@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

package/dist/esm/databases/services/postgresql-schema-plan-diff.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql-schema-plan-diff.backend.d.ts","sourceRoot":"","sources":["../../../../../src/databases/services/postgresql-schema-plan-diff.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAA6C,MAAM,+EAA+E,CAAC;AAEnK;;;;GAIG;AACH,oBAAY,oBAAoB;IAC9B,SAAS,cAAc;IACvB,8FAA8F;IAC9F,UAAU,eAAe;IACzB,UAAU,eAAe;IACzB,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B;;;OAGG;IACH,kBAAkB,uBAAuB;IACzC;;;;OAIG;IACH,kBAAkB,uBAAuB;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,oBAAoB;IACnC;;;OAGG;IACH,+BAA+B,oCAAoC;IACnE,8EAA8E;IAC9E,iCAAiC,sCAAsC;IACvE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB;;;;;;;;OAQG;IACH,qBAAqB,0BAA0B;IAC/C,+FAA+F;IAC/F,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,iBAAiB,sBAAsB;CACxC;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,oBAAoB;IAC9B,IAAI,SAAS;IACb,WAAW,gBAAgB;IAC3B,uBAAuB,4BAA4B;CACpD;AACD;;;;;;;;;GASG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AA8MD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,GAAG,gBAAgB,EAAE,CA+BlH"}
+{"version":3,"file":"postgresql-schema-plan-diff.backend.d.ts","sourceRoot":"","sources":["../../../../../src/databases/services/postgresql-schema-plan-diff.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAA6C,MAAM,+EAA+E,CAAC;AAEnK;;;;GAIG;AACH,oBAAY,oBAAoB;IAC9B,SAAS,cAAc;IACvB,8FAA8F;IAC9F,UAAU,eAAe;IACzB,UAAU,eAAe;IACzB,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B;;;OAGG;IACH,kBAAkB,uBAAuB;IACzC;;;;OAIG;IACH,kBAAkB,uBAAuB;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,oBAAoB;IACnC;;;OAGG;IACH,+BAA+B,oCAAoC;IACnE,8EAA8E;IAC9E,iCAAiC,sCAAsC;IACvE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,UAAU,eAAe;IACzB;;;;;;;;OAQG;IACH,qBAAqB,0BAA0B;IAC/C,+FAA+F;IAC/F,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,iBAAiB,sBAAsB;CACxC;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,oBAAoB;IAC9B,IAAI,SAAS;IACb,WAAW,gBAAgB;IAC3B,uBAAuB,4BAA4B;CACpD;AACD;;;;;;;;;GASG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AA8PD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,GAAG,gBAAgB,EAAE,CA+BlH"}

package/dist/esm/databases/services/postgresql-schema-plan-diff.backend.js

@@ -215,6 +215,54 @@ function diffTable(tableName, previous, next) {
                     detail: `new column "${name}" ${after.sqlType}.`,
                 });
             }
+            /*
+             * A column ARRIVES with the properties it was declared with (#505).
+             *
+             * Everything below this point compares `before` against `after`, so it is reachable only for a
+             * column that already existed — and a NEW column `continue`s past all of it. That silently made
+             * `.isDBIndexed()` a no-op on any field added to an EXISTING table: the differ emitted
+             * `ADD_COLUMN` alone, so the database permanently lacked an index the schema declared.
+             *
+             * The initial-schema path was never affected, which is why this survived: `CREATE TABLE`
+             * renders every declared index, so the planner plainly knows how. What it did not do was carry
+             * the declaration through the DELTA path.
+             *
+             * Worse than the missing index was the silence around it. `db diff --check` compares the plan
+             * to the lockfile, and BOTH record `hasIndex: true` — the lockfile is written from the same
+             * plan — so the check was wrong in the same direction as the thing it checks and reported IN
+             * SYNC over a database missing the index. Measured 2026-09-08 on two `oauthClients` tables: the
+             * application generator emitted 4 statements, the platform generator 8, from one schema.
+             *
+             * The primary-key case is included on the same reasoning rather than on symmetry: a new column
+             * declared `isPrimaryKey` on a table that has none is additive and renderable, and skipping it
+             * left exactly the same gap one property over.
+             */
+            if (after.hasIndex === true) {
+                changes.push({
+                    changeType: SchemaPlanChangeType.ADD_INDEX,
+                    risk: SchemaPlanChangeRisk.SAFE,
+                    tableName,
+                    subject: name,
+                    detail: `plain index on the new column "${name}".`,
+                });
+            }
+            if (after.isPrimaryKey === true) {
+                changes.push(previousHadPrimaryKey
+                    ? {
+                        changeType: SchemaPlanChangeType.CHANGE_PRIMARY_KEY,
+                        risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,
+                        tableName,
+                        subject: name,
+                        detail: `the new column "${name}" is declared the primary key of a table that already has one — a constraint rebuild that touches every reference to this table; hand-author the plan.`,
+                    }
+                    : {
+                        changeType: SchemaPlanChangeType.ADD_PRIMARY_KEY,
+                        risk: SchemaPlanChangeRisk.SAFE,
+                        tableName,
+                        subject: name,
+                        detail: `the new column "${name}" becomes the primary key of a table that had none. Additive, so nothing references the constraint being built — but it WILL fail on any existing row, since a column that has just arrived holds NULL in every one of them.`,
+                    });
+            }
             continue;
         }
         if (!before || !after)

package/dist/esm/databases/services/postgresql-schema-plan-diff.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql-schema-plan-diff.backend.js","sourceRoot":"","sources":["../../../../../src/databases/services/postgresql-schema-plan-diff.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA8DX;AA9DD,WAAY,oBAAoB;IAC9B,+CAAuB,CAAA;IACvB,8FAA8F;IAC9F,iDAAyB,CAAA;IACzB,iDAAyB,CAAA;IACzB,qGAAqG;IACrG,mDAA2B,CAAA;IAC3B;;;OAGG;IACH,iEAAyC,CAAA;IACzC;;;;OAIG;IACH,iEAAyC,CAAA;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,2DAAmC,CAAA;IACnC;;;OAGG;IACH,2FAAmE,CAAA;IACnE,8EAA8E;IAC9E,+FAAuE,CAAA;IACvE,wGAAwG;IACxG,6DAAqC,CAAA;IACrC,+DAAuC,CAAA;IACvC,+CAAuB,CAAA;IACvB,iDAAyB,CAAA;IACzB;;;;;;;;OAQG;IACH,uEAA+C,CAAA;IAC/C,+FAA+F;IAC/F,yDAAiC,CAAA;IACjC,2DAAmC,CAAA;IACnC,+DAAuC,CAAA;AACzC,CAAC,EA9DW,oBAAoB,KAApB,oBAAoB,QA8D/B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,qCAAa,CAAA;IACb,mDAA2B,CAAA;IAC3B,2EAAmD,CAAA;AACrD,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAiCD;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,QAA6B;IAC3D,OAAO;QACL,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,iBAAiB,QAAQ,CAAC,gBAAgB,EAAE;QAC5C,QAAQ,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACxD,mBAAmB,QAAQ,CAAC,eAAe,EAAE;KAC9C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,4BAA4B,CAAC,KAA0B;IAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,qCAAqC,KAAK,IAAI,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,MAAM,QAAQ,GAAwB;YACpC,OAAO,EAAE,CAAC,IAAI,CAAC;YACf,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;YAChD,eAAe,EAAE,EAAE;YACnB,eAAe;SAChB,CAAC;QACF,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAwB;YACpC,OAAO,EAAE,UAAU,CAAC,MAAM;YAC1B,0FAA0F;YAC1F,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,EAAE;YACjD,eAAe;SAChB,CAAC;QACF,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,SAAS,SAAS,CAAC,SAAiB,EAAE,QAA6B,EAAE,IAAyB;IAC5F,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACjE;;;;;OAKG;IACH,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1G,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAqC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,KAAK,GAAqC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnE,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,+BAA+B;oBAChE,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,wJAAwJ;iBACzK,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,WAAW;oBAC5C,IAAI,EAAE,oBAAoB,CAAC,WAAW;oBACtC,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,WAAW,IAAI,MAAM,MAAM,CAAC,OAAO,wEAAwE;iBACpH,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,iCAAiC;oBAClE,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,sHAAsH,KAAK,CAAC,OAAO,iDAAiD;iBACrM,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,UAAU;oBAC3C,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,eAAe,IAAI,KAAK,KAAK,CAAC,OAAO,GAAG;iBACjD,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,SAAS;QAEhC,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,kBAAkB;gBACnD,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;gBAClD,SAAS;gBACT,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO,MAAM,KAAK,CAAC,OAAO,6FAA6F;aACpJ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAU,EAAE,CACtD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,qBAAqB;gBACtD,IAAI,EAAE,oBAAoB,CAAC,IAAI;gBAC/B,SAAS;gBACT,OAAO,EAAE,IAAI;gBACb,MAAM,EACJ,IAAI,IAAI,aAAa,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI;sBACxF,6EAA6E;aAClF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,qBAAqB;gBAChE,CAAC,CAAC;oBACA,UAAU,EAAE,oBAAoB,CAAC,eAAe;oBAChD,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,0KAA0K,IAAI,8CAA8C;iBAC7O;gBACD,CAAC,CAAC;oBACA,UAAU,EAAE,oBAAoB,CAAC,kBAAkB;oBACnD,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,2GAA2G;iBAC/K,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;gBACzB,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,IAAI,IAAI,EAAE;gBAChJ,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,IAAI,yBAAyB,EAAE,CAAC,CAAC;QAC5K,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,OAAO,CAAC,IAAI,CAAC;YACX,UAAU,EAAE,oBAAoB,CAAC,iBAAiB;YAClD,IAAI,EAAE,oBAAoB,CAAC,IAAI;YAC/B,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,gBAAgB,WAAW,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,eAAe,iCAAiC;SAClO,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,UAAU,EAAE,oBAAoB,CAAC,gBAAgB;YACjD,IAAI,EAAE,oBAAoB,CAAC,IAAI;YAC/B,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,gBAAgB,WAAW,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,eAAe,0FAA0F;SAC3R,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACzH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,eAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,SAAS,MAAM,OAAO,KAAK,EAAE,CAAC,CAAC;QACxM,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,SAAS,MAAM,OAAO,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAChO,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,cAAc,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,SAAS,GAAG,qCAAqC,EAAE,CAAC,CAAC;QACnR,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,IAAwB;IAC5F,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,UAAU;gBAC3C,IAAI,EAAE,oBAAoB,CAAC,WAAW;gBACtC,SAAS;gBACT,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,UAAU,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,iEAAiE;aACrI,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,SAAS;gBAC1C,IAAI,EAAE,oBAAoB,CAAC,IAAI;gBAC/B,SAAS;gBACT,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,cAAc,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,YAAY;aACnF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * The schema-plan DIFFER — pure comparison of two lockfile states into a typed change set.\n *\n * ## What this is and is not\n *\n * `diffSchemaPlanLockfiles(previous, next)` answers ONE question: what physical changes separate\n * the accepted schema from the current one. It renders no SQL, touches no database, and decides no\n * policy beyond the RISK classification each change carries. Generation (Phase 2) consumes its\n * output; `wildo db diff` prints it; `--check` fails CI when it is non-empty.\n *\n * ## Why index changes are DROP+ADD pairs rather than a \"changed\" member\n *\n * Physically, every index-semantics change (nulls distinctness, a `skipRowsMissing` predicate, the\n * retention scope) IS a drop and a recreate — PostgreSQL cannot alter an index's predicate in\n * place. Modelling them as pairs keeps the vocabulary honest to what a migration must actually do,\n * and it falls out of identity: an index's IDENTITY here includes its semantics, so a semantics\n * change makes the old identity disappear and a new one appear. (This deviates from the plan's\n * first-draft vocabulary, which sketched a `CHANGE_UNIQUE_SEMANTICS` member — recorded in the plan's\n * decision log.)\n *\n * `CHANGE_COLUMN_TYPE` stays a single member because it is the one change that is genuinely an\n * in-place `ALTER … USING` with data flowing through the cast — a pair would misrepresent it as\n * data loss.\n *\n * ## The variantConfig moves\n *\n * A column that disappears while joining the variant-swept set has NOT been deleted — its values\n * move INTO the `variantConfig` jsonb blob (and mirrored for the way out). The bare physical diff\n * reads as ADD/DROP_COLUMN, and acting on that read silently loses the data inside the blob. The\n * swept set travels in the lockfile precisely so this classification is a set lookup here rather\n * than an unanswerable question at generation time.\n */\n\nimport type { SchemaPlanLockfile, SerializedColumnPlan, SerializedTablePlan } from '~wildo-backend-lib/databases/services/postgresql-schema-plan-lockfile.backend';\n\n/**\n * The closed change vocabulary. Every member is a physical statement about the schema; the enum is\n * where per-member meaning lives (repo rule: closed semantic vocabularies get one named runtime\n * source).\n */\nexport enum SchemaPlanChangeType {\n  ADD_TABLE = 'ADD_TABLE',\n  /** The whole table, and everything in it. Always {@link SchemaPlanChangeRisk.DESTRUCTIVE}. */\n  DROP_TABLE = 'DROP_TABLE',\n  ADD_COLUMN = 'ADD_COLUMN',\n  /** A column with (potential) data. Always DESTRUCTIVE — the differ cannot see whether rows exist. */\n  DROP_COLUMN = 'DROP_COLUMN',\n  /**\n   * In-place `ALTER … TYPE … USING`. REQUIRES_DATA_MIGRATION: the `USING` expression is where\n   * truncation and coercion live, and no diff can author it — a human writes it in the draft.\n   */\n  CHANGE_COLUMN_TYPE = 'CHANGE_COLUMN_TYPE',\n  /**\n   * The column's PRIMARY-KEY role changed. Physically enormous (constraint rebuild, every FK that\n   * references it); practically forbidden without a hand-authored plan, hence\n   * REQUIRES_DATA_MIGRATION rather than a bare pair of index changes.\n   */\n  CHANGE_PRIMARY_KEY = 'CHANGE_PRIMARY_KEY',\n  /**\n   * The table had NO primary key at all, and a column now becomes it.\n   *\n   * Deliberately NOT {@link CHANGE_PRIMARY_KEY}: nothing can reference a constraint that does not\n   * exist, so there is no rebuild, no dependent foreign key, and no other column losing the role.\n   * The statement is fully derivable from the plan, so the generator RENDERS it.\n   *\n   * The distinction was measured on 2026-08-28. Three tables (`consumabletokens`, `jobexecutions`,\n   * `jobpayloadstorage`) shipped with a bare `\"_id\" text` — the adapter-parity hole since fixed in\n   * `zod-to-sql-hybrid-schema.planner.ts` — and the blanket refusal meant a whole migration had to\n   * be hand-authored, including the unrelated `ADD_TABLE` travelling with it, for SQL the renderer\n   * could have written. A refusal calibrated for the dangerous case was paid for by the safe one.\n   *\n   * SAFE by the vocabulary above: it loses nothing. It may still FAIL loudly on a table already\n   * holding NULL or duplicate values in that column — the same trade {@link ADD_UNIQUE_INDEX}\n   * makes, and precisely the state the missing constraint had been permitting.\n   */\n  ADD_PRIMARY_KEY = 'ADD_PRIMARY_KEY',\n  /**\n   * NOT a drop: the field's values move INTO the `variantConfig` jsonb blob. The generated draft\n   * must inject each row's column value into the blob BEFORE the column goes away.\n   */\n  FIELD_MOVED_INTO_VARIANT_CONFIG = 'FIELD_MOVED_INTO_VARIANT_CONFIG',\n  /** The mirror: values must be extracted from the blob into the new column. */\n  FIELD_MOVED_OUT_OF_VARIANT_CONFIG = 'FIELD_MOVED_OUT_OF_VARIANT_CONFIG',\n  /** May FAIL on existing duplicates — stated in the detail; still SAFE (fails loudly, loses nothing). */\n  ADD_UNIQUE_INDEX = 'ADD_UNIQUE_INDEX',\n  DROP_UNIQUE_INDEX = 'DROP_UNIQUE_INDEX',\n  ADD_INDEX = 'ADD_INDEX',\n  DROP_INDEX = 'DROP_INDEX',\n  /**\n   * The column's `DEFAULT` was added, removed, or changed.