@porulle/core 0.63.0 → 0.65.0

package/dist/interfaces/rest/routes/catalog.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { listEntitiesRoute, getEntityRoute, getEntityAttributesRoute, listFieldOwnershipRoute, setFieldOwnershipRoute, listCategoriesRoute, listBrandsRoute, deleteEntityRoute, deleteCategoryRoute, deleteBrandRoute, removeEntityFromCategoryRoute, removeEntityFromBrandRoute, publishEntityRoute, archiveEntityRoute, discontinueEntityRoute, addEntityToCategoryRoute, addEntityToBrandRoute, createEntityRoute, updateEntityRoute, setEntityAttributesRoute, approveCustomFieldRoute, rejectCustomFieldRoute, createCategoryRoute, archiveCategoryRoute, restoreCategoryRoute, updateCategoryRoute, createBrandRoute, updateBrandRoute, createOptionTypeRoute, createOptionValueRoute, createVariantRoute, generateVariantsRoute, quickVariantRoute, bulkVariantsRoute, } from "../schemas/catalog.js";
-import { mapErrorToResponse, mapErrorToStatus, parseInclude, parsePagination, parseSort, requirePerm, } from "../utils.js";
+import { errorBody, mapErrorToStatus, parseInclude, parsePagination, parseSort, requirePerm, } from "../utils.js";
 export function catalogRoutes(kernel) {
     const router = new OpenAPIHono();
     router.use("/entities/*", requirePerm("catalog:read"));
@@ -17,7 +17,7 @@ export function catalogRoutes(kernel) {
     router.openapi(listFieldOwnershipRoute, async (c) => {
         const result = await kernel.services.catalog.listFieldOwnership(c.req.param("id"), c.get("actor"), undefined, c.req.query("storeId"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: result.value });
     });
@@ -26,7 +26,7 @@ export function catalogRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.catalog.setFieldOwner(c.req.param("id"), body.fieldPath, body.storeId ?? null, body.owner, c.get("actor"), undefined, body.variantId ?? null);
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: { updated: true } });
     });
@@ -57,7 +57,7 @@ export function catalogRoutes(kernel) {
                 payload.sort = sort;
             const result = await kernel.services.catalog.list(payload, c.get("actor"));
             if (!result.ok) {
-                return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+                return c.json(errorBody(result.error), mapErrorToStatus(result.error));
             }
             let withIncludes = result.value.items;
             if (include.size > 0) {
@@ -87,7 +87,7 @@ export function catalogRoutes(kernel) {
         }
         catch (error) {
             console.error("[catalog] List failed:", error instanceof Error ? error.message : error);
-            return c.json(mapErrorToResponse(error), mapErrorToStatus(error));
+            return c.json(errorBody(error), mapErrorToStatus(error));
         }
     });
     // @ts-expect-error -- openapi handler union return type
@@ -112,20 +112,20 @@ export function catalogRoutes(kernel) {
                 ? await kernel.services.catalog.getById(idOrSlug, includeOptions, actor)
                 : await kernel.services.catalog.getBySlug(idOrSlug, includeOptions, actor);
             if (!result.ok) {
-                return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+                return c.json(errorBody(result.error), mapErrorToStatus(result.error));
             }
             return c.json({ data: result.value });
         }
         catch (error) {
             console.error("[catalog] Get entity failed:", error instanceof Error ? error.message : error);
-            return c.json(mapErrorToResponse(error), mapErrorToStatus(error));
+            return c.json(errorBody(error), mapErrorToStatus(error));
         }
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createEntityRoute, async (c) => {
         const result = await kernel.services.catalog.create(c.req.valid("json"), c.get("actor"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: result.value }, 201);
     });
@@ -133,7 +133,7 @@ export function catalogRoutes(kernel) {
     router.openapi(updateEntityRoute, async (c) => {
         const result = await kernel.services.catalog.update(c.req.param("id"), c.req.valid("json"), c.get("actor"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: result.value });
     });
@@ -141,7 +141,7 @@ export function catalogRoutes(kernel) {
     router.openapi(deleteEntityRoute, async (c) => {
         const result = await kernel.services.catalog.delete(c.req.param("id"), c.get("actor"));
         if (!result.ok) {
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         }
         return c.json({ data: { deleted: true } });
     });
@@ -149,21 +149,21 @@ export function catalogRoutes(kernel) {
     router.openapi(publishEntityRoute, async (c) => {
         const result = await kernel.services.catalog.publish(c.req.param("id"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(archiveEntityRoute, async (c) => {
         const result = await kernel.services.catalog.archive(c.req.param("id"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(discontinueEntityRoute, async (c) => {
         const result = await kernel.services.catalog.discontinue(c.req.param("id"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -171,28 +171,28 @@ export function catalogRoutes(kernel) {
