@substrat-run/contracts 0.78.0 → 0.79.0

package/dist/errors.d.ts

@@ -0,0 +1,304 @@
+import { z } from 'zod';
+/**
+ * The ONE error model for every surface on the platform (`docs/rfc/error-model.md`,
+ * issue #113): RFC 9457 `application/problem+json`, a CLOSED code taxonomy, and one
+ * mapper — replacing the seven hand-rolled `onError` handlers that today choose a
+ * status by matching on error message TEXT.
+ *
+ * Three properties this is built for:
+ *
+ * - **Machine-readable.** `validation_failed on field 'email'` is recoverable by a
+ *   client — or by a build agent — without a person reading a log. `500 Something
+ *   went wrong` is not.
+ * - **Documentable.** The same schema that validates a problem body is emitted into
+ *   `/openapi.json` (`openapi.ts`), so the API surface finally describes how it can
+ *   FAIL and not only how it succeeds. Decision 22 cashed in again.
+ * - **Additive to adopt.** `toProblem` maps an unrecognised throw to `internal` exactly
+ *   as the hand-rolled handlers do, so each layer could adopt this without a flag day.
+ *
+ * ## Where the rollout stands
+ *
+ * Phases 1–3 are in: the taxonomy and `toProblem` (contracts), the kernel's own error
+ * classes joined to it, and `wireFailure` — the value an error becomes when it has to
+ * cross the ScopeDO boundary, because a throw cannot carry structure across it. What
+ * remains is phase 4: the transports reading `code` instead of matching messages, and
+ * the deprecated `error` duplicate coming back out of the body.
+ */
+/**
+ * The base for `type` URIs.
+ *
+ * DERIVED from the code rather than written per entry, deliberately: whether we
+ * actually serve a page at each of these URLs is still open (RFC §6 Q2), and nothing
+ * throws a problem yet, so no `type` value has reached a client. Flipping the
+ * decision stays a one-line change here for exactly as long as that holds.
+ */
+export declare const PROBLEM_TYPE_BASE = "https://substrat.net/errors";
+/**
+ * The taxonomy. CLOSED — an open one is a suggestion.
+ *
+ * A module never invents a code. It narrows an existing one with a `reason` slug it
+ * owns (`conflict` + `reason: 'already_exported'`), which is the star topology
+ * applied to failure: a vertical branches on an engine's reason without importing
+ * the engine's types.
+ */
+export declare const errorCode: z.ZodEnum<{
+    conflict: "conflict";
+    forbidden: "forbidden";
+    internal: "internal";
+    not_found: "not_found";
+    permission_denied: "permission_denied";
+    precondition_failed: "precondition_failed";
+    rate_limited: "rate_limited";
+    unauthenticated: "unauthenticated";
+    unavailable: "unavailable";
+    validation_failed: "validation_failed";
+}>;
+export type ErrorCode = z.infer<typeof errorCode>;
+/** `permission_denied` → `https://substrat.net/errors/permission-denied`. */
+export declare function problemTypeFor(code: ErrorCode): string;
+/**
+ * Status and human title per code. `Record<ErrorCode, …>` on purpose: adding a code
+ * without deciding what it means to HTTP is then a compile error, not a 500 found in
+ * production.
+ */
+export declare const PROBLEM_CATALOG: {
+    readonly unauthenticated: {
+        readonly status: 401;
+        readonly title: 'Unauthenticated';
+    };
+    readonly permission_denied: {
+        readonly status: 403;
+        readonly title: 'Permission denied';
+    };
+    readonly forbidden: {
+        readonly status: 403;
+        readonly title: 'Forbidden';
+    };
+    readonly not_found: {
+        readonly status: 404;
+        readonly title: 'Not found';
+    };
+    readonly conflict: {
+        readonly status: 409;
+        readonly title: 'Conflict';
+    };
+    readonly validation_failed: {
+        readonly status: 400;
+        readonly title: 'Validation failed';
+    };
+    readonly precondition_failed: {
+        readonly status: 412;
+        readonly title: 'Precondition failed';
+    };
+    readonly rate_limited: {
+        readonly status: 429;
+        readonly title: 'Rate limited';
+    };
+    readonly unavailable: {
+        readonly status: 503;
+        readonly title: 'Service unavailable';
+    };
+    readonly internal: {
+        readonly status: 500;
+        readonly title: 'Internal error';
+    };
+};
+/** One field-level complaint, mapped from a Zod issue. */
+export declare const validationIssue: z.ZodObject<{
+    path: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>;
+export type ValidationIssue = z.infer<typeof validationIssue>;
+/**
+ * The extension members each code may carry — declared per entry, never free-form.
+ *
+ * These are enforced where it matters: at the THROW site, by `substratError`, which
+ * both types and parses them. The wire schema below is one flat object rather than a
+ * ten-way discriminated union, because a `oneOf` of ten variants documents worse than
+ * one object does and buys a narrowing no client asked for. Per-code narrowing of the
+ * emitted document is RFC §6 Q1, deferred with the model layer that would own it.