\n   *\n   * SAFE: `ALTER COLUMN … SET/DROP DEFAULT` is a catalog-only change that rewrites no rows and\n   * cannot fail on existing data. It is deliberately NOT retro-active — existing rows keep whatever\n   * they already hold, including the NULLs written before the default existed. A migration that\n   * also wants to backfill those rows must say so itself; inferring an `UPDATE` from a default\n   * change would silently rewrite data the differ cannot see.\n   */\n  CHANGE_COLUMN_DEFAULT = 'CHANGE_COLUMN_DEFAULT',\n  /** Renders as a column comment + drives the retention sweep; physical enough to be tracked. */\n  ADD_TTL_POLICY = 'ADD_TTL_POLICY',\n  DROP_TTL_POLICY = 'DROP_TTL_POLICY',\n  CHANGE_TTL_POLICY = 'CHANGE_TTL_POLICY',\n}\n\n/**\n * @wildo_source:part:start application.database.migration-change-risk facet:layer:backend facet:family:database facet:audience:app-developer\n *\n * What a change can COST, not how likely it is to fail.\n *\n * - SAFE: loses no data. May still fail loudly at apply time (a unique index over duplicates) —\n *   loud failure is acceptable, silent loss is not, and the vocabulary encodes exactly that line.\n * - DESTRUCTIVE: removes data. The runner refuses these without the file-level acknowledgement\n *   (`-- wildo:acknowledge-destructive`), per K5/Phase 3′.\n * - REQUIRES_DATA_MIGRATION: correct only if data MOVES — a human must author the movement in the\n *   generated draft before first apply.\n */\nexport enum SchemaPlanChangeRisk {\n  SAFE = 'SAFE',\n  DESTRUCTIVE = 'DESTRUCTIVE',\n  REQUIRES_DATA_MIGRATION = 'REQUIRES_DATA_MIGRATION',\n}\n/**\n * @wildo_source:part:end application.database.migration-change-risk\n *\n * These three words are what `wildo db diff` prints beside every change and what the generated\n * `migration.sql` writes above every statement, so an application developer reads them constantly.\n * They also decide what tooling will do UNATTENDED: `wildo local dev` reconciles an all-SAFE change\n * set on its own, and stops for anything else — because a DESTRUCTIVE statement removes rows and a\n * REQUIRES_DATA_MIGRATION statement is a generated SKELETON whose correctness is a judgement about\n * data no differ can see.\n */\n\nexport interface SchemaPlanChange {\n  changeType: SchemaPlanChangeType;\n  risk: SchemaPlanChangeRisk;\n  tableName: string;\n  /** The column, the index's column list, or the TTL field — what the change is ABOUT. */\n  subject: string;\n  /** One human sentence with the before→after facts a reviewer needs. */\n  detail: string;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Index identity\n// ─────────────────────────────────────────────────────────────────────────────\n\ninterface UniqueIndexIdentity {\n  columns: readonly string[];\n  nullsAreDistinct: boolean;\n  skipRowsMissing: readonly string[];\n  retentionScoped: boolean;\n}\n\n/**\n * Everything that changes what the index MEANS is part of its identity — which is what turns a\n * semantics change into a drop+add pair (see the header). The retention scope is table-level in the\n * plan but per-index in the physical schema (every unique index carries the predicate), so it joins\n * each identity here and a table-level flip correctly fans out into one pair per unique index.\n */\nfunction uniqueIndexIdentityKey(identity: UniqueIndexIdentity): string {\n  return [\n    identity.columns.join(','),\n    `nullsDistinct:${identity.nullsAreDistinct}`,\n    `skip:${[...identity.skipRowsMissing].sort().join(',')}`,\n    `retentionScoped:${identity.retentionScoped}`,\n  ].join('|');\n}\n\nfunction collectUniqueIndexIdentities(table: SerializedTablePlan): Map<string, UniqueIndexIdentity> {\n  const retentionScoped = table.uniquenessExcludesErasureRetainedRows === true;\n  const identities = new Map<string, UniqueIndexIdentity>();\n  for (const [name, column] of Object.entries(table.columns)) {\n    if (!column.unique) continue;\n    const identity: UniqueIndexIdentity = {\n      columns: [name],\n      nullsAreDistinct: column.unique.nullsAreDistinct,\n      skipRowsMissing: [],\n      retentionScoped,\n    };\n    identities.set(uniqueIndexIdentityKey(identity), identity);\n  }\n  for (const constraint of table.compositeUniqueConstraints ?? []) {\n    const identity: UniqueIndexIdentity = {\n      columns: constraint.fields,\n      // Composite constraints always render NULLS NOT DISTINCT (the ORGANIZATION_UNITS lesson).\n      nullsAreDistinct: false,\n      skipRowsMissing: constraint.skipRowsMissing ?? [],\n      retentionScoped,\n    };\n    identities.set(uniqueIndexIdentityKey(identity), identity);\n  }\n  return identities;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// The diff\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction diffTable(tableName: string, previous: SerializedTablePlan, next: SerializedTablePlan): SchemaPlanChange[] {\n  const changes: SchemaPlanChange[] = [];\n  const previousSwept = new Set(previous.variantSweptFields ?? []);\n  /**\n   * Asked of the WHOLE table, not of the column, because that is what separates an ADD from a MOVE.\n   * A column gaining the role while some other column held it is a rebuild every reference leans\n   * on; a column gaining it while the table had none is additive, and the two must not share a\n   * change type — see {@link SchemaPlanChangeType.ADD_PRIMARY_KEY}.\n   */\n  const previousHadPrimaryKey = Object.values(previous.columns).some((column) => column.isPrimaryKey === true);\n  const nextSwept = new Set(next.variantSweptFields ?? []);\n  const columnNames = [...new Set([...Object.keys(previous.columns), ...Object.keys(next.columns)])].sort();\n\n  for (const name of columnNames) {\n    const before: SerializedColumnPlan | undefined = previous.columns[name];\n    const after: SerializedColumnPlan | undefined = next.columns[name];\n\n    if (before && !after) {\n      if (nextSwept.has(name)) {\n        changes.push({\n          changeType: SchemaPlanChangeType.FIELD_MOVED_INTO_VARIANT_CONFIG,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" is now variant-only: its values must be INJECTED into the \"variantConfig\" jsonb blob before the column is dropped — a bare drop silently loses them.`,\n        });\n      } else {\n        changes.push({\n          changeType: SchemaPlanChangeType.DROP_COLUMN,\n          risk: SchemaPlanChangeRisk.DESTRUCTIVE,\n          tableName,\n          subject: name,\n          detail: `column \"${name}\" (${before.sqlType}) is no longer planned; dropping it destroys whatever rows hold there.`,\n        });\n      }\n      continue;\n    }\n    if (!before && after) {\n      if (previousSwept.has(name)) {\n        changes.push({\n          changeType: SchemaPlanChangeType.FIELD_MOVED_OUT_OF_VARIANT_CONFIG,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" was variant-only: existing values live inside the \"variantConfig\" jsonb blob and must be EXTRACTED into the new \"${after.sqlType}\" column, or every pre-existing row reads NULL.`,\n        });\n      } else {\n        changes.push({\n          changeType: SchemaPlanChangeType.ADD_COLUMN,\n          risk: SchemaPlanChangeRisk.SAFE,\n          tableName,\n          subject: name,\n          detail: `new column \"${name}\" ${after.sqlType}.`,\n        });\n      }\n      continue;\n    }\n    if (!before || !after) continue;\n\n    if (before.sqlType !== after.sqlType) {\n      changes.push({\n        changeType: SchemaPlanChangeType.CHANGE_COLUMN_TYPE,\n        risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n        tableName,\n        subject: name,\n        detail: `\"${name}\" ${before.sqlType} → ${after.sqlType}; the USING expression decides what existing values become, and only a human can decide it.`,\n      });\n    }\n    if ((before.defaultClause ?? '') !== (after.defaultClause ?? '')) {\n      const describe = (clause: string | undefined): string =>\n        clause ? clause.replace(/^ default /, '') : 'none';\n      changes.push({\n        changeType: SchemaPlanChangeType.CHANGE_COLUMN_DEFAULT,\n        risk: SchemaPlanChangeRisk.SAFE,\n        tableName,\n        subject: name,\n        detail:\n          `\"${name}\" default ${describe(before.defaultClause)} → ${describe(after.defaultClause)}; `\n          + 'applies to NEW rows only — existing rows keep the values they already hold.',\n      });\n    }\n    if ((before.isPrimaryKey === true) !== (after.isPrimaryKey === true)) {\n      changes.push(after.isPrimaryKey === true && !previousHadPrimaryKey\n        ? {\n          changeType: SchemaPlanChangeType.ADD_PRIMARY_KEY,\n          risk: SchemaPlanChangeRisk.SAFE,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" becomes the primary key of a table that had none — additive, so nothing references the constraint being built. May FAIL on rows already holding a NULL or duplicate \"${name}\", which is the state its absence permitted.`,\n        }\n        : {\n          changeType: SchemaPlanChangeType.CHANGE_PRIMARY_KEY,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" ${after.isPrimaryKey ? 'becomes' : 'stops being'} the primary key — a constraint rebuild that touches every reference to this table; hand-author the plan.`,\n        });\n    }\n    if ((before.hasIndex === true) !== (after.hasIndex === true)) {\n      changes.push(after.hasIndex\n        ? { changeType: SchemaPlanChangeType.ADD_INDEX, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: name, detail: `plain index on \"${name}\".` }\n        : { changeType: SchemaPlanChangeType.DROP_INDEX, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: name, detail: `plain index on \"${name}\" is no longer planned.` });\n    }\n  }\n\n  // Unique indexes — identity-keyed, so a semantics change appears as its own drop+add pair.\n  const previousUnique = collectUniqueIndexIdentities(previous);\n  const nextUnique = collectUniqueIndexIdentities(next);\n  for (const [key, identity] of [...previousUnique].sort(([a], [b]) => a.localeCompare(b))) {\n    if (nextUnique.has(key)) continue;\n    changes.push({\n      changeType: SchemaPlanChangeType.DROP_UNIQUE_INDEX,\n      risk: SchemaPlanChangeRisk.SAFE,\n      tableName,\n      subject: identity.columns.join(', '),\n      detail: `unique index on (${identity.columns.join(', ')}) [nullsDistinct=${identity.nullsAreDistinct}, skip=[${identity.skipRowsMissing.join(', ')}], retentionScoped=${identity.retentionScoped}] is gone or changed semantics.`,\n    });\n  }\n  for (const [key, identity] of [...nextUnique].sort(([a], [b]) => a.localeCompare(b))) {\n    if (previousUnique.has(key)) continue;\n    changes.push({\n      changeType: SchemaPlanChangeType.ADD_UNIQUE_INDEX,\n      risk: SchemaPlanChangeRisk.SAFE,\n      tableName,\n      subject: identity.columns.join(', '),\n      detail: `unique index on (${identity.columns.join(', ')}) [nullsDistinct=${identity.nullsAreDistinct}, skip=[${identity.skipRowsMissing.join(', ')}], retentionScoped=${identity.retentionScoped}]; applying FAILS LOUDLY if existing rows already violate it — resolve duplicates first.`,\n    });\n  }\n\n  // TTL policies, keyed by field.\n  const previousTtl = new Map((previous.ttlPolicies ?? []).map((policy) => [policy.fieldName, policy.expireAfterSeconds]));\n  const nextTtl = new Map((next.ttlPolicies ?? []).map((policy) => [policy.fieldName, policy.expireAfterSeconds]));\n  for (const [fieldName, seconds] of [...previousTtl].sort(([a], [b]) => a.localeCompare(b))) {\n    if (!nextTtl.has(fieldName)) {\n      changes.push({ changeType: SchemaPlanChangeType.DROP_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `rows no longer expire via \"${fieldName}\" (${seconds}s).` });\n    } else if (nextTtl.get(fieldName) !== seconds) {\n      changes.push({ changeType: SchemaPlanChangeType.CHANGE_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `retention window on \"${fieldName}\": ${seconds}s → ${nextTtl.get(fieldName)}s.` });\n    }\n  }\n  for (const [fieldName, seconds] of [...nextTtl].sort(([a], [b]) => a.localeCompare(b))) {\n    if (!previousTtl.has(fieldName)) {\n      changes.push({ changeType: SchemaPlanChangeType.ADD_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `rows expire ${seconds === 0 ? `when \"${fieldName}\" passes` : `${seconds}s after \"${fieldName}\"`} (enforced by the framework sweep).` });\n    }\n  }\n\n  return changes;\n}\n\n/**\n * Compare two lockfiles. Pure and deterministic: same inputs, same output, in a stable order\n * (tables sorted, columns sorted, index identities sorted) — determinism is what makes the output\n * reviewable and the `--check` comparison meaningful.\n *\n * The planner-contract version is deliberately NOT compared here: a mismatch is not a schema\n * change, it is a different STATE with its own workflow (Phase 4). Callers check it before diffing.\n */\nexport function diffSchemaPlanLockfiles(previous: SchemaPlanLockfile, next: SchemaPlanLockfile): SchemaPlanChange[] {\n  const changes: SchemaPlanChange[] = [];\n  const tableNames = [...new Set([...Object.keys(previous.tables), ...Object.keys(next.tables)])].sort();\n\n  for (const tableName of tableNames) {\n    const before = previous.tables[tableName];\n    const after = next.tables[tableName];\n    if (before && !after) {\n      changes.push({\n        changeType: SchemaPlanChangeType.DROP_TABLE,\n        risk: SchemaPlanChangeRisk.DESTRUCTIVE,\n        tableName,\n        subject: tableName,\n        detail: `table \"${tableName}\" (${Object.keys(before.columns).length} columns) is no longer planned; dropping it destroys every row.`,\n      });\n      continue;\n    }\n    if (!before && after) {\n      changes.push({\n        changeType: SchemaPlanChangeType.ADD_TABLE,\n        risk: SchemaPlanChangeRisk.SAFE,\n        tableName,\n        subject: tableName,\n        detail: `new table \"${tableName}\" (${Object.keys(after.columns).length} columns).`,\n      });\n      continue;\n    }\n    if (before && after) changes.push(...diffTable(tableName, before, after));\n  }\n\n  return changes;\n}\n"]}
