@nexpress/core 0.1.0

package/dist/chunk-VNIHXQ7W.js

@@ -0,0 +1,194 @@
+import {
+  recordDigestSent
+} from "./chunk-CTSQ7BRI.js";
+import {
+  NP_DEFAULT_SITE_ID,
+  listSites
+} from "./chunk-FZ7O6DWI.js";
+import {
+  getEmailAdapter
+} from "./chunk-LSHHRDVR.js";
+import {
+  getLogger
+} from "./chunk-JJL74ZPK.js";
+import {
+  getDb
+} from "./chunk-XANPEOJC.js";
+import {
+  npMembers,
+  npNotifications
+} from "./chunk-M43PGOQY.js";
+
+// src/community/digest.ts
+import { and, desc, eq, gt, isNull, sql } from "drizzle-orm";
+var LABELS = {
+  "comment.reply": "New reply on your comment",
+  "comment.mention": "You were mentioned in a comment",
+  "document.mention": "You were mentioned in a discussion",
+  "reaction.received": "Someone reacted to your content",
+  "follow.received": "Someone followed you"
+};
+function labelFor(kind) {
+  return LABELS[kind] ?? `Notification (${kind})`;
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function buildDigestEmail(input) {
+  const site = input.siteName ?? "your site";
+  const cadenceWord = input.cadence === "weekly" ? "weekly" : "daily";
+  const total = input.notifications.length;
+  const subject = total === 1 ? `Your ${cadenceWord} digest from ${site}: 1 notification` : `Your ${cadenceWord} digest from ${site}: ${total} notifications`;
+  const lines = input.notifications.map((n) => {
+    const label = labelFor(n.kind);
+    const when = n.createdAt.toISOString();
+    return `- ${label} (${when})`;
+  });
+  const text = [
+    `Hi @${input.member.handle},`,
+    "",
+    `You have ${total} unread notification${total === 1 ? "" : "s"} from the last ${cadenceWord} window:`,
+    "",
+    ...lines,
+    "",
+    `Manage your digest settings: /members/me/notifications`
+  ].join("\n");
+  const items = input.notifications.map((n) => {
+    const label = escapeHtml(labelFor(n.kind));
+    const when = escapeHtml(n.createdAt.toISOString());
+    return `<li><strong>${label}</strong> <span style="color:#64748b">\u2014 ${when}</span></li>`;
+  }).join("");
+  const html = [
+    `<p>Hi @${escapeHtml(input.member.handle)},</p>`,
+    `<p>You have ${total} unread notification${total === 1 ? "" : "s"} from the last ${cadenceWord} window:</p>`,
+    `<ul>${items}</ul>`,
+    `<p style="color:#64748b;font-size:0.9rem">`,
+    `Manage your digest settings at `,
+    `<a href="/members/me/notifications">/members/me/notifications</a>.`,
+    `</p>`
+  ].join("");
+  return { subject, text, html };
+}
+function fallbackWindow(cadence, now) {
+  const ms = cadence === "weekly" ? 7 * 24 * 60 * 60 * 1e3 : 24 * 60 * 60 * 1e3;
+  return new Date(now.getTime() - ms);
+}
+async function listMembersForCadence(db, cadence) {
+  const rows = await db.select({
+    id: npMembers.id,
+    email: npMembers.email,
+    handle: npMembers.handle,
+    displayName: npMembers.displayName,
+    prefs: npMembers.notificationPrefs,
+    status: npMembers.status
+  }).from(npMembers).where(
+    and(
+      eq(npMembers.status, "active"),
+      sql`${npMembers.notificationPrefs} ->> 'digest' = ${cadence}`
+    )
+  );
+  return rows.map((r) => ({
+    id: r.id,
+    email: r.email,
+    handle: r.handle,
+    displayName: r.displayName,
+    prefs: r.prefs
+  }));
+}
+async function fetchUnreadSince(db, memberId, siteId, since) {
+  const rows = await db.select({
+    id: npNotifications.id,
+    kind: npNotifications.kind,
+    payload: npNotifications.payload,
+    createdAt: npNotifications.createdAt
+  }).from(npNotifications).where(
+    and(
+      eq(npNotifications.memberId, memberId),
+      // Issue #218 — scope to the site we're sweeping. Without
+      // this the digest mixed inboxes across tenants and the
+      // recipient saw notifications from sites they don't even
+      // know exist.
+      eq(npNotifications.siteId, siteId),
+      // Unread + within the window. If the member already read
+      // everything in the inbox the digest would be noise, so we
+      // skip silently (caller increments `skipped` when the list
+      // comes back empty).
+      gt(npNotifications.createdAt, since),
+      isNull(npNotifications.readAt)
+    )
+  ).orderBy(desc(npNotifications.createdAt)).limit(50);
+  return rows;
+}
+async function runDigestSweep(input) {
+  const now = input.now ?? /* @__PURE__ */ new Date();
+  const db = getDb();
+  const adapter = getEmailAdapter();
+  const log = getLogger();
+  const sites = await listSites();
+  const candidateSites = sites.length > 0 ? sites : [{ id: NP_DEFAULT_SITE_ID, name: "" }];
+  const members = await listMembersForCadence(db, input.cadence);
+  let considered = 0;
+  let sent = 0;
+  let skipped = 0;
+  let failed = 0;
+  for (const site of candidateSites) {
+    for (const member of members) {
+      considered += 1;
+      const since = lastDigestSinceFor(member, site.id, input.cadence, now);
+      const notifications = await fetchUnreadSince(db, member.id, site.id, since);
+      if (notifications.length === 0) {
+        skipped += 1;
+        continue;
+      }
+      const email = buildDigestEmail({
+        member: { displayName: member.displayName, handle: member.handle },
+        notifications,
+        cadence: input.cadence,
+        // Caller-supplied `siteName` is an explicit override
+        // (single-tenant deploys, tests pinning a friendly
+        // brand name); the per-site `name` is the natural
+        // multi-tenant default.
+        siteName: input.siteName && input.siteName.length > 0 ? input.siteName : typeof site.name === "string" && site.name.length > 0 ? site.name : void 0
+      });
+      try {
+        await adapter.send({
+          to: member.email,
+          subject: email.subject,
+          text: email.text,
+          html: email.html
+        });
+        await recordDigestSent(member.id, now, { siteId: site.id, cadence: input.cadence });
+        sent += 1;
+      } catch (err) {
+        failed += 1;
+        log.warn("digest send failed", {
+          memberId: member.id,
+          siteId: site.id,
+          cadence: input.cadence,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+    }
+  }
+  return { considered, sent, skipped, failed };
+}
+function lastDigestSinceFor(member, siteId, cadence, now) {
+  const prefs = member.prefs ?? {};
+  const bySite = prefs.lastDigestAtBySite;
+  const perSite = bySite?.[siteId]?.[cadence];
+  if (typeof perSite === "string") {
+    const parsed = new Date(perSite);
+    if (Number.isFinite(parsed.getTime())) return parsed;
+  }
+  if (typeof prefs.lastDigestAt === "string") {
+    const parsed = new Date(prefs.lastDigestAt);
+    if (Number.isFinite(parsed.getTime())) return parsed;
+  }
+  return fallbackWindow(cadence, now);
+}
+
+export {
+  buildDigestEmail,
+  runDigestSweep
+};
+//# sourceMappingURL=chunk-VNIHXQ7W.js.map

