emdash 1.3.1 → 1.4.0

package/dist/entry-locks-CJ9uhqg1.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-locks-CJ9uhqg1.mjs","names":[],"sources":["../src/database/repositories/entry-locks.ts"],"sourcesContent":["import type { Kysely, RawBuilder } from \"kysely\";\nimport { sql } from \"kysely\";\n\nimport { isPostgres } from \"../dialect-helpers.js\";\nimport type { Database } from \"../types.js\";\n\nexport interface EntryLock {\n\tcollection: string;\n\tentryId: string;\n\tuserId: string;\n\t/** Display name of the holder, `null` when the account has none set. */\n\tuserName: string | null;\n\tacquiredAt: string;\n\texpiresAt: string;\n}\n\nexport type EntryLockClaim =\n\t| { outcome: \"acquired\"; lock: EntryLock }\n\t| { outcome: \"held\"; lock: EntryLock };\n\ninterface LockKey {\n\tcollection: string;\n\tentryId: string;\n\tuserId: string;\n}\n\ninterface LeaseInput extends LockKey {\n\tleaseSeconds: number;\n}\n\ninterface LockRow {\n\tcollection: string;\n\tentry_id: string;\n\tuser_id: string;\n\ttoken: string;\n\tacquired_at: string;\n\texpires_at: string;\n}\n\n/**\n * A refused claim proves a live lease existed at statement time, so a second\n * pass only runs when that lease lapsed or was released in between.\n */\nconst CLAIM_ATTEMPTS = 2;\n\nfunction toEntryLock(row: LockRow & { user_name: string | null }): EntryLock {\n\treturn {\n\t\tcollection: row.collection,\n\t\tentryId: row.entry_id,\n\t\tuserId: row.user_id,\n\t\tuserName: row.user_name ?? null,\n\t\tacquiredAt: row.acquired_at,\n\t\texpiresAt: row.expires_at,\n\t};\n}\n\n/**\n * One lease per entry, keyed by `(collection, entry_id)`.\n *\n * Every timestamp comes from the database clock, so leases stay comparable\n * across isolates whose wall clocks drift.\n */\nexport class EntryLockRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Claims the entry for `userId`, or reports who holds it. An expired lease\n\t * and the caller's own lease are both claimable; anyone else's live lease\n\t * needs `takeover`.\n\t *\n\t * `token` identifies the caller's editing session. The row keeps the latest\n\t * one and `release` matches on it, so two tabs of one account can share an\n\t * entry without the first tab to close dropping the lease the other still\n\t * relies on.\n\t */\n\tasync acquire(\n\t\tinput: LeaseInput & { token: string; takeover?: boolean },\n\t): Promise<EntryLockClaim> {\n\t\tfor (let attempt = 0; attempt < CLAIM_ATTEMPTS; attempt++) {\n\t\t\tconst claimed = await this.claim(input);\n\t\t\tif (claimed) return { outcome: \"acquired\", lock: await this.withHolderName(claimed) };\n\n\t\t\tconst holder = await this.findLive(input.collection, input.entryId);\n\t\t\tif (holder) return { outcome: \"held\", lock: holder };\n\t\t}\n\t\tthrow new Error(`Entry lock claim did not settle for ${input.collection}/${input.entryId}`);\n\t}\n\n\t/**\n\t * Extends the caller's own live lease, and reports whether they had one.\n\t * `false` lets a write path tell \"mine, extended\" from \"someone else's, or\n\t * none\" without taking a lease it was never given.\n\t */\n\tasync refreshHeld(input: LeaseInput): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_emdash_entry_locks\")\n\t\t\t.set({ expires_at: this.timestampOffset(input.leaseSeconds) })\n\t\t\t.where(\"collection\", \"=\", input.collection)\n\t\t\t.where(\"entry_id\", \"=\", input.entryId)\n\t\t\t.where(\"user_id\", \"=\", input.userId)\n\t\t\t.where(this.leaseIsLive(\"expires_at\"))\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows ?? 0) > 0;\n\t}\n\n\tasync findLive(collection: string, entryId: string): Promise<EntryLock | null> {\n\t\tconst row = await this.liveQuery(collection, entryId).executeTakeFirst();\n\t\treturn row ? toEntryLock(row) : null;\n\t}\n\n\t/** The live lease, but only while the collection still has locking switched on. */\n\tasync findEnforceable(collection: string, entryId: string): Promise<EntryLock | null> {\n\t\tconst row = await this.liveQuery(collection, entryId)\n\t\t\t.innerJoin(\n\t\t\t\t\"_emdash_collections\",\n\t\t\t\t\"_emdash_collections.slug\",\n\t\t\t\t\"_emdash_entry_locks.collection\",\n\t\t\t)\n\t\t\t.where(\"_emdash_collections.edit_locking\", \"!=\", 0)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toEntryLock(row) : null;\n\t}\n\n\t/**\n\t * Drops the caller's lease. With `token`, only the session that last\n\t * claimed the row can drop it; without, any session of the account can.\n\t */\n\tasync release(key: LockKey & { token?: string }): Promise<boolean> {\n\t\tlet query = this.db\n\t\t\t.deleteFrom(\"_emdash_entry_locks\")\n\t\t\t.where(\"collection\", \"=\", key.collection)\n\t\t\t.where(\"entry_id\", \"=\", key.entryId)\n\t\t\t.where(\"user_id\", \"=\", key.userId);\n\t\tif (key.token !== undefined) query = query.where(\"token\", \"=\", key.token);\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0) > 0;\n\t}\n\n\t/** Drops every lease on an entry, whoever holds it. */\n\tasync releaseEntry(collection: string, entryId: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_entry_locks\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Insert-or-steal in one statement. The conflict branch keeps the original\n\t * acquisition time when the holder is unchanged, so the admin can show how\n\t * long the entry has been open rather than how long ago it was last typed\n\t * into.\n\t *\n\t * Column references in the conflict branch are table-qualified: Postgres\n\t * sees both the stored row and `excluded` there and rejects a bare name as\n\t * ambiguous.\n\t */\n\tprivate async claim(\n\t\tinput: LeaseInput & { token: string; takeover?: boolean },\n\t): Promise<LockRow | undefined> {\n\t\tconst now = this.timestampOffset(0);\n\t\tconst expiresAt = this.timestampOffset(input.leaseSeconds);\n\t\treturn this.db\n\t\t\t.insertInto(\"_emdash_entry_locks\")\n\t\t\t.values({\n\t\t\t\tcollection: input.collection,\n\t\t\t\tentry_id: input.entryId,\n\t\t\t\tuser_id: input.userId,\n\t\t\t\ttoken: input.token,\n\t\t\t\tacquired_at: now,\n\t\t\t\texpires_at: expiresAt,\n\t\t\t})\n\t\t\t.onConflict((oc) => {\n\t\t\t\tconst update = oc.columns([\"collection\", \"entry_id\"]).doUpdateSet({\n\t\t\t\t\tuser_id: input.userId,\n\t\t\t\t\ttoken: input.token,\n\t\t\t\t\tacquired_at: sql<string>`CASE\n\t\t\t\t\t\tWHEN ${sql.ref(\"_emdash_entry_locks.user_id\")} = ${input.userId}\n\t\t\t\t\t\tTHEN ${sql.ref(\"_emdash_entry_locks.acquired_at\")}\n\t\t\t\t\t\tELSE ${now}\n\t\t\t\t\tEND`,\n\t\t\t\t\texpires_at: expiresAt,\n\t\t\t\t});\n\t\t\t\tif (input.takeover === true) return update;\n\t\t\t\treturn update.where((eb) =>\n\t\t\t\t\teb.or([\n\t\t\t\t\t\teb(\"_emdash_entry_locks.user_id\", \"=\", input.userId),\n\t\t\t\t\t\tthis.leaseHasExpired(\"_emdash_entry_locks.expires_at\"),\n\t\t\t\t\t]),\n\t\t\t\t);\n\t\t\t})\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t}\n\n\tprivate liveQuery(collection: string, entryId: string) {\n\t\treturn this.db\n\t\t\t.selectFrom(\"_emdash_entry_locks\")\n\t\t\t.leftJoin(\"users\", \"users.id\", \"_emdash_entry_locks.user_id\")\n\t\t\t.select([\n\t\t\t\t\"_emdash_entry_locks.collection\",\n\t\t\t\t\"_emdash_entry_locks.entry_id\",\n\t\t\t\t\"_emdash_entry_locks.user_id\",\n\t\t\t\t\"_emdash_entry_locks.token\",\n\t\t\t\t\"_emdash_entry_locks.acquired_at\",\n\t\t\t\t\"_emdash_entry_locks.expires_at\",\n\t\t\t\t\"users.name as user_name\",\n\t\t\t])\n\t\t\t.where(\"_emdash_entry_locks.collection\", \"=\", collection)\n\t\t\t.where(\"_emdash_entry_locks.entry_id\", \"=\", entryId)\n\t\t\t.where(this.leaseIsLive(\"_emdash_entry_locks.expires_at\"));\n\t}\n\n\tprivate async withHolderName(row: LockRow): Promise<EntryLock> {\n\t\tconst user = await this.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select(\"name\")\n\t\t\t.where(\"id\", \"=\", row.user_id)\n\t\t\t.executeTakeFirst();\n\t\treturn {\n\t\t\tcollection: row.collection,\n\t\t\tentryId: row.entry_id,\n\t\t\tuserId: row.user_id,\n\t\t\tuserName: user?.name ?? null,\n\t\t\tacquiredAt: row.acquired_at,\n\t\t\texpiresAt: row.expires_at,\n\t\t};\n\t}\n\n\tprivate leaseIsLive(column: string) {\n\t\tconst expiresAt = sql.ref(column);\n\t\treturn isPostgres(this.db)\n\t\t\t? sql<boolean>`${expiresAt}::timestamptz > clock_timestamp()`\n\t\t\t: sql<boolean>`${expiresAt} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n\t}\n\n\tprivate leaseHasExpired(column: string) {\n\t\tconst expiresAt = sql.ref(column);\n\t\treturn isPostgres(this.db)\n\t\t\t? sql<boolean>`${expiresAt}::timestamptz <= clock_timestamp()`\n\t\t\t: sql<boolean>`${expiresAt} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n\t}\n\n\tprivate timestampOffset(offsetSeconds: number): RawBuilder<string> {\n\t\tif (isPostgres(this.db)) {\n\t\t\treturn sql<string>`to_char(\n\t\t\t\t(clock_timestamp() AT TIME ZONE 'UTC') + (${offsetSeconds} * INTERVAL '1 second'),\n\t\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t\t)`;\n\t\t}\n\t\treturn sql<string>`strftime(\n\t\t\t'%Y-%m-%dT%H:%M:%fZ',\n\t\t\t'now',\n\t\t\t${`${offsetSeconds >= 0 ? \"+\" : \"\"}${offsetSeconds} seconds`}\n\t\t)`;\n\t}\n}\n"],"mappings":";;;;;;;;AA2CA,MAAM,iBAAiB;AAEvB,SAAS,YAAY,KAAwD;AAC5E,QAAO;EACN,YAAY,IAAI;EAChB,SAAS,IAAI;EACb,QAAQ,IAAI;EACZ,UAAU,IAAI,aAAa;EAC3B,YAAY,IAAI;EAChB,WAAW,IAAI;EACf;;;;;;;;AASF,IAAa,sBAAb,MAAiC;CAChC,YAAY,AAAQ,IAAsB;EAAtB;;;;;;;;;;;;CAYpB,MAAM,QACL,OAC0B;AAC1B,OAAK,IAAI,UAAU,GAAG,UAAU,gBAAgB,WAAW;GAC1D,MAAM,UAAU,MAAM,KAAK,MAAM,MAAM;AACvC,OAAI,QAAS,QAAO;IAAE,SAAS;IAAY,MAAM,MAAM,KAAK,eAAe,QAAQ;IAAE;GAErF,MAAM,SAAS,MAAM,KAAK,SAAS,MAAM,YAAY,MAAM,QAAQ;AACnE,OAAI,OAAQ,QAAO;IAAE,SAAS;IAAQ,MAAM;IAAQ;;AAErD,QAAM,IAAI,MAAM,uCAAuC,MAAM,WAAW,GAAG,MAAM,UAAU;;;;;;;CAQ5F,MAAM,YAAY,OAAqC;EACtD,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,sBAAsB,CAClC,IAAI,EAAE,YAAY,KAAK,gBAAgB,MAAM,aAAa,EAAE,CAAC,CAC7D,MAAM,cAAc,KAAK,MAAM,WAAW,CAC1C,MAAM,YAAY,KAAK,MAAM,QAAQ,CACrC,MAAM,WAAW,KAAK,MAAM,OAAO,CACnC,MAAM,KAAK,YAAY,aAAa,CAAC,CACrC,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;CAG7C,MAAM,SAAS,YAAoB,SAA4C;EAC9E,MAAM,MAAM,MAAM,KAAK,UAAU,YAAY,QAAQ,CAAC,kBAAkB;AACxE,SAAO,MAAM,YAAY,IAAI,GAAG;;;CAIjC,MAAM,gBAAgB,YAAoB,SAA4C;EACrF,MAAM,MAAM,MAAM,KAAK,UAAU,YAAY,QAAQ,CACnD,UACA,uBACA,4BACA,iCACA,CACA,MAAM,oCAAoC,MAAM,EAAE,CAClD,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;;;;;CAOjC,MAAM,QAAQ,KAAqD;EAClE,IAAI,QAAQ,KAAK,GACf,WAAW,sBAAsB,CACjC,MAAM,cAAc,KAAK,IAAI,WAAW,CACxC,MAAM,YAAY,KAAK,IAAI,QAAQ,CACnC,MAAM,WAAW,KAAK,IAAI,OAAO;AACnC,MAAI,IAAI,UAAU,OAAW,SAAQ,MAAM,MAAM,SAAS,KAAK,IAAI,MAAM;EACzE,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;;CAI7C,MAAM,aAAa,YAAoB,SAAgC;AACtE,QAAM,KAAK,GACT,WAAW,sBAAsB,CACjC,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,SAAS;;;;;;;;;;;;CAaZ,MAAc,MACb,OAC+B;EAC/B,MAAM,MAAM,KAAK,gBAAgB,EAAE;EACnC,MAAM,YAAY,KAAK,gBAAgB,MAAM,aAAa;AAC1D,SAAO,KAAK,GACV,WAAW,sBAAsB,CACjC,OAAO;GACP,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,SAAS,MAAM;GACf,OAAO,MAAM;GACb,aAAa;GACb,YAAY;GACZ,CAAC,CACD,YAAY,OAAO;GACnB,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,WAAW,CAAC,CAAC,YAAY;IACjE,SAAS,MAAM;IACf,OAAO,MAAM;IACb,aAAa,GAAW;aAChB,IAAI,IAAI,8BAA8B,CAAC,KAAK,MAAM,OAAO;aACzD,IAAI,IAAI,kCAAkC,CAAC;aAC3C,IAAI;;IAEZ,YAAY;IACZ,CAAC;AACF,OAAI,MAAM,aAAa,KAAM,QAAO;AACpC,UAAO,OAAO,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,+BAA+B,KAAK,MAAM,OAAO,EACpD,KAAK,gBAAgB,iCAAiC,CACtD,CAAC,CACF;IACA,CACD,cAAc,CACd,kBAAkB;;CAGrB,AAAQ,UAAU,YAAoB,SAAiB;AACtD,SAAO,KAAK,GACV,WAAW,sBAAsB,CACjC,SAAS,SAAS,YAAY,8BAA8B,CAC5D,OAAO;GACP;GACA;GACA;GACA;GACA;GACA;GACA;GACA,CAAC,CACD,MAAM,kCAAkC,KAAK,WAAW,CACxD,MAAM,gCAAgC,KAAK,QAAQ,CACnD,MAAM,KAAK,YAAY,iCAAiC,CAAC;;CAG5D,MAAc,eAAe,KAAkC;EAC9D,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,QAAQ,CACnB,OAAO,OAAO,CACd,MAAM,MAAM,KAAK,IAAI,QAAQ,CAC7B,kBAAkB;AACpB,SAAO;GACN,YAAY,IAAI;GAChB,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,UAAU,MAAM,QAAQ;GACxB,YAAY,IAAI;GAChB,WAAW,IAAI;GACf;;CAGF,AAAQ,YAAY,QAAgB;EACnC,MAAM,YAAY,IAAI,IAAI,OAAO;AACjC,SAAO,WAAW,KAAK,GAAG,GACvB,GAAY,GAAG,UAAU,qCACzB,GAAY,GAAG,UAAU;;CAG7B,AAAQ,gBAAgB,QAAgB;EACvC,MAAM,YAAY,IAAI,IAAI,OAAO;AACjC,SAAO,WAAW,KAAK,GAAG,GACvB,GAAY,GAAG,UAAU,sCACzB,GAAY,GAAG,UAAU;;CAG7B,AAAQ,gBAAgB,eAA2C;AAClE,MAAI,WAAW,KAAK,GAAG,CACtB,QAAO,GAAW;gDAC2B,cAAc;;;AAI5D,SAAO,GAAW;;;KAGf,GAAG,iBAAiB,IAAI,MAAM,KAAK,cAAc,UAAU"}

package/dist/env-types-BE3bCvfP.mjs

@@ -0,0 +1,38 @@
+import { f as __exportAll } from "./runner-Bkkfk4O8.mjs";
+import { n as SchemaRegistry } from "./registry-B0-O575m.mjs";
+import { a as generateTypesFile, r as generateSchemaHash } from "./zod-generator--nlM0930.mjs";
+import { n as expandCollectionBlockFields } from "./block-values-Dg0-8PPS.mjs";
+
+//#region src/schema/env-types.ts
+var env_types_exports = /* @__PURE__ */ __exportAll({ generateEnvTypes: () => generateEnvTypes });
+async function safeListCollections(registry) {
+	try {
+		return await registry.listCollections();
+	} catch (error) {
+		if (error instanceof Error && error.message.includes("no such table")) return [];
+		throw error;
+	}
+}
+/**
+* Generate the `emdash-env.d.ts` content for the schema stored in `db`.
