@happyvertical/smrt-core 0.40.69 → 0.41.0

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Comprehensive error handling system for SMRT framework\n *\n * Provides specialized error types for different failure scenarios\n * with proper error codes, messages, and debugging information.\n */\n\n/**\n * Abstract base class for all SMRT framework errors.\n *\n * Adds a structured `code` (machine-readable string constant), a `category`\n * (coarse error domain), optional structured `details`, and an optional\n * causal `Error` chain on top of the standard `Error` class.\n *\n * Never throw `SmrtError` directly — use one of the concrete subclasses\n * (`DatabaseError`, `AIError`, `ValidationError`, etc.) or their static\n * factory methods for consistent error codes and messages.\n *\n * @example\n * ```typescript\n * try {\n *   await product.save();\n * } catch (err) {\n *   if (err instanceof ValidationError) {\n *     console.error(err.code, err.details); // 'VALIDATION_REQUIRED_FIELD', { fieldName, objectType }\n *   }\n *   if (err instanceof SmrtError) {\n *     logger.error(ErrorUtils.sanitizeError(err));\n *   }\n * }\n * ```\n */\n\nimport { createLogger } from '@happyvertical/logger';\n\nconst logger = createLogger({ level: 'info' });\n\nexport abstract class SmrtError extends Error {\n  public readonly code: string;\n  public readonly category:\n    | 'database'\n    | 'ai'\n    | 'filesystem'\n    | 'validation'\n    | 'network'\n    | 'configuration'\n    | 'runtime';\n  public readonly details?: Record<string, unknown>;\n  public readonly cause?: Error;\n\n  constructor(\n    message: string,\n    code: string,\n    category: SmrtError['category'],\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    this.code = code;\n    this.category = category;\n    this.details = details;\n    this.cause = cause;\n\n    // Maintain proper stack trace for V8\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  /**\n   * Converts error to a serializable object for logging/debugging\n   */\n  toJSON() {\n    return {\n      name: this.name,\n      message: this.message,\n      code: this.code,\n      category: this.category,\n      details: this.details,\n      stack: this.stack,\n      cause: this.cause\n        ? {\n            name: this.cause.name,\n            message: this.cause.message,\n            stack: this.cause.stack,\n          }\n        : undefined,\n    };\n  }\n}\n\ntype ErrorLikeWithContext = Error & {\n  cause?: unknown;\n  context?: {\n    originalError?: unknown;\n  };\n};\n\nfunction collectErrorMessages(\n  value: unknown,\n  messages: string[],\n  visited: Set<unknown>,\n  depth = 0,\n): void {\n  if (!value || visited.has(value) || depth > 10) {\n    return;\n  }\n\n  visited.add(value);\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed) {\n      messages.push(trimmed);\n    }\n    return;\n  }\n\n  if (!(value instanceof Error)) {\n    return;\n  }\n\n  const message = value.message?.trim();\n  if (message) {\n    messages.push(message);\n  }\n\n  const errorWithContext = value as ErrorLikeWithContext;\n  collectErrorMessages(\n    errorWithContext.context?.originalError,\n    messages,\n    visited,\n    depth + 1,\n  );\n  collectErrorMessages(errorWithContext.cause, messages, visited, depth + 1);\n}\n\nfunction getPrimaryCauseMessage(cause?: Error): {\n  message?: string;\n  messages?: string[];\n} {\n  if (!cause) {\n    return {};\n  }\n\n  const collected: string[] = [];\n  collectErrorMessages(cause, collected, new Set<unknown>());\n\n  const uniqueMessages = [...new Set(collected.filter(Boolean))];\n  if (uniqueMessages.length === 0) {\n    return {};\n  }\n\n  return {\n    message: uniqueMessages[uniqueMessages.length - 1],\n    messages: uniqueMessages,\n  };\n}\n\n/**\n * Errors originating from database operations.\n *\n * Use the static factory methods rather than the constructor directly:\n * - `DatabaseError.connectionFailed(url, cause)` — DB connection failure\n * - `DatabaseError.queryFailed(query, cause)` — SQL execution error\n * - `DatabaseError.schemaError(table, op, cause)` — DDL/migration error\n * - `DatabaseError.constraintViolation(constraint, value, cause)` — FK/CHECK/UNIQUE\n * - `DatabaseError.corruptedData(field, class, cause)` — unparse-able column data\n * - `DatabaseError.missingDiscriminator(class, rowId)` — STI row missing `_meta_type`\n * - `DatabaseError.stiDiscriminatorConflict(...)` — legacy STI discriminator collides during qualification\n * - `DatabaseError.schemaMissing(table, class)` — table not yet migrated\n *\n * All errors have `category: 'database'` and codes prefixed with `DB_`.\n */\nexport class DatabaseError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'database', details, cause);\n  }\n\n  static connectionFailed(dbUrl: string, cause?: Error): DatabaseError {\n    return new DatabaseError(\n      `Failed to connect to database: ${dbUrl}`,\n      'DB_CONNECTION_FAILED',\n      { dbUrl },\n      cause,\n    );\n  }\n\n  static queryFailed(query: string, cause?: Error): DatabaseError {\n    // Include the deepest actionable cause message for better debugging.\n    const causeInfo = getPrimaryCauseMessage(cause);\n    const causeMsg = causeInfo.message ? `\\nCause: ${causeInfo.message}` : '';\n    return new DatabaseError(\n      `Database query failed: ${query.substring(0, 100)}${query.length > 100 ? '...' : ''}${causeMsg}`,\n      'DB_QUERY_FAILED',\n      {\n        query,\n        causeMessage: causeInfo.message,\n        causeMessages: causeInfo.messages,\n      },\n      cause,\n    );\n  }\n\n  static schemaError(\n    tableName: string,\n    operation: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Schema operation failed for table '${tableName}': ${operation}`,\n      'DB_SCHEMA_ERROR',\n      { tableName, operation },\n      cause,\n    );\n  }\n\n  static constraintViolation(\n    constraint: string,\n    value: unknown,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Database constraint violation: ${constraint}`,\n      'DB_CONSTRAINT_VIOLATION',\n      { constraint, value },\n      cause,\n    );\n  }\n\n  static corruptedData(\n    fieldName: string,\n    className: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Corrupted data in field '${fieldName}' for ${className}. ` +\n        `The data cannot be parsed or is malformed. ` +\n        `This may indicate database corruption or incompatible schema changes.`,\n      'DB_CORRUPTED_DATA',\n      { fieldName, className },\n      cause,\n    );\n  }\n\n  static missingDiscriminator(\n    className: string,\n    rowId?: string,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Missing discriminator (_meta_type) for STI class ${className}${rowId ? ` (row id: ${rowId})` : ''}. ` +\n        `STI classes require a discriminator column to determine the correct subclass. ` +\n        `This may indicate a schema mismatch or manual database modification.`,\n      'DB_MISSING_DISCRIMINATOR',\n      { className, rowId },\n    );\n  }\n\n  static stiDiscriminatorConflict(details: {\n    className: string;\n    tableName: string;\n    id: string;\n    slug: string;\n    context: string;\n    conflictIdentity: Record<string, unknown>;\n    legacyMetaType: string;\n    qualifiedMetaType: string;\n    duplicateId: string;\n  }): DatabaseError {\n    const identityText = Object.entries(details.conflictIdentity)\n      .map(([key, value]) => `${key} '${String(value)}'`)\n      .join(', ');\n\n    return new DatabaseError(\n      `Legacy STI discriminator collision for ${details.className} (${details.tableName}). ` +\n        `Row '${details.id}' would upgrade _meta_type from '${details.legacyMetaType}' to '${details.qualifiedMetaType}', ` +\n        `but row '${details.duplicateId}' already uses the qualified discriminator for ${identityText || 'the same conflict identity'}. ` +\n        `Merge or remove the duplicate legacy/qualified rows before saving.`,\n      'DB_STI_DISCRIMINATOR_CONFLICT',\n      details,\n    );\n  }\n\n  static schemaMissing(tableName: string, className: string): DatabaseError {\n    return new DatabaseError(\n      `Table '${tableName}' does not exist for class '${className}'. ` +\n        `Run 'smrt db:migrate' to create database schema.`,\n      'DB_SCHEMA_MISSING',\n      { tableName, className },\n    );\n  }\n}\n\n/**\n * Errors from AI provider integrations.\n *\n * Use the static factory methods:\n * - `AIError.providerError(provider, operation, cause)` — generic provider failure\n * - `AIError.rateLimitExceeded(provider, retryAfter)` — rate limit hit\n * - `AIError.invalidResponse(provider, response)` — unexpected response shape\n * - `AIError.authenticationFailed(provider)` — bad API key / credentials\n *\n * All errors have `category: 'ai'` and codes prefixed with `AI_`.\n * AI errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class AIError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'ai', details, cause);\n  }\n\n  static providerError(\n    provider: string,\n    operation: string,\n    cause?: Error,\n  ): AIError {\n    return new AIError(\n      `AI provider '${provider}' failed during ${operation}`,\n      'AI_PROVIDER_ERROR',\n      { provider, operation },\n      cause,\n    );\n  }\n\n  static rateLimitExceeded(provider: string, retryAfter?: number): AIError {\n    return new AIError(\n      `AI provider '${provider}' rate limit exceeded`,\n      'AI_RATE_LIMIT',\n      { provider, retryAfter },\n    );\n  }\n\n  static invalidResponse(provider: string, response: unknown): AIError {\n    return new AIError(\n      `AI provider '${provider}' returned invalid response`,\n      'AI_INVALID_RESPONSE',\n      { provider, response },\n    );\n  }\n\n  static authenticationFailed(provider: string): AIError {\n    return new AIError(\n      `AI provider '${provider}' authentication failed`,\n      'AI_AUTH_FAILED',\n      { provider },\n    );\n  }\n}\n\n/**\n * Errors from filesystem operations.\n *\n * Use the static factory methods:\n * - `FilesystemError.fileNotFound(path)` — file does not exist\n * - `FilesystemError.permissionDenied(path, operation)` — access denied\n * - `FilesystemError.diskSpaceExceeded(path, requiredBytes)` — insufficient space\n *\n * All errors have `category: 'filesystem'` and codes prefixed with `FS_`.\n */\nexport class FilesystemError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'filesystem', details, cause);\n  }\n\n  static fileNotFound(path: string): FilesystemError {\n    return new FilesystemError(`File not found: ${path}`, 'FS_FILE_NOT_FOUND', {\n      path,\n    });\n  }\n\n  static permissionDenied(path: string, operation: string): FilesystemError {\n    return new FilesystemError(\n      `Permission denied for ${operation} on: ${path}`,\n      'FS_PERMISSION_DENIED',\n      { path, operation },\n    );\n  }\n\n  static diskSpaceExceeded(\n    path: string,\n    requiredBytes: number,\n  ): FilesystemError {\n    return new FilesystemError(\n      `Insufficient disk space for operation on: ${path}`,\n      'FS_DISK_SPACE_EXCEEDED',\n      { path, requiredBytes },\n    );\n  }\n}\n\n/**\n * Input/data validation errors thrown before or during a database operation.\n *\n * `save()` throws `ValidationError` when field validation fails. The collection's\n * `convertWhereKeys()` throws it for invalid WHERE clause operators or field names.\n * `ValidationError` is **not** retried by `ErrorUtils.withRetry()`.\n *\n * Use the static factory methods:\n * - `ValidationError.requiredField(field, objectType)` — missing required field\n * - `ValidationError.invalidValue(field, value, expected)` — wrong type/format\n * - `ValidationError.uniqueConstraint(field, value)` — duplicate unique value\n * - `ValidationError.rangeError(field, value, min?, max?)` — out of allowed range\n *\n * All errors have `category: 'validation'` and codes prefixed with `VALIDATION_`.\n */\nexport class ValidationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'validation', details, cause);\n  }\n\n  static requiredField(fieldName: string, objectType: string): ValidationError {\n    return new ValidationError(\n      `Required field '${fieldName}' is missing for ${objectType}`,\n      'VALIDATION_REQUIRED_FIELD',\n      { fieldName, objectType },\n    );\n  }\n\n  static invalidValue(\n    fieldName: string,\n    value: unknown,\n    expectedType: string,\n  ): ValidationError {\n    return new ValidationError(\n      `Invalid value for field '${fieldName}': expected ${expectedType}, got ${typeof value}`,\n      'VALIDATION_INVALID_VALUE',\n      { fieldName, value, expectedType },\n    );\n  }\n\n  static uniqueConstraint(fieldName: string, value: unknown): ValidationError {\n    return new ValidationError(\n      `Unique constraint violation for field '${fieldName}' with value: ${String(value)}`,\n      'VALIDATION_UNIQUE_CONSTRAINT',\n      { fieldName, value },\n    );\n  }\n\n  static rangeError(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError {\n    const range =\n      min !== undefined && max !== undefined\n        ? `between ${min} and ${max}`\n        : min !== undefined\n          ? `>= ${min}`\n          : `<= ${max}`;\n\n    return new ValidationError(\n      `Value for field '${fieldName}' must be ${range}, got: ${value}`,\n      'VALIDATION_RANGE_ERROR',\n      { fieldName, value, min, max },\n    );\n  }\n}\n\n/**\n * Errors from HTTP and external network operations.\n *\n * Use the static factory methods:\n * - `NetworkError.requestFailed(url, status?, body?)` — non-2xx response or connection failure\n * - `NetworkError.timeout(url, timeoutMs)` — request exceeded timeout\n * - `NetworkError.serviceUnavailable(service, reason?)` — external service down\n *\n * All errors have `category: 'network'` and codes prefixed with `NETWORK_`.\n * Network errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class NetworkError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'network', details, cause);\n  }\n\n  static requestFailed(\n    url: string,\n    status?: number,\n    responseBody?: string | Error,\n  ): NetworkError {\n    const cause = responseBody instanceof Error ? responseBody : undefined;\n    const body = typeof responseBody === 'string' ? responseBody : undefined;\n    return new NetworkError(\n      `Network request failed: ${url}${status ? ` (Status: ${status})` : ''}${body ? ` - ${body.substring(0, 200)}` : ''}`,\n      'NETWORK_REQUEST_FAILED',\n      { url, status, responseBody: body },\n      cause,\n    );\n  }\n\n  static timeout(url: string, timeoutMs: number): NetworkError {\n    return new NetworkError(\n      `Network request timed out after ${timeoutMs}ms: ${url}`,\n      'NETWORK_TIMEOUT',\n      { url, timeoutMs },\n    );\n  }\n\n  static serviceUnavailable(service: string, reason?: string): NetworkError {\n    return new NetworkError(\n      reason\n        ? `External service unavailable: ${service} - ${reason}`\n        : `External service unavailable: ${service}`,\n      'NETWORK_SERVICE_UNAVAILABLE',\n      { service, reason },\n    );\n  }\n}\n\n/**\n * Errors from misconfigured or incompatible class/framework setup.