@cullet/erp-core 1.3.0 → 1.4.0

package/dist/validation-error.cjs

@@ -1,6 +1,6 @@
-const require_unexpected_error = require("./unexpected-error.cjs");
+const require_app_error = require("./app-error.cjs");
 //#region src/core/errors/authentication-error.ts
-var AuthenticationError = class AuthenticationError extends require_unexpected_error.AppError {
+var AuthenticationError = class AuthenticationError extends require_app_error.AppError {
 	constructor(params) {
 		super(params.message, params.code, {
 			cause: params.cause,
@@ -22,16 +22,16 @@ var AuthenticationError = class AuthenticationError extends require_unexpected_e
 	static missingToken(options) {
 		return new AuthenticationError({
 			message: "Missing credentials",
-			code: require_unexpected_error.ErrorCodes.authentication.missingToken,
+			code: require_app_error.ErrorCodes.authentication.missingToken,
 			reason: "missing_token",
 			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions$1(options)
+			...extractAppErrorOptions(options)
 		});
 	}
 	static invalidToken(options) {
 		return new AuthenticationError({
 			message: "Invalid credentials",
-			code: require_unexpected_error.ErrorCodes.authentication.invalidToken,
+			code: require_app_error.ErrorCodes.authentication.invalidToken,
 			reason: "invalid_token",
 			metadata: compactMetadata$1({
 				authScheme: options?.authScheme,
@@ -40,29 +40,29 @@ var AuthenticationError = class AuthenticationError extends require_unexpected_e
 				correlationId: options?.correlationId,
 				requestId: options?.requestId
 			}),
-			...extractAppErrorOptions$1(options)
+			...extractAppErrorOptions(options)
 		});
 	}
 	static expiredToken(options) {
 		return new AuthenticationError({
 			message: "Expired credentials",
-			code: require_unexpected_error.ErrorCodes.authentication.expiredToken,
+			code: require_app_error.ErrorCodes.authentication.expiredToken,
 			reason: "expired_token",
 			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions$1(options)
+			...extractAppErrorOptions(options)
 		});
 	}
 	static invalidCredentials(options) {
 		return new AuthenticationError({
 			message: "Invalid username or password",
-			code: require_unexpected_error.ErrorCodes.authentication.invalidCredentials,
+			code: require_app_error.ErrorCodes.authentication.invalidCredentials,
 			reason: "invalid_credentials",
 			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions$1(options)
+			...extractAppErrorOptions(options)
 		});
 	}
 };
-function extractAppErrorOptions$1(options) {
+function extractAppErrorOptions(options) {
 	return {
 		cause: options?.cause,
 		type: options?.type,
@@ -79,133 +79,6 @@ function compactMetadata$1(input) {
 	return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0));
 }
 //#endregion
-//#region src/core/errors/authorization-error.ts
-/**
-* Raised when an authenticated actor is not allowed to perform a business
-* action — the "you may not" error, distinct from authentication ("who are
-* you"). Maps to an HTTP 403 at the edge.
-*
-* The discriminating {@link reason} records *why* access was denied (a flat
-* forbid, a missing role/capability, an out-of-scope target, or a policy
-* decision) so the boundary can shape the response without re-deriving it. The
-* metadata is deliberately built around a stable business `action` and a
-* type/id resource reference rather than an HTTP route or full payload, keeping
-* sensitive data out of logs. Instances are frozen. Construct through the
-* static factories, never directly.
-*/
-var AuthorizationError = class AuthorizationError extends require_unexpected_error.AppError {
-	constructor(params) {
-		super(params.message, params.code, {
-			cause: params.cause,
-			metadata: params.metadata,
-			type: params.type,
-			severity: params.severity,
-			correlationId: params.correlationId,
-			requestId: params.requestId,
-			commandId: params.commandId,
-			createdAtIso: params.createdAtIso,
-			publicMessage: params.publicMessage
-		});
-		this.reason = params.reason;
-		Object.freeze(this);
-	}
-	/**
-	* A flat denial with no more specific reason — the actor simply may not
-	* perform this action. Reach for a more precise factory
-	* ({@link AuthorizationError.missingCapability}, {@link AuthorizationError.outOfScope},
-	* {@link AuthorizationError.policyDenied}) when the cause is known.
