npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.2 → 1.1.4 - Mend

@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1358) hide show

package/dist/esm/errors/services/error-builder.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"error-builder.backend.service.js","sourceRoot":"","sources":["../../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,kBAAkB,EAGlB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAElC,sBAAsB,EACtB,uBAAuB,EAEvB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAGnH;;;GAGG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAKQ;IAJnC,QAAQ,CAA+D;IAEjF,YAE6C,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEhE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACI,UAAU,CACf,SAAoB,EACpB,gBAAwC,EACxC,UAMI,EAAE;QAEN,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;QAC9C,MAAM,uBAAuB,GAAG,OAAO,CAAC,kBAAkB;YACxD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,CACrC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAC5D,CAAC;QAEJ,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,kCAAkC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,SAA2D,CAAC;YACrJ,CAAC,CAAC,SAAS,CAAC;QAGd,uEAAuE;QACvE,kFAAkF;QAClF,MAAM,UAAU,GAAuB;YACrC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,gBAAgB;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,uBAAuB;YACvC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,eAAe,CAAC,6BAA6B;YACvG,UAAU;YACV,qBAAqB,EAAE,eAAe,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,IAAI;YAC3F,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,uBAAuB,CAAC,WAAW;YAC/E,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,CAAC;YAC3C,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,IAAI;YAClD,SAAS,EAAE,eAAe,CAAC,SAAS,IAAI,IAAI;YAC5C,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,SAAS;YACzD,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,SAAS;YAC3D,oGAAoG;YACpG,qGAAqG;YACrG,mGAAmG;YACnG,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,uBAAuB,EAAE;YAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACtC,CAAC;QAEF,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,wCAAwC;YACxC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,sBAAsB,CAAC,KAAc,EAAE,gBAAwC,EAAE,UAKpF,EAAE;QACJ,kFAAkF;QAClF,EAAE;QACF,qFAAqF;QACrF,sFAAsF;QACtF,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,6DAA6D;QAC7D,EAAE;QACF,mFAAmF;QACnF,0FAA0F;QAC1F,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,gBAAgB;QAChB,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,wEAAwE;QACxE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE;gBACnD,GAAG,OAAO;gBACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB;gBACtF,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE/C,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,8EAA8E;QAC9E,kEAAkE;QAClE,6EAA6E;QAC7E,4CAA4C;QAC5C,EAAE;QACF,2EAA2E;QAC3E,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,SAAS,KAAK,SAAS,CAAC,UAAU;YACzD,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,aAAa,GAAG,gBAAgB;YACpC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;YAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAEpB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE;YAClD,GAAG,OAAO;YACV,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,iCAAiC,CACvC,KAAY;QAEZ,kEAAkE;QAClE,4EAA4E;QAC5E,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,SAAS,GAAI,KAA8B,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,SAAS;iBACrB,MAAM,CACL,CAAC,KAAK,EAA2D,EAAE,CACjE,CAAC,CAAC,KAAK;mBACJ,OAAO,KAAK,KAAK,QAAQ;mBACzB,KAAK,CAAC,OAAO,CAAE,KAA4B,CAAC,IAAI,CAAC;mBACjD,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ,CAClE;iBACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,cAAc,GAAI,KAA8B,CAAC,MAAM,CAAC;QAC9D,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;eAC7B,cAAc;eACd,OAAO,cAAc,KAAK,QAAQ;eAClC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EACjC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAyC,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACpB,MAAM,OAAO,GAAI,QAAyC,EAAE,OAAO,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,CAAC,KAAK,CAAwB;oBACpC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBACjE,CAAC;YACJ,CAAC,CACF,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,sBAAsB,CAC3B,SAAoB,EACpB,gBAAmD,EACnD,QAA2B,EAC3B,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAoB,EACpB,gBAAmD,EACnD,WAAmB,EACnB,WAAmD,EAAE,EACrD,UAII,EAAE;QAEN,OAAO,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAEM,wBAAwB,CAAC,UAAe;QAE7C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,YAAY,IAAI,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC;QAClI,IAAG,CAAC,YAAY,EAAE,CAAC;YACjB,OAAO,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC5E,CAAC;QAED,IAAI,YAAY,GAAG,GAAG,UAAU,CAAC,sBAAgC,MAAM,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClH,IAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,YAAY,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAA8B;QAC1D,+FAA+F;QAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAY,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvG,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,gEAAgE;YAChE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB;oBAChE,mBAAmB,EAAE,SAAS,EAAE,YAAY;oBAC5C,iBAAiB;oBACjB,8EAA8E;oBAC9E,0EAA0E;oBAC1E,mEAAmE;oBACnE,gFAAgF;oBAChF,2EAA2E;oBAC3E,8EAA8E;oBAC9E,4EAA4E;oBAC5E,sEAAsE;oBACtE,8EAA8E;oBAC9E,mFAAmF;oBACnF,MAAM;oBACN,+EAA+E;oBAC/E,iFAAiF;oBACjF,gFAAgF;oBAChF,yEAAyE;oBACzE,qEAAqE;oBACrE,kBAAkB;oBAClB,4EAA4E;oBAC5E,6EAA6E;oBAC7E,+EAA+E;oBAC/E,6EAA6E;oBAC7E,iFAAiF;oBACjF,qEAAqE;oBACrE,6EAA6E;oBAC7E,4EAA4E;oBAC5E,0EAA0E;oBAC1E,iFAAiF;oBACjF,kFAAkF;oBAClF,qFAAqF;oBACrF,iFAAiF;oBACjF,iFAAiF;oBACjF,mCAAmC;oBACnC,4EAA4E;iBAC7E,CAAC,CAAC;gBACH,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,GAAG,UAAU;oBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,gEAAgE;QAChE,sDAAsD;QACtD,2DAA2D;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,sBAAsB,KAAK,2BAA2B,CAAC,6BAA6B,EAAE,CAAC;gBACpG,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACzC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9D,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACnE,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,UAA8B;QAChE,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,CAAC;gBACH,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,kBAAkB,CAAC,GAAG;wBACzB,+DAA+D;wBAC/D,iEAAiE;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,gEAAgE;wBAChE,iEAAiE;wBACjE,oEAAoE;wBACpE,mEAAmE;wBACnE,+BAA+B;wBAC/B,+CAA+C;wBAC/C,uCAAuC;wBACvC,MAAM;oBACR,KAAK,kBAAkB,CAAC,cAAc;wBACpC,6DAA6D;wBAC7D,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,mDAAmD;wBACnD,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC3B,MAAM;oBACR,KAAK,kBAAkB,CAAC,aAAa;wBACnC,kEAAkE;wBAClE,MAAM;oBACR,KAAK,kBAAkB,CAAC,oBAAoB;wBAC1C,6DAA6D;wBAC7D,MAAM;gBACV,CAAC;YACH,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACjD,MAAM;oBACN,aAAa,EAAE,UAAU;oBACzB,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,UAA8B;QAC/C,qBAAqB;IACtB,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,KAAY;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,0DAA0D;QAC1D,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,oGAAoG;QACpG,mGAAmG;QACnG,0FAA0F;QAC1F,yGAAyG;QACzG,yGAAyG;QACzG,oGAAoG;QACpG,kGAAkG;QAClG,iGAAiG;QACjG,uGAAuG;QACvG,2GAA2G;QAC3G,mGAAmG;QACnG,wFAAwF;QACxF,MAAM,cAAc,GAAI,KAA4B,CAAC,IAAI,CAAC;QAC1D,MAAM,gBAAgB,GAAI,KAA8B,CAAC,MAAM,IAAK,KAAkC,CAAC,UAAU,CAAC;QAClH,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,IAAI,GAAG,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;YACpI,OAAO,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QACvF,CAAC;QAED,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,SAAS,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,8CAA8C;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;CACF,CAAA;AA3gBY,0BAA0B;IADtC,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;qCAAiB,aAAa;GALvD,0BAA0B,CA2gBtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport {\n ErrorType,\n ErrorActionBackend,\n WildoError_Backend_Definition,\n WildoError_Backend,\n ErrorCustomMessageReference,\n ERROR_DEFINITIONS,\n ResourcesConfig_OperationPathUtils,\n ResourceConfiguration_Operation,\n ErrorHandling_Strategy,\n RetryPolicy_BackoffType,\n ErrorUserGuidance,\n isWildoBackendError,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n\n/*\n Backend Error Builder Service\n * Creates unified WildoError_Backend instances with ExecutionContext integration\n /\n@injectable()\nexport class ErrorBuilderBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n\n @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService\n ) {\n this.logDebug = this.logger.debugByType('ErrorBuilderBackendService');\n this.logger.setDebugTypeLogging('ErrorBuilderBackendService', false);\n }\n\n /\n Build a WildoError_Backend with ExecutionContext integration\n /\n public buildError(\n errorType: ErrorType,\n executionContext?: ExecutionContext<any>,\n options: {\n customMessageReference?: ErrorCustomMessageReference,\n context?: Record<string, any>\n stack?: string;\n skipBackendActions?: boolean;\n skipBackendActionTypes?: readonly ErrorActionBackend[];\n } = {}\n ): WildoError_Backend {\n const errorDefinition = ERROR_DEFINITIONS[errorType];\n const statusCode = errorDefinition.statusCode;\n const effectiveBackendActions = options.skipBackendActions\n ? []\n : errorDefinition.backendActions.filter(\n action => !options.skipBackendActionTypes?.includes(action)\n );\n\n // Extract operation path from execution context\n const operationPathKey = (executionContext)\n ? ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(executionContext.operation as ResourceConfiguration_Operation<any, any, any>)\n : undefined;\n\n\n // Build the WildoError_Backend (context preserved for backend logging;\n // sanitization happens at the HTTP serialization boundary in ErrorHandlerService)\n const wildoError: WildoError_Backend = {\n type: errorType,\n severity: errorDefinition.severity,\n operationPathKey,\n timestamp: new Date(),\n backendActions: effectiveBackendActions,\n customMessageReference: options.customMessageReference ?? errorDefinition.defaultCustomMessageReference,\n statusCode,\n errorHandlingStrategy: errorDefinition.errorHandlingStrategy ?? ErrorHandling_Strategy.STOP,\n retryPolicy: errorDefinition.retryPolicy ?? RetryPolicy_BackoffType.EXPONENTIAL,\n maxRetries: errorDefinition.maxRetries ?? 3,\n initialDelay: errorDefinition.initialDelay ?? 1000,\n baseDelay: errorDefinition.baseDelay ?? 1000,\n initiatorIds: executionContext?.initiatorIds ?? undefined,\n executionType: executionContext?.executionType ?? undefined,\n // Phase 3 — closes gap 3: prefer the threaded EC's id, but fall back to the ambient request-context\n // ALS frame when no EC was passed (the ~67% of buildError calls that pass `undefined`). This is what\n // makes an error built deep in a service — with no EC in hand — still attributable to its request.