@objectstack/types 17.0.0-rc.5 → 17.0.0

package/dist/index.js

@@ -23,6 +23,7 @@ __export(index_exports, {
   GLOBAL_UNIQUE_CONFIRMATION_REQUIRED: () => GLOBAL_UNIQUE_CONFIRMATION_REQUIRED,
   GLOBAL_UNIQUE_ISOLATED_PRESCRIPTION: () => GLOBAL_UNIQUE_ISOLATED_PRESCRIPTION,
   INTERNAL_ERROR_MESSAGE: () => INTERNAL_ERROR_MESSAGE,
+  VALIDATION_FAILED_STATUS: () => VALIDATION_FAILED_STATUS,
   _resetEnvDeprecationWarnings: () => _resetEnvDeprecationWarnings,
   buildGlobalUniqueStopMessage: () => buildGlobalUniqueStopMessage,
   collectConfiguredLocales: () => collectConfiguredLocales,
@@ -32,12 +33,17 @@ __export(index_exports, {
   describeGlobalUniqueFinding: () => describeGlobalUniqueFinding,
   emitDegradedBootBanner: () => emitDegradedBootBanner,
   fieldUniqueIsGlobal: () => fieldUniqueIsGlobal,
+  fieldsFromZodIssues: () => fieldsFromZodIssues,
   globalUniqueFindingId: () => globalUniqueFindingId,
   isMcpServerEnabled: () => isMcpServerEnabled,
   isModuleNotFoundError: () => isModuleNotFoundError,
   isPlatformOwnedObject: () => isPlatformOwnedObject,
+  isRelationSubObjectPhrase: () => isRelationSubObjectPhrase,
+  isUnbackedConflictTargetError: () => isUnbackedConflictTargetError,
+  isUniqueViolationError: () => isUniqueViolationError,
   keysetWalk: () => keysetWalk,
   looksLikeInternalErrorLeak: () => looksLikeInternalErrorLeak,
+  matchMissingColumnOfRelation: () => matchMissingColumnOfRelation,
   postureGatesGlobalUniques: () => postureGatesGlobalUniques,
   readEnvWithDeprecation: () => readEnvWithDeprecation,
   recordGlobalUniqueAttestation: () => recordGlobalUniqueAttestation,
@@ -50,10 +56,14 @@ __export(index_exports, {
   resolveSandboxTimeoutMs: () => resolveSandboxTimeoutMs,
   resolveSearchPinyinEnabled: () => resolveSearchPinyinEnabled,
   resolveTenancyPosture: () => resolveTenancyPosture,
+  resolveThrownHttpError: () => resolveThrownHttpError,
   sendError: () => sendError,
   sendOk: () => sendOk,
   stampSearchPinyinEnabled: () => stampSearchPinyinEnabled,
-  unconfirmedGlobalUniques: () => unconfirmedGlobalUniques
+  unconfirmedGlobalUniques: () => unconfirmedGlobalUniques,
+  uniqueViolationColumn: () => uniqueViolationColumn,
+  validationFailure: () => validationFailure,
+  validationFailureDetails: () => validationFailureDetails
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -192,10 +202,25 @@ function _resetEnvDeprecationWarnings() {
 
 // src/error-leak.ts
 var INTERNAL_ERROR_MESSAGE = "Internal server error";
+var DIALECT_LEAK_PHRASINGS = [
+  // Postgres 42P01 / 42703 (and, as a superstring, the `… of relation "…"`
+  // sub-object family: 42704 and friends). The quotes are required because
+  // Postgres always emits them here.
+  /\b(?:relation|column)\s+["'`][^"'`]+["'`]\s+does not exist/i,
+  // Postgres 42501. Restricted to physical object kinds: `schema`, `view`,
+  // `function` and `column` are all ObjectStack AUTHORING vocabulary, so a
+  // product message could legitimately use them and a miss is the cheap
+  // direction (the outcome is already a 5xx).
+  /\bpermission denied for (?:table|relation|sequence|database)\b/i,
+  // SQLite/libsql, message-only form. The `sqlite_` limb below catches these
+  // only when the driver prefixed its code; `better-sqlite3` and libsql both
+  // raise them bare, which is the shape measured across this repo.