         const result = await kernel.services.catalog.setAttributes(c.req.param("id"), c.req.param("locale"), c.req.valid("json"), // Zod-validated; Hono returns Record<string, unknown>
         c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { updated: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(approveCustomFieldRoute, async (c) => {
         const result = await kernel.services.catalog.approveCustomField(c.req.param("id"), c.req.param("fieldName"), c.req.query("locale") ?? "en", c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(rejectCustomFieldRoute, async (c) => {
         const result = await kernel.services.catalog.rejectCustomField(c.req.param("id"), c.req.param("fieldName"), c.req.query("locale") ?? "en", c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(getEntityAttributesRoute, async (c) => {
         const result = await kernel.services.catalog.getAttributes(c.req.param("id"), c.req.param("locale"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -200,119 +200,119 @@ export function catalogRoutes(kernel) {
         const includeArchived = c.req.query("includeArchived") === "true";
         const result = await kernel.services.catalog.listCategories({ actor: c.get("actor"), tx: null, requestId: "" }, { includeArchived });
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(archiveCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.archiveCategory(c.req.param("categoryId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(restoreCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.restoreCategory(c.req.param("categoryId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.createCategory(c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(updateCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.updateCategory(c.req.param("categoryId"), c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(deleteCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.deleteCategory(c.req.param("categoryId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { deleted: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(addEntityToCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.addToCategory(c.req.param("id"), c.req.param("categoryId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { linked: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(removeEntityFromCategoryRoute, async (c) => {
         const result = await kernel.services.catalog.removeFromCategory(c.req.param("id"), c.req.param("categoryId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { unlinked: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(listBrandsRoute, async (c) => {
         const result = await kernel.services.catalog.listBrands({ actor: c.get("actor"), tx: null, requestId: "" });
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createBrandRoute, async (c) => {
         const result = await kernel.services.catalog.createBrand(c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(updateBrandRoute, async (c) => {
         const result = await kernel.services.catalog.updateBrand(c.req.param("brandId"), c.req.valid("json"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(deleteBrandRoute, async (c) => {
         const result = await kernel.services.catalog.deleteBrand(c.req.param("brandId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { deleted: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(addEntityToBrandRoute, async (c) => {
         const result = await kernel.services.catalog.addToBrand(c.req.param("id"), c.req.param("brandId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { linked: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(removeEntityFromBrandRoute, async (c) => {
         const result = await kernel.services.catalog.removeFromBrand(c.req.param("id"), c.req.param("brandId"), c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { unlinked: true } });
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createOptionTypeRoute, async (c) => {
         const result = await kernel.services.catalog.createOptionType({ ...c.req.valid("json"), entityId: c.req.param("id") }, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createOptionValueRoute, async (c) => {
         const result = await kernel.services.catalog.createOptionValue({ ...c.req.valid("json"), optionTypeId: c.req.param("optionTypeId") }, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(createVariantRoute, async (c) => {
         const result = await kernel.services.catalog.createVariant({ ...c.req.valid("json"), entityId: c.req.param("id") }, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -320,7 +320,7 @@ export function catalogRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.catalog.quickCreateVariant(c.req.param("id"), body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, result.value.created ? 201 : 200);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -328,7 +328,7 @@ export function catalogRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.catalog.bulkCreateVariants(c.req.param("id"), body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -336,7 +336,7 @@ export function catalogRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.catalog.generateVariants(c.req.param("id"), body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     return router;

