@danceroutine/tango-core 1.11.0 → 1.11.2

package/dist/{runtime-B8KkgD3R.js → runtime-BAG_EKuM.js}

@@ -1,117 +1,126 @@
-import { __export } from "./chunk-BkvOhyD0.js";
-
+import { t as __exportAll } from "./chunk-D7D4PA-g.js";
 //#region src/runtime/object/isNil.ts
+/**
+* Return true when a value is `null` or `undefined`.
+*/
 function isNil(value) {
-	return value === null || value === undefined;
+	return value === null || value === void 0;
 }
-
 //#endregion
 //#region src/runtime/internal/hasTag.ts
 function hasTag(value, tag) {
 	return !isNil(value) && Object.prototype.toString.call(value) === `[object ${tag}]`;
 }
-
 //#endregion
 //#region src/runtime/binary/isArrayBuffer.ts
+/**
+* Return true when a value is an `ArrayBuffer`.
+*/
 function isArrayBuffer(value) {
 	return hasTag(value, "ArrayBuffer");
 }
-
 //#endregion
 //#region src/runtime/binary/isUint8Array.ts
+/**
+* Return true when a value is a `Uint8Array`.
+*/
 function isUint8Array(value) {
 	return hasTag(value, "Uint8Array");
 }
-
 //#endregion
 //#region src/runtime/binary/isBlob.ts
+/**
+* Return true when a value is a `Blob`.
+*/
 function isBlob(value) {
 	return hasTag(value, "Blob");
 }
-
 //#endregion
 //#region src/runtime/binary/index.ts
-var binary_exports = {};
-__export(binary_exports, {
+var binary_exports = /* @__PURE__ */ __exportAll({
 	isArrayBuffer: () => isArrayBuffer,
 	isBlob: () => isBlob,
 	isUint8Array: () => isUint8Array
 });
-
 //#endregion
 //#region src/runtime/web/isFormData.ts
+/**
+* Return true when a value is `FormData`.
+*/
 function isFormData(value) {
 	return hasTag(value, "FormData");
 }
-
 //#endregion
 //#region src/runtime/web/isURLSearchParams.ts
+/**
+* Return true when a value is `URLSearchParams`.
+*/
 function isURLSearchParams(value) {
 	return hasTag(value, "URLSearchParams");
 }
-
 //#endregion
 //#region src/runtime/web/isReadableStream.ts
+/**
+* Return true when a value is a readable web stream.
+*/
 function isReadableStream(value) {
 	return hasTag(value, "ReadableStream");
 }
-
 //#endregion
 //#region src/runtime/web/isFile.ts
+/**
+* Return true when a value is a web `File`.
+*/
 function isFile(value) {
 	return hasTag(value, "File");
 }
-
 //#endregion
 //#region src/runtime/web/index.ts
-var web_exports = {};
-__export(web_exports, {
+var web_exports = /* @__PURE__ */ __exportAll({
 	isFile: () => isFile,
 	isFormData: () => isFormData,
 	isReadableStream: () => isReadableStream,
 	isURLSearchParams: () => isURLSearchParams
 });
-
 //#endregion
 //#region src/runtime/object/isObject.ts
+/**
+* Return true when a value is a non-null object.
+*/
 function isObject(value) {
 	return typeof value === "object" && value !== null;
 }
-
 //#endregion
 //#region src/runtime/object/index.ts
-var object_exports = {};
-__export(object_exports, {
+var object_exports = /* @__PURE__ */ __exportAll({
 	isNil: () => isNil,
 	isObject: () => isObject
 });
-
 //#endregion
 //#region src/runtime/error/isError.ts
+/**
+* Return true when a value looks like an `Error`.
+*/
 function isError(value) {
 	return isObject(value) && typeof value.name === "string" && typeof value.message === "string";
 }
-
 //#endregion
 //#region src/runtime/error/index.ts
-var error_exports = {};
-__export(error_exports, { isError: () => isError });
-
+var error_exports = /* @__PURE__ */ __exportAll({ isError: () => isError });
 //#endregion
 //#region src/runtime/date/isDate.ts
+/**
+* Return true when a value is a `Date`.
+*/
 function isDate(value) {
 	return hasTag(value, "Date");
 }
-
 //#endregion
 //#region src/runtime/date/index.ts
-var date_exports = {};
-__export(date_exports, { isDate: () => isDate });
-
+var date_exports = /* @__PURE__ */ __exportAll({ isDate: () => isDate });
 //#endregion
 //#region src/runtime/index.ts
-var runtime_exports = {};
-__export(runtime_exports, {
+var runtime_exports = /* @__PURE__ */ __exportAll({
 	binary: () => binary_exports,
 	date: () => date_exports,
 	error: () => error_exports,
@@ -129,7 +138,7 @@ __export(runtime_exports, {
 	object: () => object_exports,
 	web: () => web_exports
 });
-
 //#endregion
-export { binary_exports, date_exports, error_exports, isArrayBuffer, isBlob, isDate, isError, isFile, isFormData, isNil, isObject, isReadableStream, isURLSearchParams, isUint8Array, object_exports, runtime_exports, web_exports };
-//# sourceMappingURL=runtime-B8KkgD3R.js.map
+export { isNil as _, isError as a, web_exports as c, isURLSearchParams as d, isFormData as f, isArrayBuffer as g, isUint8Array as h, error_exports as i, isFile as l, isBlob as m, date_exports as n, object_exports as o, binary_exports as p, isDate as r, isObject as s, runtime_exports as t, isReadableStream as u };
+
+//# sourceMappingURL=runtime-BAG_EKuM.js.map