\n correlationId: executionContext?.correlationId ?? getCurrentCorrelationId(),\n stack: options.stack ?? undefined,\n context: options.context ?? undefined,\n };\n\n // Some callers (for example websocket handshake auth) need to reclassify an\n // expected failure locally instead of emitting the default backend warning.\n if (effectiveBackendActions.length > 0) {\n // Execute backend actions. do not await\n this.executeBackendActions(wildoError);\n }\n\n return wildoError;\n }\n\n public buildFromStandardError(error: unknown, executionContext?: ExecutionContext<any>, options: {\n customMessageReference?: ErrorCustomMessageReference,\n context?: Record<string, any>\n skipBackendActions?: boolean;\n skipBackendActionTypes?: readonly ErrorActionBackend[];\n } = {}): WildoError_Backend {\n // An ALREADY-CLASSIFIED backend error must never be re-derived from scratch here.\n //\n // `WildoError_Backend` is a Zod-INFERRED PLAIN OBJECT, not an `Error` subclass, so a\n // re-wrap fell into the `new Error('Unknown error')` branch below: the caught error's\n // `type`, its `context` (which is where every builder puts the real explanation — the\n // enumerated validation failures, the adapter name, the failing boundary) and its stack\n // were all discarded, and the wrapper was re-classified INTERNAL from a synthetic Error\n // whose only message was the literal string `Unknown error`.\n //\n // That is not a cosmetic loss. It is exactly how a boot failure reaches the log as\n // `{\"errorType\":\"INTERNAL\",\"msg\":\"Application initialization failed\"}` with a stack whose\n // top frame is this method — naming the wrapper and nothing about the cause. Measured\n // 2026-08-14 on `platform-apps-manager`, where a post-registry configuration validation\n // threw with its failing contracts enumerated in `context.message` and the operator saw\n // none of them.\n //\n // The caught error's classification wins: it was chosen deliberately by whoever built it,\n // and this seam's callers pass attribution (`service`, `operation`), not a reclassification.\n // Caller context still wins on key collision, matching the merge below.\n if (isWildoBackendError(error)) {\n return this.buildError(error.type, executionContext, {\n ...options,\n customMessageReference: options.customMessageReference ?? error.customMessageReference,\n context: { ...error.context, ...options.context },\n stack: error.stack,\n });\n }\n\n const err = error instanceof Error\n ? error\n : new Error(typeof error === 'string' ? error : 'Unknown error');\n\n const errorType = this.determineErrorType(err);\n\n // A RAW ZodError / Mongoose ValidationError can reach this global seam\n // (e.g. an express error boundary) WITHOUT having gone through the explicit\n // controller/service validation path, which is the only place that attaches\n // `context.zodIssues` itself. Such an error is still classified VALIDATION\n // by `determineErrorType` (via the name/message heuristics), but it arrives\n // here with no field-level detail — so the client would otherwise receive an\n // opaque `{ type: VALIDATION }` with the real message living only in the\n // (often inaccessible) backend log. Project the error's per-field issues into\n // the same `zodIssues` shape that `sendErrorResponse` surfaces as\n // `validationErrors`, so raw validation failures are debuggable from the API\n // response like the explicit-path ones are.\n //\n // Scoped strictly to VALIDATION-classified errors: no field detail is ever\n // attached to AUTHZ/INTERNAL/DATABASE/etc. errors, preserving the\n // `sanitizeErrorForClient` boundary that strips their context. Only the field\n // path + per-field message are lifted — both already client-safe (they ride\n // the `zodIssues` allowlist, and VALIDATION is a \"safe\" type). The internal\n // `err.message` / stack are deliberately NOT surfaced here.\n const fieldLevelDetail = errorType === ErrorType.VALIDATION\n ? this.extractFieldLevelValidationDetail(err)\n : undefined;\n\n // Caller-supplied context wins on key collision (an explicit path that set\n // `zodIssues` should not be overwritten by the duck-typed extraction).\n const mergedContext = fieldLevelDetail\n ? { ...fieldLevelDetail, ...options.context }\n : options.context;\n\n return this.buildError(errorType, executionContext, {\n ...options,\n context: mergedContext,\n stack: err.stack\n });\n }\n\n /\n Extract client-safe field-level detail from a RAW validation error — a plain\n * `ZodError` or a Mongoose `ValidationError` — that reached the global error\n * boundary without going through the explicit controller/service validation\n * path (which attaches `context.zodIssues` itself).\n \n Returns the detail in the `{ zodIssues }` shape that\n * `ErrorHandlerService.sendErrorResponse` reduces into the response\n * `validationErrors` map (`{ [fieldPath]: message }`). Only the field `path`\n * and per-field `message` are extracted — both already deemed client-safe (they\n * ride the `zodIssues` allowlist in `sanitizeErrorForClient`, and VALIDATION is\n * a \"safe\" error type). The error's own `message` / stack are NOT included, so\n * internal implementation detail never leaks to the client.\n \n Returns `undefined` when the error is not a recognisable field-level\n * validation error (e.g. a generic `Error` whose message merely contains the\n * substring \"invalid\", which `determineErrorType` still classifies VALIDATION)\n * — in that case no `zodIssues` are attached.\n /\n private extractFieldLevelValidationDetail(\n error: Error,\n ): { zodIssues: Array<{ path: (string \| number)[]; message: string }> } \| undefined {\n // Zod (any instance): duck-type on the `issues` array rather than\n // `instanceof z.ZodError`. Multiple Zod module instances can coexist in the\n // dependency graph, so a nominal `instanceof` check is unreliable at this\n // shared boundary — the shape check is the robust classifier.\n const zodIssues = (error as { issues?: unknown }).issues;\n if (error.name === 'ZodError' && Array.isArray(zodIssues)) {\n const mapped = zodIssues\n .filter(\n (issue): issue is { path: (string \| number)[]; message: string } =>\n !!issue\n && typeof issue === 'object'\n && Array.isArray((issue as { path?: unknown }).path)\n && typeof (issue as { message?: unknown }).message === 'string',\n )\n .map(issue => ({ path: issue.path, message: issue.message }));\n return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n }\n\n // Mongoose ValidationError: `errors` is a record keyed by field path, each\n // value a per-path sub-error carrying its own `message`.\n const mongooseErrors = (error as { errors?: unknown }).errors;\n if (\n error.name === 'ValidationError'\n && mongooseErrors\n && typeof mongooseErrors === 'object'\n && !Array.isArray(mongooseErrors)\n ) {\n const mapped = Object.entries(mongooseErrors as Record<string, unknown>).map(\n ([field, subError]) => {\n const message = (subError as { message?: unknown } \| null)?.message;\n return {\n path: [field] as (string \| number)[],\n message: typeof message === 'string' ? message : 'Invalid value',\n };\n },\n );\n return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n }\n\n return undefined;\n }\n\n /\n Build an error with contextual user guidance (Phase 1b).\n \n The guidance is attached to the error and will be included in the\n * `ErrorResponse.error.userGuidance` field for the frontend to render.\n \n @example\n * ```\n * throw this.errorBuilder.buildErrorWithGuidance(\n * ErrorType.CONFIGURATION,\n * executionContext,\n * {\n * explanation: 'SMTP is not configured for this organization.',\n * resolution: 'Go to Settings → Email and configure your SMTP provider.',\n * nextAction: { label: 'Go to Settings', ref: '/settings/email', type: 'url' },\n * missingConfiguration: ['smtp_host', 'smtp_port'],\n * },\n * { customMessageReference: ErrorCustomMessageReference.GENERIC_DETAIL }\n * );\n * ```\n /\n public buildErrorWithGuidance(\n errorType: ErrorType,\n executionContext: ExecutionContext<any> \| undefined,\n guidance: ErrorUserGuidance,\n options: {\n customMessageReference?: ErrorCustomMessageReference;\n context?: Record<string, any>;\n stack?: string;\n } = {}\n ): WildoError_Backend {\n const error = this.buildError(errorType, executionContext, options);\n error.userGuidance = guidance;\n return error;\n }\n\n /\n Build an error with a guidance key (i18n reference).\n \n Shorthand for `buildErrorWithGuidance` that sets the `guidanceKey` on the guidance object,\n * enabling i18n label resolution under `errors_guidance.{guidanceKey}.{field}`.\n \n @param errorType - The error type\n * @param executionContext - Current execution context\n * @param guidanceKey - i18n lookup key (resolves labels under `errors_guidance.{guidanceKey}.`)\n @param guidance - Guidance fields (explanation, resolution, etc.) — used as raw fallbacks\n * @param options - Additional error options\n /\n public buildErrorWithGuidanceKey(\n errorType: ErrorType,\n executionContext: ExecutionContext<any> \| undefined,\n guidanceKey: string,\n guidance: Omit<ErrorUserGuidance, 'guidanceKey'> = {},\n options: {\n customMessageReference?: ErrorCustomMessageReference;\n context?: Record<string, any>;\n stack?: string;\n } = {}\n ): WildoError_Backend {\n return this.buildErrorWithGuidance(errorType, executionContext, { ...guidance, guidanceKey }, options);\n }\n\n public wildoErrorToSimpleString(wildoError: any): string {\n\n const isWildoError = wildoError && typeof wildoError === 'object' && 'statusCode' in wildoError && 'backendActions' in wildoError;\n if(!isWildoError) {\n return wildoError instanceof Error ? wildoError.message : \"Unknown error\";\n }\n\n let errorMessage = `${wildoError.customMessageReference as string} - ${wildoError.type} - ${wildoError.severity}`;\n if(wildoError.context) {\n errorMessage += `: ${JSON.stringify(wildoError.context)}`;\n }\n return errorMessage;\n }\n\n /\n Sanitize an error for client-facing HTTP responses.\n * Called at the serialization boundary (ErrorHandlerService), NOT at build time,\n * so backend logging retains full context for diagnostics.\n \n - VALIDATION, CONFLICT, RATE_LIMIT: allowlist of frontend-useful context keys\n * - AUTHENTICATION: allows `authResponse` through (retry/lockout UI data)\n * - Everything else (AUTHZ, INTERNAL, DATABASE, etc.): strips context entirely\n /\n public sanitizeErrorForClient(wildoError: WildoError_Backend): WildoError_Backend {\n // Error types whose context is safe to expose to clients (field-level info needed by frontend)\n const safeTypes = new Set<ErrorType>([ErrorType.VALIDATION, ErrorType.CONFLICT, ErrorType.RATE_LIMIT]);\n\n if (safeTypes.has(wildoError.type)) {\n // For safe types: keep only frontend-relevant keys from context\n if (wildoError.context) {\n const allowedKeys = new Set([\n 'fieldName', 'duplicateValue', 'zodIssues', 'customErrorMessage',\n 'retryAfterSeconds', 'message', 'violations',\n 'versionConflict',\n // Stable, client-branchable error codes (e.g. CrossFrontendHandoffErrorCode).