@parmana/shared 0.0.0-stage → 0.1.0

package/dist/errors/authorization-required-error.d.ts

@@ -0,0 +1,5 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export declare class AuthorizationRequiredError extends TrustChainValidationError {
+    constructor();
+}
+//# sourceMappingURL=authorization-required-error.d.ts.map

package/dist/errors/authorization-required-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-required-error.d.ts","sourceRoot":"","sources":["../../src/errors/authorization-required-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,qBAAa,0BAA2B,SAAQ,yBAAyB;IACvE,cAKC;CACF"}

package/dist/errors/authorization-required-error.js

@@ -0,0 +1,7 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export class AuthorizationRequiredError extends TrustChainValidationError {
+    constructor() {
+        super("AUTHORIZATION_REQUIRED", "Authorization is required before execution.");
+    }
+}
+//# sourceMappingURL=authorization-required-error.js.map

package/dist/errors/authorization-required-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-required-error.js","sourceRoot":"","sources":["../../src/errors/authorization-required-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,OAAO,0BAA2B,SAAQ,yBAAyB;IACvE;QACE,KAAK,CACH,wBAAwB,EACxB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/business-signal-source-change-not-found-error.d.ts

@@ -0,0 +1,9 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when a business signal source change lookup or resolution is
+ * given an id that does not exist.
+ */
+export declare class BusinessSignalSourceChangeNotFoundError extends ParmanaError {
+    constructor(changeId: string);
+}
+//# sourceMappingURL=business-signal-source-change-not-found-error.d.ts.map

package/dist/errors/business-signal-source-change-not-found-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-signal-source-change-not-found-error.d.ts","sourceRoot":"","sources":["../../src/errors/business-signal-source-change-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,qBAAa,uCAAwC,SAAQ,YAAY;IACvE,YAAY,QAAQ,EAAE,MAAM,EAM3B;CACF"}

package/dist/errors/business-signal-source-change-not-found-error.js

@@ -0,0 +1,11 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when a business signal source change lookup or resolution is
+ * given an id that does not exist.
+ */
+export class BusinessSignalSourceChangeNotFoundError extends ParmanaError {
+    constructor(changeId) {
+        super("BUSINESS_SIGNAL_SOURCE_CHANGE_NOT_FOUND", `Business signal source change '${changeId}' not found.`, 404);
+    }
+}
+//# sourceMappingURL=business-signal-source-change-not-found-error.js.map

package/dist/errors/business-signal-source-change-not-found-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-signal-source-change-not-found-error.js","sourceRoot":"","sources":["../../src/errors/business-signal-source-change-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,uCAAwC,SAAQ,YAAY;IACvE,YAAY,QAAgB;QAC1B,KAAK,CACH,yCAAyC,EACzC,kCAAkC,QAAQ,cAAc,EACxD,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/business-transaction-not-found-error.d.ts

@@ -0,0 +1,5 @@
+import { ParmanaError } from "./parmana-error.js";
+export declare class BusinessTransactionNotFoundError extends ParmanaError {
+    constructor(businessTransactionId: string);
+}
+//# sourceMappingURL=business-transaction-not-found-error.d.ts.map

package/dist/errors/business-transaction-not-found-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-transaction-not-found-error.d.ts","sourceRoot":"","sources":["../../src/errors/business-transaction-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,gCAAiC,SAAQ,YAAY;IAChE,YAAY,qBAAqB,EAAE,MAAM,EAMxC;CACF"}

package/dist/errors/business-transaction-not-found-error.js

@@ -0,0 +1,7 @@
+import { ParmanaError } from "./parmana-error.js";
+export class BusinessTransactionNotFoundError extends ParmanaError {
+    constructor(businessTransactionId) {
+        super("BUSINESS_TRANSACTION_NOT_FOUND", `Business Transaction '${businessTransactionId}' not found.`, 404);
+    }
+}
+//# sourceMappingURL=business-transaction-not-found-error.js.map

package/dist/errors/business-transaction-not-found-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-transaction-not-found-error.js","sourceRoot":"","sources":["../../src/errors/business-transaction-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,gCAAiC,SAAQ,YAAY;IAChE,YAAY,qBAA6B;QACvC,KAAK,CACH,gCAAgC,EAChC,yBAAyB,qBAAqB,cAAc,EAC5D,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/challenge-record-not-found-error.d.ts

