@dashai/sdk 0.9.0 → 2.0.0

package/dist/{types-DXsbCVkb.d.cts → types-CkAfiS4k.d.cts}

@@ -190,37 +190,43 @@ type FetchImpl = typeof globalThis.fetch;
  */
 interface ClientConfig {
     /**
-     * Base URL of the DashWise API. No trailing slash; the client will
-     * append `/api/...` paths. Example: `https://api.dashwise.io`.
+     * Base URL of the DashWise API. No trailing slash; the client
+     * appends `/api/module-api/...` paths. Example: `https://api.dashwise.io`.
+     *
+     * Phase 2 wire protocol (contract W2): the generated production/local
+     * module bootstrap constructs the client as
+     * `createClient({ apiUrl: process.env.DASHWISE_API_URL, apiKey: ... })`.
+     * `apiUrl` is the canonical field; when set it takes precedence over
+     * `baseUrl`. Exactly one of `apiUrl` / `baseUrl` MUST be provided —
+     * the transport throws at construction otherwise.
+     */
+    apiUrl?: string;
+    /**
+     * Legacy alias for {@link ClientConfig.apiUrl}. The frozen sandbox
+     * generation (E2B builder template) still emits `createClient({ baseUrl, ... })`
+     * byte-for-byte, so this alias stays supported indefinitely. New code
+     * should prefer `apiUrl`. When both are set, `apiUrl` wins.
      */
-    baseUrl: string;
+    baseUrl?: string;
     /**
      * Token resolver. Called once per request, before the HTTP call.
      * Resolved tokens are attached as `Authorization: Bearer <token>`.
      */
     getToken?: TokenResolver;
     /**
-     * Custom Modules Platform v1 — a static `dwk_` API key used as the
-     * Bearer credential. Convenience over `getToken: () => apiKey` for the
-     * common "deployed module with one long-lived key" case (set it from
-     * `process.env.DASHWISE_API_KEY`). Precedence: a non-null `getToken()`
-     * result wins; otherwise `apiKey` is used. NEVER expose this to the
-     * browser — keep it server-only (route client data through server
-     * actions / route handlers).
-     */
-    apiKey?: string;
-    /**
-     * Installation ID this client is scoped to. Required for module
-     * runtime calls. Typical values:
-     *   - a numeric `module_installations.id` for production modules
-     *   - `'sandbox'` for AI builder draft loops (no installation row yet)
-     *   - `'local'` for `dashwise module dev` against a dev token
+     * A static `dwk_` API key used as the Bearer credential. Convenience
+     * over `getToken: () => apiKey` for the common "deployed module with
+     * one long-lived key" case (set it from `process.env.DASHWISE_API_KEY`).
+     * Precedence: a non-null `getToken()` result wins; otherwise `apiKey`
+     * is used. NEVER expose this to the browser — keep it server-only
+     * (route client data through server actions / route handlers).
      *
-     * Accepts any string-shaped id (or number) so consumers can pass
-     * `process.env.DASHWISE_INSTALLATION_ID` directly without coercion.
-     * The value is interpolated into the URL path as-is.
+     * Phase 2 wire protocol: the install this client operates on is
+     * resolved server-side from this credential (the key's bound install),
+     * NOT from any URL segment — there is no `installationId` config
+     * anymore. All requests hit the install-agnostic `/api/module-api`.
      */
-    installationId: number | string;
+    apiKey?: string;
     /**
      * Optional `fetch` override. Defaults to `globalThis.fetch`. Set this
      * for tests or runtimes that need a custom HTTP agent.
@@ -258,7 +264,7 @@ interface ClientConfig {
      *
      * @example
      *   const client = createClient({
-     *     baseUrl, installationId,
+     *     baseUrl, apiKey,
      *     slowQueryThresholdMs: 500,
      *     onSlowQuery: (info) => {
      *       sentry.captureMessage('Slow query', { extra: info });
@@ -282,7 +288,7 @@ interface ClientConfig {
  * Carries enough context for an observability sink to log a useful
  * message + correlate with the backend's `module_query_log` row via
  * `requestId`. `path` is the SDK-shaped path (relative to the
- * installation-scoped base URL — e.g. `/query` or `/db/tasks/list`);
+ * `/api/module-api` base URL — e.g. `/query` or `/db/tasks/list`);
  * combine with the URL the client is configured against if you want
  * the full URL.
