@bevel-software/platform-core-backend 0.34.0 → 0.36.1

package/dist/shared/domain-errors.js

@@ -1,33 +1,33 @@
 /**
- * Workflow domain errors. This is the single source of truth — every error
- * raised by the workflow domain (branches, changes, change requests, access
+ * Version-control domain errors. This is the single source of truth — every error
+ * raised by the version-control domain (branches, changes, change requests, access
  * control, locks) lives here. Route handlers shape responses via the
  * `.status` + `.payload` contract on the base class.
  *
- * Lives in `src/shared` (not `modules/workflow`) because the classes are
+ * Lives in `src/shared` (not `modules/version-control`) because the classes are
  * consumed across module boundaries — access, diff, plugins and workspace all
  * catch or raise them — and `src/shared` is the layer with no module imports.
  * Only a type from `@bevel-software/platform-shared` comes in; nothing else.
  *
- * Naming: classes use workflow vocabulary. `WorkflowDomainError` is the
- * abstract base; specific subclasses describe the workflow concept that
+ * Naming: classes use version-control vocabulary. `VersionControlDomainError` is the
+ * abstract base; specific subclasses describe the version-control concept that
  * went wrong (`BranchNameError`, `ProtectedBranchError`, etc.). Where a
- * concept is purely git mechanics with no workflow analogue
+ * concept is purely git mechanics with no version-control analogue
  * (`NoSharedHistoryError`), the name keeps its git flavour because
  * consumers actually need to discriminate on it.
  */
 import { sanitizedPath } from './printable.js';
-export class WorkflowDomainError extends Error {
+export class VersionControlDomainError extends Error {
     status;
     payload;
     constructor(message, status, payload) {
         super(message);
-        this.name = 'WorkflowDomainError';
+        this.name = 'VersionControlDomainError';
         this.status = status;
         this.payload = payload;
     }
 }
-export class BranchNameError extends WorkflowDomainError {
+export class BranchNameError extends VersionControlDomainError {
     branchName;
     constructor(reason, branchName) {
         super(`Invalid branch name "${branchName}": ${reason}`, 400);
@@ -35,7 +35,7 @@ export class BranchNameError extends WorkflowDomainError {
         this.name = 'BranchNameError';
     }
 }
-export class ProtectedBranchError extends WorkflowDomainError {
+export class ProtectedBranchError extends VersionControlDomainError {
     branchName;
     action;
     constructor(branchName, action) {
@@ -56,7 +56,7 @@ export class ProtectedBranchError extends WorkflowDomainError {
  * the only way for someone else to delete a non-author's branch is to push
  * the delete via git CLI directly.
  */
-export class BranchAuthorshipError extends WorkflowDomainError {
+export class BranchAuthorshipError extends VersionControlDomainError {
     branchName;
     kind = 'branch-authorship';
     constructor(branchName) {
@@ -66,7 +66,7 @@ export class BranchAuthorshipError extends WorkflowDomainError {
     }
 }
 // `DirtyWorkingTreeError` removed: under save=share + per-branch workspaces
-// no operation in the workflow can legitimately encounter a dirty working
+// no operation in the version-control can legitimately encounter a dirty working
 // tree. The two former callers (`switchBranch` and `mergeFromOrigin`'s
 // pre-flight) are gone / relaxed; if a dirty tree ever shows up it's an
 // internal bug that gets server-side-logged in `statusInternal`, never
@@ -79,7 +79,7 @@ export class BranchAuthorshipError extends WorkflowDomainError {
  * rebase conflicts.
  *
  * Per the "disk is the source of truth" rule we do NOT auto-force-push
- * from the workflow layer (that's a destructive history rewrite that can
+ * from the version-control layer (that's a destructive history rewrite that can
  * lose teammate work irrecoverably). Instead we surface this structured
  * error so the frontend can seed an agent prompt — the agent has git + gh
  * CLI access plus the lock-aware write tool, so it can read both sides,
@@ -97,7 +97,7 @@ export class BranchAuthorshipError extends WorkflowDomainError {
  * The payload carries enough context that the prompt builder can phrase
  * the resolution request to the agent without further server round-trips.
  */
-export class PushNeedsAgentResolutionError extends WorkflowDomainError {
+export class PushNeedsAgentResolutionError extends VersionControlDomainError {
     branch;
     path;
     originalDetail;
@@ -140,7 +140,7 @@ export class PushNeedsAgentResolutionError extends WorkflowDomainError {
  * `detail` is the raw git failure, for the server log only; it never enters
  * the message or the payload.
  */
-export class BranchDeleteRefusedError extends WorkflowDomainError {
+export class BranchDeleteRefusedError extends VersionControlDomainError {
     branchName;
     detail;
     kind = 'branch-delete-refused';
@@ -162,7 +162,7 @@ export class BranchDeleteRefusedError extends WorkflowDomainError {
  * conflict, and the local commits (someone's saved content, under
  * save=share) stay unshared until the divergence is reconciled. The service
  * layer therefore reacts by queueing a background recovery run (see
- * `WorkflowService.updateFromRemote`); this error tells the caller what
+ * `VersionControlService.updateFromRemote`); this error tells the caller what
  * happened and which paths are contested.
  *
  * 409 like the other conflict errors — the operation needs the divergence
@@ -170,7 +170,7 @@ export class BranchDeleteRefusedError extends WorkflowDomainError {
  * credential-redacted by `GitService.git`) is kept OFF the payload; it's for
  * server logs and the recovery pipeline, not the client.
  */
-export class PullRebaseConflictError extends WorkflowDomainError {
+export class PullRebaseConflictError extends VersionControlDomainError {
     branch;
     conflictedPaths;
     detail;
@@ -214,7 +214,7 @@ export const BRANCH_REQUIRED_MESSAGE = '`branch` is required: pass the branch (d
  * 400 with kind `branch-required`, so a client tells it apart from the 404
  * (no such branch) and the 410 (the branch was deleted) without reading prose.
  */
-export class BranchRequiredError extends WorkflowDomainError {
+export class BranchRequiredError extends VersionControlDomainError {
     kind = 'branch-required';
     constructor() {
         super(BRANCH_REQUIRED_MESSAGE, 400, { kind: 'branch-required' });
@@ -262,7 +262,7 @@ export function branchProvided(branch) {
  * once did. 404, and the message names the branch and nothing else: no git
  * output, no remote URL.
  */
-export class BranchNotFoundError extends WorkflowDomainError {
+export class BranchNotFoundError extends VersionControlDomainError {
     branch;
     kind = 'branch-not-found';
     constructor(branch) {
@@ -281,7 +281,7 @@ export class BranchNotFoundError extends WorkflowDomainError {
  * misdescribe the call — the caller did nothing wrong, the deployment is not
  * set up. 503 with kind `default-branch-unset`; passing a branch works.
  */
-export class DefaultBranchUnsetError extends WorkflowDomainError {
+export class DefaultBranchUnsetError extends VersionControlDomainError {
     kind = 'default-branch-unset';
     constructor() {
         super('This deployment has no default branch configured: pass `branch` to name the one to use.', 503, {
@@ -301,7 +301,7 @@ export class DefaultBranchUnsetError extends WorkflowDomainError {
  * `BranchNotFoundError` — see `WorkspaceService.hasHeardOfBranch`. A sync
  * always has the clone in hand, so it is always this one.
  */
-export class RemoteBranchGoneError extends WorkflowDomainError {
+export class RemoteBranchGoneError extends VersionControlDomainError {
     branch;
     kind = 'remote-branch-gone';
     constructor(branch) {
@@ -334,11 +334,11 @@ export function isMissingRemoteBranchFailure(message) {
  * `WorkspaceService.assertWithinWorkspace` throws a bare `Error` with this
  * text and `workspace.routes.sendError` maps that text to 403. The lock
  * service raises this instead of a bare `Error`, because `toHttpError` on the
- * workflow routes reads the status off the class and would otherwise call it
