export * from './interpolate';
 export * from './parse';
 export * from './pg';

package/esm/parse.d.ts

@@ -25,6 +25,8 @@ export declare function parse(error: unknown): ParsedError;
  * Delegates to {@link parse} for code/context/class recovery, then resolves a
  * localized message from the registry catalogs (falling back to the source
  * error's raw message when the code is unknown) and the registry's HTTP hint.
- * Codes that could not be resolved become `UNKNOWN_ERROR` (internal).
+ * Codes that could not be resolved become `UNKNOWN_ERROR` (internal); a code
+ * with no registered status is reported by {@link httpStatusFor} rather than
+ * quietly becoming a 500.
  */
 export declare function toError(error: unknown, locale?: string): ConstructiveError;

package/esm/parse.js

@@ -1,6 +1,7 @@
 import { classify } from './classify';
 import { ConstructiveError } from './error';
 import { format } from './format';
+import { httpStatusFor } from './http';
 import { extractPgErrorFields, RAISE_EXCEPTION_SQLSTATE, SQLSTATE_TO_CODE } from './pg';
 import { getDefinition } from './registry';
 /** Leading ALL_CAPS token, optionally followed by `(arg, arg)` positional args. */
@@ -178,7 +179,9 @@ export function parse(error) {
  * Delegates to {@link parse} for code/context/class recovery, then resolves a
  * localized message from the registry catalogs (falling back to the source
  * error's raw message when the code is unknown) and the registry's HTTP hint.
- * Codes that could not be resolved become `UNKNOWN_ERROR` (internal).
+ * Codes that could not be resolved become `UNKNOWN_ERROR` (internal); a code
+ * with no registered status is reported by {@link httpStatusFor} rather than
+ * quietly becoming a 500.
  */
 export function toError(error, locale) {
     if (error instanceof ConstructiveError)
@@ -193,7 +196,7 @@ export function toError(error, locale) {
         code,
         message,
         errorClass: parsed.class,
-        http: def?.http ?? 500,
+        http: def ? def.http : httpStatusFor(code).status,
         context: parsed.context
     });
 }

package/generated/registry.generated.d.ts

@@ -1,7 +1,7 @@
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
  *
- * Source of truth: the constructive-db error audit (531 distinct codes
+ * Source of truth: the constructive-db error audit (546 distinct codes
  * raised via EXCEPTION/THROW across deploy sources + generated output).
  * Regenerate with `python3 scripts/generate-registry.py` (see README.md).
  *
@@ -9,7 +9,7 @@
  * codes carry their raw message (with %-args rendered as {{argN}}). Curated
  * entries in `registry.ts` override anything here (typed context + refined copy).
  *
- * Counts: 531 total, 401 public, 130 internal.
+ * Counts: 546 total, 410 public, 136 internal.
  */
 import { type DefinedError } from '../define';
 import type { ErrorContext } from '../types';
@@ -24,4 +24,4 @@ export declare const generatedRegistry: Record<string, DefinedError<ErrorContext
 /** Audit metadata for each generated code. */
 export declare const GENERATED_CODE_META: Record<string, GeneratedCodeMeta>;
 /** Total number of codes collected from constructive-db. */
-export declare const GENERATED_CODE_COUNT = 531;
+export declare const GENERATED_CODE_COUNT = 546;