+*/
+async function generateEnvTypes(db) {
+	const registry = new SchemaRegistry(db);
+	const collections = await safeListCollections(registry);
+	const collectionsWithFields = await Promise.all(collections.map(async (c) => {
+		const fields = await registry.listFields(c.id);
+		return expandCollectionBlockFields(db, {
+			...c,
+			fields
+		});
+	}));
+	return {
+		types: generateTypesFile(collectionsWithFields),
+		hash: await generateSchemaHash(collectionsWithFields),
+		collections: collections.length
+	};
+}
+
+//#endregion
+export { generateEnvTypes as n, env_types_exports as t };
+//# sourceMappingURL=env-types-BE3bCvfP.mjs.map

package/dist/env-types-BE3bCvfP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-types-BE3bCvfP.mjs","names":[],"sources":["../src/schema/env-types.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { expandCollectionBlockFields } from \"./block-values.js\";\nimport { SchemaRegistry } from \"./registry.js\";\nimport { generateSchemaHash, generateTypesFile } from \"./zod-generator.js\";\n\nasync function safeListCollections(registry: SchemaRegistry) {\n\ttry {\n\t\treturn await registry.listCollections();\n\t} catch (error) {\n\t\t// Handle missing tables for new sites that haven't run setup yet\n\t\tif (error instanceof Error && error.message.includes(\"no such table\")) {\n\t\t\treturn [];\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/**\n * Generate the `emdash-env.d.ts` content for the schema stored in `db`.\n */\nexport async function generateEnvTypes(db: Kysely<Database>) {\n\tconst registry = new SchemaRegistry(db);\n\tconst collections = await safeListCollections(registry);\n\tconst collectionsWithFields = await Promise.all(\n\t\tcollections.map(async (c) => {\n\t\t\tconst fields = await registry.listFields(c.id);\n\t\t\treturn expandCollectionBlockFields(db, { ...c, fields });\n\t\t}),\n\t);\n\n\tconst types = generateTypesFile(collectionsWithFields);\n\tconst hash: string = await generateSchemaHash(collectionsWithFields);\n\n\treturn { types, hash, collections: collections.length };\n}\n"],"mappings":";;;;;;;AAOA,eAAe,oBAAoB,UAA0B;AAC5D,KAAI;AACH,SAAO,MAAM,SAAS,iBAAiB;UAC/B,OAAO;AAEf,MAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,gBAAgB,CACpE,QAAO,EAAE;AAEV,QAAM;;;;;;AAOR,eAAsB,iBAAiB,IAAsB;CAC5D,MAAM,WAAW,IAAI,eAAe,GAAG;CACvC,MAAM,cAAc,MAAM,oBAAoB,SAAS;CACvD,MAAM,wBAAwB,MAAM,QAAQ,IAC3C,YAAY,IAAI,OAAO,MAAM;EAC5B,MAAM,SAAS,MAAM,SAAS,WAAW,EAAE,GAAG;AAC9C,SAAO,4BAA4B,IAAI;GAAE,GAAG;GAAG;GAAQ,CAAC;GACvD,CACF;AAKD,QAAO;EAAE,OAHK,kBAAkB,sBAAsB;EAGtC,MAFK,MAAM,mBAAmB,sBAAsB;EAE9C,aAAa,YAAY;EAAQ"}

package/dist/error-BCMgPxdn.mjs

@@ -0,0 +1,90 @@
+import { a as InvalidCursorError } from "./types-DwhEvIVb.mjs";
+import { r as mapErrorStatus } from "./errors-8gJqv-XV.mjs";
+
+//#region src/api/error.ts
+/**
+* Standardized API error responses.
+*
+* All API routes should use these utilities instead of inline
+* `new Response(JSON.stringify({ error: ... }), ...)` patterns.
+*/
+/**
+* Standard cache headers for all API responses.
+*
+* Cache-Control: private, no-store -- prevents CDN/proxy caching of authenticated data.
+* no-store already tells caches not to store the response, so Vary is unnecessary.
+*/
+const API_CACHE_HEADERS = { "Cache-Control": "private, no-store" };
+/**
+* Create a standardized error response.
+*
+* Always returns `{ success: false, error: { code, message } }` with correct
+* Content-Type. Use this for all error responses in API routes.
+*/
+function apiError(code, message, status, details) {
+	const error = {
+		code,
+		message
+	};
+	if (details !== void 0) error.details = details;
+	return Response.json({
+		success: false,
+		error
+	}, {
+		status,
+		headers: API_CACHE_HEADERS
+	});
+}
+/**
+* Create a standardized success response.
+*
+* Always returns `{ success: true, data: T }` with correct status code.
+* Use this for all success responses in API routes.
+*/
+function apiSuccess(data, status = 200) {
+	return Response.json({
+		success: true,
+		data
+	}, {
+		status,
+		headers: API_CACHE_HEADERS
+	});
+}
+/**
+* Handle an unknown error in a catch block.
+*
+* - Logs the full error server-side
+* - Returns a generic message to the client (never leaks error.message)
+* - Use `fallbackMessage` for the public-facing message
+* - Use `fallbackCode` for the error code
+*/
+function handleError(error, fallbackMessage, fallbackCode) {
+	if (error instanceof InvalidCursorError) return apiError("INVALID_CURSOR", error.message, 400);
+	console.error(`[${fallbackCode}]`, error);
+	return apiError(fallbackCode, fallbackMessage, 500);
+}
+/**
+* Standard database check.
+*
+* Returns an error response if the database is not available, or null if OK.
+* Usage: `const err = requireDb(emdash?.db); if (err) return err;`
+*/
+function requireDb(db) {
+	if (!db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	return null;
+}
+/**
+* Convert an ApiResult into an HTTP Response.