+ * version-control routes reads the status off the class and would otherwise call it
  * a 500. Both surfaces then answer identically for the same input. See
  * `canonicalFileIdentity`.
  */
-export class PathTraversalError extends WorkflowDomainError {
+export class PathTraversalError extends VersionControlDomainError {
     kind = 'path-traversal';
     constructor() {
         super('Path traversal detected', 403, { kind: 'path-traversal' });
@@ -352,7 +352,7 @@ export class PathTraversalError extends WorkflowDomainError {
  * anything is there, so the refusal is not an existence oracle.
  */
 export const GIT_INTERNALS_MESSAGE = "That path is inside the repository's internal git data and is not available.";
-export class GitInternalsError extends WorkflowDomainError {
+export class GitInternalsError extends VersionControlDomainError {
     kind = 'git-internals';
     constructor() {
         super(GIT_INTERNALS_MESSAGE, 403, { kind: 'git-internals' });
@@ -360,18 +360,18 @@ export class GitInternalsError extends WorkflowDomainError {
     }
 }
 /**
- * Generic 400 for workflow-input validation (malformed branch names, missing
+ * Generic 400 for version-control-input validation (malformed branch names, missing
  * fields, etc.). Carries an optional payload so callers can attach typed
  * discriminators (`kind: '...'`) when the frontend needs to switch on the
  * specific failure mode.
  */
-export class WorkflowValidationError extends WorkflowDomainError {
+export class VersionControlValidationError extends VersionControlDomainError {
     constructor(message, payload) {
         super(message, 400, payload);
-        this.name = 'WorkflowValidationError';
+        this.name = 'VersionControlValidationError';
     }
 }
-export class BranchDeleteBlockedError extends WorkflowDomainError {
+export class BranchDeleteBlockedError extends VersionControlDomainError {
     reason;
     branchName;
     kind = 'branch-delete-blocked';
@@ -397,7 +397,7 @@ export class BranchDeleteBlockedError extends WorkflowDomainError {
  * because it never mends: a reader may remember it, where a commit the clone
  * merely does not hold yet must be asked for again after the next fetch.
  */
-export class AppliedChangeMismatchError extends WorkflowValidationError {
+export class AppliedChangeMismatchError extends VersionControlValidationError {
     constructor(message, payload) {
         super(message, payload);
         this.name = 'AppliedChangeMismatchError';
@@ -433,7 +433,7 @@ export const NOT_FOUND_NEXT_STEP = 'Check the path with list_files.';
  * Sanitizing the path and appending the next step in the constructor is what
  * makes those two answers the same answer.
  */
-export class PathNotFoundError extends WorkflowDomainError {
+export class PathNotFoundError extends VersionControlDomainError {
     kind = 'not_found';
     /** The requested path, sanitized — never the path on disk. */
     path;
@@ -465,7 +465,7 @@ export const VERSION_NOT_ON_BRANCH_MESSAGE = "This version is not in this file's
  * into an oracle for "does this commit exist in the repository", which is
  * exactly the reading a branch-scoped rule exists to prevent.
  */
-export class VersionNotOnBranchError extends WorkflowDomainError {
+export class VersionNotOnBranchError extends VersionControlDomainError {
     kind = 'version-not-on-branch';
     constructor() {
         super(VERSION_NOT_ON_BRANCH_MESSAGE, 404, { kind: 'version-not-on-branch' });
@@ -481,7 +481,7 @@ export class VersionNotOnBranchError extends WorkflowDomainError {
  * file` prefix its message happens to start with, and a reworded message
  * would silently have turned it into a 500.
  */
-export class UnreadableArchiveError extends WorkflowDomainError {
+export class UnreadableArchiveError extends VersionControlDomainError {
     constructor(reason) {
         super(`Could not read zip file: ${reason}`, 422, { kind: 'unreadable-archive' });
         this.name = 'UnreadableArchiveError';
@@ -493,7 +493,7 @@ export class UnreadableArchiveError extends WorkflowDomainError {
  * a structured payload so the frontend's typed-error parser can route into
  * the agent recovery flow.
  */
-export class NoSharedHistoryError extends WorkflowDomainError {
+export class NoSharedHistoryError extends VersionControlDomainError {
     head;
     base;
     kind = 'no-shared-history';
@@ -511,7 +511,7 @@ export class NoSharedHistoryError extends WorkflowDomainError {
  * carries the structured report so the UI / agent can render the items
  * the user must fix without re-running the validator.
  */
-export class ValidationFailedError extends WorkflowDomainError {
+export class ValidationFailedError extends VersionControlDomainError {
     validation;
     constructor(report) {
         super(`Cannot commit — knowledge graph has ${report.mustFix.length} unresolved issue(s).`, 422, {
@@ -526,23 +526,23 @@ export class ValidationFailedError extends WorkflowDomainError {
     }
 }
 /**
- * Method exists on the workflow interface but has no backing implementation
+ * Method exists on the version-control interface but has no backing implementation
  * yet. 501 so the frontend can light up "coming soon" affordances without
- * confusing them with 5xx infra failures. `feature` is the workflow method
+ * confusing them with 5xx infra failures. `feature` is the version-control method
  * name; clients switch on it to render targeted copy.
  */
-export class NotImplementedWorkflowError extends WorkflowDomainError {
+export class NotImplementedVersionControlError extends VersionControlDomainError {
     feature;
     kind = 'not-implemented';
     constructor(feature) {
-        super(`Workflow feature "${feature}" is not yet implemented in this build.`, 501, { kind: 'not-implemented', feature });
+        super(`Version-control feature "${feature}" is not yet implemented in this build.`, 501, { kind: 'not-implemented', feature });
         this.feature = feature;
-        this.name = 'NotImplementedWorkflowError';
+        this.name = 'NotImplementedVersionControlError';
     }
 }
 /**
  * Attempting to reconcile two branches (opening a change request, refreshing
- * one from target, or executing a merge) hit conflicts that the workflow
+ * one from target, or executing a merge) hit conflicts that the version-control service
  * cannot auto-resolve. The structured payload carries the list of
  * conflicting paths so the frontend / agent can route into the resolution
  * flow without a second round-trip.
@@ -551,7 +551,7 @@ export class NotImplementedWorkflowError extends WorkflowDomainError {
  * resolving + committing on the source branch) before the operation can
  * succeed — same semantics git itself uses for merge conflicts.
  */
-export class ChangeRequestConflictsError extends WorkflowDomainError {
+export class ChangeRequestConflictsError extends VersionControlDomainError {
     sourceBranch;
     targetBranch;
     conflictedPaths;
@@ -576,7 +576,7 @@ export class ChangeRequestConflictsError extends WorkflowDomainError {
  * waiting for a person to do: merge `sourceBranch` into `targetBranch`.
  * Carries the request's number so the caller can point the person at it.
  */
-export class OpenChangeRequestBlocksMergeError extends WorkflowDomainError {
+export class OpenChangeRequestBlocksMergeError extends VersionControlDomainError {
     sourceBranch;
     targetBranch;
     number;
@@ -596,7 +596,7 @@ export class OpenChangeRequestBlocksMergeError extends WorkflowDomainError {
  * the existing CR number so the UI / agent can deep-link to it instead of
  * trying to recover.
  */
-export class DuplicateChangeRequestError extends WorkflowDomainError {
+export class DuplicateChangeRequestError extends VersionControlDomainError {
     sourceBranch;
     targetBranch;
     existingNumber;
@@ -623,7 +623,7 @@ export class DuplicateChangeRequestError extends WorkflowDomainError {
  * rather than risk landing the CR's version on a protected branch. 502: the
  * failure is an internal git/push hiccup, not the caller's fault.
  */
-export class RolesYamlPreservationError extends WorkflowDomainError {
+export class RolesYamlPreservationError extends VersionControlDomainError {
     kind = 'roles-yaml-preservation-failed';
     /**
      * The underlying git/push failure. Kept OFF the client-facing message (which

