@cullet/erp-core 1.5.0 → 2.0.0

package/dist/validation-error.js

@@ -1,4 +1,6 @@
 import { i as serializationErrorCode, r as ErrorCodes, t as AppError } from "./app-error.js";
+import { i as stripAppErrorOptions, n as compactMetadata, r as pickAppErrorOptions } from "./authorization-error.js";
+import { n as sha256Hex } from "./hashing.js";
 //#region src/core/errors/authentication-error.ts
 var AuthenticationError = class AuthenticationError extends AppError {
 	constructor(params) {
@@ -24,8 +26,8 @@ var AuthenticationError = class AuthenticationError extends AppError {
 			message: "Missing credentials",
 			code: ErrorCodes.authentication.missingToken,
 			reason: "missing_token",
-			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions(options)
+			metadata: compactMetadata(options),
+			...pickAppErrorOptions(options)
 		});
 	}
 	static invalidToken(options) {
@@ -33,14 +35,14 @@ var AuthenticationError = class AuthenticationError extends AppError {
 			message: "Invalid credentials",
 			code: ErrorCodes.authentication.invalidToken,
 			reason: "invalid_token",
-			metadata: compactMetadata$1({
+			metadata: compactMetadata({
 				authScheme: options?.authScheme,
 				tokenLocation: options?.tokenLocation,
 				details: options?.details,
 				correlationId: options?.correlationId,
 				requestId: options?.requestId
 			}),
-			...extractAppErrorOptions(options)
+			...pickAppErrorOptions(options)
 		});
 	}
 	static expiredToken(options) {
@@ -48,8 +50,8 @@ var AuthenticationError = class AuthenticationError extends AppError {
 			message: "Expired credentials",
 			code: ErrorCodes.authentication.expiredToken,
 			reason: "expired_token",
-			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions(options)
+			metadata: compactMetadata(options),
+			...pickAppErrorOptions(options)
 		});
 	}
 	static invalidCredentials(options) {
@@ -57,27 +59,11 @@ var AuthenticationError = class AuthenticationError extends AppError {
 			message: "Invalid username or password",
 			code: ErrorCodes.authentication.invalidCredentials,
 			reason: "invalid_credentials",
-			metadata: compactMetadata$1(options),
-			...extractAppErrorOptions(options)
+			metadata: compactMetadata(options),
+			...pickAppErrorOptions(options)
 		});
 	}
 };
-function extractAppErrorOptions(options) {
-	return {
-		cause: options?.cause,
-		type: options?.type,
-		severity: options?.severity,
-		correlationId: options?.correlationId,
-		requestId: options?.requestId,
-		commandId: options?.commandId,
-		createdAtIso: options?.createdAtIso,
-		publicMessage: options?.publicMessage
-	};
-}
-function compactMetadata$1(input) {
-	if (!input) return void 0;
-	return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0));
-}
 //#endregion
 //#region src/core/errors/conflict-error.ts
 /**
@@ -408,9 +394,10 @@ var IdempotencyReplayNotSupportedError = class IdempotencyReplayNotSupportedErro
 	}
 };
 function resolveKeyIdentity(key, keyHash, keyPreview) {
+	const preview = keyPreview ?? (key ? key.length <= 8 ? key : key.slice(0, 8) : void 0);
 	return {
-		keyHash,
-		keyPreview: keyPreview ?? (key ? key.length <= 8 ? key : key.slice(0, 8) : void 0)
+		keyHash: keyHash ?? (key ? sha256Hex(key) : void 0),
+		keyPreview: preview
 	};
 }
 //#endregion
@@ -450,7 +437,7 @@ var IntegrationError = class IntegrationError extends AppError {
 				reason: "timeout",
 				...options
 			}),
-			...pickAppErrorFields(options)
+			...pickAppErrorOptions(options)
 		});
 	}
 	/**
@@ -466,7 +453,7 @@ var IntegrationError = class IntegrationError extends AppError {
 				reason: "unreachable",
 				...options
 			}),
-			...pickAppErrorFields(options)
+			...pickAppErrorOptions(options)
 		});
 	}
 	/**
@@ -483,7 +470,7 @@ var IntegrationError = class IntegrationError extends AppError {
 				reason: "bad_response",
 				...options
 			}),
-			...pickAppErrorFields(options)
+			...pickAppErrorOptions(options)
 		});
 	}
 };
@@ -503,21 +490,6 @@ function buildMetadata(input) {
 		responseCode: input.responseCode
 	});
 }
-function pickAppErrorFields(options) {
-	return {
-		cause: options.cause,
-		type: options.type,
-		severity: options.severity,
-		correlationId: options.correlationId,
-		requestId: options.requestId,
-		commandId: options.commandId,
-		createdAtIso: options.createdAtIso,
-		publicMessage: options.publicMessage
-	};
-}
-function compactMetadata(input) {
-	return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0));
-}
 //#endregion
 //#region src/core/errors/legacy-incompatible-error.ts
 var LegacyIncompatibleError = class extends AppError {
@@ -530,6 +502,7 @@ var LegacyIncompatibleError = class extends AppError {
 			...options,
 			metadata: mergedMetadata
 		});
+		Object.freeze(this);
 	}
 };
 //#endregion
@@ -644,17 +617,10 @@ var ExpiredError = class ExpiredError extends TemporalError {
 			code: ErrorCodes.temporal.expired,
 			kind: "expired",
 			metadata: {
-				...input,
+				...stripAppErrorOptions(input),
 				hint: input.hint ?? "The window has expired. Request a new link or try again within the valid period."
 			},
-			cause: input.cause,
-			type: input.type,
-			severity: input.severity,
-			correlationId: input.correlationId,
-			requestId: input.requestId,
-			commandId: input.commandId,
-			createdAtIso: input.createdAtIso,
-			publicMessage: input.publicMessage
+			...pickAppErrorOptions(input)
 		});
 	}
 };
@@ -668,31 +634,39 @@ var NotYetValidError = class NotYetValidError extends TemporalError {
 			code: ErrorCodes.temporal.notYetValid,
 			kind: "not_yet_valid",
 			metadata: {
-				...input,
+				...stripAppErrorOptions(input),
 				hint: input.hint ?? "Not yet within the valid period. Try again later."
 			},
-			cause: input.cause,
-			type: input.type,
-			severity: input.severity,
-			correlationId: input.correlationId,
-			requestId: input.requestId,
-			commandId: input.commandId,
-			createdAtIso: input.createdAtIso,
-			publicMessage: input.publicMessage
+			...pickAppErrorOptions(input)
 		});
 	}
 };
+/**
+* Evaluates whether `evaluatedAtIso` falls inside the [`validFromIso`,
+* `validUntilIso`] window.
+*
+* Fails **closed**: a boundary that is present but unparseable is treated as if
+* the window were closed on that side (a bad `validUntilIso` → expired, a bad
+* `validFromIso` → not-yet-valid), never silently ignored — these checks guard
+* access (invites, links, tokens), so a typo in an expiry must not disable
+* expiry. A `null`/absent boundary means "no bound on that side", which is
+* distinct from a malformed one. Returns `null` only when `evaluatedAtIso`
+* itself is unparseable (nothing can be decided).
+*
+* For an inverted window (`validFrom` > `validUntil`) `expired` wins, since the
+* upper-bound check short-circuits.
+*/
 function evaluateTemporalWindow(input) {
 	const evaluatedMs = Date.parse(input.evaluatedAtIso);
 	if (Number.isNaN(evaluatedMs)) return null;
 	let notYetValid = false;
 	if (input.validFromIso) {
 		const fromMs = Date.parse(input.validFromIso);
-		if (!Number.isNaN(fromMs) && evaluatedMs < fromMs) notYetValid = true;
+		if (Number.isNaN(fromMs) || evaluatedMs < fromMs) notYetValid = true;
 	}
 	if (input.validUntilIso) {
 		const untilMs = Date.parse(input.validUntilIso);
-		if (!Number.isNaN(untilMs) && evaluatedMs > untilMs) return {
+		if (Number.isNaN(untilMs) || evaluatedMs > untilMs) return {
 			expired: true,
 			notYetValid: false
 		};
@@ -729,13 +703,14 @@ var ValidationError = class extends AppError {
 			validationCode: code.value
 		};
 		const mergedMetadata = options?.metadata ? {
-			...baseMetadata,
-			...options.metadata
+			...options.metadata,
+			...baseMetadata
 		} : baseMetadata;
 		super(message, ErrorCodes.validation, {
 			...options,
 			metadata: mergedMetadata
 		});
+		Object.freeze(this);
 	}
 };
 //#endregion

package/dist/validation-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation-error.js","names":["compactMetadata"],"sources":["../src/core/errors/authentication-error.ts","../src/core/errors/conflict-error.ts","../src/core/errors/idempotency-error.ts","../src/core/errors/integration-error.ts","../src/core/errors/legacy-incompatible-error.ts","../src/core/errors/serialization-error.ts","../src/core/errors/temporal-error.ts","../src/core/errors/validation-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype AuthenticationErrorReason =\n    | \"missing_token\"\n    | \"malformed_token\"\n    | \"invalid_token\"\n    | \"expired_token\"\n    | \"revoked_token\"\n    | \"invalid_credentials\"\n    | \"session_not_found\"\n    | \"session_expired\"\n    | \"unknown\";\n\ntype AuthenticationErrorMetadata = {\n    reason: AuthenticationErrorReason;\n    authScheme?: \"bearer\" | \"cookie\" | \"basic\" | \"unknown\";\n    tokenLocation?: \"header\" | \"cookie\" | \"query\" | \"unknown\";\n    expiresAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    details?: string;\n};\n\ntype AuthenticationErrorFactoryOptions = Omit<\n    AuthenticationErrorMetadata,\n    \"reason\"\n> &\n    Omit<AppErrorOptions, \"metadata\">;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuthenticationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass AuthenticationError extends AppError {\n    public readonly reason: AuthenticationErrorReason;\n\n    private constructor(params: {\n        message: string;\n        code: string;\n        reason: AuthenticationErrorReason;\n        metadata?: Omit<AuthenticationErrorMetadata, \"reason\">;\n        cause?: unknown;\n        type?: string;\n        severity?: ErrorSeverity;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        createdAtIso?: string;\n        publicMessage?: string;\n    }) {\n        super(params.message, params.code, {\n            cause: params.cause,\n            metadata: {\n                reason: params.reason,\n                ...(params.metadata ?? {}),\n            },\n            type: params.type,\n            severity: params.severity,\n            correlationId: params.correlationId,\n            requestId: params.requestId,\n            commandId: params.commandId,\n            createdAtIso: params.createdAtIso,\n            publicMessage: params.publicMessage,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    // ─────────────────────────────────────────────────────────────────────────\n    // Factory methods\n    // ─────────────────────────────────────────────────────────────────────────\n\n    static missingToken(\n        options?: AuthenticationErrorFactoryOptions,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Missing credentials\",\n            code: ErrorCodes.authentication.missingToken,\n            reason: \"missing_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidToken(\n        options?: AuthenticationErrorFactoryOptions & { cause?: unknown },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid credentials\",\n            code: ErrorCodes.authentication.invalidToken,\n            reason: \"invalid_token\",\n            metadata: compactMetadata({\n                authScheme: options?.authScheme,\n                tokenLocation: options?.tokenLocation,\n                details: options?.details,\n                correlationId: options?.correlationId,\n                requestId: options?.requestId,\n            }),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static expiredToken(\n        options?: AuthenticationErrorFactoryOptions & { sessionId?: string },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Expired credentials\",\n            code: ErrorCodes.authentication.expiredToken,\n            reason: \"expired_token\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n\n    static invalidCredentials(\n        options?: Pick<\n            AuthenticationErrorFactoryOptions,\n            | \"correlationId\"\n            | \"requestId\"\n            | \"type\"\n            | \"severity\"\n            | \"createdAtIso\"\n            | \"publicMessage\"\n        >,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid username or password\",\n            code: ErrorCodes.authentication.invalidCredentials,\n            reason: \"invalid_credentials\",\n            metadata: compactMetadata(options),\n            ...extractAppErrorOptions(options),\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction extractAppErrorOptions(options?: Partial<AppErrorOptions>) {\n    return {\n        cause: options?.cause,\n        type: options?.type,\n        severity: options?.severity,\n        correlationId: options?.correlationId,\n        requestId: options?.requestId,\n        commandId: options?.commandId,\n        createdAtIso: options?.createdAtIso,\n        publicMessage: options?.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(\n    input?: T,\n): T | undefined {\n    if (!input) return undefined;\n\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { AuthenticationError };\nexport type { AuthenticationErrorMetadata, AuthenticationErrorReason };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n/**\n * Conflict kinds we want to distinguish semantically.