  *
@@ -322,7 +328,7 @@ interface Client {
      * `providerSlug` must be the **module slug** (kebab-case, matches
      * the manifest's `MODULE_SLUG_REGEX`) of a module listed in the
      * caller's `module.json#dependencies[]`. Calls hit
-     * `POST /api/modules/:installation/deps/:providerSlug/db/:tableSlug/list`
+     * `POST /api/module-api/deps/:providerSlug/db/:tableSlug/list`
      * and friends; backend enforces field projection + operation gating
      * against the declared contract.
      *
@@ -342,10 +348,10 @@ interface Client {
      * don't match the `db.<table>` CRUD shape — most notably any future
      * custom RPC endpoints a module exposes.
      *
-     * The path is appended to the configured installation-scoped base
-     * URL (`<baseUrl>/api/modules/<installationId>`). Token attachment,
-     * timeout, error mapping, and 204 handling all behave identically to
-     * the typed CRUD methods.
+     * The path is appended to the configured module-API base URL
+     * (`<baseUrl>/api/module-api`). Token attachment, timeout, error
+     * mapping, and 204 handling all behave identically to the typed
+     * CRUD methods.
      *
      * For cross-module reads, prefer `client.deps(providerSlug).db(...)`
      * — it carries typed errors + the no-write enforcement.
@@ -388,7 +394,7 @@ interface Client {
      * };
      * ```
      *
-     * Sends `POST :installationId/deps/:providerSlug/actions/:actionName`,
+     * Sends `POST /api/module-api/deps/:providerSlug/actions/:actionName`,
      * unwraps the envelope on success (returns `result`), throws
      * `DepActionError` on dispatch-layer failure or on action-body
      * failure (envelope `ok: false`). Drift between codegen + runtime
@@ -407,7 +413,7 @@ interface Client {
      * datahub grants. Requires the client to be authenticated with a
      * scoped `dwk_` API key that holds matching grants. Hits the
      * runtime Data Hub bridge:
-     *   GET/POST/PATCH/DELETE :installationId/datahub/tables/:tableId/rows…
+     *   GET/POST/PATCH/DELETE /api/module-api/datahub/tables/:tableId/rows…
      *
      * Untyped in v1 (rows are `Record<string, unknown>` — they follow the
      * Data Hub table's own field schema, not the module manifest).
@@ -416,21 +422,83 @@ interface Client {
 }
 /** Custom Modules Platform v1 (P1b) — Data Hub access surface. */
 interface DatahubClient {
-    /** Bind a Data Hub table by its numeric id. */
-    table(tableId: number): DatahubTableClient;
+    /**
+     * Bind a Data Hub table by its numeric id. Pass a hand-written row
+     * interface as the type argument for typed `filter` / `sort` keys on
+     * `list()`; defaults to an untyped `Record` (Data Hub rows have no
+     * compile-time schema).
+     */
+    table<Row = Record<string, unknown>>(tableId: number): DatahubTableClient<Row>;
 }
 /** Result envelope of a Data Hub list (mirrors the backend RowQueryService). */
 interface DatahubListResult {
     results: Array<Record<string, unknown>>;
     count: number;
+    /**
+     * 1-based index of the next page, or `null` when on the last page.
+     * Mirrors the backend envelope (`RowQueryService.list` →
+     * `offset + size < count ? page + 1 : null`).
+     */
+    next: number | null;
+    /**
+     * 1-based index of the previous page, or `null` when on the first page.
+     * Mirrors the backend envelope (`page > 1 ? page - 1 : null`).
+     */
+    previous: number | null;
+}
+/**
+ * Typed options for {@link DatahubTableClient.list}. A higher-level
+ * mirror of {@link ListOpts} that the runtime compiles to the Data Hub
+ * bridge's flat query protocol (`filter__<field>__<op>` /
+ * `filters=<json>` / `order_by` / `search` / `size` / `page`).
+ *
+ * Unlike module tables, Data Hub rows have no compile-time row type, so
+ * `Row` defaults to a bare `Record` — pass a hand-written interface as
+ * the type argument for editor help on `filter` / `sort` keys.
+ *
+ * The raw `Record<string, string>` passthrough on `list()` stays
+ * supported for back-compat; reach for it when you need a flat param
+ * the typed shape doesn't model yet.