@@ -0,0 +1,9 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by ChallengeRecordRepository.append when no ChallengeRecord
+ * exists for the given id.
+ */
+export declare class ChallengeRecordNotFoundError extends ParmanaError {
+    constructor(challengeRecordId: string);
+}
+//# sourceMappingURL=challenge-record-not-found-error.d.ts.map

package/dist/errors/challenge-record-not-found-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-record-not-found-error.d.ts","sourceRoot":"","sources":["../../src/errors/challenge-record-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,qBAAa,4BAA6B,SAAQ,YAAY;IAC5D,YAAY,iBAAiB,EAAE,MAAM,EAMpC;CACF"}

package/dist/errors/challenge-record-not-found-error.js

@@ -0,0 +1,11 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by ChallengeRecordRepository.append when no ChallengeRecord
+ * exists for the given id.
+ */
+export class ChallengeRecordNotFoundError extends ParmanaError {
+    constructor(challengeRecordId) {
+        super("CHALLENGE_RECORD_NOT_FOUND", `Challenge Record '${challengeRecordId}' not found.`, 404);
+    }
+}
+//# sourceMappingURL=challenge-record-not-found-error.js.map

package/dist/errors/challenge-record-not-found-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-record-not-found-error.js","sourceRoot":"","sources":["../../src/errors/challenge-record-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,4BAA6B,SAAQ,YAAY;IAC5D,YAAY,iBAAyB;QACnC,KAAK,CACH,4BAA4B,EAC5B,qBAAqB,iBAAiB,cAAc,EACpD,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/conflict-error.d.ts

@@ -0,0 +1,5 @@
+import { ParmanaError } from "./parmana-error.js";
+export declare class ConflictError extends ParmanaError {
+    constructor(message: string);
+}
+//# sourceMappingURL=conflict-error.d.ts.map

package/dist/errors/conflict-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflict-error.d.ts","sourceRoot":"","sources":["../../src/errors/conflict-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/errors/conflict-error.js

@@ -0,0 +1,7 @@
+import { ParmanaError } from "./parmana-error.js";
+export class ConflictError extends ParmanaError {
+    constructor(message) {
+        super("CONFLICT", message, 409);
+    }
+}
+//# sourceMappingURL=conflict-error.js.map

package/dist/errors/conflict-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflict-error.js","sourceRoot":"","sources":["../../src/errors/conflict-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/errors/connector-not-registered-error.d.ts

@@ -0,0 +1,21 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by a connector registry when an authorized action names a
+ * capability that no registered connector provides on this deployment, for
+ * example because the connector's credentials were never configured (a
+ * connector registers only when its settings are present).
+ *
+ * Thrown before anything is released to a connector, so nothing was
+ * executed. It is a deployment configuration problem and not a caller
+ * mistake, so it is a 503 with its own code. Previously it surfaced as a
+ * plain Error and a bare 500 with no code, which a caller could not tell
+ * apart from a real server fault.
+ *
+ * Lives in @parmana/shared so packages/api's error-handler.ts can recognize
+ * it without a new dependency, the same reasoning
+ * nonce-already-consumed-error.ts gives.
+ */
+export declare class ConnectorNotRegisteredError extends ParmanaError {
+    constructor(capability: string);
+}
+//# sourceMappingURL=connector-not-registered-error.d.ts.map

package/dist/errors/connector-not-registered-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-not-registered-error.d.ts","sourceRoot":"","sources":["../../src/errors/connector-not-registered-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA4B,SAAQ,YAAY;IAC3D,YAAY,UAAU,EAAE,MAAM,EAO7B;CACF"}