\n *\n * These are typically thrown during class registration (i.e. at module load time),\n * not during normal request handling.\n *\n * Use the static factory methods:\n * - `ConfigurationError.missingConfiguration(key, context?)` — missing required config\n * - `ConfigurationError.invalidConfiguration(key, value, expected)` — wrong config type/value\n * - `ConfigurationError.initializationFailed(component, cause?)` — component failed to start\n * - `ConfigurationError.circularInheritance(class, chain)` — circular class inheritance\n * - `ConfigurationError.incompatibleStrategy(class, strategy, parent, parentStrategy)` — STI mismatch\n * - `ConfigurationError.unregisteredBaseClass(child, base)` — STI base not yet registered\n *\n * All errors have `category: 'configuration'` and codes prefixed with `CONFIG_`.\n * Configuration errors are **not** retried by `ErrorUtils.withRetry()`.\n */\nexport class ConfigurationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'configuration', details, cause);\n  }\n\n  static missingConfiguration(\n    configKey: string,\n    context?: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Missing required configuration: ${configKey}${context ? ` in ${context}` : ''}`,\n      'CONFIG_MISSING',\n      { configKey, context },\n    );\n  }\n\n  static invalidConfiguration(\n    configKey: string,\n    value: unknown,\n    expected: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Invalid configuration for ${configKey}: expected ${expected}, got ${typeof value}`,\n      'CONFIG_INVALID',\n      { configKey, value, expected },\n    );\n  }\n\n  static initializationFailed(\n    component: string,\n    cause?: Error,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Failed to initialize component: ${component}`,\n      'CONFIG_INIT_FAILED',\n      { component },\n      cause,\n    );\n  }\n\n  static circularInheritance(\n    className: string,\n    inheritanceChain: string[],\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Circular inheritance detected for class '${className}'. ` +\n        `Inheritance chain: ${inheritanceChain.join(' → ')} → ${className}. ` +\n        `Classes cannot inherit from themselves directly or indirectly.`,\n      'CONFIG_CIRCULAR_INHERITANCE',\n      { className, inheritanceChain },\n    );\n  }\n\n  static incompatibleStrategy(\n    className: string,\n    classStrategy: string,\n    parentClass: string,\n    parentStrategy: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Incompatible table strategy for class '${className}' (${classStrategy}). ` +\n        `Parent class '${parentClass}' uses ${parentStrategy} strategy. ` +\n        `Child classes must use the same table strategy as their parent. ` +\n        `Either change ${className} to use ${parentStrategy}, or remove the inheritance.`,\n      'CONFIG_INCOMPATIBLE_STRATEGY',\n      { className, classStrategy, parentClass, parentStrategy },\n    );\n  }\n\n  static unregisteredBaseClass(\n    childClass: string,\n    baseClass: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `STI base class '${baseClass}' is not registered for child class '${childClass}'. ` +\n        `When using Single Table Inheritance, the base class must be registered before any child classes. ` +\n        `Ensure ${baseClass} is decorated with @smrt({ tableStrategy: 'sti' }) and imported before ${childClass}.`,\n      'CONFIG_UNREGISTERED_BASE',\n      { childClass, baseClass },\n    );\n  }\n}\n\n/**\n * Errors representing unexpected runtime failures not covered by other categories.\n *\n * `RuntimeError` is the catch-all for internal framework errors — invalid object\n * state, exhausted resources, or failures in operations like `save()` and `loadFromId()`\n * that propagate from an unknown cause.\n *\n * Use the static factory methods:\n * - `RuntimeError.operationFailed(operation, context?, cause?)` — generic operation failure\n * - `RuntimeError.invalidState(message, context?)` — unexpected object/system state\n * - `RuntimeError.resourceExhausted(resource, limit)` — limit exceeded (e.g. connections)\n *\n * All errors have `category: 'runtime'` and codes prefixed with `RUNTIME_`.\n */\nexport class RuntimeError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'runtime', details, cause);\n  }\n\n  static operationFailed(\n    operation: string,\n    context?: string,\n    cause?: Error,\n  ): RuntimeError {\n    return new RuntimeError(\n      `Operation failed: ${operation}${context ? ` in ${context}` : ''}`,\n      'RUNTIME_OPERATION_FAILED',\n      { operation, context },\n      cause,\n    );\n  }\n\n  static invalidState(\n    message: string,\n    context?: Record<string, unknown>,\n  ): RuntimeError {\n    return new RuntimeError(message, 'RUNTIME_INVALID_STATE', context);\n  }\n\n  static resourceExhausted(resource: string, limit: number): RuntimeError {\n    return new RuntimeError(\n      `Resource exhausted: ${resource} exceeded limit of ${limit}`,\n      'RUNTIME_RESOURCE_EXHAUSTED',\n      { resource, limit },\n    );\n  }\n}\n\n/**\n * Error thrown when a tenant isolation boundary is crossed while resolving a\n * relationship.\n *\n * Raised by {@link SmrtObject.loadRelated} / {@link SmrtObject.loadRelatedMany}\n * (and {@link SmrtObject.getRelated}, which delegates to them) when a\n * tenant-scoped object resolves a relationship to an object belonging to a\n * *different*, non-null tenant — the genuine cross-tenant data leak. The guard\n * is a no-op when either side has a `null` tenant (global / non-tenant-scoped\n * models) and when both sides share the same tenant, so it only fires on real\n * leaks. Pass `{ allowCrossTenant: true }` to the loader to deliberately opt out.\n *\n * The `code` is always `'TENANT_ISOLATION_VIOLATION'` and the category is\n * `'validation'`. It is never retried — `ErrorUtils.withRetry()` rethrows it\n * immediately and `ErrorUtils.isRetryable()` returns `false` — because a tenant\n * boundary violation is deterministic. `tenantId` is the owning object's tenant\n * and `attemptedTenantId` is the tenant of the object that was reached.\n *\n * This shares its stable `code`, `name`, `tenantId`, and `attemptedTenantId`\n * shape with the interceptor-level `TenantIsolationError` in\n * `@happyvertical/smrt-tenancy`, so cross-cutting handlers can match either via\n * `err.code === 'TENANT_ISOLATION_VIOLATION'`. They are intentionally distinct\n * classes because `@happyvertical/smrt-core` cannot depend on the tenancy\n * package (the dependency runs the other way).\n *\n * @example\n * ```typescript\n * try {\n *   await order.loadRelated('customerId');\n * } catch (err) {\n *   if (err instanceof TenantIsolationError) {\n *     // err.tenantId          — the order's tenant\n *     // err.attemptedTenantId — the customer's tenant\n *   }\n * }\n * ```\n *\n * @see SmrtObject.loadRelated\n * @see SmrtObject.loadRelatedMany\n */\nexport class TenantIsolationError extends SmrtError {\n  /** The tenant ID of the object that owns the relationship. */\n  public readonly tenantId?: string;\n  /** The tenant ID of the related object that was reached (and rejected). */\n  public readonly attemptedTenantId?: string;\n\n  constructor(\n    message: string,\n    details?: {\n      tenantId?: string;\n      attemptedTenantId?: string;\n      [key: string]: unknown;\n    },\n    cause?: Error,\n  ) {\n    super(message, 'TENANT_ISOLATION_VIOLATION', 'validation', details, cause);\n    this.tenantId = details?.tenantId;\n    this.attemptedTenantId = details?.attemptedTenantId;\n  }\n\n  /**\n   * Builds a {@link TenantIsolationError} for a blocked cross-tenant\n   * relationship resolution, with a descriptive message and structured details.\n   */\n  static crossTenantReference(details: {\n    sourceClass: string;\n    fieldName: string;\n    sourceTenantId: string;\n    targetClass?: string;\n    targetTenantId: string;\n  }): TenantIsolationError {\n    const target = details.targetClass\n      ? `${details.targetClass} (tenant '${details.targetTenantId}')`\n      : `tenant '${details.targetTenantId}'`;\n    return new TenantIsolationError(\n      `Cross-tenant relationship access blocked on ${details.sourceClass}.${details.fieldName}: ` +\n        `owning tenant '${details.sourceTenantId}' does not match ${target}. ` +\n        `Pass { allowCrossTenant: true } to loadRelated()/loadRelatedMany()/getRelated() to override.`,\n      {\n        tenantId: details.sourceTenantId,\n        attemptedTenantId: details.targetTenantId,\n        sourceClass: details.sourceClass,\n        fieldName: details.fieldName,\n        targetClass: details.targetClass,\n      },\n    );\n  }\n}\n\n/**\n * Utility functions for error handling\n */\nexport class ErrorUtils {\n  /**\n   * Wraps a function with error handling and automatic retry logic\n   */\n  static async withRetry<T>(\n    operation: () => Promise<T>,\n    maxRetries = 3,\n    delay = 1000,\n    backoffMultiplier = 2,\n  ): Promise<T> {\n    let lastError: Error = new Error('Operation failed without error details');\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      try {\n        return await operation();\n      } catch (error) {\n        lastError = error instanceof Error ? error : new Error(String(error));\n\n        if (attempt === maxRetries) {\n          throw lastError;\n        }\n\n        // Skip retry for certain error types. A tenant isolation violation is\n        // deterministic — retrying re-fetches the same cross-tenant target — and\n        // is a security boundary, so it must never be retried.\n        if (\n          error instanceof ValidationError ||\n          error instanceof ConfigurationError ||\n          error instanceof TenantIsolationError\n        ) {\n          throw error;\n        }\n\n        // Wait before retrying with exponential backoff\n        // Wrap in try-catch to handle any potential timer errors\n        try {\n          await new Promise<void>((resolve) => {\n            setTimeout(() => resolve(), delay * backoffMultiplier ** attempt);\n          });\n        } catch (timerError) {\n          // Log timer error but don't fail the retry\n          logger.error('Timer error during retry', { error: timerError });\n        }\n      }\n    }\n\n    throw lastError;\n  }\n\n  /**\n   * Checks if an error is retryable\n   */\n  static isRetryable(error: Error): boolean {\n    if (error instanceof SmrtError) {\n      return error.category === 'network' || error.category === 'ai';\n    }\n\n    // Check for common retryable error patterns\n    const retryablePatterns = [\n      /ECONNRESET/,\n      /ETIMEDOUT/,\n      /ENOTFOUND/,\n      /rate.?limit/i,\n      /timeout/i,\n      /503/,\n      /502/,\n      /500/,\n    ];\n\n    return retryablePatterns.some((pattern) => pattern.test(error.message));\n  }\n\n  /**\n   * Sanitizes an error for safe logging (removes sensitive information)\n   */\n  static sanitizeError(error: Error): Record<string, unknown> {\n    const sanitized: Record<string, unknown> = {\n      name: error.name,\n      message: error.message,\n      stack: error.stack,\n    };\n\n    if (error instanceof SmrtError) {\n      sanitized.code = error.code;\n      sanitized.category = error.category;\n\n      // Sanitize details to remove potential sensitive information\n      if (error.details) {\n        const details: Record<string, unknown> = { ...error.details };\n        sanitized.details = details;\n\n        // Remove common sensitive fields\n        const sensitiveFields = [\n          'password',\n          'token',\n          'key',\n          'secret',\n          'apiKey',\n        ];\n        for (const field of sensitiveFields) {\n          if (details[field]) {\n            details[field] = '[REDACTED]';\n          }\n        }\n      }\n    }\n\n    return sanitized;\n  }\n}\n\n/**\n * Validation report that collects multiple validation errors\n *\n * Useful for validating an entire object and reporting all errors\n * at once rather than stopping at the first error.\n *\n * @example\n * ```typescript\n * const report = new ValidationReport('Product');\n * report.addError(ValidationError.requiredField('name', 'Product'));\n * report.addError(ValidationError.rangeError('price', -10, 0));\n *\n * if (report.hasErrors()) {\n *   console.error(report.toString());\n *   // Output:\n *   // Validation failed for Product with 2 errors:\n *   // - name: Required field 'name' is missing for Product\n *   // - price: Value -10 for field 'price' is outside allowed range [0, undefined]\n * }\n * ```\n */\nexport class ValidationReport {\n  private errors: ValidationError[] = [];\n  private objectType: string;\n\n  constructor(objectType: string) {\n    this.objectType = objectType;\n  }\n\n  /**\n   * Add a validation error to the report\n   */\n  addError(error: ValidationError): void {\n    this.errors.push(error);\n  }\n\n  /**\n   * Check if there are any validation errors\n   */\n  hasErrors(): boolean {\n    return this.errors.length > 0;\n  }\n\n  /**\n   * Get all validation errors\n   */\n  getErrors(): ValidationError[] {\n    return [...this.errors];\n  }\n\n  /**\n   * Get the number of validation errors\n   */\n  getErrorCount(): number {\n    return this.errors.length;\n  }\n\n  /**\n   * Convert to a human-readable string\n   */\n  toString(): string {\n    if (this.errors.length === 0) {\n      return `Validation passed for ${this.objectType}`;\n    }\n\n    const errorList = this.errors\n      .map((err, idx) => `  ${idx + 1}. ${err.message}`)\n      .join('\\n');\n\n    return `Validation failed for ${this.objectType} with ${this.errors.length} error(s):\\n${errorList}`;\n  }\n\n  /**\n   * Convert to JSON format\n   */\n  toJSON(): object {\n    return {\n      objectType: this.objectType,\n      errorCount: this.errors.length,\n      errors: this.errors.map((err) => err.toJSON()),\n    };\n  }\n\n  /**\n   * Throw the first error if there are any errors\n   */\n  throwIfErrors(): void {\n    if (this.errors.length > 0) {\n      throw this.errors[0];\n    }\n  }\n\n  /**\n   * Clear all errors\n   */\n  clear(): void {\n    this.errors = [];\n  }\n}\n\n/**\n * Validation utility functions\n */\nexport class ValidationUtils {\n  /**\n   * Validate a single field value\n   *\n   * @param fieldName - Name of the field\n   * @param value - Value to validate\n   * @param options - Validation options (required, min, max, etc.)\n   * @returns ValidationError if validation fails, null otherwise\n   */\n  static async validateField(\n    fieldName: string,\n    value: unknown,\n    options: {\n      required?: boolean;\n      min?: number;\n      max?: number;\n      minLength?: number;\n      maxLength?: number;\n      pattern?: string | RegExp;\n      type?: string;\n      customValidator?: (value: unknown) => boolean | Promise<boolean>;\n      customMessage?: string;\n    },\n    objectType: string = 'Object',\n  ): Promise<ValidationError | null> {\n    // Required check\n    if (\n      options.required &&\n      (value === null || value === undefined || value === '')\n    ) {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n\n    // Skip further validation if value is null/undefined and not required\n    if (value === null || value === undefined) {\n      return null;\n    }\n\n    // Numeric range validation\n    if (typeof value === 'number') {\n      if (options.min !