package/dist/runtime-BAG_EKuM.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-BAG_EKuM.js","names":[],"sources":["../src/runtime/object/isNil.ts","../src/runtime/internal/hasTag.ts","../src/runtime/binary/isArrayBuffer.ts","../src/runtime/binary/isUint8Array.ts","../src/runtime/binary/isBlob.ts","../src/runtime/binary/index.ts","../src/runtime/web/isFormData.ts","../src/runtime/web/isURLSearchParams.ts","../src/runtime/web/isReadableStream.ts","../src/runtime/web/isFile.ts","../src/runtime/web/index.ts","../src/runtime/object/isObject.ts","../src/runtime/object/index.ts","../src/runtime/error/isError.ts","../src/runtime/error/index.ts","../src/runtime/date/isDate.ts","../src/runtime/date/index.ts","../src/runtime/index.ts"],"sourcesContent":["/**\n * Return true when a value is `null` or `undefined`.\n */\nexport function isNil(value: unknown): value is null | undefined {\n    return value === null || value === undefined;\n}\n","import { isNil } from '../object/isNil';\n\nexport function hasTag(value: unknown, tag: string): boolean {\n    return !isNil(value) && Object.prototype.toString.call(value) === `[object ${tag}]`;\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is an `ArrayBuffer`.\n */\nexport function isArrayBuffer(value: unknown): value is ArrayBuffer {\n    return hasTag(value, 'ArrayBuffer');\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is a `Uint8Array`.\n */\nexport function isUint8Array(value: unknown): value is Uint8Array<ArrayBuffer> {\n    return hasTag(value, 'Uint8Array');\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is a `Blob`.\n */\nexport function isBlob(value: unknown): value is Blob {\n    return hasTag(value, 'Blob');\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { isArrayBuffer } from './isArrayBuffer';\nexport { isUint8Array } from './isUint8Array';\nexport { isBlob } from './isBlob';\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is `FormData`.\n */\nexport function isFormData(value: unknown): value is FormData {\n    return hasTag(value, 'FormData');\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is `URLSearchParams`.\n */\nexport function isURLSearchParams(value: unknown): value is URLSearchParams {\n    return hasTag(value, 'URLSearchParams');\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is a readable web stream.\n */\nexport function isReadableStream(value: unknown): value is ReadableStream<Uint8Array<ArrayBuffer>> {\n    return hasTag(value, 'ReadableStream');\n}\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is a web `File`.\n */\nexport function isFile(value: unknown): value is File {\n    return hasTag(value, 'File');\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { isFormData } from './isFormData';\nexport { isURLSearchParams } from './isURLSearchParams';\nexport { isReadableStream } from './isReadableStream';\nexport { isFile } from './isFile';\n","/**\n * Return true when a value is a non-null object.\n */\nexport function isObject(value: unknown): value is Record<string, unknown> {\n    return typeof value === 'object' && value !== null;\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { isObject } from './isObject';\nexport { isNil } from './isNil';\n","import { isObject } from '../object/isObject';\n\n/**\n * Return true when a value looks like an `Error`.\n */\nexport function isError(value: unknown): value is Error {\n    return (\n        isObject(value) &&\n        typeof (value as { name?: unknown }).name === 'string' &&\n        typeof (value as { message?: unknown }).message === 'string'\n    );\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { isError } from './isError';\n","import { hasTag } from '../internal/hasTag';\n\n/**\n * Return true when a value is a `Date`.\n */\nexport function isDate(value: unknown): value is Date {\n    return hasTag(value, 'Date');\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { isDate } from './isDate';\n","/**\n * Domain boundary barrel: exposes namespaced exports for Django-style drill-down\n * imports and curated flat exports for TS-native ergonomics.\n */\n\nexport * as binary from './binary/index';\nexport * as web from './web/index';\nexport * as object from './object/index';\nexport * as error from './error/index';\nexport * as date from './date/index';\n\nexport { isArrayBuffer, isBlob, isUint8Array } from './binary/index';\nexport { isFile, isFormData, isReadableStream, isURLSearchParams } from './web/index';\nexport { isNil, isObject } from './object/index';\nexport { isError } from './error/index';\nexport { isDate } from './date/index';\n"],"mappings":";;;;;AAGA,SAAgB,MAAM,OAA2C;CAC7D,OAAO,UAAU,QAAQ,UAAU,KAAA;AACvC;;;ACHA,SAAgB,OAAO,OAAgB,KAAsB;CACzD,OAAO,CAAC,MAAM,KAAK,KAAK,OAAO,UAAU,SAAS,KAAK,KAAK,MAAM,WAAW,IAAI;AACrF;;;;;;ACCA,SAAgB,cAAc,OAAsC;CAChE,OAAO,OAAO,OAAO,aAAa;AACtC;;;;;;ACFA,SAAgB,aAAa,OAAkD;CAC3E,OAAO,OAAO,OAAO,YAAY;AACrC;;;;;;ACFA,SAAgB,OAAO,OAA+B;CAClD,OAAO,OAAO,OAAO,MAAM;AAC/B;;;;;;;;;;;;;AEFA,SAAgB,WAAW,OAAmC;CAC1D,OAAO,OAAO,OAAO,UAAU;AACnC;;;;;;ACFA,SAAgB,kBAAkB,OAA0C;CACxE,OAAO,OAAO,OAAO,iBAAiB;AAC1C;;;;;;ACFA,SAAgB,iBAAiB,OAAkE;CAC/F,OAAO,OAAO,OAAO,gBAAgB;AACzC;;;;;;ACFA,SAAgB,OAAO,OAA+B;CAClD,OAAO,OAAO,OAAO,MAAM;AAC/B;;;;;;;;;;;;;;AEJA,SAAgB,SAAS,OAAkD;CACvE,OAAO,OAAO,UAAU,YAAY,UAAU;AAClD;;;;;;;;;;;;AEAA,SAAgB,QAAQ,OAAgC;CACpD,OACI,SAAS,KAAK,KACd,OAAQ,MAA6B,SAAS,YAC9C,OAAQ,MAAgC,YAAY;AAE5D;;;;;;;;;AENA,SAAgB,OAAO,OAA+B;CAClD,OAAO,OAAO,OAAO,MAAM;AAC/B"}

package/dist/sql/index.d.ts

@@ -1,13 +1,2 @@
-/**
- * Domain boundary barrel: centralizes SQL safety primitives and policy helpers.
- */
-export type { SqlDialect } from './SqlDialect';
-export type { SqlIdentifierRole } from './SqlIdentifierRole';
-export type { TrustedSqlFragment } from './TrustedSqlFragment';
-export type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';
-export { SqlSafetyEngine } from './SqlSafetyEngine';
-export type { SqlIdentifierRequest, SqlLookupTokenRequest, SqlRawFragmentRequest, SqlSafetyRequest, ValidatedSqlLookupToken, ValidatedSqlSafetyResult, } from './SqlSafetyEngine';
-export { trustedSql } from './trustedSql';
-export { isTrustedSqlFragment } from './isTrustedSqlFragment';
-export { validateSqlIdentifier } from './validateSqlIdentifier';
-export { quoteSqlIdentifier } from './quoteSqlIdentifier';
+import { a as trustedSql, c as SqlRawFragmentRequest, d as ValidatedSqlLookupToken, f as ValidatedSqlSafetyResult, g as SqlDialect, h as SqlIdentifierRole, i as isTrustedSqlFragment, l as SqlSafetyEngine, m as TrustedSqlFragment, n as quoteSqlIdentifier, o as SqlIdentifierRequest, p as ValidatedSqlIdentifier, r as validateSqlIdentifier, s as SqlLookupTokenRequest, u as SqlSafetyRequest } from "../index-DPABSINz.js";
+export { type SqlDialect, type SqlIdentifierRequest, type SqlIdentifierRole, type SqlLookupTokenRequest, type SqlRawFragmentRequest, SqlSafetyEngine, type SqlSafetyRequest, type TrustedSqlFragment, type ValidatedSqlIdentifier, type ValidatedSqlLookupToken, type ValidatedSqlSafetyResult, isTrustedSqlFragment, quoteSqlIdentifier, trustedSql, validateSqlIdentifier };

package/dist/sql/index.js

@@ -1,3 +1,2 @@
-import { SqlSafetyEngine, isTrustedSqlFragment, quoteSqlIdentifier, trustedSql, validateSqlIdentifier } from "../sql-BI3ptL9-.js";
-
-export { SqlSafetyEngine, isTrustedSqlFragment, quoteSqlIdentifier, trustedSql, validateSqlIdentifier };
+import { a as validateSqlIdentifier, i as SqlSafetyEngine, n as quoteSqlIdentifier, o as isTrustedSqlFragment, r as trustedSql } from "../sql-CIPnuTYO.js";
+export { SqlSafetyEngine, isTrustedSqlFragment, quoteSqlIdentifier, trustedSql, validateSqlIdentifier };

