@cullet/erp-core 1.3.0 → 1.5.0

package/dist/validation-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation-error.js","names":["compactMetadata","extractAppErrorOptions"],"sources":["../src/core/errors/authentication-error.ts","../src/core/errors/authorization-error.ts","../src/core/errors/conflict-error.ts","../src/core/errors/idempotency-error.ts","../src/core/errors/integration-error.ts","../src/core/errors/legacy-incompatible-error.ts","../src/core/errors/serialization-error.ts","../src/core/errors/temporal-error.ts","../src/core/errors/validation-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype AuthenticationErrorReason =\n    | \"missing_token\"\n    | \"malformed_token\"\n    | \"invalid_token\"\n    | \"expired_token\"\n    | \"revoked_token\"\n    | \"invalid_credentials\"\n    | \"session_not_found\"\n    | \"session_expired\"\n    | \"unknown\";\n\ntype AuthenticationErrorMetadata = {\n    reason: AuthenticationErrorReason;\n    authScheme?: \"bearer\" | \"cookie\" | \"basic\" | \"unknown\";\n    tokenLocation?: \"header\" | \"cookie\" | \"query\" | \"unknown\";\n    expiresAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    details?: string;\n};\n\ntype AuthenticationErrorFactoryOptions = Omit<\n    AuthenticationErrorMetadata,\n    \"reason\"\n> &\n    Omit<AppErrorOptions, \"metadata\">;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuthenticationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass AuthenticationError extends AppError {\n    public readonly reason: AuthenticationErrorReason;\n\n    private constructor(params: {\n        message: string;\n        code: string;\n        reason: AuthenticationErrorReason;\n        metadata?: Omit<AuthenticationErrorMetadata, \"reason\">;\n        cause?: unknown;\n        type?: string;\n        severity?: ErrorSeverity;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        createdAtIso?: string;\n        publicMessage?: string;\n    }) {\n        super(params.message, params.code, {\n            cause: params.cause,\n            metadata: {\n                reason: params.reason,\n                ...(params.metadata ?? {}),\n            },\n            type: params.type,\n            severity: params.severity,\n            correlationId: params.correlationId,\n            requestId: params.requestId,\n            commandId: params.commandId,\n            createdAtIso: params.createdAtIso,\n            publicMessage: params.publicMessage,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    // ─────────────────────────────────────────────────────────────────────────\n    // Factory methods\n    // ─────────────────────────────────────────────────────────────────────────\n\n    static missingToken(\n        options?: AuthenticationErrorFactoryOptions,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Missing credentials\",\n            code: ErrorCodes.authentication.missingToken,\n            reason: \"missing_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidToken(\n        options?: AuthenticationErrorFactoryOptions & { cause?: unknown },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid credentials\",\n            code: ErrorCodes.authentication.invalidToken,\n            reason: \"invalid_token\",\n            metadata: compactMetadata({\n                authScheme: options?.authScheme,\n                tokenLocation: options?.tokenLocation,\n                details: options?.details,\n                correlationId: options?.correlationId,\n                requestId: options?.requestId,\n            }),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static expiredToken(\n        options?: AuthenticationErrorFactoryOptions & { sessionId?: string },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Expired credentials\",\n            code: ErrorCodes.authentication.expiredToken,\n            reason: \"expired_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidCredentials(\n        options?: Pick<\n            AuthenticationErrorFactoryOptions,\n            | \"correlationId\"\n            | \"requestId\"\n            | \"type\"\n            | \"severity\"\n            | \"createdAtIso\"\n            | \"publicMessage\"\n        >,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid username or password\",\n            code: ErrorCodes.authentication.invalidCredentials,\n            reason: \"invalid_credentials\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction extractAppErrorOptions(options?: Partial<AppErrorOptions>) {\n    return {\n        cause: options?.cause,\n        type: options?.type,\n        severity: options?.severity,\n        correlationId: options?.correlationId,\n        requestId: options?.requestId,\n        commandId: options?.commandId,\n        createdAtIso: options?.createdAtIso,\n        publicMessage: options?.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(\n    input?: T,\n): T | undefined {\n    if (!input) return undefined;\n\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { AuthenticationError };\nexport type { AuthenticationErrorMetadata, AuthenticationErrorReason };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype AuthorizationErrorReason =\n    | \"forbidden\"\n    | \"missing_role\"\n    | \"missing_capability\"\n    | \"out_of_scope\"\n    | \"outside_time_window\"\n    | \"policy_denied\"\n    | \"unknown\";\n\ntype AuthorizationRequirement = {\n    role?: string;\n    capability?: string;\n    scope?: string; // e.g.: \"school:{id}\" or \"class:{id}\"\n};\n\ntype AuthorizationErrorMetadata = {\n    reason: AuthorizationErrorReason;\n\n    /** Stable action you evaluated (not an HTTP route — a \"business action\") */\n    action: string;\n\n    /** Resource identification (without leaking the full payload) */\n    resource?: { type: string; id?: string };\n\n    /** Optional: actor (do not include sensitive data) */\n    actor?: { userId: string; role?: string };\n\n    /** Optional: expected requirement */\n    required?: AuthorizationRequirement;\n\n    /** Optional: policy (when you already have PolicyEvaluation or similar) */\n    policyId?: string;\n    policyVersion?: number;\n    evaluatedAtIso?: string;\n    decision?: \"allow\" | \"deny\";\n    reasonCode?: string;\n\n    /** Optional: additional non-sensitive info */\n    details?: string;\n};\n\n/**\n * Options for AuthorizationError factory methods.\n * Combines metadata fields (except 'reason') with common AppError options.\n */\ntype AuthorizationErrorFactoryOptions = Omit<\n    AuthorizationErrorMetadata,\n    \"reason\"\n> &\n    Omit<AppErrorOptions, \"metadata\">;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuthorizationError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when an authenticated actor is not allowed to perform a business\n * action — the \"you may not\" error, distinct from authentication (\"who are\n * you\"). Maps to an HTTP 403 at the edge.\n *\n * The discriminating {@link reason} records *why* access was denied (a flat\n * forbid, a missing role/capability, an out-of-scope target, or a policy\n * decision) so the boundary can shape the response without re-deriving it. The\n * metadata is deliberately built around a stable business `action` and a\n * type/id resource reference rather than an HTTP route or full payload, keeping\n * sensitive data out of logs. Instances are frozen. Construct through the\n * static factories, never directly.\n */\nclass AuthorizationError extends AppError {\n    public readonly reason: AuthorizationErrorReason;\n\n    private constructor(params: {\n        message: string;\n        code: string;\n        reason: AuthorizationErrorReason;\n        metadata: AuthorizationErrorMetadata;\n        cause?: unknown;\n        type?: string;\n        severity?: ErrorSeverity;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        createdAtIso?: string;\n        publicMessage?: string;\n    }) {\n        super(params.message, params.code, {\n            cause: params.cause,\n            metadata: params.metadata,\n            type: params.type,\n            severity: params.severity,\n            correlationId: params.correlationId,\n            requestId: params.requestId,\n            commandId: params.commandId,\n            createdAtIso: params.createdAtIso,\n            publicMessage: params.publicMessage,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    // ─────────────────────────────────────────────────────────────────────────\n    // Factories\n    // ─────────────────────────────────────────────────────────────────────────\n\n    /**\n     * A flat denial with no more specific reason — the actor simply may not\n     * perform this action. Reach for a more precise factory\n     * ({@link AuthorizationError.missingCapability}, {@link AuthorizationError.outOfScope},\n     * {@link AuthorizationError.policyDenied}) when the cause is known.\n     */\n    static forbidden(\n        input: AuthorizationErrorFactoryOptions,\n    ): AuthorizationError {\n        return new AuthorizationError({\n            message: \"Action not allowed\",\n            code: ErrorCodes.authorization.forbidden,\n            reason: \"forbidden\",\n            metadata: { reason: \"forbidden\", ...extractMetadataOnly(input) },\n            ...extractAppErrorOptions(input),\n        });\n    }\n\n    /**\n     * The action was denied by an evaluated policy. Captures the deciding\n     * policy's id, version, and evaluation instant into the metadata (with\n     * `decision: \"deny\"`) so the denial is auditable back to the exact policy\n     * that produced it.\n     *\n     * @param input - Factory options plus the required `policyId`,\n     *   `policyVersion`, and `evaluatedAtIso` of the deciding policy.\n     */\n    static policyDenied(\n        input: AuthorizationErrorFactoryOptions & {\n            policyId: string;\n            policyVersion: number;\n            evaluatedAtIso: string;\n        },\n    ): AuthorizationError {\n        return new AuthorizationError({\n            message: \"Action denied by policy\",\n            code: ErrorCodes.authorization.policyDenied,\n            reason: \"policy_denied\",\n            metadata: {\n                reason: \"policy_denied\",\n                ...extractMetadataOnly(input),\n                decision: \"deny\",\n            },\n            ...extractAppErrorOptions(input),\n        });\n    }\n\n    /**\n     * The actor lacks a required role or capability. The expected\n     * {@link AuthorizationRequirement} is recorded so the boundary can tell the\n     * caller precisely what grant is missing.\n     *\n     * @param input - Factory options plus the `required` role/capability/scope.\n     */\n    static missingCapability(\n        input: AuthorizationErrorFactoryOptions & {\n            required: AuthorizationRequirement;\n        },\n    ): AuthorizationError {\n        return new AuthorizationError({\n            message: \"Insufficient capability to perform the action\",\n            code: ErrorCodes.authorization.missingCapability,\n            reason: \"missing_capability\",\n            metadata: {\n                reason: \"missing_capability\",\n                ...extractMetadataOnly(input),\n            },\n            ...extractAppErrorOptions(input),\n        });\n    }\n\n    /**\n     * The actor may perform the action in general, but not on *this* target —\n     * the resource falls outside the actor's permitted scope (e.g. a different\n     * school or tenant than the one they are bound to).\n     *\n     * @param input - Factory options plus the optional `required` scope that the\n     *   target failed to satisfy.\n     */\n    static outOfScope(\n        input: AuthorizationErrorFactoryOptions & {\n            required?: AuthorizationRequirement;\n        },\n    ): AuthorizationError {\n        return new AuthorizationError({\n            message: \"Action outside the allowed scope\",\n            code: ErrorCodes.authorization.outOfScope,\n            reason: \"out_of_scope\",\n            metadata: { reason: \"out_of_scope\", ...extractMetadataOnly(input) },\n            ...extractAppErrorOptions(input),\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction extractAppErrorOptions(options?: Partial<AppErrorOptions>) {\n    return {\n        cause: options?.cause,\n        type: options?.type,\n        severity: options?.severity,\n        correlationId: options?.correlationId,\n        requestId: options?.requestId,\n        commandId: options?.commandId,\n        createdAtIso: options?.createdAtIso,\n        publicMessage: options?.publicMessage,\n    };\n}\n\nfunction extractMetadataOnly(\n    input: AuthorizationErrorFactoryOptions,\n): Omit<AuthorizationErrorMetadata, \"reason\"> {\n    const {\n        cause,\n        type,\n        severity,\n        correlationId,\n        requestId,\n        commandId,\n        createdAtIso,\n        publicMessage,\n        ...metadata\n    } = input;\n    return metadata;\n}\n\nexport { AuthorizationError };\nexport type {\n    AuthorizationErrorMetadata,\n    AuthorizationErrorReason,\n    AuthorizationRequirement,\n};\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n/**\n * Conflict kinds we want to distinguish semantically.\n */\ntype ConflictKind = \"already_exists\" | \"duplicate\" | \"unique_violation\";\n\n/**\n * Metadata attached to conflicts without exposing sensitive values.\n */\ntype ConflictErrorMetadata = {\n    kind: ConflictKind;\n    entity: string;\n    operation?: string;\n    field?: string;\n    constraintName?: string;\n    existingId?: string;\n    valueHash?: string;\n    valuePreview?: string;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n};\n\n/**\n * Storage-level description of a unique-constraint breach, as reported by a\n * database driver. Used to translate a raw DB error into a domain\n * {@link DuplicateError} via {@link translateUniqueViolationToDuplicate}.\n */\ntype UniqueConstraintViolation = {\n    kind: \"unique_violation\";\n    constraintName?: string;\n    table?: string;\n    columns?: string[];\n};\n\n/**\n * Base for errors that signal a state conflict — the request collides with data\n * that already exists. Common at an HTTP 409 boundary.\n *\n * The discriminating {@link kind} lets a handler branch on *why* it conflicted\n * (an already-existing record, a domain duplicate, or a raw storage uniqueness\n * breach) without `instanceof` chains. Abstract: construct one of the concrete\n * subclasses through its `detected(...)` factory, which fills in the right code,\n * message, and metadata. Instances are frozen, so a conflict error can be shared\n * and rethrown without risk of tampering.\n */\nabstract class ConflictError extends AppError {\n    public readonly kind: ConflictKind;\n\n    protected constructor(\n        params: {\n            message: string;\n            code: string;\n            kind: ConflictKind;\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super(params.message, params.code, {\n            ...params,\n            metadata: {\n                kind: params.kind,\n                ...params.metadata,\n            },\n        });\n\n        this.kind = params.kind;\n        Object.freeze(this);\n    }\n}\n\n/**\n * The operation cannot proceed because a matching record already exists —\n * e.g. creating something whose natural key is already taken. Construct via\n * {@link AlreadyExistsError.detected}.