+{"version":3,"file":"postgresql-schema-plan-diff.backend.js","sourceRoot":"","sources":["../../../../../src/databases/services/postgresql-schema-plan-diff.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH;;;;GAIG;AACH,MAAM,CAAN,IAAY,oBA8DX;AA9DD,WAAY,oBAAoB;IAC9B,+CAAuB,CAAA;IACvB,8FAA8F;IAC9F,iDAAyB,CAAA;IACzB,iDAAyB,CAAA;IACzB,qGAAqG;IACrG,mDAA2B,CAAA;IAC3B;;;OAGG;IACH,iEAAyC,CAAA;IACzC;;;;OAIG;IACH,iEAAyC,CAAA;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,2DAAmC,CAAA;IACnC;;;OAGG;IACH,2FAAmE,CAAA;IACnE,8EAA8E;IAC9E,+FAAuE,CAAA;IACvE,wGAAwG;IACxG,6DAAqC,CAAA;IACrC,+DAAuC,CAAA;IACvC,+CAAuB,CAAA;IACvB,iDAAyB,CAAA;IACzB;;;;;;;;OAQG;IACH,uEAA+C,CAAA;IAC/C,+FAA+F;IAC/F,yDAAiC,CAAA;IACjC,2DAAmC,CAAA;IACnC,+DAAuC,CAAA;AACzC,CAAC,EA9DW,oBAAoB,KAApB,oBAAoB,QA8D/B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,qCAAa,CAAA;IACb,mDAA2B,CAAA;IAC3B,2EAAmD,CAAA;AACrD,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAiCD;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,QAA6B;IAC3D,OAAO;QACL,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,iBAAiB,QAAQ,CAAC,gBAAgB,EAAE;QAC5C,QAAQ,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACxD,mBAAmB,QAAQ,CAAC,eAAe,EAAE;KAC9C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,4BAA4B,CAAC,KAA0B;IAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,qCAAqC,KAAK,IAAI,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,MAAM,QAAQ,GAAwB;YACpC,OAAO,EAAE,CAAC,IAAI,CAAC;YACf,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;YAChD,eAAe,EAAE,EAAE;YACnB,eAAe;SAChB,CAAC;QACF,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAwB;YACpC,OAAO,EAAE,UAAU,CAAC,MAAM;YAC1B,0FAA0F;YAC1F,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,EAAE;YACjD,eAAe;SAChB,CAAC;QACF,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,SAAS,SAAS,CAAC,SAAiB,EAAE,QAA6B,EAAE,IAAyB;IAC5F,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACjE;;;;;OAKG;IACH,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1G,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAqC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,KAAK,GAAqC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnE,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,+BAA+B;oBAChE,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,wJAAwJ;iBACzK,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,WAAW;oBAC5C,IAAI,EAAE,oBAAoB,CAAC,WAAW;oBACtC,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,WAAW,IAAI,MAAM,MAAM,CAAC,OAAO,wEAAwE;iBACpH,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,iCAAiC;oBAClE,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,sHAAsH,KAAK,CAAC,OAAO,iDAAiD;iBACrM,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,UAAU;oBAC3C,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,eAAe,IAAI,KAAK,KAAK,CAAC,OAAO,GAAG;iBACjD,CAAC,CAAC;YACL,CAAC;YACD;;;;;;;;;;;;;;;;;;;;;eAqBG;YACH,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,oBAAoB,CAAC,SAAS;oBAC1C,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,kCAAkC,IAAI,IAAI;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,qBAAqB;oBAChC,CAAC,CAAC;wBACA,UAAU,EAAE,oBAAoB,CAAC,kBAAkB;wBACnD,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;wBAClD,SAAS;wBACT,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,mBAAmB,IAAI,wJAAwJ;qBACxL;oBACD,CAAC,CAAC;wBACA,UAAU,EAAE,oBAAoB,CAAC,eAAe;wBAChD,IAAI,EAAE,oBAAoB,CAAC,IAAI;wBAC/B,SAAS;wBACT,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,mBAAmB,IAAI,8NAA8N;qBAC9P,CAAC,CAAC;YACP,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,SAAS;QAEhC,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,kBAAkB;gBACnD,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;gBAClD,SAAS;gBACT,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO,MAAM,KAAK,CAAC,OAAO,6FAA6F;aACpJ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,CAAC,MAA0B,EAAU,EAAE,CACtD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,qBAAqB;gBACtD,IAAI,EAAE,oBAAoB,CAAC,IAAI;gBAC/B,SAAS;gBACT,OAAO,EAAE,IAAI;gBACb,MAAM,EACJ,IAAI,IAAI,aAAa,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI;sBACxF,6EAA6E;aAClF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,qBAAqB;gBAChE,CAAC,CAAC;oBACA,UAAU,EAAE,oBAAoB,CAAC,eAAe;oBAChD,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,0KAA0K,IAAI,8CAA8C;iBAC7O;gBACD,CAAC,CAAC;oBACA,UAAU,EAAE,oBAAoB,CAAC,kBAAkB;oBACnD,IAAI,EAAE,oBAAoB,CAAC,uBAAuB;oBAClD,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,IAAI,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,2GAA2G;iBAC/K,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;gBACzB,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,IAAI,IAAI,EAAE;gBAChJ,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,IAAI,yBAAyB,EAAE,CAAC,CAAC;QAC5K,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,OAAO,CAAC,IAAI,CAAC;YACX,UAAU,EAAE,oBAAoB,CAAC,iBAAiB;YAClD,IAAI,EAAE,oBAAoB,CAAC,IAAI;YAC/B,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,gBAAgB,WAAW,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,eAAe,iCAAiC;SAClO,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,UAAU,EAAE,oBAAoB,CAAC,gBAAgB;YACjD,IAAI,EAAE,oBAAoB,CAAC,IAAI;YAC/B,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,gBAAgB,WAAW,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,eAAe,0FAA0F;SAC3R,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACzH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,eAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,SAAS,MAAM,OAAO,KAAK,EAAE,CAAC,CAAC;QACxM,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,SAAS,MAAM,OAAO,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAChO,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,cAAc,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,SAAS,GAAG,qCAAqC,EAAE,CAAC,CAAC;QACnR,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,IAAwB;IAC5F,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,UAAU;gBAC3C,IAAI,EAAE,oBAAoB,CAAC,WAAW;gBACtC,SAAS;gBACT,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,UAAU,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,iEAAiE;aACrI,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,oBAAoB,CAAC,SAAS;gBAC1C,IAAI,EAAE,oBAAoB,CAAC,IAAI;gBAC/B,SAAS;gBACT,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,cAAc,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,YAAY;aACnF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * The schema-plan DIFFER — pure comparison of two lockfile states into a typed change set.\n *\n * ## What this is and is not\n *\n * `diffSchemaPlanLockfiles(previous, next)` answers ONE question: what physical changes separate\n * the accepted schema from the current one. It renders no SQL, touches no database, and decides no\n * policy beyond the RISK classification each change carries. Generation (Phase 2) consumes its\n * output; `wildo db diff` prints it; `--check` fails CI when it is non-empty.\n *\n * ## Why index changes are DROP+ADD pairs rather than a \"changed\" member\n *\n * Physically, every index-semantics change (nulls distinctness, a `skipRowsMissing` predicate, the\n * retention scope) IS a drop and a recreate — PostgreSQL cannot alter an index's predicate in\n * place. Modelling them as pairs keeps the vocabulary honest to what a migration must actually do,\n * and it falls out of identity: an index's IDENTITY here includes its semantics, so a semantics\n * change makes the old identity disappear and a new one appear. (This deviates from the plan's\n * first-draft vocabulary, which sketched a `CHANGE_UNIQUE_SEMANTICS` member — recorded in the plan's\n * decision log.)\n *\n * `CHANGE_COLUMN_TYPE` stays a single member because it is the one change that is genuinely an\n * in-place `ALTER … USING` with data flowing through the cast — a pair would misrepresent it as\n * data loss.\n *\n * ## The variantConfig moves\n *\n * A column that disappears while joining the variant-swept set has NOT been deleted — its values\n * move INTO the `variantConfig` jsonb blob (and mirrored for the way out). The bare physical diff\n * reads as ADD/DROP_COLUMN, and acting on that read silently loses the data inside the blob. The\n * swept set travels in the lockfile precisely so this classification is a set lookup here rather\n * than an unanswerable question at generation time.\n */\n\nimport type { SchemaPlanLockfile, SerializedColumnPlan, SerializedTablePlan } from '~wildo-backend-lib/databases/services/postgresql-schema-plan-lockfile.backend';\n\n/**\n * The closed change vocabulary. Every member is a physical statement about the schema; the enum is\n * where per-member meaning lives (repo rule: closed semantic vocabularies get one named runtime\n * source).\n */\nexport enum SchemaPlanChangeType {\n  ADD_TABLE = 'ADD_TABLE',\n  /** The whole table, and everything in it. Always {@link SchemaPlanChangeRisk.DESTRUCTIVE}. */\n  DROP_TABLE = 'DROP_TABLE',\n  ADD_COLUMN = 'ADD_COLUMN',\n  /** A column with (potential) data. Always DESTRUCTIVE — the differ cannot see whether rows exist. */\n  DROP_COLUMN = 'DROP_COLUMN',\n  /**\n   * In-place `ALTER … TYPE … USING`. REQUIRES_DATA_MIGRATION: the `USING` expression is where\n   * truncation and coercion live, and no diff can author it — a human writes it in the draft.\n   */\n  CHANGE_COLUMN_TYPE = 'CHANGE_COLUMN_TYPE',\n  /**\n   * The column's PRIMARY-KEY role changed. Physically enormous (constraint rebuild, every FK that\n   * references it); practically forbidden without a hand-authored plan, hence\n   * REQUIRES_DATA_MIGRATION rather than a bare pair of index changes.\n   */\n  CHANGE_PRIMARY_KEY = 'CHANGE_PRIMARY_KEY',\n  /**\n   * The table had NO primary key at all, and a column now becomes it.\n   *\n   * Deliberately NOT {@link CHANGE_PRIMARY_KEY}: nothing can reference a constraint that does not\n   * exist, so there is no rebuild, no dependent foreign key, and no other column losing the role.\n   * The statement is fully derivable from the plan, so the generator RENDERS it.\n   *\n   * The distinction was measured on 2026-08-28. Three tables (`consumabletokens`, `jobexecutions`,\n   * `jobpayloadstorage`) shipped with a bare `\"_id\" text` — the adapter-parity hole since fixed in\n   * `zod-to-sql-hybrid-schema.planner.ts` — and the blanket refusal meant a whole migration had to\n   * be hand-authored, including the unrelated `ADD_TABLE` travelling with it, for SQL the renderer\n   * could have written. A refusal calibrated for the dangerous case was paid for by the safe one.\n   *\n   * SAFE by the vocabulary above: it loses nothing. It may still FAIL loudly on a table already\n   * holding NULL or duplicate values in that column — the same trade {@link ADD_UNIQUE_INDEX}\n   * makes, and precisely the state the missing constraint had been permitting.\n   */\n  ADD_PRIMARY_KEY = 'ADD_PRIMARY_KEY',\n  /**\n   * NOT a drop: the field's values move INTO the `variantConfig` jsonb blob. The generated draft\n   * must inject each row's column value into the blob BEFORE the column goes away.\n   */\n  FIELD_MOVED_INTO_VARIANT_CONFIG = 'FIELD_MOVED_INTO_VARIANT_CONFIG',\n  /** The mirror: values must be extracted from the blob into the new column. */\n  FIELD_MOVED_OUT_OF_VARIANT_CONFIG = 'FIELD_MOVED_OUT_OF_VARIANT_CONFIG',\n  /** May FAIL on existing duplicates — stated in the detail; still SAFE (fails loudly, loses nothing). */\n  ADD_UNIQUE_INDEX = 'ADD_UNIQUE_INDEX',\n  DROP_UNIQUE_INDEX = 'DROP_UNIQUE_INDEX',\n  ADD_INDEX = 'ADD_INDEX',\n  DROP_INDEX = 'DROP_INDEX',\n  /**\n   * The column's `DEFAULT` was added, removed, or changed.\n   *\n   * SAFE: `ALTER COLUMN … SET/DROP DEFAULT` is a catalog-only change that rewrites no rows and\n   * cannot fail on existing data. It is deliberately NOT retro-active — existing rows keep whatever\n   * they already hold, including the NULLs written before the default existed. A migration that\n   * also wants to backfill those rows must say so itself; inferring an `UPDATE` from a default\n   * change would silently rewrite data the differ cannot see.\n   */\n  CHANGE_COLUMN_DEFAULT = 'CHANGE_COLUMN_DEFAULT',\n  /** Renders as a column comment + drives the retention sweep; physical enough to be tracked. */\n  ADD_TTL_POLICY = 'ADD_TTL_POLICY',\n  DROP_TTL_POLICY = 'DROP_TTL_POLICY',\n  CHANGE_TTL_POLICY = 'CHANGE_TTL_POLICY',\n}\n\n/**\n * @wildo_source:part:start application.database.migration-change-risk facet:layer:backend facet:family:database facet:audience:app-developer\n *\n * What a change can COST, not how likely it is to fail.\n *\n * - SAFE: loses no data. May still fail loudly at apply time (a unique index over duplicates) —\n *   loud failure is acceptable, silent loss is not, and the vocabulary encodes exactly that line.\n * - DESTRUCTIVE: removes data. The runner refuses these without the file-level acknowledgement\n *   (`-- wildo:acknowledge-destructive`), per K5/Phase 3′.\n * - REQUIRES_DATA_MIGRATION: correct only if data MOVES — a human must author the movement in the\n *   generated draft before first apply.\n */\nexport enum SchemaPlanChangeRisk {\n  SAFE = 'SAFE',\n  DESTRUCTIVE = 'DESTRUCTIVE',\n  REQUIRES_DATA_MIGRATION = 'REQUIRES_DATA_MIGRATION',\n}\n/**\n * @wildo_source:part:end application.database.migration-change-risk\n *\n * These three words are what `wildo db diff` prints beside every change and what the generated\n * `migration.sql` writes above every statement, so an application developer reads them constantly.\n * They also decide what tooling will do UNATTENDED: `wildo local dev` reconciles an all-SAFE change\n * set on its own, and stops for anything else — because a DESTRUCTIVE statement removes rows and a\n * REQUIRES_DATA_MIGRATION statement is a generated SKELETON whose correctness is a judgement about\n * data no differ can see.\n */\n\nexport interface SchemaPlanChange {\n  changeType: SchemaPlanChangeType;\n  risk: SchemaPlanChangeRisk;\n  tableName: string;\n  /** The column, the index's column list, or the TTL field — what the change is ABOUT. */\n  subject: string;\n  /** One human sentence with the before→after facts a reviewer needs. */\n  detail: string;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Index identity\n// ─────────────────────────────────────────────────────────────────────────────\n\ninterface UniqueIndexIdentity {\n  columns: readonly string[];\n  nullsAreDistinct: boolean;\n  skipRowsMissing: readonly string[];\n  retentionScoped: boolean;\n}\n\n/**\n * Everything that changes what the index MEANS is part of its identity — which is what turns a\n * semantics change into a drop+add pair (see the header). The retention scope is table-level in the\n * plan but per-index in the physical schema (every unique index carries the predicate), so it joins\n * each identity here and a table-level flip correctly fans out into one pair per unique index.\n */\nfunction uniqueIndexIdentityKey(identity: UniqueIndexIdentity): string {\n  return [\n    identity.columns.join(','),\n    `nullsDistinct:${identity.nullsAreDistinct}`,\n    `skip:${[...identity.skipRowsMissing].sort().join(',')}`,\n    `retentionScoped:${identity.retentionScoped}`,\n  ].join('|');\n}\n\nfunction collectUniqueIndexIdentities(table: SerializedTablePlan): Map<string, UniqueIndexIdentity> {\n  const retentionScoped = table.uniquenessExcludesErasureRetainedRows === true;\n  const identities = new Map<string, UniqueIndexIdentity>();\n  for (const [name, column] of Object.entries(table.columns)) {\n    if (!column.unique) continue;\n    const identity: UniqueIndexIdentity = {\n      columns: [name],\n      nullsAreDistinct: column.unique.nullsAreDistinct,\n      skipRowsMissing: [],\n      retentionScoped,\n    };\n    identities.set(uniqueIndexIdentityKey(identity), identity);\n  }\n  for (const constraint of table.compositeUniqueConstraints ?? []) {\n    const identity: UniqueIndexIdentity = {\n      columns: constraint.fields,\n      // Composite constraints always render NULLS NOT DISTINCT (the ORGANIZATION_UNITS lesson).\n      nullsAreDistinct: false,\n      skipRowsMissing: constraint.skipRowsMissing ?? [],\n      retentionScoped,\n    };\n    identities.set(uniqueIndexIdentityKey(identity), identity);\n  }\n  return identities;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// The diff\n// ─────────────────────────────────────────────────────────────────────────────\n\nfunction diffTable(tableName: string, previous: SerializedTablePlan, next: SerializedTablePlan): SchemaPlanChange[] {\n  const changes: SchemaPlanChange[] = [];\n  const previousSwept = new Set(previous.variantSweptFields ?? []);\n  /**\n   * Asked of the WHOLE table, not of the column, because that is what separates an ADD from a MOVE.\n   * A column gaining the role while some other column held it is a rebuild every reference leans\n   * on; a column gaining it while the table had none is additive, and the two must not share a\n   * change type — see {@link SchemaPlanChangeType.ADD_PRIMARY_KEY}.\n   */\n  const previousHadPrimaryKey = Object.values(previous.columns).some((column) => column.isPrimaryKey === true);\n  const nextSwept = new Set(next.variantSweptFields ?? []);\n  const columnNames = [...new Set([...Object.keys(previous.columns), ...Object.keys(next.columns)])].sort();\n\n  for (const name of columnNames) {\n    const before: SerializedColumnPlan | undefined = previous.columns[name];\n    const after: SerializedColumnPlan | undefined = next.columns[name];\n\n    if (before && !after) {\n      if (nextSwept.has(name)) {\n        changes.push({\n          changeType: SchemaPlanChangeType.FIELD_MOVED_INTO_VARIANT_CONFIG,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" is now variant-only: its values must be INJECTED into the \"variantConfig\" jsonb blob before the column is dropped — a bare drop silently loses them.`,\n        });\n      } else {\n        changes.push({\n          changeType: SchemaPlanChangeType.DROP_COLUMN,\n          risk: SchemaPlanChangeRisk.DESTRUCTIVE,\n          tableName,\n          subject: name,\n          detail: `column \"${name}\" (${before.sqlType}) is no longer planned; dropping it destroys whatever rows hold there.`,\n        });\n      }\n      continue;\n    }\n    if (!before && after) {\n      if (previousSwept.has(name)) {\n        changes.push({\n          changeType: SchemaPlanChangeType.FIELD_MOVED_OUT_OF_VARIANT_CONFIG,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" was variant-only: existing values live inside the \"variantConfig\" jsonb blob and must be EXTRACTED into the new \"${after.sqlType}\" column, or every pre-existing row reads NULL.