@cogenta/core 0.3.0 → 0.6.0

package/dist/errors/codes.js

@@ -32,12 +32,25 @@ export const ERROR_CODES = [
     'CONTENT_SLUG_TAKEN',
     'CONTENT_ROUTE_INVALID',
     'CONTENT_REDIRECT_LOOP',
+    // The admin's redirect screen (audit follow-up to L10 task 2: the store and
+    // its wiring into every public GET existed, but nothing ever let an editor
+    // create or remove a row from a browser).
+    'REDIRECT_UNKNOWN',
     'CONTENT_SCHEDULE_INVALID',
     'CONTENT_READ_ONLY',
+    // Concurrent editing (fiche 02 task 7): a `PATCH` naming `expectedUpdatedAt`
+    // is refused when it no longer matches the live row — someone else's write
+    // landed first. Detection, not locking: no table, no TTL, no state that
+    // outlives the request.
+    'CONTENT_STALE_WRITE',
     // Trash (`schema@2.0`, ADR-0022). `restrict` is no longer enforced only by
     // the foreign key: trashing is not a DELETE, so the database cannot refuse.
     'CONTENT_REFERENCED',
     'CONTENT_NOT_TRASHED',
+    // Editorial workflow (`schema@2.1`, ADR-0027). `reviewState` is orthogonal
+    // to `status`, exactly as `deletedAt` is to it since ADR-0022.
+    'CONTENT_WORKFLOW_DISABLED',
+    'CONTENT_REVIEW_TRANSITION_INVALID',
     // Taxonomies (`schema@2.0`, ADR-0022)
     'TAXONOMY_UNKNOWN',
     'TAXONOMY_TERM_NOT_FOUND',
@@ -46,6 +59,16 @@ export const ERROR_CODES = [
     'TAXONOMY_TOO_DEEP',
     'TAXONOMY_NOT_HIERARCHICAL',
     'TAXONOMY_TERM_HAS_CHILDREN',
+    // Menus (navigation)
+    'MENU_UNKNOWN',
+    'MENU_NAME_TAKEN',
+    'MENU_LOCATION_TAKEN',
+    'MENU_ITEM_NOT_FOUND',
+    'MENU_ITEM_INVALID',
+    'MENU_CYCLE',
+    // Patterns — the page builder's motif/model library (fiche 43 sub-chantier A)
+    'PATTERN_UNKNOWN',
+    'PATTERN_INVALID',
     // Blocks
     'BLOCK_UNKNOWN',
     'BLOCK_INVALID',
@@ -95,14 +118,53 @@ export const ERROR_CODES = [
     'AUTH_USER_NOT_FOUND',
     'AUTH_ROLE_UNKNOWN',
     'AUDIT_CHAIN_BROKEN',
+    // Fiche 21: a lookup by id (audit entry detail) found nothing — distinct
+    // from `AUDIT_CHAIN_BROKEN`, which means "found it, and it lied".
+    'AUDIT_ENTRY_NOT_FOUND',
+    // Auth — self-service password reset over HTTP (L11, forgot-password route)
+    'AUTH_RESET_TOKEN_INVALID',
+    // Auth — recovery codes (fiche 18 task 1): the way back in when TOTP itself
+    // is unusable.
+    'AUTH_RECOVERY_CODE_INVALID',
+    'AUTH_RECOVERY_CODES_UNAVAILABLE',
+    // Auth — account lifecycle (fiche 17: invitations and anonymization)
+    // The invitation reuses AUTH_RESET_TOKEN_INVALID for the token itself
+    // (same primitive, same failure shape) — these four are the states around
+    // it that a reset token was never asked to describe.
+    'AUTH_INVITE_UNAVAILABLE',
+    'AUTH_INVITE_INVALID_STATE',
+    'AUTH_ACCOUNT_ANONYMIZED',
+    'AUTH_ANONYMIZE_CONFIRMATION_MISMATCH',
+    // API keys (L13 task 8: machine-to-machine bearer tokens)
+    'API_KEY_INVALID',
+    'API_KEY_REVOKED',
+    'API_KEY_EXPIRED',
+    'API_KEY_NOT_FOUND',
+    // API keys — lifecycle and request quota (fiche 20: expiry defaults,
+    // rotation, per-key rate limiting).
+    'API_KEY_ROTATION_INVALID',
+    'API_KEY_RATE_LIMITED',
+    // API keys — purge and mistaken-revocation recovery (fiche 62 tasks 2-3).
+    'API_KEY_PURGE_INVALID',
+    'API_KEY_RECOVERY_INVALID',
     // Media
     'MEDIA_NOT_FOUND',
     'MEDIA_INVALID',
     'MEDIA_TYPE_REJECTED',
+    // Media folders (fiche 46) — same materialised-path tree shape as
+    // taxonomies (ADR-0022), a table internal to the media subsystem rather
+    // than a contract A change.
+    'MEDIA_FOLDER_NOT_FOUND',
+    'MEDIA_FOLDER_INVALID',
+    'MEDIA_FOLDER_NAME_TAKEN',
+    'MEDIA_FOLDER_NOT_EMPTY',
+    'MEDIA_FOLDER_CYCLE',
+    'MEDIA_FOLDER_TOO_DEEP',
     // Infrastructure
     'CACHE_FAILED',
     'QUEUE_FAILED',
     'STORAGE_FAILED',
+    'RATE_LIMIT_FAILED',
     // Agents — LLM provider adapters (L4)
     'PROVIDER_UNKNOWN',
     'PROVIDER_REQUEST_FAILED',
@@ -135,6 +197,28 @@ export const ERROR_CODES = [
     // MCP client (L4)
     'MCP_CLIENT_REMOTE_ERROR',
     'MCP_CLIENT_TOOL_FAILED',
+    // MCP server (L20) — "cogenta mcp"
+    'MCP_ACTOR_OPTIONS_CONFLICT',
+    'MCP_ACTOR_USER_NOT_FOUND',
+    'MCP_ACTOR_ROLE_EMPTY',
+    // MCP server (L21) — "cogenta mcp --api-key"
+    'MCP_ACTOR_API_KEY_INVALID',
+    // MCP client sandboxing floor (fiche 58 task 1bis) — stdio-client.ts's
+    // hard per-call timeout, cancellation, process lifecycle and best-effort
+    // resource watchdog.
+    'MCP_CLIENT_CALL_TIMEOUT',
+    'MCP_CLIENT_CALL_ABORTED',
+    'MCP_CLIENT_PROCESS_EXITED',
+    'MCP_CLIENT_SPAWN_FAILED',
+    'MCP_CLIENT_CLOSED',
+    'MCP_CLIENT_RESOURCE_EXCEEDED',
+    // MCP external connection registry (fiche 58 tasks 2/3) — "MCP Clients"
+    // admin screen and its backing store.
+    'MCP_CONNECTION_NOT_FOUND',
