@objectstack/types 17.0.0-rc.6 → 17.1.0

package/dist/index.mjs

@@ -136,10 +136,47 @@ function _resetEnvDeprecationWarnings() {
 
 // src/error-leak.ts
 var INTERNAL_ERROR_MESSAGE = "Internal server error";
+var DIALECT_LEAK_PHRASINGS = [
+  // Postgres 42P01 / 42703 (and, as a superstring, the `… of relation "…"`
+  // sub-object family: 42704 and friends). The quotes are required because
+  // Postgres always emits them here.
+  /\b(?:relation|column)\s+["'`][^"'`]+["'`]\s+does not exist/i,
+  // Postgres 42501. Restricted to physical object kinds: `schema`, `view`,
+  // `function` and `column` are all ObjectStack AUTHORING vocabulary, so a
+  // product message could legitimately use them and a miss is the cheap
+  // direction (the outcome is already a 5xx).
+  /\bpermission denied for (?:table|relation|sequence|database)\b/i,
+  // SQLite/libsql, message-only form. The `sqlite_` limb below catches these
+  // only when the driver prefixed its code; `better-sqlite3` and libsql both
+  // raise them bare, which is the shape measured across this repo.
+  /\bno such (?:table|column):/i,
+  // [#8739] MySQL/MariaDB ER_NO_SUCH_TABLE (1146): `Table 'app.t' doesn't
+  // exist`. Its own template, not a spelling of the Postgres one — MySQL
+  // contracts the verb and quotes `db.table` as a single identifier — so the
+  // `relation|column … does not exist` limb above cannot reach it. The quotes
+  // are required for the same reason they are there: the driver always emits
+  // them and prose about a table usually does not.
+  /\btable\s+["'`][^"'`]+["'`]\s+doesn't exist/i,
+  // [#8739] MySQL/MariaDB ER_BAD_FIELD_ERROR (1054): `Unknown column 'c' in
+  // 'field list'`. BOTH quoted parts are required. The second is MySQL's clause
+  // name — `field list`, `where clause`, `order clause`, `on clause` — and it
+  // is the half that makes this the driver's template rather than a sentence
+  // that merely calls a column unknown, which an import or mapping feature has
+  // every right to say.
+  /\bunknown column\s+["'`][^"'`]+["'`]\s+in\s+["'`][^"'`]+["'`]/i,
+  // [#8739] MySQL/MariaDB ER_DUP_ENTRY (1062): `Duplicate entry
+  // 'acme@example.com' for key 'crm_account.email'`. `for key` + a quoted index
+  // is the anchor; the VALUE half is matched loosely and lazily because it is
+  // the caller's own text and MySQL does not escape a quote inside it
+  // (`Duplicate entry 'O'Brien' for key 'i'` is a real shape). A bare
+  // `duplicate entry` with no `for key '…'` tail is not this template and is
+  // left alone.
+  /\bduplicate entry\s+["'`].*?["'`]\s+for key\s+["'`][^"'`]+["'`]/i
+];
 function looksLikeInternalErrorLeak(message) {
   if (!message) return false;
   const lower = String(message).toLowerCase();
-  return lower.includes("sqlite_") || lower.includes("sqlstate") || lower.startsWith("insert into ") || lower.startsWith("update ") || lower.startsWith("select ") || lower.startsWith("delete from ") || lower.includes("constraint failed") || lower.includes("unique constraint") || lower.includes("foreign key");
+  return lower.includes("sqlite_") || lower.includes("sqlstate") || lower.startsWith("insert into ") || lower.startsWith("update ") || lower.startsWith("select ") || lower.startsWith("delete from ") || lower.includes("constraint failed") || lower.includes("unique constraint") || lower.includes("foreign key") || DIALECT_LEAK_PHRASINGS.some((pattern) => pattern.test(lower));
 }
 function declaresServerFault(err) {
   if (typeof err !== "object" || err === null) return false;
@@ -224,6 +261,71 @@ function sendError(res, status, code, message, extra) {
   res.status(status).json({ success: false, error: { code, message, ...extra } });
 }
 