`,\n        });\n      } else {\n        changes.push({\n          changeType: SchemaPlanChangeType.ADD_COLUMN,\n          risk: SchemaPlanChangeRisk.SAFE,\n          tableName,\n          subject: name,\n          detail: `new column \"${name}\" ${after.sqlType}.`,\n        });\n      }\n      /*\n       * A column ARRIVES with the properties it was declared with (#505).\n       *\n       * Everything below this point compares `before` against `after`, so it is reachable only for a\n       * column that already existed — and a NEW column `continue`s past all of it. That silently made\n       * `.isDBIndexed()` a no-op on any field added to an EXISTING table: the differ emitted\n       * `ADD_COLUMN` alone, so the database permanently lacked an index the schema declared.\n       *\n       * The initial-schema path was never affected, which is why this survived: `CREATE TABLE`\n       * renders every declared index, so the planner plainly knows how. What it did not do was carry\n       * the declaration through the DELTA path.\n       *\n       * Worse than the missing index was the silence around it. `db diff --check` compares the plan\n       * to the lockfile, and BOTH record `hasIndex: true` — the lockfile is written from the same\n       * plan — so the check was wrong in the same direction as the thing it checks and reported IN\n       * SYNC over a database missing the index. Measured 2026-09-08 on two `oauthClients` tables: the\n       * application generator emitted 4 statements, the platform generator 8, from one schema.\n       *\n       * The primary-key case is included on the same reasoning rather than on symmetry: a new column\n       * declared `isPrimaryKey` on a table that has none is additive and renderable, and skipping it\n       * left exactly the same gap one property over.\n       */\n      if (after.hasIndex === true) {\n        changes.push({\n          changeType: SchemaPlanChangeType.ADD_INDEX,\n          risk: SchemaPlanChangeRisk.SAFE,\n          tableName,\n          subject: name,\n          detail: `plain index on the new column \"${name}\".`,\n        });\n      }\n      if (after.isPrimaryKey === true) {\n        changes.push(previousHadPrimaryKey\n          ? {\n            changeType: SchemaPlanChangeType.CHANGE_PRIMARY_KEY,\n            risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n            tableName,\n            subject: name,\n            detail: `the new column \"${name}\" is declared the primary key of a table that already has one — a constraint rebuild that touches every reference to this table; hand-author the plan.`,\n          }\n          : {\n            changeType: SchemaPlanChangeType.ADD_PRIMARY_KEY,\n            risk: SchemaPlanChangeRisk.SAFE,\n            tableName,\n            subject: name,\n            detail: `the new column \"${name}\" becomes the primary key of a table that had none. Additive, so nothing references the constraint being built — but it WILL fail on any existing row, since a column that has just arrived holds NULL in every one of them.`,\n          });\n      }\n      continue;\n    }\n    if (!before || !after) continue;\n\n    if (before.sqlType !== after.sqlType) {\n      changes.push({\n        changeType: SchemaPlanChangeType.CHANGE_COLUMN_TYPE,\n        risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n        tableName,\n        subject: name,\n        detail: `\"${name}\" ${before.sqlType} → ${after.sqlType}; the USING expression decides what existing values become, and only a human can decide it.`,\n      });\n    }\n    if ((before.defaultClause ?? '') !== (after.defaultClause ?? '')) {\n      const describe = (clause: string | undefined): string =>\n        clause ? clause.replace(/^ default /, '') : 'none';\n      changes.push({\n        changeType: SchemaPlanChangeType.CHANGE_COLUMN_DEFAULT,\n        risk: SchemaPlanChangeRisk.SAFE,\n        tableName,\n        subject: name,\n        detail:\n          `\"${name}\" default ${describe(before.defaultClause)} → ${describe(after.defaultClause)}; `\n          + 'applies to NEW rows only — existing rows keep the values they already hold.',\n      });\n    }\n    if ((before.isPrimaryKey === true) !== (after.isPrimaryKey === true)) {\n      changes.push(after.isPrimaryKey === true && !previousHadPrimaryKey\n        ? {\n          changeType: SchemaPlanChangeType.ADD_PRIMARY_KEY,\n          risk: SchemaPlanChangeRisk.SAFE,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" becomes the primary key of a table that had none — additive, so nothing references the constraint being built. May FAIL on rows already holding a NULL or duplicate \"${name}\", which is the state its absence permitted.`,\n        }\n        : {\n          changeType: SchemaPlanChangeType.CHANGE_PRIMARY_KEY,\n          risk: SchemaPlanChangeRisk.REQUIRES_DATA_MIGRATION,\n          tableName,\n          subject: name,\n          detail: `\"${name}\" ${after.isPrimaryKey ? 'becomes' : 'stops being'} the primary key — a constraint rebuild that touches every reference to this table; hand-author the plan.`,\n        });\n    }\n    if ((before.hasIndex === true) !== (after.hasIndex === true)) {\n      changes.push(after.hasIndex\n        ? { changeType: SchemaPlanChangeType.ADD_INDEX, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: name, detail: `plain index on \"${name}\".` }\n        : { changeType: SchemaPlanChangeType.DROP_INDEX, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: name, detail: `plain index on \"${name}\" is no longer planned.` });\n    }\n  }\n\n  // Unique indexes — identity-keyed, so a semantics change appears as its own drop+add pair.\n  const previousUnique = collectUniqueIndexIdentities(previous);\n  const nextUnique = collectUniqueIndexIdentities(next);\n  for (const [key, identity] of [...previousUnique].sort(([a], [b]) => a.localeCompare(b))) {\n    if (nextUnique.has(key)) continue;\n    changes.push({\n      changeType: SchemaPlanChangeType.DROP_UNIQUE_INDEX,\n      risk: SchemaPlanChangeRisk.SAFE,\n      tableName,\n      subject: identity.columns.join(', '),\n      detail: `unique index on (${identity.columns.join(', ')}) [nullsDistinct=${identity.nullsAreDistinct}, skip=[${identity.skipRowsMissing.join(', ')}], retentionScoped=${identity.retentionScoped}] is gone or changed semantics.`,\n    });\n  }\n  for (const [key, identity] of [...nextUnique].sort(([a], [b]) => a.localeCompare(b))) {\n    if (previousUnique.has(key)) continue;\n    changes.push({\n      changeType: SchemaPlanChangeType.ADD_UNIQUE_INDEX,\n      risk: SchemaPlanChangeRisk.SAFE,\n      tableName,\n      subject: identity.columns.join(', '),\n      detail: `unique index on (${identity.columns.join(', ')}) [nullsDistinct=${identity.nullsAreDistinct}, skip=[${identity.skipRowsMissing.join(', ')}], retentionScoped=${identity.retentionScoped}]; applying FAILS LOUDLY if existing rows already violate it — resolve duplicates first.`,\n    });\n  }\n\n  // TTL policies, keyed by field.\n  const previousTtl = new Map((previous.ttlPolicies ?? []).map((policy) => [policy.fieldName, policy.expireAfterSeconds]));\n  const nextTtl = new Map((next.ttlPolicies ?? []).map((policy) => [policy.fieldName, policy.expireAfterSeconds]));\n  for (const [fieldName, seconds] of [...previousTtl].sort(([a], [b]) => a.localeCompare(b))) {\n    if (!nextTtl.has(fieldName)) {\n      changes.push({ changeType: SchemaPlanChangeType.DROP_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `rows no longer expire via \"${fieldName}\" (${seconds}s).` });\n    } else if (nextTtl.get(fieldName) !== seconds) {\n      changes.push({ changeType: SchemaPlanChangeType.CHANGE_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `retention window on \"${fieldName}\": ${seconds}s → ${nextTtl.get(fieldName)}s.` });\n    }\n  }\n  for (const [fieldName, seconds] of [...nextTtl].sort(([a], [b]) => a.localeCompare(b))) {\n    if (!previousTtl.has(fieldName)) {\n      changes.push({ changeType: SchemaPlanChangeType.ADD_TTL_POLICY, risk: SchemaPlanChangeRisk.SAFE, tableName, subject: fieldName, detail: `rows expire ${seconds === 0 ? `when \"${fieldName}\" passes` : `${seconds}s after \"${fieldName}\"`} (enforced by the framework sweep).` });\n    }\n  }\n\n  return changes;\n}\n\n/**\n * Compare two lockfiles. Pure and deterministic: same inputs, same output, in a stable order\n * (tables sorted, columns sorted, index identities sorted) — determinism is what makes the output\n * reviewable and the `--check` comparison meaningful.\n *\n * The planner-contract version is deliberately NOT compared here: a mismatch is not a schema\n * change, it is a different STATE with its own workflow (Phase 4). Callers check it before diffing.\n */\nexport function diffSchemaPlanLockfiles(previous: SchemaPlanLockfile, next: SchemaPlanLockfile): SchemaPlanChange[] {\n  const changes: SchemaPlanChange[] = [];\n  const tableNames = [...new Set([...Object.keys(previous.tables), ...Object.keys(next.tables)])].sort();\n\n  for (const tableName of tableNames) {\n    const before = previous.tables[tableName];\n    const after = next.tables[tableName];\n    if (before && !after) {\n      changes.push({\n        changeType: SchemaPlanChangeType.DROP_TABLE,\n        risk: SchemaPlanChangeRisk.DESTRUCTIVE,\n        tableName,\n        subject: tableName,\n        detail: `table \"${tableName}\" (${Object.keys(before.columns).length} columns) is no longer planned; dropping it destroys every row.`,\n      });\n      continue;\n    }\n    if (!before && after) {\n      changes.push({\n        changeType: SchemaPlanChangeType.ADD_TABLE,\n        risk: SchemaPlanChangeRisk.SAFE,\n        tableName,\n        subject: tableName,\n        detail: `new table \"${tableName}\" (${Object.keys(after.columns).length} columns).`,\n      });\n      continue;\n    }\n    if (before && after) changes.push(...diffTable(tableName, before, after));\n  }\n\n  return changes;\n}\n"]}

package/dist/esm/errors/services/error-builder.backend.service.d.ts

@@ -46,7 +46,18 @@ export declare class ErrorBuilderBackendService {
      */
     private extractFieldLevelValidationDetail;
     /**
-     * Build an error with contextual user guidance (Phase 1b).
+     * @wildo_source:part:start saas.backend.error-builder.user-guidance facet:layer:backend facet:audience:app-developer
+     *
+     * Build an error with contextual user guidance.
+     *
+     * Reach for this instead of a bare `buildError` whenever the person who hits the failure could DO
+     * something about it. A typed error tells a caller what went wrong; guidance tells a human what to
+     * do next, and the frontend renders it from `ErrorResponse.error.userGuidance`.
+     *
+     * ⚠️ **Prefer `buildErrorWithGuidanceKey`.** The strings you pass here are rendered verbatim, so a
+     * guidance written this way is English forever — the key variant resolves labels under
+     * `errors_guidance.{guidanceKey}.{field}` and is translated like every other user-facing string.
+     * Use the raw form only for a failure no user will read, or as the fallback beneath a key.
      *
      * The guidance is attached to the error and will be included in the
      * `ErrorResponse.error.userGuidance` field for the frontend to render.
@@ -88,6 +99,7 @@ export declare class ErrorBuilderBackendService {
         context?: Record<string, any>;
         stack?: string;
     }): WildoError_Backend;
+    /** @wildo_source:part:end saas.backend.error-builder.user-guidance */
     wildoErrorToSimpleString(wildoError: any): string;
     /**
      * Sanitize an error for client-facing HTTP responses.

package/dist/esm/errors/services/error-builder.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-builder.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,kBAAkB,EAClB,2BAA2B,EAM3B,iBAAiB,EAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAGvG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAI7F;;;GAGG;AACH,qBACa,0BAA0B;IAKA,OAAO,CAAC,MAAM;IAJnD,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAIpC,MAAM,EAAE,aAAa;IAMlE;;OAEG;IACI,UAAU,CACf,SAAS,EAAE,SAAS,EACpB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACxC,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,sBAAsB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACnD,GACL,kBAAkB;IAkDd,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,OAAO,GAAE;QAC/F,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,sBAAsB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACnD,GAAG,kBAAkB;IAsE3B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,iCAAiC;IA6CzC;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,sBAAsB,CAC3B,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,EACnD,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;KACX,GACL,kBAAkB;IAMrB;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,EACnD,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,EACrD,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;KACX,GACL,kBAAkB;IAId,wBAAwB,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM;IAcxD;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAAU,EAAE,kBAAkB,GAAG,kBAAkB;YA2FnE,qBAAqB;IA4CnC;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;;OAGG;IACI,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS;CA+EnD"}
+{"version":3,"file":"error-builder.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,kBAAkB,EAClB,2BAA2B,EAM3B,iBAAiB,EAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAGvG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAI7F;;;GAGG;AACH,qBACa,0BAA0B;IAKA,OAAO,CAAC,MAAM;IAJnD,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAIpC,MAAM,EAAE,aAAa;IAMlE;;OAEG;IACI,UAAU,CACf,SAAS,EAAE,SAAS,EACpB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACxC,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,sBAAsB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACnD,GACL,kBAAkB;IAkDd,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,OAAO,GAAE;QAC/F,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,sBAAsB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACnD,GAAG,kBAAkB;IAsE3B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,iCAAiC;IA6CzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACI,sBAAsB,CAC3B,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,EACnD,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;KACX,GACL,kBAAkB;IAMrB;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,EACnD,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAM,EACrD,OAAO,GAAE;QACP,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;KACX,GACL,kBAAkB;IAGrB,sEAAsE;IAE/D,wBAAwB,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM;IAcxD;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAAU,EAAE,kBAAkB,GAAG,kBAAkB;YA2FnE,qBAAqB;IA4CnC;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;;OAGG;IACI,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS;CA+EnD"}

package/dist/esm/errors/services/error-builder.backend.service.js

@@ -190,7 +190,18 @@ let ErrorBuilderBackendService = class ErrorBuilderBackendService {
         return undefined;
     }
     /**
-     * Build an error with contextual user guidance (Phase 1b).
+     * @wildo_source:part:start saas.backend.error-builder.user-guidance facet:layer:backend facet:audience:app-developer
+     *
+     * Build an error with contextual user guidance.
+     *
+     * Reach for this instead of a bare `buildError` whenever the person who hits the failure could DO
+     * something about it. A typed error tells a caller what went wrong; guidance tells a human what to
+     * do next, and the frontend renders it from `ErrorResponse.error.userGuidance`.
+     *
+     * ⚠️ **Prefer `buildErrorWithGuidanceKey`.** The strings you pass here are rendered verbatim, so a
+     * guidance written this way is English forever — the key variant resolves labels under
+     * `errors_guidance.{guidanceKey}.{field}` and is translated like every other user-facing string.
+     * Use the raw form only for a failure no user will read, or as the fallback beneath a key.
      *
      * The guidance is attached to the error and will be included in the
      * `ErrorResponse.error.userGuidance` field for the frontend to render.