package/dist/{sql-BI3ptL9-.js → sql-CIPnuTYO.js}

@@ -1,18 +1,17 @@
-import { __export } from "./chunk-BkvOhyD0.js";
-
+import { t as __exportAll } from "./chunk-D7D4PA-g.js";
 //#region src/sql/TrustedSqlFragment.ts
 const TRUSTED_SQL_FRAGMENT_BRAND = "tango.core.trusted_sql_fragment";
-
 //#endregion
 //#region src/sql/isTrustedSqlFragment.ts
+/**
+* Narrow an unknown value to a trusted raw SQL fragment.
+*/
 function isTrustedSqlFragment(value) {
-	return typeof value === "object" && value !== null && value.__tangoBrand === TRUSTED_SQL_FRAGMENT_BRAND && typeof value.sql === "string";
+	return typeof value === "object" && value !== null && value.__tangoBrand === "tango.core.trusted_sql_fragment" && typeof value.sql === "string";
 }
-
 //#endregion
 //#region src/sql/ValidatedSqlIdentifier.ts
 const VALIDATED_SQL_IDENTIFIER_BRAND = "tango.core.validated_sql_identifier";
-
 //#endregion
 //#region src/sql/SqlIdentifierRole.ts
 const InternalSqlIdentifierRole = {
@@ -27,7 +26,6 @@ const InternalSqlIdentifierRole = {
 	RELATION_FOREIGN_KEY: "relationForeignKey",
 	RELATION_TARGET_PRIMARY_KEY: "relationTargetPrimaryKey"
 };
-
 //#endregion
 //#region src/sql/validateSqlIdentifier.ts
 const SQL_IDENTIFIER_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
@@ -43,6 +41,9 @@ const ROLE_LABELS = {
 	[InternalSqlIdentifierRole.RELATION_FOREIGN_KEY]: "relation foreign key",
 	[InternalSqlIdentifierRole.RELATION_TARGET_PRIMARY_KEY]: "relation target primary key"
 };
+/**
+* Validate an identifier against Tango's SQL safety policy.
+*/
 function validateSqlIdentifier(value, role, allowlist) {
 	const label = ROLE_LABELS[role];
 	if (!SQL_IDENTIFIER_PATTERN.test(value)) throw new Error(`Invalid SQL ${label}: '${value}'.`);
@@ -53,9 +54,11 @@ function validateSqlIdentifier(value, role, allowlist) {
 		value
 	};
 }
-
 //#endregion
 //#region src/sql/SqlSafetyEngine.ts
+/**
+* Canonical SQL safety policy engine shared across Tango packages.
+*/
 var SqlSafetyEngine = class SqlSafetyEngine {
 	static BRAND = "tango.core.sql_safety_engine";
 	__tangoBrand = SqlSafetyEngine.BRAND;
@@ -84,33 +87,35 @@ var SqlSafetyEngine = class SqlSafetyEngine {
 		return entry.value;
 	}
 };
-
 //#endregion
 //#region src/sql/trustedSql.ts
+/**
+* Explicitly opt into embedding a reviewed raw SQL fragment.
+*/
 function trustedSql(sql) {
 	return {
 		__tangoBrand: TRUSTED_SQL_FRAGMENT_BRAND,
 		sql
 	};
 }
-
 //#endregion
 //#region src/sql/quoteSqlIdentifier.ts
+/**
+* Quote a validated identifier for the target SQL dialect.
+*/
 function quoteSqlIdentifier(identifier, _dialect) {
 	return `"${identifier.value.replaceAll("\"", "\"\"")}"`;
 }
-
 //#endregion
 //#region src/sql/index.ts
-var sql_exports = {};
-__export(sql_exports, {
+var sql_exports = /* @__PURE__ */ __exportAll({
 	SqlSafetyEngine: () => SqlSafetyEngine,
 	isTrustedSqlFragment: () => isTrustedSqlFragment,
 	quoteSqlIdentifier: () => quoteSqlIdentifier,
 	trustedSql: () => trustedSql,
 	validateSqlIdentifier: () => validateSqlIdentifier
 });
-
 //#endregion
-export { SqlSafetyEngine, isTrustedSqlFragment, quoteSqlIdentifier, sql_exports, trustedSql, validateSqlIdentifier };
-//# sourceMappingURL=sql-BI3ptL9-.js.map
+export { validateSqlIdentifier as a, SqlSafetyEngine as i, quoteSqlIdentifier as n, isTrustedSqlFragment as o, trustedSql as r, sql_exports as t };
+
+//# sourceMappingURL=sql-CIPnuTYO.js.map