\n */\nclass AlreadyExistsError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message:\n                \"A matching record already exists for the requested operation\",\n            code: ErrorCodes.conflict.alreadyExists,\n            kind: \"already_exists\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds an {@link AlreadyExistsError} for a detected collision. `operation`\n     * defaults to `\"create\"` and a generic retry `hint` is supplied when none is\n     * given, so the error is actionable even from a minimal call site.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (operation, field, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): AlreadyExistsError {\n        return new AlreadyExistsError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation ?? \"create\",\n                field: input.field,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint: input.hint ?? \"Verify existing records before retrying.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A domain-level duplicate: the data being written would duplicate an existing\n * record under the model's own uniqueness rules. Use this when the duplication\n * is recognized in the domain, as opposed to a raw DB constraint\n * ({@link UniqueConstraintViolationError}). Construct via\n * {@link DuplicateError.detected}.\n */\nclass DuplicateError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Conflict: an existing record violates uniqueness\",\n            code: ErrorCodes.conflict.duplicate,\n            kind: \"duplicate\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link DuplicateError} for a detected duplicate, defaulting to a\n     * \"adjust the data so it does not duplicate\" hint when none is provided.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (field, constraint name, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        constraintName?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): DuplicateError {\n        return new DuplicateError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                field: input.field,\n                constraintName: input.constraintName,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint:\n                    input.hint ??\n                    \"Adjust the data so it does not duplicate existing records.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A uniqueness breach surfaced by the storage layer itself (a database unique\n * index), carrying the raw {@link UniqueConstraintViolation} (constraint, table,\n * columns). Keep this distinct from {@link DuplicateError}: this one is the\n * infrastructure signal; translate it into a domain duplicate at the boundary\n * with {@link translateUniqueViolationToDuplicate} when the model should own the\n * message. Construct via {@link UniqueConstraintViolationError.detected}.\n */\nclass UniqueConstraintViolationError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\"> & {\n                violation: UniqueConstraintViolation;\n            };\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Uniqueness violation in storage\",\n            code: ErrorCodes.conflict.uniqueViolation,\n            kind: \"unique_violation\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link UniqueConstraintViolationError} from the constraint details\n     * a driver reports, packaging them into a nested `violation` payload.\n     *\n     * @param input - The entity plus the offending constraint name, table, and\n     *   columns, and optional correlation ids.\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        constraintName?: string;\n        table?: string;\n        columns?: string[];\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        cause?: unknown;\n    }): UniqueConstraintViolationError {\n        return new UniqueConstraintViolationError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                constraintName: input.constraintName,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                violation: {\n                    kind: \"unique_violation\",\n                    constraintName: input.constraintName,\n                    table: input.table,\n                    columns: input.columns,\n                },\n                hint: \"Uniqueness conflict detected in the database.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * Translates a raw storage {@link UniqueConstraintViolation} into a domain-level\n * {@link DuplicateError}. This is the seam where an infrastructure concern (a DB\n * unique index firing) is re-expressed in the language of the model, so callers\n * upstream catch a `DuplicateError` and never have to know a database was\n * involved.\n *\n * @param input - The entity, the driver-reported `violation`, and optional\n *   request context (`ctx`) carrying correlation ids and a clock instant.\n * @returns A {@link DuplicateError} carrying the constraint name as its field hint.\n */\nfunction translateUniqueViolationToDuplicate(input: {\n    entity: string;\n    operation?: string;\n    violation: UniqueConstraintViolation;\n    field?: string;\n    ctx?: {\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        nowIso?: string;\n    };\n    cause?: unknown;\n}): DuplicateError {\n    return DuplicateError.detected({\n        entity: input.entity,\n        operation: input.operation,\n        field: input.field,\n        constraintName: input.violation.constraintName,\n        detectedAtIso: input.ctx?.nowIso,\n        correlationId: input.ctx?.correlationId,\n        requestId: input.ctx?.requestId,\n        commandId: input.ctx?.commandId,\n        cause: input.cause,\n    });\n}\n\nexport {\n    AlreadyExistsError,\n    ConflictError,\n    DuplicateError,\n    translateUniqueViolationToDuplicate,\n    UniqueConstraintViolationError,\n};\n\nexport type { ConflictErrorMetadata, ConflictKind, UniqueConstraintViolation };\n","import { payloadHash, sha256Hex, stableStringify } from \"../shared/hashing.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\nexport type IdempotencyFailureKind =\n    | \"key_missing\"\n    | \"in_progress\"\n    | \"payload_mismatch\"\n    | \"replay_not_supported\"\n    | \"unknown\";\n\nexport type IdempotencyErrorMetadata = {\n    kind: IdempotencyFailureKind;\n    operation: string;\n    scope?: string;\n    entity?: string;\n    keyHash?: string;\n    keyPreview?: string;\n    incomingPayloadHash?: string;\n    existingPayloadHash?: string;\n    idempotencyRecordId?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    detectedAtIso?: string;\n    hint?: string;\n    details?: string;\n};\n\ntype IdempotencyErrorConstructorInput = {\n    message: string;\n    code: string;\n    kind: IdempotencyFailureKind;\n    metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n    cause?: unknown;\n};\n\nabstract class IdempotencyError extends AppError {\n    public readonly kind: IdempotencyFailureKind;\n\n    protected constructor(input: IdempotencyErrorConstructorInput) {\n        super(input.message, input.code, {\n            cause: input.cause,\n            metadata: { kind: input.kind, ...input.metadata },\n        });\n\n        this.kind = input.kind;\n        Object.freeze(this);\n    }\n\n    static keyMissing(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return IdempotencyKeyMissingError.detected(input);\n    }\n\n    static inProgress(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        return IdempotencyInProgressError.detected(input);\n    }\n\n    static payloadMismatch(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        return IdempotencyPayloadMismatchError.detected(input);\n    }\n\n    static replayNotSupported(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        return IdempotencyReplayNotSupportedError.detected(input);\n    }\n}\n\nclass IdempotencyKeyMissingError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Idempotency key/commandId missing for the requested operation\",\n            code: ErrorCodes.idempotency.keyMissing,\n            kind: \"key_missing\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return new IdempotencyKeyMissingError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Send a commandId/idempotency key to prevent duplicate processing.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyInProgressError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The same business intent is already being processed\",\n            code: ErrorCodes.idempotency.inProgress,\n            kind: \"in_progress\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyInProgressError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Wait for completion and retry using the same key.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyPayloadMismatchError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The idempotency key was reused with a different payload\",\n            code: ErrorCodes.idempotency.payloadMismatch,\n            kind: \"payload_mismatch\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyPayloadMismatchError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                incomingPayloadHash: input.incomingPayloadHash,\n                existingPayloadHash: input.existingPayloadHash,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Use a new idempotency key for a new intent. The same key should only be reused for retries of the same payload.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyReplayNotSupportedError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Re-execution detected, but replay of the previous result is not implemented\",\n            code: ErrorCodes.idempotency.replayNotSupported,\n            kind: \"replay_not_supported\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyReplayNotSupportedError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Try again later, or enable result replay for full idempotency.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nfunction resolveKeyIdentity(\n    key?: string,\n    keyHash?: string,\n    keyPreview?: string,\n): { keyHash?: string; keyPreview?: string } {\n    const preview =\n        keyPreview ??\n        (key ? (key.length <= 8 ? key : key.slice(0, 8)) : undefined);\n\n    return {\n        keyHash: keyHash,\n        keyPreview: preview,\n    };\n}\n\nexport {\n    IdempotencyError,\n    IdempotencyKeyMissingError,\n    IdempotencyInProgressError,\n    IdempotencyPayloadMismatchError,\n    IdempotencyReplayNotSupportedError,\n    sha256Hex,\n    stableStringify,\n    payloadHash,\n};\n","import type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\ntype IntegrationErrorReason =\n    | \"timeout\"\n    | \"unreachable\"\n    | \"bad_response\"\n    | \"unknown\";\n\ntype IntegrationErrorMetadata = {\n    reason: IntegrationErrorReason;\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n};\n\ntype IntegrationErrorAppOptions = Pick<\n    AppErrorOptions,\n    | \"cause\"\n    | \"type\"\n    | \"severity\"\n    | \"correlationId\"\n    | \"requestId\"\n    | \"commandId\"\n    | \"createdAtIso\"\n    | \"publicMessage\"\n>;\n\ntype IntegrationErrorConstructorParams = {\n    message: string;\n    code: string;\n    reason: IntegrationErrorReason;\n    metadata: IntegrationErrorMetadata;\n} & IntegrationErrorAppOptions;\n\n/**\n * Raised when a call to an external provider fails — a timeout, an unreachable\n * endpoint, or a malformed response. This is the boundary error that separates\n * \"our code is fine, the outside world misbehaved\" from internal faults, which\n * matters for retry and alerting decisions.\n *\n * Every instance records the `provider`, the `operation`, and timing\n * (`startedAtIso` / `durationMs`) so failures are correlatable across services\n * and a slow dependency is visible in the metadata. The discriminating\n * {@link reason} lets callers decide whether a failure is worth retrying.\n * Instances are frozen; construct through the static factories.\n */\nclass IntegrationError extends AppError {\n    public readonly reason: IntegrationErrorReason;\n\n    private constructor(params: IntegrationErrorConstructorParams) {\n        const { message, code, metadata, ...rest } = params;\n        super(message, code, {\n            ...rest,\n            metadata,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    /**\n     * The provider did not respond within the allotted time. Usually retryable,\n     * since a timeout leaves the outcome unknown rather than known-failed.\n     */\n    static timeout(options: IntegrationErrorTimeoutOptions): IntegrationError {\n        return new IntegrationError({\n            message: \"Timeout while integrating with external provider\",\n            code: ErrorCodes.integration.timeout,\n            reason: \"timeout\",\n            metadata: buildMetadata({ reason: \"timeout\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider could not be reached at all (connection refused, DNS\n     * failure, network partition) — the request never landed.\n     */\n    static unreachable(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Provider unavailable\",\n            code: ErrorCodes.integration.unreachable,\n            reason: \"unreachable\",\n            metadata: buildMetadata({ reason: \"unreachable\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider answered, but with something the system cannot use — an\n     * unexpected status, an unparsable body, or a contract mismatch. Unlike a\n     * timeout this is a definite failure, so blind retries rarely help.\n     */\n    static badResponse(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Unexpected response from provider\",\n            code: ErrorCodes.integration.badResponse,\n            reason: \"bad_response\",\n            metadata: buildMetadata({ reason: \"bad_response\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n}\n\ntype IntegrationErrorBaseOptions = {\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n    cause?: unknown;\n    type?: string;\n    severity?: ErrorSeverity;\n    createdAtIso?: string;\n    publicMessage?: string;\n};\n\ntype IntegrationErrorTimeoutOptions = IntegrationErrorBaseOptions;\ntype IntegrationErrorEndpointOptions = IntegrationErrorBaseOptions;\n\nfunction buildMetadata(\n    input: IntegrationErrorBaseOptions & { reason: IntegrationErrorReason },\n): IntegrationErrorMetadata {\n    return compactMetadata({\n        reason: input.reason,\n        provider: input.provider,\n        operation: input.operation,\n        startedAtIso: input.startedAtIso,\n        durationMs: input.durationMs,\n        detectedAtIso: input.detectedAtIso,\n        correlationId: input.correlationId,\n        requestId: input.requestId,\n        commandId: input.commandId,\n        details: input.details,\n        statusCode: input.statusCode,\n        responseCode: input.responseCode,\n    }) as IntegrationErrorMetadata;\n}\n\nfunction pickAppErrorFields(\n    options: IntegrationErrorBaseOptions,\n): IntegrationErrorAppOptions {\n    return {\n        cause: options.cause,\n        type: options.type,\n        severity: options.severity,\n        correlationId: options.correlationId,\n        requestId: options.requestId,\n        commandId: options.commandId,\n        createdAtIso: options.createdAtIso,\n        publicMessage: options.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(input: T): T {\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { IntegrationError };\nexport type { IntegrationErrorReason, IntegrationErrorMetadata };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// LegacyIncompatibleError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass LegacyIncompatibleError extends AppError {\n    constructor(\n        message: string,\n        context?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const mergedMetadata = options?.metadata\n            ? { ...