+    'MCP_CONNECTION_INVALID',
+    'MCP_CONNECTION_AUTH_INVALID',
+    'MCP_CONNECTION_CONFIRMATION_REQUIRED',
+    'MCP_CONNECTION_TOOL_NOT_DISCOVERED',
     // Agents — privacy (L4)
     'PRIVACY_NO_DATA_LEAVES_VIOLATION',
     // Agents — agent format and registry (L5)
@@ -155,6 +239,14 @@ export const ERROR_CODES = [
     // Import — WordPress WXR (L9)
     'IMPORT_WXR_PARSE_FAILED',
     'IMPORT_WXR_UNSAFE_DOCUMENT',
+    // Import — preview/apply/undo, CSV, RSS/Atom (fiche 25)
+    'IMPORT_RUN_NOT_FOUND',
+    'IMPORT_SOURCE_INVALID',
+    'IMPORT_ALREADY_APPLIED',
+    'IMPORT_MAPPING_INVALID',
+    'IMPORT_MEDIA_URL_UNSAFE',
+    'IMPORT_CSV_INVALID',
+    'IMPORT_FEED_INVALID',
     // create-cogenta — playground reset (L9)
     'PLAYGROUND_BLUEPRINT_UNKNOWN',
     // Channels — adapter registry (L6)
@@ -250,12 +342,19 @@ export const ERROR_CODES = [
     'COMMERCE_REFUND_EXCEEDS_PAYMENT',
     // Commerce — tax and shipping (L15 task 6)
     'COMMERCE_TAX_RULE_INVALID',
+    // Fiche feedback: editing a rule in place (PATCH), distinct from the
+    // "invalid input" code above.
+    'COMMERCE_TAX_RULE_UNKNOWN',
     'COMMERCE_SHIPPING_METHOD_UNKNOWN',
     'COMMERCE_SHIPPING_UNAVAILABLE',
     // Commerce — coupons and promotions (L15 task 7)
     'COMMERCE_COUPON_NOT_FOUND',
     'COMMERCE_COUPON_INVALID',
     'COMMERCE_COUPON_EXHAUSTED',
+    // Fiche 53 task 2: a per-customer cap, distinct from the global one above,
+    // and a coupon restricted to products none of which are in the basket.
+    'COMMERCE_COUPON_CUSTOMER_EXHAUSTED',
+    'COMMERCE_COUPON_NOT_APPLICABLE',
     // Commerce — invoices (L15 task 8)
     'COMMERCE_INVOICE_NOT_FOUND',
     'COMMERCE_INVOICE_ALREADY_ISSUED',
@@ -263,12 +362,172 @@ export const ERROR_CODES = [
     // Commerce — subscriptions (L15 task 9)
     'COMMERCE_SUBSCRIPTION_NOT_FOUND',
     'COMMERCE_SUBSCRIPTION_INVALID',
+    // Commerce — customers, order edits, shipment tracking, credit notes
+    // (fiche 52: commandes et clients)
+    'COMMERCE_CUSTOMER_NOT_FOUND',
+    'COMMERCE_ORDER_LOCKED',
+    'COMMERCE_TRACKING_INVALID',
+    'COMMERCE_CREDIT_NOTE_NOT_FOUND',
     // Agents — vector store driver (L18 task 1/5)
     'VECTOR_DIMENSION_MISMATCH',
     'VECTOR_STORE_FAILED',
     // Agents — writing/assistant tools (L18 tasks 2-8)
     'ASSIST_UNAVAILABLE',
     'ASSIST_RESPONSE_INVALID',
+    // Agents — assistant usage/budget (fiche 30 task 3)
+    'ASSIST_BUDGET_EXCEEDED',
+    // Agents — reference document RAG index (L22 task 4)
+    'ASSIST_DOCUMENT_NOT_FOUND',
+    // Marketplace — catalog and one-click install (L17)
+    'MARKETPLACE_ITEM_NOT_FOUND',
+    'MARKETPLACE_KIND_UNSUPPORTED',
+    'MARKETPLACE_ALREADY_INSTALLED',
+    'MARKETPLACE_NOT_INSTALLED',
+    'MARKETPLACE_UPDATE_REQUIRES_APPROVAL',
+    // Marketplace — installed extensions management (fiche 29)
+    'MARKETPLACE_ENGINE_INCOMPATIBLE',
+    // Analytics — self-hosted, cookie-free page-view analytics (`@cogenta/analytics`)
+    'ANALYTICS_SALT_UNAVAILABLE',
+    // Site settings — the editorial key/value store (fiche 23, ADR-0025)
+    'SITE_SETTING_UNKNOWN',
+    'SITE_SETTING_INVALID',
+    // Admin theme — the admin's own runtime template + personalisation (L21 task 2)
+    'ADMIN_THEME_TEMPLATE_UNKNOWN',
+    'ADMIN_THEME_INVALID',
+    // Health, migrations and maintenance tools (fiche 24)
+    'MAINT_TOOL_UNKNOWN',
+    'MAINT_TOOL_RUN_NOT_FOUND',
+    'MAINT_TOOL_INPUT_INVALID',
+    // Export/import/backup/restore (`@cogenta/export`)
+    'EXPORT_FORMAT_INVALID',
+    'EXPORT_PERMISSION_DENIED',
+    'EXPORT_MEDIA_NOT_FOUND',
+    'EXPORT_ENTRY_TOO_LARGE',
+    'BACKUP_CHECKSUM_MISMATCH',
+    'BACKUP_VERSION_UNSUPPORTED',
+    'BACKUP_DECRYPTION_FAILED',
+    'BACKUP_PASSPHRASE_REQUIRED',
+    'RESTORE_NOT_ALLOWED',
+    'RESTORE_CONFLICT',
+    // Scheduled tasks — the maintenance clock's admin surface (fiche 28)
+    'SCHEDULER_TASK_UNKNOWN',
+    'SCHEDULER_TASK_DUPLICATE',
+    'SCHEDULER_QUEUE_JOB_NOT_FOUND',
+    'SCHEDULER_QUEUE_JOB_NOT_RETRYABLE',
+    // Appearance and theme — DB-stored skin overrides overlaying contract D's
+    // file-based skin (fiche 14)
+    'THEME_OVERRIDE_INVALID',
+    'THEME_SKIN_NOT_FOUND',
+    'THEME_NO_PROVIDER',
+    'THEME_EXPORT_NOT_ALLOWED',
+    // Comments — contract F, visitor comments (fiche 15, ADR-0025)
+    'COMMENT_NOT_FOUND',
+    'COMMENT_BODY_INVALID',
+    'COMMENT_AUTHOR_INVALID',
+    'COMMENT_TARGET_INVALID',
+    'COMMENT_TARGET_CLOSED',
+    'COMMENT_PARENT_INVALID',
+    'COMMENT_PARENT_TOO_DEEP',
+    'COMMENT_STATUS_INVALID',
+    'COMMENT_RATE_LIMITED',
+    'COMMENT_SPAM_DETECTED',
+    // Forms — contract G (ADR-0026, fiche 16): definitions and submissions.
+    'FORM_UNKNOWN',
+    'FORM_NAME_TAKEN',
+    'FORM_DEFINITION_INVALID',
+    'FORM_SUBMISSION_NOT_FOUND',
+    'FORM_SUBMISSION_INVALID',
