@revealui/core 0.12.0 → 0.12.2

package/README.md

@@ -27,7 +27,7 @@ Part of the [RevealUI monorepo](https://github.com/RevealUIStudio/revealui)  -
 - **Plugins**  -  Extensible plugin system (form builder, nested docs, redirects)
 - **Feature Gating**  -  Tier-based licensing (free, pro, max, enterprise) with JWT license keys
 - **Database**  -  PostgreSQL adapters (NeonDB + PGlite for testing), connection pooling, SSL/TLS
-- **Storage**  -  Pluggable storage interface (Cloudflare R2 primary; Vercel Blob legacy adapter retained during migration)
+- **Storage**  -  Pluggable storage interface (Cloudflare R2 sole non-mock backend; mock adapter for tests)
 
 ## Installation
 
@@ -145,7 +145,7 @@ if (isFeatureEnabled('ai')) {
 | `@revealui/core/database` | Database adapters |
 | `@revealui/core/database/ssl-config` | SSL/TLS config |
 | `@revealui/core/database/type-adapter` | Type adapter utilities |
-| `@revealui/core/storage` | Storage adapters (R2 + legacy Vercel Blob) |
+| `@revealui/core/storage` | Storage adapters (R2 + mock for tests) |
 | `@revealui/core/plugins` | Plugin system |
 | `@revealui/core/features` | Feature flags |
 | `@revealui/core/license` | License validation |
@@ -160,7 +160,6 @@ if (isFeatureEnabled('ai')) {
 | `@revealui/core/observability/alerts` | Alerts |
 | `@revealui/core/error-handling` | Error boundaries, retry, circuit breaker, fallback UI |
 | `@revealui/core/error-handling/error-reporter` | Error reporting |
-| `@revealui/core/caching` | Caching utilities |
 | `@revealui/core/cache/query-cache` | Query cache |
 | `@revealui/core/jobs` | Background jobs |
 | `@revealui/core/translations` | i18n translations |

package/dist/api/rest.js

@@ -6,7 +6,7 @@
  * WARNING: This module is server-only.
  * Do NOT import in client-side code or edge runtime.
  */
-import { defaultLogger } from '../instance/logger.js';
+import { logger } from '../observability/logger.js';
 function parseQueryParams(searchParams) {
     const options = {};
     // Parse depth
@@ -284,7 +284,7 @@ async function handleCollectionOperation(method, collection, id, revealui, reque
         const message = error instanceof Error ? error.message : 'Internal server error';
         const status = 'status' in error ? error.status : 500;
         // Log error with context for debugging
-        defaultLogger.error('RevealUI Collection API Error:', {
+        logger.error('RevealUI Collection API Error:', {
             collection,
             method: request.method,
             error: error instanceof Error
@@ -346,7 +346,7 @@ async function handleGlobalOperation(method, global, revealui, request, options)
         const message = error instanceof Error ? error.message : 'Internal server error';
         const status = 'status' in error ? error.status : 500;
         // Log error with context for debugging
-        defaultLogger.error('RevealUI Global API Error:', {
+        logger.error('RevealUI Global API Error:', {
             global,
             method: request.method,
             error: error instanceof Error
@@ -423,7 +423,7 @@ export async function handleRESTRequest(request, config, revealui) {
         // Extract error message safely
         const message = error instanceof Error ? error.message : 'Internal server error';
         // Log error with context for debugging
-        defaultLogger.error('RevealUI REST API Error:', {
+        logger.error('RevealUI REST API Error:', {
             message,
             path: url.pathname,
             method: request.method,

package/dist/client/admin/utils/csrf.d.ts

@@ -1,12 +1,15 @@
 /**
- * CSRF helpers for the admin client.
+ * CSRF helpers for browser clients (admin, auth hooks, agent stream).
+ *
+ * Single source of truth for reading the JS-readable `revealui-csrf` cookie
+ * (fleet-redundancy P2-C). Consumers: this package's admin APIClient,
+ * `@revealui/auth/react` (re-export), `@revealui/ai` useAgentStream.
  *
  * The admin proxy and the api server's csrfMiddleware require any unsafe
- * request carrying a `revealui-session` cookie to echo the JS-readable
- * `revealui-csrf` cookie as an `X-CSRF-Token` header. The token is re-read
- * immediately before each request because the proxy re-issues the cookie
- * whenever it no longer validates against the current session (e.g. after
- * re-login or session rotation).
+ * request carrying a `revealui-session` cookie to echo this cookie as an
+ * `X-CSRF-Token` header. Re-read immediately before each request because
+ * the proxy re-issues the cookie when it no longer validates against the
+ * current session (e.g. after re-login or session rotation).
  */
 /**
  * Read the `revealui-csrf` cookie value. Returns `undefined` outside the

