nextly 0.0.2-alpha.7 → 0.0.2-alpha.9

package/dist/{chunk-ZVN3JILF.mjs → chunk-KPCSDPFQ.mjs}

@@ -1,6 +1,6 @@
 import {
   CollectionRegistryService
-} from "./chunk-D72XH3BG.mjs";
+} from "./chunk-ERJGWWPB.mjs";
 import {
   getAdapterFromDI,
   getCollectionRegistryFromDI,
@@ -27,29 +27,29 @@ import {
   getProductionNotifier,
   noopMigrationJournal,
   noopPreRenameExecutor
-} from "./chunk-66ZNVKTF.mjs";
+} from "./chunk-HSIAXEYF.mjs";
 import {
   previewDesiredSchema
-} from "./chunk-JWAH6ROD.mjs";
+} from "./chunk-TVG3WU6C.mjs";
 import {
   RealClassifier,
   RegexRenameDetector,
   countNulls,
   countRows
-} from "./chunk-J4KHGYOM.mjs";
+} from "./chunk-JCQMC6HH.mjs";
 import {
   ComponentSchemaService
-} from "./chunk-JXZITQPZ.mjs";
+} from "./chunk-4HUQNXVM.mjs";
 import {
   resolveSingleTableName
 } from "./chunk-I4JMR3UR.mjs";
 import {
   DynamicCollectionSchemaService,
   DynamicCollectionValidationService
-} from "./chunk-LP2CDTCR.mjs";
+} from "./chunk-A75OLKXP.mjs";
 import {
   generateRuntimeSchema
-} from "./chunk-UB4CALU5.mjs";
+} from "./chunk-2QSGNGOB.mjs";
 import {
   calculateSchemaHash
 } from "./chunk-5HMZ644B.mjs";
@@ -65,11 +65,11 @@ import {
   listRoleSlugsForUser,
   validatePasswordStrength,
   verifyPassword
-} from "./chunk-NAP3TDS6.mjs";
+} from "./chunk-SWVNFKWD.mjs";
 import {
   BaseService,
   normalizeDbTimestamp
-} from "./chunk-2W3DVD7S.mjs";
+} from "./chunk-PFRMIEJ3.mjs";
 import {
   apiKeys,
   apiKeys2,
@@ -90,13 +90,13 @@ import {
   userRoles,
   userRoles2,
   userRoles3
-} from "./chunk-TS7GHTG2.mjs";
+} from "./chunk-YXZH65YV.mjs";
 import {
   createAdapterFromEnv
-} from "./chunk-DP3G27G5.mjs";
+} from "./chunk-35LAHTCU.mjs";
 import {
   env
-} from "./chunk-UJ2IMJ4W.mjs";
+} from "./chunk-HREB7UR4.mjs";
 import {
   deleteImageSizes,
   generateImageSizes,
@@ -120,7 +120,7 @@ import {
 import {
   NextlyError,
   toDbError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 import {
   toPluralLabel,
   toSingularLabel
@@ -288,7 +288,7 @@ var AuthService = class extends BaseService {
     }
     let newUser;
     try {
-      const userService = new (await import("./users-NFD7IUFT.mjs")).UsersService(this.adapter, this.logger);
+      const userService = new (await import("./users-Q773BQCU.mjs")).UsersService(this.adapter, this.logger);
       newUser = await userService.createLocalUser({
         email: userData.email,
         name: userData.name ?? "User",
@@ -7728,7 +7728,7 @@ var CollectionMetadataService = class extends BaseService {
    */
   async registerRuntimeSchema(tableName, fields, options) {
     try {
-      const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-MOPQWGJP.mjs");
+      const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-NQOLDUDG.mjs");
       const dialect = this.adapter.getCapabilities().dialect;
       const { table } = generateRuntimeSchema2(tableName, fields, dialect, {
         status: options?.hasStatus === true
@@ -14452,6 +14452,81 @@ var CollectionEntryService = class extends BaseService {
 
 // src/domains/collections/services/collection-relationship-service.ts
 import { eq as eq11, inArray as inArray6, sql as sql5 } from "drizzle-orm";
+
+// src/shared/lib/get-base-url.ts
+function getBaseUrl(override) {
+  const raw = override?.trim() || env.NEXT_PUBLIC_APP_URL?.trim();
+  const url = raw || "http://localhost:3000";
+  return url.replace(/\/+$/, "");
+}
+
+// src/lib/media-variant.ts
+function getMediaVariant(media, name, options = {}) {
+  if (!media) return void 0;
+  const { fallback, preferThumbnail = true } = options;
+  const sizes = media.sizes ?? null;
+  if (sizes) {
+    const direct = sizes[name];
+    if (direct?.url) return direct.url;
+    if (fallback) {
+      const fb = sizes[fallback];
+      if (fb?.url) return fb.url;
+    }
+  }
+  if (preferThumbnail && media.thumbnailUrl) return media.thumbnailUrl;
+  return media.url;
+}
+function getSmallestMediaVariant(media) {
+  if (!media) return void 0;
+  const sizes = media.sizes ?? null;
+  if (sizes) {
+    const entries = Object.values(sizes).filter(
+      (v) => v?.url && v.width && v.height
+    );
+    if (entries.length > 0) {
+      const smallest = entries.reduce(
+        (acc, cur) => (cur.width ?? 0) * (cur.height ?? 0) < (acc.width ?? 0) * (acc.height ?? 0) ? cur : acc
+      );
+      return smallest.url;
+    }
+  }
+  return media.thumbnailUrl ?? media.url;
+}
+function getMediaBaseUrl() {
+  return getBaseUrl();
+}
+function isAbsoluteUrl(url) {
+  return /^(?:[a-z][a-z0-9+.-]*:)?\/\//i.test(url);
+}
+function toAbsoluteMediaUrl(url, baseUrl = getMediaBaseUrl()) {
+  if (!url) return url;
+  if (isAbsoluteUrl(url)) return url;
+  const path3 = url.startsWith("/") ? url : `/${url}`;
+  return `${baseUrl}${path3}`;
+}
+function absolutizeMediaUrls(row, baseUrl = getMediaBaseUrl()) {
+  const sizes = row.sizes;
+  let absolutizedSizes = sizes ?? null;
+  if (sizes && typeof sizes === "object") {
+    absolutizedSizes = Object.fromEntries(
+      Object.entries(sizes).map(([name, variant]) => [
+        name,
+        variant && typeof variant === "object" ? {
+          ...variant,
+          url: toAbsoluteMediaUrl(variant.url ?? null, baseUrl)
+        } : variant
+      ])
+    );
+  }
+  return {
+    ...row,
+    url: toAbsoluteMediaUrl(row.url ?? null, baseUrl),
+    thumbnailUrl: toAbsoluteMediaUrl(row.thumbnailUrl ?? null, baseUrl),
+    ...sizes !== void 0 ? { sizes: absolutizedSizes } : {}
+  };
+}
+
+// src/domains/collections/services/collection-relationship-service.ts
 var DEFAULT_RELATIONSHIP_DEPTH = 2;
 var MAX_RELATIONSHIP_DEPTH = 5;
 function isRelationshipField3(field) {
@@ -15377,7 +15452,10 @@ var CollectionRelationshipService = class extends BaseService {
         return [];
       }
       const rows = await this.db.select().from(mediaTable).where(inArray6(mediaTable.id, ids));
-      return rows.map((row) => keysToCamelCase(row));
+      return rows.map((row) => {
+        const camel = keysToCamelCase(row);
+        return absolutizeMediaUrls(camel);
+      });
     } catch (error) {
       console.error("Failed to fetch media by IDs:", error);
       return [];
@@ -18434,8 +18512,8 @@ var MediaService2 = class {
       width: data.width,
       height: data.height,
       duration: data.duration,
-      url: data.url,
-      thumbnailUrl: data.thumbnailUrl,
+      url: toAbsoluteMediaUrl(data.url),
+      thumbnailUrl: toAbsoluteMediaUrl(data.thumbnailUrl),
       altText: data.altText,
       caption: data.caption,
       tags: data.tags,
@@ -20205,7 +20283,7 @@ var COLLECTIONS_METHODS = {
         );
       }
       try {
-        const { bumpSchemaVersion } = await import("./routeHandler-ROBRMRZA.mjs");
+        const { bumpSchemaVersion } = await import("./routeHandler-P2KXM7MH.mjs");
         bumpSchemaVersion();
       } catch {
       }
@@ -21291,7 +21369,7 @@ var SINGLES_METHODS = {
           if (tableExists) {
             migrationStatus = "applied";
             try {
-              const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-MOPQWGJP.mjs");
+              const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-NQOLDUDG.mjs");
               const dialect = adapter.getCapabilities().dialect;
               const { table: runtimeTable } = generateRuntimeSchema2(
                 tableName,
@@ -21569,7 +21647,7 @@ var SINGLES_METHODS = {
             if (tableExistsAfter) {
               migrationStatus = "applied";
               try {
-                const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-MOPQWGJP.mjs");
+                const { generateRuntimeSchema: generateRuntimeSchema2 } = await import("./runtime-schema-generator-NQOLDUDG.mjs");
                 const dialect = adapter.getCapabilities().dialect;
                 const { table: runtimeTable } = generateRuntimeSchema2(
                   tableName,
@@ -25436,6 +25514,10 @@ export {
   transformRichTextFields,
   resolveStatusFilter,
   CollectionEntryService,
+  getBaseUrl,
+  getMediaVariant,
+  getSmallestMediaVariant,
+  toAbsoluteMediaUrl,
   CollectionRelationshipService,
   clampLimit2,
   parseWhereQuery,

package/dist/{chunk-M52VMPGA.mjs → chunk-KZFYCMBL.mjs}

@@ -57,7 +57,7 @@ async function createAdapter(options = {}) {
     );
   }
   logger?.debug(`Creating ${dialect} adapter...`);
-  const { createAdapterFromEnv } = await import("./factory-IWMBKUJM.mjs");
+  const { createAdapterFromEnv } = await import("./factory-UGJGOZZ7.mjs");
   const originalDialect = process.env.DB_DIALECT;
   const originalUrl = process.env.DATABASE_URL;
   try {

package/dist/{chunk-FQH647CT.mjs → chunk-NJ3LXLSJ.mjs}

@@ -1,13 +1,16 @@
 import {
   PromptCancelledError,
   TTYRequiredError
-} from "./chunk-66ZNVKTF.mjs";
+} from "./chunk-HSIAXEYF.mjs";
 
 // src/domains/schema/pipeline/prompt-dispatcher/clack-terminal.ts
 import * as clack from "@clack/prompts";
 function hasTTY() {
   return Boolean(process.stdin.isTTY && process.stdout.isTTY);
 }
+function shouldAutoConfirmDrops() {
+  return process.env.NEXTLY_ALLOW_CODE_FIRST_DROPS === "1";
+}
 var ClackTerminalPromptDispatcher = class {
   async dispatch(args) {
     const { candidates, events } = args;
@@ -16,9 +19,18 @@ var ClackTerminalPromptDispatcher = class {
     }
     if (!hasTTY()) {
       const renameSample = candidates.slice(0, 3).map((c) => `${c.fromColumn} -> ${c.toColumn} on ${c.tableName}`).join(", ");
-      const eventSample = events.slice(0, 3).map(
-        (e) => e.kind === "type_change" ? `type change on ${e.tableName}.${e.columnName} (${e.fromType} -> ${e.toType})` : `${e.kind === "add_not_null_with_nulls" ? "NOT NULL on" : "required field"} ${e.tableName}.${e.columnName}`
-      ).join(", ");
+      const eventSample = events.slice(0, 3).map((e) => {
+        switch (e.kind) {
+          case "type_change":
+            return `type change on ${e.tableName}.${e.columnName} (${e.fromType} -> ${e.toType})`;
+          case "add_not_null_with_nulls":
+            return `NOT NULL on ${e.tableName}.${e.columnName}`;
+          case "add_required_field_no_default":
+            return `required field ${e.tableName}.${e.columnName}`;
+          case "destructive_drop":
+            return `drop column ${e.tableName}.${e.columnName} (${e.columnType}, ${e.tableRowCount} row(s))`;
+        }
+      }).join(", ");
       const parts = [];
       if (candidates.length > 0) {
         parts.push(`${candidates.length} rename candidate(s): ${renameSample}`);
@@ -54,8 +66,40 @@ ${parts.join("\n")}`
       return { resolutions: [], proceed: true };
     }
     const resolutions = [];
+    const autoConfirmDrops = shouldAutoConfirmDrops();
+    const allDestructiveDrops = events.every(
+      (e) => e.kind === "destructive_drop"
+    );
+    if (autoConfirmDrops && allDestructiveDrops) {
+      for (const event of events) {
+        if (event.kind !== "destructive_drop") continue;
+        resolutions.push({ kind: "confirm_drop", eventId: event.id });
+      }
+      return { resolutions, proceed: true };
+    }
     clack.intro("Schema change requires confirmation");
     for (const event of events) {
+      if (event.kind === "destructive_drop") {
+        clack.note(
+          `Type: ${event.columnType}
+Rows affected: ${event.tableRowCount}`,
+          `Drop column "${event.tableName}.${event.columnName}"`
+        );
+        if (autoConfirmDrops) {
+          resolutions.push({ kind: "confirm_drop", eventId: event.id });
+          continue;
+        }
+        const proceed = await clack.confirm({
+          message: `Drop "${event.columnName}" from "${event.tableName}"?`,
+          initialValue: false
+        });
+        if (clack.isCancel(proceed) || proceed === false) {
+          clack.outro("Cancelled");
+          return { resolutions, proceed: false };
+        }
+        resolutions.push({ kind: "confirm_drop", eventId: event.id });
+        continue;
+      }
       if (event.kind === "type_change") {
         clack.note(
           [
@@ -82,6 +126,11 @@ ${event.nullCount} of ${event.tableRowCount} rows have NULL values.` : `New requ
         provide_default: "Provide a default value for empty rows",
         make_optional: "Make the field optional (cancel the NOT NULL)",
         delete_nonconforming: event.kind === "add_not_null_with_nulls" ? `Delete the ${event.nullCount} rows with empty values` : "Delete rows that violate the constraint",
+        // Unreachable for NOT-NULL kinds (destructive_drop never lists
+        // these resolutions in applicableResolutions), but Record<K,V>
+        // requires every key. The label only surfaces if a future event
+        // erroneously includes confirm_drop in its applicableResolutions.
+        confirm_drop: "Confirm the drop",
         abort: "Cancel everything"
       };
       const options = event.applicableResolutions.map((kind2) => ({

package/dist/{chunk-MWW7OUDL.mjs → chunk-OVQCDNU3.mjs}

@@ -1,6 +1,6 @@
 import {
   ClackTerminalPromptDispatcher
-} from "./chunk-FQH647CT.mjs";
+} from "./chunk-NJ3LXLSJ.mjs";
 import {
   extractDatabaseNameFromUrl
 } from "./chunk-KIMNCZGV.mjs";
@@ -8,21 +8,23 @@ import {
   DrizzleStatementExecutor,
   PushSchemaPipeline,
   RealPreCleanupExecutor,
+  clearLiveSnapshots,
   createApplyDesiredSchema,
   getProductionNotifier,
   noopMigrationJournal,
-  noopPreRenameExecutor
-} from "./chunk-66ZNVKTF.mjs";
+  noopPreRenameExecutor,
+  setLiveSnapshot
+} from "./chunk-HSIAXEYF.mjs";
 import {
   RealClassifier,
   RegexRenameDetector,
   buildDesiredTableFromFields,
   diffSnapshots,
   introspectLiveSnapshot
-} from "./chunk-J4KHGYOM.mjs";
+} from "./chunk-JCQMC6HH.mjs";
 import {
   generateRuntimeSchema
-} from "./chunk-UB4CALU5.mjs";
+} from "./chunk-2QSGNGOB.mjs";
 
 // src/domains/schema/utils/resolve-table-name.ts
 function resolveCollectionTableName(slug, dbName) {
@@ -33,7 +35,7 @@ function resolveCollectionTableName(slug, dbName) {
 
 // src/init/reload-config.ts
 async function defaultResolver(name) {
-  const { getService } = await import("./register-G6I4N6QM.mjs");
+  const { getService } = await import("./register-O2CJDFCK.mjs");
   return getService(name);
 }
 async function reloadNextlyConfig(opts) {
@@ -41,7 +43,7 @@ async function reloadNextlyConfig(opts) {
   const resolve = (name) => resolverArg ? resolverArg(name) : defaultResolver(name);
   let newConfig;
   try {
-    const { loadConfig, clearConfigCache } = await import("./config-loader-23YEMC3Z.mjs");
+    const { loadConfig, clearConfigCache } = await import("./config-loader-MUFY6UMU.mjs");
     clearConfigCache();
     const result = await loadConfig();
     newConfig = result.config;
@@ -99,18 +101,17 @@ async function reloadNextlyConfig(opts) {
       fields: c.fields ?? []
     });
   }
-  if (targets.length === 0 && singleTargets.length === 0 && componentTargets.length === 0) return;
+  if (targets.length === 0 && singleTargets.length === 0 && componentTargets.length === 0)
+    return;
+  const managedTableNames = [
+    ...targets.map((t) => t.tableName),
+    ...singleTargets.map((t) => t.tableName),
+    ...componentTargets.map((t) => t.tableName)
+  ];
+  clearLiveSnapshots();
   let liveSnapshot;
   try {
-    liveSnapshot = await introspectLiveSnapshot(
-      db,
-      dialect,
-      [
-        ...targets.map((t) => t.tableName),
-        ...singleTargets.map((t) => t.tableName),
-        ...componentTargets.map((t) => t.tableName)
-      ]
-    );
+    liveSnapshot = await introspectLiveSnapshot(db, dialect, managedTableNames);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     logger?.error(
@@ -118,6 +119,7 @@ async function reloadNextlyConfig(opts) {
     );
     return;
   }
+  setLiveSnapshot(managedTableNames, liveSnapshot);
   const liveByTable = /* @__PURE__ */ new Map();
   for (const t of liveSnapshot.tables) liveByTable.set(t.name, t);
   let hasChanges = false;
@@ -383,7 +385,9 @@ async function reloadNextlyConfig(opts) {
     } catch {
     }
     try {
-      const schemaReg = await resolve("schemaRegistry");
+      const schemaReg = await resolve(
+        "schemaRegistry"
+      );
       for (const [tableName, table] of collectionFreshTables) {
         schemaReg.registerDynamicSchema(tableName, table);
       }
@@ -413,10 +417,7 @@ async function reloadNextlyConfig(opts) {
   if (!applyResult.success) {
     const code = applyResult.error.code;
     if (code === "CONFIRMATION_REQUIRED_NO_TTY") {
-      const detail = applyResult.error.message.replace(/^TTY required for schema confirmation\.\s*/i, "").replace(
-        /\s*Run from an interactive terminal,.*$/i,
-        ""
-      ).trim();
+      const detail = applyResult.error.message.replace(/^TTY required for schema confirmation\.\s*/i, "").replace(/\s*Run from an interactive terminal,.*$/i, "").trim();
       console.warn(
         `
 [Nextly] Schema change needs your confirmation:
@@ -442,28 +443,7 @@ explicit confirmation.
 }
 function classifyForCodeFirst(operations, _dialect) {
   if (operations.length === 0) return { safe: true };
-  const dropsPerTable = /* @__PURE__ */ new Map();
-  const addsPerTable = /* @__PURE__ */ new Map();
-  for (const op of operations) {
-    if (op.type === "drop_column") {
-      dropsPerTable.set(
-        op.tableName,
-        (dropsPerTable.get(op.tableName) ?? 0) + 1
-      );
-    } else if (op.type === "add_column") {
-      addsPerTable.set(op.tableName, (addsPerTable.get(op.tableName) ?? 0) + 1);
-    }
-  }
   const reasons = [];
-  for (const [t, drops] of dropsPerTable) {
-    const adds = addsPerTable.get(t) ?? 0;
-    if (drops > adds) {
-      const surplus = drops - adds;
-      reasons.push(
-        adds === 0 ? `drops ${drops} column(s) from '${t}' with no replacement(s); ${surplus} cannot be renamed without data loss` : `drops ${drops} columns from '${t}' but only ${adds} replacement(s); at least ${surplus} cannot be renamed without data loss`
-      );
-    }
-  }
   for (const op of operations) {
     if (op.type === "drop_table") {
       reasons.push(`drops table '${op.tableName}'`);

package/dist/{chunk-INV7QKLG.mjs → chunk-PAWMG5BR.mjs}

@@ -1,6 +1,6 @@
 import {
   BaseService
-} from "./chunk-2W3DVD7S.mjs";
+} from "./chunk-PFRMIEJ3.mjs";
 
 // src/services/system/system-table-service.ts
 var POSTGRES_SQL = {

package/dist/{chunk-2W3DVD7S.mjs → chunk-PFRMIEJ3.mjs}

@@ -1,6 +1,6 @@
 import {
   getDialectTables
-} from "./chunk-TS7GHTG2.mjs";
+} from "./chunk-YXZH65YV.mjs";
 import {
   container
 } from "./chunk-D5HQBNUB.mjs";

package/dist/{chunk-WZBYMYVW.mjs → chunk-QPYR3TC4.mjs}

@@ -1,6 +1,6 @@
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/api/auth-header-only.ts
 function requireAuthHeader(request) {

package/dist/{chunk-NAP3TDS6.mjs → chunk-SWVNFKWD.mjs}

@@ -1,9 +1,9 @@
 import {
   BaseService
-} from "./chunk-2W3DVD7S.mjs";
+} from "./chunk-PFRMIEJ3.mjs";
 import {
   getDialectTables
-} from "./chunk-TS7GHTG2.mjs";
+} from "./chunk-YXZH65YV.mjs";
 import {
   getAuthLogger
 } from "./chunk-LAZXX4HR.mjs";

package/dist/{chunk-KSKKIZDP.mjs → chunk-TFCPZ7PG.mjs}

@@ -5,11 +5,11 @@ import {
   PermissionService,
   RolePermissionService,
   SYSTEM_RESOURCES
-} from "./chunk-ZVN3JILF.mjs";
+} from "./chunk-KPCSDPFQ.mjs";
 import {
   BaseRegistryService,
   assertGlobalResourceSlugAvailable
-} from "./chunk-D72XH3BG.mjs";
+} from "./chunk-ERJGWWPB.mjs";
 import {
   resolveSingleTableName
 } from "./chunk-I4JMR3UR.mjs";
@@ -19,11 +19,11 @@ import {
 } from "./chunk-5HMZ644B.mjs";
 import {
   BaseService
-} from "./chunk-2W3DVD7S.mjs";
+} from "./chunk-PFRMIEJ3.mjs";
 import {
   NextlyError,
   toDbError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/domains/auth/services/permission-seed-service.ts
 import { eq } from "drizzle-orm";

package/dist/{chunk-JWAH6ROD.mjs → chunk-TVG3WU6C.mjs}

@@ -7,7 +7,7 @@ import {
   countRows,
   diffSnapshots,
   introspectLiveSnapshot
-} from "./chunk-J4KHGYOM.mjs";
+} from "./chunk-JCQMC6HH.mjs";
 
 // src/domains/schema/pipeline/preview.ts
 async function previewDesiredSchema(args, deps = {}) {

package/dist/{chunk-7YKKCBOC.mjs → chunk-V2W7G5GC.mjs}

@@ -7,16 +7,16 @@ import {
 import {
   hasAnyPermission,
   hasPermission
-} from "./chunk-NAP3TDS6.mjs";
+} from "./chunk-SWVNFKWD.mjs";
 import {
   env
-} from "./chunk-UJ2IMJ4W.mjs";
+} from "./chunk-HREB7UR4.mjs";
 import {
   container
 } from "./chunk-D5HQBNUB.mjs";
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/auth/middleware/index.ts
 var DEFAULT_RATE_LIMIT = 1e3;

package/dist/{chunk-RNKZALZE.mjs → chunk-VH4BX2QH.mjs}

@@ -2,16 +2,16 @@ import {
   isErrorResponse,
   requireAuthentication,
   toNextlyAuthError
-} from "./chunk-7YKKCBOC.mjs";
+} from "./chunk-V2W7G5GC.mjs";
 import {
   nextlyValidationFromZod
-} from "./chunk-GJNSJU4S.mjs";
+} from "./chunk-Z52OQOZH.mjs";
 import {
   withErrorHandler
-} from "./chunk-TO5AFLVQ.mjs";
+} from "./chunk-XIKEJO27.mjs";
 import {
   getCachedNextly
-} from "./chunk-RKXTA5KC.mjs";
+} from "./chunk-HLTSQIP6.mjs";
 import {
   respondAction
 } from "./chunk-IUDOC7N7.mjs";
@@ -20,7 +20,7 @@ import {
 } from "./chunk-D5HQBNUB.mjs";
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/api/email-send-template.ts
 import { z } from "zod";

package/dist/{chunk-TK76W55J.mjs → chunk-X3OHQBMZ.mjs}

@@ -35,14 +35,14 @@ import {
   PasswordSchema,
   validatePasswordStrength,
   verifyPassword
-} from "./chunk-NAP3TDS6.mjs";
+} from "./chunk-SWVNFKWD.mjs";
 import {
   respondAction,
   respondData
 } from "./chunk-IUDOC7N7.mjs";
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/auth/cookies/refresh-token-cookie.ts
 function setRefreshTokenCookie(token, ttlSeconds, isProduction) {
@@ -373,11 +373,15 @@ async function verifyCredentials(input, deps) {
   }
   if (deps.requireEmailVerification && !user.emailVerified) {
     throw NextlyError.invalidCredentials({
+      code: "AUTH_UNVERIFIED",
+      publicMessage: "Invalid email or password.",
       logContext: { userId: user.id, reason: "unverified" }
     });
   }
   if (!user.isActive) {
     throw NextlyError.invalidCredentials({
+      code: "AUTH_INACTIVE",
+      publicMessage: "Invalid email or password.",
       logContext: { userId: user.id, reason: "inactive" }
     });
   }

package/dist/{chunk-TO5AFLVQ.mjs → chunk-XIKEJO27.mjs}

@@ -10,7 +10,7 @@ import {
 import {
   NextlyError,
   isDbError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/api/with-error-handler.ts
 import { createRequire } from "module";

package/dist/{chunk-ZE6A3FYH.mjs → chunk-YG2HSZC4.mjs}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GDBJ5JCU.mjs";
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/cli/utils/config-loader.ts
 import { existsSync, watch } from "fs";

package/dist/{chunk-VQJQHVEV.mjs → chunk-YLRZTPSK.mjs}

@@ -1,6 +1,6 @@
 import {
   NextlyError
-} from "./chunk-NRUWQ5Z7.mjs";
+} from "./chunk-5WWWJCKI.mjs";
 
 // src/api/read-json-body.ts
 async function readJsonBody(req, extraLogContext) {