@cullet/erp-core 1.0.2 → 1.0.4

package/src/core/errors/authorization-error.ts

@@ -7,44 +7,44 @@ import type { AppErrorOptions, ErrorSeverity } from "./types";
 // ─────────────────────────────────────────────────────────────────────────────
 
 type AuthorizationErrorReason =
-  | "forbidden"
-  | "missing_role"
-  | "missing_capability"
-  | "out_of_scope"
-  | "outside_time_window"
-  | "policy_denied"
-  | "unknown";
+    | "forbidden"
+    | "missing_role"
+    | "missing_capability"
+    | "out_of_scope"
+    | "outside_time_window"
+    | "policy_denied"
+    | "unknown";
 
 type AuthorizationRequirement = {
-  role?: string;
-  capability?: string;
-  scope?: string; // e.g.: "school:{id}" or "class:{id}"
+    role?: string;
+    capability?: string;
+    scope?: string; // e.g.: "school:{id}" or "class:{id}"
 };
 
 type AuthorizationErrorMetadata = {
-  reason: AuthorizationErrorReason;
+    reason: AuthorizationErrorReason;
 
-  /** Stable action you evaluated (not an HTTP route — a "business action") */
-  action: string;
+    /** Stable action you evaluated (not an HTTP route — a "business action") */
+    action: string;
 
-  /** Resource identification (without leaking the full payload) */
-  resource?: { type: string; id?: string };
+    /** Resource identification (without leaking the full payload) */
+    resource?: { type: string; id?: string };
 
-  /** Optional: actor (do not include sensitive data) */
-  actor?: { userId: string; role?: string };
+    /** Optional: actor (do not include sensitive data) */
+    actor?: { userId: string; role?: string };
 
-  /** Optional: expected requirement */
-  required?: AuthorizationRequirement;
+    /** Optional: expected requirement */
+    required?: AuthorizationRequirement;
 
-  /** Optional: policy (when you already have PolicyEvaluation or similar) */
-  policyId?: string;
-  policyVersion?: number;
-  evaluatedAtIso?: string;
-  decision?: "allow" | "deny";
-  reasonCode?: string;
+    /** Optional: policy (when you already have PolicyEvaluation or similar) */
+    policyId?: string;
+    policyVersion?: number;
+    evaluatedAtIso?: string;
+    decision?: "allow" | "deny";
+    reasonCode?: string;
 
-  /** Optional: additional non-sensitive info */
-  details?: string;
+    /** Optional: additional non-sensitive info */
+    details?: string;
 };
 
 /**
@@ -52,114 +52,114 @@ type AuthorizationErrorMetadata = {
  * Combines metadata fields (except 'reason') with common AppError options.
  */
 type AuthorizationErrorFactoryOptions = Omit<
-  AuthorizationErrorMetadata,
-  "reason"
+    AuthorizationErrorMetadata,
+    "reason"
 > &
-  Omit<AppErrorOptions, "metadata">;
+    Omit<AppErrorOptions, "metadata">;
 
 // ─────────────────────────────────────────────────────────────────────────────
 // AuthorizationError
 // ─────────────────────────────────────────────────────────────────────────────
 
