@cullet/erp-core 1.4.0 → 2.0.0

package/dist/gate-v1-payload.schema.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"gate-v1-payload.schema.cjs","names":["z","z","Result"],"sources":["../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> = z.lazy(() =>\n    z.union([\n        conditionLeafNodeSchema,\n        z\n            .object({\n                and: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                or: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                not: conditionNodeSchema,\n            })\n            .strict(),\n    ]),\n);\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;AAQA,MAAM,oBAAoBA,IAAAA,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwDA,IAAAA,EAChE,OAAO;CACJ,OAAOA,IAAAA,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAOA,IAAAA,EAAE,QAAQ;CACjB,WAAWA,IAAAA,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAEZ,MAAa,sBAAgDA,IAAAA,EAAE,WAC3DA,IAAAA,EAAE,MAAM;CACJ;CACAA,IAAAA,EACK,OAAO,EACJ,KAAKA,IAAAA,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC3C,CAAC,EACA,OAAO;CACZA,IAAAA,EACK,OAAO,EACJ,IAAIA,IAAAA,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC1C,CAAC,EACA,OAAO;CACZA,IAAAA,EACK,OAAO,EACJ,KAAK,oBACT,CAAC,EACA,OAAO;AAChB,CAAC,CACL;;;ACpCA,IAAa,sBAAb,MAAa,oBAAoB;;gBACJC,IAAAA,EAAE,MAAM,CAC7BA,IAAAA,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZA,IAAAA,EACK,OAAO;GACJ,SAAS;GACT,gBAAgBA,IAAAA,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAOC,eAAAA,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAOA,eAAAA,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}
+{"version":3,"file":"gate-v1-payload.schema.cjs","names":["z","z","Result"],"sources":["../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\n// Cap nesting depth so an adversarially deep payload fails validation instead\n// of overflowing the stack during parse: zod recurses once per level, and the\n// old `z.lazy` schema was unbounded. The schema is built to exactly this depth\n// (leaf-only past it), so a too-deep tree is rejected at the boundary without\n// deep recursion. 32 is far beyond any hand-written policy — raise it only with\n// a matching stack-safety review.\nexport const MAX_CONDITION_DEPTH = 32;\n\nfunction boundedConditionNodeSchema(depth: number): z.ZodType<ConditionNode> {\n    if (depth <= 1) {\n        return conditionLeafNodeSchema;\n    }\n\n    const child = boundedConditionNodeSchema(depth - 1);\n    return z.union([\n        conditionLeafNodeSchema,\n        z.object({ and: z.array(child).min(1) }).strict(),\n        z.object({ or: z.array(child).min(1) }).strict(),\n        z.object({ not: child }).strict(),\n    ]) as z.ZodType<ConditionNode>;\n}\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> =\n    boundedConditionNodeSchema(MAX_CONDITION_DEPTH);\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;AAQA,MAAM,oBAAoBA,IAAAA,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwDA,IAAAA,EAChE,OAAO;CACJ,OAAOA,IAAAA,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAOA,IAAAA,EAAE,QAAQ;CACjB,WAAWA,IAAAA,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAUZ,SAAS,2BAA2B,OAAyC;CACzE,IAAI,SAAS,GACT,OAAO;CAGX,MAAM,QAAQ,2BAA2B,QAAQ,CAAC;CAClD,OAAOA,IAAAA,EAAE,MAAM;EACX;EACAA,IAAAA,EAAE,OAAO,EAAE,KAAKA,IAAAA,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO;EAChDA,IAAAA,EAAE,OAAO,EAAE,IAAIA,IAAAA,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO;EAC/CA,IAAAA,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,EAAE,OAAO;CACpC,CAAC;AACL;AAEA,MAAa,sBACT,2BAAA,EAA8C;;;ACxClD,IAAa,sBAAb,MAAa,oBAAoB;;gBACJC,IAAAA,EAAE,MAAM,CAC7BA,IAAAA,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZA,IAAAA,EACK,OAAO;GACJ,SAAS;GACT,gBAAgBA,IAAAA,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAOC,eAAAA,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAOA,eAAAA,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}

package/dist/gate-v1-payload.schema.js

@@ -19,12 +19,17 @@ const conditionLeafNodeSchema = z.object({
 	value: z.unknown(),
 	allowNull: z.literal(true).optional()
 }).strict();
-const conditionNodeSchema = z.lazy(() => z.union([
-	conditionLeafNodeSchema,
-	z.object({ and: z.array(conditionNodeSchema).min(1) }).strict(),
-	z.object({ or: z.array(conditionNodeSchema).min(1) }).strict(),
-	z.object({ not: conditionNodeSchema }).strict()
-]));
+function boundedConditionNodeSchema(depth) {
+	if (depth <= 1) return conditionLeafNodeSchema;
+	const child = boundedConditionNodeSchema(depth - 1);
+	return z.union([
+		conditionLeafNodeSchema,
+		z.object({ and: z.array(child).min(1) }).strict(),
+		z.object({ or: z.array(child).min(1) }).strict(),
+		z.object({ not: child }).strict()
+	]);
+}
+const conditionNodeSchema = boundedConditionNodeSchema(32);
 //#endregion
 //#region src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts
 var GatePayloadSchemaV1 = class GatePayloadSchemaV1 {

package/dist/gate-v1-payload.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-v1-payload.schema.js","names":[],"sources":["../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> = z.lazy(() =>\n    z.union([\n        conditionLeafNodeSchema,\n        z\n            .object({\n                and: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                or: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                not: conditionNodeSchema,\n            })\n            .strict(),\n    ]),\n);\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;AAQA,MAAM,oBAAoB,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwD,EAChE,OAAO;CACJ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAO,EAAE,QAAQ;CACjB,WAAW,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAEZ,MAAa,sBAAgD,EAAE,WAC3D,EAAE,MAAM;CACJ;CACA,EACK,OAAO,EACJ,KAAK,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC3C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,IAAI,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC1C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,KAAK,oBACT,CAAC,EACA,OAAO;AAChB,CAAC,CACL;;;ACpCA,IAAa,sBAAb,MAAa,oBAAoB;;gBACJ,EAAE,MAAM,CAC7B,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZ,EACK,OAAO;GACJ,SAAS;GACT,gBAAgB,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAO,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAO,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}
+{"version":3,"file":"gate-v1-payload.schema.js","names":[],"sources":["../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\n// Cap nesting depth so an adversarially deep payload fails validation instead\n// of overflowing the stack during parse: zod recurses once per level, and the\n// old `z.lazy` schema was unbounded. The schema is built to exactly this depth\n// (leaf-only past it), so a too-deep tree is rejected at the boundary without\n// deep recursion. 32 is far beyond any hand-written policy — raise it only with\n// a matching stack-safety review.\nexport const MAX_CONDITION_DEPTH = 32;\n\nfunction boundedConditionNodeSchema(depth: number): z.ZodType<ConditionNode> {\n    if (depth <= 1) {\n        return conditionLeafNodeSchema;\n    }\n\n    const child = boundedConditionNodeSchema(depth - 1);\n    return z.union([\n        conditionLeafNodeSchema,\n        z.object({ and: z.array(child).min(1) }).strict(),\n        z.object({ or: z.array(child).min(1) }).strict(),\n        z.object({ not: child }).strict(),\n    ]) as z.ZodType<ConditionNode>;\n}\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> =\n    boundedConditionNodeSchema(MAX_CONDITION_DEPTH);\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;AAQA,MAAM,oBAAoB,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwD,EAChE,OAAO;CACJ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAO,EAAE,QAAQ;CACjB,WAAW,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAUZ,SAAS,2BAA2B,OAAyC;CACzE,IAAI,SAAS,GACT,OAAO;CAGX,MAAM,QAAQ,2BAA2B,QAAQ,CAAC;CAClD,OAAO,EAAE,MAAM;EACX;EACA,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO;EAChD,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO;EAC/C,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,EAAE,OAAO;CACpC,CAAC;AACL;AAEA,MAAa,sBACT,2BAAA,EAA8C;;;ACxClD,IAAa,sBAAb,MAAa,oBAAoB;;gBACJ,EAAE,MAAM,CAC7B,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZ,EACK,OAAO;GACJ,SAAS;GACT,gBAAgB,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAO,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAO,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}

package/dist/hashing.cjs

@@ -1,47 +1,11 @@
+const require_stable_stringify = require("./stable-stringify.cjs");
 let node_crypto = require("node:crypto");
 //#region src/core/shared/hashing.ts
-const CIRCULAR_STRUCTURE_MESSAGE = "Cannot stably stringify a circular structure";
 function sha256Hex(value) {
 	return (0, node_crypto.createHash)("sha256").update(value, "utf8").digest("hex");
 }
-function sortKeysDeep(value, seen) {
-	if (Array.isArray(value)) {
-		if (seen.has(value)) throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);
-		seen.add(value);
-		const mapped = value.map((item) => sortKeysDeep(item, seen));
-		seen.delete(value);
-		return mapped;
-	}
-	if (value instanceof Date) return value;
-	if (value && typeof value === "object") {
-		if (seen.has(value)) throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);
-		seen.add(value);
-		const record = value;
-		const ordered = Object.create(null);
-		for (const key of Object.keys(record).sort()) ordered[key] = sortKeysDeep(record[key], seen);
-		seen.delete(value);
-		return ordered;
-	}
-	return value;
-}
-/**
-* Deterministic JSON string with object keys sorted recursively, so key order
-* does not affect the output.
-*
-* Follows `JSON.stringify` semantics for the values it serializes: `undefined`,
-* functions and symbols are dropped, non-finite numbers become `null`, `bigint`
-* throws, and `Map`/`Set` serialize as `{}`. Distinct payloads can therefore
-* collapse to the same string — for collision-resistant hashing use
-* `PolicyHashing.canonicalJson` (policies/utils), which rejects those values
-* up front.
-*
-* @throws {TypeError} On circular references (mirroring `JSON.stringify`).
-*/
-function stableStringify(value) {
-	return JSON.stringify(sortKeysDeep(value, /* @__PURE__ */ new WeakSet()));
-}
 function payloadHash(value) {
-	return sha256Hex(stableStringify(value));
+	return sha256Hex(require_stable_stringify.canonicalStringify(value));
 }
 //#endregion
 Object.defineProperty(exports, "payloadHash", {
@@ -56,11 +20,5 @@ Object.defineProperty(exports, "sha256Hex", {
 		return sha256Hex;
 	}
 });
-Object.defineProperty(exports, "stableStringify", {
-	enumerable: true,
-	get: function() {
-		return stableStringify;
-	}
-});
 