package/dist/shared/domain-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"domain-errors.js","sourceRoot":"","sources":["../../src/shared/domain-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAS;IACf,OAAO,CAA2B;IAC3C,YAAY,OAAe,EAAE,MAAc,EAAE,OAAiC;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,mBAAmB;IACjB;IAArC,YAAY,MAAc,EAAW,UAAkB;QACrD,KAAK,CAAC,wBAAwB,UAAU,MAAM,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAD1B,eAAU,GAAV,UAAU,CAAQ;QAErD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IACtC;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,MAAc;QAC9D,KAAK,CAAC,WAAW,UAAU,oBAAoB,MAAM,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAD3D,eAAU,GAAV,UAAU,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE9D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IAEvC;IADZ,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,UAAkB;QACrC,KAAK,CACH,uBAAuB,UAAU,kBAAkB,EACnD,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAC1C,CAAC;QALiB,eAAU,GAAV,UAAU,CAAQ;QAMrC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,6BAA8B,SAAQ,mBAAmB;IAGzD;IACA;IACA;IACA;IAQA;IAbF,IAAI,GAAG,uBAAgC,CAAC;IACjD,YACW,MAAc,EACd,IAAY,EACZ,cAAsB,EACtB,cAAsB;IAC/B;;;;;;OAMG;IACM,QAAgC,UAAU;QAEnD,KAAK,CACH,qBAAqB,MAAM,qDAAqD;YAC9E,CAAC,KAAK,KAAK,SAAS;gBAClB,CAAC,CAAC,+FAA+F;gBACjG,CAAC,CAAC,2BAA2B,IAAI,mDAAmD;oBAClF,8BAA8B,CAAC,EACrC,GAAG;QACH,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAChD,CAAC;QAxBO,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,mBAAc,GAAd,cAAc,CAAQ;QACtB,mBAAc,GAAd,cAAc,CAAQ;QAQtB,UAAK,GAAL,KAAK,CAAqC;QAcnD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAyB,SAAQ,mBAAmB;IAE1C;IAA6B;IADzC,IAAI,GAAG,uBAAgC,CAAC;IACjD,YAAqB,UAAkB,EAAW,MAAc;QAC9D,KAAK,CACH,0CAA0C,UAAU,wCAAwC,EAC5F,GAAG,EACH,EAAE,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,CAC9C,CAAC;QALiB,eAAU,GAAV,UAAU,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAM9D,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IAGnD;IACA;IACA;IAJF,IAAI,GAAG,sBAA+B,CAAC;IAChD,YACW,MAAc,EACd,eAAyB,EACzB,MAAc;QAEvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,aAAa,MAAM,kCAAkC,eAAe,CAAC,MAAM,aAAa,IAAI,IAAI;YAC9F,gDAAgD,EAClD,GAAG,EACH;YACE,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,eAAe;SAChB,CACF,CAAC;QAdO,WAAM,GAAN,MAAM,CAAQ;QACd,oBAAe,GAAf,eAAe,CAAU;QACzB,WAAM,GAAN,MAAM,CAAQ;QAavB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,mEAAmE,CAAC;AAEtE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IACjD,IAAI,GAAG,iBAA0B,CAAC;IAC3C;QACE,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAErC;IADZ,IAAI,GAAG,kBAA2B,CAAC;IAC5C,YAAqB,MAAc;QACjC,KAAK,CAAC,4BAA4B,MAAM,GAAG,EAAE,GAAG,EAAE;YAChD,IAAI,EAAE,kBAAkB;YACxB,MAAM;SACP,CAAC,CAAC;QAJgB,WAAM,GAAN,MAAM,CAAQ;QAKjC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IACrD,IAAI,GAAG,sBAA+B,CAAC;IAChD;QACE,KAAK,CAAC,yFAAyF,EAAE,GAAG,EAAE;YACpG,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IAEvC;IADZ,IAAI,GAAG,oBAA6B,CAAC;IAC9C,YAAqB,MAAc;QACjC,KAAK,CAAC,WAAW,MAAM,mCAAmC,EAAE,GAAG,EAAE;YAC/D,IAAI,EAAE,oBAAoB;YAC1B,MAAM;SACP,CAAC,CAAC;QAJgB,WAAM,GAAN,MAAM,CAAQ;QAKjC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,OAAO,kEAAkE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,kBAAmB,SAAQ,mBAAmB;IAChD,IAAI,GAAG,gBAAyB,CAAC;IAC1C;QACE,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,8EAA8E,CAAC;AAEpH,MAAM,OAAO,iBAAkB,SAAQ,mBAAmB;IAC/C,IAAI,GAAG,eAAwB,CAAC;IACzC;QACE,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IAC9D,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAuBD,MAAM,OAAO,wBAAyB,SAAQ,mBAAmB;IAGpD;IACA;IAHF,IAAI,GAAG,uBAAgC,CAAC;IACjD,YACW,MAAiC,EACjC,UAAkB,EAC3B,OAAe,EACf,QAAiC,EAAE;QAEnC,oEAAoE;QACpE,gEAAgE;QAChE,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACzD,GAAG,KAAK;YACR,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QAZM,WAAM,GAAN,MAAM,CAA2B;QACjC,eAAU,GAAV,UAAU,CAAQ;QAY3B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA2B,SAAQ,uBAAuB;IACrE,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAErE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,iBAAkB,SAAQ,mBAAmB;IAC/C,IAAI,GAAG,WAAoB,CAAC;IACrC,8DAA8D;IACrD,IAAI,CAAS;IACtB,YAAY,IAAY;QACtB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CACH,qCAAqC,IAAI,wBAAwB,mBAAmB,EAAE,EACtF,GAAG,EACH,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAClC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GACxC,4DAA4D,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IACrD,IAAI,GAAG,uBAAgC,CAAC;IACjD;QACE,KAAK,CAAC,6BAA6B,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAuB,SAAQ,mBAAmB;IAC7D,YAAY,MAAc;QACxB,KAAK,CAAC,4BAA4B,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IAEtC;IAAuB;IADnC,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,IAAY,EAAW,IAAY;QACtD,KAAK,CACH,cAAc,IAAI,iCAAiC,IAAI,KAAK;YAC1D,mEAAmE,EACrE,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAC1C,CAAC;QANiB,SAAI,GAAJ,IAAI,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAOtD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IACnD,UAAU,CAAmB;IACtC,YAAY,MAAwB;QAClC,KAAK,CACH,uCAAuC,MAAM,CAAC,OAAO,CAAC,MAAM,uBAAuB,EACnF,GAAG,EACH;YACE,UAAU,EAAE;gBACV,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAE7C;IADZ,IAAI,GAAG,iBAA0B,CAAC;IAC3C,YAAqB,OAAe;QAClC,KAAK,CACH,qBAAqB,OAAO,yCAAyC,EACrE,GAAG,EACH,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CACrC,CAAC;QALiB,YAAO,GAAP,OAAO,CAAQ;QAMlC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAGvD;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,eAAyB;QAElC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,sBAAsB,YAAY,WAAW,YAAY,KAAK;YAC5D,GAAG,eAAe,CAAC,MAAM,aAAa,IAAI,iBAAiB,YAAY,kBAAkB,EAC3F,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,eAAe;SAChB,CACF,CAAC;QAfO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,oBAAe,GAAf,eAAe,CAAU;QAclC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,mBAAmB;IAG7D;IACA;IACA;IAJF,IAAI,GAAG,kCAA2C,CAAC;IAC5D,YACW,YAAoB,EACpB,YAAoB,EACpB,MAAc;QAEvB,KAAK,CACH,mBAAmB,MAAM,sBAAsB,YAAY,WAAW,YAAY,uBAAuB;YACvG,mEAAmE,MAAM,cAAc,EACzF,GAAG,EACH,EAAE,IAAI,EAAE,kCAAkC,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CACjF,CAAC;QATO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,WAAM,GAAN,MAAM,CAAQ;QAQvB,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAGvD;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,cAAsB;QAE/B,KAAK,CACH,+CAA+C,YAAY,SAAS,YAAY,OAAO,cAAc,IAAI,EACzG,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,cAAc;SACf,CACF,CAAC;QAbO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,mBAAc,GAAd,cAAc,CAAQ;QAY/B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,mBAAmB;IACxD,IAAI,GAAG,gCAAyC,CAAC;IAC1D;;;;OAIG;IACM,MAAM,CAAS;IACxB,YAAY,MAAc;QACxB,KAAK,CACH,+GAA+G,EAC/G,GAAG,EACH,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"domain-errors.js","sourceRoot":"","sources":["../../src/shared/domain-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,MAAM,CAAS;IACf,OAAO,CAA2B;IAC3C,YAAY,OAAe,EAAE,MAAc,EAAE,OAAiC;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,yBAAyB;IACvB;IAArC,YAAY,MAAc,EAAW,UAAkB;QACrD,KAAK,CAAC,wBAAwB,UAAU,MAAM,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAD1B,eAAU,GAAV,UAAU,CAAQ;QAErD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,yBAAyB;IAC5C;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,MAAc;QAC9D,KAAK,CAAC,WAAW,UAAU,oBAAoB,MAAM,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAD3D,eAAU,GAAV,UAAU,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE9D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,yBAAyB;IAE7C;IADZ,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,UAAkB;QACrC,KAAK,CACH,uBAAuB,UAAU,kBAAkB,EACnD,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAC1C,CAAC;QALiB,eAAU,GAAV,UAAU,CAAQ;QAMrC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,4EAA4E;AAC5E,iFAAiF;AACjF,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,6BAA8B,SAAQ,yBAAyB;IAG/D;IACA;IACA;IACA;IAQA;IAbF,IAAI,GAAG,uBAAgC,CAAC;IACjD,YACW,MAAc,EACd,IAAY,EACZ,cAAsB,EACtB,cAAsB;IAC/B;;;;;;OAMG;IACM,QAAgC,UAAU;QAEnD,KAAK,CACH,qBAAqB,MAAM,qDAAqD;YAC9E,CAAC,KAAK,KAAK,SAAS;gBAClB,CAAC,CAAC,+FAA+F;gBACjG,CAAC,CAAC,2BAA2B,IAAI,mDAAmD;oBAClF,8BAA8B,CAAC,EACrC,GAAG;QACH,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAChD,CAAC;QAxBO,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,mBAAc,GAAd,cAAc,CAAQ;QACtB,mBAAc,GAAd,cAAc,CAAQ;QAQtB,UAAK,GAAL,KAAK,CAAqC;QAcnD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAyB,SAAQ,yBAAyB;IAEhD;IAA6B;IADzC,IAAI,GAAG,uBAAgC,CAAC;IACjD,YAAqB,UAAkB,EAAW,MAAc;QAC9D,KAAK,CACH,0CAA0C,UAAU,wCAAwC,EAC5F,GAAG,EACH,EAAE,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,CAC9C,CAAC;QALiB,eAAU,GAAV,UAAU,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAM9D,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,uBAAwB,SAAQ,yBAAyB;IAGzD;IACA;IACA;IAJF,IAAI,GAAG,sBAA+B,CAAC;IAChD,YACW,MAAc,EACd,eAAyB,EACzB,MAAc;QAEvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,aAAa,MAAM,kCAAkC,eAAe,CAAC,MAAM,aAAa,IAAI,IAAI;YAC9F,gDAAgD,EAClD,GAAG,EACH;YACE,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,eAAe;SAChB,CACF,CAAC;QAdO,WAAM,GAAN,MAAM,CAAQ;QACd,oBAAe,GAAf,eAAe,CAAU;QACzB,WAAM,GAAN,MAAM,CAAQ;QAavB