package/dist/errors/connector-not-registered-error.js

@@ -0,0 +1,24 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by a connector registry when an authorized action names a
+ * capability that no registered connector provides on this deployment, for
+ * example because the connector's credentials were never configured (a
+ * connector registers only when its settings are present).
+ *
+ * Thrown before anything is released to a connector, so nothing was
+ * executed. It is a deployment configuration problem and not a caller
+ * mistake, so it is a 503 with its own code. Previously it surfaced as a
+ * plain Error and a bare 500 with no code, which a caller could not tell
+ * apart from a real server fault.
+ *
+ * Lives in @parmana/shared so packages/api's error-handler.ts can recognize
+ * it without a new dependency, the same reasoning
+ * nonce-already-consumed-error.ts gives.
+ */
+export class ConnectorNotRegisteredError extends ParmanaError {
+    constructor(capability) {
+        super("CONNECTOR_NOT_REGISTERED", `No connector is registered for capability '${capability}' on this deployment. ` +
+            "Nothing was executed. The operator must configure the connector.", 503);
+    }
+}
+//# sourceMappingURL=connector-not-registered-error.js.map

package/dist/errors/connector-not-registered-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-not-registered-error.js","sourceRoot":"","sources":["../../src/errors/connector-not-registered-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA4B,SAAQ,YAAY;IAC3D,YAAY,UAAkB;QAC5B,KAAK,CACH,0BAA0B,EAC1B,8CAA8C,UAAU,wBAAwB;YAC9E,kEAAkE,EACpE,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/decision-not-approved-error.d.ts

@@ -0,0 +1,5 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export declare class DecisionNotApprovedError extends TrustChainValidationError {
+    constructor();
+}
+//# sourceMappingURL=decision-not-approved-error.d.ts.map

package/dist/errors/decision-not-approved-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-not-approved-error.d.ts","sourceRoot":"","sources":["../../src/errors/decision-not-approved-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,qBAAa,wBAAyB,SAAQ,yBAAyB;IACrE,cAKC;CACF"}

package/dist/errors/decision-not-approved-error.js

@@ -0,0 +1,7 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export class DecisionNotApprovedError extends TrustChainValidationError {
+    constructor() {
+        super("DECISION_NOT_APPROVED", "Business Transaction was not approved for execution.");
+    }
+}
+//# sourceMappingURL=decision-not-approved-error.js.map

package/dist/errors/decision-not-approved-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-not-approved-error.js","sourceRoot":"","sources":["../../src/errors/decision-not-approved-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,OAAO,wBAAyB,SAAQ,yBAAyB;IACrE;QACE,KAAK,CACH,uBAAuB,EACvB,sDAAsD,CACvD,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/duplicate-business-transaction-error.d.ts

@@ -0,0 +1,26 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when attempting to create a Business Transaction that
+ * already exists.
+ *
+ * Lives in @parmana/shared (not @parmana/runtime, where it
+ * originated) so both @parmana/runtime's service layer and
+ * @parmana/storage's repository implementations can throw and
+ * catch the identical class — required for G-1's fix (both the
+ * in-memory and Supabase repositories must surface the same typed
+ * error for a duplicate). @parmana/storage cannot depend on
+ * @parmana/runtime (packages/runtime/tsconfig.json already
+ * references ../storage for its own test fixtures, so the reverse
+ * would be circular); @parmana/shared is the common package both
+ * already depend on.
+ *
+ * packages/runtime/src/errors/DuplicateBusinessTransactionError.ts
+ * re-exports this class unchanged, so every existing import path
+ * (business-transaction-service.ts, error-handler.ts,
+ * execute-api.test.ts) keeps working with no changes and no loss of
+ * `instanceof` identity.
+ */
+export declare class DuplicateBusinessTransactionError extends ParmanaError {
+    constructor(businessTransactionId: string);
+}
+//# sourceMappingURL=duplicate-business-transaction-error.d.ts.map

package/dist/errors/duplicate-business-transaction-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicate-business-transaction-error.d.ts","sourceRoot":"","sources":["../../src/errors/duplicate-business-transaction-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,iCAAkC,SAAQ,YAAY;IACjE,YAAY,qBAAqB,EAAE,MAAM,EAMxC;CACF"}

