@nextlyhq/storage-vercel-blob 0.0.2-alpha.65 → 0.0.2-alpha.67

package/dist/index.mjs

@@ -2,7 +2,7 @@ import { put, del, head, BlobNotFoundError, list } from '@vercel/blob';
 
 // src/adapter.ts
 
-// ../nextly/dist/chunk-HJ5IQPOY.mjs
+// ../nextly/dist/chunk-UF2PDDU4.mjs
 function isDbError(err) {
   if (!err || typeof err !== "object") return false;
   const obj = err;
@@ -15,9 +15,18 @@ var NEXTLY_ERROR_STATUS = {
   AUTH_INVALID_CREDENTIALS: 401,
   TOKEN_EXPIRED: 401,
   FORBIDDEN: 403,
+  // The password was right and the address is unverified. Distinct from
+  // AUTH_INVALID_CREDENTIALS so the login page can offer to resend the link;
+  // only a caller who proved the password ever receives it.
+  EMAIL_NOT_VERIFIED: 403,
   // The schema builder is off in this environment (production by default).
   // Separate from FORBIDDEN: the caller's permissions are not the problem.
   BUILDER_DISABLED: 403,
+  // A cookie-authenticated write whose origin or CSRF token did not check
+  // out. Separate from FORBIDDEN for the same reason: the caller may hold
+  // every permission, and a client can recover by reloading, not by asking
+  // an administrator for access.
+  CSRF_FAILED: 403,
   NOT_FOUND: 404,
   CONFLICT: 409,
   DUPLICATE: 409,
@@ -77,20 +86,33 @@ var NEXTLY_ERROR_STATUS = {
   NEXTLY_CORE_DESTRUCTIVE_REFUSED: 409,
   NEXTLY_MIGRATION_DRIFT: 409,
   NEXTLY_MIGRATION_APPLY_FAILED: 500,
-  // Plan C3 — migrate:resolve recovery command.
+  // A SQLite migration unit would leave a row referencing a row that does
+  // not exist, or could not switch foreign-key enforcement off to run.
+  NEXTLY_MIGRATION_FOREIGN_KEY_VIOLATION: 409,
+  // A migration unit marked to run outside a transaction failed part-way;
+  // the statements before the failing one stayed applied.
+  NEXTLY_MIGRATION_PARTIALLY_APPLIED: 500,
+  // Another run recorded the same migration applied, or rolled back, while
+  // this one was running it: this run's ledger write lost, and its work is
+  // rolled back wherever the transaction can undo it.
+  NEXTLY_MIGRATION_CONCURRENT_RUN: 409,
+  // `nextly migrate:resolve`, the recovery command.
   NEXTLY_MIGRATION_FILE_MISSING: 404,
   NEXTLY_MIGRATION_SNAPSHOT_MISSING: 404,
   NEXTLY_MIGRATION_RESOLVE_DRIFT: 409,
   NEXTLY_MIGRATION_RESOLVE_PRECONDITION: 409,
-  // Plan D — UI schema support.
+  // The Builder's UI schema.
   NEXTLY_UI_SCHEMA_INVALID: 400,
   NEXTLY_SCHEMA_SLUG_COLLISION: 409,
   NEXTLY_SCHEMA_RELATION_TARGET_MISSING: 400,
-  // Plugin platform (P2b) — schema extend (contributes.extend) + relations (D15).
+  // A declared table's relation names a table or column the registry does
+  // not have once every table is registered.
+  NEXTLY_SCHEMA_RELATION_UNRESOLVED: 400,
+  // Plugin schema: `contributes.extend` and relations.
   NEXTLY_SCHEMA_EXTEND_TARGET_UNKNOWN: 400,
   NEXTLY_SCHEMA_EXTEND_FIELD_DUPLICATE: 409,
   NEXTLY_SCHEMA_CROSS_PLUGIN_RELATION: 409,
-  // Plugin platform (P2c) — framework remap (.rename()).
+  // Plugin schema: the framework remap (`.rename()`).
   NEXTLY_SCHEMA_RENAME_UNKNOWN_TARGET: 400,
   // Plugin platform — a declared admin.clientConfig that cannot be delivered
   // to the browser, refused at boot rather than serialized mangled.
@@ -100,11 +122,56 @@ var NEXTLY_ERROR_STATUS = {
   // `/api/admin-meta/workspace` payload: a value `JSON.stringify` throws on
   // fails that request for every admin, not just the widget's own card.
   NEXTLY_PLUGIN_ADMIN_WIDGET_INVALID: 500,
+  // A plugin's document view cannot be routed: a malformed or reserved path,
+  // or one two declarations claim on the same document. Refused at boot.
+  NEXTLY_PLUGIN_DOCUMENT_VIEW_INVALID: 500,
   // Plugin platform (P0) — boot-time plugin dependency/version resolution.
   PLUGIN_RESOLUTION_ERROR: 500,
+  // Plugin schema lifecycle. All 409: each is a state
+  // the database and the config disagree about, which retrying cannot change
+  // and an operator command resolves.
+  PLUGIN_DEPENDENCY_NOT_INSTALLED: 409,
+  PLUGIN_HAS_DEPENDENTS: 409,
+  PLUGIN_UNINSTALL_IRREVERSIBLE: 409,
+  // A full uninstall that would drop tables, run without `--yes`.
+  PLUGIN_UNINSTALL_UNCONFIRMED: 409,
+  PLUGIN_SCHEMA_BEHIND: 409,
+  PLUGIN_SCHEMA_UNINSTALLED: 409,
+  // A configured plugin `nextly plugins install` has not recorded as
+  // installed, refused at a production boot.
+  PLUGIN_NOT_INSTALLED: 409,
+  PLUGIN_DISABLED: 409,
+  // An uninstall that began and did not finish: refused at boot, and when