\n */\ntype ConflictKind = \"already_exists\" | \"duplicate\" | \"unique_violation\";\n\n/**\n * Metadata attached to conflicts without exposing sensitive values.\n */\ntype ConflictErrorMetadata = {\n    kind: ConflictKind;\n    entity: string;\n    operation?: string;\n    field?: string;\n    constraintName?: string;\n    existingId?: string;\n    valueHash?: string;\n    valuePreview?: string;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n};\n\n/**\n * Storage-level description of a unique-constraint breach, as reported by a\n * database driver. Used to translate a raw DB error into a domain\n * {@link DuplicateError} via {@link translateUniqueViolationToDuplicate}.\n */\ntype UniqueConstraintViolation = {\n    kind: \"unique_violation\";\n    constraintName?: string;\n    table?: string;\n    columns?: string[];\n};\n\n/**\n * Base for errors that signal a state conflict — the request collides with data\n * that already exists. Common at an HTTP 409 boundary.\n *\n * The discriminating {@link kind} lets a handler branch on *why* it conflicted\n * (an already-existing record, a domain duplicate, or a raw storage uniqueness\n * breach) without `instanceof` chains. Abstract: construct one of the concrete\n * subclasses through its `detected(...)` factory, which fills in the right code,\n * message, and metadata. Instances are frozen, so a conflict error can be shared\n * and rethrown without risk of tampering.\n */\nabstract class ConflictError extends AppError {\n    public readonly kind: ConflictKind;\n\n    protected constructor(\n        params: {\n            message: string;\n            code: string;\n            kind: ConflictKind;\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super(params.message, params.code, {\n            ...params,\n            metadata: {\n                kind: params.kind,\n                ...params.metadata,\n            },\n        });\n\n        this.kind = params.kind;\n        Object.freeze(this);\n    }\n}\n\n/**\n * The operation cannot proceed because a matching record already exists —\n * e.g. creating something whose natural key is already taken. Construct via\n * {@link AlreadyExistsError.detected}.\n */\nclass AlreadyExistsError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message:\n                \"A matching record already exists for the requested operation\",\n            code: ErrorCodes.conflict.alreadyExists,\n            kind: \"already_exists\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds an {@link AlreadyExistsError} for a detected collision. `operation`\n     * defaults to `\"create\"` and a generic retry `hint` is supplied when none is\n     * given, so the error is actionable even from a minimal call site.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (operation, field, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): AlreadyExistsError {\n        return new AlreadyExistsError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation ?? \"create\",\n                field: input.field,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint: input.hint ?? \"Verify existing records before retrying.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A domain-level duplicate: the data being written would duplicate an existing\n * record under the model's own uniqueness rules. Use this when the duplication\n * is recognized in the domain, as opposed to a raw DB constraint\n * ({@link UniqueConstraintViolationError}). Construct via\n * {@link DuplicateError.detected}.\n */\nclass DuplicateError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Conflict: an existing record violates uniqueness\",\n            code: ErrorCodes.conflict.duplicate,\n            kind: \"duplicate\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link DuplicateError} for a detected duplicate, defaulting to a\n     * \"adjust the data so it does not duplicate\" hint when none is provided.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (field, constraint name, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        constraintName?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): DuplicateError {\n        return new DuplicateError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                field: input.field,\n                constraintName: input.constraintName,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint:\n                    input.hint ??\n                    \"Adjust the data so it does not duplicate existing records.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A uniqueness breach surfaced by the storage layer itself (a database unique\n * index), carrying the raw {@link UniqueConstraintViolation} (constraint, table,\n * columns). Keep this distinct from {@link DuplicateError}: this one is the\n * infrastructure signal; translate it into a domain duplicate at the boundary\n * with {@link translateUniqueViolationToDuplicate} when the model should own the\n * message. Construct via {@link UniqueConstraintViolationError.detected}.\n */\nclass UniqueConstraintViolationError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\"> & {\n                violation: UniqueConstraintViolation;\n            };\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Uniqueness violation in storage\",\n            code: ErrorCodes.conflict.uniqueViolation,\n            kind: \"unique_violation\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link UniqueConstraintViolationError} from the constraint details\n     * a driver reports, packaging them into a nested `violation` payload.\n     *\n     * @param input - The entity plus the offending constraint name, table, and\n     *   columns, and optional correlation ids.\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        constraintName?: string;\n        table?: string;\n        columns?: string[];\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        cause?: unknown;\n    }): UniqueConstraintViolationError {\n        return new UniqueConstraintViolationError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                constraintName: input.constraintName,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                violation: {\n                    kind: \"unique_violation\",\n                    constraintName: input.constraintName,\n                    table: input.table,\n                    columns: input.columns,\n                },\n                hint: \"Uniqueness conflict detected in the database.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * Translates a raw storage {@link UniqueConstraintViolation} into a domain-level\n * {@link DuplicateError}. This is the seam where an infrastructure concern (a DB\n * unique index firing) is re-expressed in the language of the model, so callers\n * upstream catch a `DuplicateError` and never have to know a database was\n * involved.\n *\n * @param input - The entity, the driver-reported `violation`, and optional\n *   request context (`ctx`) carrying correlation ids and a clock instant.\n * @returns A {@link DuplicateError} carrying the constraint name as its field hint.\n */\nfunction translateUniqueViolationToDuplicate(input: {\n    entity: string;\n    operation?: string;\n    violation: UniqueConstraintViolation;\n    field?: string;\n    ctx?: {\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        nowIso?: string;\n    };\n    cause?: unknown;\n}): DuplicateError {\n    return DuplicateError.detected({\n        entity: input.entity,\n        operation: input.operation,\n        field: input.field,\n        constraintName: input.violation.constraintName,\n        detectedAtIso: input.ctx?.nowIso,\n        correlationId: input.ctx?.correlationId,\n        requestId: input.ctx?.requestId,\n        commandId: input.ctx?.commandId,\n        cause: input.cause,\n    });\n}\n\nexport {\n    AlreadyExistsError,\n    ConflictError,\n    DuplicateError,\n    translateUniqueViolationToDuplicate,\n    UniqueConstraintViolationError,\n};\n\nexport type { ConflictErrorMetadata, ConflictKind, UniqueConstraintViolation };\n","import { payloadHash, sha256Hex, stableStringify } from \"../shared/hashing.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\nexport type IdempotencyFailureKind =\n    | \"key_missing\"\n    | \"in_progress\"\n    | \"payload_mismatch\"\n    | \"replay_not_supported\"\n    | \"unknown\";\n\nexport type IdempotencyErrorMetadata = {\n    kind: IdempotencyFailureKind;\n    operation: string;\n    scope?: string;\n    entity?: string;\n    keyHash?: string;\n    keyPreview?: string;\n    incomingPayloadHash?: string;\n    existingPayloadHash?: string;\n    idempotencyRecordId?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    detectedAtIso?: string;\n    hint?: string;\n    details?: string;\n};\n\ntype IdempotencyErrorConstructorInput = {\n    message: string;\n    code: string;\n    kind: IdempotencyFailureKind;\n    metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n    cause?: unknown;\n};\n\nabstract class IdempotencyError extends AppError {\n    public readonly kind: IdempotencyFailureKind;\n\n    protected constructor(input: IdempotencyErrorConstructorInput) {\n        super(input.message, input.code, {\n            cause: input.cause,\n            metadata: { kind: input.kind, ...input.metadata },\n        });\n\n        this.kind = input.kind;\n        Object.freeze(this);\n    }\n\n    static keyMissing(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return IdempotencyKeyMissingError.detected(input);\n    }\n\n    static inProgress(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        return IdempotencyInProgressError.detected(input);\n    }\n\n    static payloadMismatch(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        return IdempotencyPayloadMismatchError.detected(input);\n    }\n\n    static replayNotSupported(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        return IdempotencyReplayNotSupportedError.detected(input);\n    }\n}\n\nclass IdempotencyKeyMissingError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Idempotency key/commandId missing for the requested operation\",\n            code: ErrorCodes.idempotency.keyMissing,\n            kind: \"key_missing\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return new IdempotencyKeyMissingError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Send a commandId/idempotency key to prevent duplicate processing.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyInProgressError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The same business intent is already being processed\",\n            code: ErrorCodes.idempotency.inProgress,\n            kind: \"in_progress\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyInProgressError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Wait for completion and retry using the same key.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyPayloadMismatchError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The idempotency key was reused with a different payload\",\n            code: ErrorCodes.idempotency.payloadMismatch,\n            kind: \"payload_mismatch\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyPayloadMismatchError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                incomingPayloadHash: input.incomingPayloadHash,\n                existingPayloadHash: input.existingPayloadHash,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Use a new idempotency key for a new intent. The same key should only be reused for retries of the same payload.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyReplayNotSupportedError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Re-execution detected, but replay of the previous result is not implemented\",\n            code: ErrorCodes.idempotency.replayNotSupported,\n            kind: \"replay_not_supported\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyReplayNotSupportedError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Try again later, or enable result replay for full idempotency.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nfunction resolveKeyIdentity(\n    key?: string,\n    keyHash?: string,\n    keyPreview?: string,\n): { keyHash?: string; keyPreview?: string } {\n    const preview =\n        keyPreview ??\n        (key ? (key.length <= 8 ? key : key.slice(0, 8)) : undefined);\n\n    return {\n        keyHash: keyHash,\n        keyPreview: preview,\n    };\n}\n\nexport {\n    IdempotencyError,\n    IdempotencyKeyMissingError,\n    IdempotencyInProgressError,\n    IdempotencyPayloadMismatchError,\n    IdempotencyReplayNotSupportedError,\n    sha256Hex,\n    stableStringify,\n    payloadHash,\n};\n","import type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\ntype IntegrationErrorReason =\n    | \"timeout\"\n    | \"unreachable\"\n    | \"bad_response\"\n    | \"unknown\";\n\ntype IntegrationErrorMetadata = {\n    reason: IntegrationErrorReason;\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n};\n\ntype IntegrationErrorAppOptions = Pick<\n    AppErrorOptions,\n    | \"cause\"\n    | \"type\"\n    | \"severity\"\n    | \"correlationId\"\n    | \"requestId\"\n    | \"commandId\"\n    | \"createdAtIso\"\n    | \"publicMessage\"\n>;\n\ntype IntegrationErrorConstructorParams = {\n    message: string;\n    code: string;\n    reason: IntegrationErrorReason;\n    metadata: IntegrationErrorMetadata;\n} & IntegrationErrorAppOptions;\n\n/**\n * Raised when a call to an external provider fails — a timeout, an unreachable\n * endpoint, or a malformed response. This is the boundary error that separates\n * \"our code is fine, the outside world misbehaved\" from internal faults, which\n * matters for retry and alerting decisions.