+*
+* Collapses the handler-to-response boilerplate:
+* - Success: returns `apiSuccess(result.data, successStatus)`
+* - Error: returns `apiError(code, message, mapErrorStatus(code))`
+*/
+function unwrapResult(result, successStatus = 200) {
+	if (!result.success) return apiError(result.error.code, result.error.message, mapErrorStatus(result.error.code), result.error.details);
+	return apiSuccess(result.data, successStatus);
+}
+
+//#endregion
+export { unwrapResult as a, requireDb as i, apiSuccess as n, handleError as r, apiError as t };
+//# sourceMappingURL=error-BCMgPxdn.mjs.map

package/dist/error-BCMgPxdn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-BCMgPxdn.mjs","names":[],"sources":["../src/api/error.ts"],"sourcesContent":["/**\n * Standardized API error responses.\n *\n * All API routes should use these utilities instead of inline\n * `new Response(JSON.stringify({ error: ... }), ...)` patterns.\n */\n\nimport { InvalidCursorError } from \"../database/repositories/types.js\";\nimport { mapErrorStatus } from \"./errors.js\";\nimport type { ApiResult } from \"./types.js\";\n\n// Re-export everything from errors.ts so existing `import { mapErrorStatus } from \"./error.js\"` still works\nexport * from \"./errors.js\";\n\n/**\n * Standard cache headers for all API responses.\n *\n * Cache-Control: private, no-store -- prevents CDN/proxy caching of authenticated data.\n * no-store already tells caches not to store the response, so Vary is unnecessary.\n */\nconst API_CACHE_HEADERS: HeadersInit = {\n\t\"Cache-Control\": \"private, no-store\",\n};\n\n/**\n * Create a standardized error response.\n *\n * Always returns `{ success: false, error: { code, message } }` with correct\n * Content-Type. Use this for all error responses in API routes.\n */\nexport function apiError(\n\tcode: string,\n\tmessage: string,\n\tstatus: number,\n\tdetails?: Record<string, unknown>,\n): Response {\n\tconst error: { code: string; message: string; details?: Record<string, unknown> } = {\n\t\tcode,\n\t\tmessage,\n\t};\n\tif (details !== undefined) error.details = details;\n\treturn Response.json({ success: false, error }, { status, headers: API_CACHE_HEADERS });\n}\n\n/**\n * Create a standardized success response.\n *\n * Always returns `{ success: true, data: T }` with correct status code.\n * Use this for all success responses in API routes.\n */\nexport function apiSuccess<T>(data: T, status = 200): Response {\n\treturn Response.json({ success: true, data }, { status, headers: API_CACHE_HEADERS });\n}\n\n/**\n * Handle an unknown error in a catch block.\n *\n * - Logs the full error server-side\n * - Returns a generic message to the client (never leaks error.message)\n * - Use `fallbackMessage` for the public-facing message\n * - Use `fallbackCode` for the error code\n */\nexport function handleError(\n\terror: unknown,\n\tfallbackMessage: string,\n\tfallbackCode: string,\n): Response {\n\t// Bubble malformed-cursor errors as a structured 400 instead of a\n\t// generic 500.\n\tif (error instanceof InvalidCursorError) {\n\t\treturn apiError(\"INVALID_CURSOR\", error.message, 400);\n\t}\n\tconsole.error(`[${fallbackCode}]`, error);\n\treturn apiError(fallbackCode, fallbackMessage, 500);\n}\n\n/**\n * Standard initialization check.\n *\n * Returns an error response if EmDash is not initialized, or null if OK.\n * Usage: `const err = requireInit(emdash); if (err) return err;`\n */\nexport function requireInit(emdash: unknown): Response | null {\n\tif (!emdash || typeof emdash !== \"object\") {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\treturn null;\n}\n\n/**\n * Standard database check.\n *\n * Returns an error response if the database is not available, or null if OK.\n * Usage: `const err = requireDb(emdash?.db); if (err) return err;`\n */\nexport function requireDb(db: unknown): Response | null {\n\tif (!db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\treturn null;\n}\n\n/**\n * Convert an ApiResult into an HTTP Response.\n *\n * Collapses the handler-to-response boilerplate:\n * - Success: returns `apiSuccess(result.data, successStatus)`\n * - Error: returns `apiError(code, message, mapErrorStatus(code))`\n */\nexport function unwrapResult<T>(result: ApiResult<T>, successStatus = 200): Response {\n\tif (!result.success) {\n\t\treturn apiError(\n\t\t\tresult.error.code,\n\t\t\tresult.error.message,\n\t\t\tmapErrorStatus(result.error.code),\n\t\t\tresult.error.details,\n\t\t);\n\t}\n\treturn apiSuccess(result.data, successStatus);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAM,oBAAiC,EACtC,iBAAiB,qBACjB;;;;;;;AAQD,SAAgB,SACf,MACA,SACA,QACA,SACW;CACX,MAAM,QAA8E;EACnF;EACA;EACA;AACD,KAAI,YAAY,OAAW,OAAM,UAAU;AAC3C,QAAO,SAAS,KAAK;EAAE,SAAS;EAAO;EAAO,EAAE;EAAE;EAAQ,SAAS;EAAmB,CAAC;;;;;;;;AASxF,SAAgB,WAAc,MAAS,SAAS,KAAe;AAC9D,QAAO,SAAS,KAAK;EAAE,SAAS;EAAM;EAAM,EAAE;EAAE;EAAQ,SAAS;EAAmB,CAAC;;;;;;;;;;AAWtF,SAAgB,YACf,OACA,iBACA,cACW;AAGX,KAAI,iBAAiB,mBACpB,QAAO,SAAS,kBAAkB,MAAM,SAAS,IAAI;AAEtD,SAAQ,MAAM,IAAI,aAAa,IAAI,MAAM;AACzC,QAAO,SAAS,cAAc,iBAAiB,IAAI;;;;;;;;AAsBpD,SAAgB,UAAU,IAA8B;AACvD,KAAI,CAAC,GACJ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAEpE,QAAO;;;;;;;;;AAUR,SAAgB,aAAgB,QAAsB,gBAAgB,KAAe;AACpF,KAAI,CAAC,OAAO,QACX,QAAO,SACN,OAAO,MAAM,MACb,OAAO,MAAM,SACb,eAAe,OAAO,MAAM,KAAK,EACjC,OAAO,MAAM,QACb;AAEF,QAAO,WAAW,OAAO,MAAM,cAAc"}

package/dist/errors-8gJqv-XV.mjs

@@ -0,0 +1,492 @@