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,mEAAmE,CAAC;AAEtE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,mBAAoB,SAAQ,yBAAyB;IACvD,IAAI,GAAG,iBAA0B,CAAC;IAC3C;QACE,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,yBAAyB;IAE3C;IADZ,IAAI,GAAG,kBAA2B,CAAC;IAC5C,YAAqB,MAAc;QACjC,KAAK,CAAC,4BAA4B,MAAM,GAAG,EAAE,GAAG,EAAE;YAChD,IAAI,EAAE,kBAAkB;YACxB,MAAM;SACP,CAAC,CAAC;QAJgB,WAAM,GAAN,MAAM,CAAQ;QAKjC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,yBAAyB;IAC3D,IAAI,GAAG,sBAA+B,CAAC;IAChD;QACE,KAAK,CAAC,yFAAyF,EAAE,GAAG,EAAE;YACpG,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,yBAAyB;IAE7C;IADZ,IAAI,GAAG,oBAA6B,CAAC;IAC9C,YAAqB,MAAc;QACjC,KAAK,CAAC,WAAW,MAAM,mCAAmC,EAAE,GAAG,EAAE;YAC/D,IAAI,EAAE,oBAAoB;YAC1B,MAAM;SACP,CAAC,CAAC;QAJgB,WAAM,GAAN,MAAM,CAAQ;QAKjC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,OAAO,kEAAkE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,kBAAmB,SAAQ,yBAAyB;IACtD,IAAI,GAAG,gBAAyB,CAAC;IAC1C;QACE,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,8EAA8E,CAAC;AAEpH,MAAM,OAAO,iBAAkB,SAAQ,yBAAyB;IACrD,IAAI,GAAG,eAAwB,CAAC;IACzC;QACE,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,yBAAyB;IAC1E,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAuBD,MAAM,OAAO,wBAAyB,SAAQ,yBAAyB;IAG1D;IACA;IAHF,IAAI,GAAG,uBAAgC,CAAC;IACjD,YACW,MAAiC,EACjC,UAAkB,EAC3B,OAAe,EACf,QAAiC,EAAE;QAEnC,oEAAoE;QACpE,gEAAgE;QAChE,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACzD,GAAG,KAAK;YACR,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QAZM,WAAM,GAAN,MAAM,CAA2B;QACjC,eAAU,GAAV,UAAU,CAAQ;QAY3B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA2B,SAAQ,6BAA6B;IAC3E,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAErE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,iBAAkB,SAAQ,yBAAyB;IACrD,IAAI,GAAG,WAAoB,CAAC;IACrC,8DAA8D;IACrD,IAAI,CAAS;IACtB,YAAY,IAAY;QACtB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CACH,qCAAqC,IAAI,wBAAwB,mBAAmB,EAAE,EACtF,GAAG,EACH,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAClC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GACxC,4DAA4D,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,OAAO,uBAAwB,SAAQ,yBAAyB;IAC3D,IAAI,GAAG,uBAAgC,CAAC;IACjD;QACE,KAAK,CAAC,6BAA6B,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAuB,SAAQ,yBAAyB;IACnE,YAAY,MAAc;QACxB,KAAK,CAAC,4BAA4B,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,yBAAyB;IAE5C;IAAuB;IADnC,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,IAAY,EAAW,IAAY;QACtD,KAAK,CACH,cAAc,IAAI,iCAAiC,IAAI,KAAK;YAC1D,mEAAmE,EACrE,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAC1C,CAAC;QANiB,SAAI,GAAJ,IAAI,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAOtD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qBAAsB,SAAQ,yBAAyB;IACzD,UAAU,CAAmB;IACtC,YAAY,MAAwB;QAClC,KAAK,CACH,uCAAuC,MAAM,CAAC,OAAO,CAAC,MAAM,uBAAuB,EACnF,GAAG,EACH;YACE,UAAU,EAAE;gBACV,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iCAAkC,SAAQ,yBAAyB;IAEzD;IADZ,IAAI,GAAG,iBAA0B,CAAC;IAC3C,YAAqB,OAAe;QAClC,KAAK,CACH,4BAA4B,OAAO,yCAAyC,EAC5E,GAAG,EACH,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CACrC,CAAC;QALiB,YAAO,GAAP,OAAO,CAAQ;QAMlC,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA4B,SAAQ,yBAAyB;IAG7D;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,eAAyB;QAElC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,sBAAsB,YAAY,WAAW,YAAY,KAAK;YAC5D,GAAG,eAAe,CAAC,MAAM,aAAa,IAAI,iBAAiB,YAAY,kBAAkB,EAC3F,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,eAAe;SAChB,CACF,CAAC;QAfO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,oBAAe,GAAf,eAAe,CAAU;QAclC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,yBAAyB;IAGnE;IACA;IACA;IAJF,IAAI,GAAG,kCAA2C,CAAC;IAC5D,YACW,YAAoB,EACpB,YAAoB,EACpB,MAAc;QAEvB,KAAK,CACH,mBAAmB,MAAM,sBAAsB,YAAY,WAAW,YAAY,uBAAuB;YACvG,mEAAmE,MAAM,cAAc,EACzF,GAAG,EACH,EAAE,IAAI,EAAE,kCAAkC,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CACjF,CAAC;QATO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,WAAM,GAAN,MAAM,CAAQ;QAQvB,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,yBAAyB;IAG7D;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,cAAsB;QAE/B,KAAK,CACH,+CAA+C,YAAY,SAAS,YAAY,OAAO,cAAc,IAAI,EACzG,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,cAAc;SACf,CACF,CAAC;QAbO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,mBAAc,GAAd,cAAc,CAAQ;QAY/B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,yBAAyB;IAC9D,IAAI,GAAG,gCAAyC,CAAC;IAC1D;;;;OAIG;IACM,MAAM,CAAS;IACxB,YAAY,MAAc;QACxB,KAAK,CACH,+GAA+G,EAC/G,GAAG,EACH,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/shared/git.contract.d.ts