package/dist/{sql-BI3ptL9-.js.map → sql-CIPnuTYO.js.map}

@@ -1 +1 @@
-{"version":3,"file":"sql-BI3ptL9-.js","names":["value: unknown","ROLE_LABELS: Record<SqlIdentifierRole, string>","value: string","role: SqlIdentifierRole","allowlist?: readonly string[]","value: unknown","request: SqlSafetyRequest","entry: SqlLookupTokenRequest","entry: SqlRawFragmentRequest","sql: string","identifier: ValidatedSqlIdentifier","_dialect: SqlDialect"],"sources":["../src/sql/TrustedSqlFragment.ts","../src/sql/isTrustedSqlFragment.ts","../src/sql/ValidatedSqlIdentifier.ts","../src/sql/SqlIdentifierRole.ts","../src/sql/validateSqlIdentifier.ts","../src/sql/SqlSafetyEngine.ts","../src/sql/trustedSql.ts","../src/sql/quoteSqlIdentifier.ts","../src/sql/index.ts"],"sourcesContent":["export const TRUSTED_SQL_FRAGMENT_BRAND = 'tango.core.trusted_sql_fragment' as const;\n\nexport type TrustedSqlFragment = {\n    readonly __tangoBrand: typeof TRUSTED_SQL_FRAGMENT_BRAND;\n    readonly sql: string;\n};\n","import { TRUSTED_SQL_FRAGMENT_BRAND, type TrustedSqlFragment } from './TrustedSqlFragment';\n\n/**\n * Narrow an unknown value to a trusted raw SQL fragment.\n */\nexport function isTrustedSqlFragment(value: unknown): value is TrustedSqlFragment {\n    return (\n        typeof value === 'object' &&\n        value !== null &&\n        (value as { __tangoBrand?: unknown }).__tangoBrand === TRUSTED_SQL_FRAGMENT_BRAND &&\n        typeof (value as { sql?: unknown }).sql === 'string'\n    );\n}\n","import type { SqlIdentifierRole } from './SqlIdentifierRole';\n\nexport const VALIDATED_SQL_IDENTIFIER_BRAND = 'tango.core.validated_sql_identifier' as const;\n\nexport type ValidatedSqlIdentifier = {\n    readonly __tangoBrand: typeof VALIDATED_SQL_IDENTIFIER_BRAND;\n    readonly role: SqlIdentifierRole;\n    readonly value: string;\n};\n","export const InternalSqlIdentifierRole = {\n    TABLE: 'table',\n    COLUMN: 'column',\n    PRIMARY_KEY: 'primaryKey',\n    INDEX: 'index',\n    ALIAS: 'alias',\n    CONSTRAINT: 'constraint',\n    SCHEMA: 'schema',\n    RELATION_TABLE: 'relationTable',\n    RELATION_FOREIGN_KEY: 'relationForeignKey',\n    RELATION_TARGET_PRIMARY_KEY: 'relationTargetPrimaryKey',\n} as const;\n\nexport type SqlIdentifierRole = (typeof InternalSqlIdentifierRole)[keyof typeof InternalSqlIdentifierRole];\n","import { VALIDATED_SQL_IDENTIFIER_BRAND, type ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\nimport { InternalSqlIdentifierRole, type SqlIdentifierRole } from './SqlIdentifierRole';\n\nconst SQL_IDENTIFIER_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nconst ROLE_LABELS: Record<SqlIdentifierRole, string> = {\n    [InternalSqlIdentifierRole.TABLE]: 'table name',\n    [InternalSqlIdentifierRole.COLUMN]: 'column',\n    [InternalSqlIdentifierRole.PRIMARY_KEY]: 'primary key',\n    [InternalSqlIdentifierRole.INDEX]: 'index',\n    [InternalSqlIdentifierRole.ALIAS]: 'alias',\n    [InternalSqlIdentifierRole.CONSTRAINT]: 'constraint',\n    [InternalSqlIdentifierRole.SCHEMA]: 'schema',\n    [InternalSqlIdentifierRole.RELATION_TABLE]: 'relation table',\n    [InternalSqlIdentifierRole.RELATION_FOREIGN_KEY]: 'relation foreign key',\n    [InternalSqlIdentifierRole.RELATION_TARGET_PRIMARY_KEY]: 'relation target primary key',\n};\n\n/**\n * Validate an identifier against Tango's SQL safety policy.\n */\nexport function validateSqlIdentifier(\n    value: string,\n    role: SqlIdentifierRole,\n    allowlist?: readonly string[]\n): ValidatedSqlIdentifier {\n    const label = ROLE_LABELS[role];\n\n    if (!SQL_IDENTIFIER_PATTERN.test(value)) {\n        throw new Error(`Invalid SQL ${label}: '${value}'.`);\n    }\n\n    if (allowlist && !allowlist.includes(value)) {\n        throw new Error(`Unknown SQL ${label}: '${value}'.`);\n    }\n\n    return {\n        __tangoBrand: VALIDATED_SQL_IDENTIFIER_BRAND,\n        role,\n        value,\n    };\n}\n","import type { SqlDialect } from './SqlDialect';\nimport type { SqlIdentifierRole } from './SqlIdentifierRole';\nimport { isTrustedSqlFragment } from './isTrustedSqlFragment';\nimport type { TrustedSqlFragment } from './TrustedSqlFragment';\nimport { validateSqlIdentifier } from './validateSqlIdentifier';\nimport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\n\nexport type SqlIdentifierRequest = {\n    key: string;\n    role: SqlIdentifierRole;\n    value: string;\n    allowlist?: readonly string[];\n};\n\nexport type SqlLookupTokenRequest = {\n    key: string;\n    lookup: string;\n    allowed: readonly string[];\n};\n\nexport type SqlRawFragmentRequest = {\n    key: string;\n    value: TrustedSqlFragment;\n};\n\nexport type SqlSafetyRequest = {\n    dialect?: SqlDialect;\n    identifiers?: readonly SqlIdentifierRequest[];\n    lookupTokens?: readonly SqlLookupTokenRequest[];\n    rawFragments?: readonly SqlRawFragmentRequest[];\n};\n\nexport type ValidatedSqlLookupToken = {\n    lookup: string;\n};\n\nexport type ValidatedSqlSafetyResult = {\n    identifiers: Record<string, ValidatedSqlIdentifier>;\n    lookupTokens: Record<string, ValidatedSqlLookupToken>;\n    rawFragments: Record<string, TrustedSqlFragment>;\n};\n\n/**\n * Canonical SQL safety policy engine shared across Tango packages.\n */\nexport class SqlSafetyEngine {\n    static readonly BRAND = 'tango.core.sql_safety_engine' as const;\n    readonly __tangoBrand: typeof SqlSafetyEngine.BRAND = SqlSafetyEngine.BRAND;\n\n    /**\n     * Narrow an unknown value to `SqlSafetyEngine`.\n     */\n    static isSqlSafetyEngine(value: unknown): value is SqlSafetyEngine {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === SqlSafetyEngine.BRAND\n        );\n    }\n\n    /**\n     * Validate a canonical SQL safety request and return trusted tokens.\n     */\n    validate(request: SqlSafetyRequest): ValidatedSqlSafetyResult {\n        return {\n            identifiers: Object.fromEntries(\n                (request.identifiers ?? []).map((entry) => [\n                    entry.key,\n                    validateSqlIdentifier(entry.value, entry.role, entry.allowlist),\n                ])\n            ),\n            lookupTokens: Object.fromEntries(\n                (request.lookupTokens ?? []).map((entry) => [entry.key, this.validateLookupToken(entry)])\n            ),\n            rawFragments: Object.fromEntries(\n                (request.rawFragments ?? []).map((entry) => [entry.key, this.validateRawFragment(entry)])\n            ),\n        };\n    }\n\n    private validateLookupToken(entry: SqlLookupTokenRequest): ValidatedSqlLookupToken {\n        if (!entry.allowed.includes(entry.lookup)) {\n            throw new Error(`Unknown lookup: ${entry.lookup}`);\n        }\n\n        return {\n            lookup: entry.lookup,\n        };\n    }\n\n    private validateRawFragment(entry: SqlRawFragmentRequest): TrustedSqlFragment {\n        if (!isTrustedSqlFragment(entry.value)) {\n            throw new Error(`Untrusted raw SQL fragment for '${entry.key}'.