== undefined && value < options.min) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n      if (options.max !== undefined && value > options.max) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n    }\n\n    // String length validation\n    if (typeof value === 'string') {\n      if (options.minLength !== undefined && value.length < options.minLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with minimum length ${options.minLength}`,\n        );\n      }\n      if (options.maxLength !== undefined && value.length > options.maxLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with maximum length ${options.maxLength}`,\n        );\n      }\n\n      // Pattern validation\n      if (options.pattern) {\n        const regex =\n          typeof options.pattern === 'string'\n            ? new RegExp(options.pattern)\n            : options.pattern;\n        if (!regex.test(value)) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            `string matching pattern ${options.pattern}`,\n          );\n        }\n      }\n    }\n\n    // Custom validator\n    if (options.customValidator) {\n      try {\n        const isValid = await options.customValidator(value);\n        if (!isValid) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            options.customMessage || 'custom validation failed',\n          );\n        }\n      } catch (error) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `custom validation error: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    return null;\n  }\n\n  /**\n   * Validate required field\n   */\n  static validateRequired(\n    fieldName: string,\n    value: unknown,\n    objectType: string = 'Object',\n  ): ValidationError | null {\n    if (value === null || value === undefined || value === '') {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n    return null;\n  }\n\n  /**\n   * Validate numeric range\n   */\n  static validateRange(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError | null {\n    if (min !== undefined && value < min) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    if (max !== undefined && value > max) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    return null;\n  }\n\n  /**\n   * Validate string length\n   */\n  static validateLength(\n    fieldName: string,\n    value: string,\n    minLength?: number,\n    maxLength?: number,\n  ): ValidationError | null {\n    if (minLength !== undefined && value.length < minLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with minimum length ${minLength}`,\n      );\n    }\n    if (maxLength !== undefined && value.length > maxLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with maximum length ${maxLength}`,\n      );\n    }\n    return null;\n  }\n\n  /**\n   * Validate string pattern\n   */\n  static validatePattern(\n    fieldName: string,\n    value: string,\n    pattern: string | RegExp,\n  ): ValidationError | null {\n    const regex = typeof pattern === 'string' ? new RegExp(pattern) : pattern;\n    if (!regex.test(value)) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string matching pattern ${pattern}`,\n      );\n    }\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAM,SAAS,aAAa,EAAE,OAAO,OAAO,CAAC;AAE7C,IAAsB,YAAtB,cAAwC,MAAM;CAC5C;CACA;CAQA;CACA;CAEA,YACE,SACA,MACA,UACA,SACA,OACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO,KAAK,YAAY;EAC7B,KAAK,OAAO;EACZ,KAAK,WAAW;EAChB,KAAK,UAAU;EACf,KAAK,QAAQ;EAGb,IAAI,MAAM,mBACR,MAAM,kBAAkB,MAAM,KAAK,WAAW;CAElD;;;;CAKA,SAAS;EACP,OAAO;GACL,MAAM,KAAK;GACX,SAAS,KAAK;GACd,MAAM,KAAK;GACX,UAAU,KAAK;GACf,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,OAAO,KAAK,QACR;IACE,MAAM,KAAK,MAAM;IACjB,SAAS,KAAK,MAAM;IACpB,OAAO,KAAK,MAAM;GACpB,IACA,KAAA;EACN;CACF;AACF;AASA,SAAS,qBACP,OACA,UACA,SACA,QAAQ,GACF;CACN,IAAI,CAAC,SAAS,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAC1C;CAGF,QAAQ,IAAI,KAAK;CAEjB,IAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,UAAU,MAAM,KAAK;EAC3B,IAAI,SACF,SAAS,KAAK,OAAO;EAEvB;CACF;CAEA,IAAI,EAAE,iBAAiB,QACrB;CAGF,MAAM,UAAU,MAAM,SAAS,KAAK;CACpC,IAAI,SACF,SAAS,KAAK,OAAO;CAGvB,MAAM,mBAAmB;CACzB,qBACE,iBAAiB,SAAS,eAC1B,UACA,SACA,QAAQ,CACV;CACA,qBAAqB,iBAAiB,OAAO,UAAU,SAAS,QAAQ,CAAC;AAC3E;AAEA,SAAS,uBAAuB,OAG9B;CACA,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,MAAM,YAAsB,CAAC;CAC7B,qBAAqB,OAAO,2BAAW,IAAI,IAAa,CAAC;CAEzD,MAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,UAAU,OAAO,OAAO,CAAC,CAAC;CAC7D,IAAI,eAAe,WAAW,GAC5B,OAAO,CAAC;CAGV,OAAO;EACL,SAAS,eAAe,eAAe,SAAS;EAChD,UAAU;CACZ;AACF;;;;;;;;;;;;;;;;AAiBA,IAAa,gBAAb,MAAa,sBAAsB,UAAU;CAC3C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,YAAY,SAAS,KAAK;CACjD;CAEA,OAAO,iBAAiB,OAAe,OAA8B;EACnE,OAAO,IAAI,cACT,kCAAkC,SAClC,wBACA,EAAE,MAAM,GACR,KACF;CACF;CAEA,OAAO,YAAY,OAAe,OAA8B;EAE9D,MAAM,YAAY,uBAAuB,KAAK;EAC9C,MAAM,WAAW,UAAU,UAAU,YAAY,UAAU,YAAY;EACvE,OAAO,IAAI,cACT,0BAA0B,MAAM,UAAU,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,QAAQ,KAAK,YACtF,mBACA;GACE;GACA,cAAc,UAAU;GACxB,eAAe,UAAU;EAC3B,GACA,KACF;CACF;CAEA,OAAO,YACL,WACA,WACA,OACe;EACf,OAAO,IAAI,cACT,sCAAsC,UAAU,KAAK,aACrD,mBACA;GAAE;GAAW;EAAU,GACvB,KACF;CACF;CAEA,OAAO,oBACL,YACA,OACA,OACe;EACf,OAAO,IAAI,cACT,kCAAkC,cAClC,2BACA;GAAE;GAAY;EAAM,GACpB,KACF;CACF;CAEA,OAAO,cACL,WACA,WACA,OACe;EACf,OAAO,IAAI,cACT,4BAA4B,UAAU,QAAQ,UAAU,qHAGxD,qBACA;GAAE;GAAW;EAAU,GACvB,KACF;CACF;CAEA,OAAO,qBACL,WACA,OACe;EACf,OAAO,IAAI,cACT,oDAAoD,YAAY,QAAQ,aAAa,MAAM,KAAK,GAAG,uJAGnG,4BACA;GAAE;GAAW;EAAM,CACrB;CACF;CAEA,OAAO,yBAAyB,SAUd;EAChB,MAAM,eAAe,OAAO,QAAQ,QAAQ,gBAAgB,CAAC,CAC1D,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC,CAClD,KAAK,IAAI;EAEZ,OAAO,IAAI,cACT,0CAA0C,QAAQ,UAAU,IAAI,QAAQ,UAAU,UACxE,QAAQ,GAAG,mCAAmC,QAAQ,eAAe,QAAQ,QAAQ,kBAAkB,cACnG,QAAQ,YAAY,iDAAiD,gBAAgB,6BAA6B,uEAEhI,iCACA,OACF;CACF;CAEA,OAAO,cAAc,WAAmB,WAAkC;EACxE,OAAO,IAAI,cACT,UAAU,UAAU,8BAA8B,UAAU,sDAE5D,qBACA;GAAE;GAAW;EAAU,CACzB;CACF;AACF;;;;;;;;;;;;;AAcA,IAAa,UAAb,MAAa,gBAAgB,UAAU;CACrC,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,MAAM,SAAS,KAAK;CAC3C;CAEA,OAAO,cACL,UACA,WACA,OACS;EACT,OAAO,IAAI,QACT,gBAAgB,SAAS,kBAAkB,aAC3C,qBACA;GAAE;GAAU;EAAU,GACtB,KACF;CACF;CAEA,OAAO,kBAAkB,UAAkB,YAA8B;EACvE,OAAO,IAAI,QACT,gBAAgB,SAAS,wBACzB,iBACA;GAAE;GAAU;EAAW,CACzB;CACF;CAEA,OAAO,gBAAgB,UAAkB,UAA4B;EACnE,OAAO,IAAI,QACT,gBAAgB,SAAS,8BACzB,uBACA;GAAE;GAAU;EAAS,CACvB;CACF;CAEA,OAAO,qBAAqB,UAA2B;EACrD,OAAO,IAAI,QACT,gBAAgB,SAAS,0BACzB,kBACA,EAAE,SAAS,CACb;CACF;AACF;;;;;;;;;;;AAYA,IAAa,kBAAb,MAAa,wBAAwB,UAAU;CAC7C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,cAAc,SAAS,KAAK;CACnD;CAEA,OAAO,aAAa,MAA+B;EACjD,OAAO,IAAI,gBAAgB,mBAAmB,QAAQ,qBAAqB,EACzE,KACF,CAAC;CACH;CAEA,OAAO,iBAAiB,MAAc,WAAoC;EACxE,OAAO,IAAI,gBACT,yBAAyB,UAAU,OAAO,QAC1C,wBACA;GAAE;GAAM;EAAU,CACpB;CACF;CAEA,OAAO,kBACL,MACA,eACiB;EACjB,OAAO,IAAI,gBACT,6CAA6C,QAC7C,0BACA;GAAE;GAAM;EAAc,CACxB;CACF;AACF;;;;;;;;;;;;;;;;AAiBA,IAAa,kBAAb,MAAa,wBAAwB,UAAU;CAC7C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,cAAc,SAAS,KAAK;CACnD;CAEA,OAAO,cAAc,WAAmB,YAAqC;EAC3E,OAAO,IAAI,gBACT,mBAAmB,UAAU,mBAAmB,cAChD,6BACA;GAAE;GAAW;EAAW,CAC1B;CACF;CAEA,OAAO,aACL,WACA,OACA,cACiB;EACjB,OAAO,IAAI,gBACT,4BAA4B,UAAU,cAAc,aAAa,QAAQ,OAAO,SAChF,4BACA;GAAE;GAAW;GAAO;EAAa,CACnC;CACF;CAEA,OAAO,iBAAiB,WAAmB,OAAiC;EAC1E,OAAO,IAAI,gBACT,0CAA0C,UAAU,gBAAgB,OAAO,KAAK,KAChF,gCACA;GAAE;GAAW;EAAM,CACrB;CACF;CAEA,OAAO,WACL,WACA,OACA,KACA,KACiB;EACjB,MAAM,QACJ,QAAQ,KAAA,KAAa,QAAQ,KAAA,IACzB,WAAW,IAAI,OAAO,QACtB,QAAQ,KAAA,IACN,MAAM,QACN,MAAM;EAEd,OAAO,IAAI,gBACT,oBAAoB,UAAU,YAAY,MAAM,SAAS,SACzD,0BACA;GAAE;GAAW;GAAO;GAAK;EAAI,CAC/B;CACF;AACF;;;;;;;;;;;;AAaA,IAAa,eAAb,MAAa,qBAAqB,UAAU;CAC1C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,WAAW,SAAS,KAAK;CAChD;CAEA,OAAO,cACL,KACA,QACA,cACc;EACd,MAAM,QAAQ,wBAAwB,QAAQ,eAAe,KAAA;EAC7D,MAAM,OAAO,OAAO,iBAAiB,WAAW,eAAe,KAAA;EAC/D,OAAO,IAAI,aACT,2BAA2B,MAAM,SAAS,aAAa,OAAO,KAAK,KAAK,OAAO,MAAM,KAAK,UAAU,GAAG,GAAG,MAAM,MAChH,0BACA;GAAE;GAAK;GAAQ,cAAc;EAAK,GAClC,KACF;CACF;CAEA,OAAO,QAAQ,KAAa,WAAiC;EAC3D,OAAO,IAAI,aACT,mCAAmC,UAAU,MAAM,OACnD,mBACA;GAAE;GAAK;EAAU,CACnB;CACF;CAEA,OAAO,mBAAmB,SAAiB,QAA+B;EACxE,OAAO,IAAI,aACT,SACI,iCAAiC,QAAQ,KAAK,WAC9C,iCAAiC,WACrC,+BACA;GAAE;GAAS;EAAO,CACpB;CACF;AACF;;;;;;;;;;;;;;;;;;AAmBA,IAAa,qBAAb,MAAa,2BAA2B,UAAU;CAChD,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,iBAAiB,SAAS,KAAK;CACtD;CAEA,OAAO,qBACL,WACA,SACoB;EACpB,OAAO,IAAI,mBACT,mCAAmC,YAAY,UAAU,OAAO,YAAY,MAC5E,kBACA;GAAE;GAAW;EAAQ,CACvB;CACF;CAEA,OAAO,qBACL,WACA,OACA,UACoB;EACpB,OAAO,IAAI,mBACT,6BAA6B,UAAU,aAAa,SAAS,QAAQ,OAAO,SAC5E,kBACA;GAAE;GAAW;GAAO;EAAS,CAC/B;CACF;CAEA,OAAO,qBACL,WACA,OACoB;EACpB,OAAO,IAAI,mBACT,mCAAmC,aACnC,sBACA,EAAE,UAAU,GACZ,KACF;CACF;CAEA,OAAO,oBACL,WACA,kBACoB;EACpB,OAAO,IAAI,mBACT,4CAA4C,UAAU,wBAC9B,iBAAiB,KAAK,KAAK,EAAE,KAAK,UAAU,mEAEpE,+BACA;GAAE;GAAW;EAAiB,CAChC;CACF;CAEA,OAAO,qBACL,WACA,eACA,aACA,gBACoB;EACpB,OAAO,IAAI,mBACT,0CAA0C,UAAU,KAAK,cAAc,mBACpD,YAAY,SAAS,eAAe,2FAEpC,UAAU,UAAU,eAAe,+BACtD,gCACA;GAAE;GAAW;GAAe;GAAa;EAAe,CAC1D;CACF;CAEA,OAAO,sBACL,YACA,WACoB;EACpB,OAAO,IAAI,mBACT,mBAAmB,UAAU,uCAAuC,WAAW,6GAEnE,UAAU,yEAAyE,WAAW,IAC1G,4BACA;GAAE;GAAY;EAAU,CAC1B;CACF;AACF;;;;;;;;;;;;;;;AAgBA,IAAa,eAAb,MAAa,qBAAqB,UAAU;CAC1C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,WAAW,SAAS,KAAK;CAChD;CAEA,OAAO,gBACL,WACA,SACA,OACc;EACd,OAAO,IAAI,aACT,qBAAqB,YAAY,UAAU,OAAO,YAAY,MAC9D,4BACA;GAAE;GAAW;EAAQ,GACrB,KACF;CACF;CAEA,OAAO,aACL,SACA,SACc;EACd,OAAO,IAAI,aAAa,SAAS,yBAAyB,OAAO;CACnE;CAEA,OAAO,kBAAkB,UAAkB,OAA6B;EACtE,OAAO,IAAI,aACT,uBAAuB,SAAS,qBAAqB,SACrD,8BACA;GAAE;GAAU;EAAM,CACpB;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAa,uBAAb,MAAa,6BAA6B,UAAU;;CAElD;;CAEA;CAEA,YACE,SACA,SAKA,OACA;EACA,MAAM,SAAS,8BAA8B,cAAc,SAAS,KAAK;EACzE,KAAK,WAAW,SAAS;EACzB,KAAK,oBAAoB,SAAS;CACpC;;;;;CAMA,OAAO,qBAAqB,SAMH;EACvB,MAAM,SAAS,QAAQ,cACnB,GAAG,QAAQ,YAAY,YAAY,QAAQ,eAAe,MAC1D,WAAW,QAAQ,eAAe;EACtC,OAAO,IAAI,qBACT,+CAA+C,QAAQ,YAAY,GAAG,QAAQ,UAAU,mBACpE,QAAQ,eAAe,mBAAmB,OAAO,iGAErE;GACE,UAAU,QAAQ;GAClB,mBAAmB,QAAQ;GAC3B,aAAa,QAAQ;GACrB,WAAW,QAAQ;GACnB,aAAa,QAAQ;EACvB,CACF;CACF;AACF;;;;AAKA,IAAa,aAAb,MAAwB;;;;CAItB,aAAa,UACX,WACA,aAAa,GACb,QAAQ,KACR,oBAAoB,GACR;EACZ,IAAI,4BAAmB,IAAI,MAAM,wCAAwC;EAEzE,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAC3C,IAAI;GACF,OAAO,MAAM,UAAU;EACzB,SAAS,OAAO;GACd,YAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAEpE,IAAI,YAAY,YACd,MAAM;GAMR,IACE,iBAAiB,mBACjB,iBAAiB,sBACjB,iBAAiB,sBAEjB,MAAM;GAKR,IAAI;IACF,MAAM,IAAI,SAAe,YAAY;KACnC,iBAAiB,QAAQ,GAAG,QAAQ,qBAAqB,OAAO;IAClE,CAAC;GACH,SAAS,YAAY;IAEnB,OAAO,MAAM,4BAA4B,EAAE,OAAO,WAAW,CAAC;GAChE;EACF;EAGF,MAAM;CACR;;;;CAKA,OAAO,YAAY,OAAuB;EACxC,IAAI,iBAAiB,WACnB,OAAO,MAAM,aAAa,aAAa,MAAM,aAAa;EAe5D,OAAO;GAVL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EAGK,CAAA,CAAkB,MAAM,YAAY,QAAQ,KAAK,MAAM,OAAO,CAAC;CACxE;;;;CAKA,OAAO,cAAc,OAAuC;EAC1D,MAAM,YAAqC;GACzC,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,OAAO,MAAM;EACf;EAEA,IAAI,iBAAiB,WAAW;GAC9B,UAAU,OAAO,MAAM;GACvB,UAAU,WAAW,MAAM;GAG3B,IAAI,MAAM,SAAS;IACjB,MAAM,UAAmC,EAAE,GAAG,MAAM,QAAQ;IAC5D,UAAU,UAAU;IAUpB,KAAK,MAAM,SAAS;KANlB;KACA;KACA;KACA;KACA;IAEkB,GAClB,IAAI,QAAQ,QACV,QAAQ,SAAS;GAGvB;EACF;EAEA,OAAO;CACT;AACF;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAa,mBAAb,MAA8B;CAC5B,SAAoC,CAAC;CACrC;CAEA,YAAY,YAAoB;EAC9B,KAAK,aAAa;CACpB;;;;CAKA,SAAS,OAA8B;EACrC,KAAK,OAAO,KAAK,KAAK;CACxB;;;;CAKA,YAAqB;EACnB,OAAO,KAAK,OAAO,SAAS;CAC9B;;;;CAKA,YAA+B;EAC7B,OAAO,CAAC,GAAG,KAAK,MAAM;CACxB;;;;CAKA,gBAAwB;EACtB,OAAO,KAAK,OAAO;CACrB;;;;CAKA,WAAmB;EACjB,IAAI,KAAK,OAAO,WAAW,GACzB,OAAO,yBAAyB,KAAK;EAGvC,MAAM,YAAY,KAAK,OACpB,KAAK,KAAK,QAAQ,KAAK,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,CACjD,KAAK,IAAI;EAEZ,OAAO,yBAAyB,KAAK,WAAW,QAAQ,KAAK,OAAO,OAAO,cAAc;CAC3F;;;;CAKA,SAAiB;EACf,OAAO;GACL,YAAY,KAAK;GACjB,YAAY,KAAK,OAAO;GACxB,QAAQ,KAAK,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC;EAC/C;CACF;;;;CAKA,gBAAsB;EACpB,IAAI,KAAK,OAAO,SAAS,GACvB,MAAM,KAAK,OAAO;CAEtB;;;;CAKA,QAAc;EACZ,KAAK,SAAS,CAAC;CACjB;AACF;;;;AAKA,IAAa,kBAAb,MAA6B;;;;;;;;;CAS3B,aAAa,cACX,WACA,OACA,SAWA,aAAqB,UACY;EAEjC,IACE,QAAQ,aACP,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,KAEpD,OAAO,gBAAgB,cAAc,WAAW,UAAU;EAI5D,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;EAIT,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,QAAQ,QAAQ,KAAA,KAAa,QAAQ,QAAQ,KAC/C,OAAO,gBAAgB,WACrB,WACA,OACA,QAAQ,KACR,QAAQ,GACV;GAEF,IAAI,QAAQ,QAAQ,KAAA,KAAa,QAAQ,QAAQ,KAC/C,OAAO,gBAAgB,WACrB,WACA,OACA,QAAQ,KACR,QAAQ,GACV;EAEJ;EAGA,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,QAAQ,cAAc,KAAA,KAAa,MAAM,SAAS,QAAQ,WAC5D,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,QAAQ,WACxC;GAEF,IAAI,QAAQ,cAAc,KAAA,KAAa,MAAM,SAAS,QAAQ,WAC5D,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,QAAQ,WACxC;GAIF,IAAI,QAAQ;QAKN,EAHF,OAAO,QAAQ,YAAY,WACvB,IAAI,OAAO,QAAQ,OAAO,IAC1B,QAAQ,QAAA,CACH,KAAK,KAAK,GACnB,OAAO,gBAAgB,aACrB,WACA,OACA,2BAA2B,QAAQ,SACrC;GAAA;EAGN;EAGA,IAAI,QAAQ,iBACV,IAAI;GAEF,IAAI,CAAC,MADiB,QAAQ,gBAAgB,KAAK,GAEjD,OAAO,gBAAgB,aACrB,WACA,OACA,QAAQ,iBAAiB,0BAC3B;EAEJ,SAAS,OAAO;GACd,OAAO,gBAAgB,aACrB,WACA,OACA,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACnF;EACF;EAGF,OAAO;CACT;;;;CAKA,OAAO,iBACL,WACA,OACA,aAAqB,UACG;EACxB,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,IACrD,OAAO,gBAAgB,cAAc,WAAW,UAAU;EAE5D,OAAO;CACT;;;;CAKA,OAAO,cACL,WACA,OACA,KACA,KACwB;EACxB,IAAI,QAAQ,KAAA,KAAa,QAAQ,KAC/B,OAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;EAE9D,IAAI,QAAQ,KAAA,KAAa,QAAQ,KAC/B,OAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;EAE9D,OAAO;CACT;;;;CAKA,OAAO,eACL,WACA,OACA,WACA,WACwB;EACxB,IAAI,cAAc,KAAA,KAAa,MAAM,SAAS,WAC5C,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,WAChC;EAEF,IAAI,cAAc,KAAA,KAAa,MAAM,SAAS,WAC5C,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,WAChC;EAEF,OAAO;CACT;;;;CAKA,OAAO,gBACL,WACA,OACA,SACwB;EAExB,IAAI,EADU,OAAO,YAAY,WAAW,IAAI,OAAO,OAAO,IAAI,QAAA,CACvD,KAAK,KAAK,GACnB,OAAO,gBAAgB,aACrB,WACA,OACA,2BAA2B,SAC7B;EAEF,OAAO;CACT;AACF"}