package/generated/registry.generated.js

@@ -5,7 +5,7 @@ exports.GENERATED_CODE_COUNT = exports.GENERATED_CODE_META = exports.generatedRe
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
  *
- * Source of truth: the constructive-db error audit (531 distinct codes
+ * Source of truth: the constructive-db error audit (546 distinct codes
  * raised via EXCEPTION/THROW across deploy sources + generated output).
  * Regenerate with `python3 scripts/generate-registry.py` (see README.md).
  *
@@ -13,14 +13,14 @@ exports.GENERATED_CODE_COUNT = exports.GENERATED_CODE_META = exports.generatedRe
  * codes carry their raw message (with %-args rendered as {{argN}}). Curated
  * entries in `registry.ts` override anything here (typed context + refined copy).
  *
- * Counts: 531 total, 401 public, 130 internal.
+ * Counts: 546 total, 410 public, 136 internal.
  */
 const define_1 = require("../define");
 /** Every constructive-db error code, keyed by code. */
 exports.generatedRegistry = {
-    'ACCOUNT_DISABLED': (0, define_1.defineError)({ code: 'ACCOUNT_DISABLED', class: 'public', http: 403, message: 'Your account has been disabled. Please contact support for assistance.' }),
-    'ACCOUNT_EXISTS': (0, define_1.defineError)({ code: 'ACCOUNT_EXISTS', class: 'public', http: 409, message: 'An account with this email already exists. Please sign in or use a different email.' }),
-    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS': (0, define_1.defineError)({ code: 'ACCOUNT_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Your account has been temporarily locked due to too many failed login attempts. Please try again later or reset your password.' }),
+    'ACCOUNT_DISABLED': (0, define_1.defineError)({ code: 'ACCOUNT_DISABLED', class: 'public', http: 403, message: 'Account disabled.' }),
+    'ACCOUNT_EXISTS': (0, define_1.defineError)({ code: 'ACCOUNT_EXISTS', class: 'public', http: 409, message: 'Account exists.' }),
+    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS': (0, define_1.defineError)({ code: 'ACCOUNT_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Account locked exceed attempts.' }),
     'ACCOUNT_NOT_FOUND': (0, define_1.defineError)({ code: 'ACCOUNT_NOT_FOUND', class: 'public', http: 404, message: 'Account not found.' }),
     'ALREADY_SCHEDULED': (0, define_1.defineError)({ code: 'ALREADY_SCHEDULED', class: 'public', http: 409, message: 'Already scheduled.' }),
     'ALTER_TABLE_ADD_COLUMN': (0, define_1.defineError)({ code: 'ALTER_TABLE_ADD_COLUMN', class: 'internal', http: 500, message: 'ALTER_TABLE_ADD_COLUMN: a column cannot be both generated and an identity column' }),
@@ -30,6 +30,8 @@ exports.generatedRegistry = {
     'APPLY_RLS': (0, define_1.defineError)({ code: 'APPLY_RLS', class: 'internal', http: 500, message: 'Apply rls.' }),
     'APPLY_RLS_BAD_ARGS': (0, define_1.defineError)({ code: 'APPLY_RLS_BAD_ARGS', class: 'internal', http: 500, message: 'Apply rls bad args.' }),
     'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND': (0, define_1.defineError)({ code: 'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Apply table step up table not found.' }),
+    'APP_INSTALLATION_MISSING': (0, define_1.defineError)({ code: 'APP_INSTALLATION_MISSING', class: 'public', http: 400, message: 'App installation missing.' }),
+    'APP_INSTALL_NO_SERVICE': (0, define_1.defineError)({ code: 'APP_INSTALL_NO_SERVICE', class: 'public', http: 400, message: 'App install no service.' }),
     'ASSIGN_PROFILES_PERMISSION_REQUIRED': (0, define_1.defineError)({ code: 'ASSIGN_PROFILES_PERMISSION_REQUIRED', class: 'public', http: 403, message: 'Assign profiles permission required.' }),
     'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED': (0, define_1.defineError)({ code: 'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED', class: 'public', http: 400, message: 'Authz column security authz node required.' }),
     'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED': (0, define_1.defineError)({ code: 'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED', class: 'public', http: 400, message: 'Authz column security columns required.' }),
@@ -65,6 +67,7 @@ exports.generatedRegistry = {
     'BAD_PRIVILEGE_FOR_POLICY': (0, define_1.defineError)({ code: 'BAD_PRIVILEGE_FOR_POLICY', class: 'public', http: 400, message: 'Bad privilege for policy.' }),
     'BAD_RLS_EXPRESSION': (0, define_1.defineError)({ code: 'BAD_RLS_EXPRESSION', class: 'public', http: 400, message: 'Bad rls expression.' }),
     'BAD_VIEW_EXPRESSION': (0, define_1.defineError)({ code: 'BAD_VIEW_EXPRESSION', class: 'public', http: 400, message: 'Bad view expression.' }),
+    'BEHAVIOR_FRAGMENT_EMPTY': (0, define_1.defineError)({ code: 'BEHAVIOR_FRAGMENT_EMPTY', class: 'internal', http: 500, message: 'Behavior fragment empty.' }),
     'BM25': (0, define_1.defineError)({ code: 'BM25', class: 'public', http: 400, message: 'Bm25.' }),
     'BOOTSTRAP_DATABASE_MISSING': (0, define_1.defineError)({ code: 'BOOTSTRAP_DATABASE_MISSING', class: 'internal', http: 500, message: 'Bootstrap database missing.' }),
     'BOOTSTRAP_SOURCE_MISSING': (0, define_1.defineError)({ code: 'BOOTSTRAP_SOURCE_MISSING', class: 'internal', http: 500, message: 'Bootstrap source missing.' }),
@@ -101,6 +104,7 @@ exports.generatedRegistry = {
     'CROSS_DATABASE_CHECK': (0, define_1.defineError)({ code: 'CROSS_DATABASE_CHECK', class: 'public', http: 400, message: 'Cross database check.' }),
     'CROSS_DATABASE_REF': (0, define_1.defineError)({ code: 'CROSS_DATABASE_REF', class: 'public', http: 400, message: 'Cross database ref.' }),
     'CSRF_TOKEN_REQUIRED': (0, define_1.defineError)({ code: 'CSRF_TOKEN_REQUIRED', class: 'public', http: 401, message: 'Csrf token required.' }),
+    'DATABASE_CLAIM_REQUIRED': (0, define_1.defineError)({ code: 'DATABASE_CLAIM_REQUIRED', class: 'internal', http: 500, message: 'Database claim required.' }),
     'DATABASE_FIELD_RESERVED_WORD': (0, define_1.defineError)({ code: 'DATABASE_FIELD_RESERVED_WORD', class: 'public', http: 400, message: 'Database field reserved word.' }),
     'DATABASE_NOT_FOUND': (0, define_1.defineError)({ code: 'DATABASE_NOT_FOUND', class: 'public', http: 404, message: 'Database not found.' }),
     'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED': (0, define_1.defineError)({ code: 'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED', class: 'public', http: 400, message: 'Database settings tables scope required.' }),