@@ -1,6 +1,6 @@
 /**
  * The contract for RUNNING git. Nothing here spawns anything — the one
- * implementation is `NodeGitRunner` in `modules/workflow/git`, wired once by
+ * implementation is `NodeGitRunner` in `modules/version-control/git`, wired once by
  * the composition root and injected into every module that shells out to git,
  * so no module carries an `execFile('git', …)` of its own.
  *

package/dist/shared/git.contract.js

@@ -1,6 +1,6 @@
 /**
  * The contract for RUNNING git. Nothing here spawns anything — the one
- * implementation is `NodeGitRunner` in `modules/workflow/git`, wired once by
+ * implementation is `NodeGitRunner` in `modules/version-control/git`, wired once by
  * the composition root and injected into every module that shells out to git,
  * so no module carries an `execFile('git', …)` of its own.
  *

package/dist/shared/http-errors.d.ts

@@ -1,11 +1,11 @@
-import type { WorkflowDomainError } from './domain-errors.js';
+import type { VersionControlDomainError } from './domain-errors.js';
 /**
  * THE response body for a domain refusal: the error's own message, plus
  * whatever its payload carries, for a client that switches on the shape
  * rather than on the prose.
  *
  * The payload is an open `Record<string, unknown>` and deliberately stays
- * that way — `WorkflowValidationError` takes one from its caller — so this
+ * that way — `VersionControlValidationError` takes one from its caller — so this
  * lists no closed set. The discriminator to reach for is `kind`
  * (`path-traversal`, `unreadable-archive`, `no-shared-history`, …), which
  * most refusals carry; beside it they add whatever context that kind needs
@@ -29,5 +29,5 @@ import type { WorkflowDomainError } from './domain-errors.js';
  * workspace routes surface `AccessConfigError`'s message because an admin
  * has to read it — and those differ on purpose, not by drift.
  */
-export declare function domainErrorBody(err: WorkflowDomainError): Record<string, unknown>;
+export declare function domainErrorBody(err: VersionControlDomainError): Record<string, unknown>;
 //# sourceMappingURL=http-errors.d.ts.map

package/dist/shared/http-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-errors.d.ts","sourceRoot":"","sources":["../../src/shared/http-errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGjF"}
+{"version":3,"file":"http-errors.d.ts","sourceRoot":"","sources":["../../src/shared/http-errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,yBAAyB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGvF"}

package/dist/shared/http-errors.js

@@ -4,7 +4,7 @@
  * rather than on the prose.
  *
  * The payload is an open `Record<string, unknown>` and deliberately stays
- * that way — `WorkflowValidationError` takes one from its caller — so this
+ * that way — `VersionControlValidationError` takes one from its caller — so this
  * lists no closed set. The discriminator to reach for is `kind`
  * (`path-traversal`, `unreadable-archive`, `no-shared-history`, …), which
  * most refusals carry; beside it they add whatever context that kind needs

package/dist/shared/http-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-errors.js","sourceRoot":"","sources":["../../src/shared/http-errors.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,eAAe,CAAC,GAAwB;IACtD,wDAAwD;IACxD,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC"}
+{"version":3,"file":"http-errors.js","sourceRoot":"","sources":["../../src/shared/http-errors.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC5D,wDAAwD;IACxD,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC"}