 //# sourceMappingURL=hashing.cjs.map

package/dist/hashing.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"hashing.cjs","names":[],"sources":["../src/core/shared/hashing.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nconst CIRCULAR_STRUCTURE_MESSAGE =\n    \"Cannot stably stringify a circular structure\";\n\nfunction sha256Hex(value: string): string {\n    return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\n// `seen` holds the current traversal branch so true cycles are rejected while\n// repeated (acyclic) references are still serialized — matching JSON.stringify.\nfunction sortKeysDeep(value: unknown, seen: WeakSet<object>): unknown {\n    if (Array.isArray(value)) {\n        if (seen.has(value)) {\n            throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);\n        }\n        seen.add(value);\n        const mapped = value.map((item) => sortKeysDeep(item, seen));\n        seen.delete(value);\n        return mapped;\n    }\n\n    if (value instanceof Date) {\n        return value;\n    }\n\n    if (value && typeof value === \"object\") {\n        if (seen.has(value)) {\n            throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);\n        }\n        seen.add(value);\n        const record = value as Record<string, unknown>;\n        const ordered = Object.create(null) as Record<string, unknown>;\n\n        for (const key of Object.keys(record).sort()) {\n            ordered[key] = sortKeysDeep(record[key], seen);\n        }\n        seen.delete(value);\n\n        return ordered;\n    }\n\n    return value;\n}\n\n/**\n * Deterministic JSON string with object keys sorted recursively, so key order\n * does not affect the output.\n *\n * Follows `JSON.stringify` semantics for the values it serializes: `undefined`,\n * functions and symbols are dropped, non-finite numbers become `null`, `bigint`\n * throws, and `Map`/`Set` serialize as `{}`. Distinct payloads can therefore\n * collapse to the same string — for collision-resistant hashing use\n * `PolicyHashing.canonicalJson` (policies/utils), which rejects those values\n * up front.\n *\n * @throws {TypeError} On circular references (mirroring `JSON.stringify`).\n */\nfunction stableStringify(value: unknown): string {\n    return JSON.stringify(sortKeysDeep(value, new WeakSet<object>()));\n}\n\nfunction payloadHash(value: unknown): string {\n    return sha256Hex(stableStringify(value));\n}\n\nexport { payloadHash, sha256Hex, stableStringify };\n"],"mappings":";;AAEA,MAAM,6BACF;AAEJ,SAAS,UAAU,OAAuB;CACtC,QAAA,GAAA,YAAA,YAAkB,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAClE;AAIA,SAAS,aAAa,OAAgB,MAAgC;CAClE,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,IAAI,KAAK,IAAI,KAAK,GACd,MAAM,IAAI,UAAU,0BAA0B;EAElD,KAAK,IAAI,KAAK;EACd,MAAM,SAAS,MAAM,KAAK,SAAS,aAAa,MAAM,IAAI,CAAC;EAC3D,KAAK,OAAO,KAAK;EACjB,OAAO;CACX;CAEA,IAAI,iBAAiB,MACjB,OAAO;CAGX,IAAI,SAAS,OAAO,UAAU,UAAU;EACpC,IAAI,KAAK,IAAI,KAAK,GACd,MAAM,IAAI,UAAU,0BAA0B;EAElD,KAAK,IAAI,KAAK;EACd,MAAM,SAAS;EACf,MAAM,UAAU,OAAO,OAAO,IAAI;EAElC,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,GACvC,QAAQ,OAAO,aAAa,OAAO,MAAM,IAAI;EAEjD,KAAK,OAAO,KAAK;EAEjB,OAAO;CACX;CAEA,OAAO;AACX;;;;;;;;;;;;;;AAeA,SAAS,gBAAgB,OAAwB;CAC7C,OAAO,KAAK,UAAU,aAAa,uBAAO,IAAI,QAAgB,CAAC,CAAC;AACpE;AAEA,SAAS,YAAY,OAAwB;CACzC,OAAO,UAAU,gBAAgB,KAAK,CAAC;AAC3C"}
+{"version":3,"file":"hashing.cjs","names":["canonicalStringify"],"sources":["../src/core/shared/hashing.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { canonicalStringify } from \"./stable-stringify.js\";\n\nfunction sha256Hex(value: string): string {\n    return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\n// Strict by design: hashes the collision-resistant canonical form, so payloads\n// that differ only in values `JSON.stringify` would drop (undefined, NaN, …)\n// produce distinct digests instead of silently colliding.\nfunction payloadHash(value: unknown): string {\n    return sha256Hex(canonicalStringify(value));\n}\n\nexport { payloadHash, sha256Hex };\n"],"mappings":";;;AAIA,SAAS,UAAU,OAAuB;CACtC,QAAA,GAAA,YAAA,YAAkB,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAClE;AAKA,SAAS,YAAY,OAAwB;CACzC,OAAO,UAAUA,yBAAAA,mBAAmB,KAAK,CAAC;AAC9C"}

package/dist/hashing.js

@@ -1,49 +1,13 @@
+import { t as canonicalStringify } from "./stable-stringify.js";
 import { createHash } from "node:crypto";
 //#region src/core/shared/hashing.ts
-const CIRCULAR_STRUCTURE_MESSAGE = "Cannot stably stringify a circular structure";
 function sha256Hex(value) {
 	return createHash("sha256").update(value, "utf8").digest("hex");
 }
-function sortKeysDeep(value, seen) {
-	if (Array.isArray(value)) {
-		if (seen.has(value)) throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);
-		seen.add(value);
-		const mapped = value.map((item) => sortKeysDeep(item, seen));
-		seen.delete(value);
-		return mapped;
-	}
-	if (value instanceof Date) return value;
-	if (value && typeof value === "object") {
-		if (seen.has(value)) throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);
-		seen.add(value);
-		const record = value;
-		const ordered = Object.create(null);
-		for (const key of Object.keys(record).sort()) ordered[key] = sortKeysDeep(record[key], seen);
-		seen.delete(value);
-		return ordered;
-	}
-	return value;
-}
-/**
-* Deterministic JSON string with object keys sorted recursively, so key order
-* does not affect the output.
-*
-* Follows `JSON.stringify` semantics for the values it serializes: `undefined`,
-* functions and symbols are dropped, non-finite numbers become `null`, `bigint`
-* throws, and `Map`/`Set` serialize as `{}`. Distinct payloads can therefore
-* collapse to the same string — for collision-resistant hashing use
-* `PolicyHashing.canonicalJson` (policies/utils), which rejects those values
-* up front.
-*
-* @throws {TypeError} On circular references (mirroring `JSON.stringify`).
-*/
-function stableStringify(value) {
-	return JSON.stringify(sortKeysDeep(value, /* @__PURE__ */ new WeakSet()));
-}
 function payloadHash(value) {
-	return sha256Hex(stableStringify(value));
+	return sha256Hex(canonicalStringify(value));
 }
 //#endregion
-export { sha256Hex as n, stableStringify as r, payloadHash as t };
+export { sha256Hex as n, payloadHash as t };
 
 //# sourceMappingURL=hashing.js.map

package/dist/hashing.js.map

@@ -1 +1 @@
-{"version":3,"file":"hashing.js","names":[],"sources":["../src/core/shared/hashing.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nconst CIRCULAR_STRUCTURE_MESSAGE =\n    \"Cannot stably stringify a circular structure\";\n\nfunction sha256Hex(value: string): string {\n    return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\n// `seen` holds the current traversal branch so true cycles are rejected while\n// repeated (acyclic) references are still serialized — matching JSON.stringify.\nfunction sortKeysDeep(value: unknown, seen: WeakSet<object>): unknown {\n    if (Array.isArray(value)) {\n        if (seen.has(value)) {\n            throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);\n        }\n        seen.add(value);\n        const mapped = value.map((item) => sortKeysDeep(item, seen));\n        seen.delete(value);\n        return mapped;\n    }\n\n    if (value instanceof Date) {\n        return value;\n    }\n\n    if (value && typeof value === \"object\") {\n        if (seen.has(value)) {\n            throw new TypeError(CIRCULAR_STRUCTURE_MESSAGE);\n        }\n        seen.add(value);\n        const record = value as Record<string, unknown>;\n        const ordered = Object.create(null) as Record<string, unknown>;\n\n        for (const key of Object.keys(record).sort()) {\n            ordered[key] = sortKeysDeep(record[key], seen);\n        }\n        seen.delete(value);\n\n        return ordered;\n    }\n\n    return value;\n}\n\n/**\n * Deterministic JSON string with object keys sorted recursively, so key order\n * does not affect the output.\n *\n * Follows `JSON.stringify` semantics for the values it serializes: `undefined`,\n * functions and symbols are dropped, non-finite numbers become `null`, `bigint`\n * throws, and `Map`/`Set` serialize as `{}`. Distinct payloads can therefore\n * collapse to the same string — for collision-resistant hashing use\n * `PolicyHashing.canonicalJson` (policies/utils), which rejects those values\n * up front.\n *\n * @throws {TypeError} On circular references (mirroring `JSON.stringify`).\n */\nfunction stableStringify(value: unknown): string {\n    return JSON.stringify(sortKeysDeep(value, new WeakSet<object>()));\n}\n\nfunction payloadHash(value: unknown): string {\n    return sha256Hex(stableStringify(value));\n}\n\nexport { payloadHash, sha256Hex, stableStringify };\n"],"mappings":";;AAEA,MAAM,6BACF;AAEJ,SAAS,UAAU,OAAuB;CACtC,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAClE;AAIA,SAAS,aAAa,OAAgB,MAAgC;CAClE,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,IAAI,KAAK,IAAI,KAAK,GACd,MAAM,IAAI,UAAU,0BAA0B;EAElD,KAAK,IAAI,KAAK;EACd,MAAM,SAAS,MAAM,KAAK,SAAS,aAAa,MAAM,IAAI,CAAC;EAC3D,KAAK,OAAO,KAAK;EACjB,OAAO;CACX;CAEA,IAAI,iBAAiB,MACjB,OAAO;CAGX,IAAI,SAAS,OAAO,UAAU,UAAU;EACpC,IAAI,KAAK,IAAI,KAAK,GACd,MAAM,IAAI,UAAU,0BAA0B;EAElD,KAAK,IAAI,KAAK;EACd,MAAM,SAAS;EACf,MAAM,UAAU,OAAO,OAAO,IAAI;EAElC,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,GACvC,QAAQ,OAAO,aAAa,OAAO,MAAM,IAAI;EAEjD,KAAK,OAAO,KAAK;EAEjB,OAAO;CACX;CAEA,OAAO;AACX;;;;;;;;;;;;;;AAeA,SAAS,gBAAgB,OAAwB;CAC7C,OAAO,KAAK,UAAU,aAAa,uBAAO,IAAI,QAAgB,CAAC,CAAC;AACpE;AAEA,SAAS,YAAY,OAAwB;CACzC,OAAO,UAAU,gBAAgB,KAAK,CAAC;AAC3C"}
+{"version":3,"file":"hashing.js","names":[],"sources":["../src/core/shared/hashing.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { canonicalStringify } from \"./stable-stringify.js\";\n\nfunction sha256Hex(value: string): string {\n    return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\n// Strict by design: hashes the collision-resistant canonical form, so payloads\n// that differ only in values `JSON.stringify` would drop (undefined, NaN, …)\n// produce distinct digests instead of silently colliding.\nfunction payloadHash(value: unknown): string {\n    return sha256Hex(canonicalStringify(value));\n}\n\nexport { payloadHash, sha256Hex };\n"],"mappings":";;;AAIA,SAAS,UAAU,OAAuB;CACtC,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAClE;AAKA,SAAS,YAAY,OAAwB;CACzC,OAAO,UAAU,mBAAmB,KAAK,CAAC;AAC9C"}