@@ -132,6 +136,10 @@ exports.generatedRegistry = {
     'DATA_GENERATED_TABLE_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_GENERATED_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Data generated table not found.' }),
     'DATA_GENERATED_TARGET_REQUIRED': (0, define_1.defineError)({ code: 'DATA_GENERATED_TARGET_REQUIRED', class: 'public', http: 400, message: 'Data generated target required.' }),
     'DATA_GENERATED_UNKNOWN_KIND': (0, define_1.defineError)({ code: 'DATA_GENERATED_UNKNOWN_KIND', class: 'public', http: 400, message: 'Data generated unknown kind.' }),
+    'DATA_HISTORY_NO_COPY_FIELDS': (0, define_1.defineError)({ code: 'DATA_HISTORY_NO_COPY_FIELDS', class: 'public', http: 400, message: 'Data history no copy fields.' }),
+    'DATA_HISTORY_ON_HISTORY_TABLE': (0, define_1.defineError)({ code: 'DATA_HISTORY_ON_HISTORY_TABLE', class: 'public', http: 400, message: 'Data history on history table.' }),
+    'DATA_HISTORY_REQUIRES_PK': (0, define_1.defineError)({ code: 'DATA_HISTORY_REQUIRES_PK', class: 'public', http: 403, message: 'Data history requires pk.' }),
+    'DATA_HISTORY_TABLE_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_HISTORY_TABLE_NOT_FOUND', class: 'public', http: 404, message: 'Data history table not found.' }),
     'DATA_I18N_FIELDS_REQUIRED': (0, define_1.defineError)({ code: 'DATA_I18N_FIELDS_REQUIRED', class: 'public', http: 400, message: 'Data i18n fields required.' }),
     'DATA_I18N_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_I18N_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data i18n field not found.' }),
     'DATA_I18N_MODULE_NOT_PROVISIONED': (0, define_1.defineError)({ code: 'DATA_I18N_MODULE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Data i18n module not provisioned.' }),
@@ -157,6 +165,7 @@ exports.generatedRegistry = {
     'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT', class: 'public', http: 400, message: 'Data job trigger conditions watch fields conflict.' }),
     'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger condition field not found.' }),
     'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT', class: 'public', http: 400, message: 'Data job trigger condition field watch fields conflict.' }),
+    'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger database id field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger entity field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Data job trigger entity lookup obj field not found.' }),
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED': (0, define_1.defineError)({ code: 'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED', class: 'public', http: 400, message: 'Data job trigger entity lookup obj field required.' }),
@@ -208,7 +217,7 @@ exports.generatedRegistry = {
     'DOMAIN_ROOT_NOT_PUBLISHED': (0, define_1.defineError)({ code: 'DOMAIN_ROOT_NOT_PUBLISHED', class: 'internal', http: 500, message: 'Domain root not published.' }),
     'DOMAIN_VERIFY_BAD_METHOD': (0, define_1.defineError)({ code: 'DOMAIN_VERIFY_BAD_METHOD', class: 'internal', http: 500, message: 'DOMAIN_VERIFY_BAD_METHOD: unsupported verification method {{arg0}}', positional: ['arg0'] }),
     'DOMAIN_VERIFY_NO_CHALLENGE': (0, define_1.defineError)({ code: 'DOMAIN_VERIFY_NO_CHALLENGE', class: 'internal', http: 500, message: 'DOMAIN_VERIFY_NO_CHALLENGE: no outstanding {{arg0}} challenge for managed_domain {{arg1}}', positional: ['arg0', 'arg1'] }),
-    'EMAIL_NOT_VERIFIED': (0, define_1.defineError)({ code: 'EMAIL_NOT_VERIFIED', class: 'public', http: 400, message: 'Please verify your email before accepting this invitation.' }),
+    'EMAIL_NOT_VERIFIED': (0, define_1.defineError)({ code: 'EMAIL_NOT_VERIFIED', class: 'public', http: 400, message: 'Email not verified.' }),
     'ENTITY_NOT_FOUND': (0, define_1.defineError)({ code: 'ENTITY_NOT_FOUND', class: 'internal', http: 500, message: 'Entity not found.' }),
     'ENTITY_TYPE_NOT_FOUND': (0, define_1.defineError)({ code: 'ENTITY_TYPE_NOT_FOUND', class: 'internal', http: 500, message: 'Entity type not found.' }),
     'ENTITY_TYPE_PROVISION': (0, define_1.defineError)({ code: 'ENTITY_TYPE_PROVISION', class: 'internal', http: 500, message: 'Entity type provision.' }),
@@ -241,10 +250,11 @@ exports.generatedRegistry = {
     'EVENT_TRACKER_UNKNOWN_EVENT': (0, define_1.defineError)({ code: 'EVENT_TRACKER_UNKNOWN_EVENT', class: 'public', http: 400, message: 'Event tracker unknown event.' }),
     'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Event tracker watch field not found.' }),
     'EXECUTION_NOT_FOUND': (0, define_1.defineError)({ code: 'EXECUTION_NOT_FOUND', class: 'internal', http: 500, message: 'Execution not found.' }),
-    'EXPIRED_TOKEN': (0, define_1.defineError)({ code: 'EXPIRED_TOKEN', class: 'public', http: 400, message: 'This reset link has expired. Please request a new one.' }),
+    'EXPIRED_TOKEN': (0, define_1.defineError)({ code: 'EXPIRED_TOKEN', class: 'internal', http: 500, message: 'Expired token.' }),
     'EXTERNAL_MEMBERS_NOT_ALLOWED': (0, define_1.defineError)({ code: 'EXTERNAL_MEMBERS_NOT_ALLOWED', class: 'public', http: 403, message: 'External members not allowed.' }),
     'FEATURE_DISABLED': (0, define_1.defineError)({ code: 'FEATURE_DISABLED', class: 'public', http: 403, message: 'Feature disabled.', positional: ['arg0'] }),
     'FIELDS_MISMATCH': (0, define_1.defineError)({ code: 'FIELDS_MISMATCH', class: 'public', http: 400, message: 'Fields mismatch.' }),
+    'FOREIGN_KEY_CONSTRAINT_NOT_FOUND': (0, define_1.defineError)({ code: 'FOREIGN_KEY_CONSTRAINT_NOT_FOUND', class: 'internal', http: 500, message: 'Foreign key constraint not found.' }),
     'FUNCTION_GRAPH_NOT_FOUND': (0, define_1.defineError)({ code: 'FUNCTION_GRAPH_NOT_FOUND', class: 'internal', http: 500, message: 'Function graph not found.' }),
     'FUNCTION_SCHEDULES': (0, define_1.defineError)({ code: 'FUNCTION_SCHEDULES', class: 'internal', http: 500, message: 'FUNCTION_SCHEDULES: function definition does not allow the cron access channel' }),
     'FUNCTION_SCHEDULES_INTERVAL': (0, define_1.defineError)({ code: 'FUNCTION_SCHEDULES_INTERVAL', class: 'internal', http: 500, message: 'FUNCTION_SCHEDULES_INTERVAL (min_schedule_interval)' }),
@@ -283,6 +293,7 @@ exports.generatedRegistry = {