\n // These are non-PII enum values defined in shared schemas (`saas-models`)\n // and consumed by both first-party clients (saas-frontend-lib) and\n // out-of-tree clients (saas-technical-doc/docsAuthClient.ts) for switch-on-code\n // branching. Stripping them at the wire would force callers to regex-parse\n // the human-readable `message`, defeating the purpose of having a stable code\n // enum. See cross-app-jwt-propagation.md C-4 for the contract decision that\n // motivated promoting these keys (the docs-chat client must `import {\n // CrossFrontendHandoffErrorCode } from '@wildo-ai/saas-models'` and branch on\n // `error.details.code === CrossFrontendHandoffErrorCode.UNKNOWN_TARGET_FRONTEND`).\n 'code',\n // Identity selectors that scope a code to a specific resource/service. Already\n // present in the request the client made (so disclosure is a no-op), but echoing\n // them back lets the client emit useful diagnostics (\"target frontend `docs` is\n // not configured…\") without re-parsing its own request body. PII-safe by\n // construction: these are SaaS-config service keys, never user data.\n 'targetServiceKey',\n // ─────────────────────────────────────────────────────────────────────────\n // GENERAL RULE for future endpoints emitting stable client-branchable codes:\n // 1. Define the enum in `@wildo-ai/saas-models` (so frontend + backend share\n // the same source of truth) and reuse the `code` key above to carry it.\n // Do NOT invent a new \"errorKind\" / \"reason\" / \"type\" field — the docs-chat\n // and saas-frontend clients all switch on `error.details.code`.\n // 2. New per-endpoint identity selectors (analogous to `targetServiceKey`)\n // MAY be added to this allowlist when they are PII-safe enum values OR\n // direct echoes of caller-supplied input (i.e. zero net disclosure).\n // 3. NEVER add user-typed strings (emails, names, free-text) to this allowlist\n // — they belong in `customErrorMessage` / `message` and are already covered.\n // 4. NEVER promote an internal cause (`stackTrace`, `dbErrorCode`, `mongoMessage`)\n // — those go through the AUTHZ/INTERNAL/DATABASE branches below which strip\n // context entirely. Surface a stable Wildo enum from the issuing service if\n // the caller needs to branch.\n // ─────────────────────────────────────────────────────────────────────────\n ]);\n const sanitized: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(wildoError.context)) {\n if (allowedKeys.has(key)) {\n sanitized[key] = value;\n }\n }\n return {\n ...wildoError,\n context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n };\n }\n return wildoError;\n }\n\n // AUTHENTICATION errors: allow the minimum safe retry/lockout UI\n // payload through. `authResponse` is the common case; for the\n // specific `AUTHENTICATION_ACCOUNT_LOCKED` envelope, the global\n // lockout bridge also needs `lockoutDurationMinutes`,\n // `retryAfterSeconds`, and its lockout-specific `message`.\n if (wildoError.type === ErrorType.AUTHENTICATION && wildoError.context) {\n const authAllowedKeys = new Set(['authResponse']);\n if (wildoError.customMessageReference === ErrorCustomMessageReference.AUTHENTICATION_ACCOUNT_LOCKED) {\n authAllowedKeys.add('lockoutDurationMinutes');\n authAllowedKeys.add('retryAfterSeconds');\n authAllowedKeys.add('message');\n }\n const sanitized: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(wildoError.context)) {\n if (authAllowedKeys.has(key)) {\n sanitized[key] = value;\n }\n }\n return {\n ...wildoError,\n context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n };\n }\n\n // All other types (AUTHZ, INTERNAL, DATABASE, etc.): strip context entirely\n const { context, ...rest } = wildoError;\n return rest as WildoError_Backend;\n }\n\n\n\n\n private async executeBackendActions(wildoError: WildoError_Backend): Promise<void> {\n wildoError.backendActions.forEach(action => {\n try {\n switch (action) {\n case ErrorActionBackend.LOG:\n // Intentionally NOT logged at construction. Error logging is a\n // handling-boundary* concern, not a construction concern: the\n // boundary (HTTP `expressErrorHandler`, batch/cron, websocket auth,\n // queue job-failure, response-DTO direct-send) is the only place\n // where the operational severity can be classified, the request\n // context (method/path/socketId/jobId) is available, and exactly\n // one line per error is guaranteed. Logging here as well produced a\n // double-log (and, historically, an unstructured multi-line blob).\n // Boundaries emit the line via\n // `logWildoBackendErrorAtClassifiedSeverity` /\n // `projectWildoBackendErrorLogFields`.\n break;\n case ErrorActionBackend.RECORD_METRICS:\n // Metrics recording would be handled by telemetry middleware\n break;\n case ErrorActionBackend.TRACE:\n // Tracing would be handled by telemetry middleware\n break;\n case ErrorActionBackend.ALERT:\n this.sendAlert(wildoError);\n break;\n case ErrorActionBackend.CIRCUIT_BREAK:\n // Circuit breaker logic would be implemented in specific services\n break;\n case ErrorActionBackend.GRACEFUL_DEGRADATION:\n // Graceful degradation would be handled by specific services\n break;\n }\n } catch (actionError) {\n // Don't let action execution errors break the main error flow\n this.logger.warn('Failed to execute error action', {\n action,\n originalError: wildoError,\n actionError: describeCaughtError(actionError)\n });\n }\n });\n }\n\n /*\n Send alert for critical errors\n /\n private sendAlert(wildoError: WildoError_Backend): void {\n // todo implement it;\n }\n\n /\n Centralized error type determination based on error characteristics\n * This method provides consistent error type classification across all services\n */\n public determineErrorType(error: Error): ErrorType {\n const message = (error && typeof error.message === 'string') ? error.message.toLowerCase() : '';\n const errorName = (error && typeof error.name === 'string') ? error.name : '';\n\n // Check error name first for more specific classification\n if (errorName === 'ValidationError' \|\| errorName === 'ZodError') {\n return ErrorType.VALIDATION;\n }\n\n if (errorName === 'MulterError') {\n return ErrorType.VALIDATION;\n }\n\n // Body-parser (express.json / urlencoded / raw-body) rejections — an oversized or malformed request\n // body — are CLIENT input problems, exactly like the MulterError case above (both are request-body\n // libraries). They surface as `http-errors` carrying a string `type` (`entity.too.large`,\n // `entity.parse.failed`, `charset.unsupported`, …) plus a well-known 4xx `status`/`statusCode`. Classify\n // VALIDATION so a benign bad body returns a clean 4xx instead of masquerading as an INTERNAL 500 — which\n // additionally mis-fires `severity:critical` alerting/SIEM on an ordinary bad request. Keyed on the\n // body-parser `type`+4xx-`status` signature (NOT a bare `SyntaxError`/`Error` name), so a generic\n // application error is never swept in, and the 5xx body-parser faults (`stream.not.readable`, …)\n // correctly fall through to INTERNAL. (The `/oauth` mount additionally has a dedicated translator that\n // preserves the exact status — see `applyOAuthBodyCap`. Framework-wide, an oversized body (413) classifies\n // as PAYLOAD_TOO_LARGE so EVERY route returns the precise 413; the other body-parser client errors\n // (malformed 400, unsupported-charset/encoding 415) fold into VALIDATION's 400 bucket.)\n const bodyParserType = (error as { type?: unknown }).type;\n const bodyParserStatus = (error as { status?: unknown }).status ?? (error as { statusCode?: unknown }).statusCode;\n if (typeof bodyParserType === 'string' && typeof bodyParserStatus === 'number' && bodyParserStatus >= 400 && bodyParserStatus < 500) {\n return bodyParserStatus === 413 ? ErrorType.PAYLOAD_TOO_LARGE : ErrorType.VALIDATION;\n }\n\n if (errorName === 'JsonWebTokenError' \|\| errorName === 'TokenExpiredError') {\n return ErrorType.AUTHENTICATION;\n }\n\n if (errorName === 'MongoError' \|\| errorName === 'MongooseError') {\n return ErrorType.DATABASE;\n }\n\n // Check message content for additional classification\n if (message.includes('validation') \|\| message.includes('invalid')) {\n return ErrorType.VALIDATION;\n }\n\n if (message.includes('limit_file_size') \|\| message.includes('file too large')) {\n return ErrorType.VALIDATION;\n }\n\n if (message.includes('not found')) {\n return ErrorType.NOT_FOUND;\n }\n\n if (message.includes('unauthorized')) {\n return ErrorType.AUTHENTICATION;\n }\n\n if (message.includes('forbidden') \|\| message.includes('permission')) {\n return ErrorType.AUTHORIZATION;\n }\n\n if (message.includes('conflict') \|\| message.includes('already exists')) {\n return ErrorType.CONFLICT;\n }\n\n if (message.includes('network')) {\n return ErrorType.NETWORK;\n }\n\n if (message.includes('rate limit') \|\| message.includes('too many requests')) {\n return ErrorType.RATE_LIMIT;\n }\n\n if (message.includes('business rule') \|\| message.includes('constraint')) {\n return ErrorType.BUSINESS_RULE;\n }\n\n // Default to INTERNAL for unclassified errors\n return ErrorType.INTERNAL;\n }\n}\n"]}