`);\n        }\n\n        return entry.value;\n    }\n}\n","import { TRUSTED_SQL_FRAGMENT_BRAND, type TrustedSqlFragment } from './TrustedSqlFragment';\n\n/**\n * Explicitly opt into embedding a reviewed raw SQL fragment.\n */\nexport function trustedSql(sql: string): TrustedSqlFragment {\n    return {\n        __tangoBrand: TRUSTED_SQL_FRAGMENT_BRAND,\n        sql,\n    };\n}\n","import type { SqlDialect } from './SqlDialect';\nimport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\n\n/**\n * Quote a validated identifier for the target SQL dialect.\n */\nexport function quoteSqlIdentifier(identifier: ValidatedSqlIdentifier, _dialect: SqlDialect): string {\n    return `\"${identifier.value.replaceAll('\"', '\"\"')}\"`;\n}\n","/**\n * Domain boundary barrel: centralizes SQL safety primitives and policy helpers.\n */\n\nexport type { SqlDialect } from './SqlDialect';\nexport type { SqlIdentifierRole } from './SqlIdentifierRole';\nexport type { TrustedSqlFragment } from './TrustedSqlFragment';\nexport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\nexport { SqlSafetyEngine } from './SqlSafetyEngine';\nexport type {\n    SqlIdentifierRequest,\n    SqlLookupTokenRequest,\n    SqlRawFragmentRequest,\n    SqlSafetyRequest,\n    ValidatedSqlLookupToken,\n    ValidatedSqlSafetyResult,\n} from './SqlSafetyEngine';\nexport { trustedSql } from './trustedSql';\nexport { isTrustedSqlFragment } from './isTrustedSqlFragment';\nexport { validateSqlIdentifier } from './validateSqlIdentifier';\nexport { quoteSqlIdentifier } from './quoteSqlIdentifier';\n"],"mappings":";;;MAAa,6BAA6B;;;;ACKnC,SAAS,qBAAqBA,OAA6C;AAC9E,eACW,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,qCAC/C,MAA4B,QAAQ;AAEnD;;;;MCVY,iCAAiC;;;;MCFjC,4BAA4B;CACrC,OAAO;CACP,QAAQ;CACR,aAAa;CACb,OAAO;CACP,OAAO;CACP,YAAY;CACZ,QAAQ;CACR,gBAAgB;CAChB,sBAAsB;CACtB,6BAA6B;AAChC;;;;ACRD,MAAM,yBAAyB;AAE/B,MAAMC,cAAiD;EAClD,0BAA0B,QAAQ;EAClC,0BAA0B,SAAS;EACnC,0BAA0B,cAAc;EACxC,0BAA0B,QAAQ;EAClC,0BAA0B,QAAQ;EAClC,0BAA0B,aAAa;EACvC,0BAA0B,SAAS;EACnC,0BAA0B,iBAAiB;EAC3C,0BAA0B,uBAAuB;EACjD,0BAA0B,8BAA8B;AAC5D;AAKM,SAAS,sBACZC,OACAC,MACAC,WACsB;CACtB,MAAM,QAAQ,YAAY;AAE1B,MAAK,uBAAuB,KAAK,MAAM,CACnC,OAAM,IAAI,OAAO,cAAc,MAAM,KAAK,MAAM;AAGpD,KAAI,cAAc,UAAU,SAAS,MAAM,CACvC,OAAM,IAAI,OAAO,cAAc,MAAM,KAAK,MAAM;AAGpD,QAAO;EACH,cAAc;EACd;EACA;CACH;AACJ;;;;ICIY,kBAAN,MAAM,gBAAgB;CACzB,OAAgB,QAAQ;CACxB,eAAsD,gBAAgB;;;;CAKtE,OAAO,kBAAkBC,OAA0C;AAC/D,gBACW,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,gBAAgB;CAE9E;;;;CAKD,SAASC,SAAqD;AAC1D,SAAO;GACH,aAAa,OAAO,YAChB,CAAC,QAAQ,eAAe,CAAE,GAAE,IAAI,CAAC,UAAU,CACvC,MAAM,KACN,sBAAsB,MAAM,OAAO,MAAM,MAAM,MAAM,UAAU,AAClE,EAAC,CACL;GACD,cAAc,OAAO,YACjB,CAAC,QAAQ,gBAAgB,CAAE,GAAE,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,oBAAoB,MAAM,AAAC,EAAC,CAC5F;GACD,cAAc,OAAO,YACjB,CAAC,QAAQ,gBAAgB,CAAE,GAAE,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,oBAAoB,MAAM,AAAC,EAAC,CAC5F;EACJ;CACJ;CAED,oBAA4BC,OAAuD;AAC/E,OAAK,MAAM,QAAQ,SAAS,MAAM,OAAO,CACrC,OAAM,IAAI,OAAO,kBAAkB,MAAM,OAAO;AAGpD,SAAO,EACH,QAAQ,MAAM,OACjB;CACJ;CAED,oBAA4BC,OAAkD;AAC1E,OAAK,qBAAqB,MAAM,MAAM,CAClC,OAAM,IAAI,OAAO,kCAAkC,MAAM,IAAI;AAGjE,SAAO,MAAM;CAChB;AACJ;;;;AC5FM,SAAS,WAAWC,KAAiC;AACxD,QAAO;EACH,cAAc;EACd;CACH;AACJ;;;;ACJM,SAAS,mBAAmBC,YAAoCC,UAA8B;AACjG,SAAQ,GAAG,WAAW,MAAM,WAAW,MAAK,OAAK,CAAC;AACrD"}
+{"version":3,"file":"sql-CIPnuTYO.js","names":[],"sources":["../src/sql/TrustedSqlFragment.ts","../src/sql/isTrustedSqlFragment.ts","../src/sql/ValidatedSqlIdentifier.ts","../src/sql/SqlIdentifierRole.ts","../src/sql/validateSqlIdentifier.ts","../src/sql/SqlSafetyEngine.ts","../src/sql/trustedSql.ts","../src/sql/quoteSqlIdentifier.ts","../src/sql/index.ts"],"sourcesContent":["export const TRUSTED_SQL_FRAGMENT_BRAND = 'tango.core.trusted_sql_fragment' as const;\n\nexport type TrustedSqlFragment = {\n    readonly __tangoBrand: typeof TRUSTED_SQL_FRAGMENT_BRAND;\n    readonly sql: string;\n};\n","import { TRUSTED_SQL_FRAGMENT_BRAND, type TrustedSqlFragment } from './TrustedSqlFragment';\n\n/**\n * Narrow an unknown value to a trusted raw SQL fragment.\n */\nexport function isTrustedSqlFragment(value: unknown): value is TrustedSqlFragment {\n    return (\n        typeof value === 'object' &&\n        value !== null &&\n        (value as { __tangoBrand?: unknown }).__tangoBrand === TRUSTED_SQL_FRAGMENT_BRAND &&\n        typeof (value as { sql?: unknown }).sql === 'string'\n    );\n}\n","import type { SqlIdentifierRole } from './SqlIdentifierRole';\n\nexport const VALIDATED_SQL_IDENTIFIER_BRAND = 'tango.core.validated_sql_identifier' as const;\n\nexport type ValidatedSqlIdentifier = {\n    readonly __tangoBrand: typeof VALIDATED_SQL_IDENTIFIER_BRAND;\n    readonly role: SqlIdentifierRole;\n    readonly value: string;\n};\n","export const InternalSqlIdentifierRole = {\n    TABLE: 'table',\n    COLUMN: 'column',\n    PRIMARY_KEY: 'primaryKey',\n    INDEX: 'index',\n    ALIAS: 'alias',\n    CONSTRAINT: 'constraint',\n    SCHEMA: 'schema',\n    RELATION_TABLE: 'relationTable',\n    RELATION_FOREIGN_KEY: 'relationForeignKey',\n    RELATION_TARGET_PRIMARY_KEY: 'relationTargetPrimaryKey',\n} as const;\n\nexport type SqlIdentifierRole = (typeof InternalSqlIdentifierRole)[keyof typeof InternalSqlIdentifierRole];\n","import { VALIDATED_SQL_IDENTIFIER_BRAND, type ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\nimport { InternalSqlIdentifierRole, type SqlIdentifierRole } from './SqlIdentifierRole';\n\nconst SQL_IDENTIFIER_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nconst ROLE_LABELS: Record<SqlIdentifierRole, string> = {\n    [InternalSqlIdentifierRole.TABLE]: 'table name',\n    [InternalSqlIdentifierRole.COLUMN]: 'column',\n    [InternalSqlIdentifierRole.PRIMARY_KEY]: 'primary key',\n    [InternalSqlIdentifierRole.INDEX]: 'index',\n    [InternalSqlIdentifierRole.ALIAS]: 'alias',\n    [InternalSqlIdentifierRole.CONSTRAINT]: 'constraint',\n    [InternalSqlIdentifierRole.SCHEMA]: 'schema',\n    [InternalSqlIdentifierRole.RELATION_TABLE]: 'relation table',\n    [InternalSqlIdentifierRole.RELATION_FOREIGN_KEY]: 'relation foreign key',\n    [InternalSqlIdentifierRole.RELATION_TARGET_PRIMARY_KEY]: 'relation target primary key',\n};\n\n/**\n * Validate an identifier against Tango's SQL safety policy.\n */\nexport function validateSqlIdentifier(\n    value: string,\n    role: SqlIdentifierRole,\n    allowlist?: readonly string[]\n): ValidatedSqlIdentifier {\n    const label = ROLE_LABELS[role];\n\n    if (!SQL_IDENTIFIER_PATTERN.test(value)) {\n        throw new Error(`Invalid SQL ${label}: '${value}'.`);\n    }\n\n    if (allowlist && !allowlist.includes(value)) {\n        throw new Error(`Unknown SQL ${label}: '${value}'.