-	*/
-	static forbidden(input) {
-		return new AuthorizationError({
-			message: "Action not allowed",
-			code: require_unexpected_error.ErrorCodes.authorization.forbidden,
-			reason: "forbidden",
-			metadata: {
-				reason: "forbidden",
-				...extractMetadataOnly(input)
-			},
-			...extractAppErrorOptions(input)
-		});
-	}
-	/**
-	* The action was denied by an evaluated policy. Captures the deciding
-	* policy's id, version, and evaluation instant into the metadata (with
-	* `decision: "deny"`) so the denial is auditable back to the exact policy
-	* that produced it.
-	*
-	* @param input - Factory options plus the required `policyId`,
-	*   `policyVersion`, and `evaluatedAtIso` of the deciding policy.
-	*/
-	static policyDenied(input) {
-		return new AuthorizationError({
-			message: "Action denied by policy",
-			code: require_unexpected_error.ErrorCodes.authorization.policyDenied,
-			reason: "policy_denied",
-			metadata: {
-				reason: "policy_denied",
-				...extractMetadataOnly(input),
-				decision: "deny"
-			},
-			...extractAppErrorOptions(input)
-		});
-	}
-	/**
-	* The actor lacks a required role or capability. The expected
-	* {@link AuthorizationRequirement} is recorded so the boundary can tell the
-	* caller precisely what grant is missing.
-	*
-	* @param input - Factory options plus the `required` role/capability/scope.
-	*/
-	static missingCapability(input) {
-		return new AuthorizationError({
-			message: "Insufficient capability to perform the action",
-			code: require_unexpected_error.ErrorCodes.authorization.missingCapability,
-			reason: "missing_capability",
-			metadata: {
-				reason: "missing_capability",
-				...extractMetadataOnly(input)
-			},
-			...extractAppErrorOptions(input)
-		});
-	}
-	/**
-	* The actor may perform the action in general, but not on *this* target —
-	* the resource falls outside the actor's permitted scope (e.g. a different
-	* school or tenant than the one they are bound to).
-	*
-	* @param input - Factory options plus the optional `required` scope that the
-	*   target failed to satisfy.
-	*/
-	static outOfScope(input) {
-		return new AuthorizationError({
-			message: "Action outside the allowed scope",
-			code: require_unexpected_error.ErrorCodes.authorization.outOfScope,
-			reason: "out_of_scope",
-			metadata: {
-				reason: "out_of_scope",
-				...extractMetadataOnly(input)
-			},
-			...extractAppErrorOptions(input)
-		});
-	}
-};
-function extractAppErrorOptions(options) {
-	return {
-		cause: options?.cause,
-		type: options?.type,
-		severity: options?.severity,
-		correlationId: options?.correlationId,
-		requestId: options?.requestId,
-		commandId: options?.commandId,
-		createdAtIso: options?.createdAtIso,
-		publicMessage: options?.publicMessage
-	};
-}
-function extractMetadataOnly(input) {
-	const { cause, type, severity, correlationId, requestId, commandId, createdAtIso, publicMessage, ...metadata } = input;
-	return metadata;
-}
-//#endregion
 //#region src/core/errors/conflict-error.ts
 /**
 * Base for errors that signal a state conflict — the request collides with data
@@ -218,7 +91,7 @@ function extractMetadataOnly(input) {
 * message, and metadata. Instances are frozen, so a conflict error can be shared
 * and rethrown without risk of tampering.