package/dist/chunk-VNIHXQ7W.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/community/digest.ts"],"sourcesContent":["import { and, desc, eq, gt, isNull, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { npMembers, npNotifications } from \"../db/schema/community.js\";\nimport { getEmailAdapter } from \"../email/service.js\";\nimport { getLogger } from \"../observability/logger.js\";\nimport { listSites, NP_DEFAULT_SITE_ID } from \"../sites/registry.js\";\n\nimport { type NpDigestCadence, recordDigestSent } from \"./notification-prefs.js\";\n\n/**\n * Phase 16.4 — email digest fan-out. The `notifications:sendDigest`\n * recurring job calls `runDigestSweep(cadence)` on a daily and a\n * weekly schedule; the function fetches every active member who\n * opted into that cadence, builds an inbox summary scoped to \"since\n * last digest\" (falling back to the cadence window when the member\n * has never received one), renders an email through the configured\n * `NpEmailAdapter`, and stamps `lastDigestAt` on success.\n *\n * The job is idempotent enough for production use: a sweep that\n * runs twice for the same window won't re-email members because\n * `lastDigestAt` advances on the first send. Failures inside the\n * loop are logged-and-continued — one stuck member doesn't block\n * the rest of the sweep.\n */\n\nexport interface NpDigestNotificationSummary {\n  id: string;\n  kind: string;\n  payload: Record<string, unknown>;\n  createdAt: Date;\n}\n\nexport interface NpDigestEmailContent {\n  subject: string;\n  text: string;\n  html: string;\n}\n\nexport interface BuildDigestEmailInput {\n  member: { displayName: string; handle: string };\n  notifications: NpDigestNotificationSummary[];\n  cadence: NpDigestCadence;\n  /** Site display name; defaults to \"your site\" so the noop adapter is still readable. */\n  siteName?: string;\n}\n\nconst LABELS: Record<string, string> = {\n  \"comment.reply\": \"New reply on your comment\",\n  \"comment.mention\": \"You were mentioned in a comment\",\n  \"document.mention\": \"You were mentioned in a discussion\",\n  \"reaction.received\": \"Someone reacted to your content\",\n  \"follow.received\": \"Someone followed you\",\n};\n\nfunction labelFor(kind: string): string {\n  return LABELS[kind] ?? `Notification (${kind})`;\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\");\n}\n\n/**\n * Pure renderer; exposed so plugins / tests can call it without\n * the DB read path.\n */\nexport function buildDigestEmail(input: BuildDigestEmailInput): NpDigestEmailContent {\n  const site = input.siteName ?? \"your site\";\n  const cadenceWord = input.cadence === \"weekly\" ? \"weekly\" : \"daily\";\n  const total = input.notifications.length;\n  const subject =\n    total === 1\n      ? `Your ${cadenceWord} digest from ${site}: 1 notification`\n      : `Your ${cadenceWord} digest from ${site}: ${total} notifications`;\n\n  const lines = input.notifications.map((n) => {\n    const label = labelFor(n.kind);\n    const when = n.createdAt.toISOString();\n    return `- ${label} (${when})`;\n  });\n  const text = [\n    `Hi @${input.member.handle},`,\n    \"\",\n    `You have ${total} unread notification${total === 1 ? \"\" : \"s\"} from the last ${cadenceWord} window:`,\n    \"\",\n    ...lines,\n    \"\",\n    `Manage your digest settings: /members/me/notifications`,\n  ].join(\"\\n\");\n\n  const items = input.notifications\n    .map((n) => {\n      const label = escapeHtml(labelFor(n.kind));\n      const when = escapeHtml(n.createdAt.toISOString());\n      return `<li><strong>${label}</strong> <span style=\"color:#64748b\">— ${when}</span></li>`;\n    })\n    .join(\"\");\n  const html = [\n    `<p>Hi @${escapeHtml(input.member.handle)},</p>`,\n    `<p>You have ${total} unread notification${total === 1 ? \"\" : \"s\"} from the last ${cadenceWord} window:</p>`,\n    `<ul>${items}</ul>`,\n    `<p style=\"color:#64748b;font-size:0.9rem\">`,\n    `Manage your digest settings at `,\n    `<a href=\"/members/me/notifications\">/members/me/notifications</a>.`,\n    `</p>`,\n  ].join(\"\");\n\n  return { subject, text, html };\n}\n\ninterface MemberDigestRow {\n  id: string;\n  email: string;\n  handle: string;\n  displayName: string;\n  prefs: Record<string, unknown>;\n}\n\nfunction fallbackWindow(cadence: NpDigestCadence, now: Date): Date {\n  const ms = cadence === \"weekly\" ? 7 * 24 * 60 * 60 * 1000 : 24 * 60 * 60 * 1000;\n  return new Date(now.getTime() - ms);\n}\n\n/**\n * Pulls every active member whose `notification_prefs.digest`\n * matches `cadence`. The JSONB filter uses Postgres `->>`\n * extraction; the `digest` field is a small string, indexes are\n * unnecessary at v1 scale.