+import { a as transferErrorStatus, n as TransferErrorCode } from "./errors-B4f4It-2.mjs";
+
+//#region src/api/errors.ts
+/**
+* Typed error codes and status mapping for the EmDash REST API.
+*
+* All handler-level and route-level error codes are defined here.
+* Routes and handlers should import error codes from this module
+* instead of using ad-hoc strings.
+*/
+const ErrorCode = {
+	NOT_FOUND: "NOT_FOUND",
+	VALIDATION_ERROR: "VALIDATION_ERROR",
+	UNSUPPORTED_FIELD_TYPE: "UNSUPPORTED_FIELD_TYPE",
+	INVALID_INPUT: "INVALID_INPUT",
+	INVALID_JSON: "INVALID_JSON",
+	INVALID_CURSOR: "INVALID_CURSOR",
+	CONFLICT: "CONFLICT",
+	SLUG_CONFLICT: "SLUG_CONFLICT",
+	NOT_CONFIGURED: "NOT_CONFIGURED",
+	BINDING_NOT_FOUND: "BINDING_NOT_FOUND",
+	CONFIGURATION_ERROR: "CONFIGURATION_ERROR",
+	UNAUTHORIZED: "UNAUTHORIZED",
+	FORBIDDEN: "FORBIDDEN",
+	RATE_LIMITED: "RATE_LIMITED",
+	NOT_AUTHENTICATED: "NOT_AUTHENTICATED",
+	NOT_IMPLEMENTED: "NOT_IMPLEMENTED",
+	NOT_SUPPORTED: "NOT_SUPPORTED",
+	MISSING_PARAM: "MISSING_PARAM",
+	DOMAIN_CHECK_FAILED: "DOMAIN_CHECK_FAILED",
+	CSRF_REJECTED: "CSRF_REJECTED",
+	CONTENT_CREATE_ERROR: "CONTENT_CREATE_ERROR",
+	CONTENT_UPDATE_ERROR: "CONTENT_UPDATE_ERROR",
+	SAVE_REJECTED: "SAVE_REJECTED",
+	PUBLISH_REJECTED: "PUBLISH_REJECTED",
+	SCHEDULE_REJECTED: "SCHEDULE_REJECTED",
+	UNPUBLISH_REJECTED: "UNPUBLISH_REJECTED",
+	CONTENT_HOOK_ERROR: "CONTENT_HOOK_ERROR",
+	CONTENT_DELETE_ERROR: "CONTENT_DELETE_ERROR",
+	CONTENT_LIST_ERROR: "CONTENT_LIST_ERROR",
+	CONTENT_GET_ERROR: "CONTENT_GET_ERROR",
+	CONTENT_DUPLICATE_ERROR: "CONTENT_DUPLICATE_ERROR",
+	CONTENT_RESTORE_ERROR: "CONTENT_RESTORE_ERROR",
+	CONTENT_PUBLISH_ERROR: "CONTENT_PUBLISH_ERROR",
+	CONTENT_UNPUBLISH_ERROR: "CONTENT_UNPUBLISH_ERROR",
+	CONTENT_SCHEDULE_ERROR: "CONTENT_SCHEDULE_ERROR",
+	CONTENT_UNSCHEDULE_ERROR: "CONTENT_UNSCHEDULE_ERROR",
+	CONTENT_DISCARD_DRAFT_ERROR: "CONTENT_DISCARD_DRAFT_ERROR",
+	CONTENT_COMPARE_ERROR: "CONTENT_COMPARE_ERROR",
+	CONTENT_TRANSLATIONS_ERROR: "CONTENT_TRANSLATIONS_ERROR",
+	CONTENT_COUNT_ERROR: "CONTENT_COUNT_ERROR",
+	REVISION_LIST_ERROR: "REVISION_LIST_ERROR",
+	REVISION_GET_ERROR: "REVISION_GET_ERROR",
+	REVISION_RESTORE_ERROR: "REVISION_RESTORE_ERROR",
+	INVALID_REVISION: "INVALID_REVISION",
+	SCHEMA_LIST_ERROR: "SCHEMA_LIST_ERROR",
+	SCHEMA_GET_ERROR: "SCHEMA_GET_ERROR",
+	SCHEMA_CREATE_ERROR: "SCHEMA_CREATE_ERROR",
+	SCHEMA_UPDATE_ERROR: "SCHEMA_UPDATE_ERROR",
+	SCHEMA_DELETE_ERROR: "SCHEMA_DELETE_ERROR",
+	SCHEMA_EXPORT_ERROR: "SCHEMA_EXPORT_ERROR",
+	SCHEMA_FIELD_LIST_ERROR: "SCHEMA_FIELD_LIST_ERROR",
+	SCHEMA_FIELD_GET_ERROR: "SCHEMA_FIELD_GET_ERROR",
+	SCHEMA_FIELD_CREATE_ERROR: "SCHEMA_FIELD_CREATE_ERROR",
+	SCHEMA_FIELD_UPDATE_ERROR: "SCHEMA_FIELD_UPDATE_ERROR",
+	SCHEMA_FIELD_DELETE_ERROR: "SCHEMA_FIELD_DELETE_ERROR",
+	SCHEMA_FIELD_REORDER_ERROR: "SCHEMA_FIELD_REORDER_ERROR",
+	BLOCK_TYPE_NOT_FOUND: "BLOCK_TYPE_NOT_FOUND",
+	BLOCK_TYPE_EXISTS: "BLOCK_TYPE_EXISTS",
+	BLOCK_TYPE_BREAKING_CHANGE: "BLOCK_TYPE_BREAKING_CHANGE",
+	BLOCK_TYPE_VERSION_CONFLICT: "BLOCK_TYPE_VERSION_CONFLICT",
+	TRANSLATABLE_LOCKED: "TRANSLATABLE_LOCKED",
+	REORDER_MISMATCH: "REORDER_MISMATCH",
+	ORPHAN_LIST_ERROR: "ORPHAN_LIST_ERROR",
+	ORPHAN_REGISTER_ERROR: "ORPHAN_REGISTER_ERROR",
+	COLLECTION_EXISTS: "COLLECTION_EXISTS",
+	COLLECTION_NOT_FOUND: "COLLECTION_NOT_FOUND",
+	COLLECTION_SCHEMA_MISMATCH: "COLLECTION_SCHEMA_MISMATCH",
+	COLLECTION_TABLE_ORPHANED: "COLLECTION_TABLE_ORPHANED",
+	TABLE_NOT_FOUND: "TABLE_NOT_FOUND",
+	FIELD_EXISTS: "FIELD_EXISTS",
+	FIELD_TYPE_COLUMN_CHANGE: "FIELD_TYPE_COLUMN_CHANGE",
+	RESERVED_SLUG: "RESERVED_SLUG",
+	INVALID_SLUG: "INVALID_SLUG",
+	CREATE_FAILED: "CREATE_FAILED",
+	UPDATE_FAILED: "UPDATE_FAILED",
+	REGISTER_FAILED: "REGISTER_FAILED",
+	MEDIA_LIST_ERROR: "MEDIA_LIST_ERROR",
+	MEDIA_GET_ERROR: "MEDIA_GET_ERROR",
+	MEDIA_CREATE_ERROR: "MEDIA_CREATE_ERROR",
+	MEDIA_UPDATE_ERROR: "MEDIA_UPDATE_ERROR",
+	MEDIA_REPLACE_ERROR: "MEDIA_REPLACE_ERROR",
+	MEDIA_REPLACE_METADATA_ERROR: "MEDIA_REPLACE_METADATA_ERROR",
+	MEDIA_DELETE_ERROR: "MEDIA_DELETE_ERROR",
+	MEDIA_FOLDER_LIST_ERROR: "MEDIA_FOLDER_LIST_ERROR",
+	MEDIA_FOLDER_GET_ERROR: "MEDIA_FOLDER_GET_ERROR",
+	MEDIA_FOLDER_CREATE_ERROR: "MEDIA_FOLDER_CREATE_ERROR",
+	MEDIA_FOLDER_UPDATE_ERROR: "MEDIA_FOLDER_UPDATE_ERROR",
+	MEDIA_FOLDER_DELETE_ERROR: "MEDIA_FOLDER_DELETE_ERROR",
+	MEDIA_USAGE_READ_ERROR: "MEDIA_USAGE_READ_ERROR",
+	MEDIA_USAGE_REPAIR_ERROR: "MEDIA_USAGE_REPAIR_ERROR",
+	MEDIA_USAGE_PROGRESS_READ_ERROR: "MEDIA_USAGE_PROGRESS_READ_ERROR",
+	MEDIA_USAGE_PROGRESS_ADVANCE_ERROR: "MEDIA_USAGE_PROGRESS_ADVANCE_ERROR",
+	MEDIA_USAGE_PROGRESS_NOT_ACTIVE: "MEDIA_USAGE_PROGRESS_NOT_ACTIVE",
+	MEDIA_USAGE_WORK_LIST_ERROR: "MEDIA_USAGE_WORK_LIST_ERROR",
+	MEDIA_USAGE_WORK_RETRY_ERROR: "MEDIA_USAGE_WORK_RETRY_ERROR",
+	MEDIA_USAGE_COLLECTION_DELETION_LIST_ERROR: "MEDIA_USAGE_COLLECTION_DELETION_LIST_ERROR",
+	MEDIA_USAGE_COLLECTION_DELETION_RETRY_ERROR: "MEDIA_USAGE_COLLECTION_DELETION_RETRY_ERROR",
+	MEDIA_USAGE_ACTIVATION_VERSION_MISMATCH: "MEDIA_USAGE_ACTIVATION_VERSION_MISMATCH",
+	MEDIA_USAGE_ACTIVATION_READ_ERROR: "MEDIA_USAGE_ACTIVATION_READ_ERROR",
+	MEDIA_USAGE_ACTIVATION_BUSY: "MEDIA_USAGE_ACTIVATION_BUSY",
+	MEDIA_USAGE_ACTIVATION_CONFLICT: "MEDIA_USAGE_ACTIVATION_CONFLICT",
+	MEDIA_USAGE_ACTIVATION_ADVANCE_ERROR: "MEDIA_USAGE_ACTIVATION_ADVANCE_ERROR",
+	WORK_LEASE_ACTIVE: "WORK_LEASE_ACTIVE",