+ */
+export declare const PROBLEM_EXTENSIONS: {
+    readonly unauthenticated: z.ZodObject<{}, z.core.$strict>;
+    readonly permission_denied: z.ZodObject<{
+        permission: z.ZodOptional<z.ZodString>;
+        entity: z.ZodOptional<z.ZodObject<{
+            entityType: z.ZodString;
+            entityId: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly forbidden: z.ZodObject<{
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly not_found: z.ZodObject<{}, z.core.$strict>;
+    readonly conflict: z.ZodObject<{
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly validation_failed: z.ZodObject<{
+        errors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+    readonly precondition_failed: z.ZodObject<{}, z.core.$strict>;
+    readonly rate_limited: z.ZodObject<{
+        retryAfter: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly unavailable: z.ZodObject<{}, z.core.$strict>;
+    readonly internal: z.ZodObject<{}, z.core.$strict>;
+};
+/** The extensions legal on one code, as a type — what `substratError` accepts. */
+export type ExtensionsFor<C extends ErrorCode> = z.infer<(typeof PROBLEM_EXTENSIONS)[C]>;
+/**
+ * The wire body. RFC 9457 members, plus `code`, plus every declared extension.
+ *
+ * `errors.test.ts` asserts this object carries every field any entry of
+ * `PROBLEM_EXTENSIONS` declares — the join between the two is checked in CI rather
+ * than by remembering to edit both.
+ */
+export declare const problem: z.ZodObject<{
+    type: z.ZodString;
+    title: z.ZodString;
+    status: z.ZodNumber;
+    detail: z.ZodOptional<z.ZodString>;
+    instance: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+    code: z.ZodEnum<{
+        conflict: "conflict";
+        forbidden: "forbidden";
+        internal: "internal";
+        not_found: "not_found";
+        permission_denied: "permission_denied";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        unauthenticated: "unauthenticated";
+        unavailable: "unavailable";
+        validation_failed: "validation_failed";
+    }>;
+    permission: z.ZodOptional<z.ZodString>;
+    entity: z.ZodOptional<z.ZodObject<{
+        entityType: z.ZodString;
+        entityId: z.ZodString;
+    }, z.core.$strip>>;
+    reason: z.ZodOptional<z.ZodString>;
+    errors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strip>>>;
+    retryAfter: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type Problem = z.infer<typeof problem>;
+/**
+ * Where a `SubstratError` keeps its code when the class itself is unavailable.
+ *
+ * `name` is a SECOND reading of the code, not a transport for it. Phase 2 proposed it
+ * as the way to cross the `ScopeDO` hop and that was wrong — measured against workerd,
+ * a thrown error arrives carrying its message and nothing else, with `name` folded into
+ * the message and reset. **Errors cross that boundary as a value now** (`wireFailure`,
+ * below), not as a throw.
+ *
+ * What this prefix still earns: a duplicate copy of a package in one build, a structured
+ * clone, or any other place the prototype is gone but the object survives — `errorCodeOf`
+ * reads the name and still answers correctly. Cheap, and it costs nothing to keep.
+ */
+export declare const ERROR_NAME_PREFIX = "Substrat.";
+/**
+ * A throw that already knows what it means.
+ *
+ * `message` stays the human sentence and nothing more, so logs, stack traces and the
+ * contract suite's message assertions all read exactly as they do today. The code
+ * rides in `name`, which is what lets it survive the hop.
+ */
+export declare class SubstratError extends Error {
+    readonly code: ErrorCode;
+    readonly status: number;
+    readonly extensions: Readonly<Record<string, unknown>>;
+    constructor(code: ErrorCode, message: string, extensions?: Record<string, unknown>);
+}
+/**
+ * The code a throw carries, however little of it survived.
+ *
+ * Three readings, in order of fidelity: the live `code` property (same isolate), the
+ * `Substrat.<code>` name (crossed a boundary), and the legacy class names above. A
+ * throw this cannot classify is not ours, and `toProblem` answers `internal` for it.
+ */
+export declare function errorCodeOf(err: unknown): ErrorCode | undefined;
+/**
+ * Build a typed error. The extensions are checked against the code at COMPILE time
+ * and parsed at runtime, so a `retryAfter` on a `not_found` is caught at the throw
+ * site rather than discovered in a response body.
+ */
+export declare function substratError<C extends ErrorCode>(code: C, message: string, extensions?: ExtensionsFor<C>): SubstratError;
+/**
+ * Recognise one of ours — by shape, never by `instanceof` alone.
+ *
+ * Two copies of a package in one build already make `instanceof` a coin toss; a
+ * serialising boundary makes it a certainty in the wrong direction.
+ */
+export declare function isSubstratError(err: unknown): err is SubstratError;
+/** Zod's issue list, flattened to the wire shape. */
+export declare function validationIssuesFrom(error: z.ZodError): ValidationIssue[];
+/**
+ * Map any throw onto a problem body and its status — the one function replacing every
+ * hand-rolled `onError` and the control plane's regex table.
+ *
+ * **`internal` never carries `detail`.** An unrecognised throw is by definition one
+ * whose message nobody reviewed for what it discloses, and these surfaces have
+ * cross-tenant reach. The existing posture is right; this preserves it rather than
+ * quietly widening it in the name of better errors.
+ */
+export declare function toProblem(err: unknown, instance?: string): Problem;
+/**
+ * The statuses an operation can actually answer with today, for the emitted document.
+ *
+ * `precondition_failed` (412) and `rate_limited` (429) are declared in the taxonomy
+ * so that `If-Match` (#129) and rate limiting (#130) add no vocabulary when they
+ * land — but nothing raises them yet, and documenting a failure that cannot occur is
+ * worse than documenting none. They join this list with the features that raise them.