package/dist/client/admin/utils/csrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../../../src/client/admin/utils/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAgBlD;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAOrD"}
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../../../src/client/admin/utils/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAgBlD;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAOrD"}

package/dist/client/admin/utils/csrf.js

@@ -1,12 +1,15 @@
 /**
- * CSRF helpers for the admin client.
+ * CSRF helpers for browser clients (admin, auth hooks, agent stream).
+ *
+ * Single source of truth for reading the JS-readable `revealui-csrf` cookie
+ * (fleet-redundancy P2-C). Consumers: this package's admin APIClient,
+ * `@revealui/auth/react` (re-export), `@revealui/ai` useAgentStream.
  *
  * The admin proxy and the api server's csrfMiddleware require any unsafe
- * request carrying a `revealui-session` cookie to echo the JS-readable
- * `revealui-csrf` cookie as an `X-CSRF-Token` header. The token is re-read
- * immediately before each request because the proxy re-issues the cookie
- * whenever it no longer validates against the current session (e.g. after
- * re-login or session rotation).
+ * request carrying a `revealui-session` cookie to echo this cookie as an
+ * `X-CSRF-Token` header. Re-read immediately before each request because
+ * the proxy re-issues the cookie when it no longer validates against the
+ * current session (e.g. after re-login or session rotation).
  */
 /**
  * Read the `revealui-csrf` cookie value. Returns `undefined` outside the

package/dist/collections/operations/fieldValidation.d.ts

@@ -7,8 +7,8 @@
  *
  * A field's `validate(value, { value, data, siblingData, operation, req })`
  * returns `true` when the value is valid, or a non-empty string error message
- * when it is not. On the first failure the engine throws a ValidationError
- * (HTTP 400) carrying that message, so the write is rejected at ingress.
+ * when it is not. On the first failure the engine throws the canonical ValidationError
+ * (HTTP 400, `instanceof`) carrying that message, so the write is rejected at ingress.
  *
  * Enforcement note: this is one of the engine's ingress checks and runs for
  * EVERY collection written through create()/update(). For public page/post
@@ -17,20 +17,9 @@
  * render-side sanitizeUrl. See docs/specs/2026-07-02-cms-render-path-hardening.md.
  */
 import type { RevealCollectionConfig, RevealRequest } from '../../types/index.js';
-/**
- * Thrown when a field's `validate` predicate rejects a value.
- *
- * Carries `status`/`statusCode` 400 so transports surface it as a client error
- * with the validator's message intact (core `rest.ts` reads `status`; the
- * server error middleware can branch on `name === 'ValidationError'`), rather
- * than the generic 500 that a bare Error would produce.
- */
-export declare class ValidationError extends Error {
-    readonly status = 400;
-    readonly statusCode = 400;
-    readonly field?: string;
-    constructor(message: string, field?: string);
-}
+import { ValidationError } from '../../utils/errors.js';
+/** Re-export canonical domain ValidationError for collection call sites/tests. */
+export { ValidationError };
 /**
  * Executes every field's `validate` predicate for the fields present in `data`.
  *

package/dist/collections/operations/fieldValidation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fieldValidation.d.ts","sourceRoot":"","sources":["../../../src/collections/operations/fieldValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGlF;;;;;;;GAOG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,UAAU,OAAO;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAK5C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,QAAQ,GAAG,QAAQ,EAC9B,GAAG,CAAC,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAoCf"}
+{"version":3,"file":"fieldValidation.d.ts","sourceRoot":"","sources":["../../../src/collections/operations/fieldValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,kFAAkF;AAClF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,QAAQ,GAAG,QAAQ,EAC9B,GAAG,CAAC,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/collections/operations/fieldValidation.js