\n *\n * Every instance records the `provider`, the `operation`, and timing\n * (`startedAtIso` / `durationMs`) so failures are correlatable across services\n * and a slow dependency is visible in the metadata. The discriminating\n * {@link reason} lets callers decide whether a failure is worth retrying.\n * Instances are frozen; construct through the static factories.\n */\nclass IntegrationError extends AppError {\n    public readonly reason: IntegrationErrorReason;\n\n    private constructor(params: IntegrationErrorConstructorParams) {\n        const { message, code, metadata, ...rest } = params;\n        super(message, code, {\n            ...rest,\n            metadata,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    /**\n     * The provider did not respond within the allotted time. Usually retryable,\n     * since a timeout leaves the outcome unknown rather than known-failed.\n     */\n    static timeout(options: IntegrationErrorTimeoutOptions): IntegrationError {\n        return new IntegrationError({\n            message: \"Timeout while integrating with external provider\",\n            code: ErrorCodes.integration.timeout,\n            reason: \"timeout\",\n            metadata: buildMetadata({ reason: \"timeout\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider could not be reached at all (connection refused, DNS\n     * failure, network partition) — the request never landed.\n     */\n    static unreachable(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Provider unavailable\",\n            code: ErrorCodes.integration.unreachable,\n            reason: \"unreachable\",\n            metadata: buildMetadata({ reason: \"unreachable\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n\n    /**\n     * The provider answered, but with something the system cannot use — an\n     * unexpected status, an unparsable body, or a contract mismatch. Unlike a\n     * timeout this is a definite failure, so blind retries rarely help.\n     */\n    static badResponse(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Unexpected response from provider\",\n            code: ErrorCodes.integration.badResponse,\n            reason: \"bad_response\",\n            metadata: buildMetadata({ reason: \"bad_response\", ...options }),\n            ...pickAppErrorFields(options),\n        });\n    }\n}\n\ntype IntegrationErrorBaseOptions = {\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n    cause?: unknown;\n    type?: string;\n    severity?: ErrorSeverity;\n    createdAtIso?: string;\n    publicMessage?: string;\n};\n\ntype IntegrationErrorTimeoutOptions = IntegrationErrorBaseOptions;\ntype IntegrationErrorEndpointOptions = IntegrationErrorBaseOptions;\n\nfunction buildMetadata(\n    input: IntegrationErrorBaseOptions & { reason: IntegrationErrorReason },\n): IntegrationErrorMetadata {\n    return compactMetadata({\n        reason: input.reason,\n        provider: input.provider,\n        operation: input.operation,\n        startedAtIso: input.startedAtIso,\n        durationMs: input.durationMs,\n        detectedAtIso: input.detectedAtIso,\n        correlationId: input.correlationId,\n        requestId: input.requestId,\n        commandId: input.commandId,\n        details: input.details,\n        statusCode: input.statusCode,\n        responseCode: input.responseCode,\n    }) as IntegrationErrorMetadata;\n}\n\nfunction pickAppErrorFields(\n    options: IntegrationErrorBaseOptions,\n): IntegrationErrorAppOptions {\n    return {\n        cause: options.cause,\n        type: options.type,\n        severity: options.severity,\n        correlationId: options.correlationId,\n        requestId: options.requestId,\n        commandId: options.commandId,\n        createdAtIso: options.createdAtIso,\n        publicMessage: options.publicMessage,\n    };\n}\n\nfunction compactMetadata<T extends Record<string, unknown>>(input: T): T {\n    return Object.fromEntries(\n        Object.entries(input).filter(([, value]) => value !== undefined),\n    ) as T;\n}\n\nexport { IntegrationError };\nexport type { IntegrationErrorReason, IntegrationErrorMetadata };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// LegacyIncompatibleError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass LegacyIncompatibleError extends AppError {\n    constructor(\n        message: string,\n        context?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const mergedMetadata = options?.metadata\n            ? { ...(context ?? {}), ...options.metadata }\n            : context;\n\n        super(message, ErrorCodes.legacyIncompatible, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { LegacyIncompatibleError };\n","import { AppError } from \"./app-error.js\";\nimport { serializationErrorCode } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationDirection = \"serialize\" | \"deserialize\";\n\ntype SerializationFailureCategory =\n    | \"invalid_json\"\n    | \"invalid_shape\"\n    | \"missing_field\"\n    | \"unexpected_field\"\n    | \"invalid_type\"\n    | \"schema_version_missing\"\n    | \"schema_version_unsupported\"\n    | \"mapping_not_implemented\"\n    | \"contract_mismatch\"\n    | \"parse_failed\"\n    | \"stringify_failed\"\n    | \"unknown\";\n\ntype SerializationBoundary =\n    | \"http_in\"\n    | \"http_out\"\n    | \"graphql_in\"\n    | \"graphql_out\"\n    | \"dto_to_domain\"\n    | \"domain_to_dto\"\n    | \"persistence_to_domain\"\n    | \"domain_to_persistence\"\n    | \"event_in\"\n    | \"event_out\"\n    | \"projection\"\n    | \"unknown\";\n\n/**\n * Metadata shared by serialization/deserialization failures. Payload previews must be sanitized.\n */\ntype SerializationErrorMetadata = {\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n    boundary: SerializationBoundary;\n    contract: string;\n    schemaVersion?: number | string;\n    path?: string;\n    payloadPreview?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n    details?: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Base error\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationErrorOptions = Omit<AppErrorOptions, \"metadata\"> & {\n    message: string;\n    code: string;\n    metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\">;\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n};\n\nabstract class SerializationError extends AppError {\n    public readonly direction: SerializationDirection;\n    public readonly category: SerializationFailureCategory;\n    public readonly boundary: SerializationBoundary;\n    public readonly contract: string;\n\n    protected constructor(input: SerializationErrorOptions) {\n        super(input.message ?? \"Serialization failure\", input.code, {\n            cause: input.cause,\n            metadata: {\n                direction: input.direction,\n                category: input.category,\n                ...input.metadata,\n            },\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n\n        this.direction = input.direction;\n        this.category = input.category;\n        this.boundary = input.metadata.boundary;\n        this.contract = input.metadata.contract;\n\n        Object.freeze(this);\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization In\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationInError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationInError {\n        return new SerializationInError({\n            message: SerializationMessages.message(\"deserialize\", category),\n            code: SerializationCodes.code(\"deserialize\", category),\n            category,\n            direction: \"deserialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationOutError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationOutError {\n        return new SerializationOutError({\n            message: SerializationMessages.message(\"serialize\", category),\n            code: SerializationCodes.code(\"serialize\", category),\n            category,\n            direction: \"serialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Codes + Messages helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationCodes {\n    static code(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        return serializationErrorCode(direction, category);\n    }\n}\n\nclass SerializationMessages {\n    static message(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        if (direction === \"deserialize\") {\n            if (category === \"invalid_json\") {\n                return \"Invalid payload: malformed JSON\";\n            }\n            if (category === \"schema_version_missing\") {\n                return \"Invalid payload: schemaVersion is missing\";\n            }\n            if (category === \"schema_version_unsupported\") {\n                return \"Invalid payload: schemaVersion is not supported\";\n            }\n            if (category === \"invalid_shape\") {\n                return \"Invalid payload: incompatible shape\";\n            }\n            if (category === \"mapping_not_implemented\") {\n                return \"Unsupported payload: mapping not implemented\";\n            }\n            if (category === \"contract_mismatch\") {\n                return \"Payload does not match the expected contract\";\n            }\n            return \"Failed to parse incoming payload\";\n        }\n\n        if (category === \"stringify_failed\") {\n            return \"Failed to serialize the response\";\n        }\n        if (category === \"contract_mismatch\") {\n            return \"Response does not match the expected contract\";\n        }\n        return \"Failed to build the response\";\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction safePreview(value: unknown, limit = 240): string | undefined {\n    try {\n        const serialized =\n            typeof value === \"string\" ? value : JSON.stringify(value);\n        return serialized.length > limit\n            ? `${serialized.slice(0, limit)}…`\n            : serialized;\n    } catch {\n        return undefined;\n    }\n}\n\nexport {\n    safePreview,\n    SerializationCodes,\n    SerializationError,\n    SerializationInError as DeserializationError,\n    SerializationInError,\n    SerializationMessages,\n    SerializationOutError,\n};\nexport type {\n    SerializationBoundary,\n    SerializationDirection,\n    SerializationErrorMetadata,\n    SerializationFailureCategory,\n};\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\ntype TemporalKind = \"expired\" | \"not_yet_valid\";\n\ntype TemporalPrecision = \"EXACT\" | \"ESTIMATED\" | \"UNKNOWN\" | \"APPROXIMATE\";\n\ntype TemporalErrorMetadata = {\n    resourceType: string;\n    resourceId?: string;\n    operation?: string;\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n    policyId?: string;\n    precision?: TemporalPrecision;\n    hint?: string;\n    details?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n};\n\ntype TemporalErrorOptions = {\n    message: string;\n    code: string;\n    kind: TemporalKind;\n    metadata: TemporalErrorMetadata;\n} & AppErrorOptions;\n\nabstract class TemporalError extends AppError {\n    public readonly kind: TemporalKind;\n    public readonly resourceType: string;\n    public readonly evaluatedAtIso: string;\n\n    protected constructor(input: TemporalErrorOptions) {\n        super(input.message, input.code, {\n            ...input,\n            metadata: {\n                kind: input.kind,\n                ...input.metadata,\n            },\n        });\n\n        this.kind = input.kind;\n        this.resourceType = input.metadata.resourceType;\n        this.evaluatedAtIso = input.metadata.evaluatedAtIso;\n        Object.freeze(this);\n    }\n}\n\ntype TemporalCreationInput = TemporalErrorMetadata &\n    Partial<Omit<AppErrorOptions, \"metadata\">> & {\n        cause?: unknown;\n    };\n\nclass ExpiredError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): ExpiredError {\n        return new ExpiredError({\n            message: \"The validity of the resource/action has expired\",\n            code: ErrorCodes.temporal.expired,\n            kind: \"expired\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"The window has expired. Request a new link or try again within the valid period.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nclass NotYetValidError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): NotYetValidError {\n        return new NotYetValidError({\n            message: \"The resource/action is not yet valid\",\n            code: ErrorCodes.temporal.notYetValid,\n            kind: \"not_yet_valid\",\n            metadata: {\n                ...input,\n                hint:\n                    input.hint ??