package/dist/interfaces/rest/routes/checkout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAoBzD,OAAO,EAAE,KAAK,MAAM,EAAwC,MAAM,aAAa,CAAC;AAMhF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAC1C,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCAwV5C"}
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAmBzD,OAAO,EAAE,KAAK,MAAM,EAA+B,MAAM,aAAa,CAAC;AAMvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAC1C,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCAuV5C"}

package/dist/interfaces/rest/routes/checkout.js

@@ -1,13 +1,13 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { checkoutRoute } from "../schemas/checkout.js";
-import { applyPromotionCodes, authorizePayment, calculateShipping, calculateTax, checkInventoryAvailability, completeCheckout, recordAnalyticsEvent, resolveCurrentPrices, validateCartNotEmpty, validatePaymentMethod, } from "../../../hooks/checkout.js";
+import { applyPromotionCodes, authorizePayment, calculateShipping, calculateTax, checkInventoryAvailability, completeCheckout, resolveCurrentPrices, validateCartNotEmpty, validatePaymentMethod, } from "../../../hooks/checkout.js";
 import { runAfterHooks, runBeforeHooks } from "../../../kernel/hooks/executor.js";
 import { createHookContext } from "../../../kernel/hooks/create-context.js";
-import { mapErrorToResponse, mapErrorToStatus } from "../utils.js";
+import { errorBody, mapErrorToStatus } from "../utils.js";
 import { isCommerceError } from "../../../kernel/errors.js";
 import { assertPermission } from "../../../auth/permissions.js";
 import { resolveOrgIdForCommerce } from "../../../auth/org.js";
-import { makeDeterministicId, makeId, makeIdempotencyScope } from "../../../utils/id.js";
+import { makeDeterministicId, makeIdempotencyScope } from "../../../utils/id.js";
 /**
  * SEC-07 — resolve the customer profile a checkout order is attributed to.
  * A self-service actor may ONLY attribute the order to its own customer
@@ -60,7 +60,7 @@ export function checkoutRoutes(kernel) {
     router.openapi(checkoutRoute, async (c) => {
         const body = c.req.valid("json");
         const actor = c.get("actor");
-        const cartSecret = c.req.header("x-cart-secret") ?? c.req.header("X-Cart-Secret") ?? undefined;
+        const cartSecret = c.req.header("x-cart-secret") ?? undefined;
         // Idempotent replay is authorized by the order service before payment runs.
         // This preflight only preserves the no-double-payment fast path; the create
         // primitive repeats the same binding for direct callers and race losers.
@@ -68,7 +68,7 @@ export function checkoutRoutes(kernel) {
         if (body.idempotencyKey) {
             replay = await kernel.services.orders.getByIdempotencyKey(body.idempotencyKey, actor, undefined, cartSecret);
             if (!replay.ok) {
-                return c.json(mapErrorToResponse(replay.error), mapErrorToStatus(replay.error));
+                return c.json(errorBody(replay.error), mapErrorToStatus(replay.error));
             }
             if (replay.value)
                 return c.json({ data: replay.value }, 201);
@@ -79,16 +79,16 @@ export function checkoutRoutes(kernel) {
         // internal cart-read path instead of carrying this credential inward.
         const cartAccess = await kernel.services.cart.getById(body.cartId, actor, undefined, cartSecret);
         if (!cartAccess.ok) {
-            return c.json(mapErrorToResponse(cartAccess.error), mapErrorToStatus(cartAccess.error));
+            return c.json(errorBody(cartAccess.error), mapErrorToStatus(cartAccess.error));
         }
         const idempotencyScope = body.idempotencyKey
             ? await makeIdempotencyScope(actor, cartSecret, body.cartId)
             : undefined;
         const orderId = body.idempotencyKey
             ? await makeDeterministicId(`checkout:${resolveOrgIdForCommerce(actor, kernel.config)}:${idempotencyScope}:${body.idempotencyKey}`)
-            : makeId();
+            : crypto.randomUUID();
         const checkoutData = {
-            checkoutId: makeId(),
+            checkoutId: crypto.randomUUID(),
             orderId,
             cartId: body.cartId,
             currency: body.currency ?? "USD",
@@ -148,7 +148,6 @@ export function checkoutRoutes(kernel) {
         ];
         const afterHooks = [
             completeCheckout,
-            recordAnalyticsEvent,
             ...kernel.hooks.resolve("checkout.afterCreate"),
         ];
         const context = createHookContext({
@@ -233,7 +232,7 @@ export function checkoutRoutes(kernel) {
                 ...(cartSecret !== undefined ? { guestCredential: cartSecret } : {}),
             });
             if (!order.ok) {
-                return c.json(mapErrorToResponse(order.error), mapErrorToStatus(order.error));
+                return c.json(errorBody(order.error), mapErrorToStatus(order.error));
             }
             if (order.ok && (processed.appliedPromotions?.length ?? 0) > 0) {
                 pipelineStage = "record-promotion-usage";

package/dist/interfaces/rest/routes/customers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"customers.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/customers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAazD,OAAO,EAAE,KAAK,MAAM,EAAoF,MAAM,aAAa,CAAC;AAE5H,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCAgJ5C"}
+{"version":3,"file":"customers.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/customers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAazD,OAAO,EAAE,KAAK,MAAM,EAA2E,MAAM,aAAa,CAAC;AAEnH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCAgJ5C"}