@@ -230,6 +241,7 @@ let ErrorBuilderBackendService = class ErrorBuilderBackendService {
     buildErrorWithGuidanceKey(errorType, executionContext, guidanceKey, guidance = {}, options = {}) {
         return this.buildErrorWithGuidance(errorType, executionContext, { ...guidance, guidanceKey }, options);
     }
+    /** @wildo_source:part:end saas.backend.error-builder.user-guidance */
     wildoErrorToSimpleString(wildoError) {
         const isWildoError = wildoError && typeof wildoError === 'object' && 'statusCode' in wildoError && 'backendActions' in wildoError;
         if (!isWildoError) {

package/dist/esm/errors/services/error-builder.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-builder.backend.service.js","sourceRoot":"","sources":["../../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,kBAAkB,EAGlB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAElC,sBAAsB,EACtB,uBAAuB,EAEvB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAGnH;;;GAGG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAKQ;IAJnC,QAAQ,CAA+D;IAEjF,YAE6C,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEhE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACI,UAAU,CACf,SAAoB,EACpB,gBAAwC,EACxC,UAMI,EAAE;QAEN,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;QAC9C,MAAM,uBAAuB,GAAG,OAAO,CAAC,kBAAkB;YACxD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,CACrC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAC5D,CAAC;QAEJ,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,kCAAkC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,SAA2D,CAAC;YACrJ,CAAC,CAAC,SAAS,CAAC;QAGd,uEAAuE;QACvE,kFAAkF;QAClF,MAAM,UAAU,GAAuB;YACrC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,gBAAgB;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,uBAAuB;YACvC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,eAAe,CAAC,6BAA6B;YACvG,UAAU;YACV,qBAAqB,EAAE,eAAe,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,IAAI;YAC3F,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,uBAAuB,CAAC,WAAW;YAC/E,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,CAAC;YAC3C,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,IAAI;YAClD,SAAS,EAAE,eAAe,CAAC,SAAS,IAAI,IAAI;YAC5C,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,SAAS;YACzD,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,SAAS;YAC3D,oGAAoG;YACpG,qGAAqG;YACrG,mGAAmG;YACnG,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,uBAAuB,EAAE;YAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACtC,CAAC;QAEF,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,wCAAwC;YACxC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,sBAAsB,CAAC,KAAc,EAAE,gBAAwC,EAAE,UAKpF,EAAE;QACJ,kFAAkF;QAClF,EAAE;QACF,qFAAqF;QACrF,sFAAsF;QACtF,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,6DAA6D;QAC7D,EAAE;QACF,mFAAmF;QACnF,0FAA0F;QAC1F,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,gBAAgB;QAChB,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,wEAAwE;QACxE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE;gBACnD,GAAG,OAAO;gBACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB;gBACtF,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE/C,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,8EAA8E;QAC9E,kEAAkE;QAClE,6EAA6E;QAC7E,4CAA4C;QAC5C,EAAE;QACF,2EAA2E;QAC3E,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,SAAS,KAAK,SAAS,CAAC,UAAU;YACzD,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,aAAa,GAAG,gBAAgB;YACpC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;YAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAEpB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE;YAClD,GAAG,OAAO;YACV,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,iCAAiC,CACvC,KAAY;QAEZ,kEAAkE;QAClE,4EAA4E;QAC5E,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,SAAS,GAAI,KAA8B,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,SAAS;iBACrB,MAAM,CACL,CAAC,KAAK,EAA2D,EAAE,CACjE,CAAC,CAAC,KAAK;mBACJ,OAAO,KAAK,KAAK,QAAQ;mBACzB,KAAK,CAAC,OAAO,CAAE,KAA4B,CAAC,IAAI,CAAC;mBACjD,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ,CAClE;iBACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,cAAc,GAAI,KAA8B,CAAC,MAAM,CAAC;QAC9D,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;eAC7B,cAAc;eACd,OAAO,cAAc,KAAK,QAAQ;eAClC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EACjC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAyC,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACpB,MAAM,OAAO,GAAI,QAAyC,EAAE,OAAO,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,CAAC,KAAK,CAAwB;oBACpC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBACjE,CAAC;YACJ,CAAC,CACF,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,sBAAsB,CAC3B,SAAoB,EACpB,gBAAmD,EACnD,QAA2B,EAC3B,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAoB,EACpB,gBAAmD,EACnD,WAAmB,EACnB,WAAmD,EAAE,EACrD,UAII,EAAE;QAEN,OAAO,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAEM,wBAAwB,CAAC,UAAe;QAE7C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,YAAY,IAAI,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC;QAClI,IAAG,CAAC,YAAY,EAAE,CAAC;YACjB,OAAO,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC5E,CAAC;QAED,IAAI,YAAY,GAAG,GAAG,UAAU,CAAC,sBAAgC,MAAM,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClH,IAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,YAAY,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAA8B;QAC1D,+FAA+F;QAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAY,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvG,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,gEAAgE;YAChE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB;oBAChE,mBAAmB,EAAE,SAAS,EAAE,YAAY;oBAC5C,iBAAiB;oBACjB,8EAA8E;oBAC9E,0EAA0E;oBAC1E,mEAAmE;oBACnE,gFAAgF;oBAChF,2EAA2E;oBAC3E,8EAA8E;oBAC9E,4EAA4E;oBAC5E,sEAAsE;oBACtE,8EAA8E;oBAC9E,mFAAmF;oBACnF,MAAM;oBACN,+EAA+E;oBAC/E,iFAAiF;oBACjF,gFAAgF;oBAChF,yEAAyE;oBACzE,qEAAqE;oBACrE,kBAAkB;oBAClB,4EAA4E;oBAC5E,6EAA6E;oBAC7E,+EAA+E;oBAC/E,6EAA6E;oBAC7E,iFAAiF;oBACjF,qEAAqE;oBACrE,6EAA6E;oBAC7E,4EAA4E;oBAC5E,0EAA0E;oBAC1E,iFAAiF;oBACjF,kFAAkF;oBAClF,qFAAqF;oBACrF,iFAAiF;oBACjF,iFAAiF;oBACjF,mCAAmC;oBACnC,4EAA4E;iBAC7E,CAAC,CAAC;gBACH,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,GAAG,UAAU;oBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,gEAAgE;QAChE,sDAAsD;QACtD,2DAA2D;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,sBAAsB,KAAK,2BAA2B,CAAC,6BAA6B,EAAE,CAAC;gBACpG,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACzC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9D,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACnE,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,UAA8B;QAChE,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,CAAC;gBACH,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,kBAAkB,CAAC,GAAG;wBACzB,+DAA+D;wBAC/D,iEAAiE;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,gEAAgE;wBAChE,iEAAiE;wBACjE,oEAAoE;wBACpE,mEAAmE;wBACnE,+BAA+B;wBAC/B,+CAA+C;wBAC/C,uCAAuC;wBACvC,MAAM;oBACR,KAAK,kBAAkB,CAAC,cAAc;wBACpC,6DAA6D;wBAC7D,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,mDAAmD;wBACnD,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC3B,MAAM;oBACR,KAAK,kBAAkB,CAAC,aAAa;wBACnC,kEAAkE;wBAClE,MAAM;oBACR,KAAK,kBAAkB,CAAC,oBAAoB;wBAC1C,6DAA6D;wBAC7D,MAAM;gBACV,CAAC;YACH,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACjD,MAAM;oBACN,aAAa,EAAE,UAAU;oBACzB,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,UAA8B;QAC/C,qBAAqB;IACtB,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,KAAY;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,0DAA0D;QAC1D,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,oGAAoG;QACpG,mGAAmG;QACnG,0FAA0F;QAC1F,yGAAyG;QACzG,yGAAyG;QACzG,oGAAoG;QACpG,kGAAkG;QAClG,iGAAiG;QACjG,uGAAuG;QACvG,2GAA2G;QAC3G,mGAAmG;QACnG,wFAAwF;QACxF,MAAM,cAAc,GAAI,KAA4B,CAAC,IAAI,CAAC;QAC1D,MAAM,gBAAgB,GAAI,KAA8B,CAAC,MAAM,IAAK,KAAkC,CAAC,UAAU,CAAC;QAClH,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,IAAI,GAAG,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;YACpI,OAAO,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QACvF,CAAC;QAED,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,SAAS,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,8CAA8C;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;CACF,CAAA;AA3gBY,0BAA0B;IADtC,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;qCAAiB,aAAa;GALvD,0BAA0B,CA2gBtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport {\n  ErrorType,\n  ErrorActionBackend,\n  WildoError_Backend_Definition,\n  WildoError_Backend,\n  ErrorCustomMessageReference,\n  ERROR_DEFINITIONS,\n  ResourcesConfig_OperationPathUtils,\n  ResourceConfiguration_Operation,\n  ErrorHandling_Strategy,\n  RetryPolicy_BackoffType,\n  ErrorUserGuidance,\n  isWildoBackendError,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n\n/**\n * Backend Error Builder Service\n * Creates unified WildoError_Backend instances with ExecutionContext integration\n */\n@injectable()\nexport class ErrorBuilderBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n\n    @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService\n  ) {\n    this.logDebug = this.logger.debugByType('ErrorBuilderBackendService');\n    this.logger.setDebugTypeLogging('ErrorBuilderBackendService', false);\n  }\n\n  /**\n   * Build a WildoError_Backend with ExecutionContext integration\n   */\n  public buildError(\n    errorType: ErrorType,\n    executionContext?: ExecutionContext<any>,\n    options: {\n      customMessageReference?: ErrorCustomMessageReference,\n      context?: Record<string, any>\n      stack?: string;\n      skipBackendActions?: boolean;\n      skipBackendActionTypes?: readonly ErrorActionBackend[];\n    } = {}\n  ): WildoError_Backend {\n    const errorDefinition = ERROR_DEFINITIONS[errorType];\n    const statusCode = errorDefinition.statusCode;\n    const effectiveBackendActions = options.skipBackendActions\n      ? []\n      : errorDefinition.backendActions.filter(\n        action => !options.skipBackendActionTypes?.includes(action)\n      );\n\n    // Extract operation path from execution context\n    const operationPathKey = (executionContext)\n      ? ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(executionContext.operation as ResourceConfiguration_Operation<any, any, any>)\n      : undefined;\n\n\n    // Build the WildoError_Backend (context preserved for backend logging;\n    // sanitization happens at the HTTP serialization boundary in ErrorHandlerService)\n    const wildoError: WildoError_Backend = {\n      type: errorType,\n      severity: errorDefinition.severity,\n      operationPathKey,\n      timestamp: new Date(),\n      backendActions: effectiveBackendActions,\n      customMessageReference: options.customMessageReference ?? errorDefinition.defaultCustomMessageReference,\n      statusCode,\n      errorHandlingStrategy: errorDefinition.errorHandlingStrategy ?? ErrorHandling_Strategy.STOP,\n      retryPolicy: errorDefinition.retryPolicy ?? RetryPolicy_BackoffType.EXPONENTIAL,\n      maxRetries: errorDefinition.maxRetries ?? 3,\n      initialDelay: errorDefinition.initialDelay ?? 1000,\n      baseDelay: errorDefinition.baseDelay ?? 1000,\n      initiatorIds: executionContext?.initiatorIds ?? undefined,\n      executionType: executionContext?.executionType ?? undefined,\n      // Phase 3 — closes gap 3: prefer the threaded EC's id, but fall back to the ambient request-context\n      // ALS frame when no EC was passed (the ~67% of buildError calls that pass `undefined`). This is what\n      // makes an error built deep in a service — with no EC in hand — still attributable to its request.\n      correlationId: executionContext?.correlationId ?? getCurrentCorrelationId(),\n      stack: options.stack ?? undefined,\n      context: options.context ?? undefined,\n    };\n\n    // Some callers (for example websocket handshake auth) need to reclassify an\n    // expected failure locally instead of emitting the default backend warning.\n    if (effectiveBackendActions.length > 0) {\n      // Execute backend actions. do not await\n      this.executeBackendActions(wildoError);\n    }\n\n    return wildoError;\n  }\n\n  public buildFromStandardError(error: unknown, executionContext?: ExecutionContext<any>, options: {\n    customMessageReference?: ErrorCustomMessageReference,\n    context?: Record<string, any>\n    skipBackendActions?: boolean;\n    skipBackendActionTypes?: readonly ErrorActionBackend[];\n  } = {}): WildoError_Backend {\n    // An ALREADY-CLASSIFIED backend error must never be re-derived from scratch here.\n    //\n    // `WildoError_Backend` is a Zod-INFERRED PLAIN OBJECT, not an `Error` subclass, so a\n    // re-wrap fell into the `new Error('Unknown error')` branch below: the caught error's\n    // `type`, its `context` (which is where every builder puts the real explanation — the\n    // enumerated validation failures, the adapter name, the failing boundary) and its stack\n    // were all discarded, and the wrapper was re-classified INTERNAL from a synthetic Error\n    // whose only message was the literal string `Unknown error`.\n    //\n    // That is not a cosmetic loss. It is exactly how a boot failure reaches the log as\n    // `{\"errorType\":\"INTERNAL\",\"msg\":\"Application initialization failed\"}` with a stack whose\n    // top frame is this method — naming the wrapper and nothing about the cause. Measured\n    // 2026-08-14 on `platform-apps-manager`, where a post-registry configuration validation\n    // threw with its failing contracts enumerated in `context.message` and the operator saw\n    // none of them.\n    //\n    // The caught error's classification wins: it was chosen deliberately by whoever built it,\n    // and this seam's callers pass attribution (`service`, `operation`), not a reclassification.\n    // Caller context still wins on key collision, matching the merge below.\n    if (isWildoBackendError(error)) {\n      return this.buildError(error.type, executionContext, {\n        ...options,\n        customMessageReference: options.customMessageReference ?? error.customMessageReference,\n        context: { ...error.context, ...options.context },\n        stack: error.stack,\n      });\n    }\n\n    const err = error instanceof Error\n      ? error\n      : new Error(typeof error === 'string' ? error : 'Unknown error');\n\n    const errorType = this.determineErrorType(err);\n\n    // A RAW ZodError / Mongoose ValidationError can reach this global seam\n    // (e.g. an express error boundary) WITHOUT having gone through the explicit\n    // controller/service validation path, which is the only place that attaches\n    // `context.zodIssues` itself. Such an error is still classified VALIDATION\n    // by `determineErrorType` (via the name/message heuristics), but it arrives\n    // here with no field-level detail — so the client would otherwise receive an\n    // opaque `{ type: VALIDATION }` with the real message living only in the\n    // (often inaccessible) backend log. Project the error's per-field issues into\n    // the same `zodIssues` shape that `sendErrorResponse` surfaces as\n    // `validationErrors`, so raw validation failures are debuggable from the API\n    // response like the explicit-path ones are.\n    //\n    // Scoped strictly to VALIDATION-classified errors: no field detail is ever\n    // attached to AUTHZ/INTERNAL/DATABASE/etc. errors, preserving the\n    // `sanitizeErrorForClient` boundary that strips their context. Only the field\n    // path + per-field message are lifted — both already client-safe (they ride\n    // the `zodIssues` allowlist, and VALIDATION is a \"safe\" type). The internal\n    // `err.message` / stack are deliberately NOT surfaced here.\n    const fieldLevelDetail = errorType === ErrorType.VALIDATION\n      ? this.extractFieldLevelValidationDetail(err)\n      : undefined;\n\n    // Caller-supplied context wins on key collision (an explicit path that set\n    // `zodIssues` should not be overwritten by the duck-typed extraction).\n    const mergedContext = fieldLevelDetail\n      ? { ...fieldLevelDetail, ...options.context }\n      : options.context;\n\n    return this.buildError(errorType, executionContext, {\n      ...options,\n      context: mergedContext,\n      stack: err.stack\n    });\n  }\n\n  /**\n   * Extract client-safe field-level detail from a RAW validation error — a plain\n   * `ZodError` or a Mongoose `ValidationError` — that reached the global error\n   * boundary without going through the explicit controller/service validation\n   * path (which attaches `context.zodIssues` itself).\n   *\n   * Returns the detail in the `{ zodIssues }` shape that\n   * `ErrorHandlerService.sendErrorResponse` reduces into the response\n   * `validationErrors` map (`{ [fieldPath]: message }`). Only the field `path`\n   * and per-field `message` are extracted — both already deemed client-safe (they\n   * ride the `zodIssues` allowlist in `sanitizeErrorForClient`, and VALIDATION is\n   * a \"safe\" error type). The error's own `message` / stack are NOT included, so\n   * internal implementation detail never leaks to the client.\n   *\n   * Returns `undefined` when the error is not a recognisable field-level\n   * validation error (e.g. a generic `Error` whose message merely contains the\n   * substring \"invalid\", which `determineErrorType` still classifies VALIDATION)\n   * — in that case no `zodIssues` are attached.\n   */\n  private extractFieldLevelValidationDetail(\n    error: Error,\n  ): { zodIssues: Array<{ path: (string | number)[]; message: string }> } | undefined {\n    // Zod (any instance): duck-type on the `issues` array rather than\n    // `instanceof z.ZodError`. Multiple Zod module instances can coexist in the\n    // dependency graph, so a nominal `instanceof` check is unreliable at this\n    // shared boundary — the shape check is the robust classifier.\n    const zodIssues = (error as { issues?: unknown }).issues;\n    if (error.name === 'ZodError' && Array.isArray(zodIssues)) {\n      const mapped = zodIssues\n        .filter(\n          (issue): issue is { path: (string | number)[]; message: string } =>\n            !!issue\n            && typeof issue === 'object'\n            && Array.isArray((issue as { path?: unknown }).path)\n            && typeof (issue as { message?: unknown }).message === 'string',\n        )\n        .map(issue => ({ path: issue.path, message: issue.message }));\n      return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n    }\n\n    // Mongoose ValidationError: `errors` is a record keyed by field path, each\n    // value a per-path sub-error carrying its own `message`.