package/dist/immutable.cjs

@@ -2,8 +2,26 @@ const require_invariant_violation_exception = require("./invariant-violation-exc
 //#region src/core/versioning/version.ts
 const CONTRACT_VERSION_PROPERTY = "CONTRACT_VERSION";
 const CONTRACT_VERSION_PATTERN = /^\d+\.\d+$/;
+/**
+* Class decorator that stamps a `MAJOR.MINOR` structural contract version onto
+* the class as a static `CONTRACT_VERSION` property.
+*
+* The property is defined **non-writable, non-configurable and non-enumerable**
+* on purpose: it must not be reassigned or redefined (tampering with a contract
+* version silently corrupts migration decisions), and keeping it off enumeration
+* excludes it from `JSON.stringify`/`for..in`. A consequence of
+* `configurable: false` is that decorating the same class twice throws
+* `TypeError: Cannot redefine property` — a deliberate fail-fast.
+*
+* Note on inheritance: a subclass that is not re-decorated inherits its base's
+* `CONTRACT_VERSION` through the static prototype chain. Re-decorate any
+* subclass whose persisted shape diverges from its base.
+*
+* @throws {InvariantViolationException} When `contractVersion` is not
+*   `MAJOR.MINOR` (validated at module-load time, when the decorator runs).
+*/
 function version(contractVersion) {
-	if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) throw new TypeError(`Invalid contract version "${contractVersion}". Expected MAJOR.MINOR.`);
+	if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) throw new require_invariant_violation_exception.InvariantViolationException(`Invalid contract version "${contractVersion}". Expected MAJOR.MINOR.`);
 	return (target) => {
 		Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {
 			value: contractVersion,
@@ -14,14 +32,6 @@ function version(contractVersion) {
 	};
 }
 //#endregion
-//#region \0@oxc-project+runtime@0.132.0/helpers/decorate.js
-function __decorate(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-//#endregion
 //#region src/core/shared/immutable.ts
 function deepFreeze(value) {
 	return deepFreezeInternal(value, /* @__PURE__ */ new WeakSet());
@@ -35,7 +45,10 @@ function deepFreezeInternal(value, seen) {
 		return Object.freeze(value);
 	}
 	const objectValue = value;
-	for (const propertyKey of Reflect.ownKeys(objectValue)) deepFreezeInternal(objectValue[propertyKey], seen);
+	for (const propertyKey of Reflect.ownKeys(objectValue)) {
+		const descriptor = Object.getOwnPropertyDescriptor(objectValue, propertyKey);
+		if (descriptor && "value" in descriptor) deepFreezeInternal(descriptor.value, seen);
+	}
 	return Object.freeze(value);
 }
 function makeImmutable(value) {
@@ -55,10 +68,10 @@ Object.defineProperty(exports, "CONTRACT_VERSION_PROPERTY", {
 		return CONTRACT_VERSION_PROPERTY;
 	}
 });
-Object.defineProperty(exports, "__decorate", {
+Object.defineProperty(exports, "deepFreeze", {
 	enumerable: true,
 	get: function() {
-		return __decorate;
+		return deepFreeze;
 	}
 });
 Object.defineProperty(exports, "makeImmutable", {

