@things-factory/shell 10.1.150 → 10.1.155

package/dist-server/utils/domain-ancestry.d.ts

@@ -0,0 +1,23 @@
+import { Domain } from '../service/domain/domain.js';
+/** The domain's id followed by its ancestors' ids, closest first. */
+export declare function getDomainIdsWithAncestors(domain: Domain): Promise<string[]>;
+/**
+ * Keeps one item per key - the one declared by the closest domain - in the order the keys first
+ * appear. `domainIds` is the closest-first list from getDomainIdsWithAncestors.
+ */
+export declare function dedupByClosestDomain<T extends {
+    domainId?: string;
+}>(items: T[], domainIds: string[], keyFn: (item: T) => string | undefined): T[];
+/** The active EnvVar of that name declared by the closest domain, or undefined. */
+export declare function lookupDomainEnvVar(domain: Domain, name: string): Promise<string | undefined>;
+/** Like lookupDomainEnvVar, and also says which domain the value came from. */
+export declare function resolveDomainEnvVar(domain: Domain, name: string): Promise<{
+    value: string;
+    domainId: string;
+    updatedAt?: Date;
+} | undefined>;
+/**
+ * Every active EnvVar visible from the domain, merged closest-wins into one record. With a prefix,
+ * only the names that start with it.
+ */
+export declare function loadDomainAttributes(domain: Domain, prefix?: string): Promise<Record<string, string>>;

package/dist-server/utils/domain-ancestry.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDomainIdsWithAncestors = getDomainIdsWithAncestors;
+exports.dedupByClosestDomain = dedupByClosestDomain;
+exports.lookupDomainEnvVar = lookupDomainEnvVar;
+exports.resolveDomainEnvVar = resolveDomainEnvVar;
+exports.loadDomainAttributes = loadDomainAttributes;
+const typeorm_1 = require("typeorm");
+const database_js_1 = require("../initializers/database.js");
+const domain_js_1 = require("../service/domain/domain.js");
+const env_var_js_1 = require("../service/env-var/env-var.js");
+/**
+ * Multi-level domain inheritance — the one place that walks a domain's ancestors.
+ *
+ * A child domain inherits what its ancestors declare, and the closest declaration wins.
+ * Callers use the ids for `domain IN (:...ids)` list queries, for picking the closest row of a
+ * single fetch, or for walking a fallback chain in order.
+ *
+ * Guarded against cycles and capped at a depth of 10.
+ */
+const MAX_ANCESTOR_DEPTH = 10;
+/** The domain's id followed by its ancestors' ids, closest first. */
+async function getDomainIdsWithAncestors(domain) {
+    const ids = [domain.id];
+    const seen = new Set([domain.id]);
+    let parentId = domain.parentId;
+    let depth = 0;
+    while (parentId && !seen.has(parentId) && depth < MAX_ANCESTOR_DEPTH) {
+        seen.add(parentId);
+        ids.push(parentId);
+        const parent = await (0, database_js_1.getRepository)(domain_js_1.Domain).findOne({ where: { id: parentId } });
+        parentId = parent?.parentId;
+        depth++;
+    }
+    return ids;
+}
+/**
+ * Keeps one item per key - the one declared by the closest domain - in the order the keys first
+ * appear. `domainIds` is the closest-first list from getDomainIdsWithAncestors.
+ */
+function dedupByClosestDomain(items, domainIds, keyFn) {
+    const rankOf = (domainId) => {
+        if (!domainId)
+            return Number.MAX_SAFE_INTEGER;
+        const idx = domainIds.indexOf(domainId);
+        return idx < 0 ? Number.MAX_SAFE_INTEGER : idx;
+    };
+    const byKey = new Map();
+    const order = [];
+    for (const item of items) {
+        const key = keyFn(item);
+        if (key == null)
+            continue;
+        const existing = byKey.get(key);
+        if (!existing) {
+            byKey.set(key, item);
+            order.push(key);
+        }
+        else if (rankOf(item.domainId) < rankOf(existing.domainId)) {
+            byKey.set(key, item);
+        }
+    }
+    return order.map(k => byKey.get(k));
+}
+/** The active EnvVar of that name declared by the closest domain, or undefined. */
+async function lookupDomainEnvVar(domain, name) {
+    return (await resolveDomainEnvVar(domain, name))?.value;
+}
+/** Like lookupDomainEnvVar, and also says which domain the value came from. */
+async function resolveDomainEnvVar(domain, name) {
+    if (!domain)
+        return undefined;
+    const ids = await getDomainIdsWithAncestors(domain);
+    const candidates = await (0, database_js_1.getRepository)(env_var_js_1.EnvVar).find({
+        where: { domain: { id: (0, typeorm_1.In)(ids) }, name, active: true }
+    });
+    const [closest] = dedupByClosestDomain(candidates, ids, () => name);
+    return closest ? { value: closest.value, domainId: closest.domainId, updatedAt: closest.updatedAt } : undefined;
+}
+/**
+ * Every active EnvVar visible from the domain, merged closest-wins into one record. With a prefix,
+ * only the names that start with it.
+ */
+async function loadDomainAttributes(domain, prefix) {
+    if (!domain)
+        return {};
+    const ids = await getDomainIdsWithAncestors(domain);
+    const all = await (0, database_js_1.getRepository)(env_var_js_1.EnvVar).find({
+        where: { domain: { id: (0, typeorm_1.In)(ids) }, active: true }
+    });
+    const visible = all.filter(e => !prefix || e.name.startsWith(prefix));
+    const result = {};
+    for (const e of dedupByClosestDomain(visible, ids, e => e.name))
+        result[e.name] = e.value;
+    return result;
+}
+//# sourceMappingURL=domain-ancestry.js.map