+    'FORM_DISABLED',
+    'FORM_RATE_LIMITED',
+    'FORM_HONEYPOT_TRIGGERED',
+    'FORM_SUBMITTED_TOO_FAST',
+    'FORM_CONSENT_REQUIRED',
+    'FORM_AUTORESPONDER_RATE_LIMITED',
+    // Fiche 47 — logic, steps, files, multi-channel notifications, CAPTCHA.
+    'FORM_FILE_REJECTED',
+    'FORM_CAPTCHA_REQUIRED',
+    'FORM_CAPTCHA_FAILED',
+    'FORM_STEP_INVALID',
+    // A package's own `package.json` could not be read to determine its
+    // version (`readOwnPackageVersion`) — a broken install, not a user mistake.
+    'PACKAGE_VERSION_UNREADABLE',
+    // Update system (L22 task 9): checking npm for a newer @cogenta/core /
+    // @cogenta/cli, and applying one with a mandatory restore point first.
+    'UPDATE_CHECK_FAILED',
+    'UPDATE_RESTORE_POINT_FAILED',
+    'UPDATE_APPLY_FAILED',
+    'UPDATE_NOT_AVAILABLE',
+    'UPDATE_CONFIRMATION_REQUIRED',
+    'UPDATE_POLICY_INVALID',
+    // Agents — real execution runtime, providers, skills library (L22 task
+    // 1/1bis). `AGENT_SKILL_*` are deliberately distinct from the pre-existing
+    // `SKILL_UNKNOWN`/`SKILL_DEFINITION_INVALID` above (L7's marketplace skill
+    // registry) — a different store for a different concept, see
+    // `packages/agents/src/skills/library.ts`'s module comment.
+    'AGENT_DUPLICATE',
+    'AGENT_DISABLED',
+    'AGENT_NO_PROVIDER',
+    'AGENT_BUILTIN_UNDELETABLE',
+    'PROVIDER_NOT_CONFIGURED',
+    'AGENT_SKILL_UNKNOWN',
+    'AGENT_SKILL_DUPLICATE',
+    'AGENT_SKILL_BUILTIN_UNDELETABLE',
+    'AGENT_REGISTRY_READ_ONLY',
+    'AGENT_RUNTIME_UNAVAILABLE',
+    // Skill reference folders (fiche 57): `references/`, `scripts/`, `assets/`
+    // under a skill's own directory. A path outside those three, or one that
+    // tries to escape the skill's directory, is the caller's fault (invalid);
+    // a path that names nothing on disk when removing is a plain not-found.
+    'AGENT_SKILL_RESOURCE_INVALID',
+    'AGENT_SKILL_RESOURCE_UNKNOWN',
+    // Agent execution loop, migrated onto LangGraph.js (L24 task 1). Thrown
+    // only if the graph's own recursion ceiling is hit before `runAgentLoop`'s
+    // `max_steps` check has a chance to fire first — a bug in the graph's
+    // wiring, never a normal way for a run to end.
+    'AGENT_LOOP_RECURSION_LIMIT',
+    // Channels — inbound chat bridge and `cogenta channels` process (L22 task 2)
+    'CHANNEL_PROVIDER_NOT_CONFIGURED',
+    // LLM provider catalog (fiche 56): `provider` widened from a closed
+    // 3-literal union to a free string, validated at the write boundary
+    // instead. A malformed identifier (empty, or not the slug shape a
+    // filename can safely be built from) is distinct from a name that is
+    // simply not in the built-in catalog and needs an explicit `baseUrl` to
+    // be usable as a custom OpenAI-compatible endpoint.
+    'PROVIDER_ID_INVALID',
+    'PROVIDER_CUSTOM_BASE_URL_REQUIRED',
+    // Per-provider model tuning (maxOutputTokens/requestTimeoutMs/
+    // maxCorrectionAttempts) — an admin-set value outside sane bounds, or not
+    // a whole number.
+    'PROVIDER_TUNING_INVALID',
+    // Role permission overrides in the database (fiche 63, ADR-0028): a
+    // production-applicable surcharge over `cogenta.schema.*`'s `permissions`
+    // block, `PermissionLayer` checked before falling back to the file.
+    'ROLE_PERMISSION_TARGET_UNKNOWN',
+    'ROLE_PERMISSION_INVALID',
+    'ROLE_PERMISSION_EXPORT_INVALID',
+    // Prompt Settings — fiche 45's shared template library every `assist.*`
+    // tool's instruction text reads from, with a fallback to its own
+    // hard-coded string when a site was never migrated.
+    'PROMPT_TEMPLATE_UNKNOWN',
+    'PROMPT_TEMPLATE_DUPLICATE',
+    'PROMPT_TEMPLATE_BUILTIN_UNDELETABLE',
+    'PROMPT_TEMPLATE_PLACEHOLDER_UNRESOLVED',
+    // A malformed create/update body on `/api/prompt-templates` — kept
+    // distinct from `PROMPT_TEMPLATE_UNKNOWN` (an id that does not exist) so
+    // the two map to different HTTP statuses (400 vs 404).
+    'PROMPT_TEMPLATE_INVALID',
+    // Google Search Console connector (fiche 70 task 4, ADR-0032). Same shape
+    // as `AGENT_NO_PROVIDER`/`SITE_PLAN_NO_PROVIDER`: nothing is broken, this
+    // installation simply has no OAuth app configured (R1/R2). `NOT_CONNECTED`
+    // is a plain "no site has gone through the OAuth flow yet" state, distinct
+    // from "the connector isn't offered at all". The three `*_FAILED`/`*_INVALID`
+    // codes describe Google's own token/query endpoints refusing a real request
+    // — an upstream failure the caller cannot fix by retrying identically.
+    'SEARCH_CONSOLE_NOT_CONFIGURED',
+    'SEARCH_CONSOLE_NOT_CONNECTED',
+    'SEARCH_CONSOLE_STATE_INVALID',
+    'SEARCH_CONSOLE_TOKEN_EXCHANGE_FAILED',
+    'SEARCH_CONSOLE_QUERY_FAILED',
     // Catch-all, deliberately last and deliberately rare.
     'INTERNAL',
 ];