package/dist/shared/oauth-token-error.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The error codes a token endpoint may answer with, as RFC 6749 §5.2 and OIDC
+ * Core §3.1.2.6 define them. A finite list, on purpose: a code is taken from
+ * a refusing provider's body only when it is exactly one of these, so no other
+ * string a provider puts in that field (a secret, a secret with a suffix, free
+ * text) reaches a message, a verdict or a log.
+ *
+ * Shared, not a module's own: the OIDC configuration check reads a provider's
+ * refusal through it and the secrets vault a token endpoint's, and one list is
+ * the only way the two cannot disagree about which codes are standard. Each
+ * caller keeps its own sentence per code (what a tool owner should do differs
+ * from what a sign-in administrator should do); the set of codes is one.
+ */
+export declare const OAUTH_TOKEN_ERROR_CODES: readonly string[];
+/** Whether `code` is one of the standard token-endpoint error codes, and so safe to echo. */
+export declare function isStandardTokenErrorCode(code: unknown): code is string;
+/**
+ * The standard `error` code in a refusing token endpoint's JSON body, or null:
+ * when the body is not JSON, not an object, carries no string `error`, or
+ * carries one that is not a standard code.
+ */
+export declare function standardTokenErrorCode(bodyText: string): string | null;
+//# sourceMappingURL=oauth-token-error.d.ts.map

package/dist/shared/oauth-token-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token-error.d.ts","sourceRoot":"","sources":["../../src/shared/oauth-token-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAUnD,CAAC;AAEH,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUtE"}

package/dist/shared/oauth-token-error.js

@@ -0,0 +1,47 @@
+/**
+ * The error codes a token endpoint may answer with, as RFC 6749 §5.2 and OIDC
+ * Core §3.1.2.6 define them. A finite list, on purpose: a code is taken from
+ * a refusing provider's body only when it is exactly one of these, so no other
+ * string a provider puts in that field (a secret, a secret with a suffix, free
+ * text) reaches a message, a verdict or a log.
+ *
+ * Shared, not a module's own: the OIDC configuration check reads a provider's
+ * refusal through it and the secrets vault a token endpoint's, and one list is
+ * the only way the two cannot disagree about which codes are standard. Each
+ * caller keeps its own sentence per code (what a tool owner should do differs
+ * from what a sign-in administrator should do); the set of codes is one.
+ */
+export const OAUTH_TOKEN_ERROR_CODES = Object.freeze([
+    'invalid_request',
+    'invalid_client',
+    'invalid_grant',
+    'unauthorized_client',
+    'unsupported_grant_type',
+    'invalid_scope',
+    'access_denied',
+    'server_error',
+    'temporarily_unavailable',
+]);
+/** Whether `code` is one of the standard token-endpoint error codes, and so safe to echo. */
+export function isStandardTokenErrorCode(code) {
+    return typeof code === 'string' && OAUTH_TOKEN_ERROR_CODES.includes(code);
+}
+/**
+ * The standard `error` code in a refusing token endpoint's JSON body, or null:
+ * when the body is not JSON, not an object, carries no string `error`, or
+ * carries one that is not a standard code.
+ */
+export function standardTokenErrorCode(bodyText) {
+    let json;
+    try {
+        json = JSON.parse(bodyText);
+    }
+    catch {
+        return null;
+    }
+    if (!json || typeof json !== 'object' || Array.isArray(json))
+        return null;
+    const { error } = json;
+    return isStandardTokenErrorCode(error) ? error : null;
+}
+//# sourceMappingURL=oauth-token-error.js.map

package/dist/shared/oauth-token-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token-error.js","sourceRoot":"","sources":["../../src/shared/oauth-token-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACtE,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,wBAAwB;IACxB,eAAe;IACf,eAAe;IACf,cAAc;IACd,yBAAyB;CAC1B,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,IAA+B,CAAC;IAClD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/dist/shared/pending-proposals.d.ts

@@ -1,4 +1,4 @@
-import type { ChangeRequest, IWorkflowService } from '@bevel-software/platform-shared';
+import type { ChangeRequest, IVersionControlService } from '@bevel-software/platform-shared';
 import type { WorkspaceService } from '../modules/workspace/workspace.service.js';
 import type { KbContext } from './kb-context.js';
 import type { IAccessControl } from '../modules/access/access-control.interface.js';
@@ -27,7 +27,7 @@ import type { IAccessControl } from '../modules/access/access-control.interface.
 export interface ProposalSources {
     workspaceService: Pick<WorkspaceService, 'ensureRemotesFetched' | 'readFileAtRef'>;
     accessControl: Pick<IAccessControl, 'canWriteBatch'>;
-    workflow: Pick<IWorkflowService, 'listChangeRequests'>;
+    versionControl: Pick<IVersionControlService, 'listChangeRequests'>;
     /** Which branch is the released one, and its clone. */
     kb: Pick<KbContext, 'defaultBranch' | 'defaultWorkspaceId'>;
 }
@@ -54,7 +54,7 @@ export interface ProposedFile {
  * runs BEFORE the access batch, also where it drops what it already serves from
  * the default branch, so the batch stays as small as the answer.
  *
- * Order follows the change requests as the workflow service listed them; a
+ * Order follows the change requests as the version-control service listed them; a
  * caller that wants a stable reading order sorts the result itself.
  */
 export declare function visibleProposedFiles(sources: ProposalSources, userEmail: string, matches: (repoRelPath: string) => boolean): Promise<ProposedFile[]>;

package/dist/shared/pending-proposals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pending-proposals.d.ts","sourceRoot":"","sources":["../../src/shared/pending-proposals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAOpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,eAAe,CAAC,CAAC;IACnF,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACrD,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IACvD,uDAAuD;IACvD,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,GAAG,oBAAoB,CAAC,CAAC;CAC7D;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,EAAE,EAAE,aAAa,CAAC;IAClB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GACxC,OAAO,CAAC,YAAY,EAAE,CAAC,CA2DzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAC1B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,EACzD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAcxB"}
+{"version":3,"file":"pending-proposals.d.ts","sourceRoot":"","sources":["../../src/shared/pending-proposals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAOpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,eAAe,CAAC,CAAC;IACnF,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACrD,cAAc,EAAE,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACnE,uDAAuD;IACvD,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,GAAG,oBAAoB,CAAC,CAAC;CAC7D;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,EAAE,EAAE,aAAa,CAAC;IAClB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,GACxC,OAAO,CAAC,YAAY,EAAE,CAAC,CA2DzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,MAAM,CAC1B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,EACzD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAcxB"}