1	+ {"version":3,"file":"error-builder.backend.service.js","sourceRoot":"","sources":["../../../../src/errors/services/error-builder.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,kBAAkB,EAGlB,2BAA2B,EAC3B,iBAAiB,EACjB,kCAAkC,EAElC,sBAAsB,EACtB,uBAAuB,EAEvB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAGnH;;;GAGG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAKQ;IAJnC,QAAQ,CAA+D;IAEjF,YAE6C,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEhE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACI,UAAU,CACf,SAAoB,EACpB,gBAAwC,EACxC,UAMI,EAAE;QAEN,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;QAC9C,MAAM,uBAAuB,GAAG,OAAO,CAAC,kBAAkB;YACxD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,CACrC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAC5D,CAAC;QAEJ,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,CAAC;YACzC,CAAC,CAAC,kCAAkC,CAAC,kCAAkC,CAAC,gBAAgB,CAAC,SAA2D,CAAC;YACrJ,CAAC,CAAC,SAAS,CAAC;QAGd,uEAAuE;QACvE,kFAAkF;QAClF,MAAM,UAAU,GAAuB;YACrC,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,gBAAgB;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,uBAAuB;YACvC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,eAAe,CAAC,6BAA6B;YACvG,UAAU;YACV,qBAAqB,EAAE,eAAe,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,IAAI;YAC3F,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,uBAAuB,CAAC,WAAW;YAC/E,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,CAAC;YAC3C,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,IAAI;YAClD,SAAS,EAAE,eAAe,CAAC,SAAS,IAAI,IAAI;YAC5C,YAAY,EAAE,gBAAgB,EAAE,YAAY,IAAI,SAAS;YACzD,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,SAAS;YAC3D,oGAAoG;YACpG,qGAAqG;YACrG,mGAAmG;YACnG,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,uBAAuB,EAAE;YAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACtC,CAAC;QAEF,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,wCAAwC;YACxC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,sBAAsB,CAAC,KAAc,EAAE,gBAAwC,EAAE,UAKpF,EAAE;QACJ,kFAAkF;QAClF,EAAE;QACF,qFAAqF;QACrF,sFAAsF;QACtF,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,6DAA6D;QAC7D,EAAE;QACF,mFAAmF;QACnF,0FAA0F;QAC1F,sFAAsF;QACtF,wFAAwF;QACxF,wFAAwF;QACxF,gBAAgB;QAChB,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,wEAAwE;QACxE,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE;gBACnD,GAAG,OAAO;gBACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB;gBACtF,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE/C,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,8EAA8E;QAC9E,kEAAkE;QAClE,6EAA6E;QAC7E,4CAA4C;QAC5C,EAAE;QACF,2EAA2E;QAC3E,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,SAAS,KAAK,SAAS,CAAC,UAAU;YACzD,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEd,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,aAAa,GAAG,gBAAgB;YACpC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;YAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAEpB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE;YAClD,GAAG,OAAO;YACV,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,iCAAiC,CACvC,KAAY;QAEZ,kEAAkE;QAClE,4EAA4E;QAC5E,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,SAAS,GAAI,KAA8B,CAAC,MAAM,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,SAAS;iBACrB,MAAM,CACL,CAAC,KAAK,EAA2D,EAAE,CACjE,CAAC,CAAC,KAAK;mBACJ,OAAO,KAAK,KAAK,QAAQ;mBACzB,KAAK,CAAC,OAAO,CAAE,KAA4B,CAAC,IAAI,CAAC;mBACjD,OAAQ,KAA+B,CAAC,OAAO,KAAK,QAAQ,CAClE;iBACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,cAAc,GAAI,KAA8B,CAAC,MAAM,CAAC;QAC9D,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;eAC7B,cAAc;eACd,OAAO,cAAc,KAAK,QAAQ;eAClC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EACjC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAyC,CAAC,CAAC,GAAG,CAC1E,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACpB,MAAM,OAAO,GAAI,QAAyC,EAAE,OAAO,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,CAAC,KAAK,CAAwB;oBACpC,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBACjE,CAAC;YACJ,CAAC,CACF,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACI,sBAAsB,CAC3B,SAAoB,EACpB,gBAAmD,EACnD,QAA2B,EAC3B,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;OAWG;IACI,yBAAyB,CAC9B,SAAoB,EACpB,gBAAmD,EACnD,WAAmB,EACnB,WAAmD,EAAE,EACrD,UAII,EAAE;QAEN,OAAO,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IACD,sEAAsE;IAE/D,wBAAwB,CAAC,UAAe;QAE7C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,YAAY,IAAI,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC;QAClI,IAAG,CAAC,YAAY,EAAE,CAAC;YACjB,OAAO,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC5E,CAAC;QAED,IAAI,YAAY,GAAG,GAAG,UAAU,CAAC,sBAAgC,MAAM,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClH,IAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,YAAY,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;OAQG;IACI,sBAAsB,CAAC,UAA8B;QAC1D,+FAA+F;QAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAY,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvG,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,gEAAgE;YAChE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;oBAC1B,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB;oBAChE,mBAAmB,EAAE,SAAS,EAAE,YAAY;oBAC5C,iBAAiB;oBACjB,8EAA8E;oBAC9E,0EAA0E;oBAC1E,mEAAmE;oBACnE,gFAAgF;oBAChF,2EAA2E;oBAC3E,8EAA8E;oBAC9E,4EAA4E;oBAC5E,sEAAsE;oBACtE,8EAA8E;oBAC9E,mFAAmF;oBACnF,MAAM;oBACN,+EAA+E;oBAC/E,iFAAiF;oBACjF,gFAAgF;oBAChF,yEAAyE;oBACzE,qEAAqE;oBACrE,kBAAkB;oBAClB,4EAA4E;oBAC5E,6EAA6E;oBAC7E,+EAA+E;oBAC/E,6EAA6E;oBAC7E,iFAAiF;oBACjF,qEAAqE;oBACrE,6EAA6E;oBAC7E,4EAA4E;oBAC5E,0EAA0E;oBAC1E,iFAAiF;oBACjF,kFAAkF;oBAClF,qFAAqF;oBACrF,iFAAiF;oBACjF,iFAAiF;oBACjF,mCAAmC;oBACnC,4EAA4E;iBAC7E,CAAC,CAAC;gBACH,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,GAAG,UAAU;oBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,gEAAgE;QAChE,sDAAsD;QACtD,2DAA2D;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,sBAAsB,KAAK,2BAA2B,CAAC,6BAA6B,EAAE,CAAC;gBACpG,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACzC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,SAAS,GAA4B,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9D,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACnE,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,UAA8B;QAChE,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,IAAI,CAAC;gBACH,QAAQ,MAAM,EAAE,CAAC;oBACf,KAAK,kBAAkB,CAAC,GAAG;wBACzB,+DAA+D;wBAC/D,iEAAiE;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,gEAAgE;wBAChE,iEAAiE;wBACjE,oEAAoE;wBACpE,mEAAmE;wBACnE,+BAA+B;wBAC/B,+CAA+C;wBAC/C,uCAAuC;wBACvC,MAAM;oBACR,KAAK,kBAAkB,CAAC,cAAc;wBACpC,6DAA6D;wBAC7D,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,mDAAmD;wBACnD,MAAM;oBACR,KAAK,kBAAkB,CAAC,KAAK;wBAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC3B,MAAM;oBACR,KAAK,kBAAkB,CAAC,aAAa;wBACnC,kEAAkE;wBAClE,MAAM;oBACR,KAAK,kBAAkB,CAAC,oBAAoB;wBAC1C,6DAA6D;wBAC7D,MAAM;gBACV,CAAC;YACH,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACjD,MAAM;oBACN,aAAa,EAAE,UAAU;oBACzB,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,UAA8B;QAC/C,qBAAqB;IACtB,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,KAAY;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,0DAA0D;QAC1D,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,oGAAoG;QACpG,mGAAmG;QACnG,0FAA0F;QAC1F,yGAAyG;QACzG,yGAAyG;QACzG,oGAAoG;QACpG,kGAAkG;QAClG,iGAAiG;QACjG,uGAAuG;QACvG,2GAA2G;QAC3G,mGAAmG;QACnG,wFAAwF;QACxF,MAAM,cAAc,GAAI,KAA4B,CAAC,IAAI,CAAC;QAC1D,MAAM,gBAAgB,GAAI,KAA8B,CAAC,MAAM,IAAK,KAAkC,CAAC,UAAU,CAAC;QAClH,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,IAAI,GAAG,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;YACpI,OAAO,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QACvF,CAAC;QAED,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,SAAS,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAS,CAAC,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,OAAO,SAAS,CAAC,aAAa,CAAC;QACjC,CAAC;QAED,8CAA8C;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;CACF,CAAA;AAvhBY,0BAA0B;IADtC,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;qCAAiB,aAAa;GALvD,0BAA0B,CAuhBtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport {\n ErrorType,\n ErrorActionBackend,\n WildoError_Backend_Definition,\n WildoError_Backend,\n ErrorCustomMessageReference,\n ERROR_DEFINITIONS,\n ResourcesConfig_OperationPathUtils,\n ResourceConfiguration_Operation,\n ErrorHandling_Strategy,\n RetryPolicy_BackoffType,\n ErrorUserGuidance,\n isWildoBackendError,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n\n/*\n Backend Error Builder Service\n * Creates unified WildoError_Backend instances with ExecutionContext integration\n /\n@injectable()\nexport class ErrorBuilderBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n\n @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService\n ) {\n this.logDebug = this.logger.debugByType('ErrorBuilderBackendService');\n this.logger.setDebugTypeLogging('ErrorBuilderBackendService', false);\n }\n\n /\n Build a WildoError_Backend with ExecutionContext integration\n /\n public buildError(\n errorType: ErrorType,\n executionContext?: ExecutionContext<any>,\n options: {\n customMessageReference?: ErrorCustomMessageReference,\n context?: Record<string, any>\n stack?: string;\n skipBackendActions?: boolean;\n skipBackendActionTypes?: readonly ErrorActionBackend[];\n } = {}\n ): WildoError_Backend {\n const errorDefinition = ERROR_DEFINITIONS[errorType];\n const statusCode = errorDefinition.statusCode;\n const effectiveBackendActions = options.skipBackendActions\n ? []\n : errorDefinition.backendActions.filter(\n action => !options.skipBackendActionTypes?.includes(action)\n );\n\n // Extract operation path from execution context\n const operationPathKey = (executionContext)\n ? ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(executionContext.operation as ResourceConfiguration_Operation<any, any, any>)\n : undefined;\n\n\n // Build the WildoError_Backend (context preserved for backend logging;\n // sanitization happens at the HTTP serialization boundary in ErrorHandlerService)\n const wildoError: WildoError_Backend = {\n type: errorType,\n severity: errorDefinition.severity,\n operationPathKey,\n timestamp: new Date(),\n backendActions: effectiveBackendActions,\n customMessageReference: options.customMessageReference ?? errorDefinition.defaultCustomMessageReference,\n statusCode,\n errorHandlingStrategy: errorDefinition.errorHandlingStrategy ?? ErrorHandling_Strategy.STOP,\n retryPolicy: errorDefinition.retryPolicy ?? RetryPolicy_BackoffType.EXPONENTIAL,\n maxRetries: errorDefinition.maxRetries ?? 3,\n initialDelay: errorDefinition.initialDelay ?? 1000,\n baseDelay: errorDefinition.baseDelay ?? 1000,\n initiatorIds: executionContext?.initiatorIds ?? undefined,\n executionType: executionContext?.executionType ?? undefined,\n // Phase 3 — closes gap 3: prefer the threaded EC's id, but fall back to the ambient request-context\n // ALS frame when no EC was passed (the ~67% of buildError calls that pass `undefined`). This is what\n // makes an error built deep in a service — with no EC in hand — still attributable to its request.\n correlationId: executionContext?.correlationId ?? getCurrentCorrelationId(),\n stack: options.stack ?? undefined,\n context: options.context ?? undefined,\n };\n\n // Some callers (for example websocket handshake auth) need to reclassify an\n // expected failure locally instead of emitting the default backend warning.\n if (effectiveBackendActions.length > 0) {\n // Execute backend actions. do not await\n this.executeBackendActions(wildoError);\n }\n\n return wildoError;\n }\n\n public buildFromStandardError(error: unknown, executionContext?: ExecutionContext<any>, options: {\n customMessageReference?: ErrorCustomMessageReference,\n context?: Record<string, any>\n skipBackendActions?: boolean;\n skipBackendActionTypes?: readonly ErrorActionBackend[];\n } = {}): WildoError_Backend {\n // An ALREADY-CLASSIFIED backend error must never be re-derived from scratch here.\n //\n // `WildoError_Backend` is a Zod-INFERRED PLAIN OBJECT, not an `Error` subclass, so a\n // re-wrap fell into the `new Error('Unknown error')` branch below: the caught error's\n // `type`, its `context` (which is where every builder puts the real explanation — the\n // enumerated validation failures, the adapter name, the failing boundary) and its stack\n // were all discarded, and the wrapper was re-classified INTERNAL from a synthetic Error\n // whose only message was the literal string `Unknown error`.