 */
-var ConflictError = class extends require_unexpected_error.AppError {
+var ConflictError = class extends require_app_error.AppError {
 	constructor(params) {
 		super(params.message, params.code, {
 			...params,
@@ -240,7 +113,7 @@ var AlreadyExistsError = class AlreadyExistsError extends ConflictError {
 	constructor(input) {
 		super({
 			message: "A matching record already exists for the requested operation",
-			code: require_unexpected_error.ErrorCodes.conflict.alreadyExists,
+			code: require_app_error.ErrorCodes.conflict.alreadyExists,
 			kind: "already_exists",
 			...input
 		});
@@ -283,7 +156,7 @@ var DuplicateError = class DuplicateError extends ConflictError {
 	constructor(input) {
 		super({
 			message: "Conflict: an existing record violates uniqueness",
-			code: require_unexpected_error.ErrorCodes.conflict.duplicate,
+			code: require_app_error.ErrorCodes.conflict.duplicate,
 			kind: "duplicate",
 			...input
 		});
@@ -327,7 +200,7 @@ var UniqueConstraintViolationError = class UniqueConstraintViolationError extend
 	constructor(input) {
 		super({
 			message: "Uniqueness violation in storage",
-			code: require_unexpected_error.ErrorCodes.conflict.uniqueViolation,
+			code: require_app_error.ErrorCodes.conflict.uniqueViolation,
 			kind: "unique_violation",
 			...input
 		});
@@ -387,7 +260,7 @@ function translateUniqueViolationToDuplicate(input) {
 }
 //#endregion
 //#region src/core/errors/idempotency-error.ts
-var IdempotencyError = class extends require_unexpected_error.AppError {
+var IdempotencyError = class extends require_app_error.AppError {
 	constructor(input) {
 		super(input.message, input.code, {
 			cause: input.cause,
@@ -416,7 +289,7 @@ var IdempotencyKeyMissingError = class IdempotencyKeyMissingError extends Idempo
 	constructor(input) {
 		super({
 			message: "Idempotency key/commandId missing for the requested operation",
-			code: require_unexpected_error.ErrorCodes.idempotency.keyMissing,
+			code: require_app_error.ErrorCodes.idempotency.keyMissing,
 			kind: "key_missing",
 			metadata: input.metadata,
 			cause: input.cause
@@ -443,7 +316,7 @@ var IdempotencyInProgressError = class IdempotencyInProgressError extends Idempo
 	constructor(input) {
 		super({
 			message: "The same business intent is already being processed",
-			code: require_unexpected_error.ErrorCodes.idempotency.inProgress,
+			code: require_app_error.ErrorCodes.idempotency.inProgress,
 			kind: "in_progress",
 			metadata: input.metadata,
 			cause: input.cause
@@ -474,7 +347,7 @@ var IdempotencyPayloadMismatchError = class IdempotencyPayloadMismatchError exte
 	constructor(input) {
 		super({
 			message: "The idempotency key was reused with a different payload",
-			code: require_unexpected_error.ErrorCodes.idempotency.payloadMismatch,
+			code: require_app_error.ErrorCodes.idempotency.payloadMismatch,
 			kind: "payload_mismatch",
 			metadata: input.metadata,
 			cause: input.cause
@@ -507,7 +380,7 @@ var IdempotencyReplayNotSupportedError = class IdempotencyReplayNotSupportedErro
 	constructor(input) {
 		super({
 			message: "Re-execution detected, but replay of the previous result is not implemented",
-			code: require_unexpected_error.ErrorCodes.idempotency.replayNotSupported,
+			code: require_app_error.ErrorCodes.idempotency.replayNotSupported,
 			kind: "replay_not_supported",
 			metadata: input.metadata,
 			cause: input.cause
@@ -554,7 +427,7 @@ function resolveKeyIdentity(key, keyHash, keyPreview) {
 * {@link reason} lets callers decide whether a failure is worth retrying.
 * Instances are frozen; construct through the static factories.