+  /\bno such (?:table|column):/i
+];
 function looksLikeInternalErrorLeak(message) {
   if (!message) return false;
   const lower = String(message).toLowerCase();
-  return lower.includes("sqlite_") || lower.includes("sqlstate") || lower.startsWith("insert into ") || lower.startsWith("update ") || lower.startsWith("select ") || lower.startsWith("delete from ") || lower.includes("constraint failed") || lower.includes("unique constraint") || lower.includes("foreign key");
+  return lower.includes("sqlite_") || lower.includes("sqlstate") || lower.startsWith("insert into ") || lower.startsWith("update ") || lower.startsWith("select ") || lower.startsWith("delete from ") || lower.includes("constraint failed") || lower.includes("unique constraint") || lower.includes("foreign key") || DIALECT_LEAK_PHRASINGS.some((pattern) => pattern.test(lower));
 }
 function declaresServerFault(err) {
   if (typeof err !== "object" || err === null) return false;
@@ -280,6 +305,155 @@ function sendError(res, status, code, message, extra) {
   res.status(status).json({ success: false, error: { code, message, ...extra } });
 }
 
+// src/thrown-http-error.ts
+var import_api2 = require("@objectstack/spec/api");
+
+// src/validation-failure.ts
+var import_api = require("@objectstack/spec/api");
+var VALIDATION_FAILED_STATUS = 400;
+function validationFailureDetails(err) {
+  if (!err) return void 0;
+  if (err.code !== "VALIDATION_FAILED" && err.name !== "ValidationError") return void 0;
+  return {
+    code: "VALIDATION_FAILED",
+    fields: Array.isArray(err.fields) ? err.fields : []
+  };
+}
+function validationFailure(message, fields) {
+  const err = new Error(message);
+  err.name = "ValidationError";
+  err.code = "VALIDATION_FAILED";
+  err.fields = fields;
+  return err;
+}
+function fieldsFromZodIssues(issues, ...input) {
+  return (0, import_api.zodIssuesToFields)(issues, ...input).map(
+    (entry) => entry.field === "" ? { ...entry, field: "(body)" } : entry
+  );
+}
+
+// src/thrown-http-error.ts
+function resolveThrownHttpError(error, fallbackStatus = 500) {
+  const e = error;
+  const validation = validationFailureDetails(e);
+  const declaredStatus = typeof e?.status === "number" ? e.status : typeof e?.statusCode === "number" ? e.statusCode : validation ? VALIDATION_FAILED_STATUS : void 0;
+  const status = declaredStatus ?? fallbackStatus;
+  const spelled = typeof e?.code === "string" && e.code !== "" ? e.code : void 0;
+  const registered = spelled !== void 0 && import_api2.ErrorCode.safeParse(spelled).success ? spelled : void 0;
+  const code = validation ? validation.code : registered ?? (0, import_api2.standardErrorCodeForHttpStatus)(status);
+  const declaredCode = validation ? validation.code : spelled;
+  const issues = Array.isArray(e?.issues) ? e.issues : void 0;
+  const details = {
+    // A truthy NON-string `code` (a driver errno, say) is context and stays
+    // context — promoting it would put a number in the field callers branch on,
+    // which is the drift #3842 removed.
+    ...!validation && e?.code && typeof e.code !== "string" ? { code: e.code } : {},
+    ...issues ? { issues } : {},
+    ...validation ? { fields: validation.fields } : {}
+  };
+  return {
+    status,
+    ...declaredStatus !== void 0 ? { declaredStatus } : {},
+    code,
+    ...declaredCode !== void 0 ? { declaredCode } : {},
+    message: typeof e?.message === "string" ? e.message : String(error),
+    ...Object.keys(details).length > 0 ? { details } : {}
+  };
+}
+
+// src/relation-sub-object.ts
+function matchMissingColumnOfRelation(message) {
+  return MISSING_COLUMN_OF_RELATION.exec(message)?.[1];
+}
+function isRelationSubObjectPhrase(message) {
+  return RELATION_SUB_OBJECT.test(message);
+}
+var MISSING_COLUMN_OF_RELATION = /column\s+["'`]([a-z0-9_]+)["'`]\s+of relation\s+\S+\s+does not exist/i;
+var RELATION_SUB_OBJECT = /["'`][^"'`]+["'`]\s+of relation\s/i;
+
+// src/unique-violation.ts
+var UNIQUE_VIOLATION = {
+  codes: /* @__PURE__ */ new Set(["23505", "ER_DUP_ENTRY", "SQLITE_CONSTRAINT_UNIQUE"]),
+  errnos: /* @__PURE__ */ new Set([1062]),
+  message: /unique constraint|unique violation|duplicate key|duplicate entry/i
+};
+var MAX_CAUSE_DEPTH = 4;
+function isUniqueViolationError(error) {
+  return matchesUniqueViolation(error, 0);
+}
+function matchesUniqueViolation(error, depth) {
+  if (error === null || error === void 0 || depth > MAX_CAUSE_DEPTH) return false;
+  if (typeof error === "string") return UNIQUE_VIOLATION.message.test(error);
