docs: add batch-2 changeset; webhook redeliver doc follows the new envelope

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MaSQn77TT5fUgHK9CesaDK

Author: claude

.changeset/adr-0112-batch-2-lowercase-sweep.md

@@ -0,0 +1,48 @@
+---
+"@objectstack/spec": minor
+"@objectstack/rest": minor
+"@objectstack/runtime": minor
+"@objectstack/cloud-connection": minor
+"@objectstack/plugin-auth": minor
+"@objectstack/plugin-webhooks": minor
+"@objectstack/service-messaging": minor
+"@objectstack/service-automation": minor
+"@objectstack/metadata-protocol": minor
+"@objectstack/metadata-core": minor
+"@objectstack/hono": minor
+---
+
+refactor!: ADR-0112 batch 2 — sweep the lowercase error-code emitters (#4003)
+
+Continues #3841 per ADR-0112. Batch 1 (#3988) settled the vocabulary and closed
+the set; this batch moves the emitters that still spoke lowercase `snake_case`
+onto it.
+
+**Wire-visible change.** Error codes on these surfaces change spelling. Generic
+conditions collapse onto the standard catalog rather than keeping a synonym:
+`unauthorized`/`unauthenticated` → `UNAUTHENTICATED`, `forbidden` →
+`PERMISSION_DENIED`, `not_found` → `RESOURCE_NOT_FOUND`, `internal` →
+`INTERNAL_ERROR`, `unavailable` → `SERVICE_UNAVAILABLE`, `not_supported` →
+`NOT_IMPLEMENTED`, `bad_request` → `INVALID_REQUEST`. Domain conditions get
+codes registered in `ERROR_CODE_LEDGER` (`MARKETPLACE_STORAGE_FAILED`,
+`PLUGIN_MANIFEST_INVALID`, `ITEM_LOCKED`, `DELIVERY_NOT_ELIGIBLE`, …). Swept:
+`cloud-connection`, `plugin-auth`, `hono`, `metadata-protocol`, `rest`,
+`service-messaging`, `service-automation`.
+
+**Three routes stop putting a code in the message slot.** The webhook redeliver
+route and two `rest` routes answered `{ success: false, error: '<code>',
+message }` — the code occupying `error`, the declared object envelope nowhere.
+They now emit `error: { code, message }`. Clients reading `body.error` as a
+string on these routes must read `body.error.code`.
+
+**`ConnectorErrorCategory` / `ConnectorRetryStrategy`** (ADR-0112 D9a):
+`@objectstack/spec` exported two mutually incompatible `ErrorCategory` types and
+two `RetryStrategy` types. The connector-side pair is renamed; importers of the
+`integration` subpath update the name. Side effect: the api-side `ErrorCategory`
+and `RetryStrategy` now appear in the generated API reference at all — the
+name collision had been silently dropping them.
+
+**Not swept, deliberately.** `sys_metadata_audit.code` keeps its lowercase
+values (ADR-0112 D6b): it is persisted audit history, and the same column holds
+non-error outcomes (`ok`, `lock_override`). Field-level codes stay as they are
+(D6, #3977).

content/docs/automation/webhooks.mdx

@@ -399,10 +399,11 @@ The plugin mounts exactly **one** custom endpoint:
 | POST   | `/api/v1/webhooks/redeliver` | `{ deliveryId }`  | Re-queue a previously failed/dead delivery.      |
 
 It delegates to `messaging.redeliverHttp(deliveryId)` and is guarded by the
-better-auth session (any authenticated user). Responses: `200` on success,
-`401` unauthenticated, `400` missing/invalid body, `404` `not_found`, `409`
-`not_eligible`. There are no `/webhooks/:id/test`, `/rotate`,
-`/deliveries`, or per-delivery redeliver routes.
+better-auth session (any authenticated user). Failures answer in the declared
+envelope — `{ success: false, error: { code, message } }` — with `401`
+`UNAUTHENTICATED`, `400` `INVALID_REQUEST` or `MISSING_REQUIRED_FIELD`, `404`
+`RESOURCE_NOT_FOUND`, `409` `DELIVERY_NOT_ELIGIBLE` (ADR-0112). There are no
+`/webhooks/:id/test`, `/rotate`, `/deliveries`, or per-delivery redeliver routes.
 
 ## 9. Concurrency & rate-limiting