(context ?? {}), ...options.metadata }\n            : context;\n\n        super(message, ErrorCodes.legacyIncompatible, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { LegacyIncompatibleError };\n","import { AppError } from \"./app-error.js\";\nimport { serializationErrorCode } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationDirection = \"serialize\" | \"deserialize\";\n\ntype SerializationFailureCategory =\n    | \"invalid_json\"\n    | \"invalid_shape\"\n    | \"missing_field\"\n    | \"unexpected_field\"\n    | \"invalid_type\"\n    | \"schema_version_missing\"\n    | \"schema_version_unsupported\"\n    | \"mapping_not_implemented\"\n    | \"contract_mismatch\"\n    | \"parse_failed\"\n    | \"stringify_failed\"\n    | \"unknown\";\n\ntype SerializationBoundary =\n    | \"http_in\"\n    | \"http_out\"\n    | \"graphql_in\"\n    | \"graphql_out\"\n    | \"dto_to_domain\"\n    | \"domain_to_dto\"\n    | \"persistence_to_domain\"\n    | \"domain_to_persistence\"\n    | \"event_in\"\n    | \"event_out\"\n    | \"projection\"\n    | \"unknown\";\n\n/**\n * Metadata shared by serialization/deserialization failures. Payload previews must be sanitized.\n */\ntype SerializationErrorMetadata = {\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n    boundary: SerializationBoundary;\n    contract: string;\n    schemaVersion?: number | string;\n    path?: string;\n    payloadPreview?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n    details?: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Base error\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationErrorOptions = Omit<AppErrorOptions, \"metadata\"> & {\n    message: string;\n    code: string;\n    metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\">;\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n};\n\nabstract class SerializationError extends AppError {\n    public readonly direction: SerializationDirection;\n    public readonly category: SerializationFailureCategory;\n    public readonly boundary: SerializationBoundary;\n    public readonly contract: string;\n\n    protected constructor(input: SerializationErrorOptions) {\n        super(input.message ?? \"Serialization failure\", input.code, {\n            cause: input.cause,\n            metadata: {\n                direction: input.direction,\n                category: input.category,\n                ...input.metadata,\n            },\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n\n        this.direction = input.direction;\n        this.category = input.category;\n        this.boundary = input.metadata.boundary;\n        this.contract = input.metadata.contract;\n\n        Object.freeze(this);\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization In\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationInError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationInError {\n        return new SerializationInError({\n            message: SerializationMessages.message(\"deserialize\", category),\n            code: SerializationCodes.code(\"deserialize\", category),\n            category,\n            direction: \"deserialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationOutError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationOutError {\n        return new SerializationOutError({\n            message: SerializationMessages.message(\"serialize\", category),\n            code: SerializationCodes.code(\"serialize\", category),\n            category,\n            direction: \"serialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Codes + Messages helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationCodes {\n    static code(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        return serializationErrorCode(direction, category);\n    }\n}\n\nclass SerializationMessages {\n    static message(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        if (direction === \"deserialize\") {\n            if (category === \"invalid_json\") {\n                return \"Invalid payload: malformed JSON\";\n            }\n            if (category === \"schema_version_missing\") {\n                return \"Invalid payload: schemaVersion is missing\";\n            }\n            if (category === \"schema_version_unsupported\") {\n                return \"Invalid payload: schemaVersion is not supported\";\n            }\n            if (category === \"invalid_shape\") {\n                return \"Invalid payload: incompatible shape\";\n            }\n            if (category === \"mapping_not_implemented\") {\n                return \"Unsupported payload: mapping not implemented\";\n            }\n            if (category === \"contract_mismatch\") {\n                return \"Payload does not match the expected contract\";\n            }\n            return \"Failed to parse incoming payload\";\n        }\n\n        if (category === \"stringify_failed\") {\n            return \"Failed to serialize the response\";\n        }\n        if (category === \"contract_mismatch\") {\n            return \"Response does not match the expected contract\";\n        }\n        return \"Failed to build the response\";\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction safePreview(value: unknown, limit = 240): string | undefined {\n    try {\n        const serialized =\n            typeof value === \"string\" ? value : JSON.stringify(value);\n        return serialized.length > limit\n            ? `${serialized.slice(0, limit)}…`\n            : serialized;\n    } catch {\n        return undefined;\n    }\n}\n\nexport {\n    safePreview,\n    SerializationCodes,\n    SerializationError,\n    SerializationInError as DeserializationError,\n    SerializationInError,\n    SerializationMessages,\n    SerializationOutError,\n};\nexport type {\n    SerializationBoundary,\n    SerializationDirection,\n    SerializationErrorMetadata,\n    SerializationFailureCategory,\n};\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\ntype TemporalKind = \"expired\" | \"not_yet_valid\";\n\ntype TemporalPrecision = \"EXACT\" | \"ESTIMATED\" | \"UNKNOWN\" | \"APPROXIMATE\";\n\ntype TemporalErrorMetadata = {\n    resourceType: string;\n    resourceId?: string;\n    operation?: string;\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n    policyId?: string;\n    precision?: TemporalPrecision;\n    hint?: string;\n    details?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n};\n\ntype TemporalErrorOptions = {\n    message: string;\n    code: string;\n    kind: TemporalKind;\n    metadata: TemporalErrorMetadata;\n} & AppErrorOptions;\n\nabstract class TemporalError extends AppError {\n    public readonly kind: TemporalKind;\n    public readonly resourceType: string;\n    public readonly evaluatedAtIso: string;\n\n    protected constructor(input: TemporalErrorOptions) {\n        super(input.message, input.code, {\n            ...input,\n            metadata: {\n                kind: input.kind,\n                ...input.metadata,\n            },\n        });\n\n        this.kind = input.kind;\n        this.resourceType = input.metadata.resourceType;\n        this.evaluatedAtIso = input.metadata.evaluatedAtIso;\n        Object.freeze(this);\n    }\n}\n\ntype TemporalCreationInput = TemporalErrorMetadata &\n    Partial<Omit<AppErrorOptions, \"metadata\">> & {\n        cause?: unknown;\n    };\n\nclass ExpiredError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): ExpiredError {\n        return new ExpiredError({\n            message: \"The validity of the resource/action has expired\",\n            code: ErrorCodes.temporal.expired,\n            kind: \"expired\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"The window has expired. Request a new link or try again within the valid period.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nclass NotYetValidError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): NotYetValidError {\n        return new NotYetValidError({\n            message: \"The resource/action is not yet valid\",\n            code: ErrorCodes.temporal.notYetValid,\n            kind: \"not_yet_valid\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"Not yet within the valid period. Try again later.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nfunction evaluateTemporalWindow(input: {\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n}): { expired: boolean; notYetValid: boolean } | null {\n    const evaluatedMs = Date.parse(input.evaluatedAtIso);\n    if (Number.isNaN(evaluatedMs)) return null;\n\n    let notYetValid = false;\n\n    if (input.validFromIso) {\n        const fromMs = Date.parse(input.validFromIso);\n        if (!Number.isNaN(fromMs) && evaluatedMs < fromMs) {\n            notYetValid = true;\n        }\n    }\n\n    if (input.validUntilIso) {\n        const untilMs = Date.parse(input.validUntilIso);\n        if (!Number.isNaN(untilMs) && evaluatedMs > untilMs) {\n            return { expired: true, notYetValid: false };\n        }\n    }\n\n    return { expired: false, notYetValid };\n}\n\nexport {\n    evaluateTemporalWindow,\n    ExpiredError,\n    NotYetValidError,\n    TemporalError,\n};\nexport type { TemporalErrorMetadata, TemporalKind, TemporalPrecision };\n","import { ValidationCode } from \"../exceptions/validation-code.js\";\nimport { ValidationField } from \"../exceptions/validation-field.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ValidationError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a single input fails a validation rule — the canonical\n * \"this field is wrong, and here is why\" error.\n *\n * It pins the offending `field` and a machine-readable `validationCode` into\n * the metadata (merged ahead of any caller-supplied metadata) so an API layer\n * can map the failure straight onto a form field without parsing the message.\n * The fixed {@link ErrorCodes.validation} code lets callers catch all\n * validation failures uniformly while still distinguishing the specific rule\n * through `validationCode`.\n */\nclass ValidationError extends AppError {\n    /**\n     * @param field - The input that failed validation; surfaced as `metadata.field`.\n     * @param code - The specific rule that was violated; surfaced as `metadata.validationCode`.\n     * @param message - The developer-facing description of the failure.\n     * @param options - Optional cause, correlation ids, and extra metadata\n     *   (merged over the field/code metadata, never overwriting it by accident).\n     */\n    constructor(\n        field: ValidationField,\n        code: ValidationCode,\n        message: string,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = {\n            field: field.value,\n            validationCode: code.value,\n        };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.validation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { ValidationError };\n"],"mappings":";;AAuCA,IAAM,sBAAN,MAAM,4BAA4B,SAAS;CAGvC,YAAoB,QAajB;EACC,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,OAAO,OAAO;GACd,UAAU;IACN,QAAQ,OAAO;IACf,GAAI,OAAO,YAAY,CAAC;GAC5B;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,eAAe,OAAO;GACtB,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,eAAe,OAAO;EAC1B,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;CAMA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAGC,yBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUD,kBAAgB;IACtB,YAAY,SAAS;IACrB,eAAe,SAAS;IACxB,SAAS,SAAS;IAClB,eAAe,SAAS;IACxB,WAAW,SAAS;GACxB,CAAC;GACD,GAAGC,yBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUD,kBAAgB,OAAO;GACjC,GAAGC,yBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,mBACH,SASmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUD,kBAAgB,OAAO;GACjC,GAAGC,yBAAuB,OAAO;EACrC,CAAC;CACL;AACJ;AAMA,SAASA,yBAAuB,SAAoC;CAChE,OAAO;EACH,OAAO,SAAS;EAChB,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB,WAAW,SAAS;EACpB,cAAc,SAAS;EACvB,eAAe,SAAS;CAC5B;AACJ;AAEA,SAASD,kBACL,OACa;CACb,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;;;;;;;;;;;;;;AC3FA,IAAM,qBAAN,MAAM,2BAA2B,SAAS;CAGtC,YAAoB,QAajB;EACC,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,OAAO,OAAO;GACd,UAAU,OAAO;GACjB,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,eAAe,OAAO;GACtB,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,eAAe,OAAO;EAC1B,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;;;;;;;CAYA,OAAO,UACH,OACkB;EAClB,OAAO,IAAI,mBAAmB;GAC1B,SAAS;GACT,MAAM,WAAW,cAAc;GAC/B,QAAQ;GACR,UAAU;IAAE,QAAQ;IAAa,GAAG,oBAAoB,KAAK;GAAE;GAC/D,GAAG,uBAAuB,KAAK;EACnC,CAAC;CACL;;;;;;;;;;CAWA,OAAO,aACH,OAKkB;EAClB,OAAO,IAAI,mBAAmB;GAC1B,SAAS;GACT,MAAM,WAAW,cAAc;GAC/B,QAAQ;GACR,UAAU;IACN,QAAQ;IACR,GAAG,oBAAoB,KAAK;IAC5B,UAAU;GACd;GACA,GAAG,uBAAuB,KAAK;EACnC,CAAC;CACL;;;;;;;;CASA,OAAO,kBACH,OAGkB;EAClB,OAAO,IAAI,mBAAmB;GAC1B,SAAS;GACT,MAAM,WAAW,cAAc;GAC/B,QAAQ;GACR,UAAU;IACN,QAAQ;IACR,GAAG,oBAAoB,KAAK;GAChC;GACA,GAAG,uBAAuB,KAAK;EACnC,CAAC;CACL;;;;;;;;;CAUA,OAAO,WACH,OAGkB;EAClB,OAAO,IAAI,mBAAmB;GAC1B,SAAS;GACT,MAAM,WAAW,cAAc;GAC/B,QAAQ;GACR,UAAU;IAAE,QAAQ;IAAgB,GAAG,oBAAoB,KAAK;GAAE;GAClE,GAAG,uBAAuB,KAAK;EACnC,CAAC;CACL;AACJ;AAMA,SAAS,uBAAuB,SAAoC;CAChE,OAAO;EACH,OAAO,SAAS;EAChB,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB,WAAW,SAAS;EACpB,cAAc,SAAS;EACvB,eAAe,SAAS;CAC5B;AACJ;AAEA,SAAS,oBACL,OAC0C;CAC1C,MAAM,EACF,OACA,MACA,UACA,eACA,WACA,WACA,cACA,eACA,GAAG,aACH;CACJ,OAAO;AACX;;;;;;;;;;;;;;AC5LA,IAAe,gBAAf,cAAqC,SAAS;CAG1C,YACI,QAOF;EACE,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,GAAG;GACH,UAAU;IACN,MAAM,OAAO;IACb,GAAG,OAAO;GACd;EACJ,CAAC;EAED,KAAK,OAAO,OAAO;EACnB,OAAO,OAAO,IAAI;CACtB;AACJ;;;;;;AAOA,IAAM,qBAAN,MAAM,2BAA2B,cAAc;CAC3C,YACI,OAIF;EACE,MAAM;GACF,SACI;GACJ,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;;CAUA,OAAO,SAAS,OAaO;EACnB,OAAO,IAAI,mBAAmB;GAC1B,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM,aAAa;IAC9B,OAAO,MAAM;IACb,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MAAM,MAAM,QAAQ;GACxB;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;AASA,IAAM,iBAAN,MAAM,uBAAuB,cAAc;CACvC,YACI,OAIF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAcG;EACf,OAAO,IAAI,eAAe;GACtB,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,gBAAgB,MAAM;IACtB,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;AAUA,IAAM,iCAAN,MAAM,uCAAuC,cAAc;CACvD,YACI,OAMF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAWmB;EAC/B,OAAO,IAAI,+BAA+B;GACtC,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,gBAAgB,MAAM;IACtB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW;KACP,MAAM;KACN,gBAAgB,MAAM;KACtB,OAAO,MAAM;KACb,SAAS,MAAM;IACnB;IACA,MAAM;GACV;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;;;;AAaA,SAAS,oCAAoC,OAY1B;CACf,OAAO,eAAe,SAAS;EAC3B,QAAQ,MAAM;EACd,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,gBAAgB,MAAM,UAAU;EAChC,eAAe,MAAM,KAAK;EAC1B,eAAe,MAAM,KAAK;EAC1B,WAAW,MAAM,KAAK;EACtB,WAAW,MAAM,KAAK;EACtB,OAAO,MAAM;CACjB,CAAC;AACL;;;AC3QA,IAAe,mBAAf,cAAwC,SAAS;CAG7C,YAAsB,OAAyC;EAC3D,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,OAAO,MAAM;GACb,UAAU;IAAE,MAAM,MAAM;IAAM,GAAG,MAAM;GAAS;EACpD,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,OAAO,OAAO,IAAI;CACtB;CAEA,OAAO,WAAW,OAWa;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,WAAW,OAea;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,gBAAgB,OAiBa;EAChC,OAAO,gCAAgC,SAAS,KAAK;CACzD;CAEA,OAAO,mBAAmB,OAea;EACnC,OAAO,mCAAmC,SAAS,KAAK;CAC5D;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAWe;EAC3B,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAee;EAC3B,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,kCAAN,MAAM,wCAAwC,iBAAiB;CAC3D,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAiBoB;EAChC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,gCAAgC;GACvC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,qCAAN,MAAM,2CAA2C,iBAAiB;CAC9D,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAeuB;EACnC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,mCAAmC;GAC1C,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,SAAS,mBACL,KACA,SACA,YACyC;CAKzC,OAAO;EACM;EACT,YALA,eACC,MAAO,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC,IAAK,KAAA;CAKvD;AACJ;;;;;;;;;;;;;;;ACpTA,IAAM,mBAAN,MAAM,yBAAyB,SAAS;CAGpC,YAAoB,QAA2C;EAC3D,MAAM,EAAE,SAAS,MAAM,UAAU,GAAG,SAAS;EAC7C,MAAM,SAAS,MAAM;GACjB,GAAG;GACH;EACJ,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;;;;;CAMA,OAAO,QAAQ,SAA2D;EACtE,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAW,GAAG;GAAQ,CAAC;GACzD,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;CAMA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAe,GAAG;GAAQ,CAAC;GAC7D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;;CAOA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAgB,GAAG;GAAQ,CAAC;GAC9D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;AACJ;AAwBA,SAAS,cACL,OACwB;CACxB,OAAO,gBAAgB;EACnB,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,cAAc,MAAM;CACxB,CAAC;AACL;AAEA,SAAS,mBACL,SAC0B;CAC1B,OAAO;EACH,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,UAAU,QAAQ;EAClB,eAAe,QAAQ;EACvB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,cAAc,QAAQ;EACtB,eAAe,QAAQ;CAC3B;AACJ;AAEA,SAAS,gBAAmD,OAAa;CACrE,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;AC1KA,IAAM,0BAAN,cAAsC,SAAS;CAC3C,YACI,SACA,SACA,SACF;EACE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAI,WAAW,CAAC;GAAI,GAAG,QAAQ;EAAS,IAC1C;EAEN,MAAM,SAAS,WAAW,oBAAoB;GAC1C,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ;;;AC6CA,IAAe,qBAAf,cAA0C,SAAS;CAM/C,YAAsB,OAAkC;EACpD,MAAM,MAAM,WAAW,yBAAyB,MAAM,MAAM;GACxD,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,UAAU,MAAM;IAChB,GAAG,MAAM;GACb;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;EAED,KAAK,YAAY,MAAM;EACvB,KAAK,WAAW,MAAM;EACtB,KAAK,WAAW,MAAM,SAAS;EAC/B,KAAK,WAAW,MAAM,SAAS;EAE/B,OAAO,OAAO,IAAI;CACtB;AACJ;AAMA,IAAM,uBAAN,MAAM,6BAA6B,mBAAmB;CAClD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGoB;EACpB,OAAO,IAAI,qBAAqB;GAC5B,SAAS,sBAAsB,QAAQ,eAAe,QAAQ;GAC9D,MAAM,mBAAmB,KAAK,eAAe,QAAQ;GACrD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,wBAAN,MAAM,8BAA8B,mBAAmB;CACnD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGqB;EACrB,OAAO,IAAI,sBAAsB;GAC7B,SAAS,sBAAsB,QAAQ,aAAa,QAAQ;GAC5D,MAAM,mBAAmB,KAAK,aAAa,QAAQ;GACnD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,qBAAN,MAAyB;CACrB,OAAO,KACH,WACA,UACM;EACN,OAAO,uBAAuB,WAAW,QAAQ;CACrD;AACJ;AAEA,IAAM,wBAAN,MAA4B;CACxB,OAAO,QACH,WACA,UACM;EACN,IAAI,cAAc,eAAe;GAC7B,IAAI,aAAa,gBACb,OAAO;GAEX,IAAI,aAAa,0BACb,OAAO;GAEX,IAAI,aAAa,8BACb,OAAO;GAEX,IAAI,aAAa,iBACb,OAAO;GAEX,IAAI,aAAa,2BACb,OAAO;GAEX,IAAI,aAAa,qBACb,OAAO;GAEX,OAAO;EACX;EAEA,IAAI,aAAa,oBACb,OAAO;EAEX,IAAI,aAAa,qBACb,OAAO;EAEX,OAAO;CACX;AACJ;AAMA,SAAS,YAAY,OAAgB,QAAQ,KAAyB;CAClE,IAAI;EACA,MAAM,aACF,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;EAC5D,OAAO,WAAW,SAAS,QACrB,GAAG,WAAW,MAAM,GAAG,KAAK,EAAE,KAC9B;CACV,QAAQ;EACJ;CACJ;AACJ;;;ACzLA,IAAe,gBAAf,cAAqC,SAAS;CAK1C,YAAsB,OAA6B;EAC/C,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,GAAG;GACH,UAAU;IACN,MAAM,MAAM;IACZ,GAAG,MAAM;GACb;EACJ,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,KAAK,eAAe,MAAM,SAAS;EACnC,KAAK,iBAAiB,MAAM,SAAS;EACrC,OAAO,OAAO,IAAI;CACtB;AACJ;AAOA,IAAM,eAAN,MAAM,qBAAqB,cAAc;CACrC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAA4C;EACxD,OAAO,IAAI,aAAa;GACpB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,IAAM,mBAAN,MAAM,yBAAyB,cAAc;CACzC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAAgD;EAC5D,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,SAAS,uBAAuB,OAIsB;CAClD,MAAM,cAAc,KAAK,MAAM,MAAM,cAAc;CACnD,IAAI,OAAO,MAAM,WAAW,GAAG,OAAO;CAEtC,IAAI,cAAc;CAElB,IAAI,MAAM,cAAc;EACpB,MAAM,SAAS,KAAK,MAAM,MAAM,YAAY;EAC5C,IAAI,CAAC,OAAO,MAAM,MAAM,KAAK,cAAc,QACvC,cAAc;CAEtB;CAEA,IAAI,MAAM,eAAe;EACrB,MAAM,UAAU,KAAK,MAAM,MAAM,aAAa;EAC9C,IAAI,CAAC,OAAO,MAAM,OAAO,KAAK,cAAc,SACxC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAM;CAEnD;CAEA,OAAO;EAAE,SAAS;EAAO;CAAY;AACzC;;;;;;;;;;;;;;ACpHA,IAAM,kBAAN,cAA8B,SAAS;;;;;;;;CAQnC,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,eAAe;GACjB,OAAO,MAAM;GACb,gBAAgB,KAAK;EACzB;EACA,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,SAAS,WAAW,YAAY;GAClC,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ"}
+{"version":3,"file":"validation-error.js","names":["compactMetadata"],"sources":["../src/core/errors/authentication-error.ts","../src/core/errors/conflict-error.ts","../src/core/errors/idempotency-error.ts","../src/core/errors/integration-error.ts","../src/core/errors/legacy-incompatible-error.ts","../src/core/errors/serialization-error.ts","../src/core/errors/temporal-error.ts","../src/core/errors/validation-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype AuthenticationErrorReason =\n    | \"missing_token\"\n    | \"malformed_token\"\n    | \"invalid_token\"\n    | \"expired_token\"\n    | \"revoked_token\"\n    | \"invalid_credentials\"\n    | \"session_not_found\"\n    | \"session_expired\"\n    | \"unknown\";\n\ntype AuthenticationErrorMetadata = {\n    reason: AuthenticationErrorReason;\n    authScheme?: \"bearer\" | \"cookie\" | \"basic\" | \"unknown\";\n    tokenLocation?: \"header\" | \"cookie\" | \"query\" | \"unknown\";\n    expiresAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    details?: string;\n};\n\ntype AuthenticationErrorFactoryOptions = Omit<\n    AuthenticationErrorMetadata,\n    \"reason\"\n> &\n    Omit<AppErrorOptions, \"metadata\">;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuthenticationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass AuthenticationError extends AppError {\n    public readonly reason: AuthenticationErrorReason;\n\n    private constructor(params: {\n        message: string;\n        code: string;\n        reason: AuthenticationErrorReason;\n        metadata?: Omit<AuthenticationErrorMetadata, \"reason\">;\n        cause?: unknown;\n        type?: string;\n        severity?: ErrorSeverity;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        createdAtIso?: string;\n        publicMessage?: string;\n    }) {\n        super(params.message, params.code, {\n            cause: params.cause,\n            metadata: {\n                reason: params.reason,\n                ...(params.metadata ?? {}),\n            },\n            type: params.type,\n            severity: params.severity,\n            correlationId: params.correlationId,\n            requestId: params.requestId,\n            commandId: params.commandId,\n            createdAtIso: params.createdAtIso,\n            publicMessage: params.publicMessage,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    // ─────────────────────────────────────────────────────────────────────────\n    // Factory methods\n    // ─────────────────────────────────────────────────────────────────────────\n\n    static missingToken(\n        options?: AuthenticationErrorFactoryOptions,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Missing credentials\",\n            code: ErrorCodes.authentication.missingToken,\n            reason: \"missing_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidToken(\n        options?: AuthenticationErrorFactoryOptions & { cause?: unknown },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid credentials\",\n            code: ErrorCodes.authentication.invalidToken,\n            reason: \"invalid_token\",\n            metadata: compactMetadata({\n                authScheme: options?.authScheme,\n                tokenLocation: options?.tokenLocation,\n                details: options?.details,\n                correlationId: options?.correlationId,\n                requestId: options?.requestId,\n            }),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static expiredToken(\n        options?: AuthenticationErrorFactoryOptions & { sessionId?: string },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Expired credentials\",\n            code: ErrorCodes.authentication.expiredToken,\n            reason: \"expired_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidCredentials(\n        options?: Pick<\n            AuthenticationErrorFactoryOptions,\n            | \"correlationId\"\n            | \"requestId\"\n            | \"type\"\n            | \"severity\"\n            | \"createdAtIso\"\n            | \"publicMessage\"\n        >,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid username or password\",\n            code: ErrorCodes.authentication.invalidCredentials,\n            reason: \"invalid_credentials\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction extractAppErrorOptions(options?: Partial<AppErrorOptions>) {\n    return {\n        cause: options?.cause,\n        type: options?.type,\n        severity: options?.severity,\n        correlationId: options?.correlationId,\n        requestId: options?.requestId,\n        commandId: options?.commandId,\n        createdAtIso: options?.createdAtIso,\n        publicMessage: options?.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(\n    input?: T,\n): T | undefined {\n    if (!input) return undefined;\n\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { AuthenticationError };\nexport type { AuthenticationErrorMetadata, AuthenticationErrorReason };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n/**\n * Conflict kinds we want to distinguish semantically.\n */\ntype ConflictKind = \"already_exists\" | \"duplicate\" | \"unique_violation\";\n\n/**\n * Metadata attached to conflicts without exposing sensitive values.\n */\ntype ConflictErrorMetadata = {\n    kind: ConflictKind;\n    entity: string;\n    operation?: string;\n    field?: string;\n    constraintName?: string;\n    existingId?: string;\n    valueHash?: string;\n    valuePreview?: string;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n};\n\n/**\n * Storage-level description of a unique-constraint breach, as reported by a\n * database driver. Used to translate a raw DB error into a domain\n * {@link DuplicateError} via {@link translateUniqueViolationToDuplicate}.\n */\ntype UniqueConstraintViolation = {\n    kind: \"unique_violation\";\n    constraintName?: string;\n    table?: string;\n    columns?: string[];\n};\n\n/**\n * Base for errors that signal a state conflict — the request collides with data\n * that already exists. Common at an HTTP 409 boundary.\n *\n * The discriminating {@link kind} lets a handler branch on *why* it conflicted\n * (an already-existing record, a domain duplicate, or a raw storage uniqueness\n * breach) without `instanceof` chains. Abstract: construct one of the concrete\n * subclasses through its `detected(...)` factory, which fills in the right code,\n * message, and metadata. Instances are frozen, so a conflict error can be shared\n * and rethrown without risk of tampering.\n */\nabstract class ConflictError extends AppError {\n    public readonly kind: ConflictKind;\n\n    protected constructor(\n        params: {\n            message: string;\n            code: string;\n            kind: ConflictKind;\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super(params.message, params.code, {\n            ...params,\n            metadata: {\n                kind: params.kind,\n                ...params.metadata,\n            },\n        });\n\n        this.kind = params.kind;\n        Object.freeze(this);\n    }\n}\n\n/**\n * The operation cannot proceed because a matching record already exists —\n * e.g. creating something whose natural key is already taken. Construct via\n * {@link AlreadyExistsError.detected}.\n */\nclass AlreadyExistsError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message:\n                \"A matching record already exists for the requested operation\",\n            code: ErrorCodes.conflict.alreadyExists,\n            kind: \"already_exists\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds an {@link AlreadyExistsError} for a detected collision. `operation`\n     * defaults to `\"create\"` and a generic retry `hint` is supplied when none is\n     * given, so the error is actionable even from a minimal call site.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (operation, field, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): AlreadyExistsError {\n        return new AlreadyExistsError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation ?? \"create\",\n                field: input.field,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint: input.hint ?? \"Verify existing records before retrying.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A domain-level duplicate: the data being written would duplicate an existing\n * record under the model's own uniqueness rules. Use this when the duplication\n * is recognized in the domain, as opposed to a raw DB constraint\n * ({@link UniqueConstraintViolationError}). Construct via\n * {@link DuplicateError.detected}.\n */\nclass DuplicateError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Conflict: an existing record violates uniqueness\",\n            code: ErrorCodes.conflict.duplicate,\n            kind: \"duplicate\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link DuplicateError} for a detected duplicate, defaulting to a\n     * \"adjust the data so it does not duplicate\" hint when none is provided.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (field, constraint name, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        constraintName?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): DuplicateError {\n        return new DuplicateError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                field: input.field,\n                constraintName: input.constraintName,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint:\n                    input.hint ??\n                    \"Adjust the data so it does not duplicate existing records.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A uniqueness breach surfaced by the storage layer itself (a database unique\n * index), carrying the raw {@link UniqueConstraintViolation} (constraint, table,\n * columns). Keep this distinct from {@link DuplicateError}: this one is the\n * infrastructure signal; translate it into a domain duplicate at the boundary\n * with {@link translateUniqueViolationToDuplicate} when the model should own the\n * message. Construct via {@link UniqueConstraintViolationError.detected}.\n */\nclass UniqueConstraintViolationError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\"> & {\n                violation: UniqueConstraintViolation;\n            };\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Uniqueness violation in storage\",\n            code: ErrorCodes.conflict.uniqueViolation,\n            kind: \"unique_violation\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link UniqueConstraintViolationError} from the constraint details\n     * a driver reports, packaging them into a nested `violation` payload.\n     *\n     * @param input - The entity plus the offending constraint name, table, and\n     *   columns, and optional correlation ids.\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        constraintName?: string;\n        table?: string;\n        columns?: string[];\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        cause?: unknown;\n    }): UniqueConstraintViolationError {\n        return new UniqueConstraintViolationError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                constraintName: input.constraintName,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                violation: {\n                    kind: \"unique_violation\",\n                    constraintName: input.constraintName,\n                    table: input.table,\n                    columns: input.columns,\n                },\n                hint: \"Uniqueness conflict detected in the database.