\n */\nasync function listMembersForCadence(\n  db: NodePgDatabase<Record<string, unknown>>,\n  cadence: Exclude<NpDigestCadence, \"off\">,\n): Promise<MemberDigestRow[]> {\n  const rows = (await db\n    .select({\n      id: npMembers.id,\n      email: npMembers.email,\n      handle: npMembers.handle,\n      displayName: npMembers.displayName,\n      prefs: npMembers.notificationPrefs,\n      status: npMembers.status,\n    })\n    .from(npMembers)\n    .where(\n      and(\n        eq(npMembers.status, \"active\"),\n        sql`${npMembers.notificationPrefs} ->> 'digest' = ${cadence}`,\n      ),\n    )) as Array<MemberDigestRow & { status: string }>;\n  return rows.map((r) => ({\n    id: r.id,\n    email: r.email,\n    handle: r.handle,\n    displayName: r.displayName,\n    prefs: r.prefs,\n  }));\n}\n\nasync function fetchUnreadSince(\n  db: NodePgDatabase<Record<string, unknown>>,\n  memberId: string,\n  siteId: string,\n  since: Date,\n): Promise<NpDigestNotificationSummary[]> {\n  const rows = (await db\n    .select({\n      id: npNotifications.id,\n      kind: npNotifications.kind,\n      payload: npNotifications.payload,\n      createdAt: npNotifications.createdAt,\n    })\n    .from(npNotifications)\n    .where(\n      and(\n        eq(npNotifications.memberId, memberId),\n        // Issue #218 — scope to the site we're sweeping. Without\n        // this the digest mixed inboxes across tenants and the\n        // recipient saw notifications from sites they don't even\n        // know exist.\n        eq(npNotifications.siteId, siteId),\n        // Unread + within the window. If the member already read\n        // everything in the inbox the digest would be noise, so we\n        // skip silently (caller increments `skipped` when the list\n        // comes back empty).\n        gt(npNotifications.createdAt, since),\n        isNull(npNotifications.readAt),\n      ),\n    )\n    .orderBy(desc(npNotifications.createdAt))\n    .limit(50)) as NpDigestNotificationSummary[];\n  return rows;\n}\n\nexport interface RunDigestSweepInput {\n  cadence: \"daily\" | \"weekly\";\n  /** Defaults to `new Date()`. Tests override for determinism. */\n  now?: Date;\n  /** Site name woven into subject + body. Defaults to `\"your site\"`. */\n  siteName?: string;\n}\n\nexport interface RunDigestSweepResult {\n  considered: number;\n  sent: number;\n  skipped: number;\n  failed: number;\n}\n\nexport async function runDigestSweep(input: RunDigestSweepInput): Promise<RunDigestSweepResult> {\n  const now = input.now ?? new Date();\n  const db = getDb() as unknown as NodePgDatabase<Record<string, unknown>>;\n  const adapter = getEmailAdapter();\n  const log = getLogger();\n\n  // Issue #218 — fan-out per site. The previous implementation\n  // ran a single sweep that mixed every tenant's inbox into one\n  // digest and stamped one global `lastDigestAt`; advancing it\n  // for tenant A would suppress tenant B's next digest entirely.\n  // We now iterate the site registry and run an independent\n  // sweep per (site, member) — same email cadence, but each\n  // recipient gets one email per site they have unread\n  // notifications on.\n  const sites = await listSites();\n  const candidateSites = sites.length > 0 ? sites : [{ id: NP_DEFAULT_SITE_ID, name: \"\" }];\n  const members = await listMembersForCadence(db, input.cadence);\n\n  let considered = 0;\n  let sent = 0;\n  let skipped = 0;\n  let failed = 0;\n\n  for (const site of candidateSites) {\n    for (const member of members) {\n      considered += 1;\n      const since = lastDigestSinceFor(member, site.id, input.cadence, now);\n\n      const notifications = await fetchUnreadSince(db, member.id, site.id, since);\n      if (notifications.length === 0) {\n        skipped += 1;\n        continue;\n      }\n\n      const email = buildDigestEmail({\n        member: { displayName: member.displayName, handle: member.handle },\n        notifications,\n        cadence: input.cadence,\n        // Caller-supplied `siteName` is an explicit override\n        // (single-tenant deploys, tests pinning a friendly\n        // brand name); the per-site `name` is the natural\n        // multi-tenant default.\n        siteName:\n          input.siteName && input.siteName.length > 0\n            ? input.siteName\n            : typeof site.name === \"string\" && site.name.length > 0\n              ? site.name\n              : undefined,\n      });\n\n      try {\n        await adapter.send({\n          to: member.email,\n          subject: email.subject,\n          text: email.text,\n          html: email.html,\n        });\n        await recordDigestSent(member.id, now, { siteId: site.id, cadence: input.cadence });\n        sent += 1;\n      } catch (err) {\n        failed += 1;\n        log.warn(\"digest send failed\", {\n          memberId: member.id,\n          siteId: site.id,\n          cadence: input.cadence,\n          error: err instanceof Error ? err.message : String(err),\n        });\n      }\n    }\n  }\n\n  return { considered, sent, skipped, failed };\n}\n\n/**\n * Issue #218 — pick the right \"since\" cutoff for one (site,\n * member, cadence) sweep. Reads precedence:\n *   1. `lastDigestAtBySite[siteId][cadence]` — the per-site\n *      timestamp the new sweep writes after each successful send.