+ */
+interface DatahubListOpts<Row = Record<string, unknown>> {
+    /**
+     * Recursive filter clause, same shape as {@link ListOpts.filter}. Top
+     * level keys are AND'd; bare primitives are shorthand for
+     * `{ equal: ... }`. Simple (non-grouped) filters compile to repeated
+     * `filter__<field>__<op>=<value>` params; any clause using `AND` / `OR`
+     * grouping compiles to a single `filters=<json>` tree param (the
+     * backend's Phase 9b syntax).
+     */
+    filter?: Where<Row>;
+    /**
+     * Sort order, same shape as {@link ListOpts.sort}. Compiles to the
+     * Data Hub `order_by` param (`-` prefix for descending), joined with
+     * commas for multi-field sorts.
+     */
+    sort?: SortClause<Row>[];
+    /** Full-text / substring search across searchable fields → `search`. */
+    search?: string;
+    /** Page size → `size`. */
+    limit?: number;
+    /** 1-based page index → `page`. */
+    page?: number;
 }
 /** Row CRUD against a single Data Hub table, gated by the key's grants. */
-interface DatahubTableClient {
+interface DatahubTableClient<Row = Record<string, unknown>> {
     /**
-     * List rows. `query` is the Baserow flat shape (e.g.
-     * `{ size: '50', order_by: '-created_on' }`); values are strings.
+     * List rows. Accepts either:
+     *   - a typed {@link DatahubListOpts} object (`{ filter, sort, search,
+     *     limit, page }`), which the client compiles to the Data Hub
+     *     bridge's flat query protocol; or
+     *   - the raw Baserow flat shape (`Record<string, string>`, e.g.
+     *     `{ size: '50', order_by: '-created_on' }`) for back-compat and
+     *     for params the typed shape doesn't model yet.
+     *
+     * The two are distinguished structurally: an options object carrying
+     * any of the known `DatahubListOpts` keys is compiled; anything else
+     * is passed through verbatim as raw query params.
      */
-    list(query?: Record<string, string>): Promise<DatahubListResult>;
+    list(opts?: DatahubListOpts<Row> | Record<string, string>): Promise<DatahubListResult>;
     get(rowId: number): Promise<Record<string, unknown>>;
     create(body: Record<string, unknown>): Promise<Record<string, unknown>>;
     update(rowId: number, body: Record<string, unknown>): Promise<Record<string, unknown>>;
@@ -439,4 +507,4 @@ interface DatahubTableClient {
     }>;
 }
 
-export type { BaseInsert as B, ClientConfig as C, Deps as D, FetchImpl as F, ListOpts as L, Page as P, ReadOnlyTableClient as R, SlowQueryInfo as S, TokenResolver as T, Where as W, Client as a, BaseRow as b, BaseUpdate as c, DatahubClient as d, DatahubListResult as e, DatahubTableClient as f, FileRef as g, FilterOps as h, FilterValue as i, SortClause as j, SortDir as k, TableClient as l };
+export type { BaseInsert as B, ClientConfig as C, Deps as D, FetchImpl as F, ListOpts as L, Page as P, ReadOnlyTableClient as R, SlowQueryInfo as S, TokenResolver as T, Where as W, Client as a, BaseRow as b, BaseUpdate as c, DatahubClient as d, DatahubListOpts as e, DatahubListResult as f, DatahubTableClient as g, FileRef as h, FilterOps as i, FilterValue as j, SortClause as k, SortDir as l, TableClient as m };

package/dist/{types-DXsbCVkb.d.ts → types-CkAfiS4k.d.ts}

@@ -190,37 +190,43 @@ type FetchImpl = typeof globalThis.fetch;
  */
 interface ClientConfig {
     /**
-     * Base URL of the DashWise API. No trailing slash; the client will
-     * append `/api/...` paths. Example: `https://api.dashwise.io`.
+     * Base URL of the DashWise API. No trailing slash; the client
+     * appends `/api/module-api/...` paths. Example: `https://api.dashwise.io`.
+     *
+     * Phase 2 wire protocol (contract W2): the generated production/local
+     * module bootstrap constructs the client as
+     * `createClient({ apiUrl: process.env.DASHWISE_API_URL, apiKey: ... })`.
+     * `apiUrl` is the canonical field; when set it takes precedence over
+     * `baseUrl`. Exactly one of `apiUrl` / `baseUrl` MUST be provided —
+     * the transport throws at construction otherwise.