\n //\n // That is not a cosmetic loss. It is exactly how a boot failure reaches the log as\n // `{\"errorType\":\"INTERNAL\",\"msg\":\"Application initialization failed\"}` with a stack whose\n // top frame is this method — naming the wrapper and nothing about the cause. Measured\n // 2026-08-14 on `platform-apps-manager`, where a post-registry configuration validation\n // threw with its failing contracts enumerated in `context.message` and the operator saw\n // none of them.\n //\n // The caught error's classification wins: it was chosen deliberately by whoever built it,\n // and this seam's callers pass attribution (`service`, `operation`), not a reclassification.\n // Caller context still wins on key collision, matching the merge below.\n if (isWildoBackendError(error)) {\n return this.buildError(error.type, executionContext, {\n ...options,\n customMessageReference: options.customMessageReference ?? error.customMessageReference,\n context: { ...error.context, ...options.context },\n stack: error.stack,\n });\n }\n\n const err = error instanceof Error\n ? error\n : new Error(typeof error === 'string' ? error : 'Unknown error');\n\n const errorType = this.determineErrorType(err);\n\n // A RAW ZodError / Mongoose ValidationError can reach this global seam\n // (e.g. an express error boundary) WITHOUT having gone through the explicit\n // controller/service validation path, which is the only place that attaches\n // `context.zodIssues` itself. Such an error is still classified VALIDATION\n // by `determineErrorType` (via the name/message heuristics), but it arrives\n // here with no field-level detail — so the client would otherwise receive an\n // opaque `{ type: VALIDATION }` with the real message living only in the\n // (often inaccessible) backend log. Project the error's per-field issues into\n // the same `zodIssues` shape that `sendErrorResponse` surfaces as\n // `validationErrors`, so raw validation failures are debuggable from the API\n // response like the explicit-path ones are.\n //\n // Scoped strictly to VALIDATION-classified errors: no field detail is ever\n // attached to AUTHZ/INTERNAL/DATABASE/etc. errors, preserving the\n // `sanitizeErrorForClient` boundary that strips their context. Only the field\n // path + per-field message are lifted — both already client-safe (they ride\n // the `zodIssues` allowlist, and VALIDATION is a \"safe\" type). The internal\n // `err.message` / stack are deliberately NOT surfaced here.\n const fieldLevelDetail = errorType === ErrorType.VALIDATION\n ? this.extractFieldLevelValidationDetail(err)\n : undefined;\n\n // Caller-supplied context wins on key collision (an explicit path that set\n // `zodIssues` should not be overwritten by the duck-typed extraction).\n const mergedContext = fieldLevelDetail\n ? { ...fieldLevelDetail, ...options.context }\n : options.context;\n\n return this.buildError(errorType, executionContext, {\n ...options,\n context: mergedContext,\n stack: err.stack\n });\n }\n\n /\n Extract client-safe field-level detail from a RAW validation error — a plain\n * `ZodError` or a Mongoose `ValidationError` — that reached the global error\n * boundary without going through the explicit controller/service validation\n * path (which attaches `context.zodIssues` itself).\n \n Returns the detail in the `{ zodIssues }` shape that\n * `ErrorHandlerService.sendErrorResponse` reduces into the response\n * `validationErrors` map (`{ [fieldPath]: message }`). Only the field `path`\n * and per-field `message` are extracted — both already deemed client-safe (they\n * ride the `zodIssues` allowlist in `sanitizeErrorForClient`, and VALIDATION is\n * a \"safe\" error type). The error's own `message` / stack are NOT included, so\n * internal implementation detail never leaks to the client.\n \n Returns `undefined` when the error is not a recognisable field-level\n * validation error (e.g. a generic `Error` whose message merely contains the\n * substring \"invalid\", which `determineErrorType` still classifies VALIDATION)\n * — in that case no `zodIssues` are attached.\n /\n private extractFieldLevelValidationDetail(\n error: Error,\n ): { zodIssues: Array<{ path: (string \| number)[]; message: string }> } \| undefined {\n // Zod (any instance): duck-type on the `issues` array rather than\n // `instanceof z.ZodError`. Multiple Zod module instances can coexist in the\n // dependency graph, so a nominal `instanceof` check is unreliable at this\n // shared boundary — the shape check is the robust classifier.\n const zodIssues = (error as { issues?: unknown }).issues;\n if (error.name === 'ZodError' && Array.isArray(zodIssues)) {\n const mapped = zodIssues\n .filter(\n (issue): issue is { path: (string \| number)[]; message: string } =>\n !!issue\n && typeof issue === 'object'\n && Array.isArray((issue as { path?: unknown }).path)\n && typeof (issue as { message?: unknown }).message === 'string',\n )\n .map(issue => ({ path: issue.path, message: issue.message }));\n return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n }\n\n // Mongoose ValidationError: `errors` is a record keyed by field path, each\n // value a per-path sub-error carrying its own `message`.\n const mongooseErrors = (error as { errors?: unknown }).errors;\n if (\n error.name === 'ValidationError'\n && mongooseErrors\n && typeof mongooseErrors === 'object'\n && !Array.isArray(mongooseErrors)\n ) {\n const mapped = Object.entries(mongooseErrors as Record<string, unknown>).map(\n ([field, subError]) => {\n const message = (subError as { message?: unknown } \| null)?.message;\n return {\n path: [field] as (string \| number)[],\n message: typeof message === 'string' ? message : 'Invalid value',\n };\n },\n );\n return mapped.length > 0 ? { zodIssues: mapped } : undefined;\n }\n\n return undefined;\n }\n\n /\n @wildo_source:part:start saas.backend.error-builder.user-guidance facet:layer:backend facet:audience:app-developer\n \n Build an error with contextual user guidance.\n \n Reach for this instead of a bare `buildError` whenever the person who hits the failure could DO\n * something about it. A typed error tells a caller what went wrong; guidance tells a human what to\n * do next, and the frontend renders it from `ErrorResponse.error.userGuidance`.\n \n ⚠️ Prefer `buildErrorWithGuidanceKey`. The strings you pass here are rendered verbatim, so a\n * guidance written this way is English forever — the key variant resolves labels under\n * `errors_guidance.{guidanceKey}.{field}` and is translated like every other user-facing string.\n * Use the raw form only for a failure no user will read, or as the fallback beneath a key.\n \n The guidance is attached to the error and will be included in the\n * `ErrorResponse.error.userGuidance` field for the frontend to render.\n \n @example\n * ```\n * throw this.errorBuilder.buildErrorWithGuidance(\n * ErrorType.CONFIGURATION,\n * executionContext,\n * {\n * explanation: 'SMTP is not configured for this organization.',\n * resolution: 'Go to Settings → Email and configure your SMTP provider.',\n * nextAction: { label: 'Go to Settings', ref: '/settings/email', type: 'url' },\n * missingConfiguration: ['smtp_host', 'smtp_port'],\n * },\n * { customMessageReference: ErrorCustomMessageReference.GENERIC_DETAIL }\n * );\n * ```\n /\n public buildErrorWithGuidance(\n errorType: ErrorType,\n executionContext: ExecutionContext<any> \| undefined,\n guidance: ErrorUserGuidance,\n options: {\n customMessageReference?: ErrorCustomMessageReference;\n context?: Record<string, any>;\n stack?: string;\n } = {}\n ): WildoError_Backend {\n const error = this.buildError(errorType, executionContext, options);\n error.userGuidance = guidance;\n return error;\n }\n\n /\n Build an error with a guidance key (i18n reference).\n \n Shorthand for `buildErrorWithGuidance` that sets the `guidanceKey` on the guidance object,\n * enabling i18n label resolution under `errors_guidance.{guidanceKey}.{field}`.\n \n @param errorType - The error type\n * @param executionContext - Current execution context\n * @param guidanceKey - i18n lookup key (resolves labels under `errors_guidance.{guidanceKey}.`)\n @param guidance - Guidance fields (explanation, resolution, etc.) — used as raw fallbacks\n * @param options - Additional error options\n /\n public buildErrorWithGuidanceKey(\n errorType: ErrorType,\n executionContext: ExecutionContext<any> \| undefined,\n guidanceKey: string,\n guidance: Omit<ErrorUserGuidance, 'guidanceKey'> = {},\n options: {\n customMessageReference?: ErrorCustomMessageReference;\n context?: Record<string, any>;\n stack?: string;\n } = {}\n ): WildoError_Backend {\n return this.buildErrorWithGuidance(errorType, executionContext, { ...guidance, guidanceKey }, options);\n }\n /* @wildo_source:part:end saas.backend.error-builder.user-guidance /\n\n public wildoErrorToSimpleString(wildoError: any): string {\n\n const isWildoError = wildoError && typeof wildoError === 'object' && 'statusCode' in wildoError && 'backendActions' in wildoError;\n if(!isWildoError) {\n return wildoError instanceof Error ? wildoError.message : \"Unknown error\";\n }\n\n let errorMessage = `${wildoError.customMessageReference as string} - ${wildoError.type} - ${wildoError.severity}`;\n if(wildoError.context) {\n errorMessage += `: ${JSON.stringify(wildoError.context)}`;\n }\n return errorMessage;\n }\n\n /\n Sanitize an error for client-facing HTTP responses.\n * Called at the serialization boundary (ErrorHandlerService), NOT at build time,\n * so backend logging retains full context for diagnostics.\n \n - VALIDATION, CONFLICT, RATE_LIMIT: allowlist of frontend-useful context keys\n * - AUTHENTICATION: allows `authResponse` through (retry/lockout UI data)\n * - Everything else (AUTHZ, INTERNAL, DATABASE, etc.): strips context entirely\n /\n public sanitizeErrorForClient(wildoError: WildoError_Backend): WildoError_Backend {\n // Error types whose context is safe to expose to clients (field-level info needed by frontend)\n const safeTypes = new Set<ErrorType>([ErrorType.VALIDATION, ErrorType.CONFLICT, ErrorType.RATE_LIMIT]);\n\n if (safeTypes.has(wildoError.type)) {\n // For safe types: keep only frontend-relevant keys from context\n if (wildoError.context) {\n const allowedKeys = new Set([\n 'fieldName', 'duplicateValue', 'zodIssues', 'customErrorMessage',\n 'retryAfterSeconds', 'message', 'violations',\n 'versionConflict',\n // Stable, client-branchable error codes (e.g. CrossFrontendHandoffErrorCode).