package/dist/interfaces/rest/routes/customers.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { listCustomersRoute, createCustomerRoute, getCustomerRoute, updateCustomerRoute, getCustomerOrdersRoute, getCustomerAddressesRoute, listInteractionsRoute, createInteractionRoute, updateInteractionRoute, deleteInteractionRoute, } from "../schemas/customers.js";
-import { mapErrorToResponse, mapErrorToStatus, parsePagination, parseInclude, requirePerm } from "../utils.js";
+import { errorBody, mapErrorToStatus, parsePagination, parseInclude, requirePerm } from "../utils.js";
 export function customerRoutes(kernel) {
     const router = new OpenAPIHono();
     // All customer admin routes require authentication + customers:read
@@ -12,7 +12,7 @@ export function customerRoutes(kernel) {
         const { page, limit } = parsePagination(c.req.query());
         const result = await kernel.services.customers.list(actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         const all = result.value;
         const total = all.length;
         const start = (page - 1) * limit;
@@ -29,7 +29,7 @@ export function customerRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.customers.createWalkIn(body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -38,7 +38,7 @@ export function customerRoutes(kernel) {
         const actor = c.get("actor");
         const result = await kernel.services.customers.getById(id, actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // PATCH requires customers:update (checked in handler since middleware can't distinguish methods)
@@ -58,7 +58,7 @@ export function customerRoutes(kernel) {
             replaceMetadata,
         });
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -70,7 +70,7 @@ export function customerRoutes(kernel) {
         const includeTotals = parseInclude(c.req.query("include")).has("totals");
         const result = await kernel.services.orders.listByCustomer(id, { page, limit, ...(status ? { status } : {}), ...(includeTotals ? { includeTotals: true } : {}) }, actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         if (includeTotals) {
             // Wrapped shape: { data: { items, totals } } (+ pagination meta).
             return c.json({
@@ -88,10 +88,10 @@ export function customerRoutes(kernel) {
         // Get customer first, then use their userId for address lookup
         const customerResult = await kernel.services.customers.getById(id, actor);
         if (!customerResult.ok)
-            return c.json(mapErrorToResponse(customerResult.error), mapErrorToStatus(customerResult.error));
+            return c.json(errorBody(customerResult.error), mapErrorToStatus(customerResult.error));
         const addressResult = await kernel.services.customers.getAddresses(customerResult.value.userId, actor);
         if (!addressResult.ok)
-            return c.json(mapErrorToResponse(addressResult.error), mapErrorToStatus(addressResult.error));
+            return c.json(errorBody(addressResult.error), mapErrorToStatus(addressResult.error));
         return c.json({ data: addressResult.value });
     });
     // ─── Customer interactions (#3) ──────────────────────────────────────────
@@ -100,7 +100,7 @@ export function customerRoutes(kernel) {
         const { id } = c.req.valid("param");
         const result = await kernel.services.customers.listInteractions(id, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -109,7 +109,7 @@ export function customerRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.customers.createInteraction(id, body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -118,7 +118,7 @@ export function customerRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.customers.updateInteraction(id, iid, body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -126,7 +126,7 @@ export function customerRoutes(kernel) {
         const { id, iid } = c.req.valid("param");
         const result = await kernel.services.customers.deleteInteraction(id, iid, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { deleted: true } });
     });
     return router;

package/dist/interfaces/rest/routes/documents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAOzD,OAAO,EAAE,KAAK,MAAM,EAAwD,MAAM,aAAa,CAAC;AAEhG;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCA2D5C"}
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/documents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAOzD,OAAO,EAAE,KAAK,MAAM,EAA+C,MAAM,aAAa,CAAC;AAEvF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,gCA2D5C"}