+// src/thrown-http-error.ts
+import { ErrorCode, standardErrorCodeForHttpStatus } from "@objectstack/spec/api";
+
+// src/validation-failure.ts
+import { zodIssuesToFields } from "@objectstack/spec/api";
+var VALIDATION_FAILED_STATUS = 400;
+function validationFailureDetails(err) {
+  if (!err) return void 0;
+  if (err.code !== "VALIDATION_FAILED" && err.name !== "ValidationError") return void 0;
+  return {
+    code: "VALIDATION_FAILED",
+    fields: Array.isArray(err.fields) ? err.fields : []
+  };
+}
+function validationFailure(message, fields) {
+  const err = new Error(message);
+  err.name = "ValidationError";
+  err.code = "VALIDATION_FAILED";
+  err.fields = fields;
+  return err;
+}
+function fieldsFromZodIssues(issues, ...input) {
+  return zodIssuesToFields(issues, ...input).map(
+    (entry) => entry.field === "" ? { ...entry, field: "(body)" } : entry
+  );
+}
+
+// src/thrown-http-error.ts
+function resolveThrownHttpError(error, fallbackStatus = 500) {
+  const e = error;
+  const validation = validationFailureDetails(e);
+  const declaredStatus = typeof e?.status === "number" ? e.status : typeof e?.statusCode === "number" ? e.statusCode : validation ? VALIDATION_FAILED_STATUS : void 0;
+  const status = declaredStatus ?? fallbackStatus;
+  const spelled = typeof e?.code === "string" && e.code !== "" ? e.code : void 0;
+  const registered = spelled !== void 0 && ErrorCode.safeParse(spelled).success ? spelled : void 0;
+  const code = validation ? validation.code : registered ?? standardErrorCodeForHttpStatus(status);
+  const declaredCode = validation ? validation.code : spelled;
+  const issues = Array.isArray(e?.issues) ? e.issues : void 0;
+  const details = {
+    // A truthy NON-string `code` (a driver errno, say) is context and stays
+    // context — promoting it would put a number in the field callers branch on,
+    // which is the drift #3842 removed.
+    ...!validation && e?.code && typeof e.code !== "string" ? { code: e.code } : {},
+    ...issues ? { issues } : {},
+    ...validation ? { fields: validation.fields } : {}
+  };
+  const userMessage = declaredUserMessage(error);
+  return {
+    status,
+    ...declaredStatus !== void 0 ? { declaredStatus } : {},
+    code,
+    ...declaredCode !== void 0 ? { declaredCode } : {},
+    message: typeof e?.message === "string" ? e.message : String(error),
+    ...userMessage !== void 0 ? { userMessage } : {},
+    ...Object.keys(details).length > 0 ? { details } : {}
+  };
+}
+function declaredUserMessage(error) {
+  const declared = error?.userMessage;
+  return typeof declared === "string" && declared.trim().length > 0 ? declared : void 0;
+}
+function demotedDeclaredCode(thrown) {
+  return thrown.declaredCode !== void 0 && thrown.declaredCode !== thrown.code ? thrown.declaredCode : void 0;
+}
+
 // src/relation-sub-object.ts
 function matchMissingColumnOfRelation(message) {
   return MISSING_COLUMN_OF_RELATION.exec(message)?.[1];
@@ -238,7 +340,7 @@ var RELATION_SUB_OBJECT = /["'`][^"'`]+["'`]\s+of relation\s/i;
 var UNIQUE_VIOLATION = {
   codes: /* @__PURE__ */ new Set(["23505", "ER_DUP_ENTRY", "SQLITE_CONSTRAINT_UNIQUE"]),
   errnos: /* @__PURE__ */ new Set([1062]),
-  message: /unique constraint|unique violation|duplicate key|duplicate entry/i
+  message: /unique constraint failed|violates unique constraint|unique violation|duplicate key|duplicate entry/i
 };
 var MAX_CAUSE_DEPTH = 4;
 function isUniqueViolationError(error) {
@@ -300,6 +402,23 @@ function uniqueViolationColumn(error) {
   return findUniqueViolationColumn(error, 0);
 }
 
+// src/unbacked-conflict-target.ts
+var UNBACKED_CONFLICT_TARGET = {
+  message: /ON CONFLICT clause does not match any PRIMARY KEY or UNIQUE constraint|there is no unique or exclusion constraint matching the ON CONFLICT specification/i
+};
+var MAX_CAUSE_DEPTH2 = 4;
+function isUnbackedConflictTargetError(error) {
+  return matchesUnbackedConflictTarget(error, 0);
+}
+function matchesUnbackedConflictTarget(error, depth) {
+  if (error === null || error === void 0 || depth > MAX_CAUSE_DEPTH2) return false;
+  if (typeof error === "string") return UNBACKED_CONFLICT_TARGET.message.test(error);
+  if (typeof error !== "object") return false;
+  const err = error;
+  if (typeof err.message === "string" && UNBACKED_CONFLICT_TARGET.message.test(err.message)) return true;
+  return matchesUnbackedConflictTarget(err.cause, depth + 1);
+}
+
 // src/unique-scope-install-gate.ts
 import { normalizeTenancyPosture as normalizeTenancyPosture2 } from "@objectstack/spec/security";
 var SYS_OBJECT_PREFIXES = ["sys_", "base_"];
@@ -401,20 +520,25 @@ export {
   GLOBAL_UNIQUE_CONFIRMATION_REQUIRED,
   GLOBAL_UNIQUE_ISOLATED_PRESCRIPTION,
   INTERNAL_ERROR_MESSAGE,
+  VALIDATION_FAILED_STATUS,
   _resetEnvDeprecationWarnings,
   buildGlobalUniqueStopMessage,
   collectConfiguredLocales,
   collectGlobalUniques,
   declaredIndexUniqueIsGlobal,
+  declaredUserMessage,
   declaresServerFault,
+  demotedDeclaredCode,
   describeGlobalUniqueFinding,
   emitDegradedBootBanner,
   fieldUniqueIsGlobal,
+  fieldsFromZodIssues,
   globalUniqueFindingId,
   isMcpServerEnabled,
   isModuleNotFoundError,
   isPlatformOwnedObject,
   isRelationSubObjectPhrase,
+  isUnbackedConflictTargetError,
   isUniqueViolationError,
   keysetWalk,
   looksLikeInternalErrorLeak,
@@ -431,10 +555,13 @@ export {
   resolveSandboxTimeoutMs,
   resolveSearchPinyinEnabled,
   resolveTenancyPosture,
+  resolveThrownHttpError,
   sendError,
   sendOk,
   stampSearchPinyinEnabled,
   unconfirmedGlobalUniques,
-  uniqueViolationColumn
+  uniqueViolationColumn,
+  validationFailure,
+  validationFailureDetails
 };
 //# sourceMappingURL=index.mjs.map