@@ -7,8 +7,8 @@
  *
  * A field's `validate(value, { value, data, siblingData, operation, req })`
  * returns `true` when the value is valid, or a non-empty string error message
- * when it is not. On the first failure the engine throws a ValidationError
- * (HTTP 400) carrying that message, so the write is rejected at ingress.
+ * when it is not. On the first failure the engine throws the canonical ValidationError
+ * (HTTP 400, `instanceof`) carrying that message, so the write is rejected at ingress.
  *
  * Enforcement note: this is one of the engine's ingress checks and runs for
  * EVERY collection written through create()/update(). For public page/post
@@ -16,25 +16,10 @@
  * (validateContent/validateBlocks, wired into the pages/posts write routes) and
  * render-side sanitizeUrl. See docs/specs/2026-07-02-cms-render-path-hardening.md.
  */
+import { ValidationError } from '../../utils/errors.js';
 import { flattenFields } from '../../utils/type-guards.js';
-/**
- * Thrown when a field's `validate` predicate rejects a value.
- *
- * Carries `status`/`statusCode` 400 so transports surface it as a client error
- * with the validator's message intact (core `rest.ts` reads `status`; the
- * server error middleware can branch on `name === 'ValidationError'`), rather
- * than the generic 500 that a bare Error would produce.
- */
-export class ValidationError extends Error {
-    status = 400;
-    statusCode = 400;
-    field;
-    constructor(message, field) {
-        super(message);
-        this.name = 'ValidationError';
-        this.field = field;
-    }
-}
+/** Re-export canonical domain ValidationError for collection call sites/tests. */
+export { ValidationError };
 /**
  * Executes every field's `validate` predicate for the fields present in `data`.
  *

package/dist/collections/operations/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/collections/operations/update.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,cAAc,EAGd,mBAAmB,EAEpB,MAAM,sBAAsB,CAAC;AAoF9B,wBAAsB,MAAM,CAC1B,MAAM,EAAE,sBAAsB,EAC9B,EAAE,EAAE,wBAAwB,GAAG,IAAI,EACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAsOzB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/collections/operations/update.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,cAAc,EAGd,mBAAmB,EAEpB,MAAM,sBAAsB,CAAC;AAoF9B,wBAAsB,MAAM,CAC1B,MAAM,EAAE,sBAAsB,EAC9B,EAAE,EAAE,wBAAwB,GAAG,IAAI,EACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAqOzB"}

package/dist/collections/operations/update.js

@@ -4,7 +4,7 @@
  * Updates an existing document with access control, validation, password hashing, and JSON field handling.
  */
 import bcrypt from 'bcryptjs';
-import { defaultLogger } from '../../instance/logger.js';
+import { logger } from '../../observability/logger.js';
 import { collectJsonFields, serializeValueForDatabase } from '../../utils/json-parsing.js';
 import { flattenFields, isJsonFieldType } from '../../utils/type-guards.js';
 import { runBeforeFieldHooks } from './fieldHooks.js';
@@ -195,7 +195,9 @@ export async function update(config, db, options) {
                 }
                 catch (error) {
                     // Log JSON parse error for debugging
-                    defaultLogger.warn(`[CollectionOperations] Failed to parse _json for ${tableName}.id=${id}:`, error);
+                    logger.warn(`[CollectionOperations] Failed to parse _json for ${tableName}.id=${id}`, {
+                        error: error instanceof Error ? { message: error.message, name: error.name } : error,
+                    });
                     existingJson = {};
                 }
             }

package/dist/database/safe-parse.js

@@ -6,7 +6,7 @@
  * All RevealUI tables have `id` as a non-nullable primary key, so filtering these
  * out prevents crashes from unexpected driver behavior or schema migrations.
  */
-import { defaultLogger } from '../instance/logger.js';
+import { logger } from '../observability/logger.js';
 /**
  * Validate that a raw database row is a valid RevealDocument.
  *
@@ -19,12 +19,12 @@ import { defaultLogger } from '../instance/logger.js';
  */
 export function safeParseRevealDocument(row) {
     if (row === null || typeof row !== 'object') {
-        defaultLogger.warn('Database row is not an object  -  skipping', { row });
+        logger.warn('Database row is not an object  -  skipping', { row });
         return null;
     }
     const r = row;
     if (typeof r.id !== 'string' && typeof r.id !== 'number') {
-        defaultLogger.warn('Database row missing required id field  -  skipping', {
+        logger.warn('Database row missing required id field  -  skipping', {
             keys: Object.keys(r),
         });
         return null;

package/dist/database/universal-postgres.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"universal-postgres.d.ts","sourceRoot":"","sources":["../../src/database/universal-postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,eAAe,EAA4C,MAAM,mBAAmB,CAAC;AAInG,MAAM,WAAW,8BAA8B;IAC7C;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IAC5C;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,IAAI,CAAC;IACzB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;CACvD;AAmGD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,8BAAmC,GAC1C,eAAe,CAsjBjB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,UAAQ,GAAG,IAAI,CAa/D;AAGD,eAAe,wBAAwB,CAAC"}
+{"version":3,"file":"universal-postgres.d.ts","sourceRoot":"","sources":["../../src/database/universal-postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,eAAe,EAA4C,MAAM,mBAAmB,CAAC;AAInG,MAAM,WAAW,8BAA8B;IAC7C;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IAC5C;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,IAAI,CAAC;IACzB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;CACvD;AAmGD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,8BAAmC,GAC1C,eAAe,CAilBjB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,UAAQ,GAAG,IAAI,CAa/D;AAGD,eAAe,wBAAwB,CAAC"}