 */
-var IntegrationError = class IntegrationError extends require_unexpected_error.AppError {
+var IntegrationError = class IntegrationError extends require_app_error.AppError {
 	constructor(params) {
 		const { message, code, metadata, ...rest } = params;
 		super(message, code, {
@@ -571,7 +444,7 @@ var IntegrationError = class IntegrationError extends require_unexpected_error.A
 	static timeout(options) {
 		return new IntegrationError({
 			message: "Timeout while integrating with external provider",
-			code: require_unexpected_error.ErrorCodes.integration.timeout,
+			code: require_app_error.ErrorCodes.integration.timeout,
 			reason: "timeout",
 			metadata: buildMetadata({
 				reason: "timeout",
@@ -587,7 +460,7 @@ var IntegrationError = class IntegrationError extends require_unexpected_error.A
 	static unreachable(options) {
 		return new IntegrationError({
 			message: "Provider unavailable",
-			code: require_unexpected_error.ErrorCodes.integration.unreachable,
+			code: require_app_error.ErrorCodes.integration.unreachable,
 			reason: "unreachable",
 			metadata: buildMetadata({
 				reason: "unreachable",
@@ -604,7 +477,7 @@ var IntegrationError = class IntegrationError extends require_unexpected_error.A
 	static badResponse(options) {
 		return new IntegrationError({
 			message: "Unexpected response from provider",
-			code: require_unexpected_error.ErrorCodes.integration.badResponse,
+			code: require_app_error.ErrorCodes.integration.badResponse,
 			reason: "bad_response",
 			metadata: buildMetadata({
 				reason: "bad_response",
@@ -647,13 +520,13 @@ function compactMetadata(input) {
 }
 //#endregion
 //#region src/core/errors/legacy-incompatible-error.ts
-var LegacyIncompatibleError = class extends require_unexpected_error.AppError {
+var LegacyIncompatibleError = class extends require_app_error.AppError {
 	constructor(message, context, options) {
 		const mergedMetadata = options?.metadata ? {
 			...context ?? {},
 			...options.metadata
 		} : context;
-		super(message, require_unexpected_error.ErrorCodes.legacyIncompatible, {
+		super(message, require_app_error.ErrorCodes.legacyIncompatible, {
 			...options,
 			metadata: mergedMetadata
 		});
@@ -661,7 +534,7 @@ var LegacyIncompatibleError = class extends require_unexpected_error.AppError {
 };
 //#endregion
 //#region src/core/errors/serialization-error.ts
-var SerializationError = class extends require_unexpected_error.AppError {
+var SerializationError = class extends require_app_error.AppError {
 	constructor(input) {
 		super(input.message ?? "Serialization failure", input.code, {
 			cause: input.cause,
@@ -717,7 +590,7 @@ var SerializationOutError = class SerializationOutError extends SerializationErr
 };
 var SerializationCodes = class {
 	static code(direction, category) {
-		return require_unexpected_error.serializationErrorCode(direction, category);
+		return require_app_error.serializationErrorCode(direction, category);
 	}
 };
 var SerializationMessages = class {
@@ -746,7 +619,7 @@ function safePreview(value, limit = 240) {
 }
 //#endregion
 //#region src/core/errors/temporal-error.ts
-var TemporalError = class extends require_unexpected_error.AppError {
+var TemporalError = class extends require_app_error.AppError {
 	constructor(input) {
 		super(input.message, input.code, {
 			...input,
@@ -768,7 +641,7 @@ var ExpiredError = class ExpiredError extends TemporalError {
 	static detected(input) {
 		return new ExpiredError({
 			message: "The validity of the resource/action has expired",
-			code: require_unexpected_error.ErrorCodes.temporal.expired,
+			code: require_app_error.ErrorCodes.temporal.expired,
 			kind: "expired",
 			metadata: {
 				...input,
@@ -792,7 +665,7 @@ var NotYetValidError = class NotYetValidError extends TemporalError {
 	static detected(input) {
 		return new NotYetValidError({
 			message: "The resource/action is not yet valid",
-			code: require_unexpected_error.ErrorCodes.temporal.notYetValid,
+			code: require_app_error.ErrorCodes.temporal.notYetValid,
 			kind: "not_yet_valid",
 			metadata: {
 				...input,
@@ -842,7 +715,7 @@ function evaluateTemporalWindow(input) {
 * validation failures uniformly while still distinguishing the specific rule
 * through `validationCode`.
 */
-var ValidationError = class extends require_unexpected_error.AppError {
+var ValidationError = class extends require_app_error.AppError {
 	/**
 	* @param field - The input that failed validation; surfaced as `metadata.field`.
 	* @param code - The specific rule that was violated; surfaced as `metadata.validationCode`.
@@ -859,7 +732,7 @@ var ValidationError = class extends require_unexpected_error.AppError {
 			...baseMetadata,
 			...options.metadata
 		} : baseMetadata;
-		super(message, require_unexpected_error.ErrorCodes.validation, {
+		super(message, require_app_error.ErrorCodes.validation, {
 			...options,
 			metadata: mergedMetadata
 		});
@@ -878,12 +751,6 @@ Object.defineProperty(exports, "AuthenticationError", {
 		return AuthenticationError;
 	}
 });
-Object.defineProperty(exports, "AuthorizationError", {
-	enumerable: true,
-	get: function() {
-		return AuthorizationError;
-	}
-});
 Object.defineProperty(exports, "ConflictError", {
 	enumerable: true,
 	get: function() {