package/dist-server/utils/domain-ancestry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-ancestry.js","sourceRoot":"","sources":["../../server/utils/domain-ancestry.ts"],"names":[],"mappings":";;AAkBA,8DAiBC;AAMD,oDA4BC;AAGD,gDAEC;AAGD,kDAWC;AAMD,oDAUC;AAxGD,qCAA4B;AAE5B,6DAA2D;AAC3D,2DAAoD;AACpD,8DAAsD;AAEtD;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B,qEAAqE;AAC9D,KAAK,UAAU,yBAAyB,CAAC,MAAc;IAC5D,MAAM,GAAG,GAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAEzC,IAAI,QAAQ,GAAuB,MAAM,CAAC,QAAQ,CAAA;IAClD,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,OAAO,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAClB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAElB,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAa,EAAC,kBAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC/E,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAA;QAC3B,KAAK,EAAE,CAAA;IACT,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,KAAU,EACV,SAAmB,EACnB,KAAsC;IAEtC,MAAM,MAAM,GAAG,CAAC,QAA4B,EAAU,EAAE;QACtD,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAA;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACvC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAA;IAChD,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAa,CAAA;IAClC,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,GAAG,IAAI,IAAI;YAAE,SAAQ;QAEzB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACpB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAA;AACtC,CAAC;AAED,mFAAmF;AAC5E,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY;IACnE,OAAO,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAA;AACzD,CAAC;AAED,+EAA+E;AACxE,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,IAAY;IAEZ,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,MAAM,IAAA,2BAAa,EAAC,mBAAM,CAAC,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KACvD,CAAC,CAAA;IACF,MAAM,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACnE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACjH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAe;IACxE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAa,EAAC,mBAAM,CAAC,CAAC,IAAI,CAAC;QAC3C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACjD,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACrE,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;IACzF,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { In } from 'typeorm'\n\nimport { getRepository } from '../initializers/database.js'\nimport { Domain } from '../service/domain/domain.js'\nimport { EnvVar } from '../service/env-var/env-var.js'\n\n/**\n * Multi-level domain inheritance — the one place that walks a domain's ancestors.\n *\n * A child domain inherits what its ancestors declare, and the closest declaration wins.\n * Callers use the ids for `domain IN (:...ids)` list queries, for picking the closest row of a\n * single fetch, or for walking a fallback chain in order.\n *\n * Guarded against cycles and capped at a depth of 10.\n */\nconst MAX_ANCESTOR_DEPTH = 10\n\n/** The domain's id followed by its ancestors' ids, closest first. */\nexport async function getDomainIdsWithAncestors(domain: Domain): Promise<string[]> {\n  const ids: string[] = [domain.id]\n  const seen = new Set<string>([domain.id])\n\n  let parentId: string | undefined = domain.parentId\n  let depth = 0\n\n  while (parentId && !seen.has(parentId) && depth < MAX_ANCESTOR_DEPTH) {\n    seen.add(parentId)\n    ids.push(parentId)\n\n    const parent = await getRepository(Domain).findOne({ where: { id: parentId } })\n    parentId = parent?.parentId\n    depth++\n  }\n\n  return ids\n}\n\n/**\n * Keeps one item per key - the one declared by the closest domain - in the order the keys first\n * appear. `domainIds` is the closest-first list from getDomainIdsWithAncestors.\n */\nexport function dedupByClosestDomain<T extends { domainId?: string }>(\n  items: T[],\n  domainIds: string[],\n  keyFn: (item: T) => string | undefined\n): T[] {\n  const rankOf = (domainId: string | undefined): number => {\n    if (!domainId) return Number.MAX_SAFE_INTEGER\n    const idx = domainIds.indexOf(domainId)\n    return idx < 0 ? Number.MAX_SAFE_INTEGER : idx\n  }\n\n  const byKey = new Map<string, T>()\n  const order: string[] = []\n\n  for (const item of items) {\n    const key = keyFn(item)\n    if (key == null) continue\n\n    const existing = byKey.get(key)\n    if (!existing) {\n      byKey.set(key, item)\n      order.push(key)\n    } else if (rankOf(item.domainId) < rankOf(existing.domainId)) {\n      byKey.set(key, item)\n    }\n  }\n\n  return order.map(k => byKey.get(k)!)\n}\n\n/** The active EnvVar of that name declared by the closest domain, or undefined. */\nexport async function lookupDomainEnvVar(domain: Domain, name: string): Promise<string | undefined> {\n  return (await resolveDomainEnvVar(domain, name))?.value\n}\n\n/** Like lookupDomainEnvVar, and also says which domain the value came from. */\nexport async function resolveDomainEnvVar(\n  domain: Domain,\n  name: string\n): Promise<{ value: string; domainId: string; updatedAt?: Date } | undefined> {\n  if (!domain) return undefined\n  const ids = await getDomainIdsWithAncestors(domain)\n  const candidates = await getRepository(EnvVar).find({\n    where: { domain: { id: In(ids) }, name, active: true }\n  })\n  const [closest] = dedupByClosestDomain(candidates, ids, () => name)\n  return closest ? { value: closest.value, domainId: closest.domainId, updatedAt: closest.updatedAt } : undefined\n}\n\n/**\n * Every active EnvVar visible from the domain, merged closest-wins into one record. With a prefix,\n * only the names that start with it.\n */\nexport async function loadDomainAttributes(domain: Domain, prefix?: string): Promise<Record<string, string>> {\n  if (!domain) return {}\n  const ids = await getDomainIdsWithAncestors(domain)\n  const all = await getRepository(EnvVar).find({\n    where: { domain: { id: In(ids) }, active: true }\n  })\n  const visible = all.filter(e => !prefix || e.name.startsWith(prefix))\n  const result: Record<string, string> = {}\n  for (const e of dedupByClosestDomain(visible, ids, e => e.name)) result[e.name] = e.value\n  return result\n}\n"]}