package/dist/database/universal-postgres.js

@@ -11,7 +11,6 @@
  * WARNING: This module uses Node.js-specific database drivers.
  * Do NOT import in client-side code or edge runtime.
  */
-import { defaultLogger } from '../instance/logger.js';
 import { logger } from '../observability/logger.js';
 import { safeParseRevealDocuments } from './safe-parse.js';
 import { getSSLConfig } from './ssl-config.js';
@@ -122,7 +121,7 @@ export function universalPostgresAdapter(config = {}) {
                     await client.query('ROLLBACK');
                 }
                 catch (rollbackErr) {
-                    defaultLogger.error(`${providerLabel} transaction rollback failed after error:`, rollbackErr);
+                    logger.error(`${providerLabel} transaction rollback failed after error`, rollbackErr instanceof Error ? rollbackErr : new Error(String(rollbackErr)));
                 }
                 throw error;
             }
@@ -203,7 +202,7 @@ export function universalPostgresAdapter(config = {}) {
                         }
                     }
                     catch (error) {
-                        defaultLogger.error('Neon database query error:', error);
+                        logger.error('Neon database query error', error instanceof Error ? error : new Error(String(error)));
                         throw error;
                     }
                 };
@@ -262,7 +261,7 @@ export function universalPostgresAdapter(config = {}) {
                             }
                         }
                         catch (error) {
-                            defaultLogger.error('Supabase database query error:', error);
+                            logger.error('Supabase database query error', error instanceof Error ? error : new Error(String(error)));
                             throw error;
                         }
                     };
@@ -329,7 +328,7 @@ export function universalPostgresAdapter(config = {}) {
                         }
                     }
                     catch (error) {
-                        defaultLogger.error('PostgreSQL query error:', error);
+                        logger.error('PostgreSQL query error', error instanceof Error ? error : new Error(String(error)));
                         throw error;
                     }
                 };
@@ -361,7 +360,7 @@ export function universalPostgresAdapter(config = {}) {
                     pendingCreations.length = 0;
                 }
                 catch (error) {
-                    defaultLogger.error('Failed to create tables:', error);
+                    logger.error('Failed to create tables', error instanceof Error ? error : new Error(String(error)));
                     throw error;
                 }
             }
@@ -370,7 +369,7 @@ export function universalPostgresAdapter(config = {}) {
                 await queryFn('SELECT 1', []);
             }
             catch (error) {
-                defaultLogger.error(`Failed to connect to ${provider} database:`, error);
+                logger.error(`Failed to connect to ${provider} database`, error instanceof Error ? error : new Error(String(error)));
                 throw error;
             }
         },
@@ -404,7 +403,7 @@ export function universalPostgresAdapter(config = {}) {
                 }
                 catch (error) {
                     logger.error('[PGlite] Table creation failed', error instanceof Error ? error : new Error(String(error)));
-                    defaultLogger.error('Failed to create tables before query:', error);
+                    logger.error('Failed to create tables before query', error instanceof Error ? error : new Error(String(error)));
                     throw error;
                 }
             }
@@ -424,7 +423,7 @@ export function universalPostgresAdapter(config = {}) {
                     pendingCreations.length = 0;
                 }
                 catch (error) {
-                    defaultLogger.error('Failed to create tables before transaction:', error);
+                    logger.error('Failed to create tables before transaction', error instanceof Error ? error : new Error(String(error)));
                     throw error;
                 }
             }
@@ -512,8 +511,7 @@ export function universalPostgresAdapter(config = {}) {
                         // Remove from created set on failure so it can be retried
                         workerCreatedTables.delete(tableName);
                         logger.error('[PGlite] Worker FAILED to create table', error instanceof Error ? error : new Error(String(error)), { workerId: getWorkerID(), tableName });
-                        defaultLogger.error(`Failed to create table ${tableName}:`, error);
-                        defaultLogger.error('SQL:', createTableSQL);
+                        logger.error(`Failed to create table ${tableName}`, error instanceof Error ? error : new Error(String(error)), { sql: createTableSQL });
                         throw error;
                     }
                 })();
@@ -593,8 +591,7 @@ export function universalPostgresAdapter(config = {}) {
                     catch (error) {
                         // Remove from created set on failure so it can be retried
                         workerCreatedTables.delete(tableName);
-                        defaultLogger.error(`Failed to create global table ${tableName}:`, error);
-                        defaultLogger.error('SQL:', createTableSQL);
+                        logger.error(`Failed to create global table ${tableName}`, error instanceof Error ? error : new Error(String(error)), { sql: createTableSQL });
                         throw error;
                     }
                 })();