+ *
+ * This narrows the RFC's §6 Q1 leaning ("emit the full set") on the same reasoning
+ * that motivated the question.
+ */
+export declare const DOCUMENTED_ERROR_CODES: readonly ErrorCode[];
+/**
+ * An error flattened for a boundary that carries only data — the DO↔coordinator wire
+ * (#113 phase 3, `docs/rfc/error-model.md` §3).
+ *
+ * This exists because a THROW cannot carry structure across the ScopeDO hop: workerd
+ * delivers a thrown error's message and nothing else, folding `name` into it and
+ * dropping every own property (measured — `adapter-cloudflare`'s contract suite pins
+ * it). So the error stops being thrown across the boundary and starts being returned
+ * across it, as a value, which is the one shape that survives intact.
+ */
+export declare const wireFailure: z.ZodObject<{
+    name: z.ZodString;
+    message: z.ZodString;
+    code: z.ZodOptional<z.ZodEnum<{
+        conflict: "conflict";
+        forbidden: "forbidden";
+        internal: "internal";
+        not_found: "not_found";
+        permission_denied: "permission_denied";
+        precondition_failed: "precondition_failed";
+        rate_limited: "rate_limited";
+        unauthenticated: "unauthenticated";
+        unavailable: "unavailable";
+        validation_failed: "validation_failed";
+    }>>;
+    extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type WireFailure = z.infer<typeof wireFailure>;
+/** Flatten a throw for the wire, losing nothing this side of the boundary knows. */
+export declare function toWireFailure(err: unknown): WireFailure;
+/**
+ * Rebuild a throw from the wire.
+ *
+ * The rebuilt error is a `SubstratError` carrying the original `name`, NOT an instance
+ * of the original class — contracts cannot import the kernel, and reviving arbitrary
+ * classes over a wire is a capability nobody should want. That is enough for every
+ * consumer in the repo, because they all read the code or the name, never the
+ * constructor. `instanceof PermissionDenied` stays false here and always will; it is
+ * the wrong question, and `errorCodeOf` is the right one.
+ */
+export declare function fromWireFailure(failure: WireFailure): Error;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,gCAAgC,CAAC;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;EAWpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEtD;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe;;iBACP,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,iBAAiB;;;iBACnC,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,mBAAmB;;;iBAC/C,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,WAAW;;;iBAC/B,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,WAAW;;;iBAChC,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,UAAU;;;iBACrB,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,mBAAmB;;;iBACrC,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,qBAAqB;;;iBAChD,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,cAAc;;;iBACnC,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,qBAAqB;;;iBAC5C,MAAM,EAAE,GAAG;iBAAE,KAAK,EAAE,gBAAgB;;CACuB,CAAC;AAE1E,0DAA0D;AAC1D,eAAO,MAAM,eAAe;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgBkB,CAAC;AAElD,kFAAkF;AAClF,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzF;;;;;;GAMG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAkB7C;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvD,YAAY,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAMrF;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAgB/D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,SAAS,EAC/C,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,GAC5B,aAAa,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,aAAa,CAElE;AAED,qDAAqD;AACrD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,eAAe,EAAE,CAKzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAelE;AAoBD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,SAAS,EAStD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;iBAOtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAUvD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,KAAK,CAO3D"}

package/dist/errors.js

@@ -0,0 +1,352 @@
+import { z } from 'zod';
+import { entityRef } from './events.js';
+/**
+ * The ONE error model for every surface on the platform (`docs/rfc/error-model.md`,
+ * issue #113): RFC 9457 `application/problem+json`, a CLOSED code taxonomy, and one
+ * mapper — replacing the seven hand-rolled `onError` handlers that today choose a
+ * status by matching on error message TEXT.
+ *
+ * Three properties this is built for:
+ *
+ * - **Machine-readable.** `validation_failed on field 'email'` is recoverable by a
+ *   client — or by a build agent — without a person reading a log. `500 Something
+ *   went wrong` is not.
+ * - **Documentable.** The same schema that validates a problem body is emitted into
+ *   `/openapi.json` (`openapi.ts`), so the API surface finally describes how it can
+ *   FAIL and not only how it succeeds. Decision 22 cashed in again.
+ * - **Additive to adopt.** `toProblem` maps an unrecognised throw to `internal` exactly
+ *   as the hand-rolled handlers do, so each layer could adopt this without a flag day.
+ *
+ * ## Where the rollout stands
+ *
+ * Phases 1–3 are in: the taxonomy and `toProblem` (contracts), the kernel's own error
+ * classes joined to it, and `wireFailure` — the value an error becomes when it has to
+ * cross the ScopeDO boundary, because a throw cannot carry structure across it. What
+ * remains is phase 4: the transports reading `code` instead of matching messages, and
+ * the deprecated `error` duplicate coming back out of the body.
+ */
+/**
+ * The base for `type` URIs.
+ *
+ * DERIVED from the code rather than written per entry, deliberately: whether we
+ * actually serve a page at each of these URLs is still open (RFC §6 Q2), and nothing
+ * throws a problem yet, so no `type` value has reached a client. Flipping the
+ * decision stays a one-line change here for exactly as long as that holds.