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * Translates a raw storage {@link UniqueConstraintViolation} into a domain-level\n * {@link DuplicateError}. This is the seam where an infrastructure concern (a DB\n * unique index firing) is re-expressed in the language of the model, so callers\n * upstream catch a `DuplicateError` and never have to know a database was\n * involved.\n *\n * @param input - The entity, the driver-reported `violation`, and optional\n *   request context (`ctx`) carrying correlation ids and a clock instant.\n * @returns A {@link DuplicateError} carrying the constraint name as its field hint.\n */\nfunction translateUniqueViolationToDuplicate(input: {\n    entity: string;\n    operation?: string;\n    violation: UniqueConstraintViolation;\n    field?: string;\n    ctx?: {\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        nowIso?: string;\n    };\n    cause?: unknown;\n}): DuplicateError {\n    return DuplicateError.detected({\n        entity: input.entity,\n        operation: input.operation,\n        field: input.field,\n        constraintName: input.violation.constraintName,\n        detectedAtIso: input.ctx?.nowIso,\n        correlationId: input.ctx?.correlationId,\n        requestId: input.ctx?.requestId,\n        commandId: input.ctx?.commandId,\n        cause: input.cause,\n    });\n}\n\nexport {\n    AlreadyExistsError,\n    ConflictError,\n    DuplicateError,\n    translateUniqueViolationToDuplicate,\n    UniqueConstraintViolationError,\n};\n\nexport type { ConflictErrorMetadata, ConflictKind, UniqueConstraintViolation };\n","import { payloadHash, sha256Hex, stableStringify } from \"../shared/hashing.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\nexport type IdempotencyFailureKind =\n    | \"key_missing\"\n    | \"in_progress\"\n    | \"payload_mismatch\"\n    | \"replay_not_supported\"\n    | \"unknown\";\n\nexport type IdempotencyErrorMetadata = {\n    kind: IdempotencyFailureKind;\n    operation: string;\n    scope?: string;\n    entity?: string;\n    keyHash?: string;\n    keyPreview?: string;\n    incomingPayloadHash?: string;\n    existingPayloadHash?: string;\n    idempotencyRecordId?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    detectedAtIso?: string;\n    hint?: string;\n    details?: string;\n};\n\ntype IdempotencyErrorConstructorInput = {\n    message: string;\n    code: string;\n    kind: IdempotencyFailureKind;\n    metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n    cause?: unknown;\n};\n\nabstract class IdempotencyError extends AppError {\n    public readonly kind: IdempotencyFailureKind;\n\n    protected constructor(input: IdempotencyErrorConstructorInput) {\n        super(input.message, input.code, {\n            cause: input.cause,\n            metadata: { kind: input.kind, ...input.metadata },\n        });\n\n        this.kind = input.kind;\n        Object.freeze(this);\n    }\n\n    static keyMissing(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return IdempotencyKeyMissingError.detected(input);\n    }\n\n    static inProgress(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        return IdempotencyInProgressError.detected(input);\n    }\n\n    static payloadMismatch(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        return IdempotencyPayloadMismatchError.detected(input);\n    }\n\n    static replayNotSupported(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        return IdempotencyReplayNotSupportedError.detected(input);\n    }\n}\n\nclass IdempotencyKeyMissingError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Idempotency key/commandId missing for the requested operation\",\n            code: ErrorCodes.idempotency.keyMissing,\n            kind: \"key_missing\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return new IdempotencyKeyMissingError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Send a commandId/idempotency key to prevent duplicate processing.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyInProgressError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The same business intent is already being processed\",\n            code: ErrorCodes.idempotency.inProgress,\n            kind: \"in_progress\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyInProgressError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Wait for completion and retry using the same key.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyPayloadMismatchError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The idempotency key was reused with a different payload\",\n            code: ErrorCodes.idempotency.payloadMismatch,\n            kind: \"payload_mismatch\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyPayloadMismatchError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                incomingPayloadHash: input.incomingPayloadHash,\n                existingPayloadHash: input.existingPayloadHash,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Use a new idempotency key for a new intent. The same key should only be reused for retries of the same payload.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyReplayNotSupportedError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Re-execution detected, but replay of the previous result is not implemented\",\n            code: ErrorCodes.idempotency.replayNotSupported,\n            kind: \"replay_not_supported\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyReplayNotSupportedError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Try again later, or enable result replay for full idempotency.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nfunction resolveKeyIdentity(\n    key?: string,\n    keyHash?: string,\n    keyPreview?: string,\n): { keyHash?: string; keyPreview?: string } {\n    const preview =\n        keyPreview ??\n        (key ? (key.length <= 8 ? key : key.slice(0, 8)) : undefined);\n\n    return {\n        keyHash: keyHash,\n        keyPreview: preview,\n    };\n}\n\nexport {\n    IdempotencyError,\n    IdempotencyKeyMissingError,\n    IdempotencyInProgressError,\n    IdempotencyPayloadMismatchError,\n    IdempotencyReplayNotSupportedError,\n    sha256Hex,\n    stableStringify,\n    payloadHash,\n};\n","import type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\ntype IntegrationErrorReason =\n    | \"timeout\"\n    | \"unreachable\"\n    | \"bad_response\"\n    | \"unknown\";\n\ntype IntegrationErrorMetadata = {\n    reason: IntegrationErrorReason;\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n};\n\ntype IntegrationErrorAppOptions = Pick<\n    AppErrorOptions,\n    | \"cause\"\n    | \"type\"\n    | \"severity\"\n    | \"correlationId\"\n    | \"requestId\"\n    | \"commandId\"\n    | \"createdAtIso\"\n    | \"publicMessage\"\n>;\n\ntype IntegrationErrorConstructorParams = {\n    message: string;\n    code: string;\n    reason: IntegrationErrorReason;\n    metadata: IntegrationErrorMetadata;\n} & IntegrationErrorAppOptions;\n\n/**\n * Raised when a call to an external provider fails — a timeout, an unreachable\n * endpoint, or a malformed response. This is the boundary error that separates\n * \"our code is fine, the outside world misbehaved\" from internal faults, which\n * matters for retry and alerting decisions.\n *\n * Every instance records the `provider`, the `operation`, and timing\n * (`startedAtIso` / `durationMs`) so failures are correlatable across services\n * and a slow dependency is visible in the metadata. The discriminating\n * {@link reason} lets callers decide whether a failure is worth retrying.\n * Instances are frozen; construct through the static factories.\n */\nclass IntegrationError extends AppError {\n    public readonly reason: IntegrationErrorReason;\n\n    private constructor(params: IntegrationErrorConstructorParams) {\n        const { message, code, metadata, ...rest } = params;\n        super(message, code, {\n            ...rest,\n            metadata,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    /**\n     * The provider did not respond within the allotted time. Usually retryable,\n     * since a timeout leaves the outcome unknown rather than known-failed.\n     */\n    static timeout(options: IntegrationErrorTimeoutOptions): IntegrationError {\n        return new IntegrationError({\n            message: \"Timeout while integrating with external provider\",\n            code: ErrorCodes.integration.timeout,\n            reason: \"timeout\",\n            metadata: buildMetadata({ reason: \"timeout\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider could not be reached at all (connection refused, DNS\n     * failure, network partition) — the request never landed.\n     */\n    static unreachable(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Provider unavailable\",\n            code: ErrorCodes.integration.unreachable,\n            reason: \"unreachable\",\n            metadata: buildMetadata({ reason: \"unreachable\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider answered, but with something the system cannot use — an\n     * unexpected status, an unparsable body, or a contract mismatch. Unlike a\n     * timeout this is a definite failure, so blind retries rarely help.\n     */\n    static badResponse(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Unexpected response from provider\",\n            code: ErrorCodes.integration.badResponse,\n            reason: \"bad_response\",\n            metadata: buildMetadata({ reason: \"bad_response\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n}\n\ntype IntegrationErrorBaseOptions = {\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n    cause?: unknown;\n    type?: string;\n    severity?: ErrorSeverity;\n    createdAtIso?: string;\n    publicMessage?: string;\n};\n\ntype IntegrationErrorTimeoutOptions = IntegrationErrorBaseOptions;\ntype IntegrationErrorEndpointOptions = IntegrationErrorBaseOptions;\n\nfunction buildMetadata(\n    input: IntegrationErrorBaseOptions & { reason: IntegrationErrorReason },\n): IntegrationErrorMetadata {\n    return compactMetadata({\n        reason: input.reason,\n        provider: input.provider,\n        operation: input.operation,\n        startedAtIso: input.startedAtIso,\n        durationMs: input.durationMs,\n        detectedAtIso: input.detectedAtIso,\n        correlationId: input.correlationId,\n        requestId: input.requestId,\n        commandId: input.commandId,\n        details: input.details,\n        statusCode: input.statusCode,\n        responseCode: input.responseCode,\n    }) as IntegrationErrorMetadata;\n}\n\nfunction pickAppErrorFields(\n    options: IntegrationErrorBaseOptions,\n): IntegrationErrorAppOptions {\n    return {\n        cause: options.cause,\n        type: options.type,\n        severity: options.severity,\n        correlationId: options.correlationId,\n        requestId: options.requestId,\n        commandId: options.commandId,\n        createdAtIso: options.createdAtIso,\n        publicMessage: options.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(input: T): T {\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { IntegrationError };\nexport type { IntegrationErrorReason, IntegrationErrorMetadata };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// LegacyIncompatibleError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass LegacyIncompatibleError extends AppError {\n    constructor(\n        message: string,\n        context?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const mergedMetadata = options?.metadata\n            ? { ...(context ?? {}), ...options.metadata }\n            : context;\n\n        super(message, ErrorCodes.legacyIncompatible, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { LegacyIncompatibleError };\n","import { AppError } from \"./app-error.js\";\nimport { serializationErrorCode } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationDirection = \"serialize\" | \"deserialize\";\n\ntype SerializationFailureCategory =\n    | \"invalid_json\"\n    | \"invalid_shape\"\n    | \"missing_field\"\n    | \"unexpected_field\"\n    | \"invalid_type\"\n    | \"schema_version_missing\"\n    | \"schema_version_unsupported\"\n    | \"mapping_not_implemented\"\n    | \"contract_mismatch\"\n    | \"parse_failed\"\n    | \"stringify_failed\"\n    | \"unknown\";\n\ntype SerializationBoundary =\n    | \"http_in\"\n    | \"http_out\"\n    | \"graphql_in\"\n    | \"graphql_out\"\n    | \"dto_to_domain\"\n    | \"domain_to_dto\"\n    | \"persistence_to_domain\"\n    | \"domain_to_persistence\"\n    | \"event_in\"\n    | \"event_out\"\n    | \"projection\"\n    | \"unknown\";\n\n/**\n * Metadata shared by serialization/deserialization failures. Payload previews must be sanitized.\n */\ntype SerializationErrorMetadata = {\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n    boundary: SerializationBoundary;\n    contract: string;\n    schemaVersion?: number | string;\n    path?: string;\n    payloadPreview?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n    details?: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Base error\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationErrorOptions = Omit<AppErrorOptions, \"metadata\"> & {\n    message: string;\n    code: string;\n    metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\">;\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n};\n\nabstract class SerializationError extends AppError {\n    public readonly direction: SerializationDirection;\n    public readonly category: SerializationFailureCategory;\n    public readonly boundary: SerializationBoundary;\n    public readonly contract: string;\n\n    protected constructor(input: SerializationErrorOptions) {\n        super(input.message ?? \"Serialization failure\", input.code, {\n            cause: input.cause,\n            metadata: {\n                direction: input.direction,\n                category: input.category,\n                ...input.metadata,\n            },\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n\n        this.direction = input.direction;\n        this.category = input.category;\n        this.boundary = input.metadata.boundary;\n        this.contract = input.metadata.contract;\n\n        Object.freeze(this);\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization In\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationInError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationInError {\n        return new SerializationInError({\n            message: SerializationMessages.message(\"deserialize\", category),\n            code: SerializationCodes.code(\"deserialize\", category),\n            category,\n            direction: \"deserialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationOutError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationOutError {\n        return new SerializationOutError({\n            message: SerializationMessages.message(\"serialize\", category),\n            code: SerializationCodes.code(\"serialize\", category),\n            category,\n            direction: \"serialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Codes + Messages helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationCodes {\n    static code(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        return serializationErrorCode(direction, category);\n    }\n}\n\nclass SerializationMessages {\n    static message(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        if (direction === \"deserialize\") {\n            