`);\n    }\n\n    return {\n        __tangoBrand: VALIDATED_SQL_IDENTIFIER_BRAND,\n        role,\n        value,\n    };\n}\n","import type { SqlDialect } from './SqlDialect';\nimport type { SqlIdentifierRole } from './SqlIdentifierRole';\nimport { isTrustedSqlFragment } from './isTrustedSqlFragment';\nimport type { TrustedSqlFragment } from './TrustedSqlFragment';\nimport { validateSqlIdentifier } from './validateSqlIdentifier';\nimport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\n\nexport type SqlIdentifierRequest = {\n    key: string;\n    role: SqlIdentifierRole;\n    value: string;\n    allowlist?: readonly string[];\n};\n\nexport type SqlLookupTokenRequest = {\n    key: string;\n    lookup: string;\n    allowed: readonly string[];\n};\n\nexport type SqlRawFragmentRequest = {\n    key: string;\n    value: TrustedSqlFragment;\n};\n\nexport type SqlSafetyRequest = {\n    dialect?: SqlDialect;\n    identifiers?: readonly SqlIdentifierRequest[];\n    lookupTokens?: readonly SqlLookupTokenRequest[];\n    rawFragments?: readonly SqlRawFragmentRequest[];\n};\n\nexport type ValidatedSqlLookupToken = {\n    lookup: string;\n};\n\nexport type ValidatedSqlSafetyResult = {\n    identifiers: Record<string, ValidatedSqlIdentifier>;\n    lookupTokens: Record<string, ValidatedSqlLookupToken>;\n    rawFragments: Record<string, TrustedSqlFragment>;\n};\n\n/**\n * Canonical SQL safety policy engine shared across Tango packages.\n */\nexport class SqlSafetyEngine {\n    static readonly BRAND = 'tango.core.sql_safety_engine' as const;\n    readonly __tangoBrand: typeof SqlSafetyEngine.BRAND = SqlSafetyEngine.BRAND;\n\n    /**\n     * Narrow an unknown value to `SqlSafetyEngine`.\n     */\n    static isSqlSafetyEngine(value: unknown): value is SqlSafetyEngine {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === SqlSafetyEngine.BRAND\n        );\n    }\n\n    /**\n     * Validate a canonical SQL safety request and return trusted tokens.\n     */\n    validate(request: SqlSafetyRequest): ValidatedSqlSafetyResult {\n        return {\n            identifiers: Object.fromEntries(\n                (request.identifiers ?? []).map((entry) => [\n                    entry.key,\n                    validateSqlIdentifier(entry.value, entry.role, entry.allowlist),\n                ])\n            ),\n            lookupTokens: Object.fromEntries(\n                (request.lookupTokens ?? []).map((entry) => [entry.key, this.validateLookupToken(entry)])\n            ),\n            rawFragments: Object.fromEntries(\n                (request.rawFragments ?? []).map((entry) => [entry.key, this.validateRawFragment(entry)])\n            ),\n        };\n    }\n\n    private validateLookupToken(entry: SqlLookupTokenRequest): ValidatedSqlLookupToken {\n        if (!entry.allowed.includes(entry.lookup)) {\n            throw new Error(`Unknown lookup: ${entry.lookup}`);\n        }\n\n        return {\n            lookup: entry.lookup,\n        };\n    }\n\n    private validateRawFragment(entry: SqlRawFragmentRequest): TrustedSqlFragment {\n        if (!isTrustedSqlFragment(entry.value)) {\n            throw new Error(`Untrusted raw SQL fragment for '${entry.key}'.`);\n        }\n\n        return entry.value;\n    }\n}\n","import { TRUSTED_SQL_FRAGMENT_BRAND, type TrustedSqlFragment } from './TrustedSqlFragment';\n\n/**\n * Explicitly opt into embedding a reviewed raw SQL fragment.\n */\nexport function trustedSql(sql: string): TrustedSqlFragment {\n    return {\n        __tangoBrand: TRUSTED_SQL_FRAGMENT_BRAND,\n        sql,\n    };\n}\n","import type { SqlDialect } from './SqlDialect';\nimport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\n\n/**\n * Quote a validated identifier for the target SQL dialect.\n */\nexport function quoteSqlIdentifier(identifier: ValidatedSqlIdentifier, _dialect: SqlDialect): string {\n    return `\"${identifier.value.replaceAll('\"', '\"\"')}\"`;\n}\n","/**\n * Domain boundary barrel: centralizes SQL safety primitives and policy helpers.\n */\n\nexport type { SqlDialect } from './SqlDialect';\nexport type { SqlIdentifierRole } from './SqlIdentifierRole';\nexport type { TrustedSqlFragment } from './TrustedSqlFragment';\nexport type { ValidatedSqlIdentifier } from './ValidatedSqlIdentifier';\nexport { SqlSafetyEngine } from './SqlSafetyEngine';\nexport type {\n    SqlIdentifierRequest,\n    SqlLookupTokenRequest,\n    SqlRawFragmentRequest,\n    SqlSafetyRequest,\n    ValidatedSqlLookupToken,\n    ValidatedSqlSafetyResult,\n} from './SqlSafetyEngine';\nexport { trustedSql } from './trustedSql';\nexport { isTrustedSqlFragment } from './isTrustedSqlFragment';\nexport { validateSqlIdentifier } from './validateSqlIdentifier';\nexport { quoteSqlIdentifier } from './quoteSqlIdentifier';\n"],"mappings":";;AAAA,MAAa,6BAA6B;;;;;;ACK1C,SAAgB,qBAAqB,OAA6C;CAC9E,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAA,qCACtC,OAAQ,MAA4B,QAAQ;AAEpD;;;ACVA,MAAa,iCAAiC;;;ACF9C,MAAa,4BAA4B;CACrC,OAAO;CACP,QAAQ;CACR,aAAa;CACb,OAAO;CACP,OAAO;CACP,YAAY;CACZ,QAAQ;CACR,gBAAgB;CAChB,sBAAsB;CACtB,6BAA6B;AACjC;;;ACRA,MAAM,yBAAyB;AAE/B,MAAM,cAAiD;EAClD,0BAA0B,QAAQ;EAClC,0BAA0B,SAAS;EACnC,0BAA0B,cAAc;EACxC,0BAA0B,QAAQ;EAClC,0BAA0B,QAAQ;EAClC,0BAA0B,aAAa;EACvC,0BAA0B,SAAS;EACnC,0BAA0B,iBAAiB;EAC3C,0BAA0B,uBAAuB;EACjD,0BAA0B,8BAA8B;AAC7D;;;;AAKA,SAAgB,sBACZ,OACA,MACA,WACsB;CACtB,MAAM,QAAQ,YAAY;CAE1B,IAAI,CAAC,uBAAuB,KAAK,KAAK,GAClC,MAAM,IAAI,MAAM,eAAe,MAAM,KAAK,MAAM,GAAG;CAGvD,IAAI,aAAa,CAAC,UAAU,SAAS,KAAK,GACtC,MAAM,IAAI,MAAM,eAAe,MAAM,KAAK,MAAM,GAAG;CAGvD,OAAO;EACH,cAAc;EACd;EACA;CACJ;AACJ;;;;;;ACIA,IAAa,kBAAb,MAAa,gBAAgB;CACzB,OAAgB,QAAQ;CACxB,eAAsD,gBAAgB;;;;CAKtE,OAAO,kBAAkB,OAA0C;EAC/D,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,gBAAgB;CAE/E;;;;CAKA,SAAS,SAAqD;EAC1D,OAAO;GACH,aAAa,OAAO,aACf,QAAQ,eAAe,CAAC,GAAG,KAAK,UAAU,CACvC,MAAM,KACN,sBAAsB,MAAM,OAAO,MAAM,MAAM,MAAM,SAAS,CAClE,CAAC,CACL;GACA,cAAc,OAAO,aAChB,QAAQ,gBAAgB,CAAC,GAAG,KAAK,UAAU,CAAC,MAAM,KAAK,KAAK,oBAAoB,KAAK,CAAC,CAAC,CAC5F;GACA,cAAc,OAAO,aAChB,QAAQ,gBAAgB,CAAC,GAAG,KAAK,UAAU,CAAC,MAAM,KAAK,KAAK,oBAAoB,KAAK,CAAC,CAAC,CAC5F;EACJ;CACJ;CAEA,oBAA4B,OAAuD;EAC/E,IAAI,CAAC,MAAM,QAAQ,SAAS,MAAM,MAAM,GACpC,MAAM,IAAI,MAAM,mBAAmB,MAAM,QAAQ;EAGrD,OAAO,EACH,QAAQ,MAAM,OAClB;CACJ;CAEA,oBAA4B,OAAkD;EAC1E,IAAI,CAAC,qBAAqB,MAAM,KAAK,GACjC,MAAM,IAAI,MAAM,mCAAmC,MAAM,IAAI,GAAG;EAGpE,OAAO,MAAM;CACjB;AACJ;;;;;;AC5FA,SAAgB,WAAW,KAAiC;CACxD,OAAO;EACH,cAAc;EACd;CACJ;AACJ;;;;;;ACJA,SAAgB,mBAAmB,YAAoC,UAA8B;CACjG,OAAO,IAAI,WAAW,MAAM,WAAW,MAAK,MAAI,EAAE;AACtD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danceroutine/tango-core",
-  "version": "1.11.0",
+  "version": "1.11.2",
   "description": "Core types, errors, and result utilities for Tango",
   "type": "module",
   "main": "./dist/index.js",
@@ -54,9 +54,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.9.0",
-    "tsdown": "^0.4.0",
+    "tsdown": "^0.22.1",
     "typescript": "^5.6.3",
-    "vitest": "^4.0.6",
+    "vitest": "^4.1.7",
     "zod": "^4.0.0"
   },
   "scripts": {