\n *   2. legacy `lastDigestAt` — single-tenant deploys without\n *      site-scoped writes still keep their existing window.\n *   3. fallback window (24h / 7d) — a member who has never\n *      received any digest.\n */\nfunction lastDigestSinceFor(\n  member: MemberDigestRow,\n  siteId: string,\n  cadence: NpDigestCadence,\n  now: Date,\n): Date {\n  const prefs = (member.prefs ?? {});\n  const bySite = prefs.lastDigestAtBySite as\n    | Record<string, Partial<Record<string, string>>>\n    | undefined;\n  const perSite = bySite?.[siteId]?.[cadence];\n  if (typeof perSite === \"string\") {\n    const parsed = new Date(perSite);\n    if (Number.isFinite(parsed.getTime())) return parsed;\n  }\n  if (typeof prefs.lastDigestAt === \"string\") {\n    const parsed = new Date(prefs.lastDigestAt);\n    if (Number.isFinite(parsed.getTime())) return parsed;\n  }\n  return fallbackWindow(cadence, now);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,KAAK,MAAM,IAAI,IAAI,QAAQ,WAAW;AAgD/C,IAAM,SAAiC;AAAA,EACrC,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,mBAAmB;AACrB;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,OAAO,IAAI,KAAK,iBAAiB,IAAI;AAC9C;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ;AAC3B;AAMO,SAAS,iBAAiB,OAAoD;AACnF,QAAM,OAAO,MAAM,YAAY;AAC/B,QAAM,cAAc,MAAM,YAAY,WAAW,WAAW;AAC5D,QAAM,QAAQ,MAAM,cAAc;AAClC,QAAM,UACJ,UAAU,IACN,QAAQ,WAAW,gBAAgB,IAAI,qBACvC,QAAQ,WAAW,gBAAgB,IAAI,KAAK,KAAK;AAEvD,QAAM,QAAQ,MAAM,cAAc,IAAI,CAAC,MAAM;AAC3C,UAAM,QAAQ,SAAS,EAAE,IAAI;AAC7B,UAAM,OAAO,EAAE,UAAU,YAAY;AACrC,WAAO,KAAK,KAAK,KAAK,IAAI;AAAA,EAC5B,CAAC;AACD,QAAM,OAAO;AAAA,IACX,OAAO,MAAM,OAAO,MAAM;AAAA,IAC1B;AAAA,IACA,YAAY,KAAK,uBAAuB,UAAU,IAAI,KAAK,GAAG,kBAAkB,WAAW;AAAA,IAC3F;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AAEX,QAAM,QAAQ,MAAM,cACjB,IAAI,CAAC,MAAM;AACV,UAAM,QAAQ,WAAW,SAAS,EAAE,IAAI,CAAC;AACzC,UAAM,OAAO,WAAW,EAAE,UAAU,YAAY,CAAC;AACjD,WAAO,eAAe,KAAK,gDAA2C,IAAI;AAAA,EAC5E,CAAC,EACA,KAAK,EAAE;AACV,QAAM,OAAO;AAAA,IACX,UAAU,WAAW,MAAM,OAAO,MAAM,CAAC;AAAA,IACzC,eAAe,KAAK,uBAAuB,UAAU,IAAI,KAAK,GAAG,kBAAkB,WAAW;AAAA,IAC9F,OAAO,KAAK;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AAET,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;AAUA,SAAS,eAAe,SAA0B,KAAiB;AACjE,QAAM,KAAK,YAAY,WAAW,IAAI,KAAK,KAAK,KAAK,MAAO,KAAK,KAAK,KAAK;AAC3E,SAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,EAAE;AACpC;AAQA,eAAe,sBACb,IACA,SAC4B;AAC5B,QAAM,OAAQ,MAAM,GACjB,OAAO;AAAA,IACN,IAAI,UAAU;AAAA,IACd,OAAO,UAAU;AAAA,IACjB,QAAQ,UAAU;AAAA,IAClB,aAAa,UAAU;AAAA,IACvB,OAAO,UAAU;AAAA,IACjB,QAAQ,UAAU;AAAA,EACpB,CAAC,EACA,KAAK,SAAS,EACd;AAAA,IACC;AAAA,MACE,GAAG,UAAU,QAAQ,QAAQ;AAAA,MAC7B,MAAM,UAAU,iBAAiB,mBAAmB,OAAO;AAAA,IAC7D;AAAA,EACF;AACF,SAAO,KAAK,IAAI,CAAC,OAAO;AAAA,IACtB,IAAI,EAAE;AAAA,IACN,OAAO,EAAE;AAAA,IACT,QAAQ,EAAE;AAAA,IACV,aAAa,EAAE;AAAA,IACf,OAAO,EAAE;AAAA,EACX,EAAE;AACJ;AAEA,eAAe,iBACb,IACA,UACA,QACA,OACwC;AACxC,QAAM,OAAQ,MAAM,GACjB,OAAO;AAAA,IACN,IAAI,gBAAgB;AAAA,IACpB,MAAM,gBAAgB;AAAA,IACtB,SAAS,gBAAgB;AAAA,IACzB,WAAW,gBAAgB;AAAA,EAC7B,CAAC,EACA,KAAK,eAAe,EACpB;AAAA,IACC;AAAA,MACE,GAAG,gBAAgB,UAAU,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKrC,GAAG,gBAAgB,QAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,MAKjC,GAAG,gBAAgB,WAAW,KAAK;AAAA,MACnC,OAAO,gBAAgB,MAAM;AAAA,IAC/B;AAAA,EACF,EACC,QAAQ,KAAK,gBAAgB,SAAS,CAAC,EACvC,MAAM,EAAE;AACX,SAAO;AACT;AAiBA,eAAsB,eAAe,OAA2D;AAC9F,QAAM,MAAM,MAAM,OAAO,oBAAI,KAAK;AAClC,QAAM,KAAK,MAAM;AACjB,QAAM,UAAU,gBAAgB;AAChC,QAAM,MAAM,UAAU;AAUtB,QAAM,QAAQ,MAAM,UAAU;AAC9B,QAAM,iBAAiB,MAAM,SAAS,IAAI,QAAQ,CAAC,EAAE,IAAI,oBAAoB,MAAM,GAAG,CAAC;AACvF,QAAM,UAAU,MAAM,sBAAsB,IAAI,MAAM,OAAO;AAE7D,MAAI,aAAa;AACjB,MAAI,OAAO;AACX,MAAI,UAAU;AACd,MAAI,SAAS;AAEb,aAAW,QAAQ,gBAAgB;AACjC,eAAW,UAAU,SAAS;AAC5B,oBAAc;AACd,YAAM,QAAQ,mBAAmB,QAAQ,KAAK,IAAI,MAAM,SAAS,GAAG;AAEpE,YAAM,gBAAgB,MAAM,iBAAiB,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK;AAC1E,UAAI,cAAc,WAAW,GAAG;AAC9B,mBAAW;AACX;AAAA,MACF;AAEA,YAAM,QAAQ,iBAAiB;AAAA,QAC7B,QAAQ,EAAE,aAAa,OAAO,aAAa,QAAQ,OAAO,OAAO;AAAA,QACjE;AAAA,QACA,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,QAKf,UACE,MAAM,YAAY,MAAM,SAAS,SAAS,IACtC,MAAM,WACN,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,IAClD,KAAK,OACL;AAAA,MACV,CAAC;AAED,UAAI;AACF,cAAM,QAAQ,KAAK;AAAA,UACjB,IAAI,OAAO;AAAA,UACX,SAAS,MAAM;AAAA,UACf,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM;AAAA,QACd,CAAC;AACD,cAAM,iBAAiB,OAAO,IAAI,KAAK,EAAE,QAAQ,KAAK,IAAI,SAAS,MAAM,QAAQ,CAAC;AAClF,gBAAQ;AAAA,MACV,SAAS,KAAK;AACZ,kBAAU;AACV,YAAI,KAAK,sBAAsB;AAAA,UAC7B,UAAU,OAAO;AAAA,UACjB,QAAQ,KAAK;AAAA,UACb,SAAS,MAAM;AAAA,UACf,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,MAAM,SAAS,OAAO;AAC7C;AAYA,SAAS,mBACP,QACA,QACA,SACA,KACM;AACN,QAAM,QAAS,OAAO,SAAS,CAAC;AAChC,QAAM,SAAS,MAAM;AAGrB,QAAM,UAAU,SAAS,MAAM,IAAI,OAAO;AAC1C,MAAI,OAAO,YAAY,UAAU;AAC/B,UAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,QAAI,OAAO,SAAS,OAAO,QAAQ,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,MAAI,OAAO,MAAM,iBAAiB,UAAU;AAC1C,UAAM,SAAS,IAAI,KAAK,MAAM,YAAY;AAC1C,QAAI,OAAO,SAAS,OAAO,QAAQ,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,SAAO,eAAe,SAAS,GAAG;AACpC;","names":[]}