+	WORK_CHANGED: "WORK_CHANGED",
+	ENTRY_LOCKED: "ENTRY_LOCKED",
+	ENTRY_LOCK_ERROR: "ENTRY_LOCK_ERROR",
+	NO_STORAGE: "NO_STORAGE",
+	NO_FILE: "NO_FILE",
+	INVALID_TYPE: "INVALID_TYPE",
+	UPLOAD_ERROR: "UPLOAD_ERROR",
+	UPLOAD_URL_ERROR: "UPLOAD_URL_ERROR",
+	CONFIRM_ERROR: "CONFIRM_ERROR",
+	CONFIRM_FAILED: "CONFIRM_FAILED",
+	FILE_NOT_FOUND: "FILE_NOT_FOUND",
+	INVALID_STATE: "INVALID_STATE",
+	FILE_SERVE_ERROR: "FILE_SERVE_ERROR",
+	STORAGE_NOT_CONFIGURED: "STORAGE_NOT_CONFIGURED",
+	PROVIDER_LIST_ERROR: "PROVIDER_LIST_ERROR",
+	PROVIDER_UPLOAD_ERROR: "PROVIDER_UPLOAD_ERROR",
+	PROVIDER_GET_ERROR: "PROVIDER_GET_ERROR",
+	PROVIDER_DELETE_ERROR: "PROVIDER_DELETE_ERROR",
+	COMMENT_LIST_ERROR: "COMMENT_LIST_ERROR",
+	COMMENT_GET_ERROR: "COMMENT_GET_ERROR",
+	COMMENT_STATUS_ERROR: "COMMENT_STATUS_ERROR",
+	COMMENT_DELETE_ERROR: "COMMENT_DELETE_ERROR",
+	COMMENT_BULK_ERROR: "COMMENT_BULK_ERROR",
+	COMMENT_INBOX_ERROR: "COMMENT_INBOX_ERROR",
+	COMMENT_COUNTS_ERROR: "COMMENT_COUNTS_ERROR",
+	COMMENT_CREATE_ERROR: "COMMENT_CREATE_ERROR",
+	COMMENTS_DISABLED: "COMMENTS_DISABLED",
+	COMMENTS_CLOSED: "COMMENTS_CLOSED",
+	COMMENT_REJECTED: "COMMENT_REJECTED",
+	ACCOUNT_DISABLED: "ACCOUNT_DISABLED",
+	ADMIN_EXISTS: "ADMIN_EXISTS",
+	SETUP_COMPLETE: "SETUP_COMPLETE",
+	CREDENTIAL_EXISTS: "CREDENTIAL_EXISTS",
+	CHALLENGE_EXPIRED: "CHALLENGE_EXPIRED",
+	PASSKEY_REGISTER_ERROR: "PASSKEY_REGISTER_ERROR",
+	PASSKEY_REGISTER_OPTIONS_ERROR: "PASSKEY_REGISTER_OPTIONS_ERROR",
+	PASSKEY_OPTIONS_ERROR: "PASSKEY_OPTIONS_ERROR",
+	PASSKEY_VERIFY_ERROR: "PASSKEY_VERIFY_ERROR",
+	PASSKEY_LIST_ERROR: "PASSKEY_LIST_ERROR",
+	PASSKEY_RENAME_ERROR: "PASSKEY_RENAME_ERROR",
+	PASSKEY_DELETE_ERROR: "PASSKEY_DELETE_ERROR",
+	PASSKEY_LIMIT: "PASSKEY_LIMIT",
+	LAST_PASSKEY: "LAST_PASSKEY",
+	LOGOUT_ERROR: "LOGOUT_ERROR",
+	SELF_ROLE_CHANGE: "SELF_ROLE_CHANGE",
+	EMAIL_IN_USE: "EMAIL_IN_USE",
+	EMAIL_NOT_CONFIGURED: "EMAIL_NOT_CONFIGURED",
+	USER_EXISTS: "USER_EXISTS",
+	INVALID_TOKEN: "INVALID_TOKEN",
+	TOKEN_EXPIRED: "TOKEN_EXPIRED",
+	SESSION_UNAVAILABLE: "SESSION_UNAVAILABLE",
+	DOMAIN_NOT_ALLOWED: "DOMAIN_NOT_ALLOWED",
+	INVITE_CREATE_ERROR: "INVITE_CREATE_ERROR",
+	INVITE_VALIDATE_ERROR: "INVITE_VALIDATE_ERROR",
+	INVITE_COMPLETE_ERROR: "INVITE_COMPLETE_ERROR",
+	SIGNUP_VERIFY_ERROR: "SIGNUP_VERIFY_ERROR",
+	SIGNUP_COMPLETE_ERROR: "SIGNUP_COMPLETE_ERROR",
+	RECOVERY_SEND_ERROR: "RECOVERY_SEND_ERROR",
+	MAGIC_LINK_VERIFY_ERROR: "MAGIC_LINK_VERIFY_ERROR",
+	NO_SITE_URL: "NO_SITE_URL",
+	SIGN_IN_HANDOVER_ERROR: "SIGN_IN_HANDOVER_ERROR",
+	USER_LIST_ERROR: "USER_LIST_ERROR",
+	USER_DETAIL_ERROR: "USER_DETAIL_ERROR",
+	USER_UPDATE_ERROR: "USER_UPDATE_ERROR",
+	USER_DISABLE_ERROR: "USER_DISABLE_ERROR",
+	USER_ENABLE_ERROR: "USER_ENABLE_ERROR",
+	UNSUPPORTED_RESPONSE_TYPE: "UNSUPPORTED_RESPONSE_TYPE",
+	INVALID_REDIRECT_URI: "INVALID_REDIRECT_URI",
+	INVALID_CLIENT: "INVALID_CLIENT",
+	INVALID_SCOPE: "INVALID_SCOPE",
+	AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR",
+	INVALID_GRANT: "INVALID_GRANT",
+	UNSUPPORTED_GRANT_TYPE: "UNSUPPORTED_GRANT_TYPE",
+	INVALID_CODE: "INVALID_CODE",
+	EXPIRED_CODE: "EXPIRED_CODE",
+	INSUFFICIENT_ROLE: "INSUFFICIENT_ROLE",
+	INSUFFICIENT_SCOPE: "INSUFFICIENT_SCOPE",
+	INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS",
+	TOKEN_EXCHANGE_ERROR: "TOKEN_EXCHANGE_ERROR",
+	TOKEN_REFRESH_ERROR: "TOKEN_REFRESH_ERROR",
+	TOKEN_REVOKE_ERROR: "TOKEN_REVOKE_ERROR",
+	TOKEN_CREATE_ERROR: "TOKEN_CREATE_ERROR",
+	TOKEN_LIST_ERROR: "TOKEN_LIST_ERROR",
+	TOKEN_ERROR: "TOKEN_ERROR",
+	DEVICE_CODE_ERROR: "DEVICE_CODE_ERROR",
+	AUTHORIZE_ERROR: "AUTHORIZE_ERROR",
+	CLIENT_LIST_ERROR: "CLIENT_LIST_ERROR",
+	CLIENT_GET_ERROR: "CLIENT_GET_ERROR",
+	CLIENT_CREATE_ERROR: "CLIENT_CREATE_ERROR",
+	CLIENT_UPDATE_ERROR: "CLIENT_UPDATE_ERROR",
+	CLIENT_DELETE_ERROR: "CLIENT_DELETE_ERROR",
+	DOMAIN_LIST_ERROR: "DOMAIN_LIST_ERROR",
+	DOMAIN_CREATE_ERROR: "DOMAIN_CREATE_ERROR",
+	DOMAIN_UPDATE_ERROR: "DOMAIN_UPDATE_ERROR",
+	DOMAIN_DELETE_ERROR: "DOMAIN_DELETE_ERROR",
+	UPDATE_CHECK_ERROR: "UPDATE_CHECK_ERROR",
+	PLUGIN_LIST_ERROR: "PLUGIN_LIST_ERROR",
+	PLUGIN_GET_ERROR: "PLUGIN_GET_ERROR",
+	PLUGIN_ENABLE_ERROR: "PLUGIN_ENABLE_ERROR",
+	PLUGIN_DISABLE_ERROR: "PLUGIN_DISABLE_ERROR",
+	PLUGIN_ID_CONFLICT: "PLUGIN_ID_CONFLICT",
+	PLUGIN_SETTINGS_READ_ERROR: "PLUGIN_SETTINGS_READ_ERROR",
+	PLUGIN_SETTINGS_UPDATE_ERROR: "PLUGIN_SETTINGS_UPDATE_ERROR",
+	PLUGIN_SETTING_ENCRYPTION_KEY_MISSING: "PLUGIN_SETTING_ENCRYPTION_KEY_MISSING",
+	PLUGIN_SETTING_ENCRYPTION_KEY_INVALID: "PLUGIN_SETTING_ENCRYPTION_KEY_INVALID",
+	PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN: "PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN",
+	PLUGIN_SETTING_ENCRYPTION_FAILED: "PLUGIN_SETTING_ENCRYPTION_FAILED",
+	PLUGIN_SETTING_DECRYPTION_FAILED: "PLUGIN_SETTING_DECRYPTION_FAILED",
+	MARKETPLACE_NOT_CONFIGURED: "MARKETPLACE_NOT_CONFIGURED",
+	MARKETPLACE_UNAVAILABLE: "MARKETPLACE_UNAVAILABLE",
+	MARKETPLACE_ERROR: "MARKETPLACE_ERROR",
+	SANDBOX_NOT_AVAILABLE: "SANDBOX_NOT_AVAILABLE",
+	ALREADY_INSTALLED: "ALREADY_INSTALLED",
+	ALREADY_UP_TO_DATE: "ALREADY_UP_TO_DATE",
+	NO_VERSION: "NO_VERSION",
+	INVALID_VERSION: "INVALID_VERSION",
+	DOWNGRADE_NOT_ALLOWED: "DOWNGRADE_NOT_ALLOWED",
+	MANIFEST_MISMATCH: "MANIFEST_MISMATCH",
+	MANIFEST_VERSION_MISMATCH: "MANIFEST_VERSION_MISMATCH",
+	AUDIT_FAILED: "AUDIT_FAILED",
+	CHECKSUM_MISMATCH: "CHECKSUM_MISMATCH",