if (category === \"invalid_json\") {\n                return \"Invalid payload: malformed JSON\";\n            }\n            if (category === \"schema_version_missing\") {\n                return \"Invalid payload: schemaVersion is missing\";\n            }\n            if (category === \"schema_version_unsupported\") {\n                return \"Invalid payload: schemaVersion is not supported\";\n            }\n            if (category === \"invalid_shape\") {\n                return \"Invalid payload: incompatible shape\";\n            }\n            if (category === \"mapping_not_implemented\") {\n                return \"Unsupported payload: mapping not implemented\";\n            }\n            if (category === \"contract_mismatch\") {\n                return \"Payload does not match the expected contract\";\n            }\n            return \"Failed to parse incoming payload\";\n        }\n\n        if (category === \"stringify_failed\") {\n            return \"Failed to serialize the response\";\n        }\n        if (category === \"contract_mismatch\") {\n            return \"Response does not match the expected contract\";\n        }\n        return \"Failed to build the response\";\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction safePreview(value: unknown, limit = 240): string | undefined {\n    try {\n        const serialized =\n            typeof value === \"string\" ? value : JSON.stringify(value);\n        return serialized.length > limit\n            ? `${serialized.slice(0, limit)}…`\n            : serialized;\n    } catch {\n        return undefined;\n    }\n}\n\nexport {\n    safePreview,\n    SerializationCodes,\n    SerializationError,\n    SerializationInError as DeserializationError,\n    SerializationInError,\n    SerializationMessages,\n    SerializationOutError,\n};\nexport type {\n    SerializationBoundary,\n    SerializationDirection,\n    SerializationErrorMetadata,\n    SerializationFailureCategory,\n};\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\ntype TemporalKind = \"expired\" | \"not_yet_valid\";\n\ntype TemporalPrecision = \"EXACT\" | \"ESTIMATED\" | \"UNKNOWN\" | \"APPROXIMATE\";\n\ntype TemporalErrorMetadata = {\n    resourceType: string;\n    resourceId?: string;\n    operation?: string;\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n    policyId?: string;\n    precision?: TemporalPrecision;\n    hint?: string;\n    details?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n};\n\ntype TemporalErrorOptions = {\n    message: string;\n    code: string;\n    kind: TemporalKind;\n    metadata: TemporalErrorMetadata;\n} & AppErrorOptions;\n\nabstract class TemporalError extends AppError {\n    public readonly kind: TemporalKind;\n    public readonly resourceType: string;\n    public readonly evaluatedAtIso: string;\n\n    protected constructor(input: TemporalErrorOptions) {\n        super(input.message, input.code, {\n            ...input,\n            metadata: {\n                kind: input.kind,\n                ...input.metadata,\n            },\n        });\n\n        this.kind = input.kind;\n        this.resourceType = input.metadata.resourceType;\n        this.evaluatedAtIso = input.metadata.evaluatedAtIso;\n        Object.freeze(this);\n    }\n}\n\ntype TemporalCreationInput = TemporalErrorMetadata &\n    Partial<Omit<AppErrorOptions, \"metadata\">> & {\n        cause?: unknown;\n    };\n\nclass ExpiredError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): ExpiredError {\n        return new ExpiredError({\n            message: \"The validity of the resource/action has expired\",\n            code: ErrorCodes.temporal.expired,\n            kind: \"expired\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"The window has expired. Request a new link or try again within the valid period.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nclass NotYetValidError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): NotYetValidError {\n        return new NotYetValidError({\n            message: \"The resource/action is not yet valid\",\n            code: ErrorCodes.temporal.notYetValid,\n            kind: \"not_yet_valid\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"Not yet within the valid period. Try again later.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nfunction evaluateTemporalWindow(input: {\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n}): { expired: boolean; notYetValid: boolean } | null {\n    const evaluatedMs = Date.parse(input.evaluatedAtIso);\n    if (Number.isNaN(evaluatedMs)) return null;\n\n    let notYetValid = false;\n\n    if (input.validFromIso) {\n        const fromMs = Date.parse(input.validFromIso);\n        if (!Number.isNaN(fromMs) && evaluatedMs < fromMs) {\n            notYetValid = true;\n        }\n    }\n\n    if (input.validUntilIso) {\n        const untilMs = Date.parse(input.validUntilIso);\n        if (!Number.isNaN(untilMs) && evaluatedMs > untilMs) {\n            return { expired: true, notYetValid: false };\n        }\n    }\n\n    return { expired: false, notYetValid };\n}\n\nexport {\n    evaluateTemporalWindow,\n    ExpiredError,\n    NotYetValidError,\n    TemporalError,\n};\nexport type { TemporalErrorMetadata, TemporalKind, TemporalPrecision };\n","import { ValidationCode } from \"../exceptions/validation-code.js\";\nimport { ValidationField } from \"../exceptions/validation-field.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ValidationError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a single input fails a validation rule — the canonical\n * \"this field is wrong, and here is why\" error.\n *\n * It pins the offending `field` and a machine-readable `validationCode` into\n * the metadata (merged ahead of any caller-supplied metadata) so an API layer\n * can map the failure straight onto a form field without parsing the message.\n * The fixed {@link ErrorCodes.validation} code lets callers catch all\n * validation failures uniformly while still distinguishing the specific rule\n * through `validationCode`.\n */\nclass ValidationError extends AppError {\n    /**\n     * @param field - The input that failed validation; surfaced as `metadata.field`.\n     * @param code - The specific rule that was violated; surfaced as `metadata.validationCode`.\n     * @param message - The developer-facing description of the failure.\n     * @param options - Optional cause, correlation ids, and extra metadata\n     *   (merged over the field/code metadata, never overwriting it by accident).\n     */\n    constructor(\n        field: ValidationField,\n        code: ValidationCode,\n        message: string,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = {\n            field: field.value,\n            validationCode: code.value,\n        };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.validation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { ValidationError };\n"],"mappings":";;AAuCA,IAAM,sBAAN,MAAM,4BAA4B,SAAS;CAGvC,YAAoB,QAajB;EACC,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,OAAO,OAAO;GACd,UAAU;IACN,QAAQ,OAAO;IACf,GAAI,OAAO,YAAY,CAAC;GAC5B;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,eAAe,OAAO;GACtB,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,eAAe,OAAO;EAC1B,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;CAMA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB;IACtB,YAAY,SAAS;IACrB,eAAe,SAAS;IACxB,SAAS,SAAS;IAClB,eAAe,SAAS;IACxB,WAAW,SAAS;GACxB,CAAC;GACD,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,mBACH,SASmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;AACJ;AAMA,SAAS,uBAAuB,SAAoC;CAChE,OAAO;EACH,OAAO,SAAS;EAChB,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB,WAAW,SAAS;EACpB,cAAc,SAAS;EACvB,eAAe,SAAS;CAC5B;AACJ;AAEA,SAASA,kBACL,OACa;CACb,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;;;;;;;;;;;;ACpHA,IAAe,gBAAf,cAAqC,SAAS;CAG1C,YACI,QAOF;EACE,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,GAAG;GACH,UAAU;IACN,MAAM,OAAO;IACb,GAAG,OAAO;GACd;EACJ,CAAC;EAED,KAAK,OAAO,OAAO;EACnB,OAAO,OAAO,IAAI;CACtB;AACJ;;;;;;AAOA,IAAM,qBAAN,MAAM,2BAA2B,cAAc;CAC3C,YACI,OAIF;EACE,MAAM;GACF,SACI;GACJ,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;;CAUA,OAAO,SAAS,OAaO;EACnB,OAAO,IAAI,mBAAmB;GAC1B,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM,aAAa;IAC9B,OAAO,MAAM;IACb,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MAAM,MAAM,QAAQ;GACxB;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;AASA,IAAM,iBAAN,MAAM,uBAAuB,cAAc;CACvC,YACI,OAIF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAcG;EACf,OAAO,IAAI,eAAe;GACtB,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,gBAAgB,MAAM;IACtB,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;AAUA,IAAM,iCAAN,MAAM,uCAAuC,cAAc;CACvD,YACI,OAMF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAWmB;EAC/B,OAAO,IAAI,+BAA+B;GACtC,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,gBAAgB,MAAM;IACtB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW;KACP,MAAM;KACN,gBAAgB,MAAM;KACtB,OAAO,MAAM;KACb,SAAS,MAAM;IACnB;IACA,MAAM;GACV;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;;;;AAaA,SAAS,oCAAoC,OAY1B;CACf,OAAO,eAAe,SAAS;EAC3B,QAAQ,MAAM;EACd,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,gBAAgB,MAAM,UAAU;EAChC,eAAe,MAAM,KAAK;EAC1B,eAAe,MAAM,KAAK;EAC1B,WAAW,MAAM,KAAK;EACtB,WAAW,MAAM,KAAK;EACtB,OAAO,MAAM;CACjB,CAAC;AACL;;;AC3QA,IAAe,mBAAf,cAAwC,SAAS;CAG7C,YAAsB,OAAyC;EAC3D,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,OAAO,MAAM;GACb,UAAU;IAAE,MAAM,MAAM;IAAM,GAAG,MAAM;GAAS;EACpD,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,OAAO,OAAO,IAAI;CACtB;CAEA,OAAO,WAAW,OAWa;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,WAAW,OAea;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,gBAAgB,OAiBa;EAChC,OAAO,gCAAgC,SAAS,KAAK;CACzD;CAEA,OAAO,mBAAmB,OAea;EACnC,OAAO,mCAAmC,SAAS,KAAK;CAC5D;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAWe;EAC3B,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAee;EAC3B,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,kCAAN,MAAM,wCAAwC,iBAAiB;CAC3D,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAiBoB;EAChC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,gCAAgC;GACvC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,qCAAN,MAAM,2CAA2C,iBAAiB;CAC9D,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAeuB;EACnC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,mCAAmC;GAC1C,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,SAAS,mBACL,KACA,SACA,YACyC;CAKzC,OAAO;EACM;EACT,YALA,eACC,MAAO,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC,IAAK,KAAA;CAKvD;AACJ;;;;;;;;;;;;;;;ACpTA,IAAM,mBAAN,MAAM,yBAAyB,SAAS;CAGpC,YAAoB,QAA2C;EAC3D,MAAM,EAAE,SAAS,MAAM,UAAU,GAAG,SAAS;EAC7C,MAAM,SAAS,MAAM;GACjB,GAAG;GACH;EACJ,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;;;;;CAMA,OAAO,QAAQ,SAA2D;EACtE,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAW,GAAG;GAAQ,CAAC;GACzD,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;CAMA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAe,GAAG;GAAQ,CAAC;GAC7D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;;CAOA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAgB,GAAG;GAAQ,CAAC;GAC9D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;AACJ;AAwBA,SAAS,cACL,OACwB;CACxB,OAAO,gBAAgB;EACnB,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,cAAc,MAAM;CACxB,CAAC;AACL;AAEA,SAAS,mBACL,SAC0B;CAC1B,OAAO;EACH,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,UAAU,QAAQ;EAClB,eAAe,QAAQ;EACvB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,cAAc,QAAQ;EACtB,eAAe,QAAQ;CAC3B;AACJ;AAEA,SAAS,gBAAmD,OAAa;CACrE,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;AC1KA,IAAM,0BAAN,cAAsC,SAAS;CAC3C,YACI,SACA,SACA,SACF;EACE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAI,WAAW,CAAC;GAAI,GAAG,QAAQ;EAAS,IAC1C;EAEN,MAAM,SAAS,WAAW,oBAAoB;GAC1C,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ;;;AC6CA,IAAe,qBAAf,cAA0C,SAAS;CAM/C,YAAsB,OAAkC;EACpD,MAAM,MAAM,WAAW,yBAAyB,MAAM,MAAM;GACxD,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,UAAU,MAAM;IAChB,GAAG,MAAM;GACb;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;EAED,KAAK,YAAY,MAAM;EACvB,KAAK,WAAW,MAAM;EACtB,KAAK,WAAW,MAAM,SAAS;EAC/B,KAAK,WAAW,MAAM,SAAS;EAE/B,OAAO,OAAO,IAAI;CACtB;AACJ;AAMA,IAAM,uBAAN,MAAM,6BAA6B,mBAAmB;CAClD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGoB;EACpB,OAAO,IAAI,qBAAqB;GAC5B,SAAS,sBAAsB,QAAQ,eAAe,QAAQ;GAC9D,MAAM,mBAAmB,KAAK,eAAe,QAAQ;GACrD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,wBAAN,MAAM,8BAA8B,mBAAmB;CACnD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGqB;EACrB,OAAO,IAAI,sBAAsB;GAC7B,SAAS,sBAAsB,QAAQ,aAAa,QAAQ;GAC5D,MAAM,mBAAmB,KAAK,aAAa,QAAQ;GACnD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,qBAAN,MAAyB;CACrB,OAAO,KACH,WACA,UACM;EACN,OAAO,uBAAuB,WAAW,QAAQ;CACrD;AACJ;AAEA,IAAM,wBAAN,MAA4B;CACxB,OAAO,QACH,WACA,UACM;EACN,IAAI,cAAc,eAAe;GAC7B,IAAI,aAAa,gBACb,OAAO;GAEX,IAAI,aAAa,0BACb,OAAO;GAEX,IAAI,aAAa,8BACb,OAAO;GAEX,IAAI,aAAa,iBACb,OAAO;GAEX,IAAI,aAAa,2BACb,OAAO;GAEX,IAAI,aAAa,qBACb,OAAO;GAEX,OAAO;EACX;EAEA,IAAI,aAAa,oBACb,OAAO;EAEX,IAAI,aAAa,qBACb,OAAO;EAEX,OAAO;CACX;AACJ;AAMA,SAAS,YAAY,OAAgB,QAAQ,KAAyB;CAClE,IAAI;EACA,MAAM,aACF,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;EAC5D,OAAO,WAAW,SAAS,QACrB,GAAG,WAAW,MAAM,GAAG,KAAK,EAAE,KAC9B;CACV,QAAQ;EACJ;CACJ;AACJ;;;ACzLA,IAAe,gBAAf,cAAqC,SAAS;CAK1C,YAAsB,OAA6B;EAC/C,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,GAAG;GACH,UAAU;IACN,MAAM,MAAM;IACZ,GAAG,MAAM;GACb;EACJ,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,KAAK,eAAe,MAAM,SAAS;EACnC,KAAK,iBAAiB,MAAM,SAAS;EACrC,OAAO,OAAO,IAAI;CACtB;AACJ;AAOA,IAAM,eAAN,MAAM,qBAAqB,cAAc;CACrC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAA4C;EACxD,OAAO,IAAI,aAAa;GACpB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,IAAM,mBAAN,MAAM,yBAAyB,cAAc;CACzC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAAgD;EAC5D,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,SAAS,uBAAuB,OAIsB;CAClD,MAAM,cAAc,KAAK,MAAM,MAAM,cAAc;CACnD,IAAI,OAAO,MAAM,WAAW,GAAG,OAAO;CAEtC,IAAI,cAAc;CAElB,IAAI,MAAM,cAAc;EACpB,MAAM,SAAS,KAAK,MAAM,MAAM,YAAY;EAC5C,IAAI,CAAC,OAAO,MAAM,MAAM,KAAK,cAAc,QACvC,cAAc;CAEtB;CAEA,IAAI,MAAM,eAAe;EACrB,MAAM,UAAU,KAAK,MAAM,MAAM,aAAa;EAC9C,IAAI,CAAC,OAAO,MAAM,OAAO,KAAK,cAAc,SACxC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAM;CAEnD;CAEA,OAAO;EAAE,SAAS;EAAO;CAAY;AACzC;;;;;;;;;;;;;;ACpHA,IAAM,kBAAN,cAA8B,SAAS;;;;;;;;CAQnC,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,eAAe;GACjB,OAAO,MAAM;GACb,gBAAgB,KAAK;EACzB;EACA,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,SAAS,WAAW,YAAY;GAClC,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ"}

package/dist/value-object.cjs

@@ -1,116 +1,6 @@
-const require_invariant_violation_exception = require("./invariant-violation-exception.cjs");
+const require_stable_stringify = require("./stable-stringify.cjs");
 const require_immutable = require("./immutable.cjs");
-const require_temporal_guards = require("./temporal-guards.cjs");
 const require_plugin = require("./plugin.cjs");
-//#region src/core/shared/aggregate-version.ts
-function assertValidAggregateVersion(aggregateVersion) {
-	if (!Number.isInteger(aggregateVersion) || aggregateVersion < 0) throw new require_invariant_violation_exception.InvariantViolationException(`aggregateVersion must be a non-negative integer. Received: ${aggregateVersion}`);
-}
-//#endregion
-//#region src/core/domain/entity.ts
-var _Entity;
-/**
-* Base class for domain entities — objects defined by a stable identity rather
-* than by their attributes. Two entities are "the same" when their `id`
-* matches, even if every other field differs; this is the opposite of a
-* {@link ValueObject}, which is defined entirely by its contents.