package/dist/errors/codes.js.map

@@ -1 +1 @@
-{"version":3,"file":"codes.js","sourceRoot":"","sources":["../../src/errors/codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IAEvB,UAAU;IACV,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IAEpB,OAAO;IACP,gBAAgB;IAChB,wBAAwB;IACxB,kBAAkB;IAClB,wBAAwB;IACxB,kBAAkB;IAClB,6BAA6B;IAC7B,uBAAuB;IAEvB,iBAAiB;IACjB,gBAAgB;IAEhB,UAAU;IACV,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,2EAA2E;IAC3E,4EAA4E;IAC5E,oBAAoB;IACpB,qBAAqB;IAErB,sCAAsC;IACtC,kBAAkB;IAClB,yBAAyB;IACzB,qBAAqB;IACrB,gBAAgB;IAChB,mBAAmB;IACnB,2BAA2B;IAC3B,4BAA4B;IAE5B,SAAS;IACT,eAAe;IACf,eAAe;IACf,0BAA0B;IAC1B,wBAAwB;IAExB,+EAA+E;IAC/E,6EAA6E;IAC7E,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,4BAA4B;IAC5B,0BAA0B;IAC1B,yBAAyB;IAEzB,SAAS;IACT,iBAAiB;IACjB,eAAe;IACf,qBAAqB;IACrB,wBAAwB;IACxB,yBAAyB;IAEzB,+DAA+D;IAC/D,oBAAoB;IAEpB,0EAA0E;IAC1E,mEAAmE;IACnE,yBAAyB;IAEzB,4EAA4E;IAC5E,iEAAiE;IACjE,sBAAsB;IACtB,2BAA2B;IAE3B,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;IACf,wBAAwB;IAExB,OAAO;IACP,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;IACrB,mBAAmB;IACnB,oBAAoB;IAEpB,QAAQ;IACR,iBAAiB;IACjB,eAAe;IACf,qBAAqB;IAErB,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,gBAAgB;IAEhB,sCAAsC;IACtC,kBAAkB;IAClB,yBAAyB;IACzB,2BAA2B;IAC3B,uBAAuB;IACvB,kBAAkB;IAElB,8BAA8B;IAC9B,yBAAyB;IACzB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IAEpB,2BAA2B;IAC3B,0BAA0B;IAE1B,sCAAsC;IACtC,0BAA0B;IAE1B,8BAA8B;IAC9B,iBAAiB;IACjB,0BAA0B;IAC1B,wBAAwB;IAExB,2BAA2B;IAC3B,wBAAwB;IACxB,iCAAiC;IAEjC,uBAAuB;IACvB,eAAe;IACf,0BAA0B;IAE1B,uBAAuB;IACvB,4BAA4B;IAE5B,kBAAkB;IAClB,yBAAyB;IACzB,wBAAwB;IAExB,wBAAwB;IACxB,kCAAkC;IAElC,0CAA0C;IAC1C,0BAA0B;IAC1B,eAAe;IAEf,2BAA2B;IAC3B,wBAAwB;IAExB,uCAAuC;IACvC,2BAA2B;IAC3B,4BAA4B;IAC5B,+BAA+B;IAE/B,0CAA0C;IAC1C,+BAA+B;IAE/B,mCAAmC;IACnC,4BAA4B;IAE5B,2CAA2C;IAC3C,mCAAmC;IAEnC,8BAA8B;IAC9B,yBAAyB;IACzB,4BAA4B;IAE5B,yCAAyC;IACzC,8BAA8B;IAE9B,mCAAmC;IACnC,iBAAiB;IACjB,mBAAmB;IAEnB,0CAA0C;IAC1C,2BAA2B;IAE3B,iDAAiD;IACjD,2BAA2B;IAE3B,0CAA0C;IAC1C,4BAA4B;IAE5B,yCAAyC;IACzC,yBAAyB;IAEzB,kDAAkD;IAClD,6BAA6B;IAE7B,uCAAuC;IACvC,+BAA+B;IAC/B,mCAAmC;IAEnC,uCAAuC;IACvC,yBAAyB;IAEzB,0CAA0C;IAC1C,2BAA2B;IAE3B,iDAAiD;IACjD,mCAAmC;IACnC,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,qCAAqC;IAErC,uDAAuD;IACvD,yBAAyB;IAEzB,+CAA+C;IAC/C,yBAAyB;IACzB,gCAAgC;IAChC,6BAA6B;IAC7B,gCAAgC;IAEhC,kDAAkD;IAClD,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;IAE7B,6CAA6C;IAC7C,2BAA2B;IAE3B,0DAA0D;IAC1D,iBAAiB;IAEjB,mDAAmD;IACnD,0BAA0B;IAC1B,0BAA0B;IAE1B,mDAAmD;IACnD,iCAAiC;IAEjC,wCAAwC;IACxC,0BAA0B;IAC1B,8BAA8B;IAE9B,wCAAwC;IACxC,iCAAiC;IAEjC,iDAAiD;IACjD,6BAA6B;IAC7B,oBAAoB;IACpB,4BAA4B;IAC5B,wBAAwB;IAExB,0DAA0D;IAC1D,6BAA6B;IAC7B,8BAA8B;IAC9B,gCAAgC;IAChC,2CAA2C;IAC3C,+BAA+B;IAC/B,4BAA4B;IAC5B,iCAAiC;IACjC,2BAA2B;IAC3B,uBAAuB;IACvB,8BAA8B;IAE9B,kDAAkD;IAClD,yBAAyB;IACzB,2BAA2B;IAC3B,4BAA4B;IAE5B,8CAA8C;IAC9C,0BAA0B;IAC1B,4BAA4B;IAC5B,4BAA4B;IAC5B,oBAAoB;IACpB,uBAAuB;IAEvB,0CAA0C;IAC1C,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,2BAA2B;IAE3B,iCAAiC;IACjC,0BAA0B;IAC1B,mCAAmC;IAEnC,0CAA0C;IAC1C,4BAA4B;IAC5B,yBAAyB;IACzB,8BAA8B;IAC9B,oCAAoC;IACpC,iCAAiC;IAEjC,2CAA2C;IAC3C,2BAA2B;IAC3B,kCAAkC;IAClC,+BAA+B;IAE/B,iDAAiD;IACjD,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAE3B,mCAAmC;IACnC,4BAA4B;IAC5B,iCAAiC;IACjC,oCAAoC;IAEpC,wCAAwC;IACxC,iCAAiC;IACjC,+BAA+B;IAE/B,8CAA8C;IAC9C,2BAA2B;IAC3B,qBAAqB;IAErB,mDAAmD;IACnD,oBAAoB;IACpB,yBAAyB;IAEzB,sDAAsD;IACtD,UAAU;CACF,CAAA"}
