@rebasepro/server-core 0.6.0 → 0.6.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rebasepro/server-core",
   "type": "module",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Database-Agnostic Backend Core for Rebase",
   "funding": {
     "url": "https://github.com/sponsors/rebaseco"
@@ -54,10 +54,10 @@
     "ts-morph": "28.0.0",
     "ws": "^8.21.0",
     "zod": "^4.4.3",
-    "@rebasepro/client": "0.6.0",
-    "@rebasepro/common": "0.6.0",
-    "@rebasepro/utils": "0.6.0",
-    "@rebasepro/types": "0.6.0"
+    "@rebasepro/client": "0.6.1",
+    "@rebasepro/types": "0.6.1",
+    "@rebasepro/utils": "0.6.1",
+    "@rebasepro/common": "0.6.1"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",

package/src/api/rest/api-generator.ts

@@ -294,7 +294,16 @@ values: entity.values as Record<string, unknown> },
                 return c.json(response, 201);
             } catch (error) {
                 if (isRebaseApiError(error) && !error.code) {
-                    error.code = "BAD_REQUEST";
+                    // Only classify as BAD_REQUEST if it's an operational error
+                    // (e.g. validation, DB constraints). Runtime bugs like TypeError,
+                    // RangeError etc. should remain as 500 INTERNAL_ERROR.
+                    const isRuntimeBug = error instanceof TypeError
+                        || error instanceof RangeError
+                        || error instanceof SyntaxError
+                        || error instanceof ReferenceError;
+                    if (!isRuntimeBug) {
+                        error.code = "BAD_REQUEST";
+                    }
                 }
                 throw error;
             }
@@ -343,7 +352,15 @@ values: entity.values as Record<string, unknown> },
                 return c.json(response);
             } catch (error) {
                 if (isRebaseApiError(error) && !error.code) {
-                    error.code = "BAD_REQUEST";
+                    // Only classify as BAD_REQUEST if it's an operational error.
+                    // Runtime bugs (TypeError, RangeError, etc.) stay as 500.
+                    const isRuntimeBug = error instanceof TypeError
+                        || error instanceof RangeError
+                        || error instanceof SyntaxError
+                        || error instanceof ReferenceError;
+                    if (!isRuntimeBug) {
+                        error.code = "BAD_REQUEST";
+                    }
                 }
                 throw error;
             }

package/src/storage/routes.ts

@@ -145,6 +145,10 @@ export function createStorageRoutes(config: StorageRoutesConfig): Hono<HonoEnv>
      * Path: /file/{bucket}/{path} or /file/{path}
      */
     router.get("/file/*", readAuthMiddleware, async (c) => {
+        // Allow cross-origin loading so admin frontends on different
+        // ports (dev) or domains (CDN) can render images via <img>.
+        c.header("Cross-Origin-Resource-Policy", "cross-origin");
+
         const rawPath = extractWildcardPath(c);
         if (!rawPath) {
             throw ApiError.notFound("File not found");

package/vite.config.ts

@@ -53,6 +53,11 @@ export default defineConfig(() => ({
         sourcemap: true,
         rollupOptions: {
             external: isExternal,
+            onwarn(warning, warn) {
+                if (warning.code === "MISSING_GLOBAL_NAME") return;
+                if (warning.code === "INEFFECTIVE_DYNAMIC_IMPORT") return;
+                warn(warning);
+            },
             output: {
                 banner: 'import { createRequire as __createRequire } from "module"; import process from "process"; const require = __createRequire(import.meta.url);',
                 globals: {