+	INVALID_BUNDLE: "INVALID_BUNDLE",
+	BUNDLE_EXTRACT_FAILED: "BUNDLE_EXTRACT_FAILED",
+	BUNDLE_DOWNLOAD_FAILED: "BUNDLE_DOWNLOAD_FAILED",
+	AGGREGATOR_RESPONSE_INVALID: "AGGREGATOR_RESPONSE_INVALID",
+	AGGREGATOR_HTTP_ERROR: "AGGREGATOR_HTTP_ERROR",
+	AGGREGATOR_NOT_FOUND: "AGGREGATOR_NOT_FOUND",
+	CAPABILITY_ESCALATION: "CAPABILITY_ESCALATION",
+	ROUTE_VISIBILITY_ESCALATION: "ROUTE_VISIBILITY_ESCALATION",
+	ENV_INCOMPATIBLE: "ENV_INCOMPATIBLE",
+	INSTALL_FAILED: "INSTALL_FAILED",
+	UNINSTALL_FAILED: "UNINSTALL_FAILED",
+	SEARCH_FAILED: "SEARCH_FAILED",
+	GET_PLUGIN_FAILED: "GET_PLUGIN_FAILED",
+	GET_THEME_FAILED: "GET_THEME_FAILED",
+	THEME_SEARCH_FAILED: "THEME_SEARCH_FAILED",
+	UPDATE_CHECK_FAILED: "UPDATE_CHECK_FAILED",
+	EXCLUSIVE_HOOKS_LIST_ERROR: "EXCLUSIVE_HOOKS_LIST_ERROR",
+	EXCLUSIVE_HOOK_SET_ERROR: "EXCLUSIVE_HOOK_SET_ERROR",
+	MENU_LIST_ERROR: "MENU_LIST_ERROR",
+	MENU_CREATE_ERROR: "MENU_CREATE_ERROR",
+	MENU_GET_ERROR: "MENU_GET_ERROR",
+	MENU_UPDATE_ERROR: "MENU_UPDATE_ERROR",
+	MENU_DELETE_ERROR: "MENU_DELETE_ERROR",
+	MENU_ITEM_CREATE_ERROR: "MENU_ITEM_CREATE_ERROR",
+	MENU_ITEM_UPDATE_ERROR: "MENU_ITEM_UPDATE_ERROR",
+	MENU_ITEM_DELETE_ERROR: "MENU_ITEM_DELETE_ERROR",
+	MENU_REORDER_ERROR: "MENU_REORDER_ERROR",
+	AMBIGUOUS_LOCALE: "AMBIGUOUS_LOCALE",
+	TAXONOMY_LIST_ERROR: "TAXONOMY_LIST_ERROR",
+	TAXONOMY_CREATE_ERROR: "TAXONOMY_CREATE_ERROR",
+	TAXONOMY_GET_ERROR: "TAXONOMY_GET_ERROR",
+	TAXONOMY_UPDATE_ERROR: "TAXONOMY_UPDATE_ERROR",
+	TAXONOMY_DELETE_ERROR: "TAXONOMY_DELETE_ERROR",
+	TAXONOMY_TRANSLATIONS_ERROR: "TAXONOMY_TRANSLATIONS_ERROR",
+	TERM_LIST_ERROR: "TERM_LIST_ERROR",
+	TERM_CREATE_ERROR: "TERM_CREATE_ERROR",
+	TERM_GET_ERROR: "TERM_GET_ERROR",
+	TERM_UPDATE_ERROR: "TERM_UPDATE_ERROR",
+	TERM_DELETE_ERROR: "TERM_DELETE_ERROR",
+	TERM_REORDER_ERROR: "TERM_REORDER_ERROR",
+	TERMS_GET_ERROR: "TERMS_GET_ERROR",
+	TERMS_SET_ERROR: "TERMS_SET_ERROR",
+	RELATION_LIST_ERROR: "RELATION_LIST_ERROR",
+	RELATION_CREATE_ERROR: "RELATION_CREATE_ERROR",
+	RELATION_GET_ERROR: "RELATION_GET_ERROR",
+	RELATION_UPDATE_ERROR: "RELATION_UPDATE_ERROR",
+	RELATION_DELETE_ERROR: "RELATION_DELETE_ERROR",
+	RELATION_TRANSLATIONS_ERROR: "RELATION_TRANSLATIONS_ERROR",
+	REFERENCES_GET_ERROR: "REFERENCES_GET_ERROR",
+	REFERENCES_SET_ERROR: "REFERENCES_SET_ERROR",
+	SECTION_LIST_ERROR: "SECTION_LIST_ERROR",
+	SECTION_CREATE_ERROR: "SECTION_CREATE_ERROR",
+	SECTION_GET_ERROR: "SECTION_GET_ERROR",
+	SECTION_UPDATE_ERROR: "SECTION_UPDATE_ERROR",
+	SECTION_DELETE_ERROR: "SECTION_DELETE_ERROR",
+	REDIRECT_LIST_ERROR: "REDIRECT_LIST_ERROR",
+	REDIRECT_CREATE_ERROR: "REDIRECT_CREATE_ERROR",
+	REDIRECT_GET_ERROR: "REDIRECT_GET_ERROR",
+	REDIRECT_UPDATE_ERROR: "REDIRECT_UPDATE_ERROR",
+	REDIRECT_DELETE_ERROR: "REDIRECT_DELETE_ERROR",
+	NOT_FOUND_LIST_ERROR: "NOT_FOUND_LIST_ERROR",
+	NOT_FOUND_SUMMARY_ERROR: "NOT_FOUND_SUMMARY_ERROR",
+	NOT_FOUND_CLEAR_ERROR: "NOT_FOUND_CLEAR_ERROR",
+	NOT_FOUND_PRUNE_ERROR: "NOT_FOUND_PRUNE_ERROR",
+	WIDGET_AREA_LIST_ERROR: "WIDGET_AREA_LIST_ERROR",
+	WIDGET_AREA_CREATE_ERROR: "WIDGET_AREA_CREATE_ERROR",
+	WIDGET_AREA_GET_ERROR: "WIDGET_AREA_GET_ERROR",
+	WIDGET_AREA_DELETE_ERROR: "WIDGET_AREA_DELETE_ERROR",
+	WIDGET_CREATE_ERROR: "WIDGET_CREATE_ERROR",
+	WIDGET_UPDATE_ERROR: "WIDGET_UPDATE_ERROR",
+	WIDGET_DELETE_ERROR: "WIDGET_DELETE_ERROR",
+	WIDGET_REORDER_ERROR: "WIDGET_REORDER_ERROR",
+	WIDGET_COMPONENTS_ERROR: "WIDGET_COMPONENTS_ERROR",
+	ALREADY_CONFIGURED: "ALREADY_CONFIGURED",
+	INVALID_SEED: "INVALID_SEED",
+	INVALID_REDIRECT: "INVALID_REDIRECT",
+	SETUP_ERROR: "SETUP_ERROR",
+	SETUP_STATUS_ERROR: "SETUP_STATUS_ERROR",
+	SETUP_ADMIN_ERROR: "SETUP_ADMIN_ERROR",
+	SETUP_VERIFY_ERROR: "SETUP_VERIFY_ERROR",
+	DEV_BYPASS_ERROR: "DEV_BYPASS_ERROR",
+	DEV_RESET_ERROR: "DEV_RESET_ERROR",
+	MIGRATION_ERROR: "MIGRATION_ERROR",
+	SEED_ERROR: "SEED_ERROR",
+	SETTINGS_READ_ERROR: "SETTINGS_READ_ERROR",
+	SETTINGS_UPDATE_ERROR: "SETTINGS_UPDATE_ERROR",
+	EMAIL_SETTINGS_READ_ERROR: "EMAIL_SETTINGS_READ_ERROR",
+	EMAIL_TEST_ERROR: "EMAIL_TEST_ERROR",
+	SITE_DOMAIN_ERROR: "SITE_DOMAIN_ERROR",
+	DOMAIN_PROOF_ERROR: "DOMAIN_PROOF_ERROR",
+	DOMAIN_MOVE_NOTICE_ERROR: "DOMAIN_MOVE_NOTICE_ERROR",
+	BACKUP_SETTINGS_READ_ERROR: "BACKUP_SETTINGS_READ_ERROR",
+	BACKUP_SETTINGS_ERROR: "BACKUP_SETTINGS_ERROR",
+	BACKUP_EXPORT_ERROR: "BACKUP_EXPORT_ERROR",
+	BACKUP_LIST_ERROR: "BACKUP_LIST_ERROR",
+	BACKUP_CREATE_ERROR: "BACKUP_CREATE_ERROR",
+	BACKUP_DELETE_ERROR: "BACKUP_DELETE_ERROR",
+	BACKUP_DOWNLOAD_ERROR: "BACKUP_DOWNLOAD_ERROR",
+	SEARCH_ERROR: "SEARCH_ERROR",
+	STATS_ERROR: "STATS_ERROR",
+	SUGGESTION_ERROR: "SUGGESTION_ERROR",
+	REBUILD_ERROR: "REBUILD_ERROR",
+	WXR_ANALYZE_ERROR: "WXR_ANALYZE_ERROR",
+	WXR_PREPARE_ERROR: "WXR_PREPARE_ERROR",
+	WXR_IMPORT_ERROR: "WXR_IMPORT_ERROR",
+	IMPORT_ERROR: "IMPORT_ERROR",
+	REWRITE_ERROR: "REWRITE_ERROR",
+	WP_PLUGIN_ANALYZE_ERROR: "WP_PLUGIN_ANALYZE_ERROR",
+	WP_PLUGIN_IMPORT_ERROR: "WP_PLUGIN_IMPORT_ERROR",
+	SSRF_BLOCKED: "SSRF_BLOCKED",
+	PROBE_ERROR: "PROBE_ERROR",
+	DASHBOARD_ERROR: "DASHBOARD_ERROR",
+	DASHBOARD_STATS_ERROR: "DASHBOARD_STATS_ERROR",
+	CALENDAR_ERROR: "CALENDAR_ERROR",
+	SNAPSHOT_ERROR: "SNAPSHOT_ERROR",
+	TYPEGEN_ERROR: "TYPEGEN_ERROR",
+	SITEMAP_ERROR: "SITEMAP_ERROR",
+	NO_DB: "NO_DB",
+	INVALID_REQUEST: "INVALID_REQUEST",
+	UNKNOWN_ACTION: "UNKNOWN_ACTION",
+	...TransferErrorCode
+};
+/**
+* OAuth RFC 6749 error codes.
+*
+* These MUST be lowercase per the RFC spec. Used only by OAuth token endpoints.
+* Separate from ErrorCode to prevent mixing conventions.
+*/
+const OAuthErrorCode = {
+	INVALID_GRANT: "invalid_grant",
+	UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type",
+	EXPIRED_TOKEN: "expired_token",
+	ACCESS_DENIED: "access_denied",
+	AUTHORIZATION_PENDING: "authorization_pending"
+};
+/**
+* Map a handler error code to an HTTP status code.
+*
+* Shared codes have explicit mappings. Domain-specific `*_ERROR` codes
+* (used in catch blocks via handleError) default to 500. Everything else
+* defaults to 400 (client error).
+*/
+function mapErrorStatus(code) {
+	const transferStatus = transferErrorStatus(code);
+	if (transferStatus !== void 0) return transferStatus;
+	switch (code) {
+		case ErrorCode.VALIDATION_ERROR:
+		case ErrorCode.INVALID_INPUT:
+		case ErrorCode.INVALID_JSON:
+		case ErrorCode.INVALID_CURSOR:
+		case ErrorCode.MISSING_PARAM:
+		case ErrorCode.INVALID_REQUEST:
+		case ErrorCode.NOT_SUPPORTED:
+		case ErrorCode.INVALID_SLUG:
+		case ErrorCode.RESERVED_SLUG:
+		case ErrorCode.INVALID_TYPE:
+		case ErrorCode.NO_FILE:
+		case ErrorCode.INVALID_STATE:
+		case ErrorCode.INVALID_SEED:
+		case ErrorCode.INVALID_REDIRECT:
+		case ErrorCode.INVALID_TOKEN:
+		case ErrorCode.INVALID_REVISION:
+		case ErrorCode.INVALID_CODE:
+		case ErrorCode.CHALLENGE_EXPIRED:
+		case ErrorCode.EXPIRED_CODE:
+		case ErrorCode.LAST_PASSKEY:
+		case ErrorCode.PASSKEY_LIMIT:
+		case ErrorCode.ADMIN_EXISTS:
+		case ErrorCode.SETUP_COMPLETE:
+		case ErrorCode.SELF_ROLE_CHANGE:
+		case ErrorCode.SSRF_BLOCKED:
+		case ErrorCode.UNKNOWN_ACTION:
+		case ErrorCode.AMBIGUOUS_LOCALE:
+		case ErrorCode.REORDER_MISMATCH:
+		case ErrorCode.INVALID_VERSION:
+		case ErrorCode.DOWNGRADE_NOT_ALLOWED: return 400;
+		case ErrorCode.UNSUPPORTED_FIELD_TYPE: return 409;
+		case ErrorCode.UNAUTHORIZED:
+		case ErrorCode.NOT_AUTHENTICATED: return 401;
+		case ErrorCode.FORBIDDEN:
+		case ErrorCode.CSRF_REJECTED:
+		case ErrorCode.ACCOUNT_DISABLED:
+		case ErrorCode.COMMENTS_DISABLED:
+		case ErrorCode.COMMENTS_CLOSED:
+		case ErrorCode.COMMENT_REJECTED:
+		case ErrorCode.DOMAIN_NOT_ALLOWED:
+		case ErrorCode.INSUFFICIENT_ROLE:
+		case ErrorCode.INSUFFICIENT_SCOPE:
+		case ErrorCode.INSUFFICIENT_PERMISSIONS:
+		case ErrorCode.CAPABILITY_ESCALATION:
+		case ErrorCode.ROUTE_VISIBILITY_ESCALATION:
+		case ErrorCode.AUDIT_FAILED: return 403;
+		case ErrorCode.NOT_FOUND:
+		case ErrorCode.TABLE_NOT_FOUND:
+		case ErrorCode.COLLECTION_NOT_FOUND:
+		case ErrorCode.FILE_NOT_FOUND:
+		case ErrorCode.NO_VERSION:
+		case ErrorCode.AGGREGATOR_NOT_FOUND:
+		case ErrorCode.BLOCK_TYPE_NOT_FOUND: return 404;
+		case ErrorCode.CONFLICT:
+		case ErrorCode.SLUG_CONFLICT:
+		case ErrorCode.COLLECTION_EXISTS:
+		case ErrorCode.COLLECTION_TABLE_ORPHANED:
+		case ErrorCode.FIELD_EXISTS:
+		case ErrorCode.CREDENTIAL_EXISTS:
+		case ErrorCode.EMAIL_IN_USE:
+		case ErrorCode.USER_EXISTS:
+		case ErrorCode.NO_SITE_URL:
+		case ErrorCode.PLUGIN_ID_CONFLICT:
+		case ErrorCode.ALREADY_INSTALLED:
+		case ErrorCode.ALREADY_CONFIGURED:
+		case ErrorCode.ALREADY_UP_TO_DATE:
+		case ErrorCode.TRANSLATABLE_LOCKED:
+		case ErrorCode.ENV_INCOMPATIBLE:
+		case ErrorCode.WORK_LEASE_ACTIVE:
+		case ErrorCode.WORK_CHANGED:
+		case ErrorCode.ENTRY_LOCKED:
+		case ErrorCode.BLOCK_TYPE_EXISTS:
+		case ErrorCode.BLOCK_TYPE_BREAKING_CHANGE:
+		case ErrorCode.BLOCK_TYPE_VERSION_CONFLICT:
+		case ErrorCode.MEDIA_USAGE_ACTIVATION_VERSION_MISMATCH:
+		case ErrorCode.MEDIA_USAGE_ACTIVATION_BUSY:
+		case ErrorCode.MEDIA_USAGE_ACTIVATION_CONFLICT:
+		case ErrorCode.MEDIA_USAGE_PROGRESS_NOT_ACTIVE: return 409;
+		case ErrorCode.TOKEN_EXPIRED: return 410;
+		case ErrorCode.SAVE_REJECTED:
+		case ErrorCode.PUBLISH_REJECTED:
+		case ErrorCode.SCHEDULE_REJECTED:
+		case ErrorCode.UNPUBLISH_REJECTED:
+		case ErrorCode.CHECKSUM_MISMATCH:
+		case ErrorCode.INVALID_BUNDLE:
+		case ErrorCode.BUNDLE_EXTRACT_FAILED:
+		case ErrorCode.DOMAIN_CHECK_FAILED: return 422;
+		case ErrorCode.RATE_LIMITED: return 429;
+		case ErrorCode.NOT_CONFIGURED:
+		case ErrorCode.BINDING_NOT_FOUND:
+		case ErrorCode.CONFIGURATION_ERROR:
+		case ErrorCode.NO_STORAGE:
+		case ErrorCode.NO_DB:
+		case ErrorCode.STORAGE_NOT_CONFIGURED:
+		case ErrorCode.EMAIL_NOT_CONFIGURED:
+		case ErrorCode.SESSION_UNAVAILABLE:
+		case ErrorCode.COLLECTION_SCHEMA_MISMATCH: return 500;
+		case ErrorCode.NOT_IMPLEMENTED: return 501;
+		case ErrorCode.BUNDLE_DOWNLOAD_FAILED:
+		case ErrorCode.AGGREGATOR_RESPONSE_INVALID:
+		case ErrorCode.AGGREGATOR_HTTP_ERROR: return 502;
+		case ErrorCode.MARKETPLACE_UNAVAILABLE:
+		case ErrorCode.MARKETPLACE_NOT_CONFIGURED:
+		case ErrorCode.SANDBOX_NOT_AVAILABLE: return 503;
+		default: return code?.endsWith("_ERROR") ? 500 : 400;
+	}
+}
+
+//#endregion
+export { OAuthErrorCode as n, mapErrorStatus as r, ErrorCode as t };
+//# sourceMappingURL=errors-8gJqv-XV.mjs.map