package/dist/chunk-WV272MPW.js

@@ -0,0 +1,31 @@
+// src/observability/error-reporter.ts
+var noopErrorReporter = {
+  captureException: () => {
+  }
+};
+var currentReporter = noopErrorReporter;
+function setErrorReporter(reporter) {
+  currentReporter = reporter;
+}
+function getErrorReporter() {
+  return currentReporter;
+}
+async function reportError(error, context) {
+  try {
+    await currentReporter.captureException(error, context);
+  } catch (reporterError) {
+    console.error("[nexpress] error reporter itself threw:", reporterError);
+  }
+}
+function resetErrorReporter() {
+  currentReporter = noopErrorReporter;
+}
+
+export {
+  noopErrorReporter,
+  setErrorReporter,
+  getErrorReporter,
+  reportError,
+  resetErrorReporter
+};
+//# sourceMappingURL=chunk-WV272MPW.js.map

package/dist/chunk-WV272MPW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/observability/error-reporter.ts"],"sourcesContent":["/**\n * Pluggable error reporter. The default is a no-op so users who don't\n * need third-party tracking pay nothing; production deployments can\n * install a Sentry / Bugsnag / Honeybadger / Rollbar adapter via\n * `setErrorReporter()`.\n *\n * The framework reports errors at three boundaries:\n *  1. Unhandled exceptions in API route handlers (via `npErrorResponse`).\n *  2. Plugin hook handlers that throw (via the plugin host).\n *  3. pg-boss job handlers that throw (registered by the worker process).\n *\n * Reporters MUST NOT throw — exceptions inside `captureException` are\n * caught and logged, never propagated.\n */\nexport interface NpErrorReportContext {\n  /**\n   * Free-form tags used by error trackers for filtering and grouping.\n   * E.g. `{ source: \"api\", route: \"/api/collections/posts\" }`.\n   */\n  tags?: Record<string, string>;\n  /** Optional user identity, populated when the error happened in a\n   *  request context. */\n  user?: { id?: string; email?: string; role?: string };\n  /** Arbitrary extra context — request body shape, plugin id, job name. */\n  extra?: Record<string, unknown>;\n}\n\nexport interface NpErrorReporter {\n  captureException(error: Error, context?: NpErrorReportContext): void | Promise<void>;\n}\n\n/** Default — does nothing. Replaceable via `setErrorReporter`. */\nexport const noopErrorReporter: NpErrorReporter = {\n  captureException: () => {\n    /* no-op */\n  },\n};\n\nlet currentReporter: NpErrorReporter = noopErrorReporter;\n\n/** Replace the global error reporter. Call once at app boot. */\nexport function setErrorReporter(reporter: NpErrorReporter): void {\n  currentReporter = reporter;\n}\n\n/** Returns the currently-installed reporter. Defaults to no-op. */\nexport function getErrorReporter(): NpErrorReporter {\n  return currentReporter;\n}\n\n/**\n * Safe wrapper that swallows reporter exceptions so error reporting can\n * never itself crash the host. Logs the underlying capture failure via\n * `console.error` — using `getLogger()` here would risk a loop if the\n * logger is also broken.\n */\nexport async function reportError(error: Error, context?: NpErrorReportContext): Promise<void> {\n  try {\n    await currentReporter.captureException(error, context);\n  } catch (reporterError) {\n    // Last-resort: bypass the logger to avoid a circular failure path.\n     \n    console.error(\"[nexpress] error reporter itself threw:\", reporterError);\n  }\n}\n\n/** Reset to the default no-op reporter. Tests use this to undo `setErrorReporter`. */\nexport function resetErrorReporter(): void {\n  currentReporter = noopErrorReporter;\n}\n"],"mappings":";AAgCO,IAAM,oBAAqC;AAAA,EAChD,kBAAkB,MAAM;AAAA,EAExB;AACF;AAEA,IAAI,kBAAmC;AAGhC,SAAS,iBAAiB,UAAiC;AAChE,oBAAkB;AACpB;AAGO,SAAS,mBAAoC;AAClD,SAAO;AACT;AAQA,eAAsB,YAAY,OAAc,SAA+C;AAC7F,MAAI;AACF,UAAM,gBAAgB,iBAAiB,OAAO,OAAO;AAAA,EACvD,SAAS,eAAe;AAGtB,YAAQ,MAAM,2CAA2C,aAAa;AAAA,EACxE;AACF;AAGO,SAAS,qBAA2B;AACzC,oBAAkB;AACpB;","names":[]}

package/dist/chunk-X5KKBOUS.js

@@ -0,0 +1,26 @@
+// src/routes/registry.ts
+var registry = /* @__PURE__ */ new Map();
+function registerCustomRoute(route) {
+  if (typeof route.path !== "string" || !route.path.startsWith("/")) {
+    throw new TypeError(
+      `registerCustomRoute: 'path' must start with '/', got ${JSON.stringify(route.path)}`
+    );
+  }
+  if (typeof route.label !== "string" || route.label.trim().length === 0) {
+    throw new TypeError("registerCustomRoute: 'label' must be a non-empty string");
+  }
+  registry.set(route.path, { ...route });
+}
+function getCustomRoutes() {
+  return Array.from(registry.values());
+}
+function clearCustomRoutes() {
+  registry.clear();
+}
+
+export {
+  registerCustomRoute,
+  getCustomRoutes,
+  clearCustomRoutes
+};
+//# sourceMappingURL=chunk-X5KKBOUS.js.map

package/dist/chunk-X5KKBOUS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/registry.ts"],"sourcesContent":["/**\n * Developer-declared custom-route registry. Hand-coded Next.js routes\n * under `apps/web/src/app/(site)/*` are invisible to the framework\n * (the catch-all `[[...slug]]` only knows about CMS pages, plugins\n * declare their own routes via `definePlugin({ routes })`). Operators\n * still need to discover and link to those hand-coded surfaces from\n * the admin — the navigation editor in particular.\n *\n * App code declares each navigable hand-coded route with\n * `registerCustomRoute(...)` at boot. The admin reads the registry\n * via `getCustomRoutes()` to populate a Settings tab and the nav\n * editor's URL autocomplete.\n *\n * Re-registering the same `path` overwrites silently — same HMR-safe\n * convention as the block registry. The registry is process-scoped;\n * sites in a multi-tenant deployment share the same set because all\n * sites share the same code bundle.\n */\nexport interface NpCustomRoute {\n  /**\n   * The route's URL path. Must start with `/`. May include dynamic\n   * segments for documentation purposes (e.g. `/u/[username]`), but\n   * such routes won't appear as nav-link targets — the autocomplete\n   * filters them out because a literal href can't be derived.\n   */\n  path: string;\n  /** Short human label for the admin UI. */\n  label: string;\n  /** Optional one-line description. */\n  description?: string;\n  /**\n   * Optional Lucide icon name (lowercase kebab-case, matching the\n   * shared `BlockIcon` resolver). Defaults to `route` if unset.\n   */\n  icon?: string;\n  /** Optional grouping key for the admin list (e.g. \"content\", \"community\"). */\n  group?: string;\n}\n\nconst registry = new Map<string, NpCustomRoute>();\n\nexport function registerCustomRoute(route: NpCustomRoute): void {\n  if (typeof route.path !== \"string\" || !route.path.startsWith(\"/\")) {\n    throw new TypeError(\n      `registerCustomRoute: 'path' must start with '/', got ${JSON.stringify(route.path)}`,\n    );\n  }\n  if (typeof route.label !== \"string\" || route.label.trim().length === 0) {\n    throw new TypeError(\"registerCustomRoute: 'label' must be a non-empty string\");\n  }\n  registry.set(route.path, { ...route });\n}\n\nexport function getCustomRoutes(): NpCustomRoute[] {\n  return Array.from(registry.values());\n}\n\nexport function clearCustomRoutes(): void {\n  registry.clear();\n}\n"],"mappings":";AAuCA,IAAM,WAAW,oBAAI,IAA2B;AAEzC,SAAS,oBAAoB,OAA4B;AAC9D,MAAI,OAAO,MAAM,SAAS,YAAY,CAAC,MAAM,KAAK,WAAW,GAAG,GAAG;AACjE,UAAM,IAAI;AAAA,MACR,wDAAwD,KAAK,UAAU,MAAM,IAAI,CAAC;AAAA,IACpF;AAAA,EACF;AACA,MAAI,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG;AACtE,UAAM,IAAI,UAAU,yDAAyD;AAAA,EAC/E;AACA,WAAS,IAAI,MAAM,MAAM,EAAE,GAAG,MAAM,CAAC;AACvC;AAEO,SAAS,kBAAmC;AACjD,SAAO,MAAM,KAAK,SAAS,OAAO,CAAC;AACrC;AAEO,SAAS,oBAA0B;AACxC,WAAS,MAAM;AACjB;","names":[]}