package/dist/immutable.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"immutable.cjs","names":["InvariantViolationException"],"sources":["../src/core/versioning/version.ts","../src/core/shared/immutable.ts"],"sourcesContent":["type ContractVersion = `${number}.${number}`;\n\ntype VersionedTarget = {\n    readonly prototype: object;\n};\n\nconst CONTRACT_VERSION_PROPERTY = \"CONTRACT_VERSION\" as const;\nconst CONTRACT_VERSION_PATTERN = /^\\d+\\.\\d+$/;\n\nfunction version<const TVersion extends ContractVersion>(\n    contractVersion: TVersion,\n) {\n    if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) {\n        throw new TypeError(\n            `Invalid contract version \"${contractVersion}\". Expected MAJOR.MINOR.`,\n        );\n    }\n\n    return (target: VersionedTarget): void => {\n        Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {\n            value: contractVersion,\n            writable: false,\n            configurable: false,\n            enumerable: false,\n        });\n    };\n}\n\nexport {\n    CONTRACT_VERSION_PROPERTY,\n    type ContractVersion,\n    version,\n    type VersionedTarget,\n};\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\ntype PrimitiveValue =\n    | bigint\n    | boolean\n    | null\n    | number\n    | string\n    | symbol\n    | undefined;\n\ntype DeepReadonly<T> = T extends PrimitiveValue | Date\n    ? T\n    : T extends readonly (infer TItem)[]\n      ? readonly DeepReadonly<TItem>[]\n      : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };\n\nfunction deepFreeze<T>(value: T): T {\n    return deepFreezeInternal(value, new WeakSet<object>());\n}\n\nfunction deepFreezeInternal<T>(value: T, seen: WeakSet<object>): T {\n    // Primitives and `null` need no freezing. `Date` is intentionally returned\n    // as-is: `Object.freeze` cannot stop a Date's mutators (`setTime`,\n    // `setFullYear`, …) because they write an internal slot, not an own\n    // property — freezing it is a no-op against mutation. `makeImmutable`\n    // already hands us a `structuredClone` copy, so the caller's original Date\n    // is never aliased; deep-freezing of nested Dates is deliberately skipped.\n    if (typeof value !== \"object\" || value === null || value instanceof Date) {\n        return value;\n    }\n\n    // A value already on `seen` has been visited on this pass (cyclic graph or a\n    // shared reference); revisiting it would recurse forever.\n    if (seen.has(value)) {\n        return value;\n    }\n    seen.add(value);\n\n    if (Array.isArray(value)) {\n        for (const item of value) {\n            deepFreezeInternal(item, seen);\n        }\n\n        return Object.freeze(value);\n    }\n\n    const objectValue = value as Record<PropertyKey, object | PrimitiveValue>;\n\n    for (const propertyKey of Reflect.ownKeys(objectValue)) {\n        deepFreezeInternal(objectValue[propertyKey], seen);\n    }\n\n    return Object.freeze(value);\n}\n\nfunction makeImmutable<T>(value: T): DeepReadonly<T> {\n    if (typeof value !== \"object\" || value === null) {\n        return value as DeepReadonly<T>;\n    }\n\n    let snapshot: T;\n    try {\n        snapshot = structuredClone(value);\n    } catch (error) {\n        // `structuredClone` throws `DataCloneError` for functions, symbols and\n        // class instances. Surface it as a domain invariant instead of leaking\n        // a host-specific runtime error to callers building value objects.\n        throw new InvariantViolationException(\n            `makeImmutable requires a structured-cloneable value: ${\n                error instanceof Error ? error.message : String(error)\n            }`,\n        );\n    }\n\n    return deepFreeze(snapshot) as DeepReadonly<T>;\n}\n\nexport { deepFreeze, makeImmutable, type DeepReadonly };\n"],"mappings":";;AAMA,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AAEjC,SAAS,QACL,iBACF;CACE,IAAI,CAAC,yBAAyB,KAAK,eAAe,GAC9C,MAAM,IAAI,UACN,6BAA6B,gBAAgB,yBACjD;CAGJ,QAAQ,WAAkC;EACtC,OAAO,eAAe,QAAQ,2BAA2B;GACrD,OAAO;GACP,UAAU;GACV,cAAc;GACd,YAAY;EAChB,CAAC;CACL;AACJ;;;;;;;;;;;ACTA,SAAS,WAAc,OAAa;CAChC,OAAO,mBAAmB,uBAAO,IAAI,QAAgB,CAAC;AAC1D;AAEA,SAAS,mBAAsB,OAAU,MAA0B;CAO/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,iBAAiB,MAChE,OAAO;CAKX,IAAI,KAAK,IAAI,KAAK,GACd,OAAO;CAEX,KAAK,IAAI,KAAK;CAEd,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,KAAK,MAAM,QAAQ,OACf,mBAAmB,MAAM,IAAI;EAGjC,OAAO,OAAO,OAAO,KAAK;CAC9B;CAEA,MAAM,cAAc;CAEpB,KAAK,MAAM,eAAe,QAAQ,QAAQ,WAAW,GACjD,mBAAmB,YAAY,cAAc,IAAI;CAGrD,OAAO,OAAO,OAAO,KAAK;AAC9B;AAEA,SAAS,cAAiB,OAA2B;CACjD,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAGX,IAAI;CACJ,IAAI;EACA,WAAW,gBAAgB,KAAK;CACpC,SAAS,OAAO;EAIZ,MAAM,IAAIA,sCAAAA,4BACN,wDACI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAE7D;CACJ;CAEA,OAAO,WAAW,QAAQ;AAC9B"}
+{"version":3,"file":"immutable.cjs","names":["InvariantViolationException","InvariantViolationException"],"sources":["../src/core/versioning/version.ts","../src/core/shared/immutable.ts"],"sourcesContent":["import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\n/**\n * A structural contract version in `MAJOR.MINOR` form (e.g. `\"1.0\"`, `\"2.5\"`).\n *\n * The template-literal type is intentionally loose — it also accepts strings\n * the module rejects at runtime (e.g. `\"1.0.0\"` matches as `1` · `.` · `0.0`).\n * The runtime regex in {@link version} is the real guard; the type is only a\n * light hint.\n */\ntype ContractVersion = `${number}.${number}`;\n\n/** Anything a class decorator can stamp a static property onto. */\ntype VersionedTarget = {\n    readonly prototype: object;\n};\n\nconst CONTRACT_VERSION_PROPERTY = \"CONTRACT_VERSION\" as const;\nconst CONTRACT_VERSION_PATTERN = /^\\d+\\.\\d+$/;\n\n/**\n * Class decorator that stamps a `MAJOR.MINOR` structural contract version onto\n * the class as a static `CONTRACT_VERSION` property.\n *\n * The property is defined **non-writable, non-configurable and non-enumerable**\n * on purpose: it must not be reassigned or redefined (tampering with a contract\n * version silently corrupts migration decisions), and keeping it off enumeration\n * excludes it from `JSON.stringify`/`for..in`. A consequence of\n * `configurable: false` is that decorating the same class twice throws\n * `TypeError: Cannot redefine property` — a deliberate fail-fast.\n *\n * Note on inheritance: a subclass that is not re-decorated inherits its base's\n * `CONTRACT_VERSION` through the static prototype chain. Re-decorate any\n * subclass whose persisted shape diverges from its base.\n *\n * @throws {InvariantViolationException} When `contractVersion` is not\n *   `MAJOR.MINOR` (validated at module-load time, when the decorator runs).\n */\nfunction version<const TVersion extends ContractVersion>(\n    contractVersion: TVersion,\n) {\n    if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) {\n        throw new InvariantViolationException(\n            `Invalid contract version \"${contractVersion}\". Expected MAJOR.MINOR.`,\n        );\n    }\n\n    return (target: VersionedTarget): void => {\n        Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {\n            value: contractVersion,\n            writable: false,\n            configurable: false,\n            enumerable: false,\n        });\n    };\n}\n\nexport {\n    CONTRACT_VERSION_PROPERTY,\n    type ContractVersion,\n    version,\n    type VersionedTarget,\n};\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\ntype PrimitiveValue =\n    | bigint\n    | boolean\n    | null\n    | number\n    | string\n    | symbol\n    | undefined;\n\ntype DeepReadonly<T> = T extends PrimitiveValue | Date\n    ? T\n    : T extends readonly (infer TItem)[]\n      ? readonly DeepReadonly<TItem>[]\n      : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };\n\nfunction deepFreeze<T>(value: T): T {\n    return deepFreezeInternal(value, new WeakSet<object>());\n}\n\nfunction deepFreezeInternal<T>(value: T, seen: WeakSet<object>): T {\n    // Primitives and `null` need no freezing. `Date` is intentionally returned\n    // as-is: `Object.freeze` cannot stop a Date's mutators (`setTime`,\n    // `setFullYear`, …) because they write an internal slot, not an own\n    // property — freezing it is a no-op against mutation. `makeImmutable`\n    // already hands us a `structuredClone` copy, so the caller's original Date\n    // is never aliased; deep-freezing of nested Dates is deliberately skipped.\n    //\n    // The same no-op caveat applies to `Map`/`Set`: `Object.freeze` locks the\n    // wrapper's own properties but not `.set`/`.delete`/`.clear`, which mutate\n    // internal slots. A frozen Map is still mutable through its methods. We do\n    // not neuter those methods here (no value object wraps a Map today); if one\n    // ever does, its immutability guarantee would be false — handle it there.\n    if (typeof value !== \"object\" || value === null || value instanceof Date) {\n        return value;\n    }\n\n    // A value already on `seen` has been visited on this pass (cyclic graph or a\n    // shared reference); revisiting it would recurse forever.\n    if (seen.has(value)) {\n        return value;\n    }\n    seen.add(value);\n\n    if (Array.isArray(value)) {\n        for (const item of value) {\n            deepFreezeInternal(item, seen);\n        }\n\n        return Object.freeze(value);\n    }\n\n    const objectValue = value as Record<PropertyKey, object | PrimitiveValue>;\n\n    for (const propertyKey of Reflect.ownKeys(objectValue)) {\n        // Read through the descriptor rather than `objectValue[propertyKey]` so\n        // accessor properties are not invoked — a getter could have side effects\n        // or throw, and its computed result can't be frozen anyway. Only data\n        // properties hold a nested value worth recursing into.\n        const descriptor = Object.getOwnPropertyDescriptor(\n            objectValue,\n            propertyKey,\n        );\n        if (descriptor && \"value\" in descriptor) {\n            deepFreezeInternal(descriptor.value, seen);\n        }\n    }\n\n    return Object.freeze(value);\n}\n\nfunction makeImmutable<T>(value: T): DeepReadonly<T> {\n    if (typeof value !== \"object\" || value === null) {\n        return value as DeepReadonly<T>;\n    }\n\n    let snapshot: T;\n    try {\n        snapshot = structuredClone(value);\n    } catch (error) {\n        // `structuredClone` throws `DataCloneError` for functions and symbols.\n        // (Class instances do NOT throw — they are silently flattened to plain\n        // objects, prototype lost.) Surface the error as a domain invariant\n        // instead of leaking a host-specific runtime error to callers building\n        // value objects.\n        throw new InvariantViolationException(\n            `makeImmutable requires a structured-cloneable value: ${\n                error instanceof Error ? error.message : String(error)\n            }`,\n        );\n    }\n\n    return deepFreeze(snapshot) as DeepReadonly<T>;\n}\n\nexport { deepFreeze, makeImmutable, type DeepReadonly };\n"],"mappings":";;AAiBA,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;AAoBjC,SAAS,QACL,iBACF;CACE,IAAI,CAAC,yBAAyB,KAAK,eAAe,GAC9C,MAAM,IAAIA,sCAAAA,4BACN,6BAA6B,gBAAgB,yBACjD;CAGJ,QAAQ,WAAkC;EACtC,OAAO,eAAe,QAAQ,2BAA2B;GACrD,OAAO;GACP,UAAU;GACV,cAAc;GACd,YAAY;EAChB,CAAC;CACL;AACJ;;;ACtCA,SAAS,WAAc,OAAa;CAChC,OAAO,mBAAmB,uBAAO,IAAI,QAAgB,CAAC;AAC1D;AAEA,SAAS,mBAAsB,OAAU,MAA0B;CAa/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,iBAAiB,MAChE,OAAO;CAKX,IAAI,KAAK,IAAI,KAAK,GACd,OAAO;CAEX,KAAK,IAAI,KAAK;CAEd,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,KAAK,MAAM,QAAQ,OACf,mBAAmB,MAAM,IAAI;EAGjC,OAAO,OAAO,OAAO,KAAK;CAC9B;CAEA,MAAM,cAAc;CAEpB,KAAK,MAAM,eAAe,QAAQ,QAAQ,WAAW,GAAG;EAKpD,MAAM,aAAa,OAAO,yBACtB,aACA,WACJ;EACA,IAAI,cAAc,WAAW,YACzB,mBAAmB,WAAW,OAAO,IAAI;CAEjD;CAEA,OAAO,OAAO,OAAO,KAAK;AAC9B;AAEA,SAAS,cAAiB,OAA2B;CACjD,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAGX,IAAI;CACJ,IAAI;EACA,WAAW,gBAAgB,KAAK;CACpC,SAAS,OAAO;EAMZ,MAAM,IAAIC,sCAAAA,4BACN,wDACI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAE7D;CACJ;CAEA,OAAO,WAAW,QAAQ;AAC9B"}

package/dist/immutable.js

@@ -2,8 +2,26 @@ import { t as InvariantViolationException } from "./invariant-violation-exceptio
 //#region src/core/versioning/version.ts
 const CONTRACT_VERSION_PROPERTY = "CONTRACT_VERSION";
 const CONTRACT_VERSION_PATTERN = /^\d+\.\d+$/;
+/**
+* Class decorator that stamps a `MAJOR.MINOR` structural contract version onto
+* the class as a static `CONTRACT_VERSION` property.
+*
+* The property is defined **non-writable, non-configurable and non-enumerable**
+* on purpose: it must not be reassigned or redefined (tampering with a contract
+* version silently corrupts migration decisions), and keeping it off enumeration
+* excludes it from `JSON.stringify`/`for..in`. A consequence of
+* `configurable: false` is that decorating the same class twice throws
+* `TypeError: Cannot redefine property` — a deliberate fail-fast.
+*
+* Note on inheritance: a subclass that is not re-decorated inherits its base's
+* `CONTRACT_VERSION` through the static prototype chain. Re-decorate any
+* subclass whose persisted shape diverges from its base.
+*
+* @throws {InvariantViolationException} When `contractVersion` is not
+*   `MAJOR.MINOR` (validated at module-load time, when the decorator runs).
+*/
 function version(contractVersion) {
-	if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) throw new TypeError(`Invalid contract version "${contractVersion}". Expected MAJOR.MINOR.`);
+	if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) throw new InvariantViolationException(`Invalid contract version "${contractVersion}". Expected MAJOR.MINOR.`);
 	return (target) => {
 		Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {
 			value: contractVersion,
@@ -14,14 +32,6 @@ function version(contractVersion) {
 	};
 }
 //#endregion
-//#region \0@oxc-project+runtime@0.132.0/helpers/decorate.js
-function __decorate(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-//#endregion
 //#region src/core/shared/immutable.ts
 function deepFreeze(value) {
 	return deepFreezeInternal(value, /* @__PURE__ */ new WeakSet());
@@ -35,7 +45,10 @@ function deepFreezeInternal(value, seen) {
 		return Object.freeze(value);
 	}
 	const objectValue = value;
-	for (const propertyKey of Reflect.ownKeys(objectValue)) deepFreezeInternal(objectValue[propertyKey], seen);
+	for (const propertyKey of Reflect.ownKeys(objectValue)) {
+		const descriptor = Object.getOwnPropertyDescriptor(objectValue, propertyKey);
+		if (descriptor && "value" in descriptor) deepFreezeInternal(descriptor.value, seen);
+	}
 	return Object.freeze(value);
 }
 function makeImmutable(value) {
@@ -49,6 +62,6 @@ function makeImmutable(value) {
 	return deepFreeze(snapshot);
 }
 //#endregion
-export { version as i, __decorate as n, CONTRACT_VERSION_PROPERTY as r, makeImmutable as t };
+export { version as i, makeImmutable as n, CONTRACT_VERSION_PROPERTY as r, deepFreeze as t };
 