package/dist-server/utils/index.d.ts

@@ -11,3 +11,5 @@ export * from './get-times-for-period.js';
 export * from './headless-pool/index.js';
 export * from './subscribe-auth.js';
 export * from './after-commit.js';
+export * from './domain-ancestry.js';
+export * from './secret-hint.js';

package/dist-server/utils/index.js

@@ -14,4 +14,6 @@ tslib_1.__exportStar(require("./get-times-for-period.js"), exports);
 tslib_1.__exportStar(require("./headless-pool/index.js"), exports);
 tslib_1.__exportStar(require("./subscribe-auth.js"), exports);
 tslib_1.__exportStar(require("./after-commit.js"), exports);
+tslib_1.__exportStar(require("./domain-ancestry.js"), exports);
+tslib_1.__exportStar(require("./secret-hint.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist-server/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/utils/index.ts"],"names":[],"mappings":";;;AAAA,0DAA+B;AAC/B,mEAAwC;AACxC,iEAAsC;AACtC,kEAAuC;AACvC,qEAA0C;AAC1C,gEAAqC;AACrC,kFAAuD;AACvD,6DAAkC;AAClC,mEAAwC;AACxC,oEAAyC;AACzC,mEAAwC;AACxC,8DAAmC;AACnC,4DAAiC","sourcesContent":["export * from './get-domain.js'\nexport * from './apply-domain-filter.js'\nexport * from './condition-builder.js'\nexport * from './list-query-builder.js'\nexport * from './list-params-converter.js'\nexport * from './publish-progress.js'\nexport * from './get-query-builder-from-list-params.js'\nexport * from './keyset-cursor.js'\nexport * from './list-param-adjuster.js'\nexport * from './get-times-for-period.js'\nexport * from './headless-pool/index.js'\nexport * from './subscribe-auth.js'\nexport * from './after-commit.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/utils/index.ts"],"names":[],"mappings":";;;AAAA,0DAA+B;AAC/B,mEAAwC;AACxC,iEAAsC;AACtC,kEAAuC;AACvC,qEAA0C;AAC1C,gEAAqC;AACrC,kFAAuD;AACvD,6DAAkC;AAClC,mEAAwC;AACxC,oEAAyC;AACzC,mEAAwC;AACxC,8DAAmC;AACnC,4DAAiC;AACjC,+DAAoC;AACpC,2DAAgC","sourcesContent":["export * from './get-domain.js'\nexport * from './apply-domain-filter.js'\nexport * from './condition-builder.js'\nexport * from './list-query-builder.js'\nexport * from './list-params-converter.js'\nexport * from './publish-progress.js'\nexport * from './get-query-builder-from-list-params.js'\nexport * from './keyset-cursor.js'\nexport * from './list-param-adjuster.js'\nexport * from './get-times-for-period.js'\nexport * from './headless-pool/index.js'\nexport * from './subscribe-auth.js'\nexport * from './after-commit.js'\nexport * from './domain-ancestry.js'\nexport * from './secret-hint.js'\n"]}

package/dist-server/utils/secret-hint.d.ts

@@ -0,0 +1,12 @@
+/**
+ * What of a withheld value may be shown, so that a person can tell which one is set (2026-10-04,
+ * user decision on ADR-0112):
+ *
+ *     16 characters or more   the last four          ••••xyze
+ *     4 to 15                 the first and the last a••••e
+ *     fewer than 4            nothing                ••••
+ *
+ * The middle is never shown, and the mask is always four dots so the length does not show either.