\n                    \"Not yet within the valid period. Try again later.\",\n            },\n            cause: input.cause,\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n    }\n}\n\nfunction evaluateTemporalWindow(input: {\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n}): { expired: boolean; notYetValid: boolean } | null {\n    const evaluatedMs = Date.parse(input.evaluatedAtIso);\n    if (Number.isNaN(evaluatedMs)) return null;\n\n    let notYetValid = false;\n\n    if (input.validFromIso) {\n        const fromMs = Date.parse(input.validFromIso);\n        if (!Number.isNaN(fromMs) && evaluatedMs < fromMs) {\n            notYetValid = true;\n        }\n    }\n\n    if (input.validUntilIso) {\n        const untilMs = Date.parse(input.validUntilIso);\n        if (!Number.isNaN(untilMs) && evaluatedMs > untilMs) {\n            return { expired: true, notYetValid: false };\n        }\n    }\n\n    return { expired: false, notYetValid };\n}\n\nexport {\n    evaluateTemporalWindow,\n    ExpiredError,\n    NotYetValidError,\n    TemporalError,\n};\nexport type { TemporalErrorMetadata, TemporalKind, TemporalPrecision };\n","import { ValidationCode } from \"../exceptions/validation-code.js\";\nimport { ValidationField } from \"../exceptions/validation-field.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ValidationError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a single input fails a validation rule — the canonical\n * \"this field is wrong, and here is why\" error.\n *\n * It pins the offending `field` and a machine-readable `validationCode` into\n * the metadata (merged ahead of any caller-supplied metadata) so an API layer\n * can map the failure straight onto a form field without parsing the message.\n * The fixed {@link ErrorCodes.validation} code lets callers catch all\n * validation failures uniformly while still distinguishing the specific rule\n * through `validationCode`.\n */\nclass ValidationError extends AppError {\n    /**\n     * @param field - The input that failed validation; surfaced as `metadata.field`.\n     * @param code - The specific rule that was violated; surfaced as `metadata.validationCode`.\n     * @param message - The developer-facing description of the failure.\n     * @param options - Optional cause, correlation ids, and extra metadata\n     *   (merged over the field/code metadata, never overwriting it by accident).\n     */\n    constructor(\n        field: ValidationField,\n        code: ValidationCode,\n        message: string,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = {\n            field: field.value,\n            validationCode: code.value,\n        };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.validation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { ValidationError };\n"],"mappings":";;AAuCA,IAAM,sBAAN,MAAM,4BAA4B,SAAS;CAGvC,YAAoB,QAajB;EACC,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,OAAO,OAAO;GACd,UAAU;IACN,QAAQ,OAAO;IACf,GAAI,OAAO,YAAY,CAAC;GAC5B;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,eAAe,OAAO;GACtB,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,eAAe,OAAO;EAC1B,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;CAMA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB;IACtB,YAAY,SAAS;IACrB,eAAe,SAAS;IACxB,SAAS,SAAS;IAClB,eAAe,SAAS;IACxB,WAAW,SAAS;GACxB,CAAC;GACD,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;CAEA,OAAO,mBACH,SASmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAUA,kBAAgB,OAAO;GACjC,GAAG,uBAAuB,OAAO;EACrC,CAAC;CACL;AACJ;AAMA,SAAS,uBAAuB,SAAoC;CAChE,OAAO;EACH,OAAO,SAAS;EAChB,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB,WAAW,SAAS;EACpB,cAAc,SAAS;EACvB,eAAe,SAAS;CAC5B;AACJ;AAEA,SAASA,kBACL,OACa;CACb,IAAI,CAAC,OAAO,OAAO,KAAA;CAEnB,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;;;;;;;;;;;;ACpHA,IAAe,gBAAf,cAAqC,SAAS;CAG1C,YACI,QAOF;EACE,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,GAAG;GACH,UAAU;IACN,MAAM,OAAO;IACb,GAAG,OAAO;GACd;EACJ,CAAC;EAED,KAAK,OAAO,OAAO;EACnB,OAAO,OAAO,IAAI;CACtB;AACJ;;;;;;AAOA,IAAM,qBAAN,MAAM,2BAA2B,cAAc;CAC3C,YACI,OAIF;EACE,MAAM;GACF,SACI;GACJ,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;;CAUA,OAAO,SAAS,OAaO;EACnB,OAAO,IAAI,mBAAmB;GAC1B,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM,aAAa;IAC9B,OAAO,MAAM;IACb,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MAAM,MAAM,QAAQ;GACxB;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;AASA,IAAM,iBAAN,MAAM,uBAAuB,cAAc;CACvC,YACI,OAIF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAcG;EACf,OAAO,IAAI,eAAe;GACtB,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,gBAAgB,MAAM;IACtB,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;AAUA,IAAM,iCAAN,MAAM,uCAAuC,cAAc;CACvD,YACI,OAMF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAWmB;EAC/B,OAAO,IAAI,+BAA+B;GACtC,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,gBAAgB,MAAM;IACtB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW;KACP,MAAM;KACN,gBAAgB,MAAM;KACtB,OAAO,MAAM;KACb,SAAS,MAAM;IACnB;IACA,MAAM;GACV;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;;;;AAaA,SAAS,oCAAoC,OAY1B;CACf,OAAO,eAAe,SAAS;EAC3B,QAAQ,MAAM;EACd,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,gBAAgB,MAAM,UAAU;EAChC,eAAe,MAAM,KAAK;EAC1B,eAAe,MAAM,KAAK;EAC1B,WAAW,MAAM,KAAK;EACtB,WAAW,MAAM,KAAK;EACtB,OAAO,MAAM;CACjB,CAAC;AACL;;;AC3QA,IAAe,mBAAf,cAAwC,SAAS;CAG7C,YAAsB,OAAyC;EAC3D,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,OAAO,MAAM;GACb,UAAU;IAAE,MAAM,MAAM;IAAM,GAAG,MAAM;GAAS;EACpD,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,OAAO,OAAO,IAAI;CACtB;CAEA,OAAO,WAAW,OAWa;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,WAAW,OAea;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,gBAAgB,OAiBa;EAChC,OAAO,gCAAgC,SAAS,KAAK;CACzD;CAEA,OAAO,mBAAmB,OAea;EACnC,OAAO,mCAAmC,SAAS,KAAK;CAC5D;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAWe;EAC3B,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAee;EAC3B,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,kCAAN,MAAM,wCAAwC,iBAAiB;CAC3D,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAiBoB;EAChC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,gCAAgC;GACvC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,qCAAN,MAAM,2CAA2C,iBAAiB;CAC9D,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAeuB;EACnC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,mCAAmC;GAC1C,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,SAAS,mBACL,KACA,SACA,YACyC;CAKzC,OAAO;EACM;EACT,YALA,eACC,MAAO,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC,IAAK,KAAA;CAKvD;AACJ;;;;;;;;;;;;;;;ACpTA,IAAM,mBAAN,MAAM,yBAAyB,SAAS;CAGpC,YAAoB,QAA2C;EAC3D,MAAM,EAAE,SAAS,MAAM,UAAU,GAAG,SAAS;EAC7C,MAAM,SAAS,MAAM;GACjB,GAAG;GACH;EACJ,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;;;;;CAMA,OAAO,QAAQ,SAA2D;EACtE,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAW,GAAG;GAAQ,CAAC;GACzD,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;CAMA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAe,GAAG;GAAQ,CAAC;GAC7D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;;;;;;CAOA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAgB,GAAG;GAAQ,CAAC;GAC9D,GAAG,mBAAmB,OAAO;EACjC,CAAC;CACL;AACJ;AAwBA,SAAS,cACL,OACwB;CACxB,OAAO,gBAAgB;EACnB,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,cAAc,MAAM;CACxB,CAAC;AACL;AAEA,SAAS,mBACL,SAC0B;CAC1B,OAAO;EACH,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,UAAU,QAAQ;EAClB,eAAe,QAAQ;EACvB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,cAAc,QAAQ;EACtB,eAAe,QAAQ;CAC3B;AACJ;AAEA,SAAS,gBAAmD,OAAa;CACrE,OAAO,OAAO,YACV,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACnE;AACJ;;;AC1KA,IAAM,0BAAN,cAAsC,SAAS;CAC3C,YACI,SACA,SACA,SACF;EACE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAI,WAAW,CAAC;GAAI,GAAG,QAAQ;EAAS,IAC1C;EAEN,MAAM,SAAS,WAAW,oBAAoB;GAC1C,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ;;;AC6CA,IAAe,qBAAf,cAA0C,SAAS;CAM/C,YAAsB,OAAkC;EACpD,MAAM,MAAM,WAAW,yBAAyB,MAAM,MAAM;GACxD,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,UAAU,MAAM;IAChB,GAAG,MAAM;GACb;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;EAED,KAAK,YAAY,MAAM;EACvB,KAAK,WAAW,MAAM;EACtB,KAAK,WAAW,MAAM,SAAS;EAC/B,KAAK,WAAW,MAAM,SAAS;EAE/B,OAAO,OAAO,IAAI;CACtB;AACJ;AAMA,IAAM,uBAAN,MAAM,6BAA6B,mBAAmB;CAClD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGoB;EACpB,OAAO,IAAI,qBAAqB;GAC5B,SAAS,sBAAsB,QAAQ,eAAe,QAAQ;GAC9D,MAAM,mBAAmB,KAAK,eAAe,QAAQ;GACrD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,wBAAN,MAAM,8BAA8B,mBAAmB;CACnD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGqB;EACrB,OAAO,IAAI,sBAAsB;GAC7B,SAAS,sBAAsB,QAAQ,aAAa,QAAQ;GAC5D,MAAM,mBAAmB,KAAK,aAAa,QAAQ;GACnD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,qBAAN,MAAyB;CACrB,OAAO,KACH,WACA,UACM;EACN,OAAO,uBAAuB,WAAW,QAAQ;CACrD;AACJ;AAEA,IAAM,wBAAN,MAA4B;CACxB,OAAO,QACH,WACA,UACM;EACN,IAAI,cAAc,eAAe;GAC7B,IAAI,aAAa,gBACb,OAAO;GAEX,IAAI,aAAa,0BACb,OAAO;GAEX,IAAI,aAAa,8BACb,OAAO;GAEX,IAAI,aAAa,iBACb,OAAO;GAEX,IAAI,aAAa,2BACb,OAAO;GAEX,IAAI,aAAa,qBACb,OAAO;GAEX,OAAO;EACX;EAEA,IAAI,aAAa,oBACb,OAAO;EAEX,IAAI,aAAa,qBACb,OAAO;EAEX,OAAO;CACX;AACJ;AAMA,SAAS,YAAY,OAAgB,QAAQ,KAAyB;CAClE,IAAI;EACA,MAAM,aACF,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;EAC5D,OAAO,WAAW,SAAS,QACrB,GAAG,WAAW,MAAM,GAAG,KAAK,EAAE,KAC9B;CACV,QAAQ;EACJ;CACJ;AACJ;;;ACzLA,IAAe,gBAAf,cAAqC,SAAS;CAK1C,YAAsB,OAA6B;EAC/C,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,GAAG;GACH,UAAU;IACN,MAAM,MAAM;IACZ,GAAG,MAAM;GACb;EACJ,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,KAAK,eAAe,MAAM,SAAS;EACnC,KAAK,iBAAiB,MAAM,SAAS;EACrC,OAAO,OAAO,IAAI;CACtB;AACJ;AAOA,IAAM,eAAN,MAAM,qBAAqB,cAAc;CACrC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAA4C;EACxD,OAAO,IAAI,aAAa;GACpB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,IAAM,mBAAN,MAAM,yBAAyB,cAAc;CACzC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAAgD;EAC5D,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG;IACH,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;CACL;AACJ;AAEA,SAAS,uBAAuB,OAIsB;CAClD,MAAM,cAAc,KAAK,MAAM,MAAM,cAAc;CACnD,IAAI,OAAO,MAAM,WAAW,GAAG,OAAO;CAEtC,IAAI,cAAc;CAElB,IAAI,MAAM,cAAc;EACpB,MAAM,SAAS,KAAK,MAAM,MAAM,YAAY;EAC5C,IAAI,CAAC,OAAO,MAAM,MAAM,KAAK,cAAc,QACvC,cAAc;CAEtB;CAEA,IAAI,MAAM,eAAe;EACrB,MAAM,UAAU,KAAK,MAAM,MAAM,aAAa;EAC9C,IAAI,CAAC,OAAO,MAAM,OAAO,KAAK,cAAc,SACxC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAM;CAEnD;CAEA,OAAO;EAAE,SAAS;EAAO;CAAY;AACzC;;;;;;;;;;;;;;ACpHA,IAAM,kBAAN,cAA8B,SAAS;;;;;;;;CAQnC,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,eAAe;GACjB,OAAO,MAAM;GACb,gBAAgB,KAAK;EACzB;EACA,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,SAAS,WAAW,YAAY;GAClC,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ"}
+{"version":3,"file":"validation-error.js","names":[],"sources":["../src/core/errors/authentication-error.ts","../src/core/errors/conflict-error.ts","../src/core/errors/idempotency-error.ts","../src/core/errors/integration-error.ts","../src/core/errors/legacy-incompatible-error.ts","../src/core/errors/serialization-error.ts","../src/core/errors/temporal-error.ts","../src/core/errors/validation-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\nimport { compactMetadata, pickAppErrorOptions } from \"./utils/index.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype AuthenticationErrorReason =\n    | \"missing_token\"\n    | \"malformed_token\"\n    | \"invalid_token\"\n    | \"expired_token\"\n    | \"revoked_token\"\n    | \"invalid_credentials\"\n    | \"session_not_found\"\n    | \"session_expired\"\n    | \"unknown\";\n\ntype AuthenticationErrorMetadata = {\n    reason: AuthenticationErrorReason;\n    authScheme?: \"bearer\" | \"cookie\" | \"basic\" | \"unknown\";\n    tokenLocation?: \"header\" | \"cookie\" | \"query\" | \"unknown\";\n    expiresAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    details?: string;\n};\n\ntype AuthenticationErrorFactoryOptions = Omit<\n    AuthenticationErrorMetadata,\n    \"reason\"\n> &\n    Omit<AppErrorOptions, \"metadata\">;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuthenticationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass AuthenticationError extends AppError {\n    public readonly reason: AuthenticationErrorReason;\n\n    private constructor(params: {\n        message: string;\n        code: string;\n        reason: AuthenticationErrorReason;\n        metadata?: Omit<AuthenticationErrorMetadata, \"reason\">;\n        cause?: unknown;\n        type?: string;\n        severity?: ErrorSeverity;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        createdAtIso?: string;\n        publicMessage?: string;\n    }) {\n        super(params.message, params.code, {\n            cause: params.cause,\n            metadata: {\n                reason: params.reason,\n                ...