 //# sourceMappingURL=immutable.js.map

package/dist/immutable.js.map

@@ -1 +1 @@
-{"version":3,"file":"immutable.js","names":[],"sources":["../src/core/versioning/version.ts","../src/core/shared/immutable.ts"],"sourcesContent":["type ContractVersion = `${number}.${number}`;\n\ntype VersionedTarget = {\n    readonly prototype: object;\n};\n\nconst CONTRACT_VERSION_PROPERTY = \"CONTRACT_VERSION\" as const;\nconst CONTRACT_VERSION_PATTERN = /^\\d+\\.\\d+$/;\n\nfunction version<const TVersion extends ContractVersion>(\n    contractVersion: TVersion,\n) {\n    if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) {\n        throw new TypeError(\n            `Invalid contract version \"${contractVersion}\". Expected MAJOR.MINOR.`,\n        );\n    }\n\n    return (target: VersionedTarget): void => {\n        Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {\n            value: contractVersion,\n            writable: false,\n            configurable: false,\n            enumerable: false,\n        });\n    };\n}\n\nexport {\n    CONTRACT_VERSION_PROPERTY,\n    type ContractVersion,\n    version,\n    type VersionedTarget,\n};\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\ntype PrimitiveValue =\n    | bigint\n    | boolean\n    | null\n    | number\n    | string\n    | symbol\n    | undefined;\n\ntype DeepReadonly<T> = T extends PrimitiveValue | Date\n    ? T\n    : T extends readonly (infer TItem)[]\n      ? readonly DeepReadonly<TItem>[]\n      : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };\n\nfunction deepFreeze<T>(value: T): T {\n    return deepFreezeInternal(value, new WeakSet<object>());\n}\n\nfunction deepFreezeInternal<T>(value: T, seen: WeakSet<object>): T {\n    // Primitives and `null` need no freezing. `Date` is intentionally returned\n    // as-is: `Object.freeze` cannot stop a Date's mutators (`setTime`,\n    // `setFullYear`, …) because they write an internal slot, not an own\n    // property — freezing it is a no-op against mutation. `makeImmutable`\n    // already hands us a `structuredClone` copy, so the caller's original Date\n    // is never aliased; deep-freezing of nested Dates is deliberately skipped.\n    if (typeof value !== \"object\" || value === null || value instanceof Date) {\n        return value;\n    }\n\n    // A value already on `seen` has been visited on this pass (cyclic graph or a\n    // shared reference); revisiting it would recurse forever.\n    if (seen.has(value)) {\n        return value;\n    }\n    seen.add(value);\n\n    if (Array.isArray(value)) {\n        for (const item of value) {\n            deepFreezeInternal(item, seen);\n        }\n\n        return Object.freeze(value);\n    }\n\n    const objectValue = value as Record<PropertyKey, object | PrimitiveValue>;\n\n    for (const propertyKey of Reflect.ownKeys(objectValue)) {\n        deepFreezeInternal(objectValue[propertyKey], seen);\n    }\n\n    return Object.freeze(value);\n}\n\nfunction makeImmutable<T>(value: T): DeepReadonly<T> {\n    if (typeof value !== \"object\" || value === null) {\n        return value as DeepReadonly<T>;\n    }\n\n    let snapshot: T;\n    try {\n        snapshot = structuredClone(value);\n    } catch (error) {\n        // `structuredClone` throws `DataCloneError` for functions, symbols and\n        // class instances. Surface it as a domain invariant instead of leaking\n        // a host-specific runtime error to callers building value objects.\n        throw new InvariantViolationException(\n            `makeImmutable requires a structured-cloneable value: ${\n                error instanceof Error ? error.message : String(error)\n            }`,\n        );\n    }\n\n    return deepFreeze(snapshot) as DeepReadonly<T>;\n}\n\nexport { deepFreeze, makeImmutable, type DeepReadonly };\n"],"mappings":";;AAMA,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AAEjC,SAAS,QACL,iBACF;CACE,IAAI,CAAC,yBAAyB,KAAK,eAAe,GAC9C,MAAM,IAAI,UACN,6BAA6B,gBAAgB,yBACjD;CAGJ,QAAQ,WAAkC;EACtC,OAAO,eAAe,QAAQ,2BAA2B;GACrD,OAAO;GACP,UAAU;GACV,cAAc;GACd,YAAY;EAChB,CAAC;CACL;AACJ;;;;;;;;;;;ACTA,SAAS,WAAc,OAAa;CAChC,OAAO,mBAAmB,uBAAO,IAAI,QAAgB,CAAC;AAC1D;AAEA,SAAS,mBAAsB,OAAU,MAA0B;CAO/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,iBAAiB,MAChE,OAAO;CAKX,IAAI,KAAK,IAAI,KAAK,GACd,OAAO;CAEX,KAAK,IAAI,KAAK;CAEd,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,KAAK,MAAM,QAAQ,OACf,mBAAmB,MAAM,IAAI;EAGjC,OAAO,OAAO,OAAO,KAAK;CAC9B;CAEA,MAAM,cAAc;CAEpB,KAAK,MAAM,eAAe,QAAQ,QAAQ,WAAW,GACjD,mBAAmB,YAAY,cAAc,IAAI;CAGrD,OAAO,OAAO,OAAO,KAAK;AAC9B;AAEA,SAAS,cAAiB,OAA2B;CACjD,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAGX,IAAI;CACJ,IAAI;EACA,WAAW,gBAAgB,KAAK;CACpC,SAAS,OAAO;EAIZ,MAAM,IAAI,4BACN,wDACI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAE7D;CACJ;CAEA,OAAO,WAAW,QAAQ;AAC9B"}
+{"version":3,"file":"immutable.js","names":[],"sources":["../src/core/versioning/version.ts","../src/core/shared/immutable.ts"],"sourcesContent":["import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\n/**\n * A structural contract version in `MAJOR.MINOR` form (e.g. `\"1.0\"`, `\"2.5\"`).\n *\n * The template-literal type is intentionally loose — it also accepts strings\n * the module rejects at runtime (e.g. `\"1.0.0\"` matches as `1` · `.` · `0.0`).\n * The runtime regex in {@link version} is the real guard; the type is only a\n * light hint.\n */\ntype ContractVersion = `${number}.${number}`;\n\n/** Anything a class decorator can stamp a static property onto. */\ntype VersionedTarget = {\n    readonly prototype: object;\n};\n\nconst CONTRACT_VERSION_PROPERTY = \"CONTRACT_VERSION\" as const;\nconst CONTRACT_VERSION_PATTERN = /^\\d+\\.\\d+$/;\n\n/**\n * Class decorator that stamps a `MAJOR.MINOR` structural contract version onto\n * the class as a static `CONTRACT_VERSION` property.\n *\n * The property is defined **non-writable, non-configurable and non-enumerable**\n * on purpose: it must not be reassigned or redefined (tampering with a contract\n * version silently corrupts migration decisions), and keeping it off enumeration\n * excludes it from `JSON.stringify`/`for..in`. A consequence of\n * `configurable: false` is that decorating the same class twice throws\n * `TypeError: Cannot redefine property` — a deliberate fail-fast.\n *\n * Note on inheritance: a subclass that is not re-decorated inherits its base's\n * `CONTRACT_VERSION` through the static prototype chain. Re-decorate any\n * subclass whose persisted shape diverges from its base.\n *\n * @throws {InvariantViolationException} When `contractVersion` is not\n *   `MAJOR.MINOR` (validated at module-load time, when the decorator runs).\n */\nfunction version<const TVersion extends ContractVersion>(\n    contractVersion: TVersion,\n) {\n    if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) {\n        throw new InvariantViolationException(\n            `Invalid contract version \"${contractVersion}\". Expected MAJOR.MINOR.`,\n        );\n    }\n\n    return (target: VersionedTarget): void => {\n        Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {\n            value: contractVersion,\n            writable: false,\n            configurable: false,\n            enumerable: false,\n        });\n    };\n}\n\nexport {\n    CONTRACT_VERSION_PROPERTY,\n    type ContractVersion,\n    version,\n    type VersionedTarget,\n};\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\ntype PrimitiveValue =\n    | bigint\n    | boolean\n    | null\n    | number\n    | string\n    | symbol\n    | undefined;\n\ntype DeepReadonly<T> = T extends PrimitiveValue | Date\n    ? T\n    : T extends readonly (infer TItem)[]\n      ? readonly DeepReadonly<TItem>[]\n      : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };\n\nfunction deepFreeze<T>(value: T): T {\n    return deepFreezeInternal(value, new WeakSet<object>());\n}\n\nfunction deepFreezeInternal<T>(value: T, seen: WeakSet<object>): T {\n    // Primitives and `null` need no freezing. `Date` is intentionally returned\n    // as-is: `Object.freeze` cannot stop a Date's mutators (`setTime`,\n    // `setFullYear`, …) because they write an internal slot, not an own\n    // property — freezing it is a no-op against mutation. `makeImmutable`\n    // already hands us a `structuredClone` copy, so the caller's original Date\n    // is never aliased; deep-freezing of nested Dates is deliberately skipped.\n    //\n    // The same no-op caveat applies to `Map`/`Set`: `Object.freeze` locks the\n    // wrapper's own properties but not `.set`/`.delete`/`.clear`, which mutate\n    // internal slots. A frozen Map is still mutable through its methods. We do\n    // not neuter those methods here (no value object wraps a Map today); if one\n    // ever does, its immutability guarantee would be false — handle it there.\n    if (typeof value !== \"object\" || value === null || value instanceof Date) {\n        return value;\n    }\n\n    // A value already on `seen` has been visited on this pass (cyclic graph or a\n    // shared reference); revisiting it would recurse forever.\n    if (seen.has(value)) {\n        return value;\n    }\n    seen.add(value);\n\n    if (Array.isArray(value)) {\n        for (const item of value) {\n            deepFreezeInternal(item, seen);\n        }\n\n        return Object.freeze(value);\n    }\n\n    const objectValue = value as Record<PropertyKey, object | PrimitiveValue>;\n\n    for (const propertyKey of Reflect.ownKeys(objectValue)) {\n        // Read through the descriptor rather than `objectValue[propertyKey]` so\n        // accessor properties are not invoked — a getter could have side effects\n        // or throw, and its computed result can't be frozen anyway. Only data\n        // properties hold a nested value worth recursing into.\n        const descriptor = Object.getOwnPropertyDescriptor(\n            objectValue,\n            propertyKey,\n        );\n        if (descriptor && \"value\" in descriptor) {\n            deepFreezeInternal(descriptor.value, seen);\n        }\n    }\n\n    return Object.freeze(value);\n}\n\nfunction makeImmutable<T>(value: T): DeepReadonly<T> {\n    if (typeof value !== \"object\" || value === null) {\n        return value as DeepReadonly<T>;\n    }\n\n    let snapshot: T;\n    try {\n        snapshot = structuredClone(value);\n    } catch (error) {\n        // `structuredClone` throws `DataCloneError` for functions and symbols.\n        // (Class instances do NOT throw — they are silently flattened to plain\n        // objects, prototype lost.) Surface the error as a domain invariant\n        // instead of leaking a host-specific runtime error to callers building\n        // value objects.\n        throw new InvariantViolationException(\n            `makeImmutable requires a structured-cloneable value: ${\n                error instanceof Error ? error.message : String(error)\n            }`,\n        );\n    }\n\n    return deepFreeze(snapshot) as DeepReadonly<T>;\n}\n\nexport { deepFreeze, makeImmutable, type DeepReadonly };\n"],"mappings":";;AAiBA,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;AAoBjC,SAAS,QACL,iBACF;CACE,IAAI,CAAC,yBAAyB,KAAK,eAAe,GAC9C,MAAM,IAAI,4BACN,6BAA6B,gBAAgB,yBACjD;CAGJ,QAAQ,WAAkC;EACtC,OAAO,eAAe,QAAQ,2BAA2B;GACrD,OAAO;GACP,UAAU;GACV,cAAc;GACd,YAAY;EAChB,CAAC;CACL;AACJ;;;ACtCA,SAAS,WAAc,OAAa;CAChC,OAAO,mBAAmB,uBAAO,IAAI,QAAgB,CAAC;AAC1D;AAEA,SAAS,mBAAsB,OAAU,MAA0B;CAa/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,iBAAiB,MAChE,OAAO;CAKX,IAAI,KAAK,IAAI,KAAK,GACd,OAAO;CAEX,KAAK,IAAI,KAAK;CAEd,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,KAAK,MAAM,QAAQ,OACf,mBAAmB,MAAM,IAAI;EAGjC,OAAO,OAAO,OAAO,KAAK;CAC9B;CAEA,MAAM,cAAc;CAEpB,KAAK,MAAM,eAAe,QAAQ,QAAQ,WAAW,GAAG;EAKpD,MAAM,aAAa,OAAO,yBACtB,aACA,WACJ;EACA,IAAI,cAAc,WAAW,YACzB,mBAAmB,WAAW,OAAO,IAAI;CAEjD;CAEA,OAAO,OAAO,OAAO,KAAK;AAC9B;AAEA,SAAS,cAAiB,OAA2B;CACjD,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAGX,IAAI;CACJ,IAAI;EACA,WAAW,gBAAgB,KAAK;CACpC,SAAS,OAAO;EAMZ,MAAM,IAAI,4BACN,wDACI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAE7D;CACJ;CAEA,OAAO,WAAW,QAAQ;AAC9B"}

