feat: Stable GraphQL error contract and request correlation

[felixgateru]

GraphQL clients can now classify failures using stable error codes instead of parsing message text, and match a failed request to server logs using its request ID.

• Define the nine v1 error codes, retryability, safe messages, and optional retry delay through one shared error mapping.
• Return the same validated request ID in the HTTP header and GraphQL errors, attach it to the request tracing span and GraphQL context, and allow browser clients to send and read the header through CORS.
• Share response decoding between browser and server clients. Malformed JSON envelopes produce a controlled client error; raw clients retain valid partial data alongside errors.
• Resolve conflicts with current main while preserving refresh-token authentication behavior and PostgreSQL/SQLite support.
• Patch affected UI/docs dependencies so the required production security audits pass.

Validation on signed commit 0956e95: all GitHub checks passed, including Rust formatting/linting and PostgreSQL/SQLite suites, UI tests/build/audit, docs build/audit, API contract checks, OpenAPI validation, and protobuf checks. Regression tests cover malformed HTTP 200/503 replies, partial data, request-ID validation and logs, GraphQL extension context, CORS, and database-backed resolver errors. No unresolved review threads remain.

Closes #101.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	atom-docs	0956e95	Commit Preview URL Branch Preview URL	Oct 12 2026, 03:01 PM