+{"version":3,"file":"codes.js","sourceRoot":"","sources":["../../src/errors/codes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IAEvB,UAAU;IACV,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IAEpB,OAAO;IACP,gBAAgB;IAChB,wBAAwB;IACxB,kBAAkB;IAClB,wBAAwB;IACxB,kBAAkB;IAClB,6BAA6B;IAC7B,uBAAuB;IAEvB,iBAAiB;IACjB,gBAAgB;IAEhB,UAAU;IACV,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,kBAAkB;IAClB,0BAA0B;IAC1B,mBAAmB;IACnB,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,wBAAwB;IACxB,qBAAqB;IACrB,2EAA2E;IAC3E,4EAA4E;IAC5E,oBAAoB;IACpB,qBAAqB;IAErB,2EAA2E;IAC3E,+DAA+D;IAC/D,2BAA2B;IAC3B,mCAAmC;IAEnC,sCAAsC;IACtC,kBAAkB;IAClB,yBAAyB;IACzB,qBAAqB;IACrB,gBAAgB;IAChB,mBAAmB;IACnB,2BAA2B;IAC3B,4BAA4B;IAE5B,qBAAqB;IACrB,cAAc;IACd,iBAAiB;IACjB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,YAAY;IAEZ,8EAA8E;IAC9E,iBAAiB;IACjB,iBAAiB;IAEjB,SAAS;IACT,eAAe;IACf,eAAe;IACf,0BAA0B;IAC1B,wBAAwB;IAExB,+EAA+E;IAC/E,6EAA6E;IAC7E,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,4BAA4B;IAC5B,0BAA0B;IAC1B,yBAAyB;IAEzB,SAAS;IACT,iBAAiB;IACjB,eAAe;IACf,qBAAqB;IACrB,wBAAwB;IACxB,yBAAyB;IAEzB,+DAA+D;IAC/D,oBAAoB;IAEpB,0EAA0E;IAC1E,mEAAmE;IACnE,yBAAyB;IAEzB,4EAA4E;IAC5E,iEAAiE;IACjE,sBAAsB;IACtB,2BAA2B;IAE3B,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;IACf,wBAAwB;IAExB,OAAO;IACP,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;IACrB,mBAAmB;IACnB,oBAAoB;IACpB,yEAAyE;IACzE,kEAAkE;IAClE,uBAAuB;IACvB,4EAA4E;IAC5E,0BAA0B;IAC1B,4EAA4E;IAC5E,eAAe;IACf,4BAA4B;IAC5B,iCAAiC;IAEjC,qEAAqE;IACrE,sEAAsE;IACtE,0EAA0E;IAC1E,qDAAqD;IACrD,yBAAyB;IACzB,2BAA2B;IAC3B,yBAAyB;IACzB,sCAAsC;IAEtC,0DAA0D;IAC1D,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,qEAAqE;IACrE,oCAAoC;IACpC,0BAA0B;IAC1B,sBAAsB;IACtB,0EAA0E;IAC1E,uBAAuB;IACvB,0BAA0B;IAE1B,QAAQ;IACR,iBAAiB;IACjB,eAAe;IACf,qBAAqB;IAErB,kEAAkE;IAClE,wEAAwE;IACxE,4BAA4B;IAC5B,wBAAwB;IACxB,sBAAsB;IACtB,yBAAyB;IACzB,wBAAwB;IACxB,oBAAoB;IACpB,uBAAuB;IAEvB,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IAEnB,sCAAsC;IACtC,kBAAkB;IAClB,yBAAyB;IACzB,2BAA2B;IAC3B,uBAAuB;IACvB,kBAAkB;IAElB,8BAA8B;IAC9B,yBAAyB;IACzB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IAEpB,2BAA2B;IAC3B,0BAA0B;IAE1B,sCAAsC;IACtC,0BAA0B;IAE1B,8BAA8B;IAC9B,iBAAiB;IACjB,0BAA0B;IAC1B,wBAAwB;IAExB,2BAA2B;IAC3B,wBAAwB;IACxB,iCAAiC;IAEjC,uBAAuB;IACvB,eAAe;IACf,0BAA0B;IAE1B,uBAAuB;IACvB,4BAA4B;IAE5B,kBAAkB;IAClB,yBAAyB;IACzB,wBAAwB;IAExB,mCAAmC;IACnC,4BAA4B;IAC5B,0BAA0B;IAC1B,sBAAsB;IACtB,6CAA6C;IAC7C,2BAA2B;IAE3B,uEAAuE;IACvE,yEAAyE;IACzE,qBAAqB;IACrB,yBAAyB;IACzB,yBAAyB;IACzB,2BAA2B;IAC3B,yBAAyB;IACzB,mBAAmB;IACnB,8BAA8B;IAE9B,wEAAwE;IACxE,sCAAsC;IACtC,0BAA0B;IAC1B,wBAAwB;IACxB,6BAA6B;IAC7B,sCAAsC;IACtC,oCAAoC;IAEpC,wBAAwB;IACxB,kCAAkC;IAElC,0CAA0C;IAC1C,0BAA0B;IAC1B,eAAe;IAEf,2BAA2B;IAC3B,wBAAwB;IAExB,uCAAuC;IACvC,2BAA2B;IAC3B,4BAA4B;IAC5B,+BAA+B;IAE/B,0CAA0C;IAC1C,+BAA+B;IAE/B,mCAAmC;IACnC,4BAA4B;IAE5B,2CAA2C;IAC3C,mCAAmC;IAEnC,8BAA8B;IAC9B,yBAAyB;IACzB,4BAA4B;IAE5B,wDAAwD;IACxD,sBAAsB;IACtB,uBAAuB;IACvB,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,oBAAoB;IACpB,qBAAqB;IAErB,yCAAyC;IACzC,8BAA8B;IAE9B,mCAAmC;IACnC,iBAAiB;IACjB,mBAAmB;IAEnB,0CAA0C;IAC1C,2BAA2B;IAE3B,iDAAiD;IACjD,2BAA2B;IAE3B,0CAA0C;IAC1C,4BAA4B;IAE5B,yCAAyC;IACzC,yBAAyB;IAEzB,kDAAkD;IAClD,6BAA6B;IAE7B,uCAAuC;IACvC,+BAA+B;IAC/B,mCAAmC;IAEnC,uCAAuC;IACvC,yBAAyB;IAEzB,0CAA0C;IAC1C,2BAA2B;IAE3B,iDAAiD;IACjD,mCAAmC;IACnC,