     'HIERARCHY_DEPTH_EXCEEDED': (0, define_1.defineError)({ code: 'HIERARCHY_DEPTH_EXCEEDED', class: 'internal', http: 500, message: 'Hierarchy depth exceeded.' }),
     'HIERARCHY_INACTIVE_MEMBER': (0, define_1.defineError)({ code: 'HIERARCHY_INACTIVE_MEMBER', class: 'internal', http: 500, message: 'HIERARCHY_INACTIVE_MEMBER: Cannot add user {{arg0}} to hierarchy - user must be an active member of the organization first', positional: ['arg0'] }),
     'HIERARCHY_MEMBER_IN_USE': (0, define_1.defineError)({ code: 'HIERARCHY_MEMBER_IN_USE', class: 'internal', http: 500, message: 'HIERARCHY_MEMBER_IN_USE: Cannot deactivate user {{arg0}} - user must be removed from the organization hierarchy first', positional: ['arg0'] }),
+    'HISTORY': (0, define_1.defineError)({ code: 'HISTORY', class: 'internal', http: 500, message: 'HISTORY: history {{arg0}}.{{arg1}} registration has no copy_fields', positional: ['arg0', 'arg1'] }),
     'HOSTNAME_BINDING_SYNC': (0, define_1.defineError)({ code: 'HOSTNAME_BINDING_SYNC', class: 'internal', http: 500, message: 'HOSTNAME_BINDING_SYNC: unknown event {{arg0}}, expected UPSERT or DELETE', positional: ['arg0'] }),
     'HTTP_ROUTE_TARGET_NOT_FOUND': (0, define_1.defineError)({ code: 'HTTP_ROUTE_TARGET_NOT_FOUND', class: 'internal', http: 500, message: 'HTTP_ROUTE_TARGET_NOT_FOUND:' }),
     'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE': (0, define_1.defineError)({ code: 'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE', class: 'internal', http: 500, message: 'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE:' }),
@@ -299,7 +310,7 @@ exports.generatedRegistry = {
     'IMMUTABLE_PROPERTY': (0, define_1.defineError)({ code: 'IMMUTABLE_PROPERTY', class: 'internal', http: 500, message: 'Immutable property.' }),
     'IMMUTABLE_PROPS': (0, define_1.defineError)({ code: 'IMMUTABLE_PROPS', class: 'public', http: 403, message: 'Immutable props.' }),
     'IMMUTABLE_TIMESTAMPS': (0, define_1.defineError)({ code: 'IMMUTABLE_TIMESTAMPS', class: 'public', http: 403, message: 'Immutable timestamps.' }),
-    'INCORRECT_PASSWORD': (0, define_1.defineError)({ code: 'INCORRECT_PASSWORD', class: 'public', http: 401, message: 'The password you entered is incorrect. Please try again.' }),
+    'INCORRECT_PASSWORD': (0, define_1.defineError)({ code: 'INCORRECT_PASSWORD', class: 'public', http: 401, message: 'Incorrect password.' }),
     'INFRA_API_NOT_PROVISIONED': (0, define_1.defineError)({ code: 'INFRA_API_NOT_PROVISIONED', class: 'public', http: 400, message: 'Infra api not provisioned.' }),
     'INSERT_GRAPH_EXECUTION_MODULE': (0, define_1.defineError)({ code: 'INSERT_GRAPH_EXECUTION_MODULE', class: 'internal', http: 500, message: 'Insert graph execution module.' }),
     'INTERNAL_ERROR': (0, define_1.defineError)({ code: 'INTERNAL_ERROR', class: 'internal', http: 500, message: 'Internal error.' }),
@@ -315,12 +326,12 @@ exports.generatedRegistry = {
     'INVALID_MFA_CHALLENGE': (0, define_1.defineError)({ code: 'INVALID_MFA_CHALLENGE', class: 'public', http: 403, message: 'Invalid mfa challenge.' }),
     'INVALID_MFA_LEVEL': (0, define_1.defineError)({ code: 'INVALID_MFA_LEVEL', class: 'public', http: 403, message: 'Invalid mfa level.' }),
     'INVALID_ORGANIZATION': (0, define_1.defineError)({ code: 'INVALID_ORGANIZATION', class: 'public', http: 400, message: 'Invalid organization.' }),
-    'INVALID_TOKEN': (0, define_1.defineError)({ code: 'INVALID_TOKEN', class: 'public', http: 401, message: 'This reset link is invalid. Please request a new one.' }),
+    'INVALID_TOKEN': (0, define_1.defineError)({ code: 'INVALID_TOKEN', class: 'public', http: 401, message: 'Invalid token.' }),
     'INVALID_USER': (0, define_1.defineError)({ code: 'INVALID_USER', class: 'public', http: 400, message: 'Invalid user.' }),
     'INVALID_WORKER_ID': (0, define_1.defineError)({ code: 'INVALID_WORKER_ID', class: 'internal', http: 500, message: 'Invalid worker id.' }),
-    'INVITE_EMAIL_NOT_FOUND': (0, define_1.defineError)({ code: 'INVITE_EMAIL_NOT_FOUND', class: 'public', http: 404, message: 'This invitation was sent to a different email address.' }),
-    'INVITE_LIMIT': (0, define_1.defineError)({ code: 'INVITE_LIMIT', class: 'public', http: 429, message: 'This invitation has reached its usage limit.' }),
-    'INVITE_NOT_FOUND': (0, define_1.defineError)({ code: 'INVITE_NOT_FOUND', class: 'public', http: 404, message: 'This invitation was not found.' }),
+    'INVITE_EMAIL_NOT_FOUND': (0, define_1.defineError)({ code: 'INVITE_EMAIL_NOT_FOUND', class: 'public', http: 404, message: 'Invite email not found.' }),
+    'INVITE_LIMIT': (0, define_1.defineError)({ code: 'INVITE_LIMIT', class: 'public', http: 429, message: 'Invite limit.' }),
+    'INVITE_NOT_FOUND': (0, define_1.defineError)({ code: 'INVITE_NOT_FOUND', class: 'public', http: 404, message: 'Invite not found.' }),
     'INVOCATION_QUOTA_GATE': (0, define_1.defineError)({ code: 'INVOCATION_QUOTA_GATE', class: 'internal', http: 500, message: 'INVOCATION_QUOTA_GATE: quota_schema and quota_function are required — the generator must only build this trigger when billing is provisioned' }),
     'INVOCATION_USAGE': (0, define_1.defineError)({ code: 'INVOCATION_USAGE', class: 'internal', http: 500, message: 'INVOCATION_USAGE: billing_schema and record_usage_fn are required — the generator must only build this trigger when billing is provisioned' }),
     'LIMIT_ENFORCE_AGGREGATE_ENTITY_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'LIMIT_ENFORCE_AGGREGATE_ENTITY_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Limit enforce aggregate entity field not found.' }),
@@ -404,10 +415,11 @@ exports.generatedRegistry = {
     'ORG_API_KEY_NOT_FOUND': (0, define_1.defineError)({ code: 'ORG_API_KEY_NOT_FOUND', class: 'public', http: 404, message: 'Org api key not found.' }),
     'OWNER_FIELD_NOT_FOUND': (0, define_1.defineError)({ code: 'OWNER_FIELD_NOT_FOUND', class: 'public', http: 404, message: 'Owner field not found.' }),
     'OWNER_FIELD_NOT_IN_OWNER_TABLE': (0, define_1.defineError)({ code: 'OWNER_FIELD_NOT_IN_OWNER_TABLE', class: 'public', http: 400, message: 'Owner field not in owner table.' }),
+    'PAGES_MODULE': (0, define_1.defineError)({ code: 'PAGES_MODULE', class: 'internal', http: 500, message: 'Pages module.' }),