package/dist/errors/duplicate-business-transaction-error.js

@@ -0,0 +1,28 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when attempting to create a Business Transaction that
+ * already exists.
+ *
+ * Lives in @parmana/shared (not @parmana/runtime, where it
+ * originated) so both @parmana/runtime's service layer and
+ * @parmana/storage's repository implementations can throw and
+ * catch the identical class — required for G-1's fix (both the
+ * in-memory and Supabase repositories must surface the same typed
+ * error for a duplicate). @parmana/storage cannot depend on
+ * @parmana/runtime (packages/runtime/tsconfig.json already
+ * references ../storage for its own test fixtures, so the reverse
+ * would be circular); @parmana/shared is the common package both
+ * already depend on.
+ *
+ * packages/runtime/src/errors/DuplicateBusinessTransactionError.ts
+ * re-exports this class unchanged, so every existing import path
+ * (business-transaction-service.ts, error-handler.ts,
+ * execute-api.test.ts) keeps working with no changes and no loss of
+ * `instanceof` identity.
+ */
+export class DuplicateBusinessTransactionError extends ParmanaError {
+    constructor(businessTransactionId) {
+        super("DUPLICATE_BUSINESS_TRANSACTION", `Business Transaction '${businessTransactionId}' already exists.`, 409);
+    }
+}
+//# sourceMappingURL=duplicate-business-transaction-error.js.map

package/dist/errors/duplicate-business-transaction-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicate-business-transaction-error.js","sourceRoot":"","sources":["../../src/errors/duplicate-business-transaction-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,iCAAkC,SAAQ,YAAY;IACjE,YAAY,qBAA6B;QACvC,KAAK,CACH,gCAAgC,EAChC,yBAAyB,qBAAqB,mBAAmB,EACjE,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/external-connector-change-not-found-error.d.ts

@@ -0,0 +1,9 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when an external connector change lookup or resolution is
+ * given an id that does not exist.
+ */
+export declare class ExternalConnectorChangeNotFoundError extends ParmanaError {
+    constructor(changeId: string);
+}
+//# sourceMappingURL=external-connector-change-not-found-error.d.ts.map

package/dist/errors/external-connector-change-not-found-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-change-not-found-error.d.ts","sourceRoot":"","sources":["../../src/errors/external-connector-change-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,qBAAa,oCAAqC,SAAQ,YAAY;IACpE,YAAY,QAAQ,EAAE,MAAM,EAM3B;CACF"}

package/dist/errors/external-connector-change-not-found-error.js

@@ -0,0 +1,11 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when an external connector change lookup or resolution is
+ * given an id that does not exist.
+ */
+export class ExternalConnectorChangeNotFoundError extends ParmanaError {
+    constructor(changeId) {
+        super("EXTERNAL_CONNECTOR_CHANGE_NOT_FOUND", `External connector change '${changeId}' not found.`, 404);
+    }
+}
+//# sourceMappingURL=external-connector-change-not-found-error.js.map

package/dist/errors/external-connector-change-not-found-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-change-not-found-error.js","sourceRoot":"","sources":["../../src/errors/external-connector-change-not-found-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,oCAAqC,SAAQ,YAAY;IACpE,YAAY,QAAgB;QAC1B,KAAK,CACH,qCAAqC,EACrC,8BAA8B,QAAQ,cAAc,EACpD,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/forbidden-error.d.ts

@@ -0,0 +1,5 @@
+import { ParmanaError } from "./parmana-error.js";
+export declare class ForbiddenError extends ParmanaError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=forbidden-error.d.ts.map

package/dist/errors/forbidden-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidden-error.d.ts","sourceRoot":"","sources":["../../src/errors/forbidden-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,cAAe,SAAQ,YAAY;IAC9C,YAAY,OAAO,SAAmB,EAErC;CACF"}

package/dist/errors/forbidden-error.js

@@ -0,0 +1,7 @@
+import { ParmanaError } from "./parmana-error.js";
+export class ForbiddenError extends ParmanaError {
+    constructor(message = "Access denied.") {
+        super("FORBIDDEN", message, 403);
+    }
+}
+//# sourceMappingURL=forbidden-error.js.map

package/dist/errors/forbidden-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidden-error.js","sourceRoot":"","sources":["../../src/errors/forbidden-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC9C,YAAY,OAAO,GAAG,gBAAgB;QACpC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/errors/index.d.ts