package/dist/interfaces/rest/routes/documents.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { emailInvoiceRoute, invoiceHtmlRoute, invoicePdfRoute, receiptHtmlRoute, } from "../schemas/documents.js";
-import { mapErrorToResponse, mapErrorToStatus, requireAnyPerm } from "../utils.js";
+import { errorBody, mapErrorToStatus, requireAnyPerm } from "../utils.js";
 /**
  * Order document rendering (issue #47). Mounted under /orders. Access
  * control rides on OrderService.getById (orders:read, or orders:read:own
@@ -10,35 +10,35 @@ export function documentRoutes(kernel) {
     const router = new OpenAPIHono();
     router.use("/*", requireAnyPerm(["orders:read", "orders:read:own"]));
     router.openapi(invoicePdfRoute, async (c) => {
-        const guestCredential = c.req.header("x-cart-secret") ?? c.req.header("X-Cart-Secret") ?? undefined;
+        const guestCredential = c.req.header("x-cart-secret") ?? undefined;
         const result = await kernel.services.documents.renderInvoicePdf(c.req.param("id"), c.get("actor"), undefined, guestCredential);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.body(result.value.pdf.slice().buffer, 200, {
             "content-type": "application/pdf",
             "content-disposition": `inline; filename="invoice-${result.value.invoiceNumber}.pdf"`,
         });
     });
     router.openapi(invoiceHtmlRoute, async (c) => {
-        const guestCredential = c.req.header("x-cart-secret") ?? c.req.header("X-Cart-Secret") ?? undefined;
+        const guestCredential = c.req.header("x-cart-secret") ?? undefined;
         const result = await kernel.services.documents.renderInvoiceHtml(c.req.param("id"), c.get("actor"), undefined, guestCredential);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.html(result.value.html);
     });
     router.openapi(receiptHtmlRoute, async (c) => {
-        const guestCredential = c.req.header("x-cart-secret") ?? c.req.header("X-Cart-Secret") ?? undefined;
+        const guestCredential = c.req.header("x-cart-secret") ?? undefined;
         const result = await kernel.services.documents.renderReceiptHtml(c.req.param("id"), c.get("actor"), undefined, guestCredential);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.html(result.value.html);
     });
     // @ts-expect-error -- openapi handler union return type
     router.openapi(emailInvoiceRoute, async (c) => {
-        const guestCredential = c.req.header("x-cart-secret") ?? c.req.header("X-Cart-Secret") ?? undefined;
+        const guestCredential = c.req.header("x-cart-secret") ?? undefined;
         const result = await kernel.services.documents.emailInvoice(c.req.param("id"), c.req.valid("json").to, c.get("actor"), undefined, guestCredential);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     return router;

package/dist/interfaces/rest/routes/inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAUzD,OAAO,EAAE,KAAK,MAAM,EAAqD,MAAM,aAAa,CAAC;AAE7F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,gCAiG7C"}
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAUzD,OAAO,EAAE,KAAK,MAAM,EAA4C,MAAM,aAAa,CAAC;AAEpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,gCAiG7C"}

package/dist/interfaces/rest/routes/inventory.js

@@ -1,6 +1,6 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { inventoryAdjustRoute, inventoryReserveRoute, inventoryReleaseRoute, createWarehouseRoute, inventoryCheckRoute, listWarehousesRoute, listInventoryLevelsRoute, } from "../schemas/inventory.js";
-import { mapErrorToResponse, mapErrorToStatus, requirePerm } from "../utils.js";
+import { errorBody, mapErrorToStatus, requirePerm } from "../utils.js";
 export function inventoryRoutes(kernel) {
     const router = new OpenAPIHono();
     // Inventory levels listing requires inventory:read
@@ -24,7 +24,7 @@ export function inventoryRoutes(kernel) {
             ...(entityId ? { entityId } : {}),
         }, actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -35,7 +35,7 @@ export function inventoryRoutes(kernel) {
             .filter(Boolean);
         const result = await kernel.services.inventory.checkMultiple(entityIds, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -43,7 +43,7 @@ export function inventoryRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.inventory.adjustDetailed(body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         const { level, before, after, delta, movementId } = result.value;
         // Additive: level fields (back-compat) plus before/after/delta/movementId.
         return c.json({ data: { ...level, before, after, delta, movementId } });
@@ -53,7 +53,7 @@ export function inventoryRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.inventory.reserve(body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { reserved: true } });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -61,7 +61,7 @@ export function inventoryRoutes(kernel) {
         const body = c.req.valid("json");
         const result = await kernel.services.inventory.release(body, c.get("actor"));
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: { released: true } });
     });
     // @ts-expect-error -- openapi handler union return type
@@ -76,7 +76,7 @@ export function inventoryRoutes(kernel) {
         }
         const result = await kernel.services.inventory.createWarehouse(body, actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value }, 201);
     });
     // @ts-expect-error -- openapi handler union return type
@@ -84,7 +84,7 @@ export function inventoryRoutes(kernel) {
         const actor = c.get("actor");
         const result = await kernel.services.inventory.listWarehouses(actor);
         if (!result.ok)
-            return c.json(mapErrorToResponse(result.error), mapErrorToStatus(result.error));
+            return c.json(errorBody(result.error), mapErrorToStatus(result.error));
         return c.json({ data: result.value });
     });
     return router;

package/dist/interfaces/rest/routes/media.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,EAAE,KAAK,MAAM,EAAwE,MAAM,aAAa,CAAC;AAEhH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,gCA4FzC"}
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/rest/routes/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,EAAE,KAAK,MAAM,EAA+D,MAAM,aAAa,CAAC;AAEvG,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,gCA4FzC"}