package/dist/index.cjs

@@ -1,21 +1,20 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_app_error = require("./app-error.cjs");
-const require_validation_error = require("./validation-error.cjs");
 const require_authorization_error = require("./authorization-error.cjs");
+const require_validation_error = require("./validation-error.cjs");
 const require_not_found_error = require("./not-found-error.cjs");
+const require_domain_exception = require("./domain-exception.cjs");
+const require_invariant_violation_exception = require("./invariant-violation-exception.cjs");
+const require_stable_stringify = require("./stable-stringify.cjs");
 const require_hashing = require("./hashing.cjs");
 const require_unexpected_error = require("./unexpected-error.cjs");
 const require_validation_code = require("./validation-code.cjs");
 const require_validation_field = require("./validation-field.cjs");
-const require_domain_exception = require("./domain-exception.cjs");
 const require_invalid_state_transition_exception = require("./invalid-state-transition-exception.cjs");
-const require_invariant_violation_exception = require("./invariant-violation-exception.cjs");
 const require_validation_exception = require("./validation-exception.cjs");
 const require_immutable = require("./immutable.cjs");
-const require_use_case = require("./use-case.cjs");
-const require_requested_by = require("./requested-by.cjs");
 const require_temporal_use_case = require("./temporal-use-case.cjs");
-const require_entity = require("./entity.cjs");
+const require_requested_by = require("./requested-by.cjs");
 const require_plugin = require("./plugin.cjs");
 const require_value_object = require("./value-object.cjs");
 const require_uuid_identifier = require("./uuid-identifier.cjs");
@@ -29,7 +28,7 @@ const require_domain_event_contracts = require("./domain-event-contracts.cjs");
 const require_outcome = require("./outcome.cjs");
 const require_gate_engine_registry = require("./gate-engine-registry.cjs");
 //#region src/version.ts
-const version$1 = "1.4.0";
+const version$1 = "2.0.0";
 //#endregion
 //#region src/index.ts
 const ERP_CORE_NAME = "erp-core";
@@ -73,7 +72,7 @@ exports.ERP_CORE_VERSION = ERP_CORE_VERSION;
 Object.defineProperty(exports, "Entity", {
 	enumerable: true,
 	get: function() {
-		return require_entity.Entity;
+		return require_uuid_identifier.Entity;
 	}
 });
 exports.EntityNotFoundException = require_invalid_state_transition_exception.EntityNotFoundException;
@@ -132,13 +131,18 @@ exports.SerializationInError = require_validation_error.SerializationInError;
 exports.SerializationMessages = require_validation_error.SerializationMessages;
 exports.SerializationOutError = require_validation_error.SerializationOutError;
 exports.TemporalError = require_validation_error.TemporalError;
-exports.TemporalUseCase = require_temporal_use_case.TemporalUseCase;
+Object.defineProperty(exports, "TemporalUseCase", {
+	enumerable: true,
+	get: function() {
+		return require_temporal_use_case.TemporalUseCase;
+	}
+});
 exports.UnexpectedError = require_unexpected_error.UnexpectedError;
 exports.UniqueConstraintViolationError = require_validation_error.UniqueConstraintViolationError;
 Object.defineProperty(exports, "UseCase", {
 	enumerable: true,
 	get: function() {
-		return require_use_case.UseCase;
+		return require_temporal_use_case.UseCase;
 	}
 });
 exports.UuidIdentifier = require_uuid_identifier.UuidIdentifier;
@@ -174,7 +178,7 @@ exports.registerNamespacedContextResolversIn = require_policy_service.registerNa
 exports.safePreview = require_validation_error.safePreview;
 exports.serializationErrorCode = require_app_error.serializationErrorCode;
 exports.sha256Hex = require_hashing.sha256Hex;
-exports.stableStringify = require_hashing.stableStringify;
+exports.stableStringify = require_stable_stringify.stableStringify;
 exports.translateUniqueViolationToDuplicate = require_validation_error.translateUniqueViolationToDuplicate;
 exports.version = require_immutable.version;
 

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["version","version"],"sources":["../src/version.ts","../src/index.ts"],"sourcesContent":["// Versao do kit, sincronizada com package.json por scripts/sync-kit-version.mjs.\n// Nao edite a mao: rode `npm run sync-kit-version` (ou e regenerado no release).\n//\n// Mantemos a versao aqui, dentro de src/, para que a copia full-control seja\n// auto-contida: ao copiar so o conteudo de src/, o entry nao depende de um\n// `../package.json` que deixaria de existir no projeto consumidor.\nexport const version = \"1.4.0\";\n","import { version } from \"./version.js\";\n\nexport * from \"./core/index.js\";\n\nexport const ERP_CORE_NAME = \"erp-core\";\nexport const ERP_CORE_VERSION = version;\n\nexport const erpCoreRelease = {\n    name: ERP_CORE_NAME,\n    version: ERP_CORE_VERSION,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,MAAaA,YAAU;;;ACFvB,MAAa,gBAAgB;AAC7B,MAAa,mBAAmBC;AAEhC,MAAa,iBAAiB;CAC1B,MAAM;CACN,SAAS;AACb"}
+{"version":3,"file":"index.cjs","names":["version","version"],"sources":["../src/version.ts","../src/index.ts"],"sourcesContent":["// Versao do kit, sincronizada com package.json por scripts/sync-kit-version.mjs.\n// Nao edite a mao: rode `npm run sync-kit-version` (ou e regenerado no release).\n//\n// Mantemos a versao aqui, dentro de src/, para que a copia full-control seja\n// auto-contida: ao copiar so o conteudo de src/, o entry nao depende de um\n// `../package.json` que deixaria de existir no projeto consumidor.\nexport const version = \"2.0.0\";\n","import { version } from \"./version.js\";\n\nexport * from \"./core/index.js\";\n\nexport const ERP_CORE_NAME = \"erp-core\";\nexport const ERP_CORE_VERSION = version;\n\nexport const erpCoreRelease = {\n    name: ERP_CORE_NAME,\n    version: ERP_CORE_VERSION,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,MAAaA,YAAU;;;ACFvB,MAAa,gBAAgB;AAC7B,MAAa,mBAAmBC;AAEhC,MAAa,iBAAiB;CAC1B,MAAM;CACN,SAAS;AACb"}