+     */
+    apiUrl?: string;
+    /**
+     * Legacy alias for {@link ClientConfig.apiUrl}. The frozen sandbox
+     * generation (E2B builder template) still emits `createClient({ baseUrl, ... })`
+     * byte-for-byte, so this alias stays supported indefinitely. New code
+     * should prefer `apiUrl`. When both are set, `apiUrl` wins.
      */
-    baseUrl: string;
+    baseUrl?: string;
     /**
      * Token resolver. Called once per request, before the HTTP call.
      * Resolved tokens are attached as `Authorization: Bearer <token>`.
      */
     getToken?: TokenResolver;
     /**
-     * Custom Modules Platform v1 — a static `dwk_` API key used as the
-     * Bearer credential. Convenience over `getToken: () => apiKey` for the
-     * common "deployed module with one long-lived key" case (set it from
-     * `process.env.DASHWISE_API_KEY`). Precedence: a non-null `getToken()`
-     * result wins; otherwise `apiKey` is used. NEVER expose this to the
-     * browser — keep it server-only (route client data through server
-     * actions / route handlers).
-     */
-    apiKey?: string;
-    /**
-     * Installation ID this client is scoped to. Required for module
-     * runtime calls. Typical values:
-     *   - a numeric `module_installations.id` for production modules
-     *   - `'sandbox'` for AI builder draft loops (no installation row yet)
-     *   - `'local'` for `dashwise module dev` against a dev token
+     * A static `dwk_` API key used as the Bearer credential. Convenience
+     * over `getToken: () => apiKey` for the common "deployed module with
+     * one long-lived key" case (set it from `process.env.DASHWISE_API_KEY`).
+     * Precedence: a non-null `getToken()` result wins; otherwise `apiKey`
+     * is used. NEVER expose this to the browser — keep it server-only
+     * (route client data through server actions / route handlers).
      *
-     * Accepts any string-shaped id (or number) so consumers can pass
-     * `process.env.DASHWISE_INSTALLATION_ID` directly without coercion.
-     * The value is interpolated into the URL path as-is.
+     * Phase 2 wire protocol: the install this client operates on is
+     * resolved server-side from this credential (the key's bound install),
+     * NOT from any URL segment — there is no `installationId` config
+     * anymore. All requests hit the install-agnostic `/api/module-api`.
      */
-    installationId: number | string;
+    apiKey?: string;
     /**
      * Optional `fetch` override. Defaults to `globalThis.fetch`. Set this
      * for tests or runtimes that need a custom HTTP agent.
@@ -258,7 +264,7 @@ interface ClientConfig {
      *
      * @example
      *   const client = createClient({
-     *     baseUrl, installationId,
+     *     baseUrl, apiKey,
      *     slowQueryThresholdMs: 500,
      *     onSlowQuery: (info) => {
      *       sentry.captureMessage('Slow query', { extra: info });
@@ -282,7 +288,7 @@ interface ClientConfig {
  * Carries enough context for an observability sink to log a useful
  * message + correlate with the backend's `module_query_log` row via
  * `requestId`. `path` is the SDK-shaped path (relative to the
- * installation-scoped base URL — e.g. `/query` or `/db/tasks/list`);
+ * `/api/module-api` base URL — e.g. `/query` or `/db/tasks/list`);
  * combine with the URL the client is configured against if you want
  * the full URL.
  *
@@ -322,7 +328,7 @@ interface Client {
      * `providerSlug` must be the **module slug** (kebab-case, matches
      * the manifest's `MODULE_SLUG_REGEX`) of a module listed in the
      * caller's `module.json#dependencies[]`. Calls hit
-     * `POST /api/modules/:installation/deps/:providerSlug/db/:tableSlug/list`
+     * `POST /api/module-api/deps/:providerSlug/db/:tableSlug/list`
      * and friends; backend enforces field projection + operation gating
      * against the declared contract.
      *
@@ -342,10 +348,10 @@ interface Client {
      * don't match the `db.<table>` CRUD shape — most notably any future
      * custom RPC endpoints a module exposes.
      *
-     * The path is appended to the configured installation-scoped base
-     * URL (`<baseUrl>/api/modules/<installationId>`). Token attachment,
-     * timeout, error mapping, and 204 handling all behave identically to
-     * the typed CRUD methods.
+     * The path is appended to the configured module-API base URL
+     * (`<baseUrl>/api/module-api`). Token attachment, timeout, error
+     * mapping, and 204 handling all behave identically to the typed
+     * CRUD methods.