\n    const mongooseErrors = (error as { errors?: unknown }).errors;\n    if (\n      error.name === 'ValidationError'\n      && mongooseErrors\n      && typeof mongooseErrors === 'object'\n      && !Array.isArray(mongooseErrors)\n    ) {\n      const mapped = Object.entries(mongooseErrors as Record<string, unknown>).map(\n        ([field, subError]) => {\n          const message = (subError as { message?: unknown } | null)?.message;\n          return {\n            path: [field] as (string | number)[],\n            message: typeof message === 'string' ? message : 'Invalid value',\n          };\n        },\n      );\n      return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n    }\n\n    return undefined;\n  }\n\n  /**\n   * Build an error with contextual user guidance (Phase 1b).\n   *\n   * The guidance is attached to the error and will be included in the\n   * `ErrorResponse.error.userGuidance` field for the frontend to render.\n   *\n   * @example\n   * ```\n   * throw this.errorBuilder.buildErrorWithGuidance(\n   *   ErrorType.CONFIGURATION,\n   *   executionContext,\n   *   {\n   *     explanation: 'SMTP is not configured for this organization.',\n   *     resolution: 'Go to Settings → Email and configure your SMTP provider.',\n   *     nextAction: { label: 'Go to Settings', ref: '/settings/email', type: 'url' },\n   *     missingConfiguration: ['smtp_host', 'smtp_port'],\n   *   },\n   *   { customMessageReference: ErrorCustomMessageReference.GENERIC_DETAIL }\n   * );\n   * ```\n   */\n  public buildErrorWithGuidance(\n    errorType: ErrorType,\n    executionContext: ExecutionContext<any> | undefined,\n    guidance: ErrorUserGuidance,\n    options: {\n      customMessageReference?: ErrorCustomMessageReference;\n      context?: Record<string, any>;\n      stack?: string;\n    } = {}\n  ): WildoError_Backend {\n    const error = this.buildError(errorType, executionContext, options);\n    error.userGuidance = guidance;\n    return error;\n  }\n\n  /**\n   * Build an error with a guidance key (i18n reference).\n   *\n   * Shorthand for `buildErrorWithGuidance` that sets the `guidanceKey` on the guidance object,\n   * enabling i18n label resolution under `errors_guidance.{guidanceKey}.{field}`.\n   *\n   * @param errorType - The error type\n   * @param executionContext - Current execution context\n   * @param guidanceKey - i18n lookup key (resolves labels under `errors_guidance.{guidanceKey}.*`)\n   * @param guidance - Guidance fields (explanation, resolution, etc.) — used as raw fallbacks\n   * @param options - Additional error options\n   */\n  public buildErrorWithGuidanceKey(\n    errorType: ErrorType,\n    executionContext: ExecutionContext<any> | undefined,\n    guidanceKey: string,\n    guidance: Omit<ErrorUserGuidance, 'guidanceKey'> = {},\n    options: {\n      customMessageReference?: ErrorCustomMessageReference;\n      context?: Record<string, any>;\n      stack?: string;\n    } = {}\n  ): WildoError_Backend {\n    return this.buildErrorWithGuidance(errorType, executionContext, { ...guidance, guidanceKey }, options);\n  }\n\n  public wildoErrorToSimpleString(wildoError: any): string {\n\n    const isWildoError = wildoError && typeof wildoError === 'object' && 'statusCode' in wildoError && 'backendActions' in wildoError;\n    if(!isWildoError) {\n      return wildoError instanceof Error ? wildoError.message : \"Unknown error\";\n    }\n\n    let errorMessage = `${wildoError.customMessageReference as string} - ${wildoError.type} - ${wildoError.severity}`;\n    if(wildoError.context) {\n      errorMessage += `: ${JSON.stringify(wildoError.context)}`;\n    }\n    return errorMessage;\n  }\n\n  /**\n   * Sanitize an error for client-facing HTTP responses.\n   * Called at the serialization boundary (ErrorHandlerService), NOT at build time,\n   * so backend logging retains full context for diagnostics.\n   *\n   * - VALIDATION, CONFLICT, RATE_LIMIT: allowlist of frontend-useful context keys\n   * - AUTHENTICATION: allows `authResponse` through (retry/lockout UI data)\n   * - Everything else (AUTHZ, INTERNAL, DATABASE, etc.): strips context entirely\n   */\n  public sanitizeErrorForClient(wildoError: WildoError_Backend): WildoError_Backend {\n    // Error types whose context is safe to expose to clients (field-level info needed by frontend)\n    const safeTypes = new Set<ErrorType>([ErrorType.VALIDATION, ErrorType.CONFLICT, ErrorType.RATE_LIMIT]);\n\n    if (safeTypes.has(wildoError.type)) {\n      // For safe types: keep only frontend-relevant keys from context\n      if (wildoError.context) {\n        const allowedKeys = new Set([\n          'fieldName', 'duplicateValue', 'zodIssues', 'customErrorMessage',\n          'retryAfterSeconds', 'message', 'violations',\n          'versionConflict',\n          // Stable, client-branchable error codes (e.g. CrossFrontendHandoffErrorCode).\n          // These are non-PII enum values defined in shared schemas (`saas-models`)\n          // and consumed by both first-party clients (saas-frontend-lib) and\n          // out-of-tree clients (saas-technical-doc/docsAuthClient.ts) for switch-on-code\n          // branching. Stripping them at the wire would force callers to regex-parse\n          // the human-readable `message`, defeating the purpose of having a stable code\n          // enum. See cross-app-jwt-propagation.md C-4 for the contract decision that\n          // motivated promoting these keys (the docs-chat client must `import {\n          // CrossFrontendHandoffErrorCode } from '@wildo-ai/saas-models'` and branch on\n          // `error.details.code === CrossFrontendHandoffErrorCode.UNKNOWN_TARGET_FRONTEND`).\n          'code',\n          // Identity selectors that scope a code to a specific resource/service. Already\n          // present in the request the client made (so disclosure is a no-op), but echoing\n          // them back lets the client emit useful diagnostics (\"target frontend `docs` is\n          // not configured…\") without re-parsing its own request body. PII-safe by\n          // construction: these are SaaS-config service keys, never user data.\n          'targetServiceKey',\n          // ─────────────────────────────────────────────────────────────────────────\n          // GENERAL RULE for future endpoints emitting stable client-branchable codes:\n          //   1. Define the enum in `@wildo-ai/saas-models` (so frontend + backend share\n          //      the same source of truth) and reuse the `code` key above to carry it.\n          //      Do NOT invent a new \"errorKind\" / \"reason\" / \"type\" field — the docs-chat\n          //      and saas-frontend clients all switch on `error.details.code`.\n          //   2. New per-endpoint identity selectors (analogous to `targetServiceKey`)\n          //      MAY be added to this allowlist when they are PII-safe enum values OR\n          //      direct echoes of caller-supplied input (i.e. zero net disclosure).\n          //   3. NEVER add user-typed strings (emails, names, free-text) to this allowlist\n          //      — they belong in `customErrorMessage` / `message` and are already covered.\n          //   4. NEVER promote an internal cause (`stackTrace`, `dbErrorCode`, `mongoMessage`)\n          //      — those go through the AUTHZ/INTERNAL/DATABASE branches below which strip\n          //      context entirely. Surface a stable Wildo enum from the issuing service if\n          //      the caller needs to branch.\n          // ─────────────────────────────────────────────────────────────────────────\n        ]);\n        const sanitized: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(wildoError.context)) {\n          if (allowedKeys.has(key)) {\n            sanitized[key] = value;\n          }\n        }\n        return {\n          ...wildoError,\n          context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n        };\n      }\n      return wildoError;\n    }\n\n    // AUTHENTICATION errors: allow the minimum safe retry/lockout UI\n    // payload through. `authResponse` is the common case; for the\n    // specific `AUTHENTICATION_ACCOUNT_LOCKED` envelope, the global\n    // lockout bridge also needs `lockoutDurationMinutes`,\n    // `retryAfterSeconds`, and its lockout-specific `message`.\n    if (wildoError.type === ErrorType.AUTHENTICATION && wildoError.context) {\n      const authAllowedKeys = new Set(['authResponse']);\n      if (wildoError.customMessageReference === ErrorCustomMessageReference.AUTHENTICATION_ACCOUNT_LOCKED) {\n        authAllowedKeys.add('lockoutDurationMinutes');\n        authAllowedKeys.add('retryAfterSeconds');\n        authAllowedKeys.add('message');\n      }\n      const sanitized: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(wildoError.context)) {\n        if (authAllowedKeys.has(key)) {\n          sanitized[key] = value;\n        }\n      }\n      return {\n        ...wildoError,\n        context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n      };\n    }\n\n    // All other types (AUTHZ, INTERNAL, DATABASE, etc.): strip context entirely\n    const { context, ...rest } = wildoError;\n    return rest as WildoError_Backend;\n  }\n\n\n\n\n  private async executeBackendActions(wildoError: WildoError_Backend): Promise<void> {\n    wildoError.backendActions.forEach(action => {\n      try {\n        switch (action) {\n          case ErrorActionBackend.LOG:\n            // Intentionally NOT logged at construction. Error logging is a\n            // *handling-boundary* concern, not a *construction* concern: the\n            // boundary (HTTP `expressErrorHandler`, batch/cron, websocket auth,\n            // queue job-failure, response-DTO direct-send) is the only place\n            // where the operational severity can be classified, the request\n            // context (method/path/socketId/jobId) is available, and exactly\n            // one line per error is guaranteed. Logging here as well produced a\n            // double-log (and, historically, an unstructured multi-line blob).\n            // Boundaries emit the line via\n            // `logWildoBackendErrorAtClassifiedSeverity` /\n            // `projectWildoBackendErrorLogFields`.\n            break;\n          case ErrorActionBackend.RECORD_METRICS:\n            // Metrics recording would be handled by telemetry middleware\n            break;\n          case ErrorActionBackend.TRACE:\n            // Tracing would be handled by telemetry middleware\n            break;\n          case ErrorActionBackend.ALERT:\n            this.sendAlert(wildoError);\n            break;\n          case ErrorActionBackend.CIRCUIT_BREAK:\n            // Circuit breaker logic would be implemented in specific services\n            break;\n          case ErrorActionBackend.GRACEFUL_DEGRADATION:\n            // Graceful degradation would be handled by specific services\n            break;\n        }\n      } catch (actionError) {\n        // Don't let action execution errors break the main error flow\n        this.logger.warn('Failed to execute error action', {\n          action,\n          originalError: wildoError,\n          actionError: describeCaughtError(actionError)\n        });\n      }\n    });\n  }\n\n  /**\n   * Send alert for critical errors\n   */\n  private sendAlert(wildoError: WildoError_Backend): void {\n   // todo implement it;\n  }\n\n  /**\n   * Centralized error type determination based on error characteristics\n   * This method provides consistent error type classification across all services\n   */\n  public determineErrorType(error: Error): ErrorType {\n    const message = (error && typeof error.message === 'string') ? error.message.toLowerCase() : '';\n    const errorName = (error && typeof error.name === 'string') ? error.name : '';\n\n    // Check error name first for more specific classification\n    if (errorName === 'ValidationError' || errorName === 'ZodError') {\n      return ErrorType.VALIDATION;\n    }\n\n    if (errorName === 'MulterError') {\n      return ErrorType.VALIDATION;\n    }\n\n    // Body-parser (express.json / urlencoded / raw-body) rejections — an oversized or malformed request\n    // body — are CLIENT input problems, exactly like the MulterError case above (both are request-body\n    // libraries). They surface as `http-errors` carrying a string `type` (`entity.too.large`,\n    // `entity.parse.failed`, `charset.unsupported`, …) plus a well-known 4xx `status`/`statusCode`. Classify\n    // VALIDATION so a benign bad body returns a clean 4xx instead of masquerading as an INTERNAL 500 — which\n    // additionally mis-fires `severity:critical` alerting/SIEM on an ordinary bad request. Keyed on the\n    // body-parser `type`+4xx-`status` signature (NOT a bare `SyntaxError`/`Error` name), so a generic\n    // application error is never swept in, and the 5xx body-parser faults (`stream.not.readable`, …)\n    // correctly fall through to INTERNAL. (The `/oauth` mount additionally has a dedicated translator that\n    // preserves the exact status — see `applyOAuthBodyCap`. Framework-wide, an oversized body (413) classifies\n    // as PAYLOAD_TOO_LARGE so EVERY route returns the precise 413; the other body-parser client errors\n    // (malformed 400, unsupported-charset/encoding 415) fold into VALIDATION's 400 bucket.)\n    const bodyParserType = (error as { type?: unknown }).type;\n    const bodyParserStatus = (error as { status?: unknown }).status ?? (error as { statusCode?: unknown }).statusCode;\n    if (typeof bodyParserType === 'string' && typeof bodyParserStatus === 'number' && bodyParserStatus >= 400 && bodyParserStatus < 500) {\n      return bodyParserStatus === 413 ? ErrorType.PAYLOAD_TOO_LARGE : ErrorType.VALIDATION;\n    }\n\n    if (errorName === 'JsonWebTokenError' || errorName === 'TokenExpiredError') {\n      return ErrorType.AUTHENTICATION;\n    }\n\n    if (errorName === 'MongoError' || errorName === 'MongooseError') {\n      return ErrorType.DATABASE;\n    }\n\n    // Check message content for additional classification\n    if (message.includes('validation') || message.includes('invalid')) {\n      return ErrorType.VALIDATION;\n    }\n\n    if (message.includes('limit_file_size') || message.includes('file too large')) {\n      return ErrorType.VALIDATION;\n    }\n\n    if (message.includes('not found')) {\n      return ErrorType.NOT_FOUND;\n    }\n\n    if (message.includes('unauthorized')) {\n      return ErrorType.AUTHENTICATION;\n    }\n\n    if (message.includes('forbidden') || message.includes('permission')) {\n      return ErrorType.AUTHORIZATION;\n    }\n\n    if (message.includes('conflict') || message.includes('already exists')) {\n      return ErrorType.CONFLICT;\n    }\n\n    if (message.includes('network')) {\n      return ErrorType.NETWORK;\n    }\n\n    if (message.includes('rate limit') || message.includes('too many requests')) {\n      return ErrorType.RATE_LIMIT;\n    }\n\n    if (message.includes('business rule') || message.includes('constraint')) {\n      return ErrorType.BUSINESS_RULE;\n    }\n\n    // Default to INTERNAL for unclassified errors\n    return ErrorType.INTERNAL;\n  }\n}\n"]}
+{"version":3,"file":"error-builder.backend.service.js","sourceRoot":"","sources":["../../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,kBAAkB,EAGlB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAElC,sBAAsB,EACtB,uBAAuB,EAEvB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAGnH;;;GAGG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAKQ;IAJnC,QAAQ,CAA+D;IAEjF,YAE6C,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEhE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACI,UAAU,CACf,SAAoB,EACpB,gBAAwC,EACxC,UAMI,EAAE;QAEN,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;QAC9C,MAAM,uBAAuB,GAAG,OAAO,CAAC,kBAAkB;YACxD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,CACrC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAC5D,CAAC;QAEJ,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,kCAAkC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,SAA2D,CAAC;YACrJ,CAAC,CAAC,SAAS,CAAC;QAGd,uEAAuE;QACvE,kFAAkF;QAClF,MAAM,UAAU,GAAuB;YACrC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,gBAAgB;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,uBAAuB;YACvC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,eAAe,CAAC,6BAA6B;YACvG,UAAU;YACV,qBAAqB,EAAE,eAAe,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,IAAI;YAC3F,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,uBAAuB,CAAC,WAAW;YAC/E,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,CAAC;YAC3C,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,IAAI;YAClD,SAAS,EAAE,eAAe,CAAC,SAAS,IAAI,IAAI;YAC5C,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,SAAS;YACzD,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,SAAS;YAC3D,oGAAoG;YACpG,qGAAqG;YACrG,mGAAmG;YACnG,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,uBAAuB,EAAE;YAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACtC,CAAC;QAEF,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,wCAAwC;YACxC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,sBAAsB,CAAC,KAAc,EAAE,gBAAwC,EAAE,UAKpF,EAAE;QACJ,kFAAkF;QAClF,EAAE;QACF,qFAAqF;QACrF,sFAAsF;QACtF,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,6DAA6D;QAC7D,EAAE;QACF,mFAAmF;QACnF,0FAA0F;QAC1F,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,gBAAgB;QAChB,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,wEAAwE;QACxE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE;gBACnD,GAAG,OAAO;gBACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB;gBACtF,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE/C,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,8EAA8E;QAC9E,kEAAkE;QAClE,6EAA6E;QAC7E,4CAA4C;QAC5C,EAAE;QACF,2EAA2E;QAC3E,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,SAAS,KAAK,SAAS,CAAC,UAAU;YACzD,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,aAAa,GAAG,gBAAgB;YACpC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;YAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAEpB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE;YAClD,GAAG,OAAO;YACV,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,iCAAiC,CACvC,KAAY;QAEZ,kEAAkE;QAClE,4EAA4E;QAC5E,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,SAAS,GAAI,KAA8B,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,SAAS;iBACrB,MAAM,CACL,CAAC,KAAK,EAA2D,EAAE,CACjE,CAAC,CAAC,KAAK;mBACJ,OAAO,KAAK,KAAK,QAAQ;mBACzB,KAAK,CAAC,OAAO,CAAE,KAA4B,CAAC,IAAI,CAAC;mBACjD,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ,CAClE;iBACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,cAAc,GAAI,KAA8B,CAAC,MAAM,CAAC;QAC9D,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;eAC7B,cAAc;eACd,OAAO,cAAc,KAAK,QAAQ;eAClC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EACjC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAyC,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACpB,MAAM,OAAO,GAAI,QAAyC,EAAE,OAAO,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,CAAC,KAAK,CAAwB;oBACpC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBACjE,CAAC;YACJ,CAAC,CACF,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACI,sBAAsB,CAC3B,SAAoB,EACpB,gBAAmD,EACnD,QAA2B,EAC3B,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAoB,EACpB,gBAAmD,EACnD,WAAmB,EACnB,WAAmD,EAAE,EACrD,UAII,EAAE;QAEN,OAAO,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