@hollware/server 1.0.0-rc.0 → 1.0.0-rc.1

package/dist/index.mjs

@@ -10,7 +10,7 @@ import { CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, McpServer, accepted
 import * as z from "zod";
 import { WorkerEntrypoint } from "cloudflare:workers";
 //#region package.json
-var version = "1.0.0-rc.0";
+var version = "1.0.0-rc.1";
 //#endregion
 //#region src/auth/responses.ts
 /** The challenge of every 401 and 403 (RFC 6750). */
@@ -2458,8 +2458,24 @@ function gatewayError(status, body) {
 *   in its fix, which is how the operator finds the line of the log that has the cause. The cause
 *   goes to the log and never to the caller, whose agent could repeat it to a person or to another
 *   system. This holds for every error, a failed D1 query included: nothing turns one into a 401.
+* - But a database that lacks the migrations of the release is a 503 `not_migrated` that says what
+*   to run: an agent that set the project up can fix it, and the cause still goes to the log only.
 * - A path that no route has is a JSON 404.
 */
+/** What D1 says when a table or a column of this release is not there: a migration is missing. */
+const MISSING_SCHEMA = /no such (?:table|column)|has no column named/;
+/**
+* Whether an error, or one of its causes, is D1 telling that the database lacks the schema of this
+* release: the one failure whose fix the caller can be told without anything of its cause.
+*/
+function isMissingMigration(error) {
+	let current = error;
+	for (let depth = 0; depth < 5 && current instanceof Error; depth++) {
+		if (MISSING_SCHEMA.test(current.message)) return true;
+		current = current.cause;
+	}
+	return false;
+}
 function installErrorHandling(app, log) {
 	app.onError((c) => {
 		const requestId = c.get("requestId");
@@ -2470,6 +2486,11 @@ function installErrorHandling(app, log) {
 			path: c.req.path,
 			detail: describeError(c.error)
 		});
+		if (isMissingMigration(c.error)) return gatewayError(503, {
+			code: "not_migrated",
+			message: "The database of this Hollware lacks the migrations of its release.",
+			fix: "Apply them: \"hollware migrate --local\" in local development, \"hollware migrate --remote\" (or \"hollware deploy\") for a deployment. Then try again."
+		});
 		return gatewayError(500, {
 			code: "internal",
 			message: "The request failed on the server.",
@@ -3877,6 +3898,8 @@ function installOpsApi(app, options) {
 }
 //#endregion
 //#region src/http/read-api.ts
+/** The paths of the index of the read API, which answers with no token. */
+const INDEX_PATHS = /* @__PURE__ */ new Set(["/v1", "/v1/"]);
 /** How long a browser keeps the answer of a preflight, in seconds. */
 const PREFLIGHT_MAX_AGE = 600;
 /** The origin of a request from a page of another origin than Hollware's own, or `null`. */
@@ -3976,7 +3999,7 @@ function installReadApi(app, options) {
 			message: "The read API only reads.",
 			fix: "Use GET."
 		}, 405, { allow: "GET, HEAD" });
-		if (c.req.path === "/v1/openapi.json") return next();
+		if (c.req.path === "/v1/openapi.json" || INDEX_PATHS.has(c.req.path)) return next();
 		c.res = await options.protect(c, async (principal) => {
 			if (!principal.scopes.includes("content:read")) return insufficientScope(["content:read"], options.metadataUrl(c));
 			c.set("site", principal.site);
@@ -4000,6 +4023,13 @@ function installReadApi(app, options) {
 		return c.res;
 	});
 	app.get("/v1/openapi.json", (c) => c.json(openApiDocument()));
+	for (const path of INDEX_PATHS) app.get(path, (c) => {
+		const origin = new URL(c.env.HOLLWARE_PUBLIC_URL).origin;
+		return c.json({
+			openapi: `${origin}/v1/openapi.json`,
+			site: `${origin}/v1/site`
+		});
+	});
 	app.get("/v1/site", readRoute(async (c) => answer(c, await options.read(c.env).describeSite(c.get("site")))));
 	app.get("/v1/search", readRoute(async (c) => {
 		const query = c.req.query();
@@ -6825,6 +6855,19 @@ async function currentOf(context) {
 		definition: siteDefinitionData.parse(stored.definition)
 	};
 }
+/**
+* A change sent at a version that is not the current one. It says which version is, and that the
+* change was not applied: whoever changed the structure since (often the caller's own earlier
+* update_site) made the definition that was read stale.
+*/
+function conflict(sent, current) {
+	return {
+		outcome: "conflict",
+		currentVersion: current,
+		message: `The structure is at version ${current}, not ${sent}: it changed since you read it, so nothing was applied.`,
+		fix: `Call get_structure again, apply your change to the definition it returns (version ${current}), and send it with version ${current}. An earlier update_site or set_collection of yours also moves the version.`
+	};
+}
 /** Replaces the definition of the site of the call with `next`, as update_site answers. */
 async function change(context, version, next, confirm) {
 	const structure = structureOf(context);
@@ -6834,10 +6877,7 @@ async function change(context, version, next, confirm) {
 		problems
 	};
 	const current = await currentOf(context);
-	if (current.version !== version) return {
-		outcome: "conflict",
-		currentVersion: current.version
-	};
+	if (current.version !== version) return conflict(version, current.version);
 	if (canonicalJson(current.definition) === canonicalJson(next)) return {
 		outcome: "unchanged",
 		version
@@ -6859,10 +6899,7 @@ async function change(context, version, next, confirm) {
 		definition: next,
 		actor: actor(context),
 		event
-	}) === "conflict") return {
-		outcome: "conflict",
-		currentVersion: (await currentOf(context)).version
-	};
+	}) === "conflict") return conflict(version, (await currentOf(context)).version);
 	context.notify?.([event.id]);
 	await structure.changed();
 	return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hollware/server",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.1",
   "description": "The Hollware Worker: operation handlers, MCP, RPC, HTTP, auth and D1 migrations.",
   "homepage": "https://hollware.com",
   "bugs": {
@@ -30,7 +30,7 @@
   },
   "dependencies": {
     "@cloudflare/workers-oauth-provider": "1.2.3",
-    "@hollware/core": "1.0.0-rc.0",
+    "@hollware/core": "1.0.0-rc.1",
     "@modelcontextprotocol/server": "2.3.1",
     "@simplewebauthn/server": "14.0.3",
     "drizzle-orm": "0.45.4",
@@ -38,7 +38,7 @@
   },
   "devDependencies": {
     "@cloudflare/vitest-plugin": "1.4.3",
-    "@hollware/agents": "1.0.0-rc.0",
+    "@hollware/agents": "1.0.0-rc.1",
     "@modelcontextprotocol/client": "2.3.1",
     "@types/node": "24.19.2",
     "drizzle-kit": "0.31.11",