package/dist/deployment-mode.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Deployment mode detection (GAP-260 P4-1).
+ *
+ * Hosted SaaS vs self-hosted Forge must not be inferred only from the presence
+ * of the license signing private key. That coupling bricks admin when the key
+ * is removed for signer isolation (private key leaves admin / lives only in
+ * license-signer).
+ *
+ * Preference order:
+ * 1. Explicit `REVEALUI_DEPLOYMENT_MODE=hosted|forge` (case-insensitive trim)
+ * 2. Fallback (overlap window): private key present → hosted, else forge
+ *
+ * Sign-capable surfaces still require the private key at mint time; this module
+ * only answers "which product posture is this process".
+ */
+export type DeploymentMode = 'forge' | 'hosted';
+export type DeploymentModeEnv = Record<string, string | undefined>;
+export interface DetectDeploymentModeOptions {
+    /**
+     * When true, empty-string env values count as "present" (Vercel Sensitive
+     * pull semantics). When false (default), empty string is treated as missing.
+     */
+    lenient?: boolean;
+}
+/**
+ * Resolve deployment mode from env.
+ *
+ * Explicit MODE always wins when set to `hosted` or `forge`. Any other
+ * non-empty MODE value is ignored (falls through to key-presence) so a typo
+ * does not hard-brick boot during the dual-run window; production boot
+ * validators may still warn separately.
+ */
+export declare function detectDeploymentMode(env: DeploymentModeEnv, { lenient }?: DetectDeploymentModeOptions): DeploymentMode;
+/** Convenience: true when the process is in hosted SaaS posture. */
+export declare function isHostedDeployment(env?: DeploymentModeEnv, options?: DetectDeploymentModeOptions): boolean;
+/**
+ * Consistency check for CI / pre-deploy: forge mode must not also carry the
+ * signing private key (confused deputy). Hosted without private key is allowed
+ * (signer isolation target).
+ *
+ * Returns an error message or null when OK.
+ */
+export declare function deploymentModeKeyConsistencyError(env: DeploymentModeEnv, { lenient }?: DetectDeploymentModeOptions): string | null;
+//# sourceMappingURL=deployment-mode.d.ts.map

package/dist/deployment-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.d.ts","sourceRoot":"","sources":["../src/deployment-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEhD,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEnE,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAOD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,iBAAiB,EACtB,EAAE,OAAe,EAAE,GAAE,2BAAgC,GACpD,cAAc,CAMhB;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,iBAAoD,EACzD,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,iBAAiB,EACtB,EAAE,OAAe,EAAE,GAAE,2BAAgC,GACpD,MAAM,GAAG,IAAI,CAYf"}

package/dist/deployment-mode.js

@@ -0,0 +1,58 @@
+/**
+ * Deployment mode detection (GAP-260 P4-1).
+ *
+ * Hosted SaaS vs self-hosted Forge must not be inferred only from the presence
+ * of the license signing private key. That coupling bricks admin when the key
+ * is removed for signer isolation (private key leaves admin / lives only in
+ * license-signer).
+ *
+ * Preference order:
+ * 1. Explicit `REVEALUI_DEPLOYMENT_MODE=hosted|forge` (case-insensitive trim)
+ * 2. Fallback (overlap window): private key present → hosted, else forge
+ *
+ * Sign-capable surfaces still require the private key at mint time; this module
+ * only answers "which product posture is this process".
+ */
+function isPresent(env, key, lenient) {
+    if (lenient)
+        return env[key] !== undefined;
+    return Boolean(env[key]);
+}
+/**
+ * Resolve deployment mode from env.
+ *
+ * Explicit MODE always wins when set to `hosted` or `forge`. Any other
+ * non-empty MODE value is ignored (falls through to key-presence) so a typo
+ * does not hard-brick boot during the dual-run window; production boot
+ * validators may still warn separately.
+ */
+export function detectDeploymentMode(env, { lenient = false } = {}) {
+    const raw = (env.REVEALUI_DEPLOYMENT_MODE ?? '').trim().toLowerCase();
+    if (raw === 'hosted' || raw === 'forge') {
+        return raw;
+    }
+    return isPresent(env, 'REVEALUI_LICENSE_PRIVATE_KEY', lenient) ? 'hosted' : 'forge';
+}
+/** Convenience: true when the process is in hosted SaaS posture. */
+export function isHostedDeployment(env = process.env, options) {
+    return detectDeploymentMode(env, options) === 'hosted';
+}
+/**
+ * Consistency check for CI / pre-deploy: forge mode must not also carry the
+ * signing private key (confused deputy). Hosted without private key is allowed
+ * (signer isolation target).
+ *
+ * Returns an error message or null when OK.
+ */
+export function deploymentModeKeyConsistencyError(env, { lenient = false } = {}) {
+    const raw = (env.REVEALUI_DEPLOYMENT_MODE ?? '').trim().toLowerCase();
+    if (raw !== 'hosted' && raw !== 'forge')
+        return null;
+    const hasPriv = isPresent(env, 'REVEALUI_LICENSE_PRIVATE_KEY', lenient);
+    if (raw === 'forge' && hasPriv) {
+        return ('REVEALUI_DEPLOYMENT_MODE=forge but REVEALUI_LICENSE_PRIVATE_KEY is set. ' +
+            'Forge kits must not hold the studio signing key. Remove the private key ' +
+            'or set MODE=hosted.');
+    }
+    return null;
+}