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,qCAAqC;IAErC,uDAAuD;IACvD,yBAAyB;IAEzB,+CAA+C;IAC/C,yBAAyB;IACzB,gCAAgC;IAChC,6BAA6B;IAC7B,gCAAgC;IAEhC,kDAAkD;IAClD,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;IAE7B,6CAA6C;IAC7C,2BAA2B;IAE3B,0DAA0D;IAC1D,iBAAiB;IAEjB,mDAAmD;IACnD,0BAA0B;IAC1B,0BAA0B;IAE1B,mDAAmD;IACnD,iCAAiC;IAEjC,wCAAwC;IACxC,0BAA0B;IAC1B,8BAA8B;IAE9B,wCAAwC;IACxC,iCAAiC;IAEjC,iDAAiD;IACjD,6BAA6B;IAC7B,oBAAoB;IACpB,4BAA4B;IAC5B,wBAAwB;IAExB,0DAA0D;IAC1D,6BAA6B;IAC7B,8BAA8B;IAC9B,gCAAgC;IAChC,2CAA2C;IAC3C,+BAA+B;IAC/B,4BAA4B;IAC5B,iCAAiC;IACjC,2BAA2B;IAC3B,uBAAuB;IACvB,8BAA8B;IAE9B,kDAAkD;IAClD,yBAAyB;IACzB,2BAA2B;IAC3B,4BAA4B;IAE5B,8CAA8C;IAC9C,0BAA0B;IAC1B,4BAA4B;IAC5B,4BAA4B;IAC5B,oBAAoB;IACpB,uBAAuB;IAEvB,0CAA0C;IAC1C,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,2BAA2B;IAE3B,iCAAiC;IACjC,0BAA0B;IAC1B,mCAAmC;IAEnC,0CAA0C;IAC1C,4BAA4B;IAC5B,yBAAyB;IACzB,8BAA8B;IAC9B,oCAAoC;IACpC,iCAAiC;IAEjC,2CAA2C;IAC3C,2BAA2B;IAC3B,qEAAqE;IACrE,8BAA8B;IAC9B,2BAA2B;IAC3B,kCAAkC;IAClC,+BAA+B;IAE/B,iDAAiD;IACjD,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,2EAA2E;IAC3E,uEAAuE;IACvE,oCAAoC;IACpC,gCAAgC;IAEhC,mCAAmC;IACnC,4BAA4B;IAC5B,iCAAiC;IACjC,oCAAoC;IAEpC,wCAAwC;IACxC,iCAAiC;IACjC,+BAA+B;IAE/B,qEAAqE;IACrE,mCAAmC;IACnC,6BAA6B;IAC7B,uBAAuB;IACvB,2BAA2B;IAC3B,gCAAgC;IAEhC,8CAA8C;IAC9C,2BAA2B;IAC3B,qBAAqB;IAErB,mDAAmD;IACnD,oBAAoB;IACpB,yBAAyB;IAEzB,oDAAoD;IACpD,wBAAwB;IAExB,qDAAqD;IACrD,2BAA2B;IAE3B,oDAAoD;IACpD,4BAA4B;IAC5B,8BAA8B;IAC9B,+BAA+B;IAC/B,2BAA2B;IAC3B,sCAAsC;IAEtC,2DAA2D;IAC3D,iCAAiC;IAEjC,kFAAkF;IAClF,4BAA4B;IAE5B,qEAAqE;IACrE,sBAAsB;IACtB,sBAAsB;IAEtB,gFAAgF;IAChF,8BAA8B;IAC9B,qBAAqB;IAErB,sDAAsD;IACtD,oBAAoB;IACpB,0BAA0B;IAC1B,0BAA0B;IAE1B,mDAAmD;IACnD,uBAAuB;IACvB,0BAA0B;IAC1B,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,4BAA4B;IAC5B,0BAA0B;IAC1B,4BAA4B;IAC5B,qBAAqB;IACrB,kBAAkB;IAElB,qEAAqE;IACrE,wBAAwB;IACxB,0BAA0B;IAC1B,+BAA+B;IAC/B,mCAAmC;IAEnC,0EAA0E;IAC1E,6BAA6B;IAC7B,wBAAwB;IACxB,sBAAsB;IACtB,mBAAmB;IACnB,0BAA0B;IAE1B,+DAA+D;IAC/D,mBAAmB;IACnB,sBAAsB;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,wBAAwB;IACxB,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,uBAAuB;IAEvB,wEAAwE;IACxE,cAAc;IACd,iBAAiB;IACjB,yBAAyB;IACzB,2BAA2B;IAC3B,yBAAyB;IACzB,eAAe;IACf,mBAAmB;IACnB,yBAAyB;IACzB,yBAAyB;IACzB,uBAAuB;IACvB,iCAAiC;IACjC,wEAAwE;IACxE,oBAAoB;IACpB,uBAAuB;IACvB,qBAAqB;IACrB,mBAAmB;IAEnB,oEAAoE;IACpE,4EAA4E;IAC5E,4BAA4B;IAE5B,uEAAuE;IACvE,uEAAuE;IACvE,qBAAqB;IACrB,6BAA6B;IAC7B,qBAAqB;IACrB,sBAAsB;IACtB,8BAA8B;IAC9B,uBAAuB;IAEvB,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,6DAA6D;IAC7D,4DAA4D;IAC5D,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,2BAA2B;IAC3B,yBAAyB;IACzB,qBAAqB;IACrB,uBAAuB;IACvB,iCAAiC;IACjC,0BAA0B;IAC1B,2BAA2B;IAE3B,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,8BAA8B;IAC9B,8BAA8B;IAE9B,wEAAwE;IACxE,2EAA2E;IAC3E,sEAAsE;IACtE,+CAA+C;IAC/C,4BAA4B;IAE5B,6EAA6E;IAC7E,iCAAiC;IAEjC,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpD,qBAAqB;IACrB,mCAAmC;IAEnC,+DAA+D;IAC/D,0EAA0E;IAC1E,kBAAkB;IAClB,yBAAyB;IAEzB,oEAAoE;IACpE,0EAA0E;IAC1E,oEAAoE;IACpE,gCAAgC;IAChC,yBAAyB;IACzB,gCAAgC;IAEhC,wEAAwE;IACxE,iEAAiE;IACjE,oDAAoD;IACpD,yBAAyB;IACzB,2BAA2B;IAC3B,qCAAqC;IACrC,wCAAwC;IACxC,mEAAmE;IACnE,yEAAyE;IACzE,uDAAuD;IACvD,yBAAyB;IAEzB,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,uEAAuE;IACvE,+BAA+B;IAC/B,8BAA8B;IAC9B,8BAA8B;IAC9B,sCAAsC;IACtC,6BAA6B;IAE7B,sDAAsD;IACtD,UAAU;CACF,CAAA"}

