@lowdefy/api 6.0.0 → 6.1.0

package/dist/routes/websocket/createWebSocketConnection.js

@@ -13,6 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import { type } from '@lowdefy/helpers';
+import redactErrorResponse from '../../response/redactErrorResponse.js';
 // Wraps one client websocket connection: parses frames, dispatches
 // subscribe/unsubscribe/publish to the channel registry, and answers every
 // frame with an ack or an error so client actions never hang.
@@ -21,7 +22,10 @@ function createWebSocketConnection(context, { registry, send }) {
     const subscriber = {
         id: context.rid,
         subscriptions: new Map(),
-        send
+        send,
+        // A shared channel broadcasts to every subscriber, so each one carries its
+        // own locale for the error message it is sent.
+        i18n: context.i18n
     };
     function sendError({ message, requestId, websocketId }) {
         send(JSON.stringify({
@@ -31,6 +35,14 @@ function createWebSocketConnection(context, { registry, send }) {
             message
         }));
     }
+    function sendErrorPayload({ error, requestId, websocketId }) {
+        send(JSON.stringify({
+            type: 'error',
+            websocketId,
+            requestId,
+            error: redactErrorResponse(context, error)
+        }));
+    }
     async function handleFrame(frame) {
         const { payload, requestId, websocketId } = frame;
         if (!type.isString(websocketId)) {
@@ -104,8 +116,8 @@ function createWebSocketConnection(context, { registry, send }) {
                 err: error
             }, error.message);
             context.handleError(error);
-            sendError({
-                message: error.message,
+            sendErrorPayload({
+                error,
                 requestId: frame.requestId,
                 websocketId: frame.websocketId
             });

package/dist/test/testContext.js

@@ -18,9 +18,9 @@ function testContext({ appMeta = {}, config = {}, configDirectory, connections =
     error: ()=>{},
     info: ()=>{},
     warn: ()=>{}
-}, operators = {
+}, mode = 'prod', operators = {
     _test: ()=>'test'
-}, readConfigFile, secrets = {}, session, system } = {}) {
+}, readConfigFile, scrubSecrets = (value)=>value, secrets = {}, session, system } = {}) {
     return {
         appMeta,
         authorize: createAuthorize({
@@ -39,8 +39,10 @@ function testContext({ appMeta = {}, config = {}, configDirectory, connections =
         },
         headers,
         logger,
+        mode,
         operators,
         readConfigFile,
+        scrubSecrets,
         secrets,
         session,
         steps: {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/api",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -34,14 +34,14 @@
     "dist/*"
   ],
   "dependencies": {
-    "@lowdefy/ajv": "6.0.0",
-    "@lowdefy/build": "6.0.0",
-    "@lowdefy/errors": "6.0.0",
-    "@lowdefy/helpers": "6.0.0",
-    "@lowdefy/node-utils": "6.0.0",
-    "@lowdefy/nunjucks": "6.0.0",
-    "@lowdefy/operators": "6.0.0",
-    "@lowdefy/operators-js": "6.0.0",
+    "@lowdefy/ajv": "6.1.0",
+    "@lowdefy/build": "6.1.0",
+    "@lowdefy/errors": "6.1.0",
+    "@lowdefy/helpers": "6.1.0",
+    "@lowdefy/node-utils": "6.1.0",
+    "@lowdefy/nunjucks": "6.1.0",
+    "@lowdefy/operators": "6.1.0",
+    "@lowdefy/operators-js": "6.1.0",
     "@modelcontextprotocol/sdk": "1.29.0"
   },
   "devDependencies": {

package/dist/response/omitErrorProps.js

@@ -1,51 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/ import { UserError } from '@lowdefy/errors';
-import { type } from '@lowdefy/helpers';
-// The client-bound error policy: which fields of an error may cross the wire.
-// Passed to serializer.serialize as `omitErrorProps`, so extractErrorProps applies
-// it at EVERY error node the walk emits - the cause chain, an Error-valued own
-// property, and an Error nested inside a plain object or array. The policy is
-// stated against the emitter rather than against a response shape, so it cannot
-// become depth-limited.
-//
-// `received` is not merely "may be sensitive": on the request path
-// callRequestResolver sets it to the EVALUATED request properties, so a _secret
-// resolved into a request header is in it. `stack` exposes server internals,
-// including absolute node_modules paths. Both are unbounded runtime data nobody
-// chose, in every environment - the full value stays in the server log, which is
-// where a developer on their own machine reads it.
-const ALWAYS_OMITTED = [
-    'received',
-    'stack'
-];
-const OMITTED_WITH_CAUSE = [
-    ...ALWAYS_OMITTED,
-    'cause'
-];
-function omitErrorProps(error) {
-    // An Error cause is the trace the browser renders (name + message per level),
-    // so it is always kept - fields are taken from causes, causes are never pruned.
-    // A non-Error cause is internal server config: the whole endpoint routine, a
-    // control node, ajv errors. UserError is the exception, the one class whose
-    // payload the author wrote for the client.
-    //
-    // type.isError is `instanceof Error`, the same test extractErrorProps uses to
-    // decide which branch emits the cause - the two must agree.
-    if (type.isError(error.cause)) return ALWAYS_OMITTED;
-    if (error instanceof UserError) return ALWAYS_OMITTED;
-    return OMITTED_WITH_CAUSE;
-}
-export default omitErrorProps;