@@ -0,0 +1,30 @@
+export * from "./parmana-error.js";
+export * from "./business-transaction-not-found-error.js";
+export * from "./duplicate-business-transaction-error.js";
+export * from "./nonce-already-consumed-error.js";
+export * from "./outcome-unknown-error.js";
+export * from "./connector-not-registered-error.js";
+export * from "./policy-not-found-error.js";
+export * from "./override-not-allowed-error.js";
+export * from "./verification-failed-error.js";
+export * from "./receipt-generation-error.js";
+export * from "./conflict-error.js";
+export * from "./validation-error.js";
+export * from "./unauthorized-error.js";
+export * from "./forbidden-error.js";
+export * from "./trust-chain-validation-error.js";
+export * from "./authority-required-error.js";
+export * from "./authorization-required-error.js";
+export * from "./intent-required-error.js";
+export * from "./decision-not-approved-error.js";
+export * from "./challenge-record-not-found-error.js";
+export * from "./pending-policy-change-not-found-error.js";
+export * from "./approval-issuer-change-not-found-error.js";
+export * from "./external-connector-change-not-found-error.js";
+export * from "./business-signal-source-change-not-found-error.js";
+export * from "./authority-grant-change-not-found-error.js";
+export * from "./authorization-no-longer-valid-error.js";
+export * from "./non-human-caller-denied-error.js";
+export * from "./same-actor-cannot-approve-own-change-error.js";
+export * from "./step-up-authorization-invalid-error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,uCAAuC,CAAC;AACtD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,30 @@
+export * from "./parmana-error.js";
+export * from "./business-transaction-not-found-error.js";
+export * from "./duplicate-business-transaction-error.js";
+export * from "./nonce-already-consumed-error.js";
+export * from "./outcome-unknown-error.js";
+export * from "./connector-not-registered-error.js";
+export * from "./policy-not-found-error.js";
+export * from "./override-not-allowed-error.js";
+export * from "./verification-failed-error.js";
+export * from "./receipt-generation-error.js";
+export * from "./conflict-error.js";
+export * from "./validation-error.js";
+export * from "./unauthorized-error.js";
+export * from "./forbidden-error.js";
+export * from "./trust-chain-validation-error.js";
+export * from "./authority-required-error.js";
+export * from "./authorization-required-error.js";
+export * from "./intent-required-error.js";
+export * from "./decision-not-approved-error.js";
+export * from "./challenge-record-not-found-error.js";
+export * from "./pending-policy-change-not-found-error.js";
+export * from "./approval-issuer-change-not-found-error.js";
+export * from "./external-connector-change-not-found-error.js";
+export * from "./business-signal-source-change-not-found-error.js";
+export * from "./authority-grant-change-not-found-error.js";
+export * from "./authorization-no-longer-valid-error.js";
+export * from "./non-human-caller-denied-error.js";
+export * from "./same-actor-cannot-approve-own-change-error.js";
+export * from "./step-up-authorization-invalid-error.js";
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,uCAAuC,CAAC;AACtD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC"}

package/dist/errors/intent-required-error.d.ts

@@ -0,0 +1,5 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export declare class IntentRequiredError extends TrustChainValidationError {
+    constructor();
+}
+//# sourceMappingURL=intent-required-error.d.ts.map

package/dist/errors/intent-required-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-required-error.d.ts","sourceRoot":"","sources":["../../src/errors/intent-required-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,qBAAa,mBAAoB,SAAQ,yBAAyB;IAChE,cAEC;CACF"}

package/dist/errors/intent-required-error.js

@@ -0,0 +1,7 @@
+import { TrustChainValidationError } from "./trust-chain-validation-error.js";
+export class IntentRequiredError extends TrustChainValidationError {
+    constructor() {
+        super("INTENT_REQUIRED", "Intent is required before execution.");
+    }
+}
+//# sourceMappingURL=intent-required-error.js.map

package/dist/errors/intent-required-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-required-error.js","sourceRoot":"","sources":["../../src/errors/intent-required-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,OAAO,mBAAoB,SAAQ,yBAAyB;IAChE;QACE,KAAK,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/errors/non-human-caller-denied-error.d.ts

