v1.13.4: Standardize all route responses to use response helpers

Convert ~160 raw res.json()/res.status().json() calls across 32+ files
to use centralized helpers from src/utils/responses.js (ok, errorResponse,
successMessage, notFound, validationError, forbidden, unauthorized, conflict).

No behavior changes — response shapes are identical. Future schema changes
(e.g., requestId envelope) only need to update one module.

Fix error vs errorResponse signature mismatch in routes/health.js CA cert
endpoint where error(res, message, statusCode) was being called with
errorResponse(res, statusCode, message, extras) argument order.

Files changed: middleware.js, csrf-protection.js, error-handler.js,
license-manager.js, src/app.js, and 27 route files.

Test suite: 755 pass / 4 pre-existing failures (services credential tests).

dashcaddy-api/routes/openclaw.js

@@ -1,5 +1,6 @@
 const express = require('express');
 const http = require('http');
+const { ok, errorResponse, notFound, conflict } = require('../src/utils/responses');
 
 /**
  * OpenClaw management routes
@@ -93,8 +94,8 @@ module.exports = function openClawRoutes(ctx) {
         proxyRes.on('data', function(d) { res.write(d); });
         proxyRes.on('end', function() { res.end(); });
       });
-      proxyReq.on('error', function(e) { res.status(502).json({ success: false, error: e.message }); });
-      proxyReq.setTimeout(15000, function() { proxyReq.destroy(); res.status(504).json({ success: false, error: 'gateway timeout' }); });
+      proxyReq.on('error', function(e) { errorResponse(res, 502, e.message); });
+      proxyReq.setTimeout(15000, function() { proxyReq.destroy(); errorResponse(res, 504, 'gateway timeout'); });
       proxyReq.write(body);
       proxyReq.end();
     } else {
@@ -104,8 +105,8 @@ module.exports = function openClawRoutes(ctx) {
         proxyRes.on('data', function(d) { res.write(d); });
         proxyRes.on('end', function() { res.end(); });
       });
-      proxyReq.on('error', function(e) { res.status(502).json({ success: false, error: e.message }); });
-      proxyReq.setTimeout(15000, function() { proxyReq.destroy(); res.status(504).json({ success: false, error: 'gateway timeout' }); });
+      proxyReq.on('error', function(e) { errorResponse(res, 502, e.message); });
+      proxyReq.setTimeout(15000, function() { proxyReq.destroy(); errorResponse(res, 504, 'gateway timeout'); });
     }
   }
 
@@ -115,7 +116,7 @@ module.exports = function openClawRoutes(ctx) {
     const container = await findOpenClawContainer();
 
     if (!container) {
-      return res.json({ success: true, deployed: false });
+      return ok(res, { deployed: false });
     }
 
     const token = await getGatewayToken(container.Id);
@@ -123,8 +124,7 @@ module.exports = function openClawRoutes(ctx) {
     const baseUrl = 'http://localhost:' + port;
     const health = await gatewayHealth(baseUrl, token);
 
-    res.json({
-      success: true,
+    ok(res, {
       deployed: true,
       container: {
         id: container.Id.slice(0, 12),
@@ -149,7 +149,7 @@ module.exports = function openClawRoutes(ctx) {
   router.post('/deploy', asyncHandler(async function(req, res) {
     const existing = await findOpenClawContainer();
     if (existing) {
-      return res.status(409).json({ success: false, error: 'OpenClaw is already deployed' });
+      return conflict(res, 'OpenClaw is already deployed');
     }
 
     const image = 'ghcr.io/nousresearch/openclaw:latest';
@@ -170,7 +170,7 @@ module.exports = function openClawRoutes(ctx) {
       });
     } catch(e) {
       log.error('OpenClaw pull failed: ' + e.message);
-      return res.status(500).json({ success: false, error: 'Failed to pull image: ' + e.message });
+      return errorResponse(res, 500, 'Failed to pull image: ' + e.message);
     }
 
     // Create + start container
@@ -196,8 +196,7 @@ module.exports = function openClawRoutes(ctx) {
       await container.start();
       log.info('OpenClaw deployed: ' + container.id.slice(0, 12));
 
-      res.json({
-        success: true,
+      ok(res, {
         deployed: true,
         container: { id: container.id.slice(0, 12), name: name },
         gateway: {
@@ -207,7 +206,7 @@ module.exports = function openClawRoutes(ctx) {
       });
     } catch(e) {
       log.error('OpenClaw deploy failed: ' + e.message);
-      res.status(500).json({ success: false, error: 'Deploy failed: ' + e.message });
+      errorResponse(res, 500, 'Deploy failed: ' + e.message);
     }
   }));
 
@@ -215,7 +214,7 @@ module.exports = function openClawRoutes(ctx) {
 
   router.get('/proxy/*', asyncHandler(async function(req, res) {
     const container = await findOpenClawContainer();
-    if (!container) return res.status(404).json({ success: false, error: 'OpenClaw not deployed' });
+    if (!container) return notFound(res, 'OpenClaw not deployed');
 
     const token = await getGatewayToken(container.Id);
     const port = await getContainerPort(container.Id);
@@ -229,7 +228,7 @@ module.exports = function openClawRoutes(ctx) {
 
   router.post('/proxy/*', asyncHandler(async function(req, res) {
     const container = await findOpenClawContainer();
-    if (!container) return res.status(404).json({ success: false, error: 'OpenClaw not deployed' });
+    if (!container) return notFound(res, 'OpenClaw not deployed');
 
     const token = await getGatewayToken(container.Id);
     const port = await getContainerPort(container.Id);
@@ -243,17 +242,17 @@ module.exports = function openClawRoutes(ctx) {
 
   router.delete('/', asyncHandler(async function(req, res) {
     const container = await findOpenClawContainer();
-    if (!container) return res.status(404).json({ success: false, error: 'OpenClaw not deployed' });
+    if (!container) return notFound(res, 'OpenClaw not deployed');
 
     try {
       const c = docker.client.container(container.Id);
       await c.stop().catch(function() {});
       await c.remove({ force: true });
       log.info('OpenClaw container ' + container.Id.slice(0, 12) + ' removed');
-      res.json({ success: true, message: 'OpenClaw removed' });
+      ok(res, { message: 'OpenClaw removed' });
     } catch(e) {
       log.error('Failed to remove OpenClaw: ' + e.message);
-      res.status(500).json({ success: false, error: e.message });
+      errorResponse(res, 500, e.message);
     }
   }));