+ */
+export const PROBLEM_TYPE_BASE = 'https://substrat.net/errors';
+/**
+ * The taxonomy. CLOSED — an open one is a suggestion.
+ *
+ * A module never invents a code. It narrows an existing one with a `reason` slug it
+ * owns (`conflict` + `reason: 'already_exported'`), which is the star topology
+ * applied to failure: a vertical branches on an engine's reason without importing
+ * the engine's types.
+ */
+export const errorCode = z.enum([
+    'unauthenticated',
+    'permission_denied',
+    'forbidden',
+    'not_found',
+    'conflict',
+    'validation_failed',
+    'precondition_failed',
+    'rate_limited',
+    'unavailable',
+    'internal',
+]);
+/** `permission_denied` → `https://substrat.net/errors/permission-denied`. */
+export function problemTypeFor(code) {
+    return `${PROBLEM_TYPE_BASE}/${code.replaceAll('_', '-')}`;
+}
+/**
+ * Status and human title per code. `Record<ErrorCode, …>` on purpose: adding a code
+ * without deciding what it means to HTTP is then a compile error, not a 500 found in
+ * production.
+ */
+export const PROBLEM_CATALOG = {
+    unauthenticated: { status: 401, title: 'Unauthenticated' },
+    permission_denied: { status: 403, title: 'Permission denied' },
+    forbidden: { status: 403, title: 'Forbidden' },
+    not_found: { status: 404, title: 'Not found' },
+    conflict: { status: 409, title: 'Conflict' },
+    validation_failed: { status: 400, title: 'Validation failed' },
+    precondition_failed: { status: 412, title: 'Precondition failed' },
+    rate_limited: { status: 429, title: 'Rate limited' },
+    unavailable: { status: 503, title: 'Service unavailable' },
+    internal: { status: 500, title: 'Internal error' },
+};
+/** One field-level complaint, mapped from a Zod issue. */
+export const validationIssue = z.object({
+    /** Dotted path into the input: `lines.0.quantity`. Empty for a root-level issue. */
+    path: z.string(),
+    message: z.string(),
+});
+/**
+ * The extension members each code may carry — declared per entry, never free-form.
+ *
+ * These are enforced where it matters: at the THROW site, by `substratError`, which
+ * both types and parses them. The wire schema below is one flat object rather than a
+ * ten-way discriminated union, because a `oneOf` of ten variants documents worse than
+ * one object does and buys a narrowing no client asked for. Per-code narrowing of the
+ * emitted document is RFC §6 Q1, deferred with the model layer that would own it.
+ */
+export const PROBLEM_EXTENSIONS = {
+    unauthenticated: z.strictObject({}),
+    permission_denied: z.object({
+        /** The permission key the check refused. */
+        permission: z.string().min(1).optional(),
+        /** Set when the refusal was a per-entity check rather than a node-level one. */
+        entity: entityRef.optional(),
+    }),
+    forbidden: z.object({ reason: z.string().min(1).optional() }),
+    not_found: z.strictObject({}),
+    conflict: z.object({ reason: z.string().min(1).optional() }),
+    validation_failed: z.object({ errors: z.array(validationIssue).optional() }),
+    precondition_failed: z.strictObject({}),
+    rate_limited: z.object({ retryAfter: z.number().int().nonnegative().optional() }),
+    unavailable: z.strictObject({}),
+    internal: z.strictObject({}),
+};
+/**
+ * The wire body. RFC 9457 members, plus `code`, plus every declared extension.
+ *
+ * `errors.test.ts` asserts this object carries every field any entry of
+ * `PROBLEM_EXTENSIONS` declares — the join between the two is checked in CI rather
+ * than by remembering to edit both.
+ */
+export const problem = z.object({
+    /** Canonical identifier. Resolves — an error that documents itself. */
+    type: z.string().min(1),
+    /** Short, human, and STABLE per code — clients may group on it, so it does not vary. */
+    title: z.string().min(1),
+    /** Duplicated from the HTTP status line, per RFC 9457 §3.1.2. */
+    status: z.number().int(),
+    /** What went wrong THIS time. Absent on `internal`, always — see `toProblem`. */
+    detail: z.string().optional(),
+    /** The request this refers to, when a transport knows it. */
+    instance: z.string().optional(),
+    /**
+     * DEPRECATED duplicate of `detail`, for one migration window.
+     *
+     * Every SPA in the repo reads `{ error }` today. RFC 9457 permits extension
+     * members, so carrying this lets the transports adopt problem+json without
+     * breaking a single client — which is what makes the rollout's phase 3 a
+     * non-event. Removed once the clients are moved, not "eventually".
+     */
+    error: z.string().optional(),
+    code: errorCode,
+    // -- declared extensions (see PROBLEM_EXTENSIONS) ---------------------------
+    permission: z.string().min(1).optional(),
+    entity: entityRef.optional(),
+    reason: z.string().min(1).optional(),
+    errors: z.array(validationIssue).optional(),
+    retryAfter: z.number().int().nonnegative().optional(),
+});
+/**
+ * Where a `SubstratError` keeps its code when the class itself is unavailable.
+ *
+ * `name` is a SECOND reading of the code, not a transport for it. Phase 2 proposed it
+ * as the way to cross the `ScopeDO` hop and that was wrong — measured against workerd,
+ * a thrown error arrives carrying its message and nothing else, with `name` folded into
+ * the message and reset. **Errors cross that boundary as a value now** (`wireFailure`,
+ * below), not as a throw.