 class AuthorizationError extends AppError {
-  public readonly reason: AuthorizationErrorReason;
-
-  private constructor(params: {
-    message: string;
-    code: string;
-    reason: AuthorizationErrorReason;
-    metadata: AuthorizationErrorMetadata;
-    cause?: unknown;
-    type?: string;
-    severity?: ErrorSeverity;
-    correlationId?: string;
-    requestId?: string;
-    commandId?: string;
-    createdAtIso?: string;
-    publicMessage?: string;
-  }) {
-    super(params.message, params.code, {
-      cause: params.cause,
-      metadata: params.metadata,
-      type: params.type,
-      severity: params.severity,
-      correlationId: params.correlationId,
-      requestId: params.requestId,
-      commandId: params.commandId,
-      createdAtIso: params.createdAtIso,
-      publicMessage: params.publicMessage,
-    });
-
-    this.reason = params.reason;
-    Object.freeze(this);
-  }
-
-  // ─────────────────────────────────────────────────────────────────────────
-  // Factories
-  // ─────────────────────────────────────────────────────────────────────────
-
-  static forbidden(
-    input: AuthorizationErrorFactoryOptions,
-  ): AuthorizationError {
-    return new AuthorizationError({
-      message: "Action not allowed",
-      code: ErrorCodes.authorization.forbidden,
-      reason: "forbidden",
-      metadata: { reason: "forbidden", ...extractMetadataOnly(input) },
-      ...extractAppErrorOptions(input),
-    });
-  }
-
-  static policyDenied(
-    input: AuthorizationErrorFactoryOptions & {
-      policyId: string;
-      policyVersion: number;
-      evaluatedAtIso: string;
-    },
-  ): AuthorizationError {
-    return new AuthorizationError({
-      message: "Action denied by policy",
-      code: ErrorCodes.authorization.policyDenied,
-      reason: "policy_denied",
-      metadata: {
-        reason: "policy_denied",
-        ...extractMetadataOnly(input),
-        decision: "deny",
-      },
-      ...extractAppErrorOptions(input),
-    });
-  }
-
-  static missingCapability(
-    input: AuthorizationErrorFactoryOptions & {
-      required: AuthorizationRequirement;
-    },
-  ): AuthorizationError {
-    return new AuthorizationError({
-      message: "Insufficient capability to perform the action",
-      code: ErrorCodes.authorization.missingCapability,
-      reason: "missing_capability",
-      metadata: {
-        reason: "missing_capability",
-        ...extractMetadataOnly(input),
-      },
-      ...extractAppErrorOptions(input),
-    });
-  }
-
-  static outOfScope(
-    input: AuthorizationErrorFactoryOptions & {
-      required?: AuthorizationRequirement;
-    },
-  ): AuthorizationError {
-    return new AuthorizationError({
-      message: "Action outside the allowed scope",
-      code: ErrorCodes.authorization.outOfScope,
-      reason: "out_of_scope",
-      metadata: { reason: "out_of_scope", ...extractMetadataOnly(input) },
-      ...extractAppErrorOptions(input),
-    });
-  }
+    public readonly reason: AuthorizationErrorReason;
+
+    private constructor(params: {
+        message: string;
+        code: string;
+        reason: AuthorizationErrorReason;
+        metadata: AuthorizationErrorMetadata;
+        cause?: unknown;
+        type?: string;
+        severity?: ErrorSeverity;
+        correlationId?: string;
+        requestId?: string;
+        commandId?: string;
+        createdAtIso?: string;
+        publicMessage?: string;
+    }) {
+        super(params.message, params.code, {
+            cause: params.cause,
+            metadata: params.metadata,
+            type: params.type,
+            severity: params.severity,
+            correlationId: params.correlationId,
+            requestId: params.requestId,
+            commandId: params.commandId,
+            createdAtIso: params.createdAtIso,
+            publicMessage: params.publicMessage,
+        });
+
+        this.reason = params.reason;
+        Object.freeze(this);
+    }
+
+    // ─────────────────────────────────────────────────────────────────────────
+    // Factories
+    // ─────────────────────────────────────────────────────────────────────────
+
+    static forbidden(
+        input: AuthorizationErrorFactoryOptions,
+    ): AuthorizationError {
+        return new AuthorizationError({
+            message: "Action not allowed",
+            code: ErrorCodes.authorization.forbidden,
+            reason: "forbidden",
+            metadata: { reason: "forbidden", ...extractMetadataOnly(input) },
+            ...extractAppErrorOptions(input),
+        });
+    }
+
+    static policyDenied(
+        input: AuthorizationErrorFactoryOptions & {
+            policyId: string;
+            policyVersion: number;
+            evaluatedAtIso: string;
+        },
+    ): AuthorizationError {
+        return new AuthorizationError({
+            message: "Action denied by policy",
+            code: ErrorCodes.authorization.policyDenied,
+            reason: "policy_denied",
+            metadata: {
+                reason: "policy_denied",
+                ...extractMetadataOnly(input),
+                decision: "deny",
+            },
+            ...extractAppErrorOptions(input),
+        });
+    }
+
+    static missingCapability(
+        input: AuthorizationErrorFactoryOptions & {
+            required: AuthorizationRequirement;
+        },
+    ): AuthorizationError {
+        return new AuthorizationError({
+            message: "Insufficient capability to perform the action",
+            code: ErrorCodes.authorization.missingCapability,
+            reason: "missing_capability",
+            metadata: {
+                reason: "missing_capability",
+                ...extractMetadataOnly(input),
+            },
+            ...extractAppErrorOptions(input),
+        });
+    }
+
+    static outOfScope(
+        input: AuthorizationErrorFactoryOptions & {
+            required?: AuthorizationRequirement;
+        },
+    ): AuthorizationError {
+        return new AuthorizationError({
+            message: "Action outside the allowed scope",
+            code: ErrorCodes.authorization.outOfScope,
+            reason: "out_of_scope",
+            metadata: { reason: "out_of_scope", ...extractMetadataOnly(input) },
+            ...extractAppErrorOptions(input),
+        });
+    }
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -167,38 +167,38 @@ class AuthorizationError extends AppError {
 // ─────────────────────────────────────────────────────────────────────────────
 