package/dist/chunk-XANPEOJC.js

@@ -0,0 +1,17 @@
+// src/db/runtime.ts
+var dbInstance = null;
+function setDb(db) {
+  dbInstance = db;
+}
+function getDb() {
+  if (!dbInstance) {
+    throw new Error("Database not initialized. Call setDb() first.");
+  }
+  return dbInstance;
+}
+
+export {
+  setDb,
+  getDb
+};
+//# sourceMappingURL=chunk-XANPEOJC.js.map

package/dist/chunk-XANPEOJC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/runtime.ts"],"sourcesContent":["import type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\n\n/**\n * Single source of truth for the runtime DB handle. Both the\n * collections pipeline and the media service read through `getDb()`\n * so test harnesses that swap the singleton via `setDb(testPool)`\n * affect every consumer in lockstep.\n *\n * Bootstrap glue (e.g. `@nexpress/next`'s `createBootstrap`) calls\n * `setDb()` once with the connection it created. Application code\n * does NOT call this directly — let the bootstrap do it.\n */\nlet dbInstance: NodePgDatabase<Record<string, unknown>> | null = null;\n\nexport function setDb(db: NodePgDatabase<Record<string, unknown>>): void {\n  dbInstance = db;\n}\n\nexport function getDb(): NodePgDatabase<Record<string, unknown>> {\n  if (!dbInstance) {\n    throw new Error(\"Database not initialized. Call setDb() first.\");\n  }\n  return dbInstance;\n}\n"],"mappings":";AAYA,IAAI,aAA6D;AAE1D,SAAS,MAAM,IAAmD;AACvE,eAAa;AACf;AAEO,SAAS,QAAiD;AAC/D,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-XPVQIHAQ.js

@@ -0,0 +1,83 @@
+import {
+  runHook
+} from "./chunk-VGTPQXNQ.js";
+import {
+  getAllCollectionSlugs,
+  getCollectionConfig,
+  getCollectionTable
+} from "./chunk-FZ7O6DWI.js";
+import {
+  enqueueJob
+} from "./chunk-V2UNHGAP.js";
+import {
+  getDb
+} from "./chunk-XANPEOJC.js";
+
+// src/collections/scheduled.ts
+import { and, eq, lt } from "drizzle-orm";
+function hasPublishedAtField(fields) {
+  for (const field of fields) {
+    if (field.type === "row" || field.type === "collapsible") {
+      if (hasPublishedAtField(field.fields)) return true;
+      continue;
+    }
+    if (field.type === "group" || field.type === "array") {
+      if (hasPublishedAtField(field.fields)) return true;
+      continue;
+    }
+    if (field.type === "date" && field.name === "publishedAt") {
+      return true;
+    }
+  }
+  return false;
+}
+function getTableColumn(table, key) {
+  const column = table[key];
+  if (!column) {
+    throw new Error(`Column '${key}' not found on scheduled-publish table.`);
+  }
+  return column;
+}
+async function publishScheduledDocuments(atTime = /* @__PURE__ */ new Date()) {
+  const byCollection = {};
+  let published = 0;
+  for (const slug of getAllCollectionSlugs()) {
+    const config = getCollectionConfig(slug);
+    if (!hasPublishedAtField(config.fields)) continue;
+    const table = getCollectionTable(slug);
+    const statusCol = getTableColumn(table, "status");
+    const publishedAtCol = getTableColumn(table, "publishedAt");
+    const db = getDb();
+    const rows = await db.update(table).set({ status: "published", updatedAt: atTime }).where(and(eq(statusCol, "scheduled"), lt(publishedAtCol, atTime))).returning();
+    const ids = rows.map((row) => row.id);
+    byCollection[slug] = ids;
+    published += ids.length;
+    for (const row of rows) {
+      const docId = row.id;
+      await runHook("content:afterUpdate", {
+        collection: slug,
+        doc: row,
+        operation: "update",
+        scheduled: true
+      });
+      await runHook("content:afterPublish", {
+        collection: slug,
+        doc: row,
+        operation: "update",
+        scheduled: true
+      });
+      await enqueueJob("content:afterSave", {
+        collection: slug,
+        documentId: docId,
+        operation: "update",
+        userId: "scheduler"
+      });
+    }
+  }
+  return { published, byCollection };
+}
+
+export {
+  publishScheduledDocuments
+};
+//# sourceMappingURL=chunk-XPVQIHAQ.js.map