package/dist/error-handling/error-boundary.d.ts

@@ -64,10 +64,22 @@ export declare class NetworkError extends Error {
     statusCode?: number | undefined;
     constructor(message: string, statusCode?: number | undefined);
 }
-export declare class ValidationError extends Error {
+/**
+ * Client-side form / UI validation error (field-map payload).
+ *
+ * Not the same class as domain `ValidationError` in `utils/errors.ts`.
+ * Renamed from ValidationError (P2-A fleet-redundancy) so `instanceof` and
+ * `name` no longer collide with API/field-ingress errors.
+ */
+export declare class ClientValidationError extends Error {
     fields?: Record<string, string> | undefined;
     constructor(message: string, fields?: Record<string, string> | undefined);
 }
+/**
+ * @deprecated Use {@link ClientValidationError}. Alias kept for one minor.
+ */
+export declare const ValidationError: typeof ClientValidationError;
+export type ValidationError = ClientValidationError;
 export declare class AuthenticationError extends Error {
     constructor(message: string);
 }
@@ -79,7 +91,9 @@ export declare class NotFoundError extends Error {
  * Error classification
  */
 export declare function isNetworkError(error: unknown): error is NetworkError;
-export declare function isValidationError(error: unknown): error is ValidationError;
+export declare function isClientValidationError(error: unknown): error is ClientValidationError;
+/** @deprecated Prefer {@link isClientValidationError}; still instanceof-only (no name check). */
+export declare function isValidationError(error: unknown): error is ClientValidationError;
 export declare function isAuthenticationError(error: unknown): error is AuthenticationError;
 export declare function isNotFoundError(error: unknown): error is NotFoundError;
 /**

package/dist/error-handling/error-boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-boundary.d.ts","sourceRoot":"","sources":["../../src/error-handling/error-boundary.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAGzD,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBACtE,KAAK,EAAE,kBAAkB;IASrC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO1E,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAgB3D,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI;IAevD,KAAK,QAAO,IAAI,CAUd;IAEF,MAAM,IAAI,SAAS;CA2BpB;AAuGD;;GAEG;AACH,MAAM,WAAW,2BAA4B,SAAQ,kBAAkB;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,sBAAuB,SAAQ,SAAS,CACnD,2BAA2B,EAC3B,kBAAkB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAC5C;IACC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,KAAK,EAAE,2BAA2B;IAU9C,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO1E,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAwB3D,oBAAoB,IAAI,IAAI;IAM5B,KAAK,QAAO,IAAI,CAed;IAEF,MAAM,IAAI,SAAS;CAkCpB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAChD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EACjC,kBAAkB,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,GACxD,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAUxB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAgB5E;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;IAG5B,UAAU,CAAC,EAAE,MAAM;gBAD1B,OAAO,EAAE,MAAM,EACR,UAAU,CAAC,EAAE,MAAM,YAAA;CAK7B;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAG/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;gBADtC,OAAO,EAAE,MAAM,EACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA;CAKzC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,KAAK;IAG7B,QAAQ,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAKlF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAItE;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,aAAa,CAO5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAStD"}
+{"version":3,"file":"error-boundary.d.ts","sourceRoot":"","sources":["../../src/error-handling/error-boundary.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAGzD,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBACtE,KAAK,EAAE,kBAAkB;IASrC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO1E,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAgB3D,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI;IAevD,KAAK,QAAO,IAAI,CAUd;IAEF,MAAM,IAAI,SAAS;CA2BpB;AAuGD;;GAEG;AACH,MAAM,WAAW,2BAA4B,SAAQ,kBAAkB;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,sBAAuB,SAAQ,SAAS,CACnD,2BAA2B,EAC3B,kBAAkB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAC5C;IACC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,KAAK,EAAE,2BAA2B;IAU9C,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO1E,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAwB3D,oBAAoB,IAAI,IAAI;IAM5B,KAAK,QAAO,IAAI,CAed;IAEF,MAAM,IAAI,SAAS;CAkCpB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAChD,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EACjC,kBAAkB,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,GACxD,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAUxB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAgB5E;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;IAG5B,UAAU,CAAC,EAAE,MAAM;gBAD1B,OAAO,EAAE,MAAM,EACR,UAAU,CAAC,EAAE,MAAM,YAAA;CAK7B;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAGrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;gBADtC,OAAO,EAAE,MAAM,EACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA;CAKzC;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,8BAAwB,CAAC;AACrD,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAEpD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,KAAK;IAG7B,QAAQ,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAEtF;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAEhF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAKlF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAItE;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,aAAa,CAO5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAStD"}