(params.metadata ?? {}),\n            },\n            type: params.type,\n            severity: params.severity,\n            correlationId: params.correlationId,\n            requestId: params.requestId,\n            commandId: params.commandId,\n            createdAtIso: params.createdAtIso,\n            publicMessage: params.publicMessage,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    // ─────────────────────────────────────────────────────────────────────────\n    // Factory methods\n    // ─────────────────────────────────────────────────────────────────────────\n\n    static missingToken(\n        options?: AuthenticationErrorFactoryOptions,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Missing credentials\",\n            code: ErrorCodes.authentication.missingToken,\n            reason: \"missing_token\",\n            metadata: compactMetadata(options),\n            ...pickAppErrorOptions(options),\n        });\n    }\n\n    static invalidToken(\n        options?: AuthenticationErrorFactoryOptions & { cause?: unknown },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid credentials\",\n            code: ErrorCodes.authentication.invalidToken,\n            reason: \"invalid_token\",\n            metadata: compactMetadata({\n                authScheme: options?.authScheme,\n                tokenLocation: options?.tokenLocation,\n                details: options?.details,\n                correlationId: options?.correlationId,\n                requestId: options?.requestId,\n            }),\n            ...pickAppErrorOptions(options),\n        });\n    }\n\n    static expiredToken(\n        options?: AuthenticationErrorFactoryOptions & { sessionId?: string },\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Expired credentials\",\n            code: ErrorCodes.authentication.expiredToken,\n            reason: \"expired_token\",\n            metadata: compactMetadata(options),\n            ...pickAppErrorOptions(options),\n        });\n    }\n\n    static invalidCredentials(\n        options?: Pick<\n            AuthenticationErrorFactoryOptions,\n            | \"correlationId\"\n            | \"requestId\"\n            | \"type\"\n            | \"severity\"\n            | \"createdAtIso\"\n            | \"publicMessage\"\n        >,\n    ): AuthenticationError {\n        return new AuthenticationError({\n            message: \"Invalid username or password\",\n            code: ErrorCodes.authentication.invalidCredentials,\n            reason: \"invalid_credentials\",\n            metadata: compactMetadata(options),\n            ...pickAppErrorOptions(options),\n        });\n    }\n}\n\nexport { AuthenticationError };\nexport type { AuthenticationErrorMetadata, AuthenticationErrorReason };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n/**\n * Conflict kinds we want to distinguish semantically.\n */\ntype ConflictKind = \"already_exists\" | \"duplicate\" | \"unique_violation\";\n\n/**\n * Metadata attached to conflicts without exposing sensitive values.\n */\ntype ConflictErrorMetadata = {\n    kind: ConflictKind;\n    entity: string;\n    operation?: string;\n    field?: string;\n    constraintName?: string;\n    existingId?: string;\n    valueHash?: string;\n    valuePreview?: string;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n};\n\n/**\n * Storage-level description of a unique-constraint breach, as reported by a\n * database driver. Used to translate a raw DB error into a domain\n * {@link DuplicateError} via {@link translateUniqueViolationToDuplicate}.\n */\ntype UniqueConstraintViolation = {\n    kind: \"unique_violation\";\n    constraintName?: string;\n    table?: string;\n    columns?: string[];\n};\n\n/**\n * Base for errors that signal a state conflict — the request collides with data\n * that already exists. Common at an HTTP 409 boundary.\n *\n * The discriminating {@link kind} lets a handler branch on *why* it conflicted\n * (an already-existing record, a domain duplicate, or a raw storage uniqueness\n * breach) without `instanceof` chains. Abstract: construct one of the concrete\n * subclasses through its `detected(...)` factory, which fills in the right code,\n * message, and metadata. Instances are frozen, so a conflict error can be shared\n * and rethrown without risk of tampering.\n */\nabstract class ConflictError extends AppError {\n    public readonly kind: ConflictKind;\n\n    protected constructor(\n        params: {\n            message: string;\n            code: string;\n            kind: ConflictKind;\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super(params.message, params.code, {\n            ...params,\n            metadata: {\n                kind: params.kind,\n                ...params.metadata,\n            },\n        });\n\n        this.kind = params.kind;\n        Object.freeze(this);\n    }\n}\n\n/**\n * The operation cannot proceed because a matching record already exists —\n * e.g. creating something whose natural key is already taken. Construct via\n * {@link AlreadyExistsError.detected}.\n */\nclass AlreadyExistsError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message:\n                \"A matching record already exists for the requested operation\",\n            code: ErrorCodes.conflict.alreadyExists,\n            kind: \"already_exists\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds an {@link AlreadyExistsError} for a detected collision. `operation`\n     * defaults to `\"create\"` and a generic retry `hint` is supplied when none is\n     * given, so the error is actionable even from a minimal call site.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (operation, field, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): AlreadyExistsError {\n        return new AlreadyExistsError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation ?? \"create\",\n                field: input.field,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint: input.hint ?? \"Verify existing records before retrying.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A domain-level duplicate: the data being written would duplicate an existing\n * record under the model's own uniqueness rules. Use this when the duplication\n * is recognized in the domain, as opposed to a raw DB constraint\n * ({@link UniqueConstraintViolationError}). Construct via\n * {@link DuplicateError.detected}.\n */\nclass DuplicateError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\">;\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Conflict: an existing record violates uniqueness\",\n            code: ErrorCodes.conflict.duplicate,\n            kind: \"duplicate\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link DuplicateError} for a detected duplicate, defaulting to a\n     * \"adjust the data so it does not duplicate\" hint when none is provided.\n     *\n     * @param input - The conflicting entity plus optional non-sensitive context\n     *   (field, constraint name, existing id, value hash/preview, correlation ids).\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        field?: string;\n        constraintName?: string;\n        existingId?: string;\n        valueHash?: string;\n        valuePreview?: string;\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        hint?: string;\n        cause?: unknown;\n    }): DuplicateError {\n        return new DuplicateError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                field: input.field,\n                constraintName: input.constraintName,\n                existingId: input.existingId,\n                valueHash: input.valueHash,\n                valuePreview: input.valuePreview,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                hint:\n                    input.hint ??\n                    \"Adjust the data so it does not duplicate existing records.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * A uniqueness breach surfaced by the storage layer itself (a database unique\n * index), carrying the raw {@link UniqueConstraintViolation} (constraint, table,\n * columns). Keep this distinct from {@link DuplicateError}: this one is the\n * infrastructure signal; translate it into a domain duplicate at the boundary\n * with {@link translateUniqueViolationToDuplicate} when the model should own the\n * message. Construct via {@link UniqueConstraintViolationError.detected}.\n */\nclass UniqueConstraintViolationError extends ConflictError {\n    private constructor(\n        input: {\n            metadata: Omit<ConflictErrorMetadata, \"kind\"> & {\n                violation: UniqueConstraintViolation;\n            };\n            cause?: unknown;\n        } & AppErrorOptions,\n    ) {\n        super({\n            message: \"Uniqueness violation in storage\",\n            code: ErrorCodes.conflict.uniqueViolation,\n            kind: \"unique_violation\",\n            ...input,\n        });\n    }\n\n    /**\n     * Builds a {@link UniqueConstraintViolationError} from the constraint details\n     * a driver reports, packaging them into a nested `violation` payload.\n     *\n     * @param input - The entity plus the offending constraint name, table, and\n     *   columns, and optional correlation ids.\n     */\n    static detected(input: {\n        entity: string;\n        operation?: string;\n        constraintName?: string;\n        table?: string;\n        columns?: string[];\n        detectedAtIso?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        cause?: unknown;\n    }): UniqueConstraintViolationError {\n        return new UniqueConstraintViolationError({\n            metadata: {\n                entity: input.entity,\n                operation: input.operation,\n                constraintName: input.constraintName,\n                detectedAtIso: input.detectedAtIso,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                violation: {\n                    kind: \"unique_violation\",\n                    constraintName: input.constraintName,\n                    table: input.table,\n                    columns: input.columns,\n                },\n                hint: \"Uniqueness conflict detected in the database.\",\n            },\n            cause: input.cause,\n        });\n    }\n}\n\n/**\n * Translates a raw storage {@link UniqueConstraintViolation} into a domain-level\n * {@link DuplicateError}. This is the seam where an infrastructure concern (a DB\n * unique index firing) is re-expressed in the language of the model, so callers\n * upstream catch a `DuplicateError` and never have to know a database was\n * involved.\n *\n * @param input - The entity, the driver-reported `violation`, and optional\n *   request context (`ctx`) carrying correlation ids and a clock instant.\n * @returns A {@link DuplicateError} carrying the constraint name as its field hint.\n */\nfunction translateUniqueViolationToDuplicate(input: {\n    entity: string;\n    operation?: string;\n    violation: UniqueConstraintViolation;\n    field?: string;\n    ctx?: {\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        nowIso?: string;\n    };\n    cause?: unknown;\n}): DuplicateError {\n    return DuplicateError.detected({\n        entity: input.entity,\n        operation: input.operation,\n        field: input.field,\n        constraintName: input.violation.constraintName,\n        detectedAtIso: input.ctx?.nowIso,\n        correlationId: input.ctx?.correlationId,\n        requestId: input.ctx?.requestId,\n        commandId: input.ctx?.commandId,\n        cause: input.cause,\n    });\n}\n\nexport {\n    AlreadyExistsError,\n    ConflictError,\n    DuplicateError,\n    translateUniqueViolationToDuplicate,\n    UniqueConstraintViolationError,\n};\n\nexport type { ConflictErrorMetadata, ConflictKind, UniqueConstraintViolation };\n","import { payloadHash, sha256Hex } from \"../shared/hashing.js\";\nimport { stableStringify } from \"../shared/stable-stringify.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\n\nexport type IdempotencyFailureKind =\n    | \"key_missing\"\n    | \"in_progress\"\n    | \"payload_mismatch\"\n    | \"replay_not_supported\"\n    | \"unknown\";\n\nexport type IdempotencyErrorMetadata = {\n    kind: IdempotencyFailureKind;\n    operation: string;\n    scope?: string;\n    entity?: string;\n    keyHash?: string;\n    keyPreview?: string;\n    incomingPayloadHash?: string;\n    existingPayloadHash?: string;\n    idempotencyRecordId?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    detectedAtIso?: string;\n    hint?: string;\n    details?: string;\n};\n\ntype IdempotencyErrorConstructorInput = {\n    message: string;\n    code: string;\n    kind: IdempotencyFailureKind;\n    metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n    cause?: unknown;\n};\n\nabstract class IdempotencyError extends AppError {\n    public readonly kind: IdempotencyFailureKind;\n\n    protected constructor(input: IdempotencyErrorConstructorInput) {\n        super(input.message, input.code, {\n            cause: input.cause,\n            metadata: { kind: input.kind, ...input.metadata },\n        });\n\n        this.kind = input.kind;\n        Object.freeze(this);\n    }\n\n    static keyMissing(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return IdempotencyKeyMissingError.detected(input);\n    }\n\n    static inProgress(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        return IdempotencyInProgressError.detected(input);\n    }\n\n    static payloadMismatch(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        return IdempotencyPayloadMismatchError.detected(input);\n    }\n\n    static replayNotSupported(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        return IdempotencyReplayNotSupportedError.detected(input);\n    }\n}\n\nclass IdempotencyKeyMissingError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Idempotency key/commandId missing for the requested operation\",\n            code: ErrorCodes.idempotency.keyMissing,\n            kind: \"key_missing\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyKeyMissingError {\n        return new IdempotencyKeyMissingError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Send a commandId/idempotency key to prevent duplicate processing.