+{"version":3,"file":"errors.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Comprehensive error handling system for SMRT framework\n *\n * Provides specialized error types for different failure scenarios\n * with proper error codes, messages, and debugging information.\n */\n\n/**\n * Abstract base class for all SMRT framework errors.\n *\n * Adds a structured `code` (machine-readable string constant), a `category`\n * (coarse error domain), optional structured `details`, and an optional\n * causal `Error` chain on top of the standard `Error` class.\n *\n * Never throw `SmrtError` directly — use one of the concrete subclasses\n * (`DatabaseError`, `AIError`, `ValidationError`, etc.) or their static\n * factory methods for consistent error codes and messages.\n *\n * @example\n * ```typescript\n * try {\n *   await product.save();\n * } catch (err) {\n *   if (err instanceof ValidationError) {\n *     console.error(err.code, err.details); // 'VALIDATION_REQUIRED_FIELD', { fieldName, objectType }\n *   }\n *   if (err instanceof SmrtError) {\n *     logger.error(ErrorUtils.sanitizeError(err));\n *   }\n * }\n * ```\n */\n\nimport { createLogger } from '@happyvertical/logger';\nimport { classifyDatabaseError } from './db-errors';\n\nconst logger = createLogger({ level: 'info' });\n\nexport abstract class SmrtError extends Error {\n  public readonly code: string;\n  public readonly category:\n    | 'database'\n    | 'ai'\n    | 'filesystem'\n    | 'validation'\n    | 'network'\n    | 'configuration'\n    | 'runtime';\n  public readonly details?: Record<string, unknown>;\n  public readonly cause?: Error;\n\n  constructor(\n    message: string,\n    code: string,\n    category: SmrtError['category'],\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    this.code = code;\n    this.category = category;\n    this.details = details;\n    this.cause = cause;\n\n    // Maintain proper stack trace for V8\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  /**\n   * Converts error to a serializable object for logging/debugging\n   */\n  toJSON() {\n    return {\n      name: this.name,\n      message: this.message,\n      code: this.code,\n      category: this.category,\n      details: this.details,\n      stack: this.stack,\n      cause: this.cause\n        ? {\n            name: this.cause.name,\n            message: this.cause.message,\n            stack: this.cause.stack,\n          }\n        : undefined,\n    };\n  }\n}\n\ntype ErrorLikeWithContext = Error & {\n  cause?: unknown;\n  context?: {\n    originalError?: unknown;\n  };\n};\n\nfunction collectErrorMessages(\n  value: unknown,\n  messages: string[],\n  visited: Set<unknown>,\n  depth = 0,\n): void {\n  if (!value || visited.has(value) || depth > 10) {\n    return;\n  }\n\n  visited.add(value);\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed) {\n      messages.push(trimmed);\n    }\n    return;\n  }\n\n  if (!(value instanceof Error)) {\n    return;\n  }\n\n  const message = value.message?.trim();\n  if (message) {\n    messages.push(message);\n  }\n\n  const errorWithContext = value as ErrorLikeWithContext;\n  collectErrorMessages(\n    errorWithContext.context?.originalError,\n    messages,\n    visited,\n    depth + 1,\n  );\n  collectErrorMessages(errorWithContext.cause, messages, visited, depth + 1);\n}\n\nfunction getPrimaryCauseMessage(cause?: Error): {\n  message?: string;\n  messages?: string[];\n} {\n  if (!cause) {\n    return {};\n  }\n\n  const collected: string[] = [];\n  collectErrorMessages(cause, collected, new Set<unknown>());\n\n  const uniqueMessages = [...new Set(collected.filter(Boolean))];\n  if (uniqueMessages.length === 0) {\n    return {};\n  }\n\n  return {\n    message: uniqueMessages[uniqueMessages.length - 1],\n    messages: uniqueMessages,\n  };\n}\n\n/**\n * Errors originating from database operations.\n *\n * Use the static factory methods rather than the constructor directly:\n * - `DatabaseError.connectionFailed(url, cause)` — DB connection failure\n * - `DatabaseError.queryFailed(query, cause)` — SQL execution error\n * - `DatabaseError.schemaError(table, op, cause)` — DDL/migration error\n * - `DatabaseError.constraintViolation(constraint, value, cause)` — FK/CHECK/UNIQUE\n * - `DatabaseError.corruptedData(field, class, cause)` — unparse-able column data\n * - `DatabaseError.missingDiscriminator(class, rowId)` — STI row missing `_meta_type`\n * - `DatabaseError.stiDiscriminatorConflict(...)` — legacy STI discriminator collides during qualification\n * - `DatabaseError.schemaMissing(table, class)` — table not yet migrated\n *\n * All errors have `category: 'database'` and codes prefixed with `DB_`.\n */\nexport class DatabaseError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'database', details, cause);\n  }\n\n  static connectionFailed(dbUrl: string, cause?: Error): DatabaseError {\n    return new DatabaseError(\n      `Failed to connect to database: ${dbUrl}`,\n      'DB_CONNECTION_FAILED',\n      { dbUrl },\n      cause,\n    );\n  }\n\n  static queryFailed(query: string, cause?: Error): DatabaseError {\n    // Include the deepest actionable cause message for better debugging.\n    const causeInfo = getPrimaryCauseMessage(cause);\n    const causeMsg = causeInfo.message ? `\\nCause: ${causeInfo.message}` : '';\n    return new DatabaseError(\n      `Database query failed: ${query.substring(0, 100)}${query.length > 100 ? '...' : ''}${causeMsg}`,\n      'DB_QUERY_FAILED',\n      {\n        query,\n        causeMessage: causeInfo.message,\n        causeMessages: causeInfo.messages,\n      },\n      cause,\n    );\n  }\n\n  static schemaError(\n    tableName: string,\n    operation: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Schema operation failed for table '${tableName}': ${operation}`,\n      'DB_SCHEMA_ERROR',\n      { tableName, operation },\n      cause,\n    );\n  }\n\n  static constraintViolation(\n    constraint: string,\n    value: unknown,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Database constraint violation: ${constraint}`,\n      'DB_CONSTRAINT_VIOLATION',\n      { constraint, value },\n      cause,\n    );\n  }\n\n  static corruptedData(\n    fieldName: string,\n    className: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Corrupted data in field '${fieldName}' for ${className}. ` +\n        `The data cannot be parsed or is malformed. ` +\n        `This may indicate database corruption or incompatible schema changes.`,\n      'DB_CORRUPTED_DATA',\n      { fieldName, className },\n      cause,\n    );\n  }\n\n  static missingDiscriminator(\n    className: string,\n    rowId?: string,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Missing discriminator (_meta_type) for STI class ${className}${rowId ? ` (row id: ${rowId})` : ''}. ` +\n        `STI classes require a discriminator column to determine the correct subclass. ` +\n        `This may indicate a schema mismatch or manual database modification.`,\n      'DB_MISSING_DISCRIMINATOR',\n      { className, rowId },\n    );\n  }\n\n  static stiDiscriminatorConflict(details: {\n    className: string;\n    tableName: string;\n    id: string;\n    slug: string;\n    context: string;\n    conflictIdentity: Record<string, unknown>;\n    legacyMetaType: string;\n    qualifiedMetaType: string;\n    duplicateId: string;\n  }): DatabaseError {\n    const identityText = Object.entries(details.conflictIdentity)\n      .map(([key, value]) => `${key} '${String(value)}'`)\n      .join(', ');\n\n    return new DatabaseError(\n      `Legacy STI discriminator collision for ${details.className} (${details.tableName}). ` +\n        `Row '${details.id}' would upgrade _meta_type from '${details.legacyMetaType}' to '${details.qualifiedMetaType}', ` +\n        `but row '${details.duplicateId}' already uses the qualified discriminator for ${identityText || 'the same conflict identity'}. ` +\n        `Merge or remove the duplicate legacy/qualified rows before saving.`,\n      'DB_STI_DISCRIMINATOR_CONFLICT',\n      details,\n    );\n  }\n\n  static schemaMissing(tableName: string, className: string): DatabaseError {\n    return new DatabaseError(\n      `Table '${tableName}' does not exist for class '${className}'. ` +\n        `Run 'smrt db:migrate' to create database schema.`,\n      'DB_SCHEMA_MISSING',\n      { tableName, className },\n    );\n  }\n}\n\n/**\n * Errors from AI provider integrations.\n *\n * Use the static factory methods:\n * - `AIError.providerError(provider, operation, cause)` — generic provider failure\n * - `AIError.rateLimitExceeded(provider, retryAfter)` — rate limit hit\n * - `AIError.invalidResponse(provider, response)` — unexpected response shape\n * - `AIError.authenticationFailed(provider)` — bad API key / credentials\n *\n * All errors have `category: 'ai'` and codes prefixed with `AI_`.\n * AI errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class AIError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'ai', details, cause);\n  }\n\n  static providerError(\n    provider: string,\n    operation: string,\n    cause?: Error,\n  ): AIError {\n    return new AIError(\n      `AI provider '${provider}' failed during ${operation}`,\n      'AI_PROVIDER_ERROR',\n      { provider, operation },\n      cause,\n    );\n  }\n\n  static rateLimitExceeded(provider: string, retryAfter?: number): AIError {\n    return new AIError(\n      `AI provider '${provider}' rate limit exceeded`,\n      'AI_RATE_LIMIT',\n      { provider, retryAfter },\n    );\n  }\n\n  static invalidResponse(provider: string, response: unknown): AIError {\n    return new AIError(\n      `AI provider '${provider}' returned invalid response`,\n      'AI_INVALID_RESPONSE',\n      { provider, response },\n    );\n  }\n\n  static authenticationFailed(provider: string): AIError {\n    return new AIError(\n      `AI provider '${provider}' authentication failed`,\n      'AI_AUTH_FAILED',\n      { provider },\n    );\n  }\n}\n\n/**\n * Errors from filesystem operations.\n *\n * Use the static factory methods:\n * - `FilesystemError.fileNotFound(path)` — file does not exist\n * - `FilesystemError.permissionDenied(path, operation)` — access denied\n * - `FilesystemError.diskSpaceExceeded(path, requiredBytes)` — insufficient space\n *\n * All errors have `category: 'filesystem'` and codes prefixed with `FS_`.\n */\nexport class FilesystemError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'filesystem', details, cause);\n  }\n\n  static fileNotFound(path: string): FilesystemError {\n    return new FilesystemError(`File not found: ${path}`, 'FS_FILE_NOT_FOUND', {\n      path,\n    });\n  }\n\n  static permissionDenied(path: string, operation: string): FilesystemError {\n    return new FilesystemError(\n      `Permission denied for ${operation} on: ${path}`,\n      'FS_PERMISSION_DENIED',\n      { path, operation },\n    );\n  }\n\n  static diskSpaceExceeded(\n    path: string,\n    requiredBytes: number,\n  ): FilesystemError {\n    return new FilesystemError(\n      `Insufficient disk space for operation on: ${path}`,\n      'FS_DISK_SPACE_EXCEEDED',\n      { path, requiredBytes },\n    );\n  }\n}\n\n/**\n * Input/data validation errors thrown before or during a database operation.\n *\n * `save()` throws `ValidationError` when field validation fails. The collection's\n * `convertWhereKeys()` throws it for invalid WHERE clause operators or field names.\n * `ValidationError` is **not** retried by `ErrorUtils.withRetry()`.\n *\n * Use the static factory methods:\n * - `ValidationError.requiredField(field, objectType)` — missing required field\n * - `ValidationError.invalidValue(field, value, expected)` — wrong type/format\n * - `ValidationError.uniqueConstraint(field, value)` — duplicate unique value\n * - `ValidationError.rangeError(field, value, min?, max?)` — out of allowed range\n *\n * All errors have `category: 'validation'` and codes prefixed with `VALIDATION_`.\n */\nexport class ValidationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'validation', details, cause);\n  }\n\n  static requiredField(fieldName: string, objectType: string): ValidationError {\n    return new ValidationError(\n      `Required field '${fieldName}' is missing for ${objectType}`,\n      'VALIDATION_REQUIRED_FIELD',\n      { fieldName, objectType },\n    );\n  }\n\n  static invalidValue(\n    fieldName: string,\n    value: unknown,\n    expectedType: string,\n  ): ValidationError {\n    return new ValidationError(\n      `Invalid value for field '${fieldName}': expected ${expectedType}, got ${typeof value}`,\n      'VALIDATION_INVALID_VALUE',\n      { fieldName, value, expectedType },\n    );\n  }\n\n  static uniqueConstraint(fieldName: string, value: unknown): ValidationError {\n    return new ValidationError(\n      `Unique constraint violation for field '${fieldName}' with value: ${String(value)}`,\n      'VALIDATION_UNIQUE_CONSTRAINT',\n      { fieldName, value },\n    );\n  }\n\n  static rangeError(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError {\n    const range =\n      min !== undefined && max !== undefined\n        ? `between ${min} and ${max}`\n        : min !== undefined\n          ? `>= ${min}`\n          : `<= ${max}`;\n\n    return new ValidationError(\n      `Value for field '${fieldName}' must be ${range}, got: ${value}`,\n      'VALIDATION_RANGE_ERROR',\n      { fieldName, value, min, max },\n    );\n  }\n}\n\n/**\n * Errors from HTTP and external network operations.\n *\n * Use the static factory methods:\n * - `NetworkError.requestFailed(url, status?, body?)` — non-2xx response or connection failure\n * - `NetworkError.timeout(url, timeoutMs)` — request exceeded timeout\n * - `NetworkError.serviceUnavailable(service, reason?)` — external service down\n *\n * All errors have `category: 'network'` and codes prefixed with `NETWORK_`.\n * Network errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class NetworkError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'network', details, cause);\n  }\n\n  static requestFailed(\n    url: string,\n    status?: number,\n    responseBody?: string | Error,\n  ): NetworkError {\n    const cause = responseBody instanceof Error ? responseBody : undefined;\n    const body = typeof responseBody === 'string' ? responseBody : undefined;\n    return new NetworkError(\n      `Network request failed: ${url}${status ? ` (Status: ${status})` : ''}${body ? ` - ${body.substring(0, 200)}` : ''}`,\n      'NETWORK_REQUEST_FAILED',\n      { url, status, responseBody: body },\n      cause,\n    );\n  }\n\n  static timeout(url: string, timeoutMs: number): NetworkError {\n    return new NetworkError(\n      `Network request timed out after ${timeoutMs}ms: ${url}`,\n      'NETWORK_TIMEOUT',\n      { url, timeoutMs },\n    );\n  }\n\n  static serviceUnavailable(service: string, reason?: string): NetworkError {\n    return new NetworkError(\n      reason\n        ? `External service unavailable: ${service} - ${reason}`\n        : `External service unavailable: ${service}`,\n      'NETWORK_SERVICE_UNAVAILABLE',\n      { service, reason },\n    );\n  }\n}\n\n/**\n * Errors from misconfigured or incompatible class/framework setup.\n *\n * These are typically thrown during class registration (i.e. at module load time),\n * not during normal request handling.\n *\n * Use the static factory methods:\n * - `ConfigurationError.missingConfiguration(key, context?)` — missing required config\n * - `ConfigurationError.invalidConfiguration(key, value, expected)` — wrong config type/value\n * - `ConfigurationError.initializationFailed(component, cause?)