package/dist/error-handling/error-boundary.js

@@ -227,14 +227,25 @@ export class NetworkError extends Error {
         this.name = 'NetworkError';
     }
 }
-export class ValidationError extends Error {
+/**
+ * Client-side form / UI validation error (field-map payload).
+ *
+ * Not the same class as domain `ValidationError` in `utils/errors.ts`.
+ * Renamed from ValidationError (P2-A fleet-redundancy) so `instanceof` and
+ * `name` no longer collide with API/field-ingress errors.
+ */
+export class ClientValidationError extends Error {
     fields;
     constructor(message, fields) {
         super(message);
         this.fields = fields;
-        this.name = 'ValidationError';
+        this.name = 'ClientValidationError';
     }
 }
+/**
+ * @deprecated Use {@link ClientValidationError}. Alias kept for one minor.
+ */
+export const ValidationError = ClientValidationError;
 export class AuthenticationError extends Error {
     constructor(message) {
         super(message);
@@ -255,8 +266,12 @@ export class NotFoundError extends Error {
 export function isNetworkError(error) {
     return error instanceof NetworkError || (error instanceof Error && error.name === 'NetworkError');
 }
+export function isClientValidationError(error) {
+    return error instanceof ClientValidationError;
+}
+/** @deprecated Prefer {@link isClientValidationError}; still instanceof-only (no name check). */
 export function isValidationError(error) {
-    return (error instanceof ValidationError || (error instanceof Error && error.name === 'ValidationError'));
+    return isClientValidationError(error);
 }
 export function isAuthenticationError(error) {
     return (error instanceof AuthenticationError ||

package/dist/error-handling/error-reporter.d.ts

@@ -3,7 +3,7 @@
  *
  * Integrates with error tracking services (Sentry, Bugsnag, etc.)
  */
-import type { ErrorInfo } from './error-boundary.js';
+import { type ErrorInfo } from './error-boundary.js';
 export interface ErrorReport {
     error: Error;
     errorInfo?: ErrorInfo;

package/dist/error-handling/error-reporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-reporter.d.ts","sourceRoot":"","sources":["../../src/error-handling/error-reporter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IAC1F,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;IACxC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,YAAY,CAAwC;IAE5D;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI1C;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAO7C;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IA6DhE;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,UAAmB,EAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC7B,IAAI;IAoCP;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAQvC;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAQhD;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAQxC;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAa3C;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI;IAIlD;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAM3B;;OAEG;IACH,OAAO,CAAC,cAAc;IAgBtB;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAIlC;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB;;OAEG;IACH,cAAc,IAAI,UAAU,EAAE;CAG/B;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,sBAA6B,CAAC;AAExD;;GAEG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAShE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAgBzF,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAIvC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIhD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIxC,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;CAG5C;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAOhE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAQzF,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAGxC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAGjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAG1C,aAAa,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IACzC,OAAO,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE9B,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BzE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAuBhB,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAIxC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI1C,aAAa,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,WAAW,GAAG,IAAI,CAAC;CAC1D,GAAG,IAAI,CAgEP;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQhF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAQ9D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAaN;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;IACvB;;OAEG;8BACuB,KAAK,KAAG,OAAO;IAMzC;;OAEG;2BACoB,KAAK,KAAG,OAAO;IAItC;;OAEG;6BACsB,KAAK,KAAG,OAAO;IAIxC;;OAEG;+BACwB,MAAM,EAAE,KAAG,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;CAKlE,CAAC"}
+{"version":3,"file":"error-reporter.d.ts","sourceRoot":"","sources":["../../src/error-handling/error-reporter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAyB,KAAK,SAAS,EAAgB,MAAM,qBAAqB,CAAC;AAE1F,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IAC1F,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;IACxC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,YAAY,CAAwC;IAE5D;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI1C;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAO7C;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IA6DhE;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,UAAmB,EAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC7B,IAAI;IAoCP;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAQvC;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAQhD;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAQxC;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAa3C;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI;IAIlD;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAM3B;;OAEG;IACH,OAAO,CAAC,cAAc;IAkBtB;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAIlC;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB;;OAEG;IACH,cAAc,IAAI,UAAU,EAAE;CAG/B;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,sBAA6B,CAAC;AAExD;;GAEG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAShE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAgBzF,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAIvC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIhD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIxC,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;CAG5C;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAOhE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAQzF,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAGxC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAGjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAG1C,aAAa,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IACzC,OAAO,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE9B,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BzE,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAuBhB,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAIxC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAIjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI1C,aAAa,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,WAAW,GAAG,IAAI,CAAC;CAC1D,GAAG,IAAI,CAgEP;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQhF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAQ9D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAaN;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;IACvB;;OAEG;8BACuB,KAAK,KAAG,OAAO;IAMzC;;OAEG;2BACoB,KAAK,KAAG,OAAO;IAItC;;OAEG;6BACsB,KAAK,KAAG,OAAO;IAIxC;;OAEG;+BACwB,MAAM,EAAE,KAAG,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;CAKlE,CAAC"}