\n // These are non-PII enum values defined in shared schemas (`saas-models`)\n // and consumed by both first-party clients (saas-frontend-lib) and\n // out-of-tree clients (saas-technical-doc/docsAuthClient.ts) for switch-on-code\n // branching. Stripping them at the wire would force callers to regex-parse\n // the human-readable `message`, defeating the purpose of having a stable code\n // enum. See cross-app-jwt-propagation.md C-4 for the contract decision that\n // motivated promoting these keys (the docs-chat client must `import {\n // CrossFrontendHandoffErrorCode } from '@wildo-ai/saas-models'` and branch on\n // `error.details.code === CrossFrontendHandoffErrorCode.UNKNOWN_TARGET_FRONTEND`).\n 'code',\n // Identity selectors that scope a code to a specific resource/service. Already\n // present in the request the client made (so disclosure is a no-op), but echoing\n // them back lets the client emit useful diagnostics (\"target frontend `docs` is\n // not configured…\") without re-parsing its own request body. PII-safe by\n // construction: these are SaaS-config service keys, never user data.\n 'targetServiceKey',\n // ─────────────────────────────────────────────────────────────────────────\n // GENERAL RULE for future endpoints emitting stable client-branchable codes:\n // 1. Define the enum in `@wildo-ai/saas-models` (so frontend + backend share\n // the same source of truth) and reuse the `code` key above to carry it.\n // Do NOT invent a new \"errorKind\" / \"reason\" / \"type\" field — the docs-chat\n // and saas-frontend clients all switch on `error.details.code`.\n // 2. New per-endpoint identity selectors (analogous to `targetServiceKey`)\n // MAY be added to this allowlist when they are PII-safe enum values OR\n // direct echoes of caller-supplied input (i.e. zero net disclosure).\n // 3. NEVER add user-typed strings (emails, names, free-text) to this allowlist\n // — they belong in `customErrorMessage` / `message` and are already covered.\n // 4. NEVER promote an internal cause (`stackTrace`, `dbErrorCode`, `mongoMessage`)\n // — those go through the AUTHZ/INTERNAL/DATABASE branches below which strip\n // context entirely. Surface a stable Wildo enum from the issuing service if\n // the caller needs to branch.\n // ─────────────────────────────────────────────────────────────────────────\n ]);\n const sanitized: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(wildoError.context)) {\n if (allowedKeys.has(key)) {\n sanitized[key] = value;\n }\n }\n return {\n ...wildoError,\n context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n };\n }\n return wildoError;\n }\n\n // AUTHENTICATION errors: allow the minimum safe retry/lockout UI\n // payload through. `authResponse` is the common case; for the\n // specific `AUTHENTICATION_ACCOUNT_LOCKED` envelope, the global\n // lockout bridge also needs `lockoutDurationMinutes`,\n // `retryAfterSeconds`, and its lockout-specific `message`.\n if (wildoError.type === ErrorType.AUTHENTICATION && wildoError.context) {\n const authAllowedKeys = new Set(['authResponse']);\n if (wildoError.customMessageReference === ErrorCustomMessageReference.AUTHENTICATION_ACCOUNT_LOCKED) {\n authAllowedKeys.add('lockoutDurationMinutes');\n authAllowedKeys.add('retryAfterSeconds');\n authAllowedKeys.add('message');\n }\n const sanitized: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(wildoError.context)) {\n if (authAllowedKeys.has(key)) {\n sanitized[key] = value;\n }\n }\n return {\n ...wildoError,\n context: Object.keys(sanitized).length > 0 ? sanitized : undefined,\n };\n }\n\n // All other types (AUTHZ, INTERNAL, DATABASE, etc.): strip context entirely\n const { context, ...rest } = wildoError;\n return rest as WildoError_Backend;\n }\n\n\n\n\n private async executeBackendActions(wildoError: WildoError_Backend): Promise<void> {\n wildoError.backendActions.forEach(action => {\n try {\n switch (action) {\n case ErrorActionBackend.LOG:\n // Intentionally NOT logged at construction. Error logging is a\n // handling-boundary* concern, not a construction concern: the\n // boundary (HTTP `expressErrorHandler`, batch/cron, websocket auth,\n // queue job-failure, response-DTO direct-send) is the only place\n // where the operational severity can be classified, the request\n // context (method/path/socketId/jobId) is available, and exactly\n // one line per error is guaranteed. Logging here as well produced a\n // double-log (and, historically, an unstructured multi-line blob).\n // Boundaries emit the line via\n // `logWildoBackendErrorAtClassifiedSeverity` /\n // `projectWildoBackendErrorLogFields`.\n break;\n case ErrorActionBackend.RECORD_METRICS:\n // Metrics recording would be handled by telemetry middleware\n break;\n case ErrorActionBackend.TRACE:\n // Tracing would be handled by telemetry middleware\n break;\n case ErrorActionBackend.ALERT:\n this.sendAlert(wildoError);\n break;\n case ErrorActionBackend.CIRCUIT_BREAK:\n // Circuit breaker logic would be implemented in specific services\n break;\n case ErrorActionBackend.GRACEFUL_DEGRADATION:\n // Graceful degradation would be handled by specific services\n break;\n }\n } catch (actionError) {\n // Don't let action execution errors break the main error flow\n this.logger.warn('Failed to execute error action', {\n action,\n originalError: wildoError,\n actionError: describeCaughtError(actionError)\n });\n }\n });\n }\n\n /*\n Send alert for critical errors\n /\n private sendAlert(wildoError: WildoError_Backend): void {\n // todo implement it;\n }\n\n /\n Centralized error type determination based on error characteristics\n * This method provides consistent error type classification across all services\n */\n public determineErrorType(error: Error): ErrorType {\n const message = (error && typeof error.message === 'string') ? error.message.toLowerCase() : '';\n const errorName = (error && typeof error.name === 'string') ? error.name : '';\n\n // Check error name first for more specific classification\n if (errorName === 'ValidationError' \|\| errorName === 'ZodError') {\n return ErrorType.VALIDATION;\n }\n\n if (errorName === 'MulterError') {\n return ErrorType.VALIDATION;\n }\n\n // Body-parser (express.json / urlencoded / raw-body) rejections — an oversized or malformed request\n // body — are CLIENT input problems, exactly like the MulterError case above (both are request-body\n // libraries). They surface as `http-errors` carrying a string `type` (`entity.too.large`,\n // `entity.parse.failed`, `charset.unsupported`, …) plus a well-known 4xx `status`/`statusCode`. Classify\n // VALIDATION so a benign bad body returns a clean 4xx instead of masquerading as an INTERNAL 500 — which\n // additionally mis-fires `severity:critical` alerting/SIEM on an ordinary bad request. Keyed on the\n // body-parser `type`+4xx-`status` signature (NOT a bare `SyntaxError`/`Error` name), so a generic\n // application error is never swept in, and the 5xx body-parser faults (`stream.not.readable`, …)\n // correctly fall through to INTERNAL. (The `/oauth` mount additionally has a dedicated translator that\n // preserves the exact status — see `applyOAuthBodyCap`. Framework-wide, an oversized body (413) classifies\n // as PAYLOAD_TOO_LARGE so EVERY route returns the precise 413; the other body-parser client errors\n // (malformed 400, unsupported-charset/encoding 415) fold into VALIDATION's 400 bucket.)\n const bodyParserType = (error as { type?: unknown }).type;\n const bodyParserStatus = (error as { status?: unknown }).status ?? (error as { statusCode?: unknown }).statusCode;\n if (typeof bodyParserType === 'string' && typeof bodyParserStatus === 'number' && bodyParserStatus >= 400 && bodyParserStatus < 500) {\n return bodyParserStatus === 413 ? ErrorType.PAYLOAD_TOO_LARGE : ErrorType.VALIDATION;\n }\n\n if (errorName === 'JsonWebTokenError' \|\| errorName === 'TokenExpiredError') {\n return ErrorType.AUTHENTICATION;\n }\n\n if (errorName === 'MongoError' \|\| errorName === 'MongooseError') {\n return ErrorType.DATABASE;\n }\n\n // Check message content for additional classification\n if (message.includes('validation') \|\| message.includes('invalid')) {\n return ErrorType.VALIDATION;\n }\n\n if (message.includes('limit_file_size') \|\| message.includes('file too large')) {\n return ErrorType.VALIDATION;\n }\n\n if (message.includes('not found')) {\n return ErrorType.NOT_FOUND;\n }\n\n if (message.includes('unauthorized')) {\n return ErrorType.AUTHENTICATION;\n }\n\n if (message.includes('forbidden') \|\| message.includes('permission')) {\n return ErrorType.AUTHORIZATION;\n }\n\n if (message.includes('conflict') \|\| message.includes('already exists')) {\n return ErrorType.CONFLICT;\n }\n\n if (message.includes('network')) {\n return ErrorType.NETWORK;\n }\n\n if (message.includes('rate limit') \|\| message.includes('too many requests')) {\n return ErrorType.RATE_LIMIT;\n }\n\n if (message.includes('business rule') \|\| message.includes('constraint')) {\n return ErrorType.BUSINESS_RULE;\n }\n\n // Default to INTERNAL for unclassified errors\n return ErrorType.INTERNAL;\n }\n}\n"]}

package/dist/esm/errors/services/error-handler.backend.service.d.ts CHANGED Viewed

@@ -4,12 +4,66 @@ import { ErrorBuilderBackendService } from './error-builder.backend.service';
 import { WildoError_Backend } from '@wildo-ai/saas-models';
 import { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
 /**
- * Narrowly isolates uncaught exceptions that originate inside
- * `@opentelemetry/sdk-logs`'s background batch-flush timer from every other
- * uncaught exception. Matched ONLY by the presence of the `sdk-logs` package
- * segment in the stack trace — this is deliberately conservative: any error
- * whose stack does not clearly point into that package still hard-exits via
- * the default path, so a real host-state-corrupting bug is never masked.
+ * The package-path segments that identify Wildo's OTLP **export pipeline** in a
+ * stack trace: the signal processors that own the background flush timers, the
+ * exporters they hand batches to, and the shared OTLP serialize/send layer
+ * every exporter delegates into.
+ *
+ * The membership criterion is NOT "is this an OpenTelemetry package" — it is
+ * **"can a frame from this package ever appear in the stack of a HOST error?"**
+ * Every package listed here answers no: nothing in it invokes a caller-supplied
+ * callback, so it is reached only from a telemetry export tick (or from
+ * `sdk.shutdown()`). That is what makes a plain "does the stack mention it"
+ * substring test sound: a frame from one of these packages cannot be
+ * *routed through*, only *raised in*.
+ *
+ * `@opentelemetry/exporter-` is a PREFIX on purpose — it covers the three
+ * exporters `otel-preload.ts` wires today (`exporter-trace-otlp-http`,
+ * `exporter-metrics-otlp-http`, `exporter-logs-otlp-http`) and every transport
+ * sibling (`-proto`, `-grpc`, zipkin, prometheus) a future provider selection
+ * could swap in, without this list having to be revisited. Each is export-only
+ * by construction.