` — component failed to start\n * - `ConfigurationError.circularInheritance(class, chain)` — circular class inheritance\n * - `ConfigurationError.incompatibleStrategy(class, strategy, parent, parentStrategy)` — STI mismatch\n * - `ConfigurationError.unregisteredBaseClass(child, base)` — STI base not yet registered\n *\n * All errors have `category: 'configuration'` and codes prefixed with `CONFIG_`.\n * Configuration errors are **not** retried by `ErrorUtils.withRetry()`.\n */\nexport class ConfigurationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'configuration', details, cause);\n  }\n\n  static missingConfiguration(\n    configKey: string,\n    context?: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Missing required configuration: ${configKey}${context ? ` in ${context}` : ''}`,\n      'CONFIG_MISSING',\n      { configKey, context },\n    );\n  }\n\n  static invalidConfiguration(\n    configKey: string,\n    value: unknown,\n    expected: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Invalid configuration for ${configKey}: expected ${expected}, got ${typeof value}`,\n      'CONFIG_INVALID',\n      { configKey, value, expected },\n    );\n  }\n\n  static initializationFailed(\n    component: string,\n    cause?: Error,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Failed to initialize component: ${component}`,\n      'CONFIG_INIT_FAILED',\n      { component },\n      cause,\n    );\n  }\n\n  static circularInheritance(\n    className: string,\n    inheritanceChain: string[],\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Circular inheritance detected for class '${className}'. ` +\n        `Inheritance chain: ${inheritanceChain.join(' → ')} → ${className}. ` +\n        `Classes cannot inherit from themselves directly or indirectly.`,\n      'CONFIG_CIRCULAR_INHERITANCE',\n      { className, inheritanceChain },\n    );\n  }\n\n  static incompatibleStrategy(\n    className: string,\n    classStrategy: string,\n    parentClass: string,\n    parentStrategy: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Incompatible table strategy for class '${className}' (${classStrategy}). ` +\n        `Parent class '${parentClass}' uses ${parentStrategy} strategy. ` +\n        `Child classes must use the same table strategy as their parent. ` +\n        `Either change ${className} to use ${parentStrategy}, or remove the inheritance.`,\n      'CONFIG_INCOMPATIBLE_STRATEGY',\n      { className, classStrategy, parentClass, parentStrategy },\n    );\n  }\n\n  static unregisteredBaseClass(\n    childClass: string,\n    baseClass: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `STI base class '${baseClass}' is not registered for child class '${childClass}'. ` +\n        `When using Single Table Inheritance, the base class must be registered before any child classes. ` +\n        `Ensure ${baseClass} is decorated with @smrt({ tableStrategy: 'sti' }) and imported before ${childClass}.`,\n      'CONFIG_UNREGISTERED_BASE',\n      { childClass, baseClass },\n    );\n  }\n}\n\n/**\n * Errors representing unexpected runtime failures not covered by other categories.\n *\n * `RuntimeError` is the catch-all for internal framework errors — invalid object\n * state, exhausted resources, or failures in operations like `save()` and `loadFromId()`\n * that propagate from an unknown cause.\n *\n * Use the static factory methods:\n * - `RuntimeError.operationFailed(operation, context?, cause?)` — generic operation failure\n * - `RuntimeError.invalidState(message, context?)` — unexpected object/system state\n * - `RuntimeError.resourceExhausted(resource, limit)` — limit exceeded (e.g. connections)\n *\n * All errors have `category: 'runtime'` and codes prefixed with `RUNTIME_`.\n */\nexport class RuntimeError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, unknown>,\n    cause?: Error,\n  ) {\n    super(message, code, 'runtime', details, cause);\n  }\n\n  static operationFailed(\n    operation: string,\n    context?: string,\n    cause?: Error,\n  ): RuntimeError {\n    return new RuntimeError(\n      `Operation failed: ${operation}${context ? ` in ${context}` : ''}`,\n      'RUNTIME_OPERATION_FAILED',\n      { operation, context },\n      cause,\n    );\n  }\n\n  static invalidState(\n    message: string,\n    context?: Record<string, unknown>,\n  ): RuntimeError {\n    return new RuntimeError(message, 'RUNTIME_INVALID_STATE', context);\n  }\n\n  static resourceExhausted(resource: string, limit: number): RuntimeError {\n    return new RuntimeError(\n      `Resource exhausted: ${resource} exceeded limit of ${limit}`,\n      'RUNTIME_RESOURCE_EXHAUSTED',\n      { resource, limit },\n    );\n  }\n}\n\n/**\n * Error thrown when a tenant isolation boundary is crossed while resolving a\n * relationship.\n *\n * Raised by {@link SmrtObject.loadRelated} / {@link SmrtObject.loadRelatedMany}\n * (and {@link SmrtObject.getRelated}, which delegates to them) when a\n * tenant-scoped object resolves a relationship to an object belonging to a\n * *different*, non-null tenant — the genuine cross-tenant data leak. The guard\n * is a no-op when either side has a `null` tenant (global / non-tenant-scoped\n * models) and when both sides share the same tenant, so it only fires on real\n * leaks. Pass `{ allowCrossTenant: true }` to the loader to deliberately opt out.\n *\n * The `code` is always `'TENANT_ISOLATION_VIOLATION'` and the category is\n * `'validation'`. It is never retried — `ErrorUtils.withRetry()` rethrows it\n * immediately and `ErrorUtils.isRetryable()` returns `false` — because a tenant\n * boundary violation is deterministic. `tenantId` is the owning object's tenant\n * and `attemptedTenantId` is the tenant of the object that was reached.\n *\n * This shares its stable `code`, `name`, `tenantId`, and `attemptedTenantId`\n * shape with the interceptor-level `TenantIsolationError` in\n * `@happyvertical/smrt-tenancy`, so cross-cutting handlers can match either via\n * `err.code === 'TENANT_ISOLATION_VIOLATION'`. They are intentionally distinct\n * classes because `@happyvertical/smrt-core` cannot depend on the tenancy\n * package (the dependency runs the other way).\n *\n * @example\n * ```typescript\n * try {\n *   await order.loadRelated('customerId');\n * } catch (err) {\n *   if (err instanceof TenantIsolationError) {\n *     // err.tenantId          — the order's tenant\n *     // err.attemptedTenantId — the customer's tenant\n *   }\n * }\n * ```\n *\n * @see SmrtObject.loadRelated\n * @see SmrtObject.loadRelatedMany\n */\nexport class TenantIsolationError extends SmrtError {\n  /** The tenant ID of the object that owns the relationship. */\n  public readonly tenantId?: string;\n  /** The tenant ID of the related object that was reached (and rejected). */\n  public readonly attemptedTenantId?: string;\n\n  constructor(\n    message: string,\n    details?: {\n      tenantId?: string;\n      attemptedTenantId?: string;\n      [key: string]: unknown;\n    },\n    cause?: Error,\n  ) {\n    super(message, 'TENANT_ISOLATION_VIOLATION', 'validation', details, cause);\n    this.tenantId = details?.tenantId;\n    this.attemptedTenantId = details?.attemptedTenantId;\n  }\n\n  /**\n   * Builds a {@link TenantIsolationError} for a blocked cross-tenant\n   * relationship resolution, with a descriptive message and structured details.\n   */\n  static crossTenantReference(details: {\n    sourceClass: string;\n    fieldName: string;\n    sourceTenantId: string;\n    targetClass?: string;\n    targetTenantId: string;\n  }): TenantIsolationError {\n    const target = details.targetClass\n      ? `${details.targetClass} (tenant '${details.targetTenantId}')`\n      : `tenant '${details.targetTenantId}'`;\n    return new TenantIsolationError(\n      `Cross-tenant relationship access blocked on ${details.sourceClass}.${details.fieldName}: ` +\n        `owning tenant '${details.sourceTenantId}' does not match ${target}. ` +\n        `Pass { allowCrossTenant: true } to loadRelated()/loadRelatedMany()/getRelated() to override.`,\n      {\n        tenantId: details.sourceTenantId,\n        attemptedTenantId: details.targetTenantId,\n        sourceClass: details.sourceClass,\n        fieldName: details.fieldName,\n        targetClass: details.targetClass,\n      },\n    );\n  }\n}\n\n/**\n * Utility functions for error handling\n */\nexport class ErrorUtils {\n  /**\n   * Wraps a function with error handling and automatic retry logic.\n   *\n   * Retries are for failures a later attempt might survive. An error is\n   * rethrown immediately, with no backoff, when it is:\n   *\n   * - a {@link ValidationError} or {@link ConfigurationError} — the input is\n   *   wrong, and the same input will be wrong next time;\n   * - a {@link TenantIsolationError} — a security boundary, and deterministic;\n   * - a **deterministic database failure** (#2366), classified through the\n   *   driver-error cause chain by {@link classifyDatabaseError}: constraint\n   *   violations, invalid input syntax, missing tables/columns, and statements\n   *   issued inside an already-aborted PostgreSQL transaction (`25P02`).\n   *\n   * The database check matters because `@happyvertical/sql` wraps every driver\n   * error as `DatabaseError('Failed to upsert record into table', …)`, hiding\n   * the constraint wording from `error.message`. Without it, a unique-key\n   * collision burned the full 500 + 1000 + 2000 ms backoff and — inside a\n   * caller-managed transaction — replaced the real cause with\n   * `25P02 current transaction is aborted` on the way out.\n   *\n   * Errors the classifier has no opinion about (`kind: 'unknown'`) keep the\n   * original permissive behavior and are retried.\n   */\n  static async withRetry<T>(\n    operation: () => Promise<T>,\n    maxRetries = 3,\n    delay = 1000,\n    backoffMultiplier = 2,\n  ): Promise<T> {\n    let lastError: Error = new Error('Operation failed without error details');\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      try {\n        return await operation();\n      } catch (error) {\n        lastError = error instanceof Error ? error : new Error(String(error));\n\n        if (attempt === maxRetries) {\n          throw lastError;\n        }\n\n        // Skip retry for certain error types. A tenant isolation violation is\n        // deterministic — retrying re-fetches the same cross-tenant target — and\n        // is a security boundary, so it must never be retried.\n        if (\n          error instanceof ValidationError ||\n          error instanceof ConfigurationError ||\n          error instanceof TenantIsolationError\n        ) {\n          throw error;\n        }\n\n        // A deterministic database failure cannot be retried into success, and\n        // retrying it inside a transaction actively destroys evidence: every\n        // later attempt runs on the aborted client and reports `25P02` instead\n        // of the constraint that actually failed (#2366).\n        if (classifyDatabaseError(error).deterministic) {\n          throw lastError;\n        }\n\n        // Wait before retrying with exponential backoff\n        // Wrap in try-catch to handle any potential timer errors\n        try {\n          await new Promise<void>((resolve) => {\n            setTimeout(() => resolve(), delay * backoffMultiplier ** attempt);\n          });\n        } catch (timerError) {\n          // Log timer error but don't fail the retry\n          logger.error('Timer error during retry', { error: timerError });\n        }\n      }\n    }\n\n    throw lastError;\n  }\n\n  /**\n   * Checks if an error is retryable.\n   *\n   * A database failure is classified through its driver-error cause chain\n   * first (#2366), so a wrapped `40001 serialization_failure` or `SQLITE_BUSY`\n   * reports retryable while a wrapped `23505 unique_violation` does not —\n   * neither of which the `category === 'database'` test alone could tell\n   * apart. Only when the chain yields no opinion do the original\n   * category/message heuristics apply.\n   */\n  static isRetryable(error: Error): boolean {\n    const databaseClassification = classifyDatabaseError(error);\n    if (databaseClassification.kind !== 'unknown') {\n      return databaseClassification.retryable;\n    }\n\n    if (error instanceof SmrtError) {\n      return error.category === 'network' || error.category === 'ai';\n    }\n\n    // Check for common retryable error patterns\n    const retryablePatterns = [\n      /ECONNRESET/,\n      /ETIMEDOUT/,\n      /ENOTFOUND/,\n      /rate.?limit/i,\n      /timeout/i,\n      /503/,\n      /502/,\n      /500/,\n    ];\n\n    return retryablePatterns.some((pattern) => pattern.test(error.message));\n  }\n\n  /**\n   * Sanitizes an error for safe logging (removes sensitive information)\n   */\n  static sanitizeError(error: Error): Record<string, unknown> {\n    const sanitized: Record<string, unknown> = {\n      name: error.name,\n      message: error.message,\n      stack: error.stack,\n    };\n\n    if (error instanceof SmrtError) {\n      sanitized.code = error.code;\n      sanitized.category = error.category;\n\n      // Sanitize details to remove potential sensitive information\n      if (error.details) {\n        const details: Record<string, unknown> = { ...error.details };\n        sanitized.details = details;\n\n        // Remove common sensitive fields\n        const sensitiveFields = [\n          'password',\n          'token',\n          'key',\n          'secret',\n          'apiKey',\n        ];\n        for (const field of sensitiveFields) {\n          if (details[field]) {\n            details[field] = '[REDACTED]';\n          }\n        }\n      }\n    }\n\n    return sanitized;\n  }\n}\n\n/**\n * Validation report that collects multiple validation errors\n *\n * Useful for validating an entire object and reporting all errors\n * at once rather than stopping at the first error.\n *\n * @example\n * ```typescript\n * const report = new ValidationReport('Product');\n * report.addError(ValidationError.requiredField('name', 'Product'));\n * report.addError(ValidationError.rangeError('price', -10, 0));\n *\n * if (report.hasErrors()) {\n *   console.error(report.toString());\n *   // Output:\n *   // Validation failed for Product with 2 errors:\n *   // - name: Required field 'name' is missing for Product\n *   // - price: Value -10 for field 'price' is outside allowed range [0, undefined]\n * }\n * ```\n */\nexport class ValidationReport {\n  private errors: ValidationError[] = [];\n  private objectType: string;\n\n  constructor(objectType: string) {\n    this.objectType = objectType;\n  }\n\n  /**\n   * Add a validation error to the report\n   */\n  addError(error: ValidationError): void {\n    this.errors.push(error);\n  }\n\n  /**\n   * Check if there are any validation errors\n   */\n  hasErrors(): boolean {\n    return this.errors.length > 0;\n  }\n\n  /**\n   * Get all validation errors\n   */\n  getErrors(): ValidationError[] {\n    return [...this.errors];\n  }\n\n  /**\n   * Get the number of validation errors\n   */\n  getErrorCount(): number {\n    return this.errors.length;\n  }\n\n  /**\n   * Convert to a human-readable string\n   */\n  toString(): string {\n    if (this.errors.length === 0) {\n      return `Validation passed for ${this.objectType}`;\n    }\n\n    const errorList = this.errors\n      .map((err, idx) => `  ${idx + 1}. ${err.message}`)\n      .join('\\n');\n\n    return `Validation failed for ${this.objectType} with ${this.errors.length} error(s):\\n${errorList}`;\n  }\n\n  /**\n   * Convert to JSON format\n   */\n  toJSON(): object {\n    return {\n      objectType: this.objectType,\n      errorCount: this.errors.length,\n      errors: this.errors.map((err) => err.toJSON()),\n    };\n  }\n\n  /**\n   * Throw the first error if there are any errors\n   */\n  throwIfErrors(): void {\n    if (this.errors.length > 0) {\n      throw this.errors[0];\n    }\n  }\n\n  /**\n   * Clear all errors\n   */\n  clear(): void {\n    this.errors = [];\n  }\n}\n\n/**\n * Validation utility functions\n */\nexport class ValidationUtils {\n  /**\n   * Validate a single field value\n   *\n   * @param fieldName - Name of the field\n   * @param value - Value to validate\n   * @param options - Validation options (required, min, max, etc.)