+ *
+ * What this prefix still earns: a duplicate copy of a package in one build, a structured
+ * clone, or any other place the prototype is gone but the object survives — `errorCodeOf`
+ * reads the name and still answers correctly. Cheap, and it costs nothing to keep.
+ */
+export const ERROR_NAME_PREFIX = 'Substrat.';
+/**
+ * Class names that predate the taxonomy and already mean a code.
+ *
+ * Keeping `PermissionDenied` named `PermissionDenied` rather than renaming it to the
+ * generic form is deliberate: `vertical-host`'s classifier and several verticals match
+ * on that exact string today, and a rename would be a silent behaviour change bundled
+ * into a refactor. `ZodError` earns its row because a parse failure crossing the hop
+ * loses its `issues` array — the code is all that is left, and `validation_failed`
+ * without fields still beats `internal`.
+ */
+const CODE_BY_ERROR_NAME = {
+    PermissionDenied: 'permission_denied',
+    SecretBoxUnconfiguredError: 'unavailable',
+    ZodError: 'validation_failed',
+};
+/**
+ * A throw that already knows what it means.
+ *
+ * `message` stays the human sentence and nothing more, so logs, stack traces and the
+ * contract suite's message assertions all read exactly as they do today. The code
+ * rides in `name`, which is what lets it survive the hop.
+ */
+export class SubstratError extends Error {
+    code;
+    status;
+    extensions;
+    constructor(code, message, extensions = {}) {
+        super(message);
+        this.name = `${ERROR_NAME_PREFIX}${code}`;
+        this.code = code;
+        this.status = PROBLEM_CATALOG[code].status;
+        this.extensions = extensions;
+    }
+}
+/**
+ * The code a throw carries, however little of it survived.
+ *
+ * Three readings, in order of fidelity: the live `code` property (same isolate), the
+ * `Substrat.<code>` name (crossed a boundary), and the legacy class names above. A
+ * throw this cannot classify is not ours, and `toProblem` answers `internal` for it.
+ */
+export function errorCodeOf(err) {
+    if (err === null || typeof err !== 'object')
+        return undefined;
+    const own = err.code;
+    if (typeof own === 'string') {
+        const parsed = errorCode.safeParse(own);
+        if (parsed.success)
+            return parsed.data;
+    }
+    const name = err.name;
+    if (typeof name !== 'string')
+        return undefined;
+    if (name.startsWith(ERROR_NAME_PREFIX)) {
+        const parsed = errorCode.safeParse(name.slice(ERROR_NAME_PREFIX.length));
+        if (parsed.success)
+            return parsed.data;
+    }
+    return CODE_BY_ERROR_NAME[name];
+}
+/**
+ * Build a typed error. The extensions are checked against the code at COMPILE time
+ * and parsed at runtime, so a `retryAfter` on a `not_found` is caught at the throw
+ * site rather than discovered in a response body.
+ */
+export function substratError(code, message, extensions) {
+    const parsed = PROBLEM_EXTENSIONS[code].parse(extensions ?? {});
+    return new SubstratError(code, message, parsed);
+}
+/**
+ * Recognise one of ours — by shape, never by `instanceof` alone.
+ *
+ * Two copies of a package in one build already make `instanceof` a coin toss; a
+ * serialising boundary makes it a certainty in the wrong direction.
+ */
+export function isSubstratError(err) {
+    return err instanceof Error && errorCodeOf(err) !== undefined;
+}
+/** Zod's issue list, flattened to the wire shape. */
+export function validationIssuesFrom(error) {
+    return error.issues.map((issue) => ({
+        path: issue.path.map(String).join('.'),
+        message: issue.message,
+    }));
+}
+/**
+ * Map any throw onto a problem body and its status — the one function replacing every
+ * hand-rolled `onError` and the control plane's regex table.
+ *
+ * **`internal` never carries `detail`.** An unrecognised throw is by definition one
+ * whose message nobody reviewed for what it discloses, and these surfaces have
+ * cross-tenant reach. The existing posture is right; this preserves it rather than
+ * quietly widening it in the name of better errors.
+ */
+export function toProblem(err, instance) {
+    if (err instanceof z.ZodError) {
+        return build('validation_failed', 'the input did not parse', instance, {
+            errors: validationIssuesFrom(err),
+        });
+    }
+    const code = errorCodeOf(err);
+    if (code !== undefined && err instanceof Error) {
+        // `internal` is still generic even when a throw asked for it by name: the rule is
+        // about what reaches a client, not about who chose the code.
+        if (code === 'internal')
+            return build('internal', undefined, instance);
+        const extensions = err.extensions ?? {};
+        return build(code, err.message, instance, extensions);
+    }
+    return build('internal', undefined, instance);
+}
+function build(code, detail, instance, extensions = {}) {
+    const { status, title } = PROBLEM_CATALOG[code];
+    return problem.parse({
+        type: problemTypeFor(code),
+        title,
+        status,
+        ...(detail === undefined ? {} : { detail, error: detail }),
+        ...(instance === undefined ? {} : { instance }),
+        code,
+        ...extensions,
+    });
+}
+/**
+ * The statuses an operation can actually answer with today, for the emitted document.