-*
-* The class owns the bookkeeping common to every aggregate root: a creation
-* timestamp that never changes, a last-modified timestamp, and an
-* `aggregateVersion` counter used for optimistic concurrency control. All three
-* are validated on construction and the dates are defensively cloned, so an
-* entity can never be built into — or leak — an inconsistent temporal state.
-*
-* @typeParam TIdentifier - The identity type (e.g. a branded string id or a VO).
-*/
-let Entity = class Entity {
-	static {
-		_Entity = this;
-	}
-	/**
-	* Reconstitutes an entity from its persisted {@link EntityState}.
-	*
-	* Validates the temporal invariants up front so an invalid entity is
-	* impossible to construct: both dates must be valid, the aggregate version
-	* must be a non-negative integer, and `updatedAt` may not predate
-	* `createdAt`. Both dates are cloned on the way in so a later mutation of
-	* the caller's `Date` objects cannot reach into the entity's internal state.
-	*
-	* Declared `protected` because entities are reconstituted through a
-	* subclass factory, never instantiated directly by application code.
-	*
-	* @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.
-	*/
-	constructor(state) {
-		require_temporal_guards.assertValidDate("createdAt", state.createdAt);
-		require_temporal_guards.assertValidDate("updatedAt", state.updatedAt);
-		assertValidAggregateVersion(state.aggregateVersion);
-		if (state.updatedAt.getTime() < state.createdAt.getTime()) throw new require_invariant_violation_exception.InvariantViolationException("updatedAt cannot be earlier than createdAt");
-		this._id = state.id;
-		this._createdAt = require_temporal_guards.cloneDate(state.createdAt);
-		this._updatedAt = require_temporal_guards.cloneDate(state.updatedAt);
-		this._aggregateVersion = state.aggregateVersion;
-	}
-	/** The entity's stable identity — the basis for equality between entities. */
-	get id() {
-		return this._id;
-	}
-	/**
-	* When the entity was first created.
-	*
-	* Returns a clone so callers cannot mutate the entity's internal `Date`;
-	* the value is fixed at construction and never changes thereafter.
-	*/
-	get createdAt() {
-		return require_temporal_guards.cloneDate(this._createdAt);
-	}
-	/**
-	* When the entity was last modified.
-	*
-	* Returns a clone for the same encapsulation reason as {@link createdAt};
-	* the underlying value advances only through {@link markAsModified}.
-	*/
-	get updatedAt() {
-		return require_temporal_guards.cloneDate(this._updatedAt);
-	}
-	/**
-	* Monotonic counter incremented on every mutation, used for optimistic
-	* concurrency control: a writer reads this value, and the persistence layer
-	* rejects the write if the stored version has moved on in the meantime.
-	*/
-	get aggregateVersion() {
-		return this._aggregateVersion;
-	}
-	/**
-	* The schema/contract version stamped on this entity type by the
-	* `@version` decorator — used to detect and migrate state persisted under
-	* an older shape.
-	*/
-	get contractVersion() {
-		return _Entity.CONTRACT_VERSION;
-	}
-	/**
-	* The single seam through which an entity records a mutation: it advances
-	* `updatedAt` and bumps {@link aggregateVersion} by one. Subclasses must
-	* call this from every state-changing method so the version counter stays
-	* an accurate optimistic-lock token.
-	*
-	* @param updatedAt - The modification instant; defaults to now. Validated
-	*   and required not to predate `createdAt`, preserving the same invariant
-	*   the constructor enforces.
-	* @returns The new aggregate version after the increment.
-	* @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.
-	*/
-	markAsModified(updatedAt = /* @__PURE__ */ new Date()) {
-		require_temporal_guards.assertValidDate("updatedAt", updatedAt);
-		if (updatedAt.getTime() < this._createdAt.getTime()) throw new require_invariant_violation_exception.InvariantViolationException("updatedAt cannot be earlier than createdAt");
-		this._updatedAt = require_temporal_guards.cloneDate(updatedAt);
-		this._aggregateVersion += 1;
-		return this._aggregateVersion;
-	}
-};
-Entity = _Entity = require_immutable.__decorate([require_immutable.version("1.0")], Entity);
-//#endregion
 //#region src/core/domain/value-object.ts
 var _ValueObject;
 /**
@@ -125,6 +15,12 @@ var _ValueObject;
 * any risk of a consumer mutating shared state. Subclasses seal the instance
 * itself with {@link finalize} once their own fields are set.
 *
+* One exception: nested `Date` instances are cloned but NOT frozen —
+* `Object.freeze` does not block `setTime`/`setFullYear`, so a consumer of
+* `value` can still mutate an inner `Date` in place. Store instants as ISO
+* strings or epoch timestamps in the wrapped state (converting to `Date` only
+* in an accessor) when that guarantee matters.
+*
 * @typeParam T - The shape of the wrapped data.
 * @typeParam P - The primitive form produced by {@link toPrimitive} / {@link toJSON}.
 */
@@ -148,7 +44,7 @@ let ValueObject = class ValueObject {
 	* `@version` decorator — used to detect state persisted under an older shape.
 	*/
 	get contractVersion() {
-		return _ValueObject.CONTRACT_VERSION;
+		return this.constructor.CONTRACT_VERSION;
 	}
 	/**
 	* Freezes the instance shell, blocking reassignment of any own field.
@@ -177,32 +73,22 @@ let ValueObject = class ValueObject {
 	* same data are considered equal.
 	*
 	* Delegates to the registered equality {@link plugins}; with no plugin
-	* registered it falls back to comparing the serialized wrapped `value`.
+	* registered it falls back to comparing the serialized wrapped `value`,
+	* with object keys sorted so insertion order (e.g. code-built vs
+	* JSON-rehydrated) never affects the result.
 	* Subclasses may still override for a faster or domain-specific comparison.
 	*/
 	equals(other) {
-		return _ValueObject.plugins.invoke("equals", [this, other], { fallback: (a, b) => JSON.stringify(a.value) === JSON.stringify(b.value) });
+		return _ValueObject.plugins.invoke("equals", [this, other], { fallback: (a, b) => require_stable_stringify.stableStringify(a.value) === require_stable_stringify.stableStringify(b.value) });
 	}
 };
 ValueObject = _ValueObject = require_immutable.__decorate([require_immutable.version("1.0")], ValueObject);
 //#endregion
-Object.defineProperty(exports, "Entity", {
-	enumerable: true,
-	get: function() {
-		return Entity;
-	}
-});
 Object.defineProperty(exports, "ValueObject", {
 	enumerable: true,
 	get: function() {
 		return ValueObject;
 	}
 });
-Object.defineProperty(exports, "assertValidAggregateVersion", {
-	enumerable: true,
-	get: function() {
-		return assertValidAggregateVersion;
-	}
-});
 
 //# sourceMappingURL=value-object.cjs.map

package/dist/value-object.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"value-object.cjs","names":["InvariantViolationException","InvariantViolationException","cloneDate","version","PluginManager","makeImmutable","version"],"sources":["../src/core/shared/aggregate-version.ts","../src/core/domain/entity.ts","../src/core/domain/value-object.ts"],"sourcesContent":["import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\nfunction assertValidAggregateVersion(aggregateVersion: number): void {\n    if (!Number.isInteger(aggregateVersion) || aggregateVersion < 0) {\n        throw new InvariantViolationException(\n            `aggregateVersion must be a non-negative integer. Received: ${aggregateVersion}`,\n        );\n    }\n}\n\nexport { assertValidAggregateVersion };\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\nimport { assertValidAggregateVersion } from \"../shared/aggregate-version.js\";\nimport { assertValidDate, cloneDate } from \"../shared/temporal-guards.js\";\nimport { type ContractVersion, version } from \"../versioning/version.js\";\n\n/**\n * The minimal persisted shape needed to reconstitute an {@link Entity}.\n *\n * This is the contract between storage and the domain: a repository maps a row\n * (or document) onto these four fields and hands them to a subclass constructor.\n * `aggregateVersion` travels with the state so optimistic-concurrency checks\n * survive a round-trip through the database.\n */\ninterface EntityState<TIdentifier> {\n    readonly id: TIdentifier;\n    readonly createdAt: Date;\n    readonly updatedAt: Date;\n    readonly aggregateVersion: number;\n}\n\n/**\n * Base class for domain entities — objects defined by a stable identity rather\n * than by their attributes. Two entities are \"the same\" when their `id`\n * matches, even if every other field differs; this is the opposite of a\n * {@link ValueObject}, which is defined entirely by its contents.\n *\n * The class owns the bookkeeping common to every aggregate root: a creation\n * timestamp that never changes, a last-modified timestamp, and an\n * `aggregateVersion` counter used for optimistic concurrency control. All three\n * are validated on construction and the dates are defensively cloned, so an\n * entity can never be built into — or leak — an inconsistent temporal state.\n *\n * @typeParam TIdentifier - The identity type (e.g. a branded string id or a VO).\n */\n@version(\"1.0\")\nabstract class Entity<TIdentifier> {\n    declare public static readonly CONTRACT_VERSION: ContractVersion;\n\n    private readonly _id: TIdentifier;\n    private readonly _createdAt: Date;\n    private _updatedAt: Date;\n    private _aggregateVersion: number;\n\n    /**\n     * Reconstitutes an entity from its persisted {@link EntityState}.\n     *\n     * Validates the temporal invariants up front so an invalid entity is\n     * impossible to construct: both dates must be valid, the aggregate version\n     * must be a non-negative integer, and `updatedAt` may not predate\n     * `createdAt`. Both dates are cloned on the way in so a later mutation of\n     * the caller's `Date` objects cannot reach into the entity's internal state.\n     *\n     * Declared `protected` because entities are reconstituted through a\n     * subclass factory, never instantiated directly by application code.\n     *\n     * @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.\n     */\n    protected constructor(state: EntityState<TIdentifier>) {\n        assertValidDate(\"createdAt\", state.createdAt);\n        assertValidDate(\"updatedAt\", state.updatedAt);\n        assertValidAggregateVersion(state.aggregateVersion);\n\n        if (state.updatedAt.getTime() < state.createdAt.getTime()) {\n            throw new InvariantViolationException(\n                \"updatedAt cannot be earlier than createdAt\",\n            );\n        }\n\n        this._id = state.id;\n        this._createdAt = cloneDate(state.createdAt);\n        this._updatedAt = cloneDate(state.updatedAt);\n        this._aggregateVersion = state.aggregateVersion;\n    }\n\n    /** The entity's stable identity — the basis for equality between entities. */\n    public get id(): TIdentifier {\n        return this._id;\n    }\n\n    /**\n     * When the entity was first created.\n     *\n     * Returns a clone so callers cannot mutate the entity's internal `Date`;\n     * the value is fixed at construction and never changes thereafter.\n     */\n    public get createdAt(): Date {\n        return cloneDate(this._createdAt);\n    }\n\n    /**\n     * When the entity was last modified.\n     *\n     * Returns a clone for the same encapsulation reason as {@link createdAt};\n     * the underlying value advances only through {@link markAsModified}.\n     */\n    public get updatedAt(): Date {\n        return cloneDate(this._updatedAt);\n    }\n\n    /**\n     * Monotonic counter incremented on every mutation, used for optimistic\n     * concurrency control: a writer reads this value, and the persistence layer\n     * rejects the write if the stored version has moved on in the meantime.\n     */\n    public get aggregateVersion(): number {\n        return this._aggregateVersion;\n    }\n\n    /**\n     * The schema/contract version stamped on this entity type by the\n     * `@version` decorator — used to detect and migrate state persisted under\n     * an older shape.\n     */\n    public get contractVersion(): ContractVersion {\n        return Entity.CONTRACT_VERSION;\n    }\n\n    /**\n     * The single seam through which an entity records a mutation: it advances\n     * `updatedAt` and bumps {@link aggregateVersion} by one. Subclasses must\n     * call this from every state-changing method so the version counter stays\n     * an accurate optimistic-lock token.\n     *\n     * @param updatedAt - The modification instant; defaults to now. Validated\n     *   and required not to predate `createdAt`, preserving the same invariant\n     *   the constructor enforces.\n     * @returns The new aggregate version after the increment.