@@ -0,0 +1,10 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when a caller whose credential is not provisioned as a
+ * verified human (see isHumanCaller.ts, ApiKeyEntry.credentialHolderType)
+ * attempts one of the pending-policy-changes.ts endpoints.
+ */
+export declare class NonHumanCallerDeniedError extends ParmanaError {
+    constructor();
+}
+//# sourceMappingURL=non-human-caller-denied-error.d.ts.map

package/dist/errors/non-human-caller-denied-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-human-caller-denied-error.d.ts","sourceRoot":"","sources":["../../src/errors/non-human-caller-denied-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,cAMC;CACF"}

package/dist/errors/non-human-caller-denied-error.js

@@ -0,0 +1,12 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when a caller whose credential is not provisioned as a
+ * verified human (see isHumanCaller.ts, ApiKeyEntry.credentialHolderType)
+ * attempts one of the pending-policy-changes.ts endpoints.
+ */
+export class NonHumanCallerDeniedError extends ParmanaError {
+    constructor() {
+        super("NON_HUMAN_CALLER_DENIED", "This action requires a caller credential provisioned as a verified human (credentialHolderType: USER).", 403);
+    }
+}
+//# sourceMappingURL=non-human-caller-denied-error.js.map

package/dist/errors/non-human-caller-denied-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-human-caller-denied-error.js","sourceRoot":"","sources":["../../src/errors/non-human-caller-denied-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,MAAM,OAAO,yBAA0B,SAAQ,YAAY;IACzD;QACE,KAAK,CACH,yBAAyB,EACzB,wGAAwG,EACxG,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/nonce-already-consumed-error.d.ts

@@ -0,0 +1,26 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by @parmana/execution-gateway's ExecutionGateway.execute() when
+ * every side-effect-free check (version, signature, expiry, TTL policy,
+ * businessTransactionHash) passed, and the envelope's nonce alone was
+ * already consumed — an isolated replay of an otherwise-valid,
+ * previously-released authorization.
+ *
+ * Lives in @parmana/shared, not @parmana/execution-gateway or
+ * @parmana/runtime, so packages/api's error-handler.ts can recognize it
+ * without execution-gateway depending on @parmana/runtime (or the
+ * reverse) — the same reasoning duplicate-business-transaction-error.ts
+ * documents for the identical cross-package problem.
+ *
+ * Distinct from every other Gateway verification failure (forged
+ * signature, expired envelope, tampered content) on purpose: those
+ * remain a plain Error today, unchanged by this fix, because the check
+ * that failed there was never side-effect-bearing — replaying an
+ * already-consumed nonce is the one Gateway rejection that specifically
+ * means "this exact authorization already ran," which is a 409-shaped
+ * fact, not a 500-shaped one.
+ */
+export declare class NonceAlreadyConsumedError extends ParmanaError {
+    constructor(businessTransactionId: string);
+}
+//# sourceMappingURL=nonce-already-consumed-error.d.ts.map

package/dist/errors/nonce-already-consumed-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-already-consumed-error.d.ts","sourceRoot":"","sources":["../../src/errors/nonce-already-consumed-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,YAAY,qBAAqB,EAAE,MAAM,EAOxC;CACF"}

package/dist/errors/nonce-already-consumed-error.js

@@ -0,0 +1,29 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown by @parmana/execution-gateway's ExecutionGateway.execute() when
+ * every side-effect-free check (version, signature, expiry, TTL policy,
+ * businessTransactionHash) passed, and the envelope's nonce alone was
+ * already consumed — an isolated replay of an otherwise-valid,
+ * previously-released authorization.
+ *
+ * Lives in @parmana/shared, not @parmana/execution-gateway or
+ * @parmana/runtime, so packages/api's error-handler.ts can recognize it
+ * without execution-gateway depending on @parmana/runtime (or the
+ * reverse) — the same reasoning duplicate-business-transaction-error.ts
+ * documents for the identical cross-package problem.
+ *
+ * Distinct from every other Gateway verification failure (forged
+ * signature, expired envelope, tampered content) on purpose: those
+ * remain a plain Error today, unchanged by this fix, because the check
+ * that failed there was never side-effect-bearing — replaying an
+ * already-consumed nonce is the one Gateway rejection that specifically
+ * means "this exact authorization already ran," which is a 409-shaped
+ * fact, not a 500-shaped one.
+ */
+export class NonceAlreadyConsumedError extends ParmanaError {
+    constructor(businessTransactionId) {
+        super("NONCE_ALREADY_CONSUMED", `Execution Gateway rejected request for Business Transaction '${businessTransactionId}': ` +
+            "authorization nonce has already been consumed (replay of an already-executed authorization).", 409);
+    }
+}
+//# sourceMappingURL=nonce-already-consumed-error.js.map