\n   * @returns ValidationError if validation fails, null otherwise\n   */\n  static async validateField(\n    fieldName: string,\n    value: unknown,\n    options: {\n      required?: boolean;\n      min?: number;\n      max?: number;\n      minLength?: number;\n      maxLength?: number;\n      pattern?: string | RegExp;\n      type?: string;\n      customValidator?: (value: unknown) => boolean | Promise<boolean>;\n      customMessage?: string;\n    },\n    objectType: string = 'Object',\n  ): Promise<ValidationError | null> {\n    // Required check\n    if (\n      options.required &&\n      (value === null || value === undefined || value === '')\n    ) {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n\n    // Skip further validation if value is null/undefined and not required\n    if (value === null || value === undefined) {\n      return null;\n    }\n\n    // Numeric range validation\n    if (typeof value === 'number') {\n      if (options.min !== undefined && value < options.min) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n      if (options.max !== undefined && value > options.max) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n    }\n\n    // String length validation\n    if (typeof value === 'string') {\n      if (options.minLength !== undefined && value.length < options.minLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with minimum length ${options.minLength}`,\n        );\n      }\n      if (options.maxLength !== undefined && value.length > options.maxLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with maximum length ${options.maxLength}`,\n        );\n      }\n\n      // Pattern validation\n      if (options.pattern) {\n        const regex =\n          typeof options.pattern === 'string'\n            ? new RegExp(options.pattern)\n            : options.pattern;\n        if (!regex.test(value)) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            `string matching pattern ${options.pattern}`,\n          );\n        }\n      }\n    }\n\n    // Custom validator\n    if (options.customValidator) {\n      try {\n        const isValid = await options.customValidator(value);\n        if (!isValid) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            options.customMessage || 'custom validation failed',\n          );\n        }\n      } catch (error) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `custom validation error: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    return null;\n  }\n\n  /**\n   * Validate required field\n   */\n  static validateRequired(\n    fieldName: string,\n    value: unknown,\n    objectType: string = 'Object',\n  ): ValidationError | null {\n    if (value === null || value === undefined || value === '') {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n    return null;\n  }\n\n  /**\n   * Validate numeric range\n   */\n  static validateRange(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError | null {\n    if (min !== undefined && value < min) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    if (max !== undefined && value > max) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    return null;\n  }\n\n  /**\n   * Validate string length\n   */\n  static validateLength(\n    fieldName: string,\n    value: string,\n    minLength?: number,\n    maxLength?: number,\n  ): ValidationError | null {\n    if (minLength !== undefined && value.length < minLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with minimum length ${minLength}`,\n      );\n    }\n    if (maxLength !== undefined && value.length > maxLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with maximum length ${maxLength}`,\n      );\n    }\n    return null;\n  }\n\n  /**\n   * Validate string pattern\n   */\n  static validatePattern(\n    fieldName: string,\n    value: string,\n    pattern: string | RegExp,\n  ): ValidationError | null {\n    const regex = typeof pattern === 'string' ? new RegExp(pattern) : pattern;\n    if (!regex.test(value)) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string matching pattern ${pattern}`,\n      );\n    }\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAM,SAAS,aAAa,EAAE,OAAO,OAAO,CAAC;AAE7C,IAAsB,YAAtB,cAAwC,MAAM;CAC5C;CACA;CAQA;CACA;CAEA,YACE,SACA,MACA,UACA,SACA,OACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO,KAAK,YAAY;EAC7B,KAAK,OAAO;EACZ,KAAK,WAAW;EAChB,KAAK,UAAU;EACf,KAAK,QAAQ;EAGb,IAAI,MAAM,mBACR,MAAM,kBAAkB,MAAM,KAAK,WAAW;CAElD;;;;CAKA,SAAS;EACP,OAAO;GACL,MAAM,KAAK;GACX,SAAS,KAAK;GACd,MAAM,KAAK;GACX,UAAU,KAAK;GACf,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,OAAO,KAAK,QACR;IACE,MAAM,KAAK,MAAM;IACjB,SAAS,KAAK,MAAM;IACpB,OAAO,KAAK,MAAM;GACpB,IACA,KAAA;EACN;CACF;AACF;AASA,SAAS,qBACP,OACA,UACA,SACA,QAAQ,GACF;CACN,IAAI,CAAC,SAAS,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAC1C;CAGF,QAAQ,IAAI,KAAK;CAEjB,IAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,UAAU,MAAM,KAAK;EAC3B,IAAI,SACF,SAAS,KAAK,OAAO;EAEvB;CACF;CAEA,IAAI,EAAE,iBAAiB,QACrB;CAGF,MAAM,UAAU,MAAM,SAAS,KAAK;CACpC,IAAI,SACF,SAAS,KAAK,OAAO;CAGvB,MAAM,mBAAmB;CACzB,qBACE,iBAAiB,SAAS,eAC1B,UACA,SACA,QAAQ,CACV;CACA,qBAAqB,iBAAiB,OAAO,UAAU,SAAS,QAAQ,CAAC;AAC3E;AAEA,SAAS,uBAAuB,OAG9B;CACA,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,MAAM,YAAsB,CAAC;CAC7B,qBAAqB,OAAO,2BAAW,IAAI,IAAa,CAAC;CAEzD,MAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,UAAU,OAAO,OAAO,CAAC,CAAC;CAC7D,IAAI,eAAe,WAAW,GAC5B,OAAO,CAAC;CAGV,OAAO;EACL,SAAS,eAAe,eAAe,SAAS;EAChD,UAAU;CACZ;AACF;;;;;;;;;;;;;;;;AAiBA,IAAa,gBAAb,MAAa,sBAAsB,UAAU;CAC3C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,YAAY,SAAS,KAAK;CACjD;CAEA,OAAO,iBAAiB,OAAe,OAA8B;EACnE,OAAO,IAAI,cACT,kCAAkC,SAClC,wBACA,EAAE,MAAM,GACR,KACF;CACF;CAEA,OAAO,YAAY,OAAe,OAA8B;EAE9D,MAAM,YAAY,uBAAuB,KAAK;EAC9C,MAAM,WAAW,UAAU,UAAU,YAAY,UAAU,YAAY;EACvE,OAAO,IAAI,cACT,0BAA0B,MAAM,UAAU,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,QAAQ,KAAK,YACtF,mBACA;GACE;GACA,cAAc,UAAU;GACxB,eAAe,UAAU;EAC3B,GACA,KACF;CACF;CAEA,OAAO,YACL,WACA,WACA,OACe;EACf,OAAO,IAAI,cACT,sCAAsC,UAAU,KAAK,aACrD,mBACA;GAAE;GAAW;EAAU,GACvB,KACF;CACF;CAEA,OAAO,oBACL,YACA,OACA,OACe;EACf,OAAO,IAAI,cACT,kCAAkC,cAClC,2BACA;GAAE;GAAY;EAAM,GACpB,KACF;CACF;CAEA,OAAO,cACL,WACA,WACA,OACe;EACf,OAAO,IAAI,cACT,4BAA4B,UAAU,QAAQ,UAAU,qHAGxD,qBACA;GAAE;GAAW;EAAU,GACvB,KACF;CACF;CAEA,OAAO,qBACL,WACA,OACe;EACf,OAAO,IAAI,cACT,oDAAoD,YAAY,QAAQ,aAAa,MAAM,KAAK,GAAG,uJAGnG,4BACA;GAAE;GAAW;EAAM,CACrB;CACF;CAEA,OAAO,yBAAyB,SAUd;EAChB,MAAM,eAAe,OAAO,QAAQ,QAAQ,gBAAgB,CAAC,CAC1D,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC,CAClD,KAAK,IAAI;EAEZ,OAAO,IAAI,cACT,0CAA0C,QAAQ,UAAU,IAAI,QAAQ,UAAU,UACxE,QAAQ,GAAG,mCAAmC,QAAQ,eAAe,QAAQ,QAAQ,kBAAkB,cACnG,QAAQ,YAAY,iDAAiD,gBAAgB,6BAA6B,uEAEhI,iCACA,OACF;CACF;CAEA,OAAO,cAAc,WAAmB,WAAkC;EACxE,OAAO,IAAI,cACT,UAAU,UAAU,8BAA8B,UAAU,sDAE5D,qBACA;GAAE;GAAW;EAAU,CACzB;CACF;AACF;;;;;;;;;;;;;AAcA,IAAa,UAAb,MAAa,gBAAgB,UAAU;CACrC,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,MAAM,SAAS,KAAK;CAC3C;CAEA,OAAO,cACL,UACA,WACA,OACS;EACT,OAAO,IAAI,QACT,gBAAgB,SAAS,kBAAkB,aAC3C,qBACA;GAAE;GAAU;EAAU,GACtB,KACF;CACF;CAEA,OAAO,kBAAkB,UAAkB,YAA8B;EACvE,OAAO,IAAI,QACT,gBAAgB,SAAS,wBACzB,iBACA;GAAE;GAAU;EAAW,CACzB;CACF;CAEA,OAAO,gBAAgB,UAAkB,UAA4B;EACnE,OAAO,IAAI,QACT,gBAAgB,SAAS,8BACzB,uBACA;GAAE;GAAU;EAAS,CACvB;CACF;CAEA,OAAO,qBAAqB,UAA2B;EACrD,OAAO,IAAI,QACT,gBAAgB,SAAS,0BACzB,kBACA,EAAE,SAAS,CACb;CACF;AACF;;;;;;;;;;;AAYA,IAAa,kBAAb,MAAa,wBAAwB,UAAU;CAC7C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,cAAc,SAAS,KAAK;CACnD;CAEA,OAAO,aAAa,MAA+B;EACjD,OAAO,IAAI,gBAAgB,mBAAmB,QAAQ,qBAAqB,EACzE,KACF,CAAC;CACH;CAEA,OAAO,iBAAiB,MAAc,WAAoC;EACxE,OAAO,IAAI,gBACT,yBAAyB,UAAU,OAAO,QAC1C,wBACA;GAAE;GAAM;EAAU,CACpB;CACF;CAEA,OAAO,kBACL,MACA,eACiB;EACjB,OAAO,IAAI,gBACT,6CAA6C,QAC7C,0BACA;GAAE;GAAM;EAAc,CACxB;CACF;AACF;;;;;;;;;;;;;;;;AAiBA,IAAa,kBAAb,MAAa,wBAAwB,UAAU;CAC7C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,cAAc,SAAS,KAAK;CACnD;CAEA,OAAO,cAAc,WAAmB,YAAqC;EAC3E,OAAO,IAAI,gBACT,mBAAmB,UAAU,mBAAmB,cAChD,6BACA;GAAE;GAAW;EAAW,CAC1B;CACF;CAEA,OAAO,aACL,WACA,OACA,cACiB;EACjB,OAAO,IAAI,gBACT,4BAA4B,UAAU,cAAc,aAAa,QAAQ,OAAO,SAChF,4BACA;GAAE;GAAW;GAAO;EAAa,CACnC;CACF;CAEA,OAAO,iBAAiB,WAAmB,OAAiC;EAC1E,OAAO,IAAI,gBACT,0CAA0C,UAAU,gBAAgB,OAAO,KAAK,KAChF,gCACA;GAAE;GAAW;EAAM,CACrB;CACF;CAEA,OAAO,WACL,WACA,OACA,KACA,KACiB;EACjB,MAAM,QACJ,QAAQ,KAAA,KAAa,QAAQ,KAAA,IACzB,WAAW,IAAI,OAAO,QACtB,QAAQ,KAAA,IACN,MAAM,QACN,MAAM;EAEd,OAAO,IAAI,gBACT,oBAAoB,UAAU,YAAY,MAAM,SAAS,SACzD,0BACA;GAAE;GAAW;GAAO;GAAK;EAAI,CAC/B;CACF;AACF;;;;;;;;;;;;AAaA,IAAa,eAAb,MAAa,qBAAqB,UAAU;CAC1C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,WAAW,SAAS,KAAK;CAChD;CAEA,OAAO,cACL,KACA,QACA,cACc;EACd,MAAM,QAAQ,wBAAwB,QAAQ,eAAe,KAAA;EAC7D,MAAM,OAAO,OAAO,iBAAiB,WAAW,eAAe,KAAA;EAC/D,OAAO,IAAI,aACT,2BAA2B,MAAM,SAAS,aAAa,OAAO,KAAK,KAAK,OAAO,MAAM,KAAK,UAAU,GAAG,GAAG,MAAM,MAChH,0BACA;GAAE;GAAK;GAAQ,cAAc;EAAK,GAClC,KACF;CACF;CAEA,OAAO,QAAQ,KAAa,WAAiC;EAC3D,OAAO,IAAI,aACT,mCAAmC,UAAU,MAAM,OACnD,mBACA;GAAE;GAAK;EAAU,CACnB;CACF;CAEA,OAAO,mBAAmB,SAAiB,QAA+B;EACxE,OAAO,IAAI,aACT,SACI,iCAAiC,QAAQ,KAAK,WAC9C,iCAAiC,WACrC,+BACA;GAAE;GAAS;EAAO,CACpB;CACF;AACF;;;;;;;;;;;;;;;;;;AAmBA,IAAa,qBAAb,MAAa,2BAA2B,UAAU;CAChD,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,iBAAiB,SAAS,KAAK;CACtD;CAEA,OAAO,qBACL,WACA,SACoB;EACpB,OAAO,IAAI,mBACT,mCAAmC,YAAY,UAAU,OAAO,YAAY,MAC5E,kBACA;GAAE;GAAW;EAAQ,CACvB;CACF;CAEA,OAAO,qBACL,WACA,OACA,UACoB;EACpB,OAAO,IAAI,mBACT,6BAA6B,UAAU,aAAa,SAAS,QAAQ,OAAO,SAC5E,kBACA;GAAE;GAAW;GAAO;EAAS,CAC/B;CACF;CAEA,OAAO,qBACL,WACA,OACoB;EACpB,OAAO,IAAI,mBACT,mCAAmC,aACnC,sBACA,EAAE,UAAU,GACZ,KACF;CACF;CAEA,OAAO,oBACL,WACA,kBACoB;EACpB,OAAO,IAAI,mBACT,4CAA4C,UAAU,wBAC9B,iBAAiB,KAAK,KAAK,EAAE,KAAK,UAAU,mEAEpE,+BACA;GAAE;GAAW;EAAiB,CAChC;CACF;CAEA,OAAO,qBACL,WACA,eACA,aACA,gBACoB;EACpB,OAAO,IAAI,mBACT,0CAA0C,UAAU,KAAK,cAAc,mBACpD,YAAY,SAAS,eAAe,2FAEpC,UAAU,UAAU,eAAe,+BACtD,gCACA;GAAE;GAAW;GAAe;GAAa;EAAe,CAC1D;CACF;CAEA,OAAO,sBACL,YACA,WACoB;EACpB,OAAO,IAAI,mBACT,mBAAmB,UAAU,uCAAuC,WAAW,6GAEnE,UAAU,yEAAyE,WAAW,IAC1G,4BACA;GAAE;GAAY;EAAU,CAC1B;CACF;AACF;;;;;;;;;;;;;;;AAgBA,IAAa,eAAb,MAAa,qBAAqB,UAAU;CAC1C,YACE,SACA,MACA,SACA,OACA;EACA,MAAM,SAAS,MAAM,WAAW,SAAS,KAAK;CAChD;CAEA,OAAO,gBACL,WACA,SACA,OACc;EACd,OAAO,IAAI,aACT,qBAAqB,YAAY,UAAU,OAAO,YAAY,MAC9D,4BACA;GAAE;GAAW;EAAQ,GACrB,KACF;CACF;CAEA,OAAO,aACL,SACA,SACc;EACd,OAAO,IAAI,aAAa,SAAS,yBAAyB,OAAO;CACnE;CAEA,OAAO,kBAAkB,UAAkB,OAA6B;EACtE,OAAO,IAAI,aACT,uBAAuB,SAAS,qBAAqB,SACrD,8BACA;GAAE;GAAU;EAAM,CACpB;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAa,uBAAb,MAAa,6BAA6B,UAAU;;CAElD;;CAEA;CAEA,YACE,SACA,SAKA,OACA;EACA,MAAM,SAAS,8BAA8B,cAAc,SAAS,KAAK;EACzE,KAAK,WAAW,SAAS;EACzB,KAAK,oBAAoB,SAAS;CACpC;;;;;CAMA,OAAO,qBAAqB,SAMH;EACvB,MAAM,SAAS,QAAQ,cACnB,GAAG,QAAQ,YAAY,YAAY,QAAQ,eAAe,MAC1D,WAAW,QAAQ,eAAe;EACtC,OAAO,IAAI,qBACT,+CAA+C,QAAQ,YAAY,GAAG,QAAQ,UAAU,mBACpE,QAAQ,eAAe,mBAAmB,OAAO,iGAErE;GACE,UAAU,QAAQ;GAClB,mBAAmB,QAAQ;GAC3B,aAAa,QAAQ;GACrB,WAAW,QAAQ;GACnB,aAAa,QAAQ;EACvB,CACF;CACF;AACF;;;;AAKA,IAAa,aAAb,MAAwB;;;;;;;;;;;;;;;;;;;;;;;;;CAyBtB,aAAa,UACX,WACA,aAAa,GACb,QAAQ,KACR,oBAAoB,GACR;EACZ,IAAI,4BAAmB,IAAI,MAAM,wCAAwC;EAEzE,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAC3C,IAAI;GACF,OAAO,MAAM,UAAU;EACzB,SAAS,OAAO;GACd,YAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAEpE,IAAI,YAAY,YACd,MAAM;GAMR,IACE,iBAAiB,mBACjB,iBAAiB,sBACjB,iBAAiB,sBAEjB,MAAM;GAOR,IAAI,sBAAsB,KAAK,CAAC,CAAC,eAC/B,MAAM;GAKR,IAAI;IACF,MAAM,IAAI,SAAe,YAAY;KACnC,iBAAiB,QAAQ,GAAG,QAAQ,qBAAqB,OAAO;IAClE,CAAC;GACH,SAAS,YAAY;IAEnB,OAAO,MAAM,4BAA4B,EAAE,OAAO,WAAW,CAAC;GAChE;EACF;EAGF,MAAM;CACR;;;;;;;;;;;CAYA,OAAO,YAAY,OAAuB;EACxC,MAAM,yBAAyB,sBAAsB,KAAK;EAC1D,IAAI,uBAAuB,SAAS,WAClC,OAAO,uBAAuB;EAGhC,IAAI,iBAAiB,WACnB,OAAO,MAAM,aAAa,aAAa,MAAM,aAAa;EAe5D,OAAO;GAVL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EAGK,CAAA,CAAkB,MAAM,YAAY,QAAQ,KAAK,MAAM,OAAO,CAAC;CACxE;;;;CAKA,OAAO,cAAc,OAAuC;EAC1D,MAAM,YAAqC;GACzC,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,OAAO,MAAM;EACf;EAEA,IAAI,iBAAiB,WAAW;GAC9B,UAAU,OAAO,MAAM;GACvB,UAAU,WAAW,MAAM;GAG3B,IAAI,MAAM,SAAS;IACjB,MAAM,UAAmC,EAAE,GAAG,MAAM,QAAQ;IAC5D,UAAU,UAAU;IAUpB,KAAK,MAAM,SAAS;KANlB;KACA;KACA;KACA;KACA;IAEkB,GAClB,IAAI,QAAQ,QACV,QAAQ,SAAS;GAGvB;EACF;EAEA,OAAO;CACT;AACF;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAa,mBAAb,MAA8B;CAC5B,SAAoC,CAAC;CACrC;CAEA,YAAY,YAAoB;EAC9B,KAAK,aAAa;CACpB;;;;CAKA,SAAS,OAA8B;EACrC,KAAK,OAAO,KAAK,KAAK;CACxB;;;;CAKA,YAAqB;EACnB,OAAO,KAAK,OAAO,SAAS;CAC9B;;;;CAKA,YAA+B;EAC7B,OAAO,CAAC,GAAG,KAAK,MAAM;CACxB;;;;CAKA,gBAAwB;EACtB,OAAO,KAAK,OAAO;CACrB;;;;CAKA,WAAmB;EACjB,IAAI,KAAK,OAAO,WAAW,GACzB,OAAO,yBAAyB,KAAK;EAGvC,MAAM,YAAY,KAAK,OACpB,KAAK,KAAK,QAAQ,KAAK,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,CACjD,KAAK,IAAI;EAEZ,OAAO,yBAAyB,KAAK,WAAW,QAAQ,KAAK,OAAO,OAAO,cAAc;CAC3F;;;;CAKA,SAAiB;EACf,OAAO;GACL,YAAY,KAAK;GACjB,YAAY,KAAK,OAAO;GACxB,QAAQ,KAAK,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC;EAC/C;CACF;;;;CAKA,gBAAsB;EACpB,IAAI,KAAK,OAAO,SAAS,GACvB,MAAM,KAAK,OAAO;CAEtB;;;;CAKA,QAAc;EACZ,KAAK,SAAS,CAAC;CACjB;AACF;;;;AAKA,IAAa,kBAAb,MAA6B;;;;;;;;;CAS3B,aAAa,cACX,WACA,OACA,SAWA,aAAqB,UACY;EAEjC,IACE,QAAQ,aACP,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,KAEpD,OAAO,gBAAgB,cAAc,WAAW,UAAU;EAI5D,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;EAIT,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,QAAQ,QAAQ,KAAA,KAAa,QAAQ,QAAQ,KAC/C,OAAO,gBAAgB,WACrB,WACA,OACA,QAAQ,KACR,QAAQ,GACV;GAEF,IAAI,QAAQ,QAAQ,KAAA,KAAa,QAAQ,QAAQ,KAC/C,OAAO,gBAAgB,WACrB,WACA,OACA,QAAQ,KACR,QAAQ,GACV;EAEJ;EAGA,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,QAAQ,cAAc,KAAA,KAAa,MAAM,SAAS,QAAQ,WAC5D,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,QAAQ,WACxC;GAEF,IAAI,QAAQ,cAAc,KAAA,KAAa,MAAM,SAAS,QAAQ,WAC5D,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,QAAQ,WACxC;GAIF,IAAI,QAAQ;QAKN,EAHF,OAAO,QAAQ,YAAY,WACvB,IAAI,OAAO,QAAQ,OAAO,IAC1B,QAAQ,QAAA,CACH,KAAK,KAAK,GACnB,OAAO,gBAAgB,aACrB,WACA,OACA,2BAA2B,QAAQ,SACrC;GAAA;EAGN;EAGA,IAAI,QAAQ,iBACV,IAAI;GAEF,IAAI,CAAC,MADiB,QAAQ,gBAAgB,KAAK,GAEjD,OAAO,gBAAgB,aACrB,WACA,OACA,QAAQ,iBAAiB,0BAC3B;EAEJ,SAAS,OAAO;GACd,OAAO,gBAAgB,aACrB,WACA,OACA,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACnF;EACF;EAGF,OAAO;CACT;;;;CAKA,OAAO,iBACL,WACA,OACA,aAAqB,UACG;EACxB,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,IACrD,OAAO,gBAAgB,cAAc,WAAW,UAAU;EAE5D,OAAO;CACT;;;;CAKA,OAAO,cACL,WACA,OACA,KACA,KACwB;EACxB,IAAI,QAAQ,KAAA,KAAa,QAAQ,KAC/B,OAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;EAE9D,IAAI,QAAQ,KAAA,KAAa,QAAQ,KAC/B,OAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;EAE9D,OAAO;CACT;;;;CAKA,OAAO,eACL,WACA,OACA,WACA,WACwB;EACxB,IAAI,cAAc,KAAA,KAAa,MAAM,SAAS,WAC5C,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,WAChC;EAEF,IAAI,cAAc,KAAA,KAAa,MAAM,SAAS,WAC5C,OAAO,gBAAgB,aACrB,WACA,OACA,8BAA8B,WAChC;EAEF,OAAO;CACT;;;;CAKA,OAAO,gBACL,WACA,OACA,SACwB;EAExB,IAAI,EADU,OAAO,YAAY,WAAW,IAAI,OAAO,OAAO,IAAI,QAAA,CACvD,KAAK,KAAK,GACnB,OAAO,gBAAgB,aACrB,WACA,OACA,2BAA2B,SAC7B;EAEF,OAAO;CACT;AACF"}