+  if (typeof error !== "object") return false;
+  const err = error;
+  if (typeof err.code === "string" && UNIQUE_VIOLATION.codes.has(err.code)) return true;
+  if (typeof err.code === "number" && UNIQUE_VIOLATION.errnos.has(err.code)) return true;
+  if (typeof err.errno === "number" && UNIQUE_VIOLATION.errnos.has(err.errno)) return true;
+  if (typeof err.message === "string" && UNIQUE_VIOLATION.message.test(err.message)) return true;
+  return matchesUniqueViolation(err.cause, depth + 1);
+}
+var SQLITE_TARGETS = /unique constraint failed:\s*([^\n]*)/i;
+var POSTGRES_DETAIL_TARGETS = /\bkey \(([^)]+)\)=\(/i;
+var SQLITE_INDEX_FORM = /^index\b/i;
+var PLAIN_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_$]*$/;
+function bareIdentifier(raw) {
+  const stripped = raw.trim().replace(/[`"'[\]]/g, "");
+  const dot = stripped.lastIndexOf(".");
+  return dot >= 0 ? stripped.slice(dot + 1) : stripped;
+}
+function soleColumn(targets) {
+  const names = targets.split(",").map(bareIdentifier);
+  if (names.length !== 1) return void 0;
+  const [name] = names;
+  return PLAIN_IDENTIFIER.test(name) ? name : void 0;
+}
+function columnFromText(text) {
+  const sqlite = SQLITE_TARGETS.exec(text);
+  if (sqlite) {
+    const targets = sqlite[1].trim();
+    return SQLITE_INDEX_FORM.test(targets) ? void 0 : soleColumn(targets);
+  }
+  const postgres = POSTGRES_DETAIL_TARGETS.exec(text);
+  if (postgres) return soleColumn(postgres[1]);
+  return void 0;
+}
+function findUniqueViolationColumn(error, depth) {
+  if (error === null || error === void 0 || depth > MAX_CAUSE_DEPTH) return void 0;
+  if (typeof error === "string") return columnFromText(error);
+  if (typeof error !== "object") return void 0;
+  const err = error;
+  if (typeof err.message === "string") {
+    const fromMessage = columnFromText(err.message);
+    if (fromMessage !== void 0) return fromMessage;
+  }
+  if (typeof err.detail === "string") {
+    const fromDetail = columnFromText(err.detail);
+    if (fromDetail !== void 0) return fromDetail;
+  }
+  return findUniqueViolationColumn(err.cause, depth + 1);
+}
+function uniqueViolationColumn(error) {
+  if (!isUniqueViolationError(error)) return void 0;
+  return findUniqueViolationColumn(error, 0);
+}
+
+// src/unbacked-conflict-target.ts
+var UNBACKED_CONFLICT_TARGET = {
+  message: /ON CONFLICT clause does not match any PRIMARY KEY or UNIQUE constraint|there is no unique or exclusion constraint matching the ON CONFLICT specification/i
+};
+var MAX_CAUSE_DEPTH2 = 4;
+function isUnbackedConflictTargetError(error) {
+  return matchesUnbackedConflictTarget(error, 0);
+}
+function matchesUnbackedConflictTarget(error, depth) {
+  if (error === null || error === void 0 || depth > MAX_CAUSE_DEPTH2) return false;
+  if (typeof error === "string") return UNBACKED_CONFLICT_TARGET.message.test(error);
+  if (typeof error !== "object") return false;
+  const err = error;
+  if (typeof err.message === "string" && UNBACKED_CONFLICT_TARGET.message.test(err.message)) return true;
+  return matchesUnbackedConflictTarget(err.cause, depth + 1);
+}
+
 // src/unique-scope-install-gate.ts
 var import_security2 = require("@objectstack/spec/security");
 var SYS_OBJECT_PREFIXES = ["sys_", "base_"];
@@ -382,6 +556,7 @@ function postureGatesGlobalUniques(posture) {
   GLOBAL_UNIQUE_CONFIRMATION_REQUIRED,
   GLOBAL_UNIQUE_ISOLATED_PRESCRIPTION,
   INTERNAL_ERROR_MESSAGE,
+  VALIDATION_FAILED_STATUS,
   _resetEnvDeprecationWarnings,
   buildGlobalUniqueStopMessage,
   collectConfiguredLocales,
@@ -391,12 +566,17 @@ function postureGatesGlobalUniques(posture) {
   describeGlobalUniqueFinding,
   emitDegradedBootBanner,
   fieldUniqueIsGlobal,
+  fieldsFromZodIssues,
   globalUniqueFindingId,
   isMcpServerEnabled,
   isModuleNotFoundError,
   isPlatformOwnedObject,
+  isRelationSubObjectPhrase,
+  isUnbackedConflictTargetError,
+  isUniqueViolationError,
   keysetWalk,
   looksLikeInternalErrorLeak,
+  matchMissingColumnOfRelation,
   postureGatesGlobalUniques,
   readEnvWithDeprecation,
   recordGlobalUniqueAttestation,
@@ -409,9 +589,13 @@ function postureGatesGlobalUniques(posture) {
   resolveSandboxTimeoutMs,
   resolveSearchPinyinEnabled,
   resolveTenancyPosture,
+  resolveThrownHttpError,
   sendError,
   sendOk,
   stampSearchPinyinEnabled,
-  unconfirmedGlobalUniques
+  unconfirmedGlobalUniques,
+  uniqueViolationColumn,
+  validationFailure,
+  validationFailureDetails
 });
 //# sourceMappingURL=index.js.map