+  // run again the other way (with or without `--keep-data`).
+  PLUGIN_UNINSTALL_UNFINISHED: 409,
+  PLUGIN_SCHEMA_VERSION_NOT_ADVANCED: 409,
+  // A generated plugin migration that would drop a table or column the
+  // plugin's earlier modules created: a rename comes out as a drop and an add.
+  PLUGIN_MIGRATION_DROPS_CREATED_SCHEMA: 409,
+  // A generated plugin migration that would add a NOT NULL column with no
+  // default to a table its earlier modules created: existing rows have no
+  // value for it.
+  PLUGIN_MIGRATION_ADDS_UNFILLABLE_COLUMN: 409,
+  // A plugin migration that changes the schema on a dialect with no
+  // statements for it: its author's SQL was never written.
+  PLUGIN_MIGRATION_SQL_MISSING: 409,
+  PLUGIN_MIGRATIONS_UNAVAILABLE: 409,
+  // A migration would drop or rename a table or column another owner holds
+  // (or, for a plugin, a table no owner row claims), or names a drop target
+  // the guard cannot read — refused for the same reason.
+  DROP_OF_FOREIGN_TABLE: 409,
+  // A plugin migration module whose content no longer matches its checksum.
+  MIGRATION_CHECKSUM_MISMATCH: 409,
   // Plugin platform (P4) — contributes.routes collection (D25).
   NEXTLY_ROUTE_COLLISION: 409,
   NEXTLY_ROUTE_INVALID_PATH: 400,
+  // A root-mounted route declared where the request pipeline never reaches the
+  // root pass. 400 like an invalid path and not 409: nothing else claims the
+  // address, the declaration simply cannot be served from there.
+  NEXTLY_ROUTE_UNREACHABLE_ROOT: 400,
+  // A `mount` outside the declared union, which only an untyped caller can
+  // produce. 400 for the same reason: the declaration itself is unserveable.
+  NEXTLY_ROUTE_INVALID_MOUNT: 400,
   // An email transport whose library is an optional peer dependency the host
   // has not installed. 503 rather than 500: the request is not malformed and
   // nothing is broken, the install simply cannot carry it out yet, and the
@@ -114,7 +181,16 @@ var NEXTLY_ERROR_STATUS = {
   // has not installed. 503 rather than 500 for the same reason as the mail
   // transport above: nothing is broken and the request is not malformed, the
   // install simply cannot carry it out until one command is run.
-  NEXTLY_CONFIG_TOOLING_UNAVAILABLE: 503
+  NEXTLY_CONFIG_TOOLING_UNAVAILABLE: 503,
+  // `db.postgres.schema` names one schema and the adapter the application
+  // supplied writes to another. 500 like the other boot-time configuration
+  // refusals: no request caused it, and the fix is a change to the server's
+  // own configuration.
+  NEXTLY_POSTGRES_SCHEMA_MISMATCH: 500,
+  // `db.postgres.schema` names a schema other than `public`, which the schema
+  // push cannot yet create tables in. 500 for the same reason as the mismatch
+  // above: a boot-time refusal of the server's own configuration.
+  NEXTLY_POSTGRES_SCHEMA_UNSUPPORTED: 500
 };
 var CANONICAL_CODE_FOR_STATUS = [
   "VALIDATION_ERROR",
@@ -267,6 +343,20 @@ var NextlyError = class _NextlyError extends Error {
       logContext: opts?.logContext
     });
   }
+  /**
+   * The password was correct and the address is unverified. Thrown only once
+   * the password is proven, so only someone who holds it learns the address
+   * is unverified; every other refusal stays
+   * {@link NextlyError.invalidCredentials}.
+   */
+  static emailNotVerified(opts) {
+    return new _NextlyError({
+      code: "EMAIL_NOT_VERIFIED",
+      publicMessage: "Verify your email address to sign in. Check your inbox for the link.",
+      logMessage: "Login refused: email not verified",
+      logContext: opts?.logContext
+    });
+  }
   static authRequired(opts) {
     return new _NextlyError({
       code: "AUTH_REQUIRED",
@@ -304,6 +394,19 @@ var NextlyError = class _NextlyError extends Error {
       logContext: opts?.logContext
     });
   }
+  /**
+   * A cookie-authenticated write refused because its origin or CSRF token did
+   * not check out. The public message names no detail of which check failed;
+   * that goes to the log through `logMessage`.
+   */
+  static csrfFailed(opts) {
+    return new _NextlyError({
+      code: "CSRF_FAILED",
+      publicMessage: "This request could not be verified. Reload the page and try again.",
+      logMessage: opts?.logMessage,
+      logContext: opts?.logContext
+    });
+  }
   /**
    * A call the caller got wrong, where naming the mistake IS the value of the
    * error.
@@ -442,7 +545,7 @@ var NextlyError = class _NextlyError extends Error {
   }
 };
 