package/dist/TangoError-DdQVQNZU.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TangoError-DdQVQNZU.js","names":["err: unknown"],"sources":["../src/errors/TangoError.ts"],"sourcesContent":["import type { HttpError } from './HttpError';\n\n/** Structured error detail payload for API responses. */\nexport type ErrorDetails = Record<string, string[]> | null | undefined;\n\n/** Canonical error payload shape used by Tango HTTP error responses. */\nexport type ProblemDetails<TDetails extends ErrorDetails = null> = {\n    code: string;\n    message: string;\n    details?: TDetails;\n    fields?: Record<string, string[]>;\n};\n\n/** Envelope shape for serialized error responses. */\nexport type ErrorEnvelope<TDetails extends ErrorDetails = null> = {\n    error: ProblemDetails<TDetails>;\n};\n\n/**\n * Base branded framework error.\n *\n * Subclasses provide HTTP status, stable code, and structured details.\n */\nexport abstract class TangoError extends Error {\n    // String brand avoids instanceof and survives cross-package boundaries.\n    readonly __tangoErrorBrand = 'tango.error' as const;\n    abstract status: number;\n\n    protected abstract getDetails(): ErrorDetails;\n\n    protected abstract getErrorName(): string;\n\n    /** Runtime guard for Tango-branded errors. */\n    static isTangoError(err: unknown): err is TangoError {\n        return !!err && (err as { __tangoErrorBrand?: string }).__tangoErrorBrand === 'tango.error';\n    }\n\n    /** Runtime guard for plain problem-details objects. */\n    static isProblemDetails(err: unknown): err is ProblemDetails {\n        return (\n            !!err &&\n            typeof err === 'object' &&\n            err !== null &&\n            'code' in err &&\n            typeof (err as { code: unknown }).code === 'string' &&\n            'message' in err &&\n            typeof (err as { message: unknown }).message === 'string'\n        );\n    }\n\n    /** Convert this error to wire-level envelope format. */\n    toErrorEnvelope(): ErrorEnvelope<ErrorDetails> {\n        return {\n            error: {\n                code: this.getErrorName(),\n                message: this.message,\n                details: this.getDetails(),\n            },\n        };\n    }\n\n    /** Convert this error to legacy `HttpError` shape. */\n    toHttpError(): HttpError {\n        return {\n            status: this.status,\n            body: {\n                error: this.message,\n                details: this.getDetails(),\n            },\n        };\n    }\n}\n"],"mappings":";;IAuBsB,aAAf,cAAkC,MAAM;CAE3C,oBAA6B;;CAQ7B,OAAO,aAAaA,KAAiC;AACjD,WAAS,OAAQ,IAAuC,sBAAsB;CACjF;;CAGD,OAAO,iBAAiBA,KAAqC;AACzD,WACM,cACK,QAAQ,YACf,QAAQ,QACR,UAAU,cACF,IAA0B,SAAS,YAC3C,aAAa,cACL,IAA6B,YAAY;CAExD;;CAGD,kBAA+C;AAC3C,SAAO,EACH,OAAO;GACH,MAAM,KAAK,cAAc;GACzB,SAAS,KAAK;GACd,SAAS,KAAK,YAAY;EAC7B,EACJ;CACJ;;CAGD,cAAyB;AACrB,SAAO;GACH,QAAQ,KAAK;GACb,MAAM;IACF,OAAO,KAAK;IACZ,SAAS,KAAK,YAAY;GAC7B;EACJ;CACJ;AACJ"}