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyInProgressError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The same business intent is already being processed\",\n            code: ErrorCodes.idempotency.inProgress,\n            kind: \"in_progress\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyInProgressError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyInProgressError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Wait for completion and retry using the same key.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyPayloadMismatchError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message: \"The idempotency key was reused with a different payload\",\n            code: ErrorCodes.idempotency.payloadMismatch,\n            kind: \"payload_mismatch\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        incomingPayloadHash?: string;\n        existingPayloadHash?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyPayloadMismatchError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyPayloadMismatchError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                incomingPayloadHash: input.incomingPayloadHash,\n                existingPayloadHash: input.existingPayloadHash,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Use a new idempotency key for a new intent. The same key should only be reused for retries of the same payload.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nclass IdempotencyReplayNotSupportedError extends IdempotencyError {\n    private constructor(input: {\n        metadata: Omit<IdempotencyErrorMetadata, \"kind\">;\n        cause?: unknown;\n    }) {\n        super({\n            message:\n                \"Re-execution detected, but replay of the previous result is not implemented\",\n            code: ErrorCodes.idempotency.replayNotSupported,\n            kind: \"replay_not_supported\",\n            metadata: input.metadata,\n            cause: input.cause,\n        });\n    }\n\n    static detected(input: {\n        operation: string;\n        scope?: string;\n        entity?: string;\n        key?: string;\n        keyHash?: string;\n        keyPreview?: string;\n        idempotencyRecordId?: string;\n        correlationId?: string;\n        requestId?: string;\n        commandId?: string;\n        detectedAtIso?: string;\n        hint?: string;\n        details?: string;\n        cause?: unknown;\n    }): IdempotencyReplayNotSupportedError {\n        const resolved = resolveKeyIdentity(\n            input.key,\n            input.keyHash,\n            input.keyPreview,\n        );\n\n        return new IdempotencyReplayNotSupportedError({\n            cause: input.cause,\n            metadata: {\n                operation: input.operation,\n                scope: input.scope,\n                entity: input.entity,\n                keyHash: resolved.keyHash,\n                keyPreview: resolved.keyPreview,\n                idempotencyRecordId: input.idempotencyRecordId,\n                correlationId: input.correlationId,\n                requestId: input.requestId,\n                commandId: input.commandId,\n                detectedAtIso: input.detectedAtIso,\n                hint:\n                    input.hint ??\n                    \"Try again later, or enable result replay for full idempotency.\",\n                details: input.details,\n            },\n        });\n    }\n}\n\nfunction resolveKeyIdentity(\n    key?: string,\n    keyHash?: string,\n    keyPreview?: string,\n): { keyHash?: string; keyPreview?: string } {\n    const preview =\n        keyPreview ??\n        (key ? (key.length <= 8 ? key : key.slice(0, 8)) : undefined);\n\n    return {\n        // Derive the hash from the raw key when the caller didn't supply one —\n        // cheap traceability without leaking the key itself.\n        keyHash: keyHash ?? (key ? sha256Hex(key) : undefined),\n        keyPreview: preview,\n    };\n}\n\nexport {\n    IdempotencyError,\n    IdempotencyKeyMissingError,\n    IdempotencyInProgressError,\n    IdempotencyPayloadMismatchError,\n    IdempotencyReplayNotSupportedError,\n    sha256Hex,\n    stableStringify,\n    payloadHash,\n};\n","import type { AppErrorOptions, ErrorSeverity } from \"./types.js\";\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport { compactMetadata, pickAppErrorOptions } from \"./utils/index.js\";\n\ntype IntegrationErrorReason =\n    | \"timeout\"\n    | \"unreachable\"\n    | \"bad_response\"\n    | \"unknown\";\n\ntype IntegrationErrorMetadata = {\n    reason: IntegrationErrorReason;\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n};\n\ntype IntegrationErrorAppOptions = Pick<\n    AppErrorOptions,\n    | \"cause\"\n    | \"type\"\n    | \"severity\"\n    | \"correlationId\"\n    | \"requestId\"\n    | \"commandId\"\n    | \"createdAtIso\"\n    | \"publicMessage\"\n>;\n\ntype IntegrationErrorConstructorParams = {\n    message: string;\n    code: string;\n    reason: IntegrationErrorReason;\n    metadata: IntegrationErrorMetadata;\n} & IntegrationErrorAppOptions;\n\n/**\n * Raised when a call to an external provider fails — a timeout, an unreachable\n * endpoint, or a malformed response. This is the boundary error that separates\n * \"our code is fine, the outside world misbehaved\" from internal faults, which\n * matters for retry and alerting decisions.\n *\n * Every instance records the `provider`, the `operation`, and timing\n * (`startedAtIso` / `durationMs`) so failures are correlatable across services\n * and a slow dependency is visible in the metadata. The discriminating\n * {@link reason} lets callers decide whether a failure is worth retrying.\n * Instances are frozen; construct through the static factories.\n */\nclass IntegrationError extends AppError {\n    public readonly reason: IntegrationErrorReason;\n\n    private constructor(params: IntegrationErrorConstructorParams) {\n        const { message, code, metadata, ...rest } = params;\n        super(message, code, {\n            ...rest,\n            metadata,\n        });\n\n        this.reason = params.reason;\n        Object.freeze(this);\n    }\n\n    /**\n     * The provider did not respond within the allotted time. Usually retryable,\n     * since a timeout leaves the outcome unknown rather than known-failed.\n     */\n    static timeout(options: IntegrationErrorTimeoutOptions): IntegrationError {\n        return new IntegrationError({\n            message: \"Timeout while integrating with external provider\",\n            code: ErrorCodes.integration.timeout,\n            reason: \"timeout\",\n            metadata: buildMetadata({ reason: \"timeout\", ...options }),\n            ...pickAppErrorOptions(options),\n        });\n    }\n\n    /**\n     * The provider could not be reached at all (connection refused, DNS\n     * failure, network partition) — the request never landed.\n     */\n    static unreachable(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Provider unavailable\",\n            code: ErrorCodes.integration.unreachable,\n            reason: \"unreachable\",\n            metadata: buildMetadata({ reason: \"unreachable\", ...options }),\n            ...pickAppErrorOptions(options),\n        });\n    }\n\n    /**\n     * The provider answered, but with something the system cannot use — an\n     * unexpected status, an unparsable body, or a contract mismatch. Unlike a\n     * timeout this is a definite failure, so blind retries rarely help.\n     */\n    static badResponse(\n        options: IntegrationErrorEndpointOptions,\n    ): IntegrationError {\n        return new IntegrationError({\n            message: \"Unexpected response from provider\",\n            code: ErrorCodes.integration.badResponse,\n            reason: \"bad_response\",\n            metadata: buildMetadata({ reason: \"bad_response\", ...options }),\n            ...pickAppErrorOptions(options),\n        });\n    }\n}\n\ntype IntegrationErrorBaseOptions = {\n    provider: string;\n    operation: string;\n    startedAtIso: string;\n    durationMs: number;\n    detectedAtIso?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    details?: string;\n    statusCode?: number;\n    responseCode?: string;\n    cause?: unknown;\n    type?: string;\n    severity?: ErrorSeverity;\n    createdAtIso?: string;\n    publicMessage?: string;\n};\n\ntype IntegrationErrorTimeoutOptions = IntegrationErrorBaseOptions;\ntype IntegrationErrorEndpointOptions = IntegrationErrorBaseOptions;\n\nfunction buildMetadata(\n    input: IntegrationErrorBaseOptions & { reason: IntegrationErrorReason },\n): IntegrationErrorMetadata {\n    return compactMetadata({\n        reason: input.reason,\n        provider: input.provider,\n        operation: input.operation,\n        startedAtIso: input.startedAtIso,\n        durationMs: input.durationMs,\n        detectedAtIso: input.detectedAtIso,\n        correlationId: input.correlationId,\n        requestId: input.requestId,\n        commandId: input.commandId,\n        details: input.details,\n        statusCode: input.statusCode,\n        responseCode: input.responseCode,\n    }) as IntegrationErrorMetadata;\n}\n\nexport { IntegrationError };\nexport type { IntegrationErrorReason, IntegrationErrorMetadata };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// LegacyIncompatibleError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass LegacyIncompatibleError extends AppError {\n    constructor(\n        message: string,\n        context?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const mergedMetadata = options?.metadata\n            ? { ...(context ?? {}), ...options.metadata }\n            : context;\n\n        super(message, ErrorCodes.legacyIncompatible, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n        Object.freeze(this);\n    }\n}\n\nexport { LegacyIncompatibleError };\n","import { AppError } from \"./app-error.js\";\nimport { serializationErrorCode } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationDirection = \"serialize\" | \"deserialize\";\n\ntype SerializationFailureCategory =\n    | \"invalid_json\"\n    | \"invalid_shape\"\n    | \"missing_field\"\n    | \"unexpected_field\"\n    | \"invalid_type\"\n    | \"schema_version_missing\"\n    | \"schema_version_unsupported\"\n    | \"mapping_not_implemented\"\n    | \"contract_mismatch\"\n    | \"parse_failed\"\n    | \"stringify_failed\"\n    | \"unknown\";\n\ntype SerializationBoundary =\n    | \"http_in\"\n    | \"http_out\"\n    | \"graphql_in\"\n    | \"graphql_out\"\n    | \"dto_to_domain\"\n    | \"domain_to_dto\"\n    | \"persistence_to_domain\"\n    | \"domain_to_persistence\"\n    | \"event_in\"\n    | \"event_out\"\n    | \"projection\"\n    | \"unknown\";\n\n/**\n * Metadata shared by serialization/deserialization failures. Payload previews must be sanitized.\n */\ntype SerializationErrorMetadata = {\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n    boundary: SerializationBoundary;\n    contract: string;\n    schemaVersion?: number | string;\n    path?: string;\n    payloadPreview?