package/dist/generators/changes-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changes-route.d.ts","sourceRoot":"","sources":["../../src/generators/changes-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAS5D;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,KACX,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,gFAAgF;IAChF,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAQpD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAmC5B;AAaD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAmEnB"}
+{"version":3,"file":"changes-route.d.ts","sourceRoot":"","sources":["../../src/generators/changes-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAU5D;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,KACX,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,gFAAgF;IAChF,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAQpD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAaD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAmEnB"}

package/dist/generators/changes-route.js

@@ -1,4 +1,5 @@
 import { ensureChangeFeedTable, getTenantScopedChangesSince } from "../change-feed.js";
+import { applyPostgresRuntimeTimeouts } from "../postgres-timeouts.js";
 import { createLogger } from "@happyvertical/logger";
 import { getDatabase } from "@happyvertical/sql";
 //#region src/generators/changes-route.ts
@@ -50,7 +51,7 @@ function resolveChangesDb(dbOption) {
 		if ("query" in dbOption && typeof dbOption.query === "function") return Promise.resolve(dbOption);
 		let resolved = resolvedInstanceDbs.get(dbOption);
 		if (!resolved) {
-			resolved = getDatabase(dbOption);
+			resolved = getDatabase(applyPostgresRuntimeTimeouts({ ...dbOption }));
 			resolvedInstanceDbs.set(dbOption, resolved);
 		}
 		return resolved;
@@ -58,9 +59,11 @@ function resolveChangesDb(dbOption) {
 	if (typeof dbOption === "string" && dbOption) {
 		let resolved = resolvedUrlDbs.get(dbOption);
 		if (!resolved) {
+			const isMemoryDb = dbOption === ":memory:";
+			const bounded = applyPostgresRuntimeTimeouts({ url: dbOption });
 			resolved = getDatabase({
-				url: dbOption,
-				...dbOption === ":memory:" ? {} : { dbid: `smrt:${dbOption}` }
+				...bounded,
+				...isMemoryDb ? {} : { dbid: `smrt:${bounded.url}` }
 			});
 			resolvedUrlDbs.set(dbOption, resolved);
 		}

package/dist/generators/changes-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"changes-route.js","names":[],"sources":["../../src/generators/changes-route.ts"],"sourcesContent":["/**\n * Generated `_changes` HTTP route for the change feed (issue #1758).\n *\n * Handles `GET {basePath}/_changes` in the REST generator: an auth-guarded,\n * tenant-scoped cursor read over the `_smrt_changes` log. This module keeps\n * the feed logic out of `rest.ts` (which only registers the path) so\n * sibling generator changes stay conflict-free.\n *\n * Contract (part of the client/mobile sync contract, PRD #1755):\n * - `GET {basePath}/_changes?since=<cursor>&tables=<a,b>&limit=<n>` returns\n *   `{ changes, cursor, resyncRequired?, resyncCursor? }` — see\n *   `getChangesSince` for the exact cursor guarantee (strictly monotonic;\n *   reads miss no committed changes under concurrent writers).\n *   `resyncRequired: true` — served as HTTP 200, it is protocol state rather\n *   than an error — means the cursor cannot be served incrementally (pruned\n *   out of the retained window, or foreign/reset) and the client must\n *   re-fetch its data in full, then resume from `resyncCursor`.\n * - **Auth is fail-closed** (#1540 posture): the route requires the\n *   generator's `authMiddleware`. Without one configured, every request is\n *   refused with 401 — the feed spans all tables, so per-model\n *   `api: { public }` opt-outs deliberately do NOT apply to it.\n * - **Tenant scoping** follows the active tenant context through the same\n *   dependency-inversion hook the DispatchBus uses: with tenancy enabled, a\n *   request only ever sees its own tenant's changes plus global rows; with\n *   tenancy enabled but no active tenant, only global rows (fail-closed).\n */\n\nimport { createLogger } from '@happyvertical/logger';\nimport type { DatabaseInterface } from '@happyvertical/sql';\nimport { getDatabase } from '@happyvertical/sql';\nimport {\n  ensureChangeFeedTable,\n  getTenantScopedChangesSince,\n} from '../change-feed.js';\n\nconst logger = createLogger({ level: 'info' });\n\n/**\n * Structural copy of `APIConfig['authMiddleware']` (from `rest.ts`) so this\n * module never imports the generator back (keeps the dependency one-way).\n *\n * Exported so the sibling `_events` route (#1763) reuses the exact same\n * fail-closed auth contract without redeclaring it.\n */\nexport type ChangesAuthMiddleware = (\n  objectName: string,\n  action: string,\n) => (req: Request) => Promise<Request | Response>;\n\nexport interface ChangesRouteOptions {\n  /** The generator's configured auth middleware, if any. */\n  authMiddleware?: ChangesAuthMiddleware;\n  /** The generator's `APIContext.db` (instance, config object, or URL string). */\n  db?: unknown;\n}\n\n/**\n * Pseudo object name passed to the auth middleware for the feed route, so\n * middlewares can recognize and specially authorize it if they want to.\n */\nexport const CHANGES_ROUTE_OBJECT_NAME = '_changes';\n\n// Resolve the APIContext db option once per distinct option value so every\n// request reads the same underlying database (getDatabase() would otherwise\n// mint a fresh instance per call for config objects / `:memory:` URLs).\nconst resolvedInstanceDbs = new WeakMap<object, Promise<DatabaseInterface>>();\nconst resolvedUrlDbs = new Map<string, Promise<DatabaseInterface>>();\n\n/**\n * Resolve the generator's `db` option (instance, config object, or URL string)\n * to a single shared {@link DatabaseInterface} per distinct option value.\n *\n * Exported so the sibling `_events` route (#1763) resolves its database\n * identically — sharing this WeakMap/Map means both routes read the same\n * underlying handle for a given option, which matters for `:memory:` databases\n * where a fresh `getDatabase()` per call would mint a separate database.\n */\nexport function resolveChangesDb(\n  dbOption: unknown,\n): Promise<DatabaseInterface> {\n  if (dbOption && typeof dbOption === 'object') {\n    if (\n      'query' in dbOption &&\n      typeof (dbOption as { query?: unknown }).query === 'function'\n    ) {\n      return Promise.resolve(dbOption as DatabaseInterface);\n    }\n    let resolved = resolvedInstanceDbs.get(dbOption);\n    if (!resolved) {\n      resolved = getDatabase(\n        dbOption as Parameters<typeof getDatabase>[0],\n      ) as Promise<DatabaseInterface>;\n      resolvedInstanceDbs.set(dbOption, resolved);\n    }\n    return resolved;\n  }\n\n  if (typeof dbOption === 'string' && dbOption) {\n    let resolved = resolvedUrlDbs.get(dbOption);\n    if (!resolved) {\n      // Match SmrtClass's connection-sharing convention for file-backed URLs.\n      const isMemoryDb = dbOption === ':memory:';\n      resolved = getDatabase({\n        url: dbOption,\n        ...(isMemoryDb ? {} : { dbid: `smrt:${dbOption}` }),\n      }) as Promise<DatabaseInterface>;\n      resolvedUrlDbs.set(dbOption, resolved);\n    }\n    return resolved;\n  }\n\n  return Promise.reject(\n    new Error('The _changes route requires a database in APIContext'),\n  );\n}\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'Content-Type': 'application/json' },\n  });\n}\n\nfunction errorResponse(status: number, message: string): Response {\n  return jsonResponse({ error: message }, status);\n}\n\n/**\n * Handle a request against the generated `_changes` route.\n *\n * Returns 401 when no auth middleware is configured (fail-closed) or the\n * middleware rejects; 405 for non-GET methods; 400 for malformed `since`/\n * `limit`; 503 when the generator has no database; otherwise a\n * `{ changes, cursor }` page scoped to the active tenant context.\n */\nexport async function handleChangesRoute(\n  req: Request,\n  options: ChangesRouteOptions,\n): Promise<Response> {\n  if (req.method !== 'GET') {\n    return errorResponse(405, 'Method not allowed');\n  }\n\n  // Fail-closed (#1540): the change feed spans every table, so it is never\n  // public — an auth middleware must be configured and must pass. The action\n  // is the lowercased HTTP method, matching the generator's other call sites.\n  if (!options.authMiddleware) {\n    return errorResponse(401, 'Authentication required');\n  }\n  const authCheck = options.authMiddleware(\n    CHANGES_ROUTE_OBJECT_NAME,\n    req.method.toLowerCase(),\n  );\n  const authResult = await authCheck(req);\n  if (authResult instanceof Response) {\n    return authResult;\n  }\n\n  if (options.db == null) {\n    return errorResponse(\n      503,\n      'Change feed unavailable: no database configured for the API generator',\n    );\n  }\n\n  const url = new URL(authResult.url);\n  const since = Number(url.searchParams.get('since') ?? '0');\n  if (!Number.isFinite(since) || since < 0) {\n    return errorResponse(400, \"'since' must be a non-negative number\");\n  }\n\n  let limit: number | undefined;\n  const limitParam = url.searchParams.get('limit');\n  if (limitParam !== null) {\n    limit = Number(limitParam);\n    if (!Number.isFinite(limit) || limit < 1) {\n      return errorResponse(400, \"'limit' must be a positive number\");\n    }\n  }\n\n  const tablesParam = url.searchParams.get('tables');\n  const tables = tablesParam\n    ? tablesParam\n        .split(',')\n        .map((table) => table.trim())\n        .filter(Boolean)\n    : undefined;\n\n  try {\n    const db = await resolveChangesDb(options.db);\n    // System tables are runtime-ensured; a raw handle passed straight to the\n    // generator may not have gone through framework init yet.\n    await ensureChangeFeedTable(db);\n    const page = await getTenantScopedChangesSince(db, {\n      since,\n      tables,\n      limit,\n    });\n    return jsonResponse(page);\n  } catch (error) {\n    logger.error('Change feed route failed', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return errorResponse(500, 'Internal server error');\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAM,SAAS,aAAa,EAAE,OAAO,OAAO,CAAC;;;;;AAyB7C,IAAa,4BAA4B;AAKzC,IAAM,sCAAsB,IAAI,QAA4C;AAC5E,IAAM,iCAAiB,IAAI,IAAwC;;;;;;;;;;AAWnE,SAAgB,iBACd,UAC4B;CAC5B,IAAI,YAAY,OAAO,aAAa,UAAU;EAC5C,IACE,WAAW,YACX,OAAQ,SAAiC,UAAU,YAEnD,OAAO,QAAQ,QAAQ,QAA6B;EAEtD,IAAI,WAAW,oBAAoB,IAAI,QAAQ;EAC/C,IAAI,CAAC,UAAU;GACb,WAAW,YACT,QACF;GACA,oBAAoB,IAAI,UAAU,QAAQ;EAC5C;EACA,OAAO;CACT;CAEA,IAAI,OAAO,aAAa,YAAY,UAAU;EAC5C,IAAI,WAAW,eAAe,IAAI,QAAQ;EAC1C,IAAI,CAAC,UAAU;GAGb,WAAW,YAAY;IACrB,KAAK;IACL,GAHiB,aAAa,aAGb,CAAC,IAAI,EAAE,MAAM,QAAQ,WAAW;GACnD,CAAC;GACD,eAAe,IAAI,UAAU,QAAQ;EACvC;EACA,OAAO;CACT;CAEA,OAAO,QAAQ,uBACb,IAAI,MAAM,sDAAsD,CAClE;AACF;AAEA,SAAS,aAAa,MAAe,SAAS,KAAe;CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH;AAEA,SAAS,cAAc,QAAgB,SAA2B;CAChE,OAAO,aAAa,EAAE,OAAO,QAAQ,GAAG,MAAM;AAChD;;;;;;;;;AAUA,eAAsB,mBACpB,KACA,SACmB;CACnB,IAAI,IAAI,WAAW,OACjB,OAAO,cAAc,KAAK,oBAAoB;CAMhD,IAAI,CAAC,QAAQ,gBACX,OAAO,cAAc,KAAK,yBAAyB;CAMrD,MAAM,aAAa,MAJD,QAAQ,eACxB,2BACA,IAAI,OAAO,YAAY,CAEA,CAAA,CAAU,GAAG;CACtC,IAAI,sBAAsB,UACxB,OAAO;CAGT,IAAI,QAAQ,MAAM,MAChB,OAAO,cACL,KACA,uEACF;CAGF,MAAM,MAAM,IAAI,IAAI,WAAW,GAAG;CAClC,MAAM,QAAQ,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK,GAAG;CACzD,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,GACrC,OAAO,cAAc,KAAK,uCAAuC;CAGnE,IAAI;CACJ,MAAM,aAAa,IAAI,aAAa,IAAI,OAAO;CAC/C,IAAI,eAAe,MAAM;EACvB,QAAQ,OAAO,UAAU;EACzB,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,GACrC,OAAO,cAAc,KAAK,mCAAmC;CAEjE;CAEA,MAAM,cAAc,IAAI,aAAa,IAAI,QAAQ;CACjD,MAAM,SAAS,cACX,YACG,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACjB,KAAA;CAEJ,IAAI;EACF,MAAM,KAAK,MAAM,iBAAiB,QAAQ,EAAE;EAG5C,MAAM,sBAAsB,EAAE;EAM9B,OAAO,aAAa,MALD,4BAA4B,IAAI;GACjD;GACA;GACA;EACF,CAAC,CACuB;CAC1B,SAAS,OAAO;EACd,OAAO,MAAM,4BAA4B,EACvC,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;EACD,OAAO,cAAc,KAAK,uBAAuB;CACnD;AACF"}