-// ../nextly/dist/chunk-W77AQUUQ.mjs
+// ../nextly/dist/chunk-V6N5XUUA.mjs
 var StorageReadTooLargeError = class extends NextlyError {
   constructor(path, maxBytes, size) {
     super({
@@ -460,7 +563,20 @@ var StorageReadTooLargeError = class extends NextlyError {
   }
 };
 
-// ../nextly/dist/chunk-C2VHLQKK.mjs
+// ../nextly/dist/chunk-FLULBGQB.mjs
+function ipv4ToInt(ip) {
+  const parts = ip.split(".");
+  if (parts.length !== 4) return null;
+  let acc = 0;
+  for (const p of parts) {
+    const n = Number(p);
+    if (!Number.isInteger(n) || n < 0 || n > 255) return null;
+    acc = acc << 8 | n;
+  }
+  return acc >>> 0;
+}
+
+// ../nextly/dist/chunk-FKT4HLI3.mjs
 var IPV4_RE = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
 var PRIVATE_IPV4_CIDRS = [
   "0.0.0.0/8",
@@ -846,17 +962,6 @@ function errorCode(err) {
   }
   return void 0;
 }
-function ipv4ToInt(ip) {
-  const parts = ip.split(".");
-  if (parts.length !== 4) return null;
-  let acc = 0;
-  for (const p of parts) {
-    const n = Number(p);
-    if (!Number.isInteger(n) || n < 0 || n > 255) return null;
-    acc = acc << 8 | n;
-  }
-  return acc >>> 0;
-}
 function isIpv4InCidr(intIp, cidr) {
   const [addr, prefixRaw] = cidr.split("/");
   const intCidr = ipv4ToInt(addr);