+ * Made here from the stored value - the value itself never leaves the server.
+ */
+export declare function secretHint(value: string | null | undefined): string | undefined;

package/dist-server/utils/secret-hint.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secretHint = secretHint;
+/**
+ * What of a withheld value may be shown, so that a person can tell which one is set (2026-10-04,
+ * user decision on ADR-0112):
+ *
+ *     16 characters or more   the last four          ••••xyze
+ *     4 to 15                 the first and the last a••••e
+ *     fewer than 4            nothing                ••••
+ *
+ * The middle is never shown, and the mask is always four dots so the length does not show either.
+ * Made here from the stored value - the value itself never leaves the server.
+ */
+function secretHint(value) {
+    if (value === null || value === undefined || value === '') {
+        return undefined;
+    }
+    const characters = Array.from(String(value));
+    const MASK = '••••';
+    if (characters.length >= 16) {
+        return MASK + characters.slice(-4).join('');
+    }
+    if (characters.length >= 4) {
+        return characters[0] + MASK + characters[characters.length - 1];
+    }
+    return MASK;
+}
+//# sourceMappingURL=secret-hint.js.map

package/dist-server/utils/secret-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-hint.js","sourceRoot":"","sources":["../../server/utils/secret-hint.ts"],"names":[],"mappings":";;AAWA,gCAeC;AA1BD;;;;;;;;;;GAUG;AACH,SAAgB,UAAU,CAAC,KAAgC;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAA;IAEnB,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["/**\n * What of a withheld value may be shown, so that a person can tell which one is set (2026-10-04,\n * user decision on ADR-0112):\n *\n *     16 characters or more   the last four          ••••xyze\n *     4 to 15                 the first and the last a••••e\n *     fewer than 4            nothing                ••••\n *\n * The middle is never shown, and the mask is always four dots so the length does not show either.\n * Made here from the stored value - the value itself never leaves the server.\n */\nexport function secretHint(value: string | null | undefined): string | undefined {\n  if (value === null || value === undefined || value === '') {\n    return undefined\n  }\n\n  const characters = Array.from(String(value))\n  const MASK = '••••'\n\n  if (characters.length >= 16) {\n    return MASK + characters.slice(-4).join('')\n  }\n  if (characters.length >= 4) {\n    return characters[0] + MASK + characters[characters.length - 1]\n  }\n  return MASK\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "10.1.150",
+  "version": "10.1.155",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -142,5 +142,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "39c135863f5f7455dcd80b8907550a1c91a86118"
+  "gitHead": "0211c9c0764a26c10151fdc7d60094fc334905ff"
 }