+{"version":3,"file":"changes-route.js","names":[],"sources":["../../src/generators/changes-route.ts"],"sourcesContent":["/**\n * Generated `_changes` HTTP route for the change feed (issue #1758).\n *\n * Handles `GET {basePath}/_changes` in the REST generator: an auth-guarded,\n * tenant-scoped cursor read over the `_smrt_changes` log. This module keeps\n * the feed logic out of `rest.ts` (which only registers the path) so\n * sibling generator changes stay conflict-free.\n *\n * Contract (part of the client/mobile sync contract, PRD #1755):\n * - `GET {basePath}/_changes?since=<cursor>&tables=<a,b>&limit=<n>` returns\n *   `{ changes, cursor, resyncRequired?, resyncCursor? }` — see\n *   `getChangesSince` for the exact cursor guarantee (strictly monotonic;\n *   reads miss no committed changes under concurrent writers).\n *   `resyncRequired: true` — served as HTTP 200, it is protocol state rather\n *   than an error — means the cursor cannot be served incrementally (pruned\n *   out of the retained window, or foreign/reset) and the client must\n *   re-fetch its data in full, then resume from `resyncCursor`.\n * - **Auth is fail-closed** (#1540 posture): the route requires the\n *   generator's `authMiddleware`. Without one configured, every request is\n *   refused with 401 — the feed spans all tables, so per-model\n *   `api: { public }` opt-outs deliberately do NOT apply to it.\n * - **Tenant scoping** follows the active tenant context through the same\n *   dependency-inversion hook the DispatchBus uses: with tenancy enabled, a\n *   request only ever sees its own tenant's changes plus global rows; with\n *   tenancy enabled but no active tenant, only global rows (fail-closed).\n */\n\nimport { createLogger } from '@happyvertical/logger';\nimport type { DatabaseInterface } from '@happyvertical/sql';\nimport { getDatabase } from '@happyvertical/sql';\nimport {\n  ensureChangeFeedTable,\n  getTenantScopedChangesSince,\n} from '../change-feed.js';\nimport { applyPostgresRuntimeTimeouts } from '../postgres-timeouts.js';\n\nconst logger = createLogger({ level: 'info' });\n\n/**\n * Structural copy of `APIConfig['authMiddleware']` (from `rest.ts`) so this\n * module never imports the generator back (keeps the dependency one-way).\n *\n * Exported so the sibling `_events` route (#1763) reuses the exact same\n * fail-closed auth contract without redeclaring it.\n */\nexport type ChangesAuthMiddleware = (\n  objectName: string,\n  action: string,\n) => (req: Request) => Promise<Request | Response>;\n\nexport interface ChangesRouteOptions {\n  /** The generator's configured auth middleware, if any. */\n  authMiddleware?: ChangesAuthMiddleware;\n  /** The generator's `APIContext.db` (instance, config object, or URL string). */\n  db?: unknown;\n}\n\n/**\n * Pseudo object name passed to the auth middleware for the feed route, so\n * middlewares can recognize and specially authorize it if they want to.\n */\nexport const CHANGES_ROUTE_OBJECT_NAME = '_changes';\n\n// Resolve the APIContext db option once per distinct option value so every\n// request reads the same underlying database (getDatabase() would otherwise\n// mint a fresh instance per call for config objects / `:memory:` URLs).\nconst resolvedInstanceDbs = new WeakMap<object, Promise<DatabaseInterface>>();\nconst resolvedUrlDbs = new Map<string, Promise<DatabaseInterface>>();\n\n/**\n * Resolve the generator's `db` option (instance, config object, or URL string)\n * to a single shared {@link DatabaseInterface} per distinct option value.\n *\n * Exported so the sibling `_events` route (#1763) resolves its database\n * identically — sharing this WeakMap/Map means both routes read the same\n * underlying handle for a given option, which matters for `:memory:` databases\n * where a fresh `getDatabase()` per call would mint a separate database.\n */\nexport function resolveChangesDb(\n  dbOption: unknown,\n): Promise<DatabaseInterface> {\n  if (dbOption && typeof dbOption === 'object') {\n    if (\n      'query' in dbOption &&\n      typeof (dbOption as { query?: unknown }).query === 'function'\n    ) {\n      return Promise.resolve(dbOption as DatabaseInterface);\n    }\n    let resolved = resolvedInstanceDbs.get(dbOption);\n    if (!resolved) {\n      resolved = getDatabase(\n        applyPostgresRuntimeTimeouts({\n          ...(dbOption as Record<string, unknown>),\n        }) as Parameters<typeof getDatabase>[0],\n      ) as Promise<DatabaseInterface>;\n      resolvedInstanceDbs.set(dbOption, resolved);\n    }\n    return resolved;\n  }\n\n  if (typeof dbOption === 'string' && dbOption) {\n    let resolved = resolvedUrlDbs.get(dbOption);\n    if (!resolved) {\n      // Match SmrtClass's connection-sharing convention for file-backed URLs,\n      // including the runtime PostgreSQL timeout bounds and the dbid derived\n      // from the bounded URL (#2377).\n      const isMemoryDb = dbOption === ':memory:';\n      const bounded = applyPostgresRuntimeTimeouts({ url: dbOption });\n      resolved = getDatabase({\n        ...bounded,\n        ...(isMemoryDb ? {} : { dbid: `smrt:${bounded.url}` }),\n      } as Parameters<typeof getDatabase>[0]) as Promise<DatabaseInterface>;\n      resolvedUrlDbs.set(dbOption, resolved);\n    }\n    return resolved;\n  }\n\n  return Promise.reject(\n    new Error('The _changes route requires a database in APIContext'),\n  );\n}\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'Content-Type': 'application/json' },\n  });\n}\n\nfunction errorResponse(status: number, message: string): Response {\n  return jsonResponse({ error: message }, status);\n}\n\n/**\n * Handle a request against the generated `_changes` route.\n *\n * Returns 401 when no auth middleware is configured (fail-closed) or the\n * middleware rejects; 405 for non-GET methods; 400 for malformed `since`/\n * `limit`; 503 when the generator has no database; otherwise a\n * `{ changes, cursor }` page scoped to the active tenant context.\n */\nexport async function handleChangesRoute(\n  req: Request,\n  options: ChangesRouteOptions,\n): Promise<Response> {\n  if (req.method !== 'GET') {\n    return errorResponse(405, 'Method not allowed');\n  }\n\n  // Fail-closed (#1540): the change feed spans every table, so it is never\n  // public — an auth middleware must be configured and must pass. The action\n  // is the lowercased HTTP method, matching the generator's other call sites.\n  if (!options.authMiddleware) {\n    return errorResponse(401, 'Authentication required');\n  }\n  const authCheck = options.authMiddleware(\n    CHANGES_ROUTE_OBJECT_NAME,\n    req.method.toLowerCase(),\n  );\n  const authResult = await authCheck(req);\n  if (authResult instanceof Response) {\n    return authResult;\n  }\n\n  if (options.db == null) {\n    return errorResponse(\n      503,\n      'Change feed unavailable: no database configured for the API generator',\n    );\n  }\n\n  const url = new URL(authResult.url);\n  const since = Number(url.searchParams.get('since') ?? '0');\n  if (!Number.isFinite(since) || since < 0) {\n    return errorResponse(400, \"'since' must be a non-negative number\");\n  }\n\n  let limit: number | undefined;\n  const limitParam = url.searchParams.get('limit');\n  if (limitParam !== null) {\n    limit = Number(limitParam);\n    if (!Number.isFinite(limit) || limit < 1) {\n      return errorResponse(400, \"'limit' must be a positive number\");\n    }\n  }\n\n  const tablesParam = url.searchParams.get('tables');\n  const tables = tablesParam\n    ? tablesParam\n        .split(',')\n        .map((table) => table.trim())\n        .filter(Boolean)\n    : undefined;\n\n  try {\n    const db = await resolveChangesDb(options.db);\n    // System tables are runtime-ensured; a raw handle passed straight to the\n    // generator may not have gone through framework init yet.\n    await ensureChangeFeedTable(db);\n    const page = await getTenantScopedChangesSince(db, {\n      since,\n      tables,\n      limit,\n    });\n    return jsonResponse(page);\n  } catch (error) {\n    logger.error('Change feed route failed', {\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return errorResponse(500, 'Internal server error');\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAM,SAAS,aAAa,EAAE,OAAO,OAAO,CAAC;;;;;AAyB7C,IAAa,4BAA4B;AAKzC,IAAM,sCAAsB,IAAI,QAA4C;AAC5E,IAAM,iCAAiB,IAAI,IAAwC;;;;;;;;;;AAWnE,SAAgB,iBACd,UAC4B;CAC5B,IAAI,YAAY,OAAO,aAAa,UAAU;EAC5C,IACE,WAAW,YACX,OAAQ,SAAiC,UAAU,YAEnD,OAAO,QAAQ,QAAQ,QAA6B;EAEtD,IAAI,WAAW,oBAAoB,IAAI,QAAQ;EAC/C,IAAI,CAAC,UAAU;GACb,WAAW,YACT,6BAA6B,EAC3B,GAAI,SACN,CAAC,CACH;GACA,oBAAoB,IAAI,UAAU,QAAQ;EAC5C;EACA,OAAO;CACT;CAEA,IAAI,OAAO,aAAa,YAAY,UAAU;EAC5C,IAAI,WAAW,eAAe,IAAI,QAAQ;EAC1C,IAAI,CAAC,UAAU;GAIb,MAAM,aAAa,aAAa;GAChC,MAAM,UAAU,6BAA6B,EAAE,KAAK,SAAS,CAAC;GAC9D,WAAW,YAAY;IACrB,GAAG;IACH,GAAI,aAAa,CAAC,IAAI,EAAE,MAAM,QAAQ,QAAQ,MAAM;GACtD,CAAsC;GACtC,eAAe,IAAI,UAAU,QAAQ;EACvC;EACA,OAAO;CACT;CAEA,OAAO,QAAQ,uBACb,IAAI,MAAM,sDAAsD,CAClE;AACF;AAEA,SAAS,aAAa,MAAe,SAAS,KAAe;CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH;AAEA,SAAS,cAAc,QAAgB,SAA2B;CAChE,OAAO,aAAa,EAAE,OAAO,QAAQ,GAAG,MAAM;AAChD;;;;;;;;;AAUA,eAAsB,mBACpB,KACA,SACmB;CACnB,IAAI,IAAI,WAAW,OACjB,OAAO,cAAc,KAAK,oBAAoB;CAMhD,IAAI,CAAC,QAAQ,gBACX,OAAO,cAAc,KAAK,yBAAyB;CAMrD,MAAM,aAAa,MAJD,QAAQ,eACxB,2BACA,IAAI,OAAO,YAAY,CAEA,CAAA,CAAU,GAAG;CACtC,IAAI,sBAAsB,UACxB,OAAO;CAGT,IAAI,QAAQ,MAAM,MAChB,OAAO,cACL,KACA,uEACF;CAGF,MAAM,MAAM,IAAI,IAAI,WAAW,GAAG;CAClC,MAAM,QAAQ,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK,GAAG;CACzD,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,GACrC,OAAO,cAAc,KAAK,uCAAuC;CAGnE,IAAI;CACJ,MAAM,aAAa,IAAI,aAAa,IAAI,OAAO;CAC/C,IAAI,eAAe,MAAM;EACvB,QAAQ,OAAO,UAAU;EACzB,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,GACrC,OAAO,cAAc,KAAK,mCAAmC;CAEjE;CAEA,MAAM,cAAc,IAAI,aAAa,IAAI,QAAQ;CACjD,MAAM,SAAS,cACX,YACG,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACjB,KAAA;CAEJ,IAAI;EACF,MAAM,KAAK,MAAM,iBAAiB,QAAQ,EAAE;EAG5C,MAAM,sBAAsB,EAAE;EAM9B,OAAO,aAAa,MALD,4BAA4B,IAAI;GACjD;GACA;GACA;EACF,CAAC,CACuB;CAC1B,SAAS,OAAO;EACd,OAAO,MAAM,4BAA4B,EACvC,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;EACD,OAAO,cAAc,KAAK,uBAAuB;CACnD;AACF"}

package/dist/generators/mcp-runtime-template.d.ts

@@ -55,6 +55,14 @@ export interface RuntimeOptions {
      * collection API.
      */
     stiTargets?: Record<string, Record<string, string>>;
+    /**
+     * Default list ordering per lowercased MCP object prefix (#2367).
+     *
+     * Baked in at generation time because the tiebreak follows the model's
+     * declared primary key, which the emitted server cannot resolve on its own.
+     * Prefixes absent from this map fall back to {@link DEFAULT_LIST_ORDER_BY}.
+     */
+    listOrderBy?: Record<string, readonly string[]>;
 }
 /**
  * Generate runtime bootstrap code for MCP server

package/dist/generators/mcp-runtime-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-runtime-template.d.ts","sourceRoot":"","sources":["../../src/generators/mcp-runtime-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAStD,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,kCAAkC;IAClC,MAAM,CAAC,EAAE,SAAS,CAAC;IAEnB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,wDAAwD;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC,CAAC;IACH,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;KAClC,CAAC;IACF,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CACpB,MAAM,EACN;QACE,KAAK,EAAE,iBAAiB,CAAC;QACzB,QAAQ,EAAE,OAAO,CAAC;QAClB,sEAAsE;QACtE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,OAAO,CAAC;KACxB,CACF,CAAC;IACF,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAClB,MAAM,EACN;QACE,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CACF,CAAC;IAEF;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,cAAmB,GAAG,MAAM,CAitB7E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,GAAE,MAA6B,GACxC,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CA0GR"}
+{"version":3,"file":"mcp-runtime-template.d.ts","sourceRoot":"","sources":["../../src/generators/mcp-runtime-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAStD,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,kCAAkC;IAClC,MAAM,CAAC,EAAE,SAAS,CAAC;IAEnB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,wDAAwD;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC,CAAC;IACH,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;KAClC,CAAC;IACF,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CACpB,MAAM,EACN;QACE,KAAK,EAAE,iBAAiB,CAAC;QACzB,QAAQ,EAAE,OAAO,CAAC;QAClB,sEAAsE;QACtE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,OAAO,CAAC;KACxB,CACF,CAAC;IACF,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAClB,MAAM,EACN;QACE,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CACF,CAAC;IAEF;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEpD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;CACjD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,cAAmB,GAAG,MAAM,CA0uB7E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,GAAE,MAA6B,GACxC,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CA0GR"}

package/dist/generators/mcp-runtime-template.js

@@ -1,5 +1,17 @@
+import { DEFAULT_LIST_ORDER_BY, MAX_LIST_LIMIT } from "../query-bounds.js";
 //#region src/generators/mcp-runtime-template.ts
 /**
+* Runtime bootstrap template for generated MCP servers
+*
+* This template provides stdio transport integration for SMRT-generated MCP servers.
+* It handles:
+* - Server initialization with @modelcontextprotocol/server v2
+* - Tool registration from MCPGenerator
+* - Stdio transport connection
+* - Error handling and logging
+* - Graceful shutdown
+*/
+/**
 * Helper function to capitalize first letter
 */
 function capitalize(str) {
@@ -12,7 +24,7 @@ function capitalize(str) {
 * @returns TypeScript code for server entry point
 */
 function generateRuntimeBootstrap(options = {}) {
-	const { name = "smrt-mcp-server", version = "1.0.0", description = "Auto-generated MCP server from SMRT objects", debug = false, tools = [], customActions = {}, taskActions = {}, tenantScopedObjects = [], stiTargets = {}, toolListCacheHint = {
+	const { name = "smrt-mcp-server", version = "1.0.0", description = "Auto-generated MCP server from SMRT objects", debug = false, tools = [], customActions = {}, taskActions = {}, tenantScopedObjects = [], stiTargets = {}, listOrderBy = {}, toolListCacheHint = {
 		ttlMs: 864e5,
 		cacheScope: "private"
 	} } = options;
@@ -27,8 +39,12 @@ function generateRuntimeBootstrap(options = {}) {
 			const action = tool.name.slice(separator + 1);
 			switch (action) {
 				case "list": return `${indent}case '${tool.name}': {
-${indent}  const limit = args.limit ?? 50;
-${indent}  const offset = args.offset ?? 0;
+${indent}  const limit = resolveListBound(args.limit, 'limit', 50, ${MAX_LIST_LIMIT});
+${indent}  const offset = resolveListBound(args.offset, 'offset', 0);
+${indent}  // #2367: the tool schema advertises \`orderBy\`, so honour it; and page
+${indent}  // deterministically when it is omitted — LIMIT/OFFSET with no ORDER BY
+${indent}  // lets successive pages repeat and skip rows on PostgreSQL.
+${indent}  const orderBy = args.orderBy ?? ${JSON.stringify(listOrderBy[objectName] ?? DEFAULT_LIST_ORDER_BY)};
 ${indent}  const where = args.where ?? {};
 
 ${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {
@@ -36,7 +52,7 @@ ${indent}    persistence: { type: process.env.DATABASE_TYPE || 'sqlite', url: pr
 ${indent}    ai: aiConfig
 ${indent}  });
 
-${indent}  const items = await collection.list({ where, limit, offset });
+${indent}  const items = await collection.list({ where, limit, offset, orderBy });
 ${indent}  const itemsPublic = items.map((item) => item.toPublicJSON(PUBLIC_JSON_OPTIONS));
 ${indent}  const structuredContent = {
 ${indent}    data: itemsPublic,
@@ -223,6 +239,24 @@ const PUBLIC_JSON_OPTIONS = {
     .filter(Boolean),
 };
 
+/**
+ * Page-bound guard (#2367). MCP tool arguments are untyped JSON, so \`limit\`
+ * arrives as whatever the client sent: \`"abc"\` used to become \`LIMIT NaN\`
+ * (a driver error, not a tool error), and nothing capped the value, so one
+ * \`limit: 100000000\` call was a full table scan. Rejects anything that is not
+ * a non-negative integer and clamps the rest to \`max\`.
+ */
+function resolveListBound(raw: any, name: string, fallback: number, max?: number): number {
+  if (raw === undefined || raw === null || raw === '') {
+    return max === undefined ? fallback : Math.min(fallback, max);
+  }
+  const value = typeof raw === 'string' && /^\\d+$/.test(raw.trim()) ? Number(raw.trim()) : raw;
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+    throw new Error("Invalid " + name + ": expected a non-negative integer, got " + JSON.stringify(raw));
+  }
+  return max === undefined ? value : Math.min(value, max);
+}
+
 /**
  * Mass-assignment guard (#1540): strip framework/server-managed and
  * \`@field({ readonly: true })\` fields from create/update bodies, intersecting