package/dist/index.d.ts

@@ -8,5 +8,7 @@ export * from './logger/index.js';
 export * from './media/index.js';
 export * from './migrations/index.js';
 export * from './queue/index.js';
+export * from './rate-limit/index.js';
 export * from './storage/index.js';
+export * from './version.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,SAAS,CAAA;AACvB,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,SAAS,CAAA;AACvB,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA"}

package/dist/index.js

@@ -8,5 +8,7 @@ export * from './logger/index.js';
 export * from './media/index.js';
 export * from './migrations/index.js';
 export * from './queue/index.js';
+export * from './rate-limit/index.js';
 export * from './storage/index.js';
+export * from './version.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,SAAS,CAAA;AACvB,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,SAAS,CAAA;AACvB,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,cAAc,CAAA"}

package/dist/logger/error-log.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The server error journal (fiche 24 task 4).
+ *
+ * A bounded, in-process ring buffer — not a table. Durability across a
+ * restart is not the point: the point is answering "what just went wrong on
+ * this 500" from the admin, on a shared host with no access to the process's
+ * own stdout. Bounding it ("the N last entries, not everything") is what
+ * "purgées" means here — the oldest entry is simply the one a new one
+ * evicts, so nothing needs a separate sweep.
+ *
+ * Every field passes through `redact()` before it is stored, exactly like
+ * every other structured log record (rule R7, `AGENTS.md` § Logs) — this is
+ * not a second, weaker guarantee, it is the same one applied a second time
+ * so a caller that builds an entry by hand (not through `Logger.error`)
+ * cannot skip it.
+ */
+export interface ErrorLogEntry {
+    readonly id: string;
+    readonly at: string;
+    /** A stable `ErrorCode` when the failure is one of ours, `'INTERNAL'` otherwise. */
+    readonly code: string;
+    readonly message: string;
+    readonly trace: string | undefined;
+    /** Free-form context — request path, method — redacted the same as everything else. */
+    readonly context: Readonly<Record<string, unknown>> | undefined;
+}
+export interface RecordErrorInput {
+    readonly code?: string;
+    readonly message: string;
+    readonly trace?: string;
+    readonly context?: Readonly<Record<string, unknown>>;
+}
+export interface ErrorLog {
+    record(input: RecordErrorInput): ErrorLogEntry;
+    /** Turns a thrown value into an entry, using its `CogentaError` code when it has one. */
+    recordError(error: unknown, context?: Readonly<Record<string, unknown>>): ErrorLogEntry;
+    /** Newest first. */
+    entries(): readonly ErrorLogEntry[];
+    clear(): void;
+}
+export interface ErrorLogOptions {
+    /** How many entries survive at once. The (N+1)th record evicts the oldest. */
+    readonly capacity?: number;
+    readonly now?: () => Date;
+    readonly newId?: () => string;
+}
+export declare function createErrorLog(options?: ErrorLogOptions): ErrorLog;
+//# sourceMappingURL=error-log.d.ts.map

package/dist/logger/error-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-log.d.ts","sourceRoot":"","sources":["../../src/logger/error-log.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;CAChE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACrD;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,aAAa,CAAA;IAC9C,yFAAyF;IACzF,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,aAAa,CAAA;IACvF,oBAAoB;IACpB,OAAO,IAAI,SAAS,aAAa,EAAE,CAAA;IACnC,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CAC9B;AAID,wBAAgB,cAAc,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAuDtE"}