     'PARENT_ENTITY_TYPE_NOT_FOUND': (0, define_1.defineError)({ code: 'PARENT_ENTITY_TYPE_NOT_FOUND', class: 'internal', http: 500, message: 'Parent entity type not found.' }),
     'PARENT_EXECUTION_NOT_FOUND': (0, define_1.defineError)({ code: 'PARENT_EXECUTION_NOT_FOUND', class: 'internal', http: 500, message: 'Parent execution not found.' }),
-    'PASSWORD_INSECURE': (0, define_1.defineError)({ code: 'PASSWORD_INSECURE', class: 'public', http: 400, message: 'This password is not secure enough. Please choose a stronger password.' }),
-    'PASSWORD_LEN': (0, define_1.defineError)({ code: 'PASSWORD_LEN', class: 'public', http: 400, message: 'Password must be between 8 and 63 characters long.' }),
+    'PASSWORD_INSECURE': (0, define_1.defineError)({ code: 'PASSWORD_INSECURE', class: 'public', http: 400, message: 'Password insecure.' }),
+    'PASSWORD_LEN': (0, define_1.defineError)({ code: 'PASSWORD_LEN', class: 'public', http: 400, message: 'Password len.' }),
     'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS': (0, define_1.defineError)({ code: 'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS', class: 'public', http: 423, message: 'Password reset locked exceed attempts.' }),
     'PASSWORD_SIGN_IN_DISABLED': (0, define_1.defineError)({ code: 'PASSWORD_SIGN_IN_DISABLED', class: 'public', http: 403, message: 'Password sign in disabled.' }),
     'PASSWORD_SIGN_UP_DISABLED': (0, define_1.defineError)({ code: 'PASSWORD_SIGN_UP_DISABLED', class: 'public', http: 403, message: 'Password sign up disabled.' }),
@@ -494,7 +506,7 @@ exports.generatedRegistry = {
     'SEED_PLAN_PLAN_NAME_REQUIRED': (0, define_1.defineError)({ code: 'SEED_PLAN_PLAN_NAME_REQUIRED', class: 'internal', http: 500, message: 'Seed plan plan name required.' }),
     'SESSION_NOT_FOUND': (0, define_1.defineError)({ code: 'SESSION_NOT_FOUND', class: 'public', http: 404, message: 'Session not found.' }),
     'SETTINGS_SURFACE_NOT_PROVISIONED': (0, define_1.defineError)({ code: 'SETTINGS_SURFACE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Settings surface not provisioned.' }),
-    'SIGN_UP_DISABLED': (0, define_1.defineError)({ code: 'SIGN_UP_DISABLED', class: 'public', http: 403, message: 'New registrations are currently disabled.' }),
+    'SIGN_UP_DISABLED': (0, define_1.defineError)({ code: 'SIGN_UP_DISABLED', class: 'public', http: 403, message: 'Sign up disabled.' }),
     'SITE_NOT_PROVISIONED': (0, define_1.defineError)({ code: 'SITE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Site not provisioned.' }),
     'SITE_SURFACE_NOT_PROVISIONED': (0, define_1.defineError)({ code: 'SITE_SURFACE_NOT_PROVISIONED', class: 'public', http: 400, message: 'Site surface not provisioned.' }),
     'SMS_SIGN_IN_DISABLED': (0, define_1.defineError)({ code: 'SMS_SIGN_IN_DISABLED', class: 'public', http: 403, message: 'Sms sign in disabled.' }),
@@ -503,12 +515,15 @@ exports.generatedRegistry = {
     'SOURCE_EMAILS_NOT_FOUND': (0, define_1.defineError)({ code: 'SOURCE_EMAILS_NOT_FOUND', class: 'internal', http: 500, message: 'Source emails not found.' }),
     'SOURCE_SECRETS_NOT_FOUND': (0, define_1.defineError)({ code: 'SOURCE_SECRETS_NOT_FOUND', class: 'internal', http: 500, message: 'Source secrets not found.' }),
     'SOURCE_USERS_NOT_FOUND': (0, define_1.defineError)({ code: 'SOURCE_USERS_NOT_FOUND', class: 'internal', http: 500, message: 'Source users not found.' }),
+    'STATIC_SITES_LIMIT': (0, define_1.defineError)({ code: 'STATIC_SITES_LIMIT', class: 'public', http: 429, message: 'Static sites limit.' }),
     'STEP_UP_INVALID_TYPE': (0, define_1.defineError)({ code: 'STEP_UP_INVALID_TYPE', class: 'public', http: 403, message: 'This action requires verification that is not configured correctly. Please contact support.' }),
-    'STEP_UP_REQUIRED': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
+    'STEP_UP_REQUIRED': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED', class: 'public', http: 403, message: 'Step up required.' }),
     'STEP_UP_REQUIRED_FRESH_AUTH': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED_FRESH_AUTH', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
     'STEP_UP_REQUIRED_MFA': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED_MFA', class: 'public', http: 403, message: 'Please enter a code from your authenticator app to continue.' }),
     'STEP_UP_REQUIRED_PASSWORD': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED_PASSWORD', class: 'public', http: 403, message: 'Please re-enter your password to continue.' }),
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA': (0, define_1.defineError)({ code: 'STEP_UP_REQUIRED_PASSWORD_OR_MFA', class: 'public', http: 403, message: 'Please verify your identity to continue.' }),
+    'SUBDOMAIN_APEX_NOT_PUBLISHED': (0, define_1.defineError)({ code: 'SUBDOMAIN_APEX_NOT_PUBLISHED', class: 'public', http: 400, message: 'Subdomain apex not published.' }),
+    'SUBDOMAIN_LABEL_EXHAUSTED': (0, define_1.defineError)({ code: 'SUBDOMAIN_LABEL_EXHAUSTED', class: 'public', http: 400, message: 'Subdomain label exhausted.' }),
+    'SUBDOMAIN_LABEL_INVALID': (0, define_1.defineError)({ code: 'SUBDOMAIN_LABEL_INVALID', class: 'public', http: 400, message: 'Subdomain label invalid.' }),
     'SUPER_CONSTRUCTIVE_REQUIRED': (0, define_1.defineError)({ code: 'SUPER_CONSTRUCTIVE_REQUIRED', class: 'public', http: 400, message: 'Super constructive required.' }),
     'TABLE_MODULE': (0, define_1.defineError)({ code: 'TABLE_MODULE', class: 'internal', http: 500, message: 'Table module.' }),
     'TABLE_MODULE_TABLE_NOT_FOUND': (0, define_1.defineError)({ code: 'TABLE_MODULE_TABLE_NOT_FOUND', class: 'internal', http: 500, message: 'Table module table not found.' }),
@@ -564,6 +579,8 @@ exports.GENERATED_CODE_META = {
     'APPLY_RLS': { class: 'internal', dynamic: false, generatedOnly: false },
     'APPLY_RLS_BAD_ARGS': { class: 'internal', dynamic: false, generatedOnly: false },
     'APPLY_TABLE_STEP_UP_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
+    'APP_INSTALLATION_MISSING': { class: 'public', dynamic: false, generatedOnly: false },
+    'APP_INSTALL_NO_SERVICE': { class: 'public', dynamic: false, generatedOnly: false },
     'ASSIGN_PROFILES_PERMISSION_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'AUTHZ_COLUMN_SECURITY_AUTHZ_NODE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'AUTHZ_COLUMN_SECURITY_COLUMNS_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -599,6 +616,7 @@ exports.GENERATED_CODE_META = {