package/tests/database-errors-unspoken.test.ts

@@ -0,0 +1,47 @@
+import { ApolloServer } from '@apollo/server'
+import { buildSchema } from 'graphql'
+import { QueryFailedError } from 'typeorm'
+
+import { databaseErrorsUnspoken, DATABASE_FAILED } from '../server/database-errors-unspoken'
+
+/**
+ * 2026-10-12: operato-office's save toast read `저장하지 못했습니다: null value in column "original_id" of relation
+ * "transaction_histories" violates not-null constraint`. A database error answers one sentence in the request's
+ * language; any other error keeps its own message.
+ */
+const NOT_NULL = 'null value in column "original_id" of relation "transaction_histories" violates not-null constraint'
+
+const schema = buildSchema(`type Query { database: String, refused: String }`)
+const rootValue = {
+  database: () => {
+    throw new QueryFailedError('INSERT INTO "transaction_histories" ...', [], new Error(NOT_NULL))
+  },
+  refused: () => {
+    throw new Error('a counterparty needs a name')
+  }
+}
+
+const server = new ApolloServer({ schema, rootValue, plugins: [databaseErrorsUnspoken()] })
+
+beforeAll(() => server.start())
+afterAll(() => server.stop())
+
+const t = (key: string) => (key === DATABASE_FAILED ? '서버에서 처리하지 못했습니다. 관리자에게 알려 주세요.' : key)
+
+const ask = async (query: string) => {
+  const response = await server.executeOperation({ query }, { contextValue: { t } })
+  return response.body.kind === 'single' ? response.body.singleResult : undefined
+}
+
+describe('an error from the database', () => {
+  it('answers one sentence in the request language, not the database text', async () => {
+    const message = (await ask('{ database }'))?.errors?.[0]?.message
+
+    expect(message).toBe('서버에서 처리하지 못했습니다. 관리자에게 알려 주세요.')
+    expect(message).not.toContain('original_id')
+  })
+
+  it('leaves any other error as it is', async () => {
+    expect((await ask('{ refused }'))?.errors?.[0]?.message).toBe('a counterparty needs a name')
+  })
+})

package/translations/en.json

@@ -171,6 +171,7 @@
   "label.released": "released",
   "label.import": "import",
   "error.address-not-allowed": "this site does not accept connections from where you are. ask its administrator.",
+  "error.database-failed": "The server could not process this. Tell your administrator.",
   "button.undo": "undo",
   "button.redo": "redo",
   "button.fit-view": "fit to view",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "what you changed {minutes} minutes ago is still kept in this browser.",
   "text.unsaved-draft-behind": "it has been saved again since then. saving will tell you about the conflict.",
   "button.resume-editing": "resume editing",
-  "button.discard": "discard"
+  "button.discard": "discard",
+  "figure.label.motion": "Motion",
+  "figure.text.preview-needs-a-part": "add a part to see how it looks placed on a drawing."
 }

package/translations/es.json

@@ -171,6 +171,7 @@
   "label.released": "publicado",
   "label.import": "importar",
   "error.address-not-allowed": "este sitio no acepta conexiones desde su ubicación actual. consulte a su administrador.",
+  "error.database-failed": "El servidor no pudo procesar esto. Avise a su administrador.",
   "button.undo": "deshacer",
   "button.redo": "rehacer",
   "button.fit-view": "ajustar a la vista",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "los cambios que hizo hace {minutes} minutos siguen guardados en este navegador.",
   "text.unsaved-draft-behind": "desde entonces se ha vuelto a guardar. al guardar se le avisará del conflicto.",
   "button.resume-editing": "reanudar edición",
-  "button.discard": "descartar"
+  "button.discard": "descartar",
+  "figure.label.motion": "Movimiento",
+  "figure.text.preview-needs-a-part": "añada una pieza para ver cómo se ve colocada en un plano."
 }

package/translations/ja.json

@@ -171,6 +171,7 @@
   "label.released": "公開済み",
   "label.import": "インポート",
   "error.address-not-allowed": "この事業所は現在の場所からの接続を受け付けていません。事業所の管理者にお問い合わせください。",
+  "error.database-failed": "サーバーで処理できませんでした。管理者にお知らせください。",
   "button.undo": "元に戻す",
   "button.redo": "やり直す",
   "button.fit-view": "画面に合わせる",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "{minutes}分前に変更した内容がこのブラウザに残っています。",
   "text.unsaved-draft-behind": "その後、再び保存されています。保存するときに競合をお知らせします。",
   "button.resume-editing": "編集を続ける",
-  "button.discard": "破棄"
+  "button.discard": "破棄",
+  "figure.label.motion": "Motion",
+  "figure.text.preview-needs-a-part": "部品を追加すると、図面に置いたときの姿が表示されます。"
 }

package/translations/ko.json

@@ -171,6 +171,7 @@
   "label.released": "발행됨",
   "label.import": "가져오기",
   "error.address-not-allowed": "이 사업장은 지금 계신 곳에서의 접속을 받지 않습니다. 사업장 관리자에게 문의하십시오.",
+  "error.database-failed": "서버에서 처리하지 못했습니다. 관리자에게 알려 주세요.",
   "button.undo": "되돌리기",
   "button.redo": "다시 실행",
   "button.fit-view": "화면에 맞추기",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "{minutes}분 전에 고친 내용이 이 브라우저에 남아 있습니다.",
   "text.unsaved-draft-behind": "그 뒤에 다시 저장되었습니다. 저장할 때 충돌을 알려 드립니다.",
   "button.resume-editing": "이어서 편집",
-  "button.discard": "버리기"
+  "button.discard": "버리기",
+  "figure.label.motion": "움직임",
+  "figure.text.preview-needs-a-part": "부품을 추가하면 도면에 놓았을 때의 모습이 표시됩니다."
 }

package/translations/ms.json

@@ -171,6 +171,7 @@
   "label.released": "diterbitkan",
   "label.import": "import",
   "error.address-not-allowed": "tapak ini tidak menerima sambungan dari lokasi anda. sila hubungi pentadbirnya.",
+  "error.database-failed": "Pelayan tidak dapat memproses ini. Sila maklumkan kepada pentadbir anda.",
   "button.undo": "buat asal",
   "button.redo": "buat semula",
   "button.fit-view": "muat ke paparan",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "perubahan yang anda buat {minutes} minit lalu masih disimpan dalam pelayar ini.",
   "text.unsaved-draft-behind": "ia telah disimpan semula sejak itu. semasa menyimpan, anda akan dimaklumkan tentang konflik.",
   "button.resume-editing": "sambung menyunting",
-  "button.discard": "buang"
+  "button.discard": "buang",
+  "figure.label.motion": "Motion",
+  "figure.text.preview-needs-a-part": "tambah bahagian untuk melihat rupanya apabila diletakkan pada lukisan."
 }

package/translations/zh.json

@@ -171,6 +171,7 @@
   "label.released": "已发布",
   "label.import": "导入",
   "error.address-not-allowed": "此站点不接受来自您当前位置的连接。请联系站点管理员。",
+  "error.database-failed": "服务器无法处理此请求。请告知管理员。",
   "button.undo": "撤销",
   "button.redo": "重做",
   "button.fit-view": "适应视图",
@@ -182,5 +183,7 @@
   "text.unsaved-draft-kept": "您 {minutes} 分钟前所做的更改仍保留在此浏览器中。",
   "text.unsaved-draft-behind": "此后已被再次保存。保存时会提示冲突。",
   "button.resume-editing": "继续编辑",
-  "button.discard": "放弃"
+  "button.discard": "放弃",
+  "figure.label.motion": "Motion",
+  "figure.text.preview-needs-a-part": "添加部件后会显示放置到图面上的效果。"
 }