+ *
+ * Kept in step with the package's real OpenTelemetry dependency set by the
+ * totality pin in `__tests__/error-handler.backend.service.test.ts`, which
+ * enumerates every `@opentelemetry/*` entry in this package's own
+ * `package.json` and fails unless each one is either matched here or named in
+ * {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A name list with no
+ * link to whatever owns those names is the drift this carve-out already had
+ * once; the pin is that link. It is test-time rather than compile-time because
+ * the owning vocabulary is a JSON manifest, not a TypeScript symbol.
+ */
+export declare const TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS: readonly string[];
+/**
+ * The OpenTelemetry packages this carve-out deliberately does NOT isolate, each
+ * with the reason. This is not a leftover list: it is the other half of the
+ * totality pin, so that adding an OTel dependency forces a decision instead of
+ * silently landing outside both sets.
+ *
+ * The reason is the same for the whole first group and it is the one that
+ * matters: **these packages invoke host code**, so their frames appear in the
+ * stack of ordinary host crashes. Matching them would not widen a telemetry
+ * carve-out — it would suppress genuine host faults.
+ */
+export declare const TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED: readonly string[];
+/**
+ * Isolates an uncaught exception RAISED INSIDE the OTLP export pipeline —
+ * the background machinery that flushes logs, metrics and spans to the
+ * collector on a timer, independent of any request — from every other uncaught
+ * exception, which still hard-exits via the default path.
+ *
+ * WHAT THIS SUPPRESSES: a failure whose stack mentions one of
+ * {@link TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS}. Those packages never call
+ * host code (see that constant's note), so a stack that mentions one of them
+ * is a stack that was raised in one of them.
+ *
+ * WHAT IT MUST NOT SUPPRESS, and does not: anything raised in the host's own
+ * request/business logic, anything raised in OTel INSTRUMENTATION (which wraps
+ * host code), and anything in the trace/context tier a host stack routes
+ * through — see {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A
+ * carve-out that swallowed a genuine fault into a silently degraded process
+ * would be strictly worse than the crash it prevents, which is why the
+ * criterion is "cannot be on a host stack" rather than "is telemetry".
  *
  * Root cause (2026-08-06): the timer callback in
  * `BatchLogRecordProcessorBase` does `this._flushOneBatch().then(...).catch(...)`
@@ -19,6 +73,14 @@ import { ExecutionContext } from '../../runtime/models/execution-context.backend
  * `globalErrorHandler` safety net could catch it, so the failure escaped as a
  * process-level uncaught exception — killing an otherwise-healthy host over a
  * background telemetry-export housekeeping tick.
+ *
+ * WIDENED 2026-09-09. The original predicate matched the single literal
+ * `@opentelemetry/sdk-logs`, which is where that one incident happened to be
+ * raised — so the identical promise-chain/transport failure arriving from the
+ * METRIC reader or from ANY of the three OTLP exporters was not isolated and
+ * hard-exited the host. Keying a carve-out on one package NAME makes its reach
+ * an accident of which pipeline failed first; the property that actually
+ * distinguishes the case is the export pipeline itself.
  */
 export declare function isNonFatalTelemetryPipelineException(error: Error): boolean;
 /**
@@ -56,7 +118,8 @@ export declare class ErrorHandlerService {
      * isolated by {@link isNonFatalTelemetryPipelineException}. Node's own
      * guidance ("uncaught exception means unknown state, exit") assumes the
      * failure came from the host's own request/business logic. A background
-     * telemetry batch-flush timer (OTel's `BatchLogRecordProcessor`, ticking
+     * telemetry export tick (OTel's `BatchLogRecordProcessor` or
+     * `PeriodicExportingMetricReader`, and the OTLP exporters they feed, ticking
      * every few seconds independently of any request) is a different failure
      * domain: its own state corruption says nothing about whether the host's
      * actual work is safe to continue, and `otel-preload.ts` already commits to

package/dist/esm/errors/services/error-handler.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"error-handler.backend.service.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAK7E,OAAO,EAIL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAG,MAAM,qEAAqE,CAAC;AAExG~~;;;;;;;;;;;;;;;;GAgBG~~;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,~~CAE1E~~;AAED;;;GAGG;AACH,qBACa,mBAAmB;IAIO,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAJtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAGpC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMlG;;;OAGG;IACH,mBAAmB,IAAI,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAyCjH,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI;IAW3G,OAAO,CAAC,iBAAiB;IA4GzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAMrF;;OAEG;IACH,wBAAwB,IAAI,IAAI;IAiBhC~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG~~;IACH,uBAAuB,IAAI,IAAI;IAsB/B;;OAEG;IACH,wBAAwB,IAAI,IAAI;CAKjC"}
1	+ {"version":3,"file":"error-handler.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAK7E,OAAO,EAIL,kBAAkB,EAInB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAG,MAAM,qEAAqE,CAAC;AAExG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,uCAAuC,EAAE,SAAS,MAAM,EAmBpE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4CAA4C,EAAE,SAAS,MAAM,EAoCzE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAI1E;AAED;;;GAGG;AACH,qBACa,mBAAmB;IAIO,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAJtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAGpC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMlG;;;OAGG;IACH,mBAAmB,IAAI,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAyCjH,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI;IAW3G,OAAO,CAAC,iBAAiB;IA4GzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACH,YAAY,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI;IAMrF;;OAEG;IACH,wBAAwB,IAAI,IAAI;IAiBhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;IACH,uBAAuB,IAAI,IAAI;IAsB/B;;OAEG;IACH,wBAAwB,IAAI,IAAI;CAKjC"}

package/dist/esm/errors/services/error-handler.backend.service.js CHANGED Viewed

@@ -19,12 +19,121 @@ import { getCurrentCorrelationId } from '../../runtime/models/request-context.al
 // Import the unified error system
 import { ErrorType, WildoHeaderKeys, } from '@wildo-ai/saas-models';
 /**
- * Narrowly isolates uncaught exceptions that originate inside
- * `@opentelemetry/sdk-logs`'s background batch-flush timer from every other
- * uncaught exception. Matched ONLY by the presence of the `sdk-logs` package
- * segment in the stack trace — this is deliberately conservative: any error
- * whose stack does not clearly point into that package still hard-exits via
- * the default path, so a real host-state-corrupting bug is never masked.
+ * The package-path segments that identify Wildo's OTLP **export pipeline** in a
+ * stack trace: the signal processors that own the background flush timers, the
+ * exporters they hand batches to, and the shared OTLP serialize/send layer
+ * every exporter delegates into.
+ *
+ * The membership criterion is NOT "is this an OpenTelemetry package" — it is
+ * **"can a frame from this package ever appear in the stack of a HOST error?"**
+ * Every package listed here answers no: nothing in it invokes a caller-supplied
+ * callback, so it is reached only from a telemetry export tick (or from
+ * `sdk.shutdown()`). That is what makes a plain "does the stack mention it"
+ * substring test sound: a frame from one of these packages cannot be
+ * *routed through*, only *raised in*.
+ *
+ * `@opentelemetry/exporter-` is a PREFIX on purpose — it covers the three
+ * exporters `otel-preload.ts` wires today (`exporter-trace-otlp-http`,
+ * `exporter-metrics-otlp-http`, `exporter-logs-otlp-http`) and every transport
+ * sibling (`-proto`, `-grpc`, zipkin, prometheus) a future provider selection
+ * could swap in, without this list having to be revisited. Each is export-only
+ * by construction.
+ *
+ * Kept in step with the package's real OpenTelemetry dependency set by the
+ * totality pin in `__tests__/error-handler.backend.service.test.ts`, which
+ * enumerates every `@opentelemetry/*` entry in this package's own
+ * `package.json` and fails unless each one is either matched here or named in
+ * {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A name list with no
+ * link to whatever owns those names is the drift this carve-out already had
+ * once; the pin is that link. It is test-time rather than compile-time because
+ * the owning vocabulary is a JSON manifest, not a TypeScript symbol.
+ */
+export const TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS = [
+    // Log signal: `BatchLogRecordProcessor`'s periodic `_flushOneBatch` timer —
+    // the frame the 2026-08-06 incident was raised in (see below).
+    '@opentelemetry/sdk-logs',
+    // Metric signal: `PeriodicExportingMetricReader`'s collect/export interval.
+    // Safe as a whole-stack match only while this application declares no
+    // OBSERVABLE instrument: an observable callback is host code invoked by the
+    // reader, and would put host frames under an `sdk-metrics` frame. None exist
+    // (no `createObservable*`/`addCallback` call site in engine/, platform/ or
+    // examples/ as of 2026-09-09), and such a callback would in any case be
+    // telemetry-collection code failing on the collection tick.
+    '@opentelemetry/sdk-metrics',
+    // Every OTLP/zipkin/prometheus exporter — see the prefix note above.
+    '@opentelemetry/exporter-',
+    // The shared OTLP serialize + send layer the exporters above delegate into,
+    // and where a transport/serialization fault is actually raised.
+    '@opentelemetry/otlp-exporter-base',
+    '@opentelemetry/otlp-grpc-exporter-base',
+    '@opentelemetry/otlp-transformer',
+];
+/**
+ * The OpenTelemetry packages this carve-out deliberately does NOT isolate, each
+ * with the reason. This is not a leftover list: it is the other half of the
+ * totality pin, so that adding an OTel dependency forces a decision instead of
+ * silently landing outside both sets.
+ *
+ * The reason is the same for the whole first group and it is the one that
+ * matters: **these packages invoke host code**, so their frames appear in the
+ * stack of ordinary host crashes. Matching them would not widen a telemetry
+ * carve-out — it would suppress genuine host faults.
+ */
+export const TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED = [
+    // --- Runs host code, so a host crash's stack passes through it ---
+    // `Tracer.startActiveSpan(name, fn)` calls `fn` — the host's own work — so
+    // under HTTP auto-instrumentation practically EVERY synchronous server-side
+    // crash carries an `sdk-trace-base` frame. Matching it would carve out the
+    // whole application. The consequence is a stated gap, not an oversight: a
+    // fault raised INSIDE `BatchSpanProcessor` itself (the span-tier analogue of
+    // the 2026-08-06 log-tier incident) still hard-exits. Closing it needs a
+    // discriminator this predicate does not have — either "raised in the TOP
+    // frame" or "the stack shows a timer tick" — and neither is worth the
+    // false-negative risk until a span-tier incident is actually evidenced. The
+    // span EXPORT half is already covered, via `exporter-trace-otlp-http`.
+    '@opentelemetry/sdk-trace-base',
+    '@opentelemetry/sdk-trace-node',
+    // Instrumentation WRAPS host handlers, middleware and driver calls; its
+    // frames sit directly beneath host frames on every instrumented request.