     'BAD_PRIVILEGE_FOR_POLICY': { class: 'public', dynamic: false, generatedOnly: false },
     'BAD_RLS_EXPRESSION': { class: 'public', dynamic: false, generatedOnly: false },
     'BAD_VIEW_EXPRESSION': { class: 'public', dynamic: false, generatedOnly: false },
+    'BEHAVIOR_FRAGMENT_EMPTY': { class: 'internal', dynamic: false, generatedOnly: false },
     'BM25': { class: 'public', dynamic: false, generatedOnly: false },
     'BOOTSTRAP_DATABASE_MISSING': { class: 'internal', dynamic: false, generatedOnly: false },
     'BOOTSTRAP_SOURCE_MISSING': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -635,6 +653,7 @@ exports.GENERATED_CODE_META = {
     'CROSS_DATABASE_CHECK': { class: 'public', dynamic: false, generatedOnly: false },
     'CROSS_DATABASE_REF': { class: 'public', dynamic: false, generatedOnly: false },
     'CSRF_TOKEN_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATABASE_CLAIM_REQUIRED': { class: 'internal', dynamic: false, generatedOnly: true },
     'DATABASE_FIELD_RESERVED_WORD': { class: 'public', dynamic: false, generatedOnly: false },
     'DATABASE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATABASE_SETTINGS_TABLES_SCOPE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -666,6 +685,10 @@ exports.GENERATED_CODE_META = {
     'DATA_GENERATED_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_GENERATED_TARGET_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_GENERATED_UNKNOWN_KIND': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_NO_COPY_FIELDS': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_ON_HISTORY_TABLE': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_REQUIRES_PK': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_HISTORY_TABLE_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_FIELDS_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_I18N_MODULE_NOT_PROVISIONED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -691,6 +714,7 @@ exports.GENERATED_CODE_META = {
     'DATA_JOB_TRIGGER_CONDITIONS_WATCH_FIELDS_CONFLICT': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_CONDITION_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_CONDITION_FIELD_WATCH_FIELDS_CONFLICT': { class: 'public', dynamic: false, generatedOnly: false },
+    'DATA_JOB_TRIGGER_DATABASE_ID_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'DATA_JOB_TRIGGER_ENTITY_LOOKUP_OBJ_FIELD_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
@@ -775,10 +799,11 @@ exports.GENERATED_CODE_META = {
     'EVENT_TRACKER_UNKNOWN_EVENT': { class: 'public', dynamic: false, generatedOnly: false },
     'EVENT_TRACKER_WATCH_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'EXECUTION_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
-    'EXPIRED_TOKEN': { class: 'public', dynamic: false, generatedOnly: false },
+    'EXPIRED_TOKEN': { class: 'internal', dynamic: false, generatedOnly: false },
     'EXTERNAL_MEMBERS_NOT_ALLOWED': { class: 'public', dynamic: false, generatedOnly: false },
     'FEATURE_DISABLED': { class: 'public', dynamic: true, generatedOnly: false },
     'FIELDS_MISMATCH': { class: 'public', dynamic: false, generatedOnly: false },
+    'FOREIGN_KEY_CONSTRAINT_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_GRAPH_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_SCHEDULES': { class: 'internal', dynamic: false, generatedOnly: false },
     'FUNCTION_SCHEDULES_INTERVAL': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -817,6 +842,7 @@ exports.GENERATED_CODE_META = {
     'HIERARCHY_DEPTH_EXCEEDED': { class: 'internal', dynamic: false, generatedOnly: false },
     'HIERARCHY_INACTIVE_MEMBER': { class: 'internal', dynamic: true, generatedOnly: false },
     'HIERARCHY_MEMBER_IN_USE': { class: 'internal', dynamic: true, generatedOnly: false },
+    'HISTORY': { class: 'internal', dynamic: true, generatedOnly: false },
     'HOSTNAME_BINDING_SYNC': { class: 'internal', dynamic: true, generatedOnly: false },
     'HTTP_ROUTE_TARGET_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'HTTP_ROUTE_TARGET_OUTSIDE_SCOPE': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -938,6 +964,7 @@ exports.GENERATED_CODE_META = {
     'ORG_API_KEY_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'OWNER_FIELD_NOT_FOUND': { class: 'public', dynamic: false, generatedOnly: false },
     'OWNER_FIELD_NOT_IN_OWNER_TABLE': { class: 'public', dynamic: false, generatedOnly: false },
+    'PAGES_MODULE': { class: 'internal', dynamic: false, generatedOnly: false },
     'PARENT_ENTITY_TYPE_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'PARENT_EXECUTION_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'PASSWORD_INSECURE': { class: 'public', dynamic: false, generatedOnly: false },
@@ -1037,12 +1064,15 @@ exports.GENERATED_CODE_META = {
     'SOURCE_EMAILS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'SOURCE_SECRETS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
     'SOURCE_USERS_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
+    'STATIC_SITES_LIMIT': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_INVALID_TYPE': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_FRESH_AUTH': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_MFA': { class: 'public', dynamic: false, generatedOnly: false },
     'STEP_UP_REQUIRED_PASSWORD': { class: 'public', dynamic: false, generatedOnly: false },
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA': { class: 'public', dynamic: false, generatedOnly: true },
+    'SUBDOMAIN_APEX_NOT_PUBLISHED': { class: 'public', dynamic: false, generatedOnly: false },
+    'SUBDOMAIN_LABEL_EXHAUSTED': { class: 'public', dynamic: false, generatedOnly: false },
+    'SUBDOMAIN_LABEL_INVALID': { class: 'public', dynamic: false, generatedOnly: false },
     'SUPER_CONSTRUCTIVE_REQUIRED': { class: 'public', dynamic: false, generatedOnly: false },
     'TABLE_MODULE': { class: 'internal', dynamic: false, generatedOnly: false },
     'TABLE_MODULE_TABLE_NOT_FOUND': { class: 'internal', dynamic: false, generatedOnly: false },
@@ -1085,4 +1115,4 @@ exports.GENERATED_CODE_META = {
     'WITH_CHECK_NOT_ALLOWED': { class: 'public', dynamic: false, generatedOnly: false },
 };
 /** Total number of codes collected from constructive-db. */
-exports.GENERATED_CODE_COUNT = 531;
+exports.GENERATED_CODE_COUNT = 546;