      *
      * For cross-module reads, prefer `client.deps(providerSlug).db(...)`
      * — it carries typed errors + the no-write enforcement.
@@ -388,7 +394,7 @@ interface Client {
      * };
      * ```
      *
-     * Sends `POST :installationId/deps/:providerSlug/actions/:actionName`,
+     * Sends `POST /api/module-api/deps/:providerSlug/actions/:actionName`,
      * unwraps the envelope on success (returns `result`), throws
      * `DepActionError` on dispatch-layer failure or on action-body
      * failure (envelope `ok: false`). Drift between codegen + runtime
@@ -407,7 +413,7 @@ interface Client {
      * datahub grants. Requires the client to be authenticated with a
      * scoped `dwk_` API key that holds matching grants. Hits the
      * runtime Data Hub bridge:
-     *   GET/POST/PATCH/DELETE :installationId/datahub/tables/:tableId/rows…
+     *   GET/POST/PATCH/DELETE /api/module-api/datahub/tables/:tableId/rows…
      *
      * Untyped in v1 (rows are `Record<string, unknown>` — they follow the
      * Data Hub table's own field schema, not the module manifest).
@@ -416,21 +422,83 @@ interface Client {
 }
 /** Custom Modules Platform v1 (P1b) — Data Hub access surface. */
 interface DatahubClient {
-    /** Bind a Data Hub table by its numeric id. */
-    table(tableId: number): DatahubTableClient;
+    /**
+     * Bind a Data Hub table by its numeric id. Pass a hand-written row
+     * interface as the type argument for typed `filter` / `sort` keys on
+     * `list()`; defaults to an untyped `Record` (Data Hub rows have no
+     * compile-time schema).
+     */
+    table<Row = Record<string, unknown>>(tableId: number): DatahubTableClient<Row>;
 }
 /** Result envelope of a Data Hub list (mirrors the backend RowQueryService). */
 interface DatahubListResult {
     results: Array<Record<string, unknown>>;
     count: number;
+    /**
+     * 1-based index of the next page, or `null` when on the last page.
+     * Mirrors the backend envelope (`RowQueryService.list` →
+     * `offset + size < count ? page + 1 : null`).
+     */
+    next: number | null;
+    /**
+     * 1-based index of the previous page, or `null` when on the first page.
+     * Mirrors the backend envelope (`page > 1 ? page - 1 : null`).
+     */
+    previous: number | null;
+}
+/**
+ * Typed options for {@link DatahubTableClient.list}. A higher-level
+ * mirror of {@link ListOpts} that the runtime compiles to the Data Hub
+ * bridge's flat query protocol (`filter__<field>__<op>` /
+ * `filters=<json>` / `order_by` / `search` / `size` / `page`).
+ *
+ * Unlike module tables, Data Hub rows have no compile-time row type, so
+ * `Row` defaults to a bare `Record` — pass a hand-written interface as
+ * the type argument for editor help on `filter` / `sort` keys.
+ *
+ * The raw `Record<string, string>` passthrough on `list()` stays
+ * supported for back-compat; reach for it when you need a flat param
+ * the typed shape doesn't model yet.
+ */
+interface DatahubListOpts<Row = Record<string, unknown>> {
+    /**
+     * Recursive filter clause, same shape as {@link ListOpts.filter}. Top
+     * level keys are AND'd; bare primitives are shorthand for
+     * `{ equal: ... }`. Simple (non-grouped) filters compile to repeated
+     * `filter__<field>__<op>=<value>` params; any clause using `AND` / `OR`
+     * grouping compiles to a single `filters=<json>` tree param (the
+     * backend's Phase 9b syntax).
+     */
+    filter?: Where<Row>;
+    /**
+     * Sort order, same shape as {@link ListOpts.sort}. Compiles to the
+     * Data Hub `order_by` param (`-` prefix for descending), joined with
+     * commas for multi-field sorts.
+     */
+    sort?: SortClause<Row>[];
+    /** Full-text / substring search across searchable fields → `search`. */
+    search?: string;
+    /** Page size → `size`. */
+    limit?: number;
+    /** 1-based page index → `page`. */
+    page?: number;
 }
 /** Row CRUD against a single Data Hub table, gated by the key's grants. */
-interface DatahubTableClient {
+interface DatahubTableClient<Row = Record<string, unknown>> {
     /**
-     * List rows. `query` is the Baserow flat shape (e.g.