\n     * @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.\n     */\n    protected markAsModified(updatedAt: Date = new Date()): number {\n        assertValidDate(\"updatedAt\", updatedAt);\n\n        if (updatedAt.getTime() < this._createdAt.getTime()) {\n            throw new InvariantViolationException(\n                \"updatedAt cannot be earlier than createdAt\",\n            );\n        }\n\n        this._updatedAt = cloneDate(updatedAt);\n        this._aggregateVersion += 1;\n\n        return this._aggregateVersion;\n    }\n}\n\nexport { Entity, type EntityState };\n","import { PluginManager } from \"../plugins/index.js\";\nimport { type DeepReadonly, makeImmutable } from \"../shared/immutable.js\";\nimport { type ContractVersion, version } from \"../versioning/version.js\";\n\n/**\n * Extension point for value-object equality. A plugin implementing this\n * contract overrides how any two value objects are compared, letting the host\n * application swap in a structural comparator (e.g. `lodash.isEqual` over the\n * wrapped `value`) without every value object having to implement `equals` by\n * hand.\n */\ntype ValueObjectPluginContract = {\n    equals: (\n        a: ValueObject<unknown, unknown>,\n        b: ValueObject<unknown, unknown>,\n    ) => boolean;\n};\n\n/**\n * Base class for value objects — domain concepts defined entirely by their\n * contents, with no identity of their own. Two value objects are\n * interchangeable when they hold equal data, which is the opposite of an\n * {@link Entity} (compared by id). Money, a CPF, a date range: replacing one\n * instance with an equal one changes nothing about the model.\n *\n * Immutability is the defining guarantee here. The wrapped `value` is\n * deep-frozen on construction, so a value object can be shared freely without\n * any risk of a consumer mutating shared state. Subclasses seal the instance\n * itself with {@link finalize} once their own fields are set.\n *\n * @typeParam T - The shape of the wrapped data.\n * @typeParam P - The primitive form produced by {@link toPrimitive} / {@link toJSON}.\n */\n@version(\"1.0\")\nabstract class ValueObject<T, P> {\n    declare public static readonly CONTRACT_VERSION: ContractVersion;\n\n    /**\n     * Registry of equality plugins shared by every value object. Empty by\n     * default — when nothing is registered, {@link equals} falls back to a\n     * structural comparison of the wrapped `value`. Hosts register a plugin\n     * (e.g. `lodash.isEqual`) once at startup to customise equality globally.\n     */\n    public static readonly plugins =\n        new PluginManager<ValueObjectPluginContract>();\n\n    /** The wrapped data, deep-frozen so it can never be mutated after construction. */\n    public readonly value: DeepReadonly<T>;\n\n    /**\n     * Wraps `value`, deep-freezing it so the value object is immutable from the\n     * moment it exists. Declared `protected` because value objects are built\n     * through a validating subclass factory, never instantiated directly.\n     */\n    protected constructor(value: T) {\n        this.value = makeImmutable(value);\n    }\n\n    /**\n     * The schema/contract version stamped on this value-object type by the\n     * `@version` decorator — used to detect state persisted under an older shape.\n     */\n    public get contractVersion(): ContractVersion {\n        return ValueObject.CONTRACT_VERSION;\n    }\n\n    /**\n     * Freezes the instance shell, blocking reassignment of any own field.\n     *\n     * `value` is already deep-frozen by the constructor, so the wrapped data is\n     * immutable regardless. The instance itself is NOT frozen automatically\n     * because a subclass may still need to assign its own fields after\n     * `super(value)` runs. Call `finalize()` at the very end of the subclass\n     * constructor (after all fields are set) to make the whole value object\n     * immutable.\n     */\n    protected finalize(): void {\n        Object.freeze(this);\n    }\n\n    /**\n     * Hook for `JSON.stringify`. Delegates to {@link toPrimitive} so a value\n     * object serializes to its primitive form rather than exposing the internal\n     * `value` wrapper.\n     */\n    public toJSON(): P {\n        return this.toPrimitive();\n    }\n\n    /**\n     * Compares this value object with another by content. Because value objects\n     * carry no identity, two independently constructed instances holding the\n     * same data are considered equal.\n     *\n     * Delegates to the registered equality {@link plugins}; with no plugin\n     * registered it falls back to comparing the serialized wrapped `value`.\n     * Subclasses may still override for a faster or domain-specific comparison.\n     */\n    public equals(other: this): boolean {\n        return ValueObject.plugins.invoke(\"equals\", [this, other], {\n            fallback: (a, b) =>\n                JSON.stringify(a.value) === JSON.stringify(b.value),\n        });\n    }\n\n    /**\n     * Projects the value object down to a plain, serializable primitive form —\n     * the representation suitable for persistence, transport, or comparison.\n     */\n    public abstract toPrimitive(): P;\n}\n\nexport { type DeepReadonly, ValueObject, type ValueObjectPluginContract };\n"],"mappings":";;;;;AAEA,SAAS,4BAA4B,kBAAgC;CACjE,IAAI,CAAC,OAAO,UAAU,gBAAgB,KAAK,mBAAmB,GAC1D,MAAM,IAAIA,sCAAAA,4BACN,8DAA8D,kBAClE;AAER;;;;;;;;;;;;;;;;;;AC0BA,IAAA,SAAA,MACe,OAAoB;;;;;;;;;;;;;;;;;;CAsB/B,YAAsB,OAAiC;EACnD,wBAAA,gBAAgB,aAAa,MAAM,SAAS;EAC5C,wBAAA,gBAAgB,aAAa,MAAM,SAAS;EAC5C,4BAA4B,MAAM,gBAAgB;EAElD,IAAI,MAAM,UAAU,QAAQ,IAAI,MAAM,UAAU,QAAQ,GACpD,MAAM,IAAIC,sCAAAA,4BACN,4CACJ;EAGJ,KAAK,MAAM,MAAM;EACjB,KAAK,aAAaC,wBAAAA,UAAU,MAAM,SAAS;EAC3C,KAAK,aAAaA,wBAAAA,UAAU,MAAM,SAAS;EAC3C,KAAK,oBAAoB,MAAM;CACnC;;CAGA,IAAW,KAAkB;EACzB,OAAO,KAAK;CAChB;;;;;;;CAQA,IAAW,YAAkB;EACzB,OAAOA,wBAAAA,UAAU,KAAK,UAAU;CACpC;;;;;;;CAQA,IAAW,YAAkB;EACzB,OAAOA,wBAAAA,UAAU,KAAK,UAAU;CACpC;;;;;;CAOA,IAAW,mBAA2B;EAClC,OAAO,KAAK;CAChB;;;;;;CAOA,IAAW,kBAAmC;EAC1C,OAAA,QAAc;CAClB;;;;;;;;;;;;;CAcA,eAAyB,4BAAkB,IAAI,KAAK,GAAW;EAC3D,wBAAA,gBAAgB,aAAa,SAAS;EAEtC,IAAI,UAAU,QAAQ,IAAI,KAAK,WAAW,QAAQ,GAC9C,MAAM,IAAID,sCAAAA,4BACN,4CACJ;EAGJ,KAAK,aAAaC,wBAAAA,UAAU,SAAS;EACrC,KAAK,qBAAqB;EAE1B,OAAO,KAAK;CAChB;AACJ;iDA7GCC,kBAAAA,QAAQ,KAAK,CAAA,GAAA,MAAA;;;;;;;;;;;;;;;;;;;ACDd,IAAA,cAAA,MACe,YAAkB;;;;;iBAUzB,IAAIC,eAAAA,cAAyC;;;;;;;CAUjD,YAAsB,OAAU;EAC5B,KAAK,QAAQC,kBAAAA,cAAc,KAAK;CACpC;;;;;CAMA,IAAW,kBAAmC;EAC1C,OAAA,aAAmB;CACvB;;;;;;;;;;;CAYA,WAA2B;EACvB,OAAO,OAAO,IAAI;CACtB;;;;;;CAOA,SAAmB;EACf,OAAO,KAAK,YAAY;CAC5B;;;;;;;;;;CAWA,OAAc,OAAsB;EAChC,OAAA,aAAmB,QAAQ,OAAO,UAAU,CAAC,MAAM,KAAK,GAAG,EACvD,WAAW,GAAG,MACV,KAAK,UAAU,EAAE,KAAK,MAAM,KAAK,UAAU,EAAE,KAAK,EAC1D,CAAC;CACL;AAOJ;2DA7ECC,kBAAAA,QAAQ,KAAK,CAAA,GAAA,WAAA"}
+{"version":3,"file":"value-object.cjs","names":["PluginManager","makeImmutable","stableStringify","version"],"sources":["../src/core/domain/value-object.ts"],"sourcesContent":["import { PluginManager } from \"../plugins/index.js\";\nimport { type DeepReadonly, makeImmutable } from \"../shared/immutable.js\";\nimport { stableStringify } from \"../shared/stable-stringify.js\";\nimport { type ContractVersion, version } from \"../versioning/version.js\";\n\n/**\n * Extension point for value-object equality. A plugin implementing this\n * contract overrides how any two value objects are compared, letting the host\n * application swap in a structural comparator (e.g. `lodash.isEqual` over the\n * wrapped `value`) without every value object having to implement `equals` by\n * hand.\n */\ntype ValueObjectPluginContract = {\n    equals: (\n        a: ValueObject<unknown, unknown>,\n        b: ValueObject<unknown, unknown>,\n    ) => boolean;\n};\n\n/**\n * Base class for value objects — domain concepts defined entirely by their\n * contents, with no identity of their own. Two value objects are\n * interchangeable when they hold equal data, which is the opposite of an\n * {@link Entity} (compared by id). Money, a CPF, a date range: replacing one\n * instance with an equal one changes nothing about the model.\n *\n * Immutability is the defining guarantee here. The wrapped `value` is\n * deep-frozen on construction, so a value object can be shared freely without\n * any risk of a consumer mutating shared state. Subclasses seal the instance\n * itself with {@link finalize} once their own fields are set.\n *\n * One exception: nested `Date` instances are cloned but NOT frozen —\n * `Object.freeze` does not block `setTime`/`setFullYear`, so a consumer of\n * `value` can still mutate an inner `Date` in place. Store instants as ISO\n * strings or epoch timestamps in the wrapped state (converting to `Date` only\n * in an accessor) when that guarantee matters.\n *\n * @typeParam T - The shape of the wrapped data.\n * @typeParam P - The primitive form produced by {@link toPrimitive} / {@link toJSON}.\n */\n@version(\"1.0\")\nabstract class ValueObject<T, P> {\n    declare public static readonly CONTRACT_VERSION: ContractVersion;\n\n    /**\n     * Registry of equality plugins shared by every value object. Empty by\n     * default — when nothing is registered, {@link equals} falls back to a\n     * structural comparison of the wrapped `value`. Hosts register a plugin\n     * (e.g. `lodash.isEqual`) once at startup to customise equality globally.\n     */\n    public static readonly plugins =\n        new PluginManager<ValueObjectPluginContract>();\n\n    /** The wrapped data, deep-frozen so it can never be mutated after construction. */\n    public readonly value: DeepReadonly<T>;\n\n    /**\n     * Wraps `value`, deep-freezing it so the value object is immutable from the\n     * moment it exists. Declared `protected` because value objects are built\n     * through a validating subclass factory, never instantiated directly.\n     */\n    protected constructor(value: T) {\n        this.value = makeImmutable(value);\n    }\n\n    /**\n     * The schema/contract version stamped on this value-object type by the\n     * `@version` decorator — used to detect state persisted under an older shape.\n     */\n    public get contractVersion(): ContractVersion {\n        return (this.constructor as typeof ValueObject).CONTRACT_VERSION;\n    }\n\n    /**\n     * Freezes the instance shell, blocking reassignment of any own field.\n     *\n     * `value` is already deep-frozen by the constructor, so the wrapped data is\n     * immutable regardless. The instance itself is NOT frozen automatically\n     * because a subclass may still need to assign its own fields after\n     * `super(value)` runs. Call `finalize()` at the very end of the subclass\n     * constructor (after all fields are set) to make the whole value object\n     * immutable.\n     */\n    protected finalize(): void {\n        Object.freeze(this);\n    }\n\n    /**\n     * Hook for `JSON.stringify`. Delegates to {@link toPrimitive} so a value\n     * object serializes to its primitive form rather than exposing the internal\n     * `value` wrapper.\n     */\n    public toJSON(): P {\n        return this.toPrimitive();\n    }\n\n    /**\n     * Compares this value object with another by content. Because value objects\n     * carry no identity, two independently constructed instances holding the\n     * same data are considered equal.\n     *\n     * Delegates to the registered equality {@link plugins}; with no plugin\n     * registered it falls back to comparing the serialized wrapped `value`,\n     * with object keys sorted so insertion order (e.g. code-built vs\n     * JSON-rehydrated) never affects the result.\n     * Subclasses may still override for a faster or domain-specific comparison.\n     */\n    public equals(other: this): boolean {\n        return ValueObject.plugins.invoke(\"equals\", [this, other], {\n            fallback: (a, b) =>\n                stableStringify(a.value) === stableStringify(b.value),\n        });\n    }\n\n    /**\n     * Projects the value object down to a plain, serializable primitive form —\n     * the representation suitable for persistence, transport, or comparison.\n     */\n    public abstract toPrimitive(): P;\n}\n\nexport { type DeepReadonly, ValueObject, type ValueObjectPluginContract };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAA,cAAA,MACe,YAAkB;;;;;iBAUzB,IAAIA,eAAAA,cAAyC;;;;;;;CAUjD,YAAsB,OAAU;EAC5B,KAAK,QAAQC,kBAAAA,cAAc,KAAK;CACpC;;;;;CAMA,IAAW,kBAAmC;EAC1C,OAAQ,KAAK,YAAmC;CACpD;;;;;;;;;;;CAYA,WAA2B;EACvB,OAAO,OAAO,IAAI;CACtB;;;;;;CAOA,SAAmB;EACf,OAAO,KAAK,YAAY;CAC5B;;;;;;;;;;;;CAaA,OAAc,OAAsB;EAChC,OAAA,aAAmB,QAAQ,OAAO,UAAU,CAAC,MAAM,KAAK,GAAG,EACvD,WAAW,GAAG,MACVC,yBAAAA,gBAAgB,EAAE,KAAK,MAAMA,yBAAAA,gBAAgB,EAAE,KAAK,EAC5D,CAAC;CACL;AAOJ;2DA/ECC,kBAAAA,QAAQ,KAAK,CAAA,GAAA,WAAA"}