package/http.d.ts

@@ -0,0 +1,30 @@
+/** Status used when a code carries no mapping. */
+export declare const UNMAPPED_HTTP_STATUS = 500;
+export interface HttpStatusResolution {
+    /** The status a transport should send. */
+    status: number;
+    /**
+     * Whether `status` came from the registry. `false` means the code is not
+     * registered and `status` is the {@link UNMAPPED_HTTP_STATUS} fallback — the
+     * one case where a 500 does not mean "the server broke".
+     */
+    mapped: boolean;
+}
+/** Notified once per unmapped code. */
+export type UnmappedStatusReporter = (code: string) => void;
+/**
+ * Replace the unmapped-code reporter (pass `null` to restore the default, or a
+ * no-op to silence it). Transports with a real logger should route it there.
+ */
+export declare function setUnmappedStatusReporter(next: UnmappedStatusReporter | null): void;
+/** Test seam: forget which codes have already been reported. */
+export declare function resetUnmappedStatusReports(): void;
+/**
+ * Resolve the HTTP status for an error code.
+ *
+ * An unregistered code is reported (once per code) rather than silently
+ * degrading to 500: a refusal that is plainly a 403 or 409 turning into a 500
+ * looks like a crash, and the only way anyone notices is by reading the
+ * transport's source.
+ */
+export declare function httpStatusFor(code: string | null | undefined): HttpStatusResolution;