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n    hint?: string;\n    details?: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Base error\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype SerializationErrorOptions = Omit<AppErrorOptions, \"metadata\"> & {\n    message: string;\n    code: string;\n    metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\">;\n    direction: SerializationDirection;\n    category: SerializationFailureCategory;\n};\n\nabstract class SerializationError extends AppError {\n    public readonly direction: SerializationDirection;\n    public readonly category: SerializationFailureCategory;\n    public readonly boundary: SerializationBoundary;\n    public readonly contract: string;\n\n    protected constructor(input: SerializationErrorOptions) {\n        super(input.message ?? \"Serialization failure\", input.code, {\n            cause: input.cause,\n            metadata: {\n                direction: input.direction,\n                category: input.category,\n                ...input.metadata,\n            },\n            type: input.type,\n            severity: input.severity,\n            correlationId: input.correlationId,\n            requestId: input.requestId,\n            commandId: input.commandId,\n            createdAtIso: input.createdAtIso,\n            publicMessage: input.publicMessage,\n        });\n\n        this.direction = input.direction;\n        this.category = input.category;\n        this.boundary = input.metadata.boundary;\n        this.contract = input.metadata.contract;\n\n        Object.freeze(this);\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization In\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationInError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationInError {\n        return new SerializationInError({\n            message: SerializationMessages.message(\"deserialize\", category),\n            code: SerializationCodes.code(\"deserialize\", category),\n            category,\n            direction: \"deserialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Serialization\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationOutError extends SerializationError {\n    private constructor(input: SerializationErrorOptions) {\n        super(input);\n    }\n\n    static failure(\n        category: SerializationFailureCategory,\n        metadata: Omit<SerializationErrorMetadata, \"direction\" | \"category\"> & {\n            cause?: unknown;\n        },\n    ): SerializationOutError {\n        return new SerializationOutError({\n            message: SerializationMessages.message(\"serialize\", category),\n            code: SerializationCodes.code(\"serialize\", category),\n            category,\n            direction: \"serialize\",\n            metadata,\n            cause: metadata.cause,\n        });\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Codes + Messages helpers\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass SerializationCodes {\n    static code(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        return serializationErrorCode(direction, category);\n    }\n}\n\nclass SerializationMessages {\n    static message(\n        direction: SerializationDirection,\n        category: SerializationFailureCategory,\n    ): string {\n        if (direction === \"deserialize\") {\n            if (category === \"invalid_json\") {\n                return \"Invalid payload: malformed JSON\";\n            }\n            if (category === \"schema_version_missing\") {\n                return \"Invalid payload: schemaVersion is missing\";\n            }\n            if (category === \"schema_version_unsupported\") {\n                return \"Invalid payload: schemaVersion is not supported\";\n            }\n            if (category === \"invalid_shape\") {\n                return \"Invalid payload: incompatible shape\";\n            }\n            if (category === \"mapping_not_implemented\") {\n                return \"Unsupported payload: mapping not implemented\";\n            }\n            if (category === \"contract_mismatch\") {\n                return \"Payload does not match the expected contract\";\n            }\n            return \"Failed to parse incoming payload\";\n        }\n\n        if (category === \"stringify_failed\") {\n            return \"Failed to serialize the response\";\n        }\n        if (category === \"contract_mismatch\") {\n            return \"Response does not match the expected contract\";\n        }\n        return \"Failed to build the response\";\n    }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Utilities\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction safePreview(value: unknown, limit = 240): string | undefined {\n    try {\n        const serialized =\n            typeof value === \"string\" ? value : JSON.stringify(value);\n        return serialized.length > limit\n            ? `${serialized.slice(0, limit)}…`\n            : serialized;\n    } catch {\n        return undefined;\n    }\n}\n\nexport {\n    safePreview,\n    SerializationCodes,\n    SerializationError,\n    SerializationInError as DeserializationError,\n    SerializationInError,\n    SerializationMessages,\n    SerializationOutError,\n};\nexport type {\n    SerializationBoundary,\n    SerializationDirection,\n    SerializationErrorMetadata,\n    SerializationFailureCategory,\n};\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\nimport { pickAppErrorOptions, stripAppErrorOptions } from \"./utils/index.js\";\n\ntype TemporalKind = \"expired\" | \"not_yet_valid\";\n\ntype TemporalPrecision = \"EXACT\" | \"ESTIMATED\" | \"UNKNOWN\" | \"APPROXIMATE\";\n\ntype TemporalErrorMetadata = {\n    resourceType: string;\n    resourceId?: string;\n    operation?: string;\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n    policyId?: string;\n    precision?: TemporalPrecision;\n    hint?: string;\n    details?: string;\n    correlationId?: string;\n    requestId?: string;\n    commandId?: string;\n};\n\ntype TemporalErrorOptions = {\n    message: string;\n    code: string;\n    kind: TemporalKind;\n    metadata: TemporalErrorMetadata;\n} & AppErrorOptions;\n\nabstract class TemporalError extends AppError {\n    public readonly kind: TemporalKind;\n    public readonly resourceType: string;\n    public readonly evaluatedAtIso: string;\n\n    protected constructor(input: TemporalErrorOptions) {\n        super(input.message, input.code, {\n            ...input,\n            metadata: {\n                kind: input.kind,\n                ...input.metadata,\n            },\n        });\n\n        this.kind = input.kind;\n        this.resourceType = input.metadata.resourceType;\n        this.evaluatedAtIso = input.metadata.evaluatedAtIso;\n        Object.freeze(this);\n    }\n}\n\ntype TemporalCreationInput = TemporalErrorMetadata &\n    Partial<Omit<AppErrorOptions, \"metadata\">> & {\n        cause?: unknown;\n    };\n\nclass ExpiredError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): ExpiredError {\n        return new ExpiredError({\n            message: \"The validity of the resource/action has expired\",\n            code: ErrorCodes.temporal.expired,\n            kind: \"expired\",\n            metadata: {\n                ...stripAppErrorOptions(input),\n                hint:\n                    input.hint ??\n                    \"The window has expired. Request a new link or try again within the valid period.\",\n            },\n            ...pickAppErrorOptions(input),\n        });\n    }\n}\n\nclass NotYetValidError extends TemporalError {\n    private constructor(input: TemporalErrorOptions) {\n        super(input);\n    }\n\n    static detected(input: TemporalCreationInput): NotYetValidError {\n        return new NotYetValidError({\n            message: \"The resource/action is not yet valid\",\n            code: ErrorCodes.temporal.notYetValid,\n            kind: \"not_yet_valid\",\n            metadata: {\n                ...stripAppErrorOptions(input),\n                hint:\n                    input.hint ??\n                    \"Not yet within the valid period. Try again later.\",\n            },\n            ...pickAppErrorOptions(input),\n        });\n    }\n}\n\n/**\n * Evaluates whether `evaluatedAtIso` falls inside the [`validFromIso`,\n * `validUntilIso`] window.\n *\n * Fails **closed**: a boundary that is present but unparseable is treated as if\n * the window were closed on that side (a bad `validUntilIso` → expired, a bad\n * `validFromIso` → not-yet-valid), never silently ignored — these checks guard\n * access (invites, links, tokens), so a typo in an expiry must not disable\n * expiry. A `null`/absent boundary means \"no bound on that side\", which is\n * distinct from a malformed one. Returns `null` only when `evaluatedAtIso`\n * itself is unparseable (nothing can be decided).\n *\n * For an inverted window (`validFrom` > `validUntil`) `expired` wins, since the\n * upper-bound check short-circuits.\n */\nfunction evaluateTemporalWindow(input: {\n    validFromIso?: string | null;\n    validUntilIso?: string | null;\n    evaluatedAtIso: string;\n}): { expired: boolean; notYetValid: boolean } | null {\n    const evaluatedMs = Date.parse(input.evaluatedAtIso);\n    if (Number.isNaN(evaluatedMs)) return null;\n\n    let notYetValid = false;\n\n    if (input.validFromIso) {\n        const fromMs = Date.parse(input.validFromIso);\n        if (Number.isNaN(fromMs) || evaluatedMs < fromMs) {\n            notYetValid = true;\n        }\n    }\n\n    if (input.validUntilIso) {\n        const untilMs = Date.parse(input.validUntilIso);\n        if (Number.isNaN(untilMs) || evaluatedMs > untilMs) {\n            return { expired: true, notYetValid: false };\n        }\n    }\n\n    return { expired: false, notYetValid };\n}\n\nexport {\n    evaluateTemporalWindow,\n    ExpiredError,\n    NotYetValidError,\n    TemporalError,\n};\nexport type { TemporalErrorMetadata, TemporalKind, TemporalPrecision };\n","import { ValidationCode } from \"../exceptions/validation-code.js\";\nimport { ValidationField } from \"../exceptions/validation-field.js\";\n\nimport { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ValidationError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a single input fails a validation rule — the canonical\n * \"this field is wrong, and here is why\" error.\n *\n * It pins the offending `field` and a machine-readable `validationCode` into\n * the metadata (merged ahead of any caller-supplied metadata) so an API layer\n * can map the failure straight onto a form field without parsing the message.\n * The fixed {@link ErrorCodes.validation} code lets callers catch all\n * validation failures uniformly while still distinguishing the specific rule\n * through `validationCode`.\n */\nclass ValidationError extends AppError {\n    /**\n     * @param field - The input that failed validation; surfaced as `metadata.field`.\n     * @param code - The specific rule that was violated; surfaced as `metadata.validationCode`.\n     * @param message - The developer-facing description of the failure.\n     * @param options - Optional cause, correlation ids, and extra metadata\n     *   (merged over the field/code metadata, never overwriting it by accident).\n     */\n    constructor(\n        field: ValidationField,\n        code: ValidationCode,\n        message: string,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = {\n            field: field.value,\n            validationCode: code.value,\n        };\n        // `field`/`validationCode` spread last so caller metadata is merged\n        // over them without ever overwriting them by accident.\n        const mergedMetadata = options?.metadata\n            ? { ...options.metadata, ...baseMetadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.validation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n        Object.freeze(this);\n    }\n}\n\nexport { ValidationError };\n"],"mappings":";;;;AAwCA,IAAM,sBAAN,MAAM,4BAA4B,SAAS;CAGvC,YAAoB,QAajB;EACC,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,OAAO,OAAO;GACd,UAAU;IACN,QAAQ,OAAO;IACf,GAAI,OAAO,YAAY,CAAC;GAC5B;GACA,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,eAAe,OAAO;GACtB,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,eAAe,OAAO;EAC1B,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;CAMA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAU,gBAAgB,OAAO;GACjC,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAU,gBAAgB;IACtB,YAAY,SAAS;IACrB,eAAe,SAAS;IACxB,SAAS,SAAS;IAClB,eAAe,SAAS;IACxB,WAAW,SAAS;GACxB,CAAC;GACD,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;CAEA,OAAO,aACH,SACmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAU,gBAAgB,OAAO;GACjC,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;CAEA,OAAO,mBACH,SASmB;EACnB,OAAO,IAAI,oBAAoB;GAC3B,SAAS;GACT,MAAM,WAAW,eAAe;GAChC,QAAQ;GACR,UAAU,gBAAgB,OAAO;GACjC,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;AACJ;;;;;;;;;;;;;;AC1FA,IAAe,gBAAf,cAAqC,SAAS;CAG1C,YACI,QAOF;EACE,MAAM,OAAO,SAAS,OAAO,MAAM;GAC/B,GAAG;GACH,UAAU;IACN,MAAM,OAAO;IACb,GAAG,OAAO;GACd;EACJ,CAAC;EAED,KAAK,OAAO,OAAO;EACnB,OAAO,OAAO,IAAI;CACtB;AACJ;;;;;;AAOA,IAAM,qBAAN,MAAM,2BAA2B,cAAc;CAC3C,YACI,OAIF;EACE,MAAM;GACF,SACI;GACJ,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;;CAUA,OAAO,SAAS,OAaO;EACnB,OAAO,IAAI,mBAAmB;GAC1B,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM,aAAa;IAC9B,OAAO,MAAM;IACb,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MAAM,MAAM,QAAQ;GACxB;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;AASA,IAAM,iBAAN,MAAM,uBAAuB,cAAc;CACvC,YACI,OAIF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAcG;EACf,OAAO,IAAI,eAAe;GACtB,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,gBAAgB,MAAM;IACtB,YAAY,MAAM;IAClB,WAAW,MAAM;IACjB,cAAc,MAAM;IACpB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,MACI,MAAM,QACN;GACR;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;AAUA,IAAM,iCAAN,MAAM,uCAAuC,cAAc;CACvD,YACI,OAMF;EACE,MAAM;GACF,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,GAAG;EACP,CAAC;CACL;;;;;;;;CASA,OAAO,SAAS,OAWmB;EAC/B,OAAO,IAAI,+BAA+B;GACtC,UAAU;IACN,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,gBAAgB,MAAM;IACtB,eAAe,MAAM;IACrB,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW;KACP,MAAM;KACN,gBAAgB,MAAM;KACtB,OAAO,MAAM;KACb,SAAS,MAAM;IACnB;IACA,MAAM;GACV;GACA,OAAO,MAAM;EACjB,CAAC;CACL;AACJ;;;;;;;;;;;;AAaA,SAAS,oCAAoC,OAY1B;CACf,OAAO,eAAe,SAAS;EAC3B,QAAQ,MAAM;EACd,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,gBAAgB,MAAM,UAAU;EAChC,eAAe,MAAM,KAAK;EAC1B,eAAe,MAAM,KAAK;EAC1B,WAAW,MAAM,KAAK;EACtB,WAAW,MAAM,KAAK;EACtB,OAAO,MAAM;CACjB,CAAC;AACL;;;AC1QA,IAAe,mBAAf,cAAwC,SAAS;CAG7C,YAAsB,OAAyC;EAC3D,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,OAAO,MAAM;GACb,UAAU;IAAE,MAAM,MAAM;IAAM,GAAG,MAAM;GAAS;EACpD,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,OAAO,OAAO,IAAI;CACtB;CAEA,OAAO,WAAW,OAWa;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,WAAW,OAea;EAC3B,OAAO,2BAA2B,SAAS,KAAK;CACpD;CAEA,OAAO,gBAAgB,OAiBa;EAChC,OAAO,gCAAgC,SAAS,KAAK;CACzD;CAEA,OAAO,mBAAmB,OAea;EACnC,OAAO,mCAAmC,SAAS,KAAK;CAC5D;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAWe;EAC3B,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,6BAAN,MAAM,mCAAmC,iBAAiB;CACtD,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAee;EAC3B,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,2BAA2B;GAClC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,kCAAN,MAAM,wCAAwC,iBAAiB;CAC3D,YAAoB,OAGjB;EACC,MAAM;GACF,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAiBoB;EAChC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,gCAAgC;GACvC,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,IAAM,qCAAN,MAAM,2CAA2C,iBAAiB;CAC9D,YAAoB,OAGjB;EACC,MAAM;GACF,SACI;GACJ,MAAM,WAAW,YAAY;GAC7B,MAAM;GACN,UAAU,MAAM;GAChB,OAAO,MAAM;EACjB,CAAC;CACL;CAEA,OAAO,SAAS,OAeuB;EACnC,MAAM,WAAW,mBACb,MAAM,KACN,MAAM,SACN,MAAM,UACV;EAEA,OAAO,IAAI,mCAAmC;GAC1C,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,SAAS,SAAS;IAClB,YAAY,SAAS;IACrB,qBAAqB,MAAM;IAC3B,eAAe,MAAM;IACrB,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,eAAe,MAAM;IACrB,MACI,MAAM,QACN;IACJ,SAAS,MAAM;GACnB;EACJ,CAAC;CACL;AACJ;AAEA,SAAS,mBACL,KACA,SACA,YACyC;CACzC,MAAM,UACF,eACC,MAAO,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC,IAAK,KAAA;CAEvD,OAAO;EAGH,SAAS,YAAY,MAAM,UAAU,GAAG,IAAI,KAAA;EAC5C,YAAY;CAChB;AACJ;;;;;;;;;;;;;;;ACtTA,IAAM,mBAAN,MAAM,yBAAyB,SAAS;CAGpC,YAAoB,QAA2C;EAC3D,MAAM,EAAE,SAAS,MAAM,UAAU,GAAG,SAAS;EAC7C,MAAM,SAAS,MAAM;GACjB,GAAG;GACH;EACJ,CAAC;EAED,KAAK,SAAS,OAAO;EACrB,OAAO,OAAO,IAAI;CACtB;;;;;CAMA,OAAO,QAAQ,SAA2D;EACtE,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAW,GAAG;GAAQ,CAAC;GACzD,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;;;;;CAMA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAe,GAAG;GAAQ,CAAC;GAC7D,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;;;;;;CAOA,OAAO,YACH,SACgB;EAChB,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,YAAY;GAC7B,QAAQ;GACR,UAAU,cAAc;IAAE,QAAQ;IAAgB,GAAG;GAAQ,CAAC;GAC9D,GAAG,oBAAoB,OAAO;EAClC,CAAC;CACL;AACJ;AAwBA,SAAS,cACL,OACwB;CACxB,OAAO,gBAAgB;EACnB,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,cAAc,MAAM;CACxB,CAAC;AACL;;;ACtJA,IAAM,0BAAN,cAAsC,SAAS;CAC3C,YACI,SACA,SACA,SACF;EACE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAI,WAAW,CAAC;GAAI,GAAG,QAAQ;EAAS,IAC1C;EAEN,MAAM,SAAS,WAAW,oBAAoB;GAC1C,GAAG;GACH,UAAU;EACd,CAAC;EACD,OAAO,OAAO,IAAI;CACtB;AACJ;;;AC4CA,IAAe,qBAAf,cAA0C,SAAS;CAM/C,YAAsB,OAAkC;EACpD,MAAM,MAAM,WAAW,yBAAyB,MAAM,MAAM;GACxD,OAAO,MAAM;GACb,UAAU;IACN,WAAW,MAAM;IACjB,UAAU,MAAM;IAChB,GAAG,MAAM;GACb;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,cAAc,MAAM;GACpB,eAAe,MAAM;EACzB,CAAC;EAED,KAAK,YAAY,MAAM;EACvB,KAAK,WAAW,MAAM;EACtB,KAAK,WAAW,MAAM,SAAS;EAC/B,KAAK,WAAW,MAAM,SAAS;EAE/B,OAAO,OAAO,IAAI;CACtB;AACJ;AAMA,IAAM,uBAAN,MAAM,6BAA6B,mBAAmB;CAClD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGoB;EACpB,OAAO,IAAI,qBAAqB;GAC5B,SAAS,sBAAsB,QAAQ,eAAe,QAAQ;GAC9D,MAAM,mBAAmB,KAAK,eAAe,QAAQ;GACrD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,wBAAN,MAAM,8BAA8B,mBAAmB;CACnD,YAAoB,OAAkC;EAClD,MAAM,KAAK;CACf;CAEA,OAAO,QACH,UACA,UAGqB;EACrB,OAAO,IAAI,sBAAsB;GAC7B,SAAS,sBAAsB,QAAQ,aAAa,QAAQ;GAC5D,MAAM,mBAAmB,KAAK,aAAa,QAAQ;GACnD;GACA,WAAW;GACX;GACA,OAAO,SAAS;EACpB,CAAC;CACL;AACJ;AAMA,IAAM,qBAAN,MAAyB;CACrB,OAAO,KACH,WACA,UACM;EACN,OAAO,uBAAuB,WAAW,QAAQ;CACrD;AACJ;AAEA,IAAM,wBAAN,MAA4B;CACxB,OAAO,QACH,WACA,UACM;EACN,IAAI,cAAc,eAAe;GAC7B,IAAI,aAAa,gBACb,OAAO;GAEX,IAAI,aAAa,0BACb,OAAO;GAEX,IAAI,aAAa,8BACb,OAAO;GAEX,IAAI,aAAa,iBACb,OAAO;GAEX,IAAI,aAAa,2BACb,OAAO;GAEX,IAAI,aAAa,qBACb,OAAO;GAEX,OAAO;EACX;EAEA,IAAI,aAAa,oBACb,OAAO;EAEX,IAAI,aAAa,qBACb,OAAO;EAEX,OAAO;CACX;AACJ;AAMA,SAAS,YAAY,OAAgB,QAAQ,KAAyB;CAClE,IAAI;EACA,MAAM,aACF,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;EAC5D,OAAO,WAAW,SAAS,QACrB,GAAG,WAAW,MAAM,GAAG,KAAK,EAAE,KAC9B;CACV,QAAQ;EACJ;CACJ;AACJ;;;ACxLA,IAAe,gBAAf,cAAqC,SAAS;CAK1C,YAAsB,OAA6B;EAC/C,MAAM,MAAM,SAAS,MAAM,MAAM;GAC7B,GAAG;GACH,UAAU;IACN,MAAM,MAAM;IACZ,GAAG,MAAM;GACb;EACJ,CAAC;EAED,KAAK,OAAO,MAAM;EAClB,KAAK,eAAe,MAAM,SAAS;EACnC,KAAK,iBAAiB,MAAM,SAAS;EACrC,OAAO,OAAO,IAAI;CACtB;AACJ;AAOA,IAAM,eAAN,MAAM,qBAAqB,cAAc;CACrC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAA4C;EACxD,OAAO,IAAI,aAAa;GACpB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG,qBAAqB,KAAK;IAC7B,MACI,MAAM,QACN;GACR;GACA,GAAG,oBAAoB,KAAK;EAChC,CAAC;CACL;AACJ;AAEA,IAAM,mBAAN,MAAM,yBAAyB,cAAc;CACzC,YAAoB,OAA6B;EAC7C,MAAM,KAAK;CACf;CAEA,OAAO,SAAS,OAAgD;EAC5D,OAAO,IAAI,iBAAiB;GACxB,SAAS;GACT,MAAM,WAAW,SAAS;GAC1B,MAAM;GACN,UAAU;IACN,GAAG,qBAAqB,KAAK;IAC7B,MACI,MAAM,QACN;GACR;GACA,GAAG,oBAAoB,KAAK;EAChC,CAAC;CACL;AACJ;;;;;;;;;;;;;;;;AAiBA,SAAS,uBAAuB,OAIsB;CAClD,MAAM,cAAc,KAAK,MAAM,MAAM,cAAc;CACnD,IAAI,OAAO,MAAM,WAAW,GAAG,OAAO;CAEtC,IAAI,cAAc;CAElB,IAAI,MAAM,cAAc;EACpB,MAAM,SAAS,KAAK,MAAM,MAAM,YAAY;EAC5C,IAAI,OAAO,MAAM,MAAM,KAAK,cAAc,QACtC,cAAc;CAEtB;CAEA,IAAI,MAAM,eAAe;EACrB,MAAM,UAAU,KAAK,MAAM,MAAM,aAAa;EAC9C,IAAI,OAAO,MAAM,OAAO,KAAK,cAAc,SACvC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAM;CAEnD;CAEA,OAAO;EAAE,SAAS;EAAO;CAAY;AACzC;;;;;;;;;;;;;;ACtHA,IAAM,kBAAN,cAA8B,SAAS;;;;;;;;CAQnC,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,eAAe;GACjB,OAAO,MAAM;GACb,gBAAgB,KAAK;EACzB;EAGA,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG,QAAQ;GAAU,GAAG;EAAa,IACvC;EAEN,MAAM,SAAS,WAAW,YAAY;GAClC,GAAG;GACH,UAAU;EACd,CAAC;EACD,OAAO,OAAO,IAAI;CACtB;AACJ"}

package/dist/validation-exception.cjs

@@ -1,21 +1,32 @@
 const require_domain_exception = require("./domain-exception.cjs");
+const require_invariant_violation_exception = require("./invariant-violation-exception.cjs");
 //#region src/core/exceptions/validation-exception.ts
 var ValidationException = class extends require_domain_exception.DomainException {
-	constructor(field, code, message) {
-		super(message);
+	constructor(field, code, message, options) {
+		super(message, options);
 		this.field = field;
 		this.code = code;
 	}
 };
 var MultipleValidationException = class extends require_domain_exception.DomainException {
-	constructor(violations) {
-		super(violations.map((v) => v.message).join("; "));
+	constructor(violations, options) {
+		if (violations.length === 0) throw new require_invariant_violation_exception.InvariantViolationException("MultipleValidationException requires at least one violation.");
+		super(violations.map((v) => v.message).join("; "), options);
 		this.violations = violations;
 	}
+	get count() {
+		return this.violations.length;
+	}
+	get first() {
+		return this.violations[0];
+	}
+	byField(field) {
+		return this.violations.filter((v) => v.field.equals(field));
+	}
 };
 var InvalidValueException = class extends ValidationException {
-	constructor(field, code, message) {
-		super(field, code, message);
+	constructor(field, code, message, options) {
+		super(field, code, message, options);
 	}
 };
 //#endregion

package/dist/validation-exception.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation-exception.cjs","names":["DomainException"],"sources":["../src/core/exceptions/validation-exception.ts"],"sourcesContent":["import { DomainException } from \"./domain-exception.js\";\nimport { ValidationCode } from \"./validation-code.js\";\nimport { ValidationField } from \"./validation-field.js\";\n\nexport interface ValidationViolation {\n    readonly field: ValidationField;\n    readonly code: ValidationCode;\n    readonly message: string;\n}\n\nclass ValidationException extends DomainException {\n    constructor(\n        public readonly field: ValidationField,\n        public readonly code: ValidationCode,\n        message: string,\n    ) {\n        super(message);\n    }\n}\n\n// Carries multiple validation violations from a single operation (e.g. bulk validation).\n// Use when you need to report all field errors at once rather than failing on the first.\nclass MultipleValidationException extends DomainException {\n    constructor(public readonly violations: readonly ValidationViolation[]) {\n        super(violations.map((v) => v.message).join(\"; \"));\n    }\n}\n\nclass InvalidValueException extends ValidationException {\n    constructor(field: ValidationField, code: ValidationCode, message: string) {\n        super(field, code, message);\n    }\n}\n\nexport {\n    InvalidValueException,\n    MultipleValidationException,\n    ValidationException,\n};\n"],"mappings":";;AAUA,IAAM,sBAAN,cAAkCA,yBAAAA,gBAAgB;CAC9C,YACI,OACA,MACA,SACF;EACE,MAAM,OAAO;EAJG,KAAA,QAAA;EACA,KAAA,OAAA;CAIpB;AACJ;AAIA,IAAM,8BAAN,cAA0CA,yBAAAA,gBAAgB;CACtD,YAAY,YAA4D;EACpE,MAAM,WAAW,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;EADzB,KAAA,aAAA;CAE5B;AACJ;AAEA,IAAM,wBAAN,cAAoC,oBAAoB;CACpD,YAAY,OAAwB,MAAsB,SAAiB;EACvE,MAAM,OAAO,MAAM,OAAO;CAC9B;AACJ"}
+{"version":3,"file":"validation-exception.cjs","names":["DomainException","InvariantViolationException"],"sources":["../src/core/exceptions/validation-exception.ts"],"sourcesContent":["import { DomainException } from \"./domain-exception.js\";\nimport { InvariantViolationException } from \"./invariant-violation-exception.js\";\nimport { ValidationCode } from \"./validation-code.js\";\nimport { ValidationField } from \"./validation-field.js\";\n\nexport interface ValidationViolation {\n    readonly field: ValidationField;\n    readonly code: ValidationCode;\n    readonly message: string;\n}\n\n// Extensible base for a single-field validation failure. Prefer throwing the\n// concrete InvalidValueException below so callers can `instanceof` the common\n// case; extend this directly only when you need a distinct validation subtype.\nclass ValidationException extends DomainException {\n    constructor(\n        public readonly field: ValidationField,\n        public readonly code: ValidationCode,\n        message: string,\n        options?: { cause?: unknown },\n    ) {\n        super(message, options);\n    }\n}\n\n// Carries multiple validation violations from a single operation (e.g. bulk validation).\n// Use when you need to report all field errors at once rather than failing on the first.\nclass MultipleValidationException extends DomainException {\n    constructor(\n        public readonly violations: readonly ValidationViolation[],\n        options?: { cause?: unknown },\n    ) {\n        // An aggregate with no violations is a caller bug: it produces a\n        // messageless, contentless exception. Fail fast as a broken invariant.\n        if (violations.length === 0) {\n            throw new InvariantViolationException(\n                \"MultipleValidationException requires at least one violation.\",\n            );\n        }\n        super(violations.map((v) => v.message).join(\"; \"), options);\n    }\n\n    // Number of accumulated violations (always >= 1).\n    get count(): number {\n        return this.violations.length;\n    }\n\n    // The first accumulated violation.\n    get first(): ValidationViolation {\n        return this.violations[0];\n    }\n\n    // Violations targeting the given field.\n    byField(field: ValidationField): readonly ValidationViolation[] {\n        return this.violations.filter((v) => v.field.equals(field));\n    }\n}\n\n// The canonical concrete validation exception, thrown across the domain\n// (rbac/abac/policies/commands) when a single input value is invalid. Its\n// identity is exactly that: the named, catchable \"a value was invalid\" case,\n// versus ValidationException as the open base.\nclass InvalidValueException extends ValidationException {\n    constructor(\n        field: ValidationField,\n        code: ValidationCode,\n        message: string,\n        options?: { cause?: unknown },\n    ) {\n        super(field, code, message, options);\n    }\n}\n\nexport {\n    InvalidValueException,\n    MultipleValidationException,\n    ValidationException,\n};\n"],"mappings":";;;AAcA,IAAM,sBAAN,cAAkCA,yBAAAA,gBAAgB;CAC9C,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,SAAS,OAAO;EALN,KAAA,QAAA;EACA,KAAA,OAAA;CAKpB;AACJ;AAIA,IAAM,8BAAN,cAA0CA,yBAAAA,gBAAgB;CACtD,YACI,YACA,SACF;EAGE,IAAI,WAAW,WAAW,GACtB,MAAM,IAAIC,sCAAAA,4BACN,8DACJ;EAEJ,MAAM,WAAW,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO;EAV1C,KAAA,aAAA;CAWpB;CAGA,IAAI,QAAgB;EAChB,OAAO,KAAK,WAAW;CAC3B;CAGA,IAAI,QAA6B;EAC7B,OAAO,KAAK,WAAW;CAC3B;CAGA,QAAQ,OAAwD;EAC5D,OAAO,KAAK,WAAW,QAAQ,MAAM,EAAE,MAAM,OAAO,KAAK,CAAC;CAC9D;AACJ;AAMA,IAAM,wBAAN,cAAoC,oBAAoB;CACpD,YACI,OACA,MACA,SACA,SACF;EACE,MAAM,OAAO,MAAM,SAAS,OAAO;CACvC;AACJ"}