package/dist/index.d.cts

@@ -1,37 +1,36 @@
 import { n as RequestedByKind, t as RequestedBy } from "./requested-by.cjs";
-import { a as AbacPolicySet, c as AbacRuleProps, d as AbacAuthorizerPort, f as AbacAttributes, i as AbacDecision, l as RuleEffect, n as CompositeAuthorizer, o as CombiningAlgorithm, p as AbacRequest, r as AbacAuthorizer, s as AbacRule, t as CompositeAccessRequest, u as abacContext } from "./composite-authorizer.cjs";
+import { a as AbacPolicySet, c as AbacRule, d as abacContext, f as AbacAuthorizerPort, i as AbacDecision, l as AbacRuleProps, m as AbacRequest, n as CompositeAuthorizer, o as OnEvaluationError, p as AbacAttributes, r as AbacAuthorizer, s as CombiningAlgorithm, t as CompositeAccessRequest, u as RuleEffect } from "./composite-authorizer.cjs";
 import { a as JsonSafeRecord, i as JsonSafePrimitive, n as AppErrorOptions, o as JsonSafeValue, r as ErrorSeverity, t as AppError } from "./app-error.cjs";
 import { i as AuthorizationRequirement, n as AuthorizationErrorMetadata, r as AuthorizationErrorReason, t as AuthorizationError } from "./authorization-error.cjs";
 import { n as Ok, r as Result, t as Err } from "./result.cjs";
 import { n as Outcome, t as CommonOutcomeStatus } from "./outcome.cjs";
-import { C as GateTraceNodeSnapshot, D as VersionedGateEngine, E as PolicyViolation, O as GatePayload, S as GateTraceLeafSnapshot, T as PolicyContext, _ as ConditionEvaluationReportTag, a as PolicyDecisionId, b as GateOutcomeData, c as TenantId, d as asSchoolId, f as asTenantId, g as ConditionEvaluationReportLevel, h as ConditionEvaluationReport, l as asPolicyDecisionId, m as ConditionEvaluationOptions, n as CoreConfigOptions, o as PolicyDefinitionId, p as ConditionEvaluationCause, r as CoreObservabilityConfig, s as SchoolId, t as CoreConfig, u as asPolicyDefinitionId, v as ConditionEvaluatorReporter, w as GateViolationTrace, x as GateStatus, y as GateOutcome } from "./core-config.cjs";
+import { C as GateViolationTrace, D as GatePayload, E as VersionedGateEngine, S as GateTraceNodeSnapshot, T as PolicyViolation, _ as ConditionEvaluatorReporter, a as PolicyDefinitionId, b as GateStatus, c as asPolicyDecisionId, d as asTenantId, f as ConditionEvaluationCause, g as ConditionEvaluationReportTag, h as ConditionEvaluationReportLevel, i as PolicyDecisionId, l as asPolicyDefinitionId, m as ConditionEvaluationReport, n as CoreConfigOptions, o as SchoolId, p as ConditionEvaluationOptions, r as CoreObservabilityConfig, s as TenantId, t as CoreConfig, u as asSchoolId, v as GateOutcome, w as PolicyContext, x as GateTraceLeafSnapshot, y as GateOutcomeData } from "./core-config.cjs";
 import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "./path.cjs";
 import { a as PluginContract, i as PipelineReducer, n as BasePlugin, r as InvokeOptions, t as PluginManager } from "./plugin.cjs";
 import { t as DeepReadonly } from "./immutable.cjs";
 import { i as version, n as ContractVersion, r as VersionedTarget, t as CONTRACT_VERSION_PROPERTY } from "./version.cjs";
 import { n as ValueObjectPluginContract, t as ValueObject } from "./value-object.cjs";
 import { a as Permission, i as ScopeProps, n as AccessRequest, o as PermissionProps, r as Scope, t as AuthorizerPort } from "./authorizer.port.cjs";
-import { A as LogPayload, C as UseCase, D as TracerPort, E as TraceSpan, O as MetricLabels, S as MaybePromise, T as TraceAttributeValue, _ as PolicyEvaluationOutput, a as TemporalContext, b as Command, c as CacheStrategy, d as mapPolicyEvaluationError, f as TemporalHistory, g as PolicyEvaluationInput, h as ResultRepository, i as CreateTemporalContextInput, j as LoggerPort, k as MetricsPort, l as Page, m as Repository, n as TemporalUseCaseInput, o as assertTemporalContext, p as TemporalRepository, r as TemporalizedContextSeed, s as createTemporalContext, t as TemporalUseCase, u as Query, v as PolicyPort, w as UseCaseObservability, x as CommandInput, y as PolicyPortError } from "./temporal-use-case.cjs";
-import { A as IdempotencyPayloadMismatchError, B as UniqueConstraintViolation, C as IntegrationErrorMetadata, D as IdempotencyFailureKind, E as IdempotencyErrorMetadata, F as AlreadyExistsError, G as AuthenticationErrorMetadata, H as translateUniqueViolationToDuplicate, I as ConflictError, J as ErrorCodes, K as AuthenticationErrorReason, L as ConflictErrorMetadata, M as payloadHash, N as sha256Hex, O as IdempotencyInProgressError, P as stableStringify, R as ConflictKind, S as IntegrationError, T as IdempotencyError, U as BusinessRuleViolationError, V as UniqueConstraintViolationError, W as AuthenticationError, Y as serializationErrorCode, _ as SerializationMessages, a as TemporalError, b as NotFoundError, c as TemporalPrecision, d as SerializationCodes, f as SerializationDirection, g as SerializationInError, h as SerializationFailureCategory, i as NotYetValidError, j as IdempotencyReplayNotSupportedError, k as IdempotencyKeyMissingError, l as evaluateTemporalWindow, m as SerializationErrorMetadata, n as UnexpectedError, o as TemporalErrorMetadata, p as SerializationError, q as assertJsonSafeMetadata, r as ExpiredError, s as TemporalKind, t as ValidationError, u as SerializationBoundary, v as SerializationOutError, w as IntegrationErrorReason, x as LegacyIncompatibleError, y as safePreview, z as DuplicateError } from "./validation-error.cjs";
+import { A as MetricLabels, C as CommandInput, D as TraceAttributeValue, E as UseCaseObservability, M as LogPayload, N as LoggerPort, O as TraceSpan, S as Command, T as UseCase, _ as ResultRepository, a as TemporalContext, b as PolicyPort, c as CacheStrategy, d as QueryOutput, f as mapPolicyEvaluationError, g as Repository, h as TemporalRepository, i as CreateTemporalContextInput, j as MetricsPort, k as TracerPort, l as Page, m as TemporalHistory, n as TemporalUseCaseInput, o as assertTemporalContext, p as ResultTemporalRepository, r as TemporalizedContextSeed, s as createTemporalContext, t as TemporalUseCase, u as Query, v as PolicyEvaluationInput, w as MaybePromise, x as PolicyPortError, y as PolicyEvaluationOutput } from "./temporal-use-case.cjs";
+import { A as IdempotencyPayloadMismatchError, B as UniqueConstraintViolation, C as IntegrationErrorMetadata, D as IdempotencyFailureKind, E as IdempotencyErrorMetadata, F as AlreadyExistsError, G as AuthenticationErrorMetadata, H as translateUniqueViolationToDuplicate, I as ConflictError, J as ErrorCodes, K as AuthenticationErrorReason, L as ConflictErrorMetadata, M as stableStringify, N as payloadHash, O as IdempotencyInProgressError, P as sha256Hex, R as ConflictKind, S as IntegrationError, T as IdempotencyError, U as BusinessRuleViolationError, V as UniqueConstraintViolationError, W as AuthenticationError, Y as serializationErrorCode, _ as SerializationMessages, a as TemporalError, b as NotFoundError, c as TemporalPrecision, d as SerializationCodes, f as SerializationDirection, g as SerializationInError, h as SerializationFailureCategory, i as NotYetValidError, j as IdempotencyReplayNotSupportedError, k as IdempotencyKeyMissingError, l as evaluateTemporalWindow, m as SerializationErrorMetadata, n as UnexpectedError, o as TemporalErrorMetadata, p as SerializationError, q as assertJsonSafeMetadata, r as ExpiredError, s as TemporalKind, t as ValidationError, u as SerializationBoundary, v as SerializationOutError, w as IntegrationErrorReason, x as LegacyIncompatibleError, y as safePreview, z as DuplicateError } from "./validation-error.cjs";
 import { t as ValidationCode } from "./validation-code.cjs";
 import { t as ValidationField } from "./validation-field.cjs";
 import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "./policy-service.cjs";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "./gate-engine-registry.cjs";
 import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry } from "./parse-gate-payload.cjs";
 import { n as Entity, r as EntityState, t as UuidIdentifier } from "./uuid-identifier.cjs";
-import { t as DomainException } from "./domain-exception.cjs";
-import { a as InvariantViolationException, c as BusinessRuleViolationException, i as ValidationViolation, n as MultipleValidationException, o as InvalidStateTransitionException, r as ValidationException, s as EntityNotFoundException, t as InvalidValueException } from "./validation-exception.cjs";
+import { a as InvariantViolationException, c as BusinessRuleViolationException, i as ValidationViolation, l as DomainException, n as MultipleValidationException, o as InvalidStateTransitionException, r as ValidationException, s as EntityNotFoundException, t as InvalidValueException } from "./validation-exception.cjs";
 import { a as Ruleset, i as InvariantRuleset, n as RulesetRegistry, o as RulesetId, r as CreationRuleset, t as ValueObjectRuleset } from "./value-object-ruleset.contracts.cjs";
 import { a as GrantProps, i as Grant, n as PermissionSet, o as Role, r as RbacAuthorizer, s as RoleProps, t as rbacContextFields } from "./policy-bridge.cjs";
-import { a as buildDomainEventContractVersions, i as DomainEventEnvelope, n as DomainEventContractSelection, o as createDomainEventEnvelope, r as DomainEventContractVersions, t as CreateDomainEventEnvelopeInput } from "./domain-event-contracts.cjs";
+import { a as DomainEventEnvelope, i as DomainEventContractVersions, n as CreateDomainEventEnvelopeInput, o as buildDomainEventContractVersions, r as DomainEventContractSelection, s as createDomainEventEnvelope, t as ContractVersioned } from "./domain-event-contracts.cjs";
 