package/dist/logger/error-log.js

@@ -0,0 +1,57 @@
+import { randomUUID } from 'node:crypto';
+import { isCogentaError } from '../errors/index.js';
+import { redact } from './redact.js';
+const DEFAULT_CAPACITY = 200;
+export function createErrorLog(options = {}) {
+    const capacity = options.capacity ?? DEFAULT_CAPACITY;
+    const now = options.now ?? (() => new Date());
+    const newId = options.newId ?? randomUUID;
+    let buffer = [];
+    function record(input) {
+        const safe = redact({
+            message: input.message,
+            trace: input.trace ?? null,
+            context: input.context ?? null,
+        });
+        const entry = {
+            id: newId(),
+            at: now().toISOString(),
+            code: input.code ?? 'INTERNAL',
+            message: String(safe['message']),
+            trace: typeof safe['trace'] === 'string' ? safe['trace'] : undefined,
+            context: safe['context'] !== null && typeof safe['context'] === 'object'
+                ? safe['context']
+                : undefined,
+        };
+        buffer.unshift(entry);
+        if (buffer.length > capacity)
+            buffer = buffer.slice(0, capacity);
+        return entry;
+    }
+    function recordError(error, context) {
+        if (isCogentaError(error)) {
+            return record({
+                code: error.code,
+                message: error.message,
+                ...(error.stack === undefined ? {} : { trace: error.stack }),
+                ...(context === undefined ? {} : { context }),
+            });
+        }
+        const trace = error instanceof Error ? error.stack : undefined;
+        return record({
+            code: 'INTERNAL',
+            message: error instanceof Error ? error.message : String(error),
+            ...(trace === undefined ? {} : { trace }),
+            ...(context === undefined ? {} : { context }),
+        });
+    }
+    return {
+        record,
+        recordError,
+        entries: () => buffer,
+        clear: () => {
+            buffer = [];
+        },
+    };
+}
+//# sourceMappingURL=error-log.js.map

package/dist/logger/error-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-log.js","sourceRoot":"","sources":["../../src/logger/error-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAqDpC,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,UAAU,cAAc,CAAC,OAAO,GAAoB,EAAE;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAA;IAEzC,IAAI,MAAM,GAAoB,EAAE,CAAA;IAEhC,SAAS,MAAM,CAAC,KAAuB;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;SAC/B,CAAC,CAAA;QACF,MAAM,KAAK,GAAkB;YAC3B,EAAE,EAAE,KAAK,EAAE;YACX,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;YAC9B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,KAAK,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACpE,OAAO,EACL,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAC7D,CAAC,CAAE,IAAI,CAAC,SAAS,CAAuC;gBACxD,CAAC,CAAC,SAAS;SAChB,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACrB,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAChE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAA2C;QAC9E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;aAC9C,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,WAAW;QACX,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM;QACrB,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,GAAG,EAAE,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/logger/index.d.ts

@@ -1,3 +1,5 @@
+export type { ErrorLog, ErrorLogEntry, ErrorLogOptions, RecordErrorInput } from './error-log.js';
+export { createErrorLog } from './error-log.js';
 export { createLogger } from './logger.js';
 export { REDACTED, redact } from './redact.js';
 export type { EmittedLogLevel, LogDestination, LogFields, Logger, LoggerOptions, LogLevel, LogRecord, } from './types.js';

package/dist/logger/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9C,YAAY,EACV,eAAe,EACf,cAAc,EACd,SAAS,EACT,MAAM,EACN,aAAa,EACb,QAAQ,EACR,SAAS,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC9C,YAAY,EACV,eAAe,EACf,cAAc,EACd,SAAS,EACT,MAAM,EACN,aAAa,EACb,QAAQ,EACR,SAAS,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}

package/dist/logger/index.js

@@ -1,3 +1,4 @@
+export { createErrorLog } from './error-log.js';
 export { createLogger } from './logger.js';
 export { REDACTED, redact } from './redact.js';
 export { LOG_LEVELS } from './types.js';

package/dist/logger/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAU9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAU9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}

package/dist/media/exif.d.ts

@@ -0,0 +1,46 @@
+/**
+ * A minimal, zero-dependency EXIF reader and GPS scrubber for JPEG originals
+ * (fiche 11 task 6).
+ *
+ * Only what the media library's detail screen and its privacy notice need:
+ * camera make/model, the date a photo was taken, its stored orientation, and
+ * whether it carries GPS coordinates — never the full EXIF tag set. R9/R10
+ * both apply here exactly as they did to `document.extract_text` (L19 task
+ * 1): a JPEG's EXIF block is a TIFF structure with a documented, stable
+ * layout, small enough to walk by hand without a dependency that would pull
+ * in a general-purpose (and much larger) metadata library for four tags.
+ *
+ * **Why GPS gets stripped, not just hidden.** `docs/lots/11-mediatheque.md`
+ * calls out EXIF GPS coordinates as personal data a public image can leak.
+ * Unlinking the `GPSInfo` pointer from IFD0 is what every EXIF-aware reader
+ * actually follows, but leaves the original bytes recoverable by anyone
+ * scanning the file directly — so `stripGpsFromJpeg` also zeroes the GPS
+ * IFD's own entries and any external data block a `RATIONAL` value pointed
+ * at (latitude/longitude do not fit in the 4 inline bytes of a directory
+ * entry, so they live elsewhere in the same TIFF blob).
+ */
+export interface ExifGps {
+    readonly latitude: number;
+    readonly longitude: number;
+}
+export interface ExifData {
+    readonly make: string | null;
+    readonly model: string | null;
+    /** ISO 8601, from `DateTimeOriginal` (Exif sub-IFD) or `DateTime` (IFD0), in that order. */
+    readonly takenAt: string | null;
+    /** The raw EXIF orientation value (1–8), or null when absent. */
+    readonly orientation: number | null;
+    readonly gps: ExifGps | null;
+}
+export declare function readExif(bytes: Uint8Array): ExifData | null;
+/**
+ * Removes GPS coordinates from a JPEG's EXIF block, in place semantics
+ * aside: returns a new buffer, the original is never mutated.
+ *
+ * Every other EXIF tag (camera, orientation, capture date) is left exactly
+ * as it was — this is a location scrub, not a metadata wipe.
+ */
+export declare function stripGpsFromJpeg(bytes: Uint8Array): Uint8Array;
+/** Whether a JPEG's EXIF block carries GPS coordinates — the yes/no a privacy notice needs, without the caller having to unpack the whole `ExifData` shape. */
+export declare function hasGpsData(bytes: Uint8Array): boolean;
+//# sourceMappingURL=exif.d.ts.map

package/dist/media/exif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exif.d.ts","sourceRoot":"","sources":["../../src/media/exif.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAA;CAC7B;AAiKD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CA0D3D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAiD9D;AAED,+JAA+J;AAC/J,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAGrD"}