package/dist/chunk-XPVQIHAQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/collections/scheduled.ts"],"sourcesContent":["import { and, eq, lt } from \"drizzle-orm\";\nimport type { AnyPgColumn, PgTable } from \"drizzle-orm/pg-core\";\n\nimport type { NpFieldConfig } from \"../config/types.js\";\nimport { enqueueJob } from \"../jobs/queue.js\";\nimport { runHook } from \"../plugins/host.js\";\nimport {\n  getAllCollectionSlugs,\n  getCollectionConfig,\n  getCollectionTable,\n} from \"./registry.js\";\nimport { getDb } from \"../db/runtime.js\";\n\nfunction hasPublishedAtField(fields: NpFieldConfig[]): boolean {\n  for (const field of fields) {\n    if (field.type === \"row\" || field.type === \"collapsible\") {\n      if (hasPublishedAtField(field.fields)) return true;\n      continue;\n    }\n    if (field.type === \"group\" || field.type === \"array\") {\n      if (hasPublishedAtField(field.fields)) return true;\n      continue;\n    }\n    if (field.type === \"date\" && field.name === \"publishedAt\") {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction getTableColumn(table: PgTable, key: string): AnyPgColumn {\n  const column = (table as unknown as Record<string, unknown>)[key];\n  if (!column) {\n    throw new Error(`Column '${key}' not found on scheduled-publish table.`);\n  }\n  return column as AnyPgColumn;\n}\n\nexport interface PublishScheduledResult {\n  published: number;\n  byCollection: Record<string, string[]>;\n}\n\n/**\n * Scans every registered collection that has a `publishedAt` date field,\n * flips rows with `status=\"scheduled\"` whose `publishedAt <= now` to\n * `status=\"published\"`, and fires `content:afterPublish` for each.\n *\n * Safe to call repeatedly (idempotent once a doc is published) and cheap —\n * each UPDATE runs against an indexed status column and no-ops when empty.\n */\nexport async function publishScheduledDocuments(\n  atTime: Date = new Date(),\n): Promise<PublishScheduledResult> {\n  const byCollection: Record<string, string[]> = {};\n  let published = 0;\n\n  for (const slug of getAllCollectionSlugs()) {\n    const config = getCollectionConfig(slug);\n    if (!hasPublishedAtField(config.fields)) continue;\n\n    const table = getCollectionTable(slug) as PgTable;\n    const statusCol = getTableColumn(table, \"status\");\n    const publishedAtCol = getTableColumn(table, \"publishedAt\");\n\n    const db = getDb();\n    // `.returning()` without args gives every column so plugin hooks get the\n    // full doc they'd see from a normal update, not just { id }.\n    const rows = (await db\n      .update(table)\n      .set({ status: \"published\", updatedAt: atTime })\n      .where(and(eq(statusCol, \"scheduled\"), lt(publishedAtCol, atTime)))\n      .returning()) as Array<Record<string, unknown>>;\n\n    const ids = rows.map((row) => row.id as string);\n    byCollection[slug] = ids;\n    published += ids.length;\n\n    for (const row of rows) {\n      const docId = row.id as string;\n      // Fire every hook a plugin would have seen if the user had clicked\n      // Publish directly: afterUpdate (content changed), afterPublish\n      // (status transitioned), and the afterSave job so revalidation +\n      // collection-level afterUpdate hooks run too.\n      await runHook(\"content:afterUpdate\", {\n        collection: slug,\n        doc: row,\n        operation: \"update\",\n        scheduled: true,\n      });\n      await runHook(\"content:afterPublish\", {\n        collection: slug,\n        doc: row,\n        operation: \"update\",\n        scheduled: true,\n      });\n      await enqueueJob(\"content:afterSave\", {\n        collection: slug,\n        documentId: docId,\n        operation: \"update\",\n        userId: \"scheduler\",\n      });\n    }\n  }\n\n  return { published, byCollection };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,KAAK,IAAI,UAAU;AAa5B,SAAS,oBAAoB,QAAkC;AAC7D,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,SAAS,MAAM,SAAS,eAAe;AACxD,UAAI,oBAAoB,MAAM,MAAM,EAAG,QAAO;AAC9C;AAAA,IACF;AACA,QAAI,MAAM,SAAS,WAAW,MAAM,SAAS,SAAS;AACpD,UAAI,oBAAoB,MAAM,MAAM,EAAG,QAAO;AAC9C;AAAA,IACF;AACA,QAAI,MAAM,SAAS,UAAU,MAAM,SAAS,eAAe;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAgB,KAA0B;AAChE,QAAM,SAAU,MAA6C,GAAG;AAChE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,WAAW,GAAG,yCAAyC;AAAA,EACzE;AACA,SAAO;AACT;AAeA,eAAsB,0BACpB,SAAe,oBAAI,KAAK,GACS;AACjC,QAAM,eAAyC,CAAC;AAChD,MAAI,YAAY;AAEhB,aAAW,QAAQ,sBAAsB,GAAG;AAC1C,UAAM,SAAS,oBAAoB,IAAI;AACvC,QAAI,CAAC,oBAAoB,OAAO,MAAM,EAAG;AAEzC,UAAM,QAAQ,mBAAmB,IAAI;AACrC,UAAM,YAAY,eAAe,OAAO,QAAQ;AAChD,UAAM,iBAAiB,eAAe,OAAO,aAAa;AAE1D,UAAM,KAAK,MAAM;AAGjB,UAAM,OAAQ,MAAM,GACjB,OAAO,KAAK,EACZ,IAAI,EAAE,QAAQ,aAAa,WAAW,OAAO,CAAC,EAC9C,MAAM,IAAI,GAAG,WAAW,WAAW,GAAG,GAAG,gBAAgB,MAAM,CAAC,CAAC,EACjE,UAAU;AAEb,UAAM,MAAM,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAY;AAC9C,iBAAa,IAAI,IAAI;AACrB,iBAAa,IAAI;AAEjB,eAAW,OAAO,MAAM;AACtB,YAAM,QAAQ,IAAI;AAKlB,YAAM,QAAQ,uBAAuB;AAAA,QACnC,YAAY;AAAA,QACZ,KAAK;AAAA,QACL,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AACD,YAAM,QAAQ,wBAAwB;AAAA,QACpC,YAAY;AAAA,QACZ,KAAK;AAAA,QACL,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AACD,YAAM,WAAW,qBAAqB;AAAA,QACpC,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,aAAa;AACnC;","names":[]}

package/dist/chunk-ZCINJSS4.js

@@ -0,0 +1,75 @@
+// src/errors.ts
+var NpError = class extends Error {
+  constructor(message, code, statusCode = 500) {
+    super(message);
+    this.code = code;
+    this.statusCode = statusCode;
+    this.name = "NpError";
+  }
+  code;
+  statusCode;
+};
+var NpForbiddenError = class extends NpError {
+  constructor(collection, operation) {
+    super(
+      `Access denied: ${operation} on ${collection}`,
+      "FORBIDDEN",
+      403
+    );
+    this.name = "NpForbiddenError";
+  }
+};
+var NpNotFoundError = class extends NpError {
+  constructor(collection, id) {
+    super(
+      `Document not found: ${collection}/${id}`,
+      "NOT_FOUND",
+      404
+    );
+    this.name = "NpNotFoundError";
+  }
+};
+var NpValidationError = class extends NpError {
+  constructor(message, errors) {
+    super(message, "VALIDATION_ERROR", 400);
+    this.errors = errors;
+    this.name = "NpValidationError";
+  }
+  errors;
+};
+var NpAuthError = class extends NpError {
+  constructor(message = "Unauthorized") {
+    super(message, "UNAUTHORIZED", 401);
+    this.name = "NpAuthError";
+  }
+};
+var NpConflictError = class extends NpError {
+  constructor(message) {
+    super(message, "CONFLICT", 409);
+    this.name = "NpConflictError";
+  }
+};
+var NpRateLimitError = class extends NpError {
+  constructor(message) {
+    super(message, "RATE_LIMITED", 429);
+    this.name = "NpRateLimitError";
+  }
+};
+var NpSiteContextMissingError = class extends NpError {
+  constructor(message) {
+    super(message, "SITE_CONTEXT_MISSING", 500);
+    this.name = "NpSiteContextMissingError";
+  }
+};
+
+export {
+  NpError,
+  NpForbiddenError,
+  NpNotFoundError,
+  NpValidationError,
+  NpAuthError,
+  NpConflictError,
+  NpRateLimitError,
+  NpSiteContextMissingError
+};
+//# sourceMappingURL=chunk-ZCINJSS4.js.map