package/dist/errors/nonce-already-consumed-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-already-consumed-error.js","sourceRoot":"","sources":["../../src/errors/nonce-already-consumed-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,yBAA0B,SAAQ,YAAY;IACzD,YAAY,qBAA6B;QACvC,KAAK,CACH,wBAAwB,EACxB,gEAAgE,qBAAqB,KAAK;YACxF,8FAA8F,EAChG,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/outcome-unknown-error.d.ts

@@ -0,0 +1,15 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when an authorization's nonce was already consumed and its execution
+ * has no recorded result. The first attempt may have reached the connector,
+ * so the outcome is unknown. Retrying would risk a second effect, and parmana
+ * cannot say which happened.
+ *
+ * Gap G-125 (docs/VERIFICATION-GAPS.md). Callers must reconcile with the
+ * external system before acting again. Reconciliation of these rows is not
+ * built yet (Part 3 of G-125).
+ */
+export declare class OutcomeUnknownError extends ParmanaError {
+    constructor(businessTransactionId: string);
+}
+//# sourceMappingURL=outcome-unknown-error.d.ts.map

package/dist/errors/outcome-unknown-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-unknown-error.d.ts","sourceRoot":"","sources":["../../src/errors/outcome-unknown-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;GASG;AACH,qBAAa,mBAAoB,SAAQ,YAAY;IACnD,YAAY,qBAAqB,EAAE,MAAM,EAQxC;CACF"}

package/dist/errors/outcome-unknown-error.js

@@ -0,0 +1,19 @@
+import { ParmanaError } from "./parmana-error.js";
+/**
+ * Thrown when an authorization's nonce was already consumed and its execution
+ * has no recorded result. The first attempt may have reached the connector,
+ * so the outcome is unknown. Retrying would risk a second effect, and parmana
+ * cannot say which happened.
+ *
+ * Gap G-125 (docs/VERIFICATION-GAPS.md). Callers must reconcile with the
+ * external system before acting again. Reconciliation of these rows is not
+ * built yet (Part 3 of G-125).
+ */
+export class OutcomeUnknownError extends ParmanaError {
+    constructor(businessTransactionId) {
+        super("OUTCOME_UNKNOWN", `Execution Gateway rejected request for Business Transaction '${businessTransactionId}': ` +
+            "an earlier attempt consumed this authorization and its outcome is not recorded. " +
+            "Do not retry. Check the external system before acting again.", 409);
+    }
+}
+//# sourceMappingURL=outcome-unknown-error.js.map

package/dist/errors/outcome-unknown-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-unknown-error.js","sourceRoot":"","sources":["../../src/errors/outcome-unknown-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YAAY,qBAA6B;QACvC,KAAK,CACH,iBAAiB,EACjB,gEAAgE,qBAAqB,KAAK;YACxF,kFAAkF;YAClF,8DAA8D,EAChE,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/override-not-allowed-error.d.ts

@@ -0,0 +1,5 @@
+import { ParmanaError } from "./parmana-error.js";
+export declare class OverrideNotAllowedError extends ParmanaError {
+    constructor(message: string);
+}
+//# sourceMappingURL=override-not-allowed-error.d.ts.map

package/dist/errors/override-not-allowed-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"override-not-allowed-error.d.ts","sourceRoot":"","sources":["../../src/errors/override-not-allowed-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/errors/override-not-allowed-error.js

@@ -0,0 +1,7 @@
+import { ParmanaError } from "./parmana-error.js";
+export class OverrideNotAllowedError extends ParmanaError {
+    constructor(message) {
+        super("OVERRIDE_NOT_ALLOWED", message, 409);
+    }
+}
+//# sourceMappingURL=override-not-allowed-error.js.map

package/dist/errors/override-not-allowed-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"override-not-allowed-error.js","sourceRoot":"","sources":["../../src/errors/override-not-allowed-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,uBAAwB,SAAQ,YAAY;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,sBAAsB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;CACF"}