package/dist/chunk-BkvOhyD0.js

@@ -1,12 +0,0 @@
-
-//#region rolldown:runtime
-var __defProp = Object.defineProperty;
-var __export = (target, all) => {
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-};
-
-//#endregion
-export { __export };

package/dist/errors/AuthenticationError.d.ts

@@ -1,15 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error for missing/invalid authentication (HTTP 401). */
-export declare class AuthenticationError extends TangoError {
-    static readonly BRAND: "tango.error.authentication";
-    readonly __tangoBrand: typeof AuthenticationError.BRAND;
-    status: number;
-    /** Create an authentication error with optional custom message. */
-    constructor(message?: string);
-    /**
-     * Narrow an unknown value to `AuthenticationError`.
-     */
-    static isAuthenticationError(value: unknown): value is AuthenticationError;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/ConflictError.d.ts

@@ -1,15 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error for conflicting resource state (HTTP 409). */
-export declare class ConflictError extends TangoError {
-    static readonly BRAND: "tango.error.conflict";
-    readonly __tangoBrand: typeof ConflictError.BRAND;
-    status: number;
-    /** Create a conflict error with optional custom message. */
-    constructor(message?: string);
-    /**
-     * Narrow an unknown value to `ConflictError`.
-     */
-    static isConflictError(value: unknown): value is ConflictError;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/HttpError.d.ts

@@ -1,7 +0,0 @@
-export interface HttpError {
-    status: number;
-    body: {
-        error: string;
-        details?: Record<string, string[]> | null;
-    };
-}

package/dist/errors/MultipleObjectsReturned.d.ts

@@ -1,11 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error when a queryset lookup returns more than one row (HTTP 409). */
-export declare class MultipleObjectsReturned extends TangoError {
-    static readonly BRAND: "tango.error.multiple_objects_returned";
-    readonly __tangoBrand: typeof MultipleObjectsReturned.BRAND;
-    status: number;
-    constructor(message?: string);
-    static isMultipleObjectsReturned(value: unknown): value is MultipleObjectsReturned;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/NotFoundError.d.ts

@@ -1,15 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error for missing resources (HTTP 404). */
-export declare class NotFoundError extends TangoError {
-    static readonly BRAND: "tango.error.not_found";
-    readonly __tangoBrand: typeof NotFoundError.BRAND;
-    status: number;
-    /** Create a not-found error with optional custom message. */
-    constructor(message?: string);
-    /**
-     * Narrow an unknown value to `NotFoundError`.
-     */
-    static isNotFoundError(value: unknown): value is NotFoundError;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/PermissionDenied.d.ts

@@ -1,15 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error for authorization failures (HTTP 403). */
-export declare class PermissionDenied extends TangoError {
-    static readonly BRAND: "tango.error.permission_denied";
-    readonly __tangoBrand: typeof PermissionDenied.BRAND;
-    status: number;
-    /** Create a permission-denied error with optional custom message. */
-    constructor(message?: string);
-    /**
-     * Narrow an unknown value to `PermissionDenied`.
-     */
-    static isPermissionDenied(value: unknown): value is PermissionDenied;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/TangoError.d.ts

@@ -1,33 +0,0 @@
-import type { HttpError } from './HttpError';
-/** Structured error detail payload for API responses. */
-export type ErrorDetails = Record<string, string[]> | null | undefined;
-/** Canonical error payload shape used by Tango HTTP error responses. */
-export type ProblemDetails<TDetails extends ErrorDetails = null> = {
-    code: string;
-    message: string;
-    details?: TDetails;
-    fields?: Record<string, string[]>;
-};
-/** Envelope shape for serialized error responses. */
-export type ErrorEnvelope<TDetails extends ErrorDetails = null> = {
-    error: ProblemDetails<TDetails>;
-};
-/**
- * Base branded framework error.
- *
- * Subclasses provide HTTP status, stable code, and structured details.
- */
-export declare abstract class TangoError extends Error {
-    readonly __tangoErrorBrand: "tango.error";
-    abstract status: number;
-    protected abstract getDetails(): ErrorDetails;
-    protected abstract getErrorName(): string;
-    /** Runtime guard for Tango-branded errors. */
-    static isTangoError(err: unknown): err is TangoError;
-    /** Runtime guard for plain problem-details objects. */
-    static isProblemDetails(err: unknown): err is ProblemDetails;
-    /** Convert this error to wire-level envelope format. */
-    toErrorEnvelope(): ErrorEnvelope<ErrorDetails>;
-    /** Convert this error to legacy `HttpError` shape. */
-    toHttpError(): HttpError;
-}

package/dist/errors/ValidationError.d.ts

@@ -1,14 +0,0 @@
-import { TangoError, type ErrorDetails } from './TangoError';
-/** Error for request validation failures (HTTP 400). */
-export declare class ValidationError extends TangoError {
-    details?: ErrorDetails;
-    readonly __tangoValidationErrorBrand: "tango.error.validation";
-    status: number;
-    constructor(message: string, details?: ErrorDetails);
-    /**
-     * Narrow an unknown value to `ValidationError`, including common legacy shapes.
-     */
-    static isValidationError(err: unknown): err is ValidationError;
-    protected getErrorName(): string;
-    protected getDetails(): ErrorDetails;
-}

package/dist/errors/factories/HttpErrorFactory.d.ts

@@ -1,59 +0,0 @@
-import type { HttpError } from '../HttpError';
-export interface HttpErrorFactoryConfig {
-    /**
-     * When true, raw error messages are included in HTTP responses.
-     * When false, generic messages are returned for non-TangoError exceptions.
-     * Defaults to true (dev-friendly). Set to false in production.
-     */
-    exposeErrors?: boolean;
-}
-/**
- * Converts errors into structured HTTP error responses.
- * Supports TangoError subclasses out of the box, and custom error handlers
- * can be registered for third-party or application-specific error types.
- *
- * @example
- * ```typescript
- * // Development (default) — exposes real error messages
- * const devFactory = new HttpErrorFactory();
- *
- * // Production — hides internal error details
- * const prodFactory = new HttpErrorFactory({ exposeErrors: false });
- *
- * // Register a custom handler for a third-party error
- * prodFactory.registerHandler(ZodError, (err) => ({
- *   status: 400,
- *   body: { error: 'Validation failed', details: err.flatten().fieldErrors },
- * }));
- *
- * // Quick one-shot conversion with dev defaults
- * const httpError = HttpErrorFactory.toHttpError(new NotFoundError('missing'));
- * ```
- */
-export declare class HttpErrorFactory {
-    static readonly BRAND: "tango.error_factory.http";
-    readonly __tangoBrand: typeof HttpErrorFactory.BRAND;
-    private handlers;
-    private exposeErrors;
-    constructor(config?: HttpErrorFactoryConfig);
-    /**
-     * Narrow an unknown value to `HttpErrorFactory`.
-     */
-    static isHttpErrorFactory(value: unknown): value is HttpErrorFactory;
-    /**
-     * Convert an unknown error into an `HttpError` using dev-friendly defaults.
-     * Shorthand for `new HttpErrorFactory().create(error)`.
-     */
-    static toHttpError(error: unknown): HttpError;
-    private static isZodLikeValidationError;
-    private static zodLikeErrorDetails;
-    /**
-     * Register a custom mapper for an application or third-party error type.
-     */
-    registerHandler<T extends Error>(errorClass: new (...args: any[]) => T, handler: (error: T) => HttpError): this;
-    /**
-     * Convert an unknown error into the normalized HTTP error shape Tango uses.
-     */
-    create(error: unknown): HttpError;
-    private isErrorClassInstance;
-}

package/dist/errors/factories/index.d.ts

@@ -1,4 +0,0 @@
-/**
- * Domain boundary barrel: centralizes this subdomain's public contract.
- */
-export { HttpErrorFactory, type HttpErrorFactoryConfig } from './HttpErrorFactory';