-     * `{ size: '50', order_by: '-created_on' }`); values are strings.
+     * List rows. Accepts either:
+     *   - a typed {@link DatahubListOpts} object (`{ filter, sort, search,
+     *     limit, page }`), which the client compiles to the Data Hub
+     *     bridge's flat query protocol; or
+     *   - the raw Baserow flat shape (`Record<string, string>`, e.g.
+     *     `{ size: '50', order_by: '-created_on' }`) for back-compat and
+     *     for params the typed shape doesn't model yet.
+     *
+     * The two are distinguished structurally: an options object carrying
+     * any of the known `DatahubListOpts` keys is compiled; anything else
+     * is passed through verbatim as raw query params.
      */
-    list(query?: Record<string, string>): Promise<DatahubListResult>;
+    list(opts?: DatahubListOpts<Row> | Record<string, string>): Promise<DatahubListResult>;
     get(rowId: number): Promise<Record<string, unknown>>;
     create(body: Record<string, unknown>): Promise<Record<string, unknown>>;
     update(rowId: number, body: Record<string, unknown>): Promise<Record<string, unknown>>;
@@ -439,4 +507,4 @@ interface DatahubTableClient {
     }>;
 }
 
-export type { BaseInsert as B, ClientConfig as C, Deps as D, FetchImpl as F, ListOpts as L, Page as P, ReadOnlyTableClient as R, SlowQueryInfo as S, TokenResolver as T, Where as W, Client as a, BaseRow as b, BaseUpdate as c, DatahubClient as d, DatahubListResult as e, DatahubTableClient as f, FileRef as g, FilterOps as h, FilterValue as i, SortClause as j, SortDir as k, TableClient as l };
+export type { BaseInsert as B, ClientConfig as C, Deps as D, FetchImpl as F, ListOpts as L, Page as P, ReadOnlyTableClient as R, SlowQueryInfo as S, TokenResolver as T, Where as W, Client as a, BaseRow as b, BaseUpdate as c, DatahubClient as d, DatahubListOpts as e, DatahubListResult as f, DatahubTableClient as g, FileRef as h, FilterOps as i, FilterValue as j, SortClause as k, SortDir as l, TableClient as m };

package/dist/uses/index.cjs

@@ -0,0 +1,147 @@
+'use strict';
+
+// src/data/errors.ts
+var DashwiseErrorCode = {
+  // Workspace-table `uses` plane (Phase 4 modules-platform-v2 — the
+  // declared/portable path for a module to read+write a WORKSPACE table
+  // the workspace already owns, as opposed to `deps` = another module's
+  // tables). Surfaced at RUNTIME against `client.uses(slug)` /
+  // `qb.uses.<slug>` / the `POST /api/module-api/uses/:slug/...` REST
+  // plane. The BINDING is the grant on this plane (for sandbox AND
+  // api_key auth alike — a kind-local key does NOT bypass it):
+  //   - USES_UNBOUND         409 — the `uses` slot is declared but its
+  //     `module_table_bindings` row isn't `status='bound'` (never bound,
+  //     ambiguous match, no match, table trashed, ops widened pending
+  //     re-consent, manually unbound). `err.context` carries
+  //     `{ uses_slug, reason }`. Recoverable: a workspace admin binds a
+  //     table (`dashwise bind <uses_slug>`), then the read succeeds.
+  //   - USES_OP_NOT_ALLOWED  403 — the operation isn't in the binding's
+  //     enforcement set (manifest `ops` ∩ `consented_ops`). `err.context`
+  //     carries `{ uses_slug, op }`. Fix: widen the manifest ops +
+  //     re-consent (re-bind), or the admin re-binds to consent.
+  //   - CONTRACT_FIELD_MISSING 409 — a field the binding maps no longer
+  //     exists on the physical table (schema drift). `err.context`
+  //     carries `{ uses_slug, field }`. The binding is best-effort parked
+  //     on detection; an admin re-binds to a table that has the field.
+  USES_UNBOUND: "USES_UNBOUND",
+  USES_OP_NOT_ALLOWED: "USES_OP_NOT_ALLOWED",
+  CONTRACT_FIELD_MISSING: "CONTRACT_FIELD_MISSING"};
+var DashwiseError = class extends Error {
+  code;
+  status;
+  retriable;
+  context;
+  /**
+   * Backend-issued trace anchor (Phase 6 slice 6.2, 2026-05-19).