package/dist/error-handling/error-reporter.js

@@ -4,6 +4,8 @@
  * Integrates with error tracking services (Sentry, Bugsnag, etc.)
  */
 import { logger } from '../observability/logger.js';
+import { ValidationError as DomainValidationError } from '../utils/errors.js';
+import { ClientValidationError, NetworkError } from './error-boundary.js';
 /**
  * Error reporting system
  */
@@ -189,10 +191,12 @@ export class ErrorReportingSystem {
         if (error.name === 'TypeError' || error.name === 'ReferenceError') {
             return 'error';
         }
-        if (error.name === 'NetworkError') {
+        // instanceof only — name checks false-positive across dual ValidationError
+        // classes (P2-A fleet-redundancy).
+        if (error instanceof NetworkError) {
             return 'warning';
         }
-        if (error.name === 'ValidationError') {
+        if (error instanceof ClientValidationError || error instanceof DomainValidationError) {
             return 'warning';
         }
         return 'error';

package/dist/error-handling/index.d.ts

@@ -6,7 +6,7 @@
 export type { CircuitBreakerConfig, CircuitBreakerStats, CircuitState, RetryConfig, RetryOptions, } from '@revealui/resilience';
 export { AdaptiveCircuitBreaker, Bulkhead, CircuitBreak, CircuitBreaker, CircuitBreakerOpenError, CircuitBreakerRegistry, calculateDelay, circuitBreakerRegistry, createCircuitBreakerMiddleware, createResilientFunction, createRetryMiddleware, ExponentialBackoff, fetchWithCircuitBreaker, fetchWithRetry, globalRetryConfig, ResilientOperation, Retryable, RetryableOperation, RetryPolicies, RetryPolicyBuilder, retry, retryBatch, retryIf, retryUntil, retryWithFallback, sleep, withCircuitBreaker, } from '@revealui/resilience';
 export type { ErrorBoundaryProps, ErrorBoundaryState, ErrorBoundaryWithRetryProps, ErrorInfo, ErrorSeverity, } from './error-boundary';
-export { AuthenticationError, ErrorBoundary, ErrorBoundaryWithRetry, getErrorSeverity, isAuthenticationError, isNetworkError, isNotFoundError, isValidationError, NetworkError, NotFoundError, shouldRetryError, useErrorHandler, ValidationError, withErrorBoundary, } from './error-boundary';
+export { AuthenticationError, ClientValidationError, ErrorBoundary, ErrorBoundaryWithRetry, getErrorSeverity, isAuthenticationError, isClientValidationError, isNetworkError, isNotFoundError, isValidationError, NetworkError, NotFoundError, shouldRetryError, useErrorHandler, ValidationError, withErrorBoundary, } from './error-boundary';
 export type { Breadcrumb, ErrorContext, ErrorLevel, ErrorReport, ErrorReporter, UserContext, } from './error-reporter';
 export { ConsoleErrorReporter, ErrorFilters, ErrorReportingSystem, errorReporter, HTTPErrorReporter, initializeErrorReporting, LoggingErrorReporter, trackAction, trackAPICall, trackNavigation, } from './error-reporter';
 export type { ErrorFallbackProps } from './fallback-components';