+ *
+ * `precondition_failed` (412) and `rate_limited` (429) are declared in the taxonomy
+ * so that `If-Match` (#129) and rate limiting (#130) add no vocabulary when they
+ * land — but nothing raises them yet, and documenting a failure that cannot occur is
+ * worse than documenting none. They join this list with the features that raise them.
+ *
+ * This narrows the RFC's §6 Q1 leaning ("emit the full set") on the same reasoning
+ * that motivated the question.
+ */
+export const DOCUMENTED_ERROR_CODES = [
+    'validation_failed',
+    'unauthenticated',
+    'permission_denied',
+    'forbidden',
+    'not_found',
+    'conflict',
+    'unavailable',
+    'internal',
+];
+/**
+ * An error flattened for a boundary that carries only data — the DO↔coordinator wire
+ * (#113 phase 3, `docs/rfc/error-model.md` §3).
+ *
+ * This exists because a THROW cannot carry structure across the ScopeDO hop: workerd
+ * delivers a thrown error's message and nothing else, folding `name` into it and
+ * dropping every own property (measured — `adapter-cloudflare`'s contract suite pins
+ * it). So the error stops being thrown across the boundary and starts being returned
+ * across it, as a value, which is the one shape that survives intact.
+ */
+export const wireFailure = z.object({
+    /** The original `name`, so `PermissionDenied` still reads as itself on the far side. */
+    name: z.string().min(1),
+    message: z.string(),
+    /** Absent when the throw was never ours — a bare `Error` stays a bare `Error`. */
+    code: errorCode.optional(),
+    extensions: z.record(z.string(), z.unknown()).optional(),
+});
+/** Flatten a throw for the wire, losing nothing this side of the boundary knows. */
+export function toWireFailure(err) {
+    if (!(err instanceof Error))
+        return { name: 'Error', message: String(err) };
+    const code = errorCodeOf(err);
+    if (code === undefined)
+        return { name: err.name, message: err.message };
+    return {
+        name: err.name,
+        message: err.message,
+        code,
+        extensions: { ...(err.extensions ?? {}) },
+    };
+}
+/**
+ * Rebuild a throw from the wire.
+ *
+ * The rebuilt error is a `SubstratError` carrying the original `name`, NOT an instance
+ * of the original class — contracts cannot import the kernel, and reviving arbitrary
+ * classes over a wire is a capability nobody should want. That is enough for every
+ * consumer in the repo, because they all read the code or the name, never the
+ * constructor. `instanceof PermissionDenied` stays false here and always will; it is
+ * the wrong question, and `errorCodeOf` is the right one.
+ */
+export function fromWireFailure(failure) {
+    const err = failure.code === undefined
+        ? new Error(failure.message)
+        : new SubstratError(failure.code, failure.message, { ...(failure.extensions ?? {}) });
+    err.name = failure.name;
+    return err;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9B,iBAAiB;IACjB,mBAAmB;IACnB,WAAW;IACX,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,qBAAqB;IACrB,cAAc;IACd,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AAGH,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,OAAO,GAAG,iBAAiB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC1D,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC9D,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE;IAC9C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE;IAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE;IAC5C,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC9D,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAClE,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE;IACpD,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAC1D,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE;CACqB,CAAC;AAE1E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,oFAAoF;IACpF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1B,4CAA4C;QAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxC,gFAAgF;QAChF,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5D,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5E,mBAAmB,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;CACmB,CAAC;AAKlD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,uEAAuE;IACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,wFAAwF;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iEAAiE;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,iFAAiF;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,6DAA6D;IAC7D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B;;;;;;;OAOG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,SAAS;IACf,8EAA8E;IAC9E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAwC;IAC9D,gBAAgB,EAAE,mBAAmB;IACrC,0BAA0B,EAAE,aAAa;IACzC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAY;IAChB,MAAM,CAAS;IACf,UAAU,CAAoC;IAEvD,YAAY,IAAe,EAAE,OAAe,EAAE,UAAU,GAA4B,EAAE;QACpF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,iBAAiB,GAAG,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE9D,MAAM,GAAG,GAAI,GAA0B,CAAC,IAAI,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAO,EACP,OAAe,EACf,UAA6B;IAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;IAC3F,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,GAAG,YAAY,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;AAChE,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY,EAAE,QAAiB;IACvD,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,QAAQ,EAAE;YACrE,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAC/C,kFAAkF;QAClF,6DAA6D;QAC7D,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,UAAU,GAAI,GAAqB,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,KAAK,CACZ,IAAe,EACf,MAA0B,EAC1B,QAA4B,EAC5B,UAAU,GAAsC,EAAE;IAElD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;QAC1B,KAAK;QACL,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,IAAI;QACJ,GAAG,UAAU;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyB;IAC1D,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;IACnB,WAAW;IACX,WAAW;IACX,UAAU;IACV,aAAa;IACb,UAAU;CACX,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,wFAAwF;IACxF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kFAAkF;IAClF,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI;QACJ,UAAU,EAAE,EAAE,GAAG,CAAE,GAAqB,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,OAAoB;IAClD,MAAM,GAAG,GACP,OAAO,CAAC,IAAI,KAAK,SAAS;QACxB,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -27,6 +27,7 @@ export * from './connections.js';
 export * from './control-plane.js';
 export * from './permission.js';
 export * from './events.js';
+export * from './errors.js';
 export * from './platform-request.js';
 export * from './manifest.js';
 export * from './openapi.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -27,6 +27,7 @@ export * from './connections.js';
 export * from './control-plane.js';
 export * from './permission.js';
 export * from './events.js';
+export * from './errors.js';
 export * from './platform-request.js';
 export * from './manifest.js';
 export * from './openapi.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/dist/openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mFAAmF;IACnF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,+EAA+E;AAC/E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,UAAU,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiEzB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC5C,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAM,GAC3E,UAAU,CAwBZ"}
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mFAAmF;IACnF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,+EAA+E;AAC/E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA4ED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,UAAU,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsEzB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC5C,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAM,GAC3E,UAAU,CAwBZ"}

package/dist/openapi.js

@@ -1,10 +1,62 @@
 import { z } from 'zod';
-const ERROR_RESPONSES = {
-    '400': { description: 'Validation failed — the input did not parse against the operation schema.' },
-    '401': { description: 'No session — sign in (or present a bearer token) first.' },
-    '403': { description: 'Permission denied — the caller lacks the permission this operation checks.' },
-    '404': { description: 'Unknown operation, or an entity named in the input does not exist.' },
+import { DOCUMENTED_ERROR_CODES, PROBLEM_CATALOG, problem, } from './errors.js';
+/** Where the one problem schema lives in the document, referenced from every failure. */
+const PROBLEM_SCHEMA_REF = '#/components/schemas/Problem';
+/**
+ * Prose per status. Generated descriptions would read like a type listing; these say
+ * what the caller should conclude, which is the half a schema cannot carry.