 function extractAppErrorOptions(options?: Partial<AppErrorOptions>) {
-  return {
-    cause: options?.cause,
-    type: options?.type,
-    severity: options?.severity,
-    correlationId: options?.correlationId,
-    requestId: options?.requestId,
-    commandId: options?.commandId,
-    createdAtIso: options?.createdAtIso,
-    publicMessage: options?.publicMessage,
-  };
+    return {
+        cause: options?.cause,
+        type: options?.type,
+        severity: options?.severity,
+        correlationId: options?.correlationId,
+        requestId: options?.requestId,
+        commandId: options?.commandId,
+        createdAtIso: options?.createdAtIso,
+        publicMessage: options?.publicMessage,
+    };
 }
 
 function extractMetadataOnly(
-  input: AuthorizationErrorFactoryOptions,
+    input: AuthorizationErrorFactoryOptions,
 ): Omit<AuthorizationErrorMetadata, "reason"> {
-  const {
-    cause,
-    type,
-    severity,
-    correlationId,
-    requestId,
-    commandId,
-    createdAtIso,
-    publicMessage,
-    ...metadata
-  } = input;
-  return metadata;
+    const {
+        cause,
+        type,
+        severity,
+        correlationId,
+        requestId,
+        commandId,
+        createdAtIso,
+        publicMessage,
+        ...metadata
+    } = input;
+    return metadata;
 }
 
 export { AuthorizationError };
 export type {
-  AuthorizationErrorMetadata,
-  AuthorizationErrorReason,
-  AuthorizationRequirement,
+    AuthorizationErrorMetadata,
+    AuthorizationErrorReason,
+    AuthorizationRequirement,
 };

package/src/core/errors/business-rule-violation-error.ts

@@ -7,22 +7,22 @@ import type { AppErrorOptions } from "./types";
 // ─────────────────────────────────────────────────────────────────────────────
 
 class BusinessRuleViolationError extends AppError {
-  constructor(
-    rule: string,
-    message: string,
-    detail?: Record<string, unknown>,
-    options?: AppErrorOptions,
-  ) {
-    const baseMetadata = detail ? { rule, detail } : { rule };
-    const mergedMetadata = options?.metadata
-      ? { ...baseMetadata, ...options.metadata }
-      : baseMetadata;
+    constructor(
+        rule: string,
+        message: string,
+        detail?: Record<string, unknown>,
+        options?: AppErrorOptions,
+    ) {
+        const baseMetadata = detail ? { rule, detail } : { rule };
+        const mergedMetadata = options?.metadata
+            ? { ...baseMetadata, ...options.metadata }
+            : baseMetadata;
 
-    super(message, ErrorCodes.businessRuleViolation, {
-      ...options,
-      metadata: mergedMetadata,
-    });
-  }
+        super(message, ErrorCodes.businessRuleViolation, {
+            ...options,
+            metadata: mergedMetadata,
+        });
+    }
 }
 
 export { BusinessRuleViolationError };