package/dist/chunk-ZCINJSS4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Public error-code contract (#290).\n *\n * `NpError.code` is the machine-readable string the API surface\n * sends to clients (`response.error.code`). The moment a client\n * branches on `error.code === \"VALIDATION_ERROR\"` it becomes\n * part of the public contract — adding a typo'd code or\n * renaming an existing one breaks every integration.\n *\n * `NpErrorCode` is the union of every code the framework\n * currently emits. Adding a new code requires extending this\n * union deliberately — no more \"casual\" string adoption that\n * accumulates over a year of PRs.\n *\n * The `NpError` constructor still accepts plain `string` so\n * out-of-tree plugins that throw their own codes keep working;\n * internal code paths use the union to get IntelliSense and\n * catch typos at compile time. The `(string & {})` trick on\n * the public type keeps editor completion narrow without\n * locking the runtime contract.\n *\n * **Stability**: codes follow semver. Renames or removals are\n * major-bump only. New codes may land in minor versions. See\n * `docs/api-error-codes.md` for the catalogue an operator /\n * client team should rely on.\n */\nexport type NpErrorCode =\n  | \"FORBIDDEN\"\n  | \"NOT_FOUND\"\n  | \"VALIDATION_ERROR\"\n  | \"UNAUTHORIZED\"\n  | \"CONFLICT\"\n  | \"RATE_LIMITED\"\n  | \"TOO_MANY_REQUESTS\"\n  | \"INVALID_URL\"\n  | \"EMAIL_ADAPTER_MISSING_DEPENDENCY\"\n  | \"EMAIL_DELIVERY_FAILED\"\n  | \"SITE_CONTEXT_MISSING\"\n  | \"INTERNAL_ERROR\";\n\n/**\n * The constructor signature accepts the union *or* an arbitrary\n * string. Inside the codebase, passing a literal that isn't in\n * the union triggers a TypeScript error in strict editors\n * (autocompletion narrows to `NpErrorCode`). External plugins\n * authoring their own codes keep working — they just won't get\n * the autocomplete win.\n */\nexport type NpErrorCodeInput = NpErrorCode | (string & Record<never, never>);\n\nexport class NpError extends Error {\n  constructor(\n    message: string,\n    public readonly code: NpErrorCodeInput,\n    public readonly statusCode: number = 500,\n  ) {\n    super(message);\n    this.name = \"NpError\";\n  }\n}\n\nexport class NpForbiddenError extends NpError {\n  constructor(collection: string, operation: string) {\n    super(\n      `Access denied: ${operation} on ${collection}`,\n      \"FORBIDDEN\",\n      403,\n    );\n    this.name = \"NpForbiddenError\";\n  }\n}\n\nexport class NpNotFoundError extends NpError {\n  constructor(collection: string, id: string) {\n    super(\n      `Document not found: ${collection}/${id}`,\n      \"NOT_FOUND\",\n      404,\n    );\n    this.name = \"NpNotFoundError\";\n  }\n}\n\nexport class NpValidationError extends NpError {\n  constructor(\n    message: string,\n    public readonly errors: Array<{ field: string; message: string }>,\n  ) {\n    super(message, \"VALIDATION_ERROR\", 400);\n    this.name = \"NpValidationError\";\n  }\n}\n\nexport class NpAuthError extends NpError {\n  constructor(message: string = \"Unauthorized\") {\n    super(message, \"UNAUTHORIZED\", 401);\n    this.name = \"NpAuthError\";\n  }\n}\n\nexport class NpConflictError extends NpError {\n  constructor(message: string) {\n    super(message, \"CONFLICT\", 409);\n    this.name = \"NpConflictError\";\n  }\n}\n\n/**\n * Per-actor rate limit / quota exceeded. Distinct from\n * `NpValidationError` because the request shape was valid — the\n * server is rejecting it on policy grounds. The 429 status lets\n * client UIs recognize the case and surface a \"you've hit your\n * daily limit\" message rather than a generic validation error.\n */\nexport class NpRateLimitError extends NpError {\n  constructor(message: string) {\n    super(message, \"RATE_LIMITED\", 429);\n    this.name = \"NpRateLimitError\";\n  }\n}\n\n/**\n * No site context resolved when one was required (#272). Thrown\n * by `requireSiteId()` on write paths. 500 because this is a\n * server-side wiring bug — the user request was well-formed,\n * but the framework couldn't tell which tenant to write to.\n * Promoted from a plain `Error` to a real `NpError` subclass so\n * the API layer surfaces it as a uniform error envelope and\n * clients can branch on the stable `SITE_CONTEXT_MISSING` code.\n */\nexport class NpSiteContextMissingError extends NpError {\n  constructor(message: string) {\n    super(message, \"SITE_CONTEXT_MISSING\", 500);\n    this.name = \"NpSiteContextMissingError\";\n  }\n}\n"],"mappings":";AAkDO,IAAM,UAAN,cAAsB,MAAM;AAAA,EACjC,YACE,SACgB,MACA,aAAqB,KACrC;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;AAEO,IAAM,mBAAN,cAA+B,QAAQ;AAAA,EAC5C,YAAY,YAAoB,WAAmB;AACjD;AAAA,MACE,kBAAkB,SAAS,OAAO,UAAU;AAAA,MAC5C;AAAA,MACA;AAAA,IACF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,QAAQ;AAAA,EAC3C,YAAY,YAAoB,IAAY;AAC1C;AAAA,MACE,uBAAuB,UAAU,IAAI,EAAE;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,QAAQ;AAAA,EAC7C,YACE,SACgB,QAChB;AACA,UAAM,SAAS,oBAAoB,GAAG;AAFtB;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EAJkB;AAKpB;AAEO,IAAM,cAAN,cAA0B,QAAQ;AAAA,EACvC,YAAY,UAAkB,gBAAgB;AAC5C,UAAM,SAAS,gBAAgB,GAAG;AAClC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,QAAQ;AAAA,EAC3C,YAAY,SAAiB;AAC3B,UAAM,SAAS,YAAY,GAAG;AAC9B,SAAK,OAAO;AAAA,EACd;AACF;AASO,IAAM,mBAAN,cAA+B,QAAQ;AAAA,EAC5C,YAAY,SAAiB;AAC3B,UAAM,SAAS,gBAAgB,GAAG;AAClC,SAAK,OAAO;AAAA,EACd;AACF;AAWO,IAAM,4BAAN,cAAwC,QAAQ;AAAA,EACrD,YAAY,SAAiB;AAC3B,UAAM,SAAS,wBAAwB,GAAG;AAC1C,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}