+    '@opentelemetry/instrumentation',
+    '@opentelemetry/instrumentation-express',
+    '@opentelemetry/instrumentation-http',
+    '@opentelemetry/instrumentation-mongoose',
+    '@opentelemetry/instrumentation-redis',
+    '@opentelemetry/auto-instrumentations-node',
+    // `context.with(ctx, fn)` runs the host callback; the API/core/context tier
+    // is on the synchronous path of anything traced.
+    '@opentelemetry/api',
+    '@opentelemetry/api-logs',
+    '@opentelemetry/core',
+    // --- Not an export tick ---
+    // The SDK facade. Its one dangerous call, `sdk.start()`, is already guarded
+    // where it happens (`otel-preload.ts`, Audit A-17) and is a BOOT failure: a
+    // host that cannot start telemetry has no export tick to isolate.
+    '@opentelemetry/sdk-node',
+    // Static data / attribute helpers, resolved at startup. Nothing periodic to
+    // isolate, and their frames appear during host bootstrap.
+    '@opentelemetry/resources',
+    '@opentelemetry/semantic-conventions',
+];
+/**
+ * Isolates an uncaught exception RAISED INSIDE the OTLP export pipeline —
+ * the background machinery that flushes logs, metrics and spans to the
+ * collector on a timer, independent of any request — from every other uncaught
+ * exception, which still hard-exits via the default path.
+ *
+ * WHAT THIS SUPPRESSES: a failure whose stack mentions one of
+ * {@link TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS}. Those packages never call
+ * host code (see that constant's note), so a stack that mentions one of them
+ * is a stack that was raised in one of them.
+ *
+ * WHAT IT MUST NOT SUPPRESS, and does not: anything raised in the host's own
+ * request/business logic, anything raised in OTel INSTRUMENTATION (which wraps
+ * host code), and anything in the trace/context tier a host stack routes
+ * through — see {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A
+ * carve-out that swallowed a genuine fault into a silently degraded process
+ * would be strictly worse than the crash it prevents, which is why the
+ * criterion is "cannot be on a host stack" rather than "is telemetry".
  *
  * Root cause (2026-08-06): the timer callback in
  * `BatchLogRecordProcessorBase` does `this._flushOneBatch().then(...).catch(...)`
@@ -34,9 +143,20 @@ import { ErrorType, WildoHeaderKeys, } from '@wildo-ai/saas-models';
  * `globalErrorHandler` safety net could catch it, so the failure escaped as a
  * process-level uncaught exception — killing an otherwise-healthy host over a
  * background telemetry-export housekeeping tick.
+ *
+ * WIDENED 2026-09-09. The original predicate matched the single literal
+ * `@opentelemetry/sdk-logs`, which is where that one incident happened to be
+ * raised — so the identical promise-chain/transport failure arriving from the
+ * METRIC reader or from ANY of the three OTLP exporters was not isolated and
+ * hard-exited the host. Keying a carve-out on one package NAME makes its reach
+ * an accident of which pipeline failed first; the property that actually
+ * distinguishes the case is the export pipeline itself.
  */
 export function isNonFatalTelemetryPipelineException(error) {
-    return typeof error.stack === 'string' && error.stack.includes('@opentelemetry/sdk-logs');
+    if (typeof error.stack !== 'string')
+        return false;
+    const stack = error.stack;
+    return TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS.some((marker) => stack.includes(marker));
 }
 /**
  * Unified Error Handler Service
@@ -240,7 +360,8 @@ let ErrorHandlerService = class ErrorHandlerService {
      * isolated by {@link isNonFatalTelemetryPipelineException}. Node's own
      * guidance ("uncaught exception means unknown state, exit") assumes the
      * failure came from the host's own request/business logic. A background
-     * telemetry batch-flush timer (OTel's `BatchLogRecordProcessor`, ticking
+     * telemetry export tick (OTel's `BatchLogRecordProcessor` or
+     * `PeriodicExportingMetricReader`, and the OTLP exporters they feed, ticking
      * every few seconds independently of any request) is a different failure
      * domain: its own state corruption says nothing about whether the host's
      * actual work is safe to continue, and `otel-preload.ts` already commits to

package/dist/esm/errors/services/error-handler.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"error-handler.backend.service.js","sourceRoot":"","sources":["../../../../../src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,wCAAwC,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAC7J,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAExG,kCAAkC;AAClC,OAAO,EAEL,SAAS,EAKT,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAY;IAC/D,OAAO,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAIe;IACa;IAJhD,QAAQ,CAA+D;IAEjF,YAC6C,MAAqB,EACR,YAAwC;QADrD,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAEhG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,OAAO,CAAC,KAA+B,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAChG,0CAA0C;YAC1C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,mEAAmE;gBACnE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,qDAAqD;YACrD,MAAM,gBAAgB,GAAI,GAAW,CAAC,gBAAqD,CAAC;YAE5F,MAAM,aAAa,GAAG,KAAK,YAAY,KAAK;gBAC1C,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBACnE,CAAC,CAAC,KAAK,CAAC;YACV,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAEvD,yEAAyE;YACzE,sEAAsE;YACtE,oEAAoE;YACpE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,wCAAwC,CACtC,IAAI,CAAC,MAAM,EACX,qBAAqB,EACrB,aAAa;YACb,qEAAqE;YACrE,sEAAsE;YACtE,iBAAiB;YACjB;gBACE,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CACF,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,KAA+B,EAAE,gBAAwC;QAClG,MAAM,aAAa,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEzH,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,kCAAkC;QAClC,wCAAwC,CAAC,IAAI,CAAC,MAAM,EAAE,gCAAgC,EAAE,aAAa,CAAC,CAAC;IACzG,CAAC;IAGO,iBAAiB,CAAC,SAA6B,EAAE,GAAa,EAAE,YAA4C;QAClH,2CAA2C;QAC3C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,UAAU,EAAE,SAAS,CAAC,UAAU;aACjC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,iFAAiF;YACjF,4GAA4G;YAC5G,EAAE;YACF,uFAAuF;YACvF,yFAAyF;YACzF,oFAAoF;YACpF,sFAAsF;YACtF,wFAAwF;YACxF,gEAAgE;YAChE,IAAI,gBAA8C,CAAC;YAEnD,6EAA6E;YAC7E,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAmB,CAAC;gBACxD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,cAAoC,CAAC;gBAC9E,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAwC,CAAC;gBACtF,MAAM,eAAe,GAAG,kBAAkB;oBACxC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;oBACtD,CAAC,CAAC,cAAc;wBACd,CAAC,CAAC,IAAI,cAAc,kBAAkB;wBACtC,CAAC,CAAC,sBAAsB,CAAC;gBAE7B,MAAM,KAAK,GAAyB;oBAClC,GAAG,EAAE,4BAA4B;oBACjC,OAAO,EAAE,eAAe;oBACxB,MAAM,EAAE;wBACN,SAAS;wBACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD;iBACF,CAAC;gBACF,gBAAgB,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,qFAAqF;YACrF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAkE,CAAC;gBACvG,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACjD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC/B,OAAO,GAAG,CAAC;gBACb,CAAC,EAAE,EAAsB,CAAC,CAAC;YAC7B,CAAC;YAED,uFAAuF;YACvF,0FAA0F;YAC1F,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAC3E,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACpE,IACE,CAAC,OAAO,iBAAiB,KAAK,QAAQ,IAAI,OAAO,iBAAiB,KAAK,QAAQ,CAAC;mBAC7E,iBAAiB,KAAK,EAAE;mBACxB,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;mBACnC,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;mBACnC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,SAAS,EAC7C,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,QAAQ,GAAkB;gBAC9B,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,OAAO,EAAE,SAAS,CAAC,sBAAsB;oBACzC,aAAa,EAAE,SAAS,CAAC,sBAAsB;oBAC/C,GAAG,CAAC,SAAS,CAAC,sBAAsB,IAAI,EAAE,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,EAAE,CAAC;oBACrG,aAAa,EAAE,SAAS,CAAC,gBAAgB;oBACzC,oFAAoF;oBACpF,uFAAuF;oBACvF,6FAA6F;oBAC7F,wFAAwF;oBACxF,GAAG,CAAC,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC9F,8FAA8F;oBAC9F,kGAAkG;oBAClG,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,uBAAuB,EAAE;oBACnE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,0CAA0C;oBAC1C,0BAA0B;oBAC1B,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;oBAClE,wEAAwE;oBACxE,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;oBAC7C,0DAA0D;oBAC1D,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;iBACxE;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,8DAA8D;YAC9D,wEAAwE;YACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBACjD,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGD;;OAEG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAW;YAC9C,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;YACzB,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAY;QACvB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAC/D,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAW,EAAE,OAAqB,EAAE,EAAE;YACtE,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,EAAE;gBAC3F,KAAK,EAAE,MAAM,EAAE,KAAK;gBACpB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM,EAAE,IAAI;oBAClB,OAAO,EAAE,MAAM,EAAE,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;iBAC5B;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAEvE,oBAAoB;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG;IACH,uBAAuB;QACrB,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;YAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,kBAAkB,EAAE,SAAS,EAAE;gBAC1F,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE;oBACP,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF,CAAC,CAAC;YAEH,IAAI,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;gBAChH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAE9D,oBAAoB;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;CAEF,CAAA;AA7SY,mBAAmB;IAD/B,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;qCADI,aAAa;QACM,0BAA0B;GALvF,mBAAmB,CA6S/B","sourcesContent":["import { NextFunction, Request, Response } from 'express';\nimport { inject, injectable } from 'inversify';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { ErrorBuilderBackendService } from './error-builder.backend.service';\nimport { logWildoBackendErrorAtClassifiedSeverity, describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\n\n// Import the unified error system\nimport {\n ErrorResponse,\n ErrorType,\n ExecutionContext_InitiatorIds,\n WildoError_Backend,\n ValidationErrors,\n ValidationErrorEntry,\n WildoHeaderKeys,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext, } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\n/*\n Narrowly isolates uncaught exceptions that originate inside\n * `@opentelemetry/sdk-logs`'s background batch-flush timer from every other\n * uncaught exception. Matched ONLY by the presence of the `sdk-logs` package\n * segment in the stack trace — this is deliberately conservative: any error\n * whose stack does not clearly point into that package still hard-exits via\n * the default path, so a real host-state-corrupting bug is never masked.\n \n Root cause (2026-08-06): the timer callback in\n * `BatchLogRecordProcessorBase` does `this._flushOneBatch().then(...).catch(...)`\n * on a fixed interval, independent of any request. Observed in production dev\n * use as `TypeError: this._flushOneBatch(...).then(...).catch is not a\n * function`. The processor's own promise chain broke down before its internal\n * `globalErrorHandler` safety net could catch it, so the failure escaped as a\n * process-level uncaught exception — killing an otherwise-healthy host over a\n * background telemetry-export housekeeping tick.\n /\nexport function isNonFatalTelemetryPipelineException(error: Error): boolean {\n return typeof error.stack === 'string' && error.stack.includes('@opentