File size: 2,180 Bytes
116b4cb | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 | /**
* Canonical API Response Helpers — P1-02
*
* Provides a consistent error and success response contract:
* { error: { code, message, correlation_id?, details? } }
*
* All management API routes should use these helpers instead of
* ad-hoc NextResponse.json({ error: "..." }) calls.
*
* @module shared/utils/apiResponse
*/
import { NextResponse } from "next/server";
interface ApiError {
code: string;
message: string;
correlation_id?: string;
details?: Record<string, unknown>;
}
/**
* Return a structured error response.
*
* @param code Machine-readable error code (e.g. AUTH_001, VALIDATION_001)
* @param message Human-readable message
* @param status HTTP status code
* @param opts Optional correlation_id and details
*/
export function errorResponse(
code: string,
message: string,
status: number,
opts?: { correlationId?: string; details?: Record<string, unknown> }
): NextResponse {
const body: { error: ApiError } = {
error: {
code,
message,
...(opts?.correlationId ? { correlation_id: opts.correlationId } : {}),
...(opts?.details ? { details: opts.details } : {}),
},
};
return NextResponse.json(body, { status });
}
/**
* Return a structured success response.
*/
export function successResponse(data: unknown, status = 200): NextResponse {
return NextResponse.json(data, { status });
}
/**
* Standard error codes for consistent client handling.
*/
export const ErrorCodes = {
// Auth
AUTH_001: "AUTH_001", // Authentication required
AUTH_002: "AUTH_002", // Invalid credentials
AUTH_003: "AUTH_003", // Token expired
// Validation
VALIDATION_001: "VALIDATION_001", // Invalid request body
VALIDATION_002: "VALIDATION_002", // Missing required field
// Server
SERVER_001: "SERVER_001", // Internal server error
SERVER_002: "SERVER_002", // Service unavailable
SERVER_003: "SERVER_003", // Configuration error
// Security
SECURITY_001: "SECURITY_001", // Prompt injection detected
SECURITY_002: "SECURITY_002", // Rate limit exceeded
// Resource
RESOURCE_001: "RESOURCE_001", // Not found
RESOURCE_002: "RESOURCE_002", // Conflict
} as const;
|