package/dist/shared/pending-proposals.js

@@ -14,7 +14,7 @@ const log = logger('pending-proposals');
  * runs BEFORE the access batch, also where it drops what it already serves from
  * the default branch, so the batch stays as small as the answer.
  *
- * Order follows the change requests as the workflow service listed them; a
+ * Order follows the change requests as the version-control service listed them; a
  * caller that wants a stable reading order sorts the result itself.
  */
 export async function visibleProposedFiles(sources, userEmail, matches) {
@@ -29,7 +29,7 @@ export async function visibleProposedFiles(sources, userEmail, matches) {
         // other branch is not a proposal these surfaces can speak about: merging it
         // puts nothing in the catalog, and the card would never resolve.
         const defaultBranch = sources.kb.defaultBranch;
-        crs = (await sources.workflow.listChangeRequests()).filter((c) => c.state === 'open' && c.base === defaultBranch);
+        crs = (await sources.versionControl.listChangeRequests()).filter((c) => c.state === 'open' && c.base === defaultBranch);
     }
     catch {
         return [];

package/dist/shared/pending-proposals.js.map

@@ -1 +1 @@
-{"version":3,"file":"pending-proposals.js","sourceRoot":"","sources":["../../src/shared/pending-proposals.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AA4CxC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAwB,EACxB,SAAiB,EACjB,OAAyC;IAEzC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,IAAI,GAAoB,CAAC;IACzB,IAAI,CAAC;QACH,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,iEAAiE;QACjE,MAAM,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;QAC/C,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa;SACzC,aAAa,CACZ,IAAI,EACJ,KAAK,EACL,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC9B;SACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAmB,CAAC,CAAC;IAE3C,mEAAmE;IACnE,2EAA2E;IAC3E,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEjF,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC7D,sEAAsE;QACtE,4EAA4E;QAC5E,sCAAsC;QACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAEvD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,gBAAyD,EACzD,IAAY,EACZ,MAAc,EACd,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,GAAG,CAAC,IAAI,CACN,kBAAkB,SAAS,CAAC,WAAW,CAAC,cAAc,SAAS,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI;YAC/F,sCAAsC,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"pending-proposals.js","sourceRoot":"","sources":["../../src/shared/pending-proposals.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AA4CxC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAwB,EACxB,SAAiB,EACjB,OAAyC;IAEzC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,IAAI,GAAoB,CAAC;IACzB,IAAI,CAAC;QACH,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,iEAAiE;QACjE,MAAM,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC;QAC/C,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa;SACzC,aAAa,CACZ,IAAI,EACJ,KAAK,EACL,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC9B;SACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAmB,CAAC,CAAC;IAE3C,mEAAmE;IACnE,2EAA2E;IAC3E,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEjF,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC7D,sEAAsE;QACtE,4EAA4E;QAC5E,sCAAsC;QACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAEvD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,gBAAyD,EACzD,IAAY,EACZ,MAAc,EACd,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,GAAG,CAAC,IAAI,CACN,kBAAkB,SAAS,CAAC,WAAW,CAAC,cAAc,SAAS,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI;YAC/F,sCAAsC,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CACtG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/shared/read-capped.d.ts

@@ -0,0 +1,19 @@
+/**
+ * At most `limit` bytes of a response body, decoded as text, the rest of the
+ * stream cancelled.
+ *
+ * Each CHUNK is sliced to the remaining budget before being decoded, not just
+ * counted against it: a provider that answers in one 5MB chunk would otherwise
+ * put the whole thing through the decoder before the loop noticed it was over,
+ * which is the bound bypassed by the very party it is meant to bound. Never a
+ * byte past the limit: once the budget is spent the read stops without asking
+ * for more, so a body of exactly `limit` bytes on a stream that stays open
+ * returns at once. And the read never falls back to `res.text()` on a live
+ * stream: a cap applied after that read bounds nothing.
+ *
+ * Shared, not a module's own: the connection probe reads a provider's
+ * rejection with it and the secrets vault a token endpoint's refusal, and one
+ * reader is the only way the two cannot disagree about what "bounded" means.
+ */
+export declare function readCapped(res: Response, limit: number): Promise<string>;
+//# sourceMappingURL=read-capped.d.ts.map

package/dist/shared/read-capped.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-capped.d.ts","sourceRoot":"","sources":["../../src/shared/read-capped.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB9E"}

package/dist/shared/read-capped.js

@@ -0,0 +1,45 @@
+/**
+ * At most `limit` bytes of a response body, decoded as text, the rest of the
+ * stream cancelled.
+ *
+ * Each CHUNK is sliced to the remaining budget before being decoded, not just
+ * counted against it: a provider that answers in one 5MB chunk would otherwise
+ * put the whole thing through the decoder before the loop noticed it was over,
+ * which is the bound bypassed by the very party it is meant to bound. Never a
+ * byte past the limit: once the budget is spent the read stops without asking
+ * for more, so a body of exactly `limit` bytes on a stream that stays open
+ * returns at once. And the read never falls back to `res.text()` on a live
+ * stream: a cap applied after that read bounds nothing.
+ *
+ * Shared, not a module's own: the connection probe reads a provider's
+ * rejection with it and the secrets vault a token endpoint's refusal, and one
+ * reader is the only way the two cannot disagree about what "bounded" means.
+ */
+export async function readCapped(res, limit) {
+    const reader = res.body?.getReader();
+    // No stream (a mocked or already-consumed response): fall back to the whole
+    // body, which for those cases is ours and small.
+    if (!reader)
+        return (await res.text()).slice(0, limit);
+    const decoder = new TextDecoder();
+    let out = '';
+    let read = 0;
+    try {
+        while (read < limit) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const remaining = limit - read;
+            const chunk = value.byteLength > remaining ? value.subarray(0, remaining) : value;
+            read += chunk.byteLength;
+            out += decoder.decode(chunk, { stream: true });
+            if (chunk.byteLength < value.byteLength)
+                break;
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+    }
+    return out;
+}
+//# sourceMappingURL=read-capped.js.map