package/http.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UNMAPPED_HTTP_STATUS = void 0;
+exports.setUnmappedStatusReporter = setUnmappedStatusReporter;
+exports.resetUnmappedStatusReports = resetUnmappedStatusReports;
+exports.httpStatusFor = httpStatusFor;
+const registry_1 = require("./registry");
+/** Status used when a code carries no mapping. */
+exports.UNMAPPED_HTTP_STATUS = 500;
+const reported = new Set();
+const defaultReporter = code => {
+    // eslint-disable-next-line no-console
+    console.warn(`[constructive-errors] no HTTP status mapping for ${code}; responding ${exports.UNMAPPED_HTTP_STATUS}. ` +
+        'Register the code so intentional refusals stop surfacing as server errors.');
+};
+let reporter = defaultReporter;
+/**
+ * Replace the unmapped-code reporter (pass `null` to restore the default, or a
+ * no-op to silence it). Transports with a real logger should route it there.
+ */
+function setUnmappedStatusReporter(next) {
+    reporter = next ?? defaultReporter;
+}
+/** Test seam: forget which codes have already been reported. */
+function resetUnmappedStatusReports() {
+    reported.clear();
+}
+/**
+ * Resolve the HTTP status for an error code.
+ *
+ * An unregistered code is reported (once per code) rather than silently
+ * degrading to 500: a refusal that is plainly a 403 or 409 turning into a 500
+ * looks like a crash, and the only way anyone notices is by reading the
+ * transport's source.
+ */
+function httpStatusFor(code) {
+    const def = code ? (0, registry_1.getDefinition)(code) : undefined;
+    if (def)
+        return { status: def.http, mapped: true };
+    if (code && !reported.has(code)) {
+        reported.add(code);
+        reporter(code);
+    }
+    return { status: exports.UNMAPPED_HTTP_STATUS, mapped: false };
+}

package/index.d.ts

@@ -2,6 +2,7 @@ export * from './classify';
 export * from './error';
 export * from './factory';
 export * from './format';
+export * from './http';
 export * from './interpolate';
 export * from './parse';
 export * from './pg';

package/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./classify"), exports);
 __exportStar(require("./error"), exports);
 __exportStar(require("./factory"), exports);
 __exportStar(require("./format"), exports);
+__exportStar(require("./http"), exports);
 __exportStar(require("./interpolate"), exports);
 __exportStar(require("./parse"), exports);
 __exportStar(require("./pg"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/errors",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "author": "Constructive <developers@constructive.io>",
   "description": "Canonical Constructive error system: registry, codes, i18n messages, and cross-source (PostgreSQL/GraphQL/client) parsing. Zero runtime dependencies.",
   "main": "index.js",
@@ -41,5 +41,5 @@
     "makage": "^0.3.0",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "d508453a32a2f1d70ff6916871046615226e6f33"
+  "gitHead": "43121004a8bedd2c5fcf7bf33208079d55bad01f"
 }

package/parse.d.ts

@@ -25,6 +25,8 @@ export declare function parse(error: unknown): ParsedError;
  * Delegates to {@link parse} for code/context/class recovery, then resolves a
  * localized message from the registry catalogs (falling back to the source
  * error's raw message when the code is unknown) and the registry's HTTP hint.
- * Codes that could not be resolved become `UNKNOWN_ERROR` (internal).
+ * Codes that could not be resolved become `UNKNOWN_ERROR` (internal); a code
+ * with no registered status is reported by {@link httpStatusFor} rather than
+ * quietly becoming a 500.
  */
 export declare function toError(error: unknown, locale?: string): ConstructiveError;

package/parse.js

@@ -5,6 +5,7 @@ exports.toError = toError;
 const classify_1 = require("./classify");
 const error_1 = require("./error");
 const format_1 = require("./format");
+const http_1 = require("./http");
 const pg_1 = require("./pg");
 const registry_1 = require("./registry");
 /** Leading ALL_CAPS token, optionally followed by `(arg, arg)` positional args. */
@@ -182,7 +183,9 @@ function parse(error) {
  * Delegates to {@link parse} for code/context/class recovery, then resolves a
  * localized message from the registry catalogs (falling back to the source
  * error's raw message when the code is unknown) and the registry's HTTP hint.
- * Codes that could not be resolved become `UNKNOWN_ERROR` (internal).
+ * Codes that could not be resolved become `UNKNOWN_ERROR` (internal); a code
+ * with no registered status is reported by {@link httpStatusFor} rather than
+ * quietly becoming a 500.
  */
 function toError(error, locale) {
     if (error instanceof error_1.ConstructiveError)
@@ -197,7 +200,7 @@ function toError(error, locale) {
         code,
         message,
         errorClass: parsed.class,
-        http: def?.http ?? 500,
+        http: def ? def.http : (0, http_1.httpStatusFor)(code).status,
         context: parsed.context
     });
 }