+ */
+const ERROR_STATUS_PROSE = {
+    400: 'Validation failed — the input did not parse against the operation schema.',
+    401: 'No session — sign in (or present a bearer token) first.',
+    403: 'Refused — the caller lacks the permission this operation checks, or policy forbids it.',
+    404: 'Unknown operation, or an entity named in the input does not exist.',
+    409: 'Conflicts with current state — an illegal transition, a name already taken, or a record that is immutable now.',
+    500: 'Internal error. The body carries no `detail`, deliberately — an unreviewed message is not disclosed on a multi-tenant surface.',
+    503: 'The deployment cannot serve this — a required platform facility is unconfigured.',
 };
+/** Component name per documented status — `403` → `#/components/responses/Forbidden`. */
+const ERROR_RESPONSE_NAME = {
+    400: 'ValidationFailed',
+    401: 'Unauthenticated',
+    403: 'Forbidden',
+    404: 'NotFound',
+    409: 'Conflict',
+    500: 'InternalError',
+    503: 'Unavailable',
+};
+/**
+ * The failure half of every operation, derived from the error taxonomy (#113).
+ *
+ * Bodies are `application/problem+json` (RFC 9457). Both the schema AND the responses
+ * themselves live in `components` and are referenced, which is what keeps the
+ * checked-in artifact readable: a vertical with 27 operations gains three lines per
+ * failure rather than a fully inlined body per failure per operation. `api-diff`'s
+ * document is a review artifact, so its signal-to-noise is a real constraint.
+ *
+ * Every operation currently documents the same set. Narrowing it per operation — a
+ * `409` only where a conflict is actually reachable — wants the model layer to own
+ * the declaration, and is deferred with it (error-model RFC §6 Q1).
+ */
+const DOCUMENTED_STATUSES = [
+    ...new Set(DOCUMENTED_ERROR_CODES.map((code) => PROBLEM_CATALOG[code].status)),
+].sort((a, b) => a - b);
+const ERROR_RESPONSES = Object.fromEntries(DOCUMENTED_STATUSES.map((status) => [
+    String(status),
+    { $ref: `#/components/responses/${ERROR_RESPONSE_NAME[status]}` },
+]));
+/** The definitions those references point at, written once per document. */
+const ERROR_RESPONSE_COMPONENTS = Object.fromEntries(DOCUMENTED_STATUSES.map((status) => {
+    const codes = DOCUMENTED_ERROR_CODES.filter((code) => PROBLEM_CATALOG[code].status === status);
+    const codeList = codes.map((code) => `\`${code}\``).join(' or ');
+    return [
+        ERROR_RESPONSE_NAME[status],
+        {
+            description: `${ERROR_STATUS_PROSE[status]} Carries \`code\`: ${codeList}.`,
+            content: { 'application/problem+json': { schema: { $ref: PROBLEM_SCHEMA_REF } } },
+        },
+    ];
+}));
 // The per-schema `$schema` key is dropped: OpenAPI 3.1's document-wide dialect
 // IS draft 2020-12, so repeating it on every request body is pure noise.
 const jsonSchema = (schema, io) => {
@@ -63,6 +115,11 @@ export function buildOpenApiDocument(info, catalog) {
         info,
         paths,
         components: {
+            // One problem schema, referenced by every failure response above — the same
+            // object `toProblem` builds and validates, so the documented failure shape
+            // cannot drift from the emitted one.