+   * Mirrors the `x-request-id` response header. Populated whenever
+   * the backend's `RuntimeQueryController` (or any future endpoint
+   * that echoes the header) is the origin of this error. `null` when
+   * the failure is client-side (NetworkError / TimeoutError — the
+   * request never reached the server, so there's no server-issued
+   * ID to surface).
+   *
+   * Use this as a debugging trace anchor when filing a bug against a
+   * specific failed query — the matching row in `module_query_log`
+   * carries the full backend context (ast_hash, error_code,
+   * duration_ms, etc.).
+   */
+  requestId;
+  constructor(code, message, options = {}) {
+    super(message);
+    this.name = this.constructor.name;
+    this.code = code;
+    this.status = options.status ?? 0;
+    this.retriable = options.retriable ?? false;
+    this.context = options.context;
+    this.requestId = options.requestId ?? null;
+    if (options.cause !== void 0) {
+      this.cause = options.cause;
+    }
+  }
+};
+var UsesUnboundReason = {
+  NOT_BOUND_YET: "NOT_BOUND_YET",
+  AMBIGUOUS_MATCH: "AMBIGUOUS_MATCH",
+  NO_MATCH: "NO_MATCH",
+  TABLE_DELETED: "TABLE_DELETED",
+  OPS_WIDENED_PENDING_CONSENT: "OPS_WIDENED_PENDING_CONSENT",
+  MANUALLY_UNBOUND: "MANUALLY_UNBOUND"
+};
+var UsesUnboundError = class extends DashwiseError {
+  constructor(message, context, requestId = null) {
+    super(DashwiseErrorCode.USES_UNBOUND, message, {
+      status: 409,
+      context,
+      requestId
+    });
+  }
+  /**
+   * The manifest `uses[].tables[].slug` of the unbound slot (kebab-case,
+   * e.g. `employees`). Read from `context.uses_slug`; `undefined` if the
+   * backend omitted it.
+   */
+  get usesSlug() {
+    const v = this.context?.uses_slug;
+    return typeof v === "string" ? v : void 0;
+  }
+  /**
+   * Why the slot is unbound — one of {@link UsesUnboundReason} (typed as
+   * `string` for forward-compat with reasons the backend may add). Read
+   * from `context.reason`; `undefined` if omitted.
+   */
+  get reason() {
+    const v = this.context?.reason;
+    return typeof v === "string" ? v : void 0;
+  }
+};
+var UsesOpNotAllowedError = class extends DashwiseError {
+  constructor(message, context, requestId = null) {
+    super(DashwiseErrorCode.USES_OP_NOT_ALLOWED, message, {
+      status: 403,
+      context,
+      requestId
+    });
+  }
+  /** The `uses` slot slug the rejected op targeted. Read from `context.uses_slug`. */
+  get usesSlug() {
+    const v = this.context?.uses_slug;
+    return typeof v === "string" ? v : void 0;
+  }
+  /**
+   * The operation that was rejected — one of `create` / `read` /
+   * `update` / `delete`. Read from `context.op`; `undefined` if omitted.
+   */
+  get op() {
+    const v = this.context?.op;
+    return typeof v === "string" ? v : void 0;
+  }
+};
+var ContractFieldMissingError = class extends DashwiseError {
+  constructor(message, context, requestId = null) {
+    super(DashwiseErrorCode.CONTRACT_FIELD_MISSING, message, {
+      status: 409,
+      context,
+      requestId
+    });
+  }
+  /** The `uses` slot slug whose contract broke. Read from `context.uses_slug`. */
+  get usesSlug() {
+    const v = this.context?.uses_slug;
+    return typeof v === "string" ? v : void 0;
+  }
+  /**
+   * The declared field slug (the `uses` side name) whose mapped physical
+   * field is gone. Read from `context.field`; `undefined` if omitted.
+   */
+  get field() {
+    const v = this.context?.field;
+    return typeof v === "string" ? v : void 0;
+  }
+};
+
+exports.ContractFieldMissingError = ContractFieldMissingError;
+exports.UsesOpNotAllowedError = UsesOpNotAllowedError;
+exports.UsesUnboundError = UsesUnboundError;
+exports.UsesUnboundReason = UsesUnboundReason;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map