 //#region src/index.d.ts
 declare const ERP_CORE_NAME = "erp-core";
-declare const ERP_CORE_VERSION = "1.4.0";
+declare const ERP_CORE_VERSION = "2.0.0";
 declare const erpCoreRelease: {
   readonly name: "erp-core";
-  readonly version: "1.4.0";
+  readonly version: "2.0.0";
 };
 //#endregion
-export { AbacAttributes, AbacAuthorizer, AbacAuthorizerPort, AbacDecision, AbacPolicySet, AbacRequest, AbacRule, AbacRuleProps, AccessRequest, AlreadyExistsError, AppError, AppErrorOptions, AsOfSource, AuthenticationError, AuthenticationErrorMetadata, AuthenticationErrorReason, AuthorizationError, AuthorizationErrorMetadata, AuthorizationErrorReason, AuthorizationRequirement, AuthorizerPort, BasePlugin, BasePolicyDefinitionProps, BusinessRuleViolationError, BusinessRuleViolationException, CONTRACT_VERSION_PROPERTY, CacheStrategy, CombiningAlgorithm, Command, CommandInput, CommonOutcomeStatus, CompositeAccessRequest, CompositeAuthorizer, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePolicyDefinitionProps, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, ConflictError, ConflictErrorMetadata, ConflictKind, ContextResolverCircuitBreakerOptions, ContextResolverRegistry, ContextResolverResilienceOptions, ContextResolverRetryOptions, ContextSeed, ContextSeedValidator, ContextValueResolver, ContractVersion, CoreConfig, CoreConfigOptions, CoreObservabilityConfig, CreateDomainEventEnvelopeInput, CreateTemporalContextInput, CreationRuleset, DeepReadonly, DeriveAsOfOptions, SerializationInError as DeserializationError, SerializationInError, DomainEventContractSelection, DomainEventContractVersions, DomainEventEnvelope, DomainException, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, EntityNotFoundException, EntityState, Err, ErrorCodes, ErrorSeverity, EvaluateInput, ExpiredError, TemporalErrorMetadata as ExpiredErrorMetadata, TemporalErrorMetadata, TemporalPrecision as ExpiredErrorPrecision, TemporalPrecision, FindCandidatesParams, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParsers, GatePolicyDefinitionProps, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, Grant, GrantProps, IdempotencyError, IdempotencyErrorMetadata, IdempotencyFailureKind, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, IntegrationErrorMetadata, IntegrationErrorReason, InvalidStateTransitionException, InvalidValueException, InvariantRuleset, InvariantViolationException, InvokeOptions, JsonSafePrimitive, JsonSafeRecord, JsonSafeValue, LegacyIncompatibleError, LogPayload, LoggerPort, MaybePromise, MetricLabels, MetricsPort, MultipleValidationException, NotFoundError, NotYetValidError, Ok, Outcome, Page, Permission, PermissionProps, PermissionSet, PipelineReducer, PluginContract, PluginManager, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogEntryProps, PolicyCatalogFactory, PolicyContext, PolicyContextBuilder, PolicyContextBuilderOptions, PolicyContextPath, PolicyDecision, PolicyDecisionId, PolicyDefinition, PolicyDefinitionId, PolicyDefinitionProps, PolicyDefinitionStatus, PolicyEvaluationError, PolicyEvaluationErrors, PolicyEvaluationInput, PolicyEvaluationOutput, PolicyEvaluationResult, PolicyHashing, PolicyKey, PolicyKind, PolicyOwner, PolicyPackage, PolicyPort, PolicyPortError, PolicyResolver, PolicyScope, PolicyScopeLevel, PolicyScopeMatcher, PolicyService, PolicyServiceOptions, PolicyServiceParams, PolicyViolation, Query, RbacAuthorizer, Repository, RequestedBy, RequestedByKind, Result, ResultRepository, Role, RoleProps, RuleEffect, Ruleset, RulesetId, RulesetRegistry, SchoolId, Scope, ScopeChain, ScopeProps, SerializationBoundary, SerializationCodes, SerializationDirection, SerializationError, SerializationErrorMetadata, SerializationFailureCategory, SerializationMessages, SerializationOutError, TemporalContext, TemporalError, TemporalHistory, TemporalKind, TemporalRepository, TemporalUseCase, TemporalUseCaseInput, TemporalizedContextSeed, TenantId, TraceAttributeValue, TraceSpan, TracerPort, UnexpectedError, UniqueConstraintViolation, UniqueConstraintViolationError, UseCase, UseCaseObservability, UuidIdentifier, ValidationCode, ValidationError, ValidationException, ValidationField, ValidationViolation, ValueObject, ValueObjectPluginContract, ValueObjectRuleset, VersionedComputeEngine, VersionedGateEngine, VersionedTarget, abacContext, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, buildDomainEventContractVersions, contextResolverRegistry, coreConfig, createDomainEventEnvelope, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, rbacContextFields, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate, version };
+export { AbacAttributes, AbacAuthorizer, AbacAuthorizerPort, AbacDecision, AbacPolicySet, AbacRequest, AbacRule, AbacRuleProps, AccessRequest, AlreadyExistsError, AppError, AppErrorOptions, AsOfSource, AuthenticationError, AuthenticationErrorMetadata, AuthenticationErrorReason, AuthorizationError, AuthorizationErrorMetadata, AuthorizationErrorReason, AuthorizationRequirement, AuthorizerPort, BasePlugin, BasePolicyDefinitionProps, BusinessRuleViolationError, BusinessRuleViolationException, CONTRACT_VERSION_PROPERTY, CacheStrategy, CombiningAlgorithm, Command, CommandInput, CommonOutcomeStatus, CompositeAccessRequest, CompositeAuthorizer, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePolicyDefinitionProps, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, ConflictError, ConflictErrorMetadata, ConflictKind, ContextResolverCircuitBreakerOptions, ContextResolverRegistry, ContextResolverResilienceOptions, ContextResolverRetryOptions, ContextSeed, ContextSeedValidator, ContextValueResolver, ContractVersion, ContractVersioned, CoreConfig, CoreConfigOptions, CoreObservabilityConfig, CreateDomainEventEnvelopeInput, CreateTemporalContextInput, CreationRuleset, DeepReadonly, DeriveAsOfOptions, SerializationInError as DeserializationError, SerializationInError, DomainEventContractSelection, DomainEventContractVersions, DomainEventEnvelope, DomainException, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, EntityNotFoundException, EntityState, Err, ErrorCodes, ErrorSeverity, EvaluateInput, ExpiredError, TemporalErrorMetadata as ExpiredErrorMetadata, TemporalErrorMetadata, TemporalPrecision as ExpiredErrorPrecision, TemporalPrecision, FindCandidatesParams, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParsers, GatePolicyDefinitionProps, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, Grant, GrantProps, IdempotencyError, IdempotencyErrorMetadata, IdempotencyFailureKind, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, IntegrationErrorMetadata, IntegrationErrorReason, InvalidStateTransitionException, InvalidValueException, InvariantRuleset, InvariantViolationException, InvokeOptions, JsonSafePrimitive, JsonSafeRecord, JsonSafeValue, LegacyIncompatibleError, LogPayload, LoggerPort, MaybePromise, MetricLabels, MetricsPort, MultipleValidationException, NotFoundError, NotYetValidError, Ok, OnEvaluationError, Outcome, Page, Permission, PermissionProps, PermissionSet, PipelineReducer, PluginContract, PluginManager, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogEntryProps, PolicyCatalogFactory, PolicyContext, PolicyContextBuilder, PolicyContextBuilderOptions, PolicyContextPath, PolicyDecision, PolicyDecisionId, PolicyDefinition, PolicyDefinitionId, PolicyDefinitionProps, PolicyDefinitionStatus, PolicyEvaluationError, PolicyEvaluationErrors, PolicyEvaluationInput, PolicyEvaluationOutput, PolicyEvaluationResult, PolicyHashing, PolicyKey, PolicyKind, PolicyOwner, PolicyPackage, PolicyPort, PolicyPortError, PolicyResolver, PolicyScope, PolicyScopeLevel, PolicyScopeMatcher, PolicyService, PolicyServiceOptions, PolicyServiceParams, PolicyViolation, Query, QueryOutput, RbacAuthorizer, Repository, RequestedBy, RequestedByKind, Result, ResultRepository, ResultTemporalRepository, Role, RoleProps, RuleEffect, Ruleset, RulesetId, RulesetRegistry, SchoolId, Scope, ScopeChain, ScopeProps, SerializationBoundary, SerializationCodes, SerializationDirection, SerializationError, SerializationErrorMetadata, SerializationFailureCategory, SerializationMessages, SerializationOutError, TemporalContext, TemporalError, TemporalHistory, TemporalKind, TemporalRepository, TemporalUseCase, TemporalUseCaseInput, TemporalizedContextSeed, TenantId, TraceAttributeValue, TraceSpan, TracerPort, UnexpectedError, UniqueConstraintViolation, UniqueConstraintViolationError, UseCase, UseCaseObservability, UuidIdentifier, ValidationCode, ValidationError, ValidationException, ValidationField, ValidationViolation, ValueObject, ValueObjectPluginContract, ValueObjectRuleset, VersionedComputeEngine, VersionedGateEngine, VersionedTarget, abacContext, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, buildDomainEventContractVersions, contextResolverRegistry, coreConfig, createDomainEventEnvelope, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, rbacContextFields, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate, version };
 //# sourceMappingURL=index.d.cts.map