+            schemas: { Problem: jsonSchema(problem, 'output') },
+            responses: ERROR_RESPONSE_COMPONENTS,
             securitySchemes: {
                 // The primary path: the vertical's own session cookie. Same-origin
                 // try-it (the /api/docs page) rides it automatically — the browser

package/dist/openapi.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwDxB,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,EAAE,WAAW,EAAE,2EAA2E,EAAE;IACnG,KAAK,EAAE,EAAE,WAAW,EAAE,yDAAyD,EAAE;IACjF,KAAK,EAAE,EAAE,WAAW,EAAE,4EAA4E,EAAE;IACpG,KAAK,EAAE,EAAE,WAAW,EAAE,oEAAoE,EAAE;CACpF,CAAC;AAEX,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAE,EAAsB,EAAE,EAAE;IAC/D,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAqB,EACrB,OAAmB;IAEnB,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7D,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC,CAAC,CAAC,CAAW;YACpB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC3B,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC/D,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,GAAG,QAAQ;YACX,CAAC,IAAI,CAAC,EAAE;gBACN,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;gBAChD,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,EAAE,CAAC,KAAK;oBACV,CAAC,CAAC;wBACE,WAAW,EAAE;4BACX,QAAQ,EAAE,CAAC,EAAE,CAAC,aAAa;4BAC3B,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;yBAC3E;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,WAAW,EAAE,uBAAuB;wBACpC,GAAG,CAAC,EAAE,CAAC,MAAM;4BACX,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE;4BAClF,CAAC,CAAC,EAAE,CAAC;qBACR;oBACD,GAAG,eAAe;iBACnB;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,KAAK;QACL,UAAU,EAAE;YACV,eAAe,EAAE;gBACf,mEAAmE;gBACnE,mEAAmE;gBACnE,6CAA6C;gBAC7C,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,YAAY;oBAClB,WAAW,EACT,+IAA+I;iBAClJ;gBACD,iEAAiE;gBACjE,gEAAgE;gBAChE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;aAChE;SACF;QACD,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA4C,EAC5C,KAAK,GAAqE,EAAE;IAE5E,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAKzB,CAAC;QACF,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,GAAG;YACd,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAE,EAAyC,CAAC,IAAI;gBACjD,CAAC,CAAC,EAAE,IAAI,EAAG,EAAqD,CAAC,IAAI,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEtB,eAAe,EACf,OAAO,GACR,MAAM,aAAa,CAAC;AAwDrB,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D;;;GAGG;AACH,MAAM,kBAAkB,GAAqC;IAC3D,GAAG,EAAE,2EAA2E;IAChF,GAAG,EAAE,yDAAyD;IAC9D,GAAG,EAAE,wFAAwF;IAC7F,GAAG,EAAE,oEAAoE;IACzE,GAAG,EAAE,gHAAgH;IACrH,GAAG,EAAE,gIAAgI;IACrI,GAAG,EAAE,kFAAkF;CACxF,CAAC;AAEF,yFAAyF;AACzF,MAAM,mBAAmB,GAAqC;IAC5D,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,aAAa;CACnB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,mBAAmB,GAAsB;IAC7C,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;CAC/E,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAExB,MAAM,eAAe,GAAsC,MAAM,CAAC,WAAW,CAC3E,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClC,MAAM,CAAC,MAAM,CAAC;IACd,EAAE,IAAI,EAAE,0BAA0B,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE;CAClE,CAAC,CACH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,yBAAyB,GAAsC,MAAM,CAAC,WAAW,CACrF,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACjC,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO;QACL,mBAAmB,CAAC,MAAM,CAAW;QACrC;YACE,WAAW,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,sBAAsB,QAAQ,GAAG;YAC3E,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE;SAClF;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEF,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAE,EAAsB,EAAE,EAAE;IAC/D,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAqB,EACrB,OAAmB;IAEnB,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7D,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC,CAAC,CAAC,CAAW;YACpB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC3B,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC/D,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,GAAG,QAAQ;YACX,CAAC,IAAI,CAAC,EAAE;gBACN,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;gBAChD,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,EAAE,CAAC,KAAK;oBACV,CAAC,CAAC;wBACE,WAAW,EAAE;4BACX,QAAQ,EAAE,CAAC,EAAE,CAAC,aAAa;4BAC3B,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;yBAC3E;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,WAAW,EAAE,uBAAuB;wBACpC,GAAG,CAAC,EAAE,CAAC,MAAM;4BACX,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE;4BAClF,CAAC,CAAC,EAAE,CAAC;qBACR;oBACD,GAAG,eAAe;iBACnB;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,KAAK;QACL,UAAU,EAAE;YACV,4EAA4E;YAC5E,2EAA2E;YAC3E,qCAAqC;YACrC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;YACnD,SAAS,EAAE,yBAAyB;YACpC,eAAe,EAAE;gBACf,mEAAmE;gBACnE,mEAAmE;gBACnE,6CAA6C;gBAC7C,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,YAAY;oBAClB,WAAW,EACT,+IAA+I;iBAClJ;gBACD,iEAAiE;gBACjE,gEAAgE;gBAChE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;aAChE;SACF;QACD,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA4C,EAC5C,KAAK,GAAqE,EAAE;IAE5E,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAKzB,CAAC;QACF,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,GAAG;YACd,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAE,EAAyC,CAAC,IAAI;gBACjD,CAAC,CAAC,EAAE,IAAI,EAAG,EAAqD,CAAC,IAAI,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contracts",
-  "version": "0.78.0",
+  "version": "0.79.0",
   "description": "Substrat kernel contract schemas — Zod is the source of truth (master plan D-22); OAS/JSON Schema are emitted artifacts",
   "license": "Apache-2.0",
   "repository": {