IACD,sEAAsE;IAE/D,wBAAwB,CAAC,UAAe;QAE7C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,YAAY,IAAI,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC;QAClI,IAAG,CAAC,YAAY,EAAE,CAAC;YACjB,OAAO,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC5E,CAAC;QAED,IAAI,YAAY,GAAG,GAAG,UAAU,CAAC,sBAAgC,MAAM,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClH,IAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,YAAY,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAA8B;QAC1D,+FAA+F;QAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAY,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvG,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,gEAAgE;YAChE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB;oBAChE,mBAAmB,EAAE,SAAS,EAAE,YAAY;oBAC5C,iBAAiB;oBACjB,8EAA8E;oBAC9E,0EAA0E;oBAC1E,mEAAmE;oBACnE,gFAAgF;oBAChF,2EAA2E;oBAC3E,8EAA8E;oBAC9E,4EAA4E;oBAC5E,sEAAsE;oBACtE,8EAA8E;oBAC9E,mFAAmF;oBACnF,MAAM;oBACN,+EAA+E;oBAC/E,iFAAiF;oBACjF,gFAAgF;oBAChF,yEAAyE;oBACzE,qEAAqE;oBACrE,kBAAkB;oBAClB,4EAA4E;oBAC5E,6EAA6E;oBAC7E,+EAA+E;oBAC/E,6EAA6E;oBAC7E,iFAAiF;oBACjF,qEAAqE;oBACrE,6EAA6E;oBAC7E,4EAA4E;oBAC5E,0EAA0E;oBAC1E,iFAAiF;oBACjF,kFAAkF;oBAClF,qFAAqF;oBACrF,iFAAiF;oBACjF,iFAAiF;oBACjF,mCAAmC;oBACnC,4EAA4E;iBAC7E,CAAC,CAAC;gBACH,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,GAAG,UAAU;oBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,gEAAgE;QAChE,sDAAsD;QACtD,2DAA2D;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,sBAAsB,KAAK,2BAA2B,CAAC,6BAA6B,EAAE,CAAC;gBACpG,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACzC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9D,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACnE,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,UAA8B;QAChE,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,CAAC;gBACH,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,kBAAkB,CAAC,GAAG;wBACzB,+DAA+D;wBAC/D,iEAAiE;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,gEAAgE;wBAChE,iEAAiE;wBACjE,oEAAoE;wBACpE,mEAAmE;wBACnE,+BAA+B;wBAC/B,+CAA+C;wBAC/C,uCAAuC;wBACvC,MAAM;oBACR,KAAK,kBAAkB,CAAC,cAAc;wBACpC,6DAA6D;wBAC7D,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,mDAAmD;wBACnD,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC3B,MAAM;oBACR,KAAK,kBAAkB,CAAC,aAAa;wBACnC,kEAAkE;wBAClE,MAAM;oBACR,KAAK,kBAAkB,CAAC,oBAAoB;wBAC1C,6DAA6D;wBAC7D,MAAM;gBACV,CAAC;YACH,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACjD,MAAM;oBACN,aAAa,EAAE,UAAU;oBACzB,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,UAA8B;QAC/C,qBAAqB;IACtB,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,KAAY;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,0DAA0D;QAC1D,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,oGAAoG;QACpG,mGAAmG;QACnG,0FAA0F;QAC1F,yGAAyG;QACzG,yGAAyG;QACzG,oGAAoG;QACpG,kGAAkG;QAClG,iGAAiG;QACjG,uGAAuG;QACvG,2GAA2G;QAC3G,mGAAmG;QACnG,wFAAwF;QACxF,MAAM,cAAc,GAAI,KAA4B,CAAC,IAAI,CAAC;QAC1D,MAAM,gBAAgB,GAAI,KAA8B,CAAC,MAAM,IAAK,KAAkC,CAAC,UAAU,CAAC;QAClH,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,IAAI,GAAG,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;YACpI,OAAO,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QACvF,CAAC;QAED,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,SAAS,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,8CAA8C;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;CACF,CAAA;AAvhBY,0BAA0B;IADtC,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;qCAAiB,aAAa;GALvD,0BAA0B,CAuhBtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport {\n  ErrorType,\n  ErrorActionBackend,\n  WildoError_Backend_Definition,\n  WildoError_Backend,\n  ErrorCustomMessageReference,\n  ERROR_DEFINITIONS,\n  ResourcesConfig_OperationPathUtils,\n  ResourceConfiguration_Operation,\n  ErrorHandling_Strategy,\n  RetryPolicy_BackoffType,\n  ErrorUserGuidance,\n  isWildoBackendError,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n\n/**\n * Backend Error Builder Service\n * Creates unified WildoError_Backend instances with ExecutionContext integration\n */\n@injectable()\nexport class ErrorBuilderBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n\n    @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService\n  ) {\n    this.logDebug = this.logger.debugByType('ErrorBuilderBackendService');\n    this.logger.setDebugTypeLogging('ErrorBuilderBackendService', false);\n  }\n\n  /**\n   * Build a WildoError_Backend with ExecutionContext integration\n   */\n  public buildError(\n    errorType: ErrorType,\n    executionContext?: ExecutionContext<any>,\n    options: {\n      customMessageReference?: ErrorCustomMessageReference,\n      context?: Record<string, any>\n      stack?: string;\n      skipBackendActions?: boolean;\n      skipBackendActionTypes?: readonly ErrorActionBackend[];\n    } = {}\n  ): WildoError_Backend {\n    const errorDefinition = ERROR_DEFINITIONS[errorType];\n    const statusCode = errorDefinition.statusCode;\n    const effectiveBackendActions = options.skipBackendActions\n      ? []\n      : errorDefinition.backendActions.filter(\n        action => !options.skipBackendActionTypes?.includes(action)\n      );\n\n    // Extract operation path from execution context\n    const operationPathKey = (executionContext)\n      ? ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(executionContext.operation as ResourceConfiguration_Operation<any, any, any>)\n      : undefined;\n\n\n    // Build the WildoError_Backend (context preserved for backend logging;\n    // sanitization happens at the HTTP serialization boundary in ErrorHandlerService)\n    const wildoError: WildoError_Backend = {\n      type: errorType,\n      severity: errorDefinition.severity,\n      operationPathKey,\n      timestamp: new Date(),\n      backendActions: effectiveBackendActions,\n      customMessageReference: options.customMessageReference ?? errorDefinition.defaultCustomMessageReference,\n      statusCode,\n      errorHandlingStrategy: errorDefinition.errorHandlingStrategy ?? ErrorHandling_Strategy.STOP,\n      retryPolicy: errorDefinition.retryPolicy ?? RetryPolicy_BackoffType.EXPONENTIAL,\n      maxRetries: errorDefinition.maxRetries ?? 3,\n      initialDelay: errorDefinition.initialDelay ?? 1000,\n      baseDelay: errorDefinition.baseDelay ?? 1000,\n      initiatorIds: executionContext?.initiatorIds ?? undefined,\n      executionType: executionContext?.executionType ?? undefined,\n      // Phase 3 — closes gap 3: prefer the threaded EC's id, but fall back to the ambient request-context\n      // ALS frame when no EC was passed (the ~67% of buildError calls that pass `undefined`). This is what\n      // makes an error built deep in a service — with no EC in hand — still attributable to its request.\n      correlationId: executionContext?.correlationId ?? getCurrentCorrelationId(),\n      stack: options.stack ?? undefined,\n      context: options.context ?? undefined,\n    };\n\n    // Some callers (for example websocket handshake auth) need to reclassify an\n    // expected failure locally instead of emitting the default backend warning.\n    if (effectiveBackendActions.length > 0) {\n      // Execute backend actions. do not await\n      this.executeBackendActions(wildoError);\n    }\n\n    return wildoError;\n  }\n\n  public buildFromStandardError(error: unknown, executionContext?: ExecutionContext<any>, options: {\n    customMessageReference?: ErrorCustomMessageReference,\n    context?: Record<string, any>\n    skipBackendActions?: boolean;\n    skipBackendActionTypes?: readonly ErrorActionBackend[];\n  } = {}): WildoError_Backend {\n    // An ALREADY-CLASSIFIED backend error must never be re-derived from scratch here.\n    //\n    // `WildoError_Backend` is a Zod-INFERRED PLAIN OBJECT, not an `Error` subclass, so a\n    // re-wrap fell into the `new Error('Unknown error')` branch below: the caught error's\n    // `type`, its `context` (which is where every builder puts the real explanation — the\n    // enumerated validation failures, the adapter name, the failing boundary) and its stack\n    // were all discarded, and the wrapper was re-classified INTERNAL from a synthetic Error\n    // whose only message was the literal string `Unknown error`.\n    //\n    // That is not a cosmetic loss. It is exactly how a boot failure reaches the log as\n    // `{\"errorType\":\"INTERNAL\",\"msg\":\"Application initialization failed\"}` with a stack whose\n    // top frame is this method — naming the wrapper and nothing about the cause. Measured\n    // 2026-08-14 on `platform-apps-manager`, where a post-registry configuration validation\n    // threw with its failing contracts enumerated in `context.message` and the operator saw\n    // none of them.\n    //\n    // The caught error's classification wins: it was chosen deliberately by whoever built it,\n    // and this seam's callers pass attribution (`service`, `operation`), not a reclassification.\n    // Caller context still wins on key collision, matching the merge below.\n    if (isWildoBackendError(error)) {\n      return this.buildError(error.type, executionContext, {\n        ...options,\n        customMessageReference: options.customMessageReference ?? error.customMessageReference,\n        context: { ...error.context, ...options.context },\n        stack: error.stack,\n      });\n    }\n\n    const err = error instanceof Error\n      ? error\n      : new Error(typeof error === 'string' ? error : 'Unknown error');\n\n    const errorType = this.determineErrorType(err);\n\n    // A RAW ZodError / Mongoose ValidationError can reach this global seam\n    // (e.g. an express error boundary) WITHOUT having gone through the explicit\n    // controller/service validation path, which is the only place that attaches\n    // `context.zodIssues` itself. Such an error is still classified VALIDATION\n    // by `determineErrorType` (via the name/message heuristics), but it arrives\n    // here with no field-level detail — so the client would otherwise receive an\n    // opaque `{ type: VALIDATION }` with the real message living only in the\n    // (often inaccessible) backend log. Project the error's per-field issues into\n    // the same `zodIssues` shape that `sendErrorResponse` surfaces as\n    // `validationErrors`, so raw validation failures are debuggable from the API\n    // response like the explicit-path ones are.\n    //\n    // Scoped strictly to VALIDATION-classified errors: no field detail is ever\n    // attached to AUTHZ/INTERNAL/DATABASE/etc. errors, preserving the\n    // `sanitizeErrorForClient` boundary that strips their context. Only the field\n    // path + per-field message are lifted — both already client-safe (they ride\n    // the `zodIssues` allowlist, and VALIDATION is a \"safe\" type). The internal\n    // `err.message` / stack are deliberately NOT surfaced here.\n    const fieldLevelDetail = errorType === ErrorType.VALIDATION\n      ? this.extractFieldLevelValidationDetail(err)\n      : undefined;\n\n    // Caller-supplied context wins on key collision (an explicit path that set\n    // `zodIssues` should not be overwritten by the duck-typed extraction).\n    const mergedContext = fieldLevelDetail\n      ? { ...fieldLevelDetail, ...options.context }\n      : options.context;\n\n    return this.buildError(errorType, executionContext, {\n      ...options,\n      context: mergedContext,\n      stack: err.stack\n    });\n  }\n\n  /**\n   * Extract client-safe field-level detail from a RAW validation error — a plain\n   * `ZodError` or a Mongoose `ValidationError` — that reached the global error\n   * boundary without going through the explicit controller/service validation\n   * path (which attaches `context.zodIssues` itself).\n   *\n   * Returns the detail in the `{ zodIssues }` shape that\n   * `ErrorHandlerService.sendErrorResponse` reduces into the response\n   * `validationErrors` map (`{ [fieldPath]: message }`). Only the field `path`\n   * and per-field `message` are extracted — both already deemed client-safe (they\n   * ride the `zodIssues` allowlist in `sanitizeErrorForClient`, and VALIDATION is\n   * a \"safe\" error type). The error's own `message` / stack are NOT included, so\n   * internal implementation detail never leaks to the client.\n   *\n   * Returns `undefined` when the error is not a recognisable field-level\n   * validation error (e.g. a generic `Error` whose message merely contains the\n   * substring \"invalid\", which `determineErrorType` still classifies VALIDATION)\n   * — in that case no `zodIssues` are attached.\n   */\n  private extractFieldLevelValidationDetail(\n    error: Error,\n  ): { zodIssues: Array<{ path: (string | number)[]; message: string }> } | undefined {\n    // Zod (any instance): duck-type on the `issues` array rather than\n    // `instanceof z.ZodError`. Multiple Zod module instances can coexist in the\n    // dependency graph, so a nominal `instanceof` check is unreliable at this\n    // shared boundary — the shape check is the robust classifier.\n    const zodIssues = (error as { issues?: unknown }).issues;\n    if (error.name === 'ZodError' && Array.isArray(zodIssues)) {\n      const mapped = zodIssues\n        .filter(\n          (issue): issue is { path: (string | number)[]; message: string } =>\n            !!issue\n            && typeof issue === 'object'\n            && Array.isArray((issue as { path?: unknown }).path)\n            && typeof (issue as { message?: unknown }).message === 'string',\n        )\n        .map(issue => ({ path: issue.path, message: issue.message }));\n      return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n    }\n\n    // Mongoose ValidationError: `errors` is a record keyed by field path, each\n    // value a per-path sub-error carrying its own `message`.\n    const mongooseErrors = (error as { errors?: unknown }).errors;\n    if (\n      error.name === 'ValidationError'\n      && mongooseErrors\n      && typeof mongooseErrors === 'object'\n      && !Array.isArray(mongooseErrors)\n    ) {\n      const mapped = Object.entries(mongooseErrors as Record<string, unknown>).map(\n        ([field, subError]) => {\n          const message = (subError as { message?: unknown } | null)?.message;\n          return {\n            path: [field] as (string | number)[],\n            message: typeof message === 'string' ? message : 'Invalid value',\n          };\n        },\n      );\n      return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n    }\n\n    return undefined;\n  }\n\n  /**\n   * @wildo_source:part:start saas.backend.error-builder.user-guidance facet:layer:backend facet:audience:app-developer\n   *\n   * Build an error with contextual user guidance.\n   *\n   * Reach for this instead of a bare `buildError` whenever the person who hits the failure could DO\n   * something about it. A typed error tells a caller what went wrong; guidance tells a human what to\n   * do next, and the frontend renders it from `ErrorResponse.error.userGuidance`.\n   *\n   * ⚠️ **Prefer `buildErrorWithGuidanceKey`.** The strings you pass here are rendered verbatim, so a\n   * guidance written this way is English forever — the key variant resolves labels under\n   * `errors_guidance.{guidanceKey}.{field}` and is translated like every other user-facing string.\n   * Use the raw form only for a failure no user will read, or as the fallback beneath a key.\n   *\n   * The guidance is attached to the error and will be included in the\n   * `ErrorResponse.error.userGuidance` field for the frontend to render.\n   *\n   * @example\n   * ```\n   * throw this.errorBuilder.buildErrorWithGuidance(\n   *   ErrorType.CONFIGURATION,\n   *   executionContext,\n   *   {\n   *     explanation: 'SMTP is not configured for this organization.',\n   *     resolution: 'Go to Settings → Email and configure your SMTP provider.',\n   *     nextAction: { label: 'Go to Settings', ref: '/settings/email', type: 'url' },\n   *     missingConfiguration: ['smtp_host', 'smtp_port'],\n   *   },\n   *   { customMessageReference: ErrorCustomMessageReference.GENERIC_DETAIL }\n   * );\n   * ```\n   */\n  public buildErrorWithGuidance(\n    errorType: ErrorType,\n    executionContext: ExecutionContext<any> | undefined,\n    guidance: ErrorUserGuidance,\n    options: {\n      customMessageReference?: ErrorCustomMessageReference;\n      context?: Record<string, any>;\n      stack?: string;\n    } = {}\n  ): WildoError_Backend {\n    const error = this.buildError(errorType, executionContext, options);\n    error.userGuidance = guidance;\n    return error;\n  }\n\n  /**\n   * Build an error with a guidance key (i18n reference).\n   *\n   * Shorthand for `buildErrorWithGuidance` that sets the `guidanceKey` on the guidance object,\n   * enabling i18n label resolution under `errors_guidance.{guidanceKey}.{field}`.\n   *\n   * @param errorType - The error type\n   * @param executionContext - Current execution context\n   * @param guidanceKey - i18n lookup key (resolves labels under `errors_guidance.{guidanceKey}.*`)\n   * @param guidance - Guidance fields (explanation, resolution, etc.) — used as raw fallbacks\n   * @param options - Additional error options\n   */\n  public buildErrorWithGuidanceKey(\n    errorType: ErrorType,\n    executionContext: ExecutionContext<any> | undefined,\n    guidanceKey: string,\n    guidance: Omit<ErrorUserGuidance, 'guidanceKey'> = {},\n    options: {\n      customMessageReference?: ErrorCustomMessageReference;\n      context?: Record<string, any>;\n      stack?: string;\n    } = {}\n  ): WildoError_Backend {\n    return this.buildErrorWithGuidance(errorType, executionContext, { ...guidance, guidanceKey }, options);\n  }\n  /** @wildo_source:part:end saas.backend.error-builder.user-guidance */\n\n  public wildoErrorToSimpleString(wildoError: any): string {\n\n    const isWildoError = wildoError && typeof wildoError === 'object' && 'statusCode' in wildoError && 'backendActions' in wildoError;\n    if(!isWildoError) {\n      return wildoError instanceof Error ? wildoError.message : \"Unknown error\";\n    }\n\n    let errorMessage = `${wildoError.customMessageReference as string} - ${wildoError.type} - ${wildoError.severity}`;\n    if(wildoError.context) {\n      errorMessage += `: ${JSON.stringify(wildoError.context)}`;\n    }\n    return errorMessage;\n  }\n\n  /**\n   * Sanitize an error for client-facing HTTP responses.\n   * Called at the serialization boundary (ErrorHandlerService), NOT at build time,\n   * so backend logging retains full context for diagnostics.\n   *\n   * - VALIDATION, CONFLICT, RATE_LIMIT: allowlist of frontend-useful context keys\n   * - AUTHENTICATION: allows `authResponse` through (retry/lockout UI data)\n   * - Everything else (AUTHZ, INTERNAL, DATABASE, etc.): strips context entirely\n   */\n  public sanitizeErrorForClient(wildoError: WildoError_Backend): WildoError_Backend {\n    // Error types whose context is safe to expose to clients (field-level info needed by frontend)\n    const safeTypes = new Set<ErrorType>([ErrorType.VALIDATION, ErrorType.CONFLICT, ErrorType.RATE_LIMIT]);\n\n    if (safeTypes.has(wildoError.type)) {\n      // For safe types: keep only frontend-relevant keys from context\n      if (wildoError.context) {\n        const allowedKeys = new Set([\n          'fieldName', 'duplicateValue', 'zodIssues', 'customErrorMessage',\n          'retryAfterSeconds', 'message', 'violations',\n          'versionConflict',\n          // Stable, client-branchable error codes (e.g. CrossFrontendHandoffErrorCode).\n          // These are non-PII enum values defined in shared schemas (`saas-models`)\n          // and consumed by both first-party clients (saas-frontend-lib) and\n          // out-of-tree clients (saas-technical-doc/docsAuthClient.ts) for switch-on-code\n          // branching. Stripping them at the wire would force callers to regex-parse\n          // the human-readable `message`, defeating the purpose of having a stable code\n          // enum. See cross-app-jwt-propagation.md C-4 for the contract decision that\n          // motivated promoting these keys (the docs-chat client must `import {\n          // CrossFrontendHandoffErrorCode } from '@wildo-ai/saas-models'` and branch on\n          // `error.details.code === CrossFrontendHandoffErrorCode.UNKNOWN_TARGET_FRONTEND`).\n          'code',\n          // Identity selectors that scope a code to a specific resource/service. Already\n          // present in the request the client made (so disclosure is a no-op), but echoing\n          // them back lets the client emit useful diagnostics (\"target frontend `docs` is\n          // not configured…\") without re-parsing its own request body. PII-safe by\n          // construction: these are SaaS-config service keys, never user data.\n          'targetServiceKey',\n          // ─────────────────────────────────────────────────────────────────────────\n          // GENERAL RULE for future endpoints emitting stable client-branchable codes:\n          //   1. Define the enum in `@wildo-ai/saas-models` (so frontend + backend share\n          //      the same source of truth) and reuse the `code` key above to carry it.\n          //      Do NOT invent a new \"errorKind\" / \"reason\" / \"type\" field — the docs-chat\n          //      and saas-frontend clients all switch on `error.details.code`.\n          //   2. New per-endpoint identity selectors (analogous to `targetServiceKey`)\n          //      MAY be added to this allowlist when they are PII-safe enum values OR\n          //      direct echoes of caller-supplied input (i.e. zero net disclosure).\n          //   3. NEVER add user-typed strings (emails, names, free-text) to this allowlist\n          //      — they belong in `customErrorMessage` / `message` and are already covered.\n          //   4. NEVER promote an internal cause (`stackTrace`, `dbErrorCode`, `mongoMessage`)\n          //      — those go through the AUTHZ/INTERNAL/DATABASE branches below which strip\n          //      context entirely. Surface a stable Wildo enum from the issuing service if\n          //      the caller needs to branch.\n          // ─────────────────────────────────────────────────────────────────────────\n        ]);\n        const sanitized: Record<string, unknown> = {};\n        for (const [key, value] of Object.entries(wildoError.context)) {\n          if (allowedKeys.has(key)) {\n            sanitized[key] = value;\n          }\n        }\n        return {\n          ...wildoError,\n          context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n        };\n      }\n      return wildoError;\n    }\n\n    // AUTHENTICATION errors: allow the minimum safe retry/lockout UI\n    // payload through. `authResponse` is the common case; for the\n    // specific `AUTHENTICATION_ACCOUNT_LOCKED` envelope, the global\n    // lockout bridge also needs `lockoutDurationMinutes`,\n    // `retryAfterSeconds`, and its lockout-specific `message`.\n    if (wildoError.type === ErrorType.AUTHENTICATION && wildoError.context) {\n      const authAllowedKeys = new Set(['authResponse']);\n      if (wildoError.customMessageReference === ErrorCustomMessageReference.AUTHENTICATION_ACCOUNT_LOCKED) {\n        authAllowedKeys.add('lockoutDurationMinutes');\n        authAllowedKeys.add('retryAfterSeconds');\n        authAllowedKeys.add('message');\n      }\n      const sanitized: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(wildoError.context)) {\n        if (authAllowedKeys.has(key)) {\n          sanitized[key] = value;\n        }\n      }\n      return {\n        ...wildoError,\n        context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n      };\n    }\n\n    // All other types (AUTHZ, INTERNAL, DATABASE, etc.): strip context entirely\n    const { context, ...rest } = wildoError;\n    return rest as WildoError_Backend;\n  }\n\n\n\n\n  private async executeBackendActions(wildoError: WildoError_Backend): Promise<void> {\n    wildoError.backendActions.forEach(action => {\n      try {\n        switch (action) {\n          case ErrorActionBackend.LOG:\n            // Intentionally NOT logged at construction. Error logging is a\n            // *handling-boundary* concern, not a *construction* concern: the\n            // boundary (HTTP `expressErrorHandler`, batch/cron, websocket auth,\n            // queue job-failure, response-DTO direct-send) is the only place\n            // where the operational severity can be classified, the request\n            // context (method/path/socketId/jobId) is available, and exactly\n            // one line per error is guaranteed. Logging here as well produced a\n            // double-log (and, historically, an unstructured multi-line blob).\n            // Boundaries emit the line via\n            // `logWildoBackendErrorAtClassifiedSeverity` /\n            // `projectWildoBackendErrorLogFields`.\n            break;\n          case ErrorActionBackend.RECORD_METRICS:\n            // Metrics recording would be handled by telemetry middleware\n            break;\n          case ErrorActionBackend.TRACE:\n            // Tracing would be handled by telemetry middleware\n            break;\n          case ErrorActionBackend.ALERT:\n            this.sendAlert(wildoError);\n            break;\n          case ErrorActionBackend.CIRCUIT_BREAK:\n            // Circuit breaker logic would be implemented in specific services\n            break;\n          case ErrorActionBackend.GRACEFUL_DEGRADATION:\n            // Graceful degradation would be handled by specific services\n            break;\n        }\n      } catch (actionError) {\n        // Don't let action execution errors break the main error flow\n        this.logger.warn('Failed to execute error action', {\n          action,\n          originalError: wildoError,\n          actionError: describeCaughtError(actionError)\n        });\n      }\n    });\n  }\n\n  /**\n   * Send alert for critical errors\n   */\n  private sendAlert(wildoError: WildoError_Backend): void {\n   // todo implement it;\n  }\n\n  /**\n   * Centralized error type determination based on error characteristics\n   * This method provides consistent error type classification across all services\n   */\n  public determineErrorType(error: Error): ErrorType {\n    const message = (error && typeof error.message === 'string') ? error.message.toLowerCase() : '';\n    const errorName = (error && typeof error.name === 'string') ? error.name : '';\n\n    // Check error name first for more specific classification\n    if (errorName === 'ValidationError' || errorName === 'ZodError') {\n      return ErrorType.VALIDATION;\n    }\n\n    if (errorName === 'MulterError') {\n      return ErrorType.VALIDATION;\n    }\n\n    // Body-parser (express.json / urlencoded / raw-body) rejections — an oversized or malformed request\n    // body — are CLIENT input problems, exactly like the MulterError case above (both are request-body\n    // libraries). They surface as `http-errors` carrying a string `type` (`entity.too.large`,\n    // `entity.parse.failed`, `charset.unsupported`, …) plus a well-known 4xx `status`/`statusCode`. Classify\n    // VALIDATION so a benign bad body returns a clean 4xx instead of masquerading as an INTERNAL 500 — which\n    // additionally mis-fires `severity:critical` alerting/SIEM on an ordinary bad request. Keyed on the\n    // body-parser `type`+4xx-`status` signature (NOT a bare `SyntaxError`/`Error` name), so a generic\n    // application error is never swept in, and the 5xx body-parser faults (`stream.not.readable`, …)\n    // correctly fall through to INTERNAL. (The `/oauth` mount additionally has a dedicated translator that\n    // preserves the exact status — see `applyOAuthBodyCap`. Framework-wide, an oversized body (413) classifies\n    // as PAYLOAD_TOO_LARGE so EVERY route returns the precise 413; the other body-parser client errors\n    // (malformed 400, unsupported-charset/encoding 415) fold into VALIDATION's 400 bucket.)\n    const bodyParserType = (error as { type?: unknown }).type;\n    const bodyParserStatus = (error as { status?: unknown }).status ?? (error as { statusCode?: unknown }).statusCode;\n    if (typeof bodyParserType === 'string' && typeof bodyParserStatus === 'number' && bodyParserStatus >= 400 && bodyParserStatus < 500) {\n      return bodyParserStatus === 413 ? ErrorType.PAYLOAD_TOO_LARGE : ErrorType.VALIDATION;\n    }\n\n    if (errorName === 'JsonWebTokenError' || errorName === 'TokenExpiredError') {\n      return ErrorType.AUTHENTICATION;\n    }\n\n    if (errorName === 'MongoError' || errorName === 'MongooseError') {\n      return ErrorType.DATABASE;\n    }\n\n    // Check message content for additional classification\n    if (message.includes('validation') || message.includes('invalid')) {\n      return ErrorType.VALIDATION;\n    }\n\n    if (message.includes('limit_file_size') || message.includes('file too large')) {\n      return ErrorType.VALIDATION;\n    }\n\n    if (message.includes('not found')) {\n      return ErrorType.NOT_FOUND;\n    }\n\n    if (message.includes('unauthorized')) {\n      return ErrorType.AUTHENTICATION;\n    }\n\n    if (message.includes('forbidden') || message.includes('permission')) {\n      return ErrorType.AUTHORIZATION;\n    }\n\n    if (message.includes('conflict') || message.includes('already exists')) {\n      return ErrorType.CONFLICT;\n    }\n\n    if (message.includes('network')) {\n      return ErrorType.NETWORK;\n    }\n\n    if (message.includes('rate limit') || message.includes('too many requests')) {\n      return ErrorType.RATE_LIMIT;\n    }\n\n    if (message.includes('business rule') || message.includes('constraint')) {\n      return ErrorType.BUSINESS_RULE;\n    }\n\n    // Default to INTERNAL for unclassified errors\n    return ErrorType.INTERNAL;\n  }\n}\n"]}

package/dist/esm/errors/services/error-handler.backend.service.d.ts

@@ -4,12 +4,66 @@ import { ErrorBuilderBackendService } from './error-builder.backend.service';
 import { WildoError_Backend } from '@wildo-ai/saas-models';
 import { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
 /**
- * Narrowly isolates uncaught exceptions that originate inside
- * `@opentelemetry/sdk-logs`'s background batch-flush timer from every other
- * uncaught exception. Matched ONLY by the presence of the `sdk-logs` package
- * segment in the stack trace — this is deliberately conservative: any error
- * whose stack does not clearly point into that package still hard-exits via
- * the default path, so a real host-state-corrupting bug is never masked.
+ * The package-path segments that identify Wildo's OTLP **export pipeline** in a
+ * stack trace: the signal processors that own the background flush timers, the
+ * exporters they hand batches to, and the shared OTLP serialize/send layer
+ * every exporter delegates into.
+ *
+ * The membership criterion is NOT "is this an OpenTelemetry package" — it is
+ * **"can a frame from this package ever appear in the stack of a HOST error?"**
+ * Every package listed here answers no: nothing in it invokes a caller-supplied
+ * callback, so it is reached only from a telemetry export tick (or from
+ * `sdk.shutdown()`). That is what makes a plain "does the stack mention it"
+ * substring test sound: a frame from one of these packages cannot be
+ * *routed through*, only *raised in*.
+ *
+ * `@opentelemetry/exporter-` is a PREFIX on purpose — it covers the three
+ * exporters `otel-preload.ts` wires today (`exporter-trace-otlp-http`,
+ * `exporter-metrics-otlp-http`, `exporter-logs-otlp-http`) and every transport
+ * sibling (`-proto`, `-grpc`, zipkin, prometheus) a future provider selection
+ * could swap in, without this list having to be revisited. Each is export-only
+ * by construction.
+ *
+ * Kept in step with the package's real OpenTelemetry dependency set by the
+ * totality pin in `__tests__/error-handler.backend.service.test.ts`, which
+ * enumerates every `@opentelemetry/*` entry in this package's own
+ * `package.json` and fails unless each one is either matched here or named in
+ * {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A name list with no
+ * link to whatever owns those names is the drift this carve-out already had
+ * once; the pin is that link. It is test-time rather than compile-time because
+ * the owning vocabulary is a JSON manifest, not a TypeScript symbol.
+ */
+export declare const TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS: readonly string[];
+/**
+ * The OpenTelemetry packages this carve-out deliberately does NOT isolate, each
+ * with the reason. This is not a leftover list: it is the other half of the
+ * totality pin, so that adding an OTel dependency forces a decision instead of
+ * silently landing outside both sets.
+ *
+ * The reason is the same for the whole first group and it is the one that
+ * matters: **these packages invoke host code**, so their frames appear in the
+ * stack of ordinary host crashes. Matching them would not widen a telemetry
+ * carve-out — it would suppress genuine host faults.
+ */
+export declare const TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED: readonly string[];
+/**
+ * Isolates an uncaught exception RAISED INSIDE the OTLP export pipeline —
+ * the background machinery that flushes logs, metrics and spans to the
+ * collector on a timer, independent of any request — from every other uncaught
+ * exception, which still hard-exits via the default path.
+ *
+ * WHAT THIS SUPPRESSES: a failure whose stack mentions one of
+ * {@link TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS}. Those packages never call
+ * host code (see that constant's note), so a stack that mentions one of them
+ * is a stack that was raised in one of them.
+ *
+ * WHAT IT MUST NOT SUPPRESS, and does not: anything raised in the host's own
+ * request/business logic, anything raised in OTel INSTRUMENTATION (which wraps
+ * host code), and anything in the trace/context tier a host stack routes
+ * through — see {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A
+ * carve-out that swallowed a genuine fault into a silently degraded process
+ * would be strictly worse than the crash it prevents, which is why the
+ * criterion is "cannot be on a host stack" rather than "is telemetry".
  *
  * Root cause (2026-08-06): the timer callback in
  * `BatchLogRecordProcessorBase` does `this._flushOneBatch().then(...).catch(...)`
@@ -19,6 +73,14 @@ import { ExecutionContext } from '../../runtime/models/execution-context.backend
  * `globalErrorHandler` safety net could catch it, so the failure escaped as a
  * process-level uncaught exception — killing an otherwise-healthy host over a
  * background telemetry-export housekeeping tick.
+ *
+ * WIDENED 2026-09-09. The original predicate matched the single literal
+ * `@opentelemetry/sdk-logs`, which is where that one incident happened to be
+ * raised — so the identical promise-chain/transport failure arriving from the
+ * METRIC reader or from ANY of the three OTLP exporters was not isolated and
+ * hard-exited the host. Keying a carve-out on one package NAME makes its reach
+ * an accident of which pipeline failed first; the property that actually
+ * distinguishes the case is the export pipeline itself.
  */
 export declare function isNonFatalTelemetryPipelineException(error: Error): boolean;
 /**
@@ -56,7 +118,8 @@ export declare class ErrorHandlerService {
      * isolated by {@link isNonFatalTelemetryPipelineException}. Node's own
      * guidance ("uncaught exception means unknown state, exit") assumes the
      * failure came from the host's own request/business logic. A background
-     * telemetry batch-flush timer (OTel's `BatchLogRecordProcessor`, ticking
+     * telemetry export tick (OTel's `BatchLogRecordProcessor` or
+     * `PeriodicExportingMetricReader`, and the OTLP exporters they feed, ticking
      * every few seconds independently of any request) is a different failure
      * domain: its own state corruption says nothing about whether the host's
      * actual work is safe to continue, and `otel-preload.ts` already commits to

package/dist/esm/errors/services/error-handler.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-handler.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAK7E,OAAO,EAIL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAG,MAAM,qEAAqE,CAAC;AAExG;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAE1E;AAED;;;GAGG;AACH,qBACa,mBAAmB;IAIO,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAJtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAGpC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMlG;;;OAGG;IACH,mBAAmB,IAAI,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAyCjH,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI;IAW3G,OAAO,CAAC,iBAAiB;IA4GzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAMrF;;OAEG;IACH,wBAAwB,IAAI,IAAI;IAiBhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG;IACH,uBAAuB,IAAI,IAAI;IAsB/B;;OAEG;IACH,wBAAwB,IAAI,IAAI;CAKjC"}
+{"version":3,"file":"error-handler.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAK7E,OAAO,EAIL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAG,MAAM,qEAAqE,CAAC;AAExG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,uCAAuC,EAAE,SAAS,MAAM,EAmBpE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4CAA4C,EAAE,SAAS,MAAM,EAoCzE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAI1E;AAED;;;GAGG;AACH,qBACa,mBAAmB;IAIO,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAJtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAGpC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMlG;;;OAGG;IACH,mBAAmB,IAAI,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAyCjH,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI;IAW3G,OAAO,CAAC,iBAAiB;IA4GzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAMrF;;OAEG;IACH,wBAAwB,IAAI,IAAI;IAiBhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;IACH,uBAAuB,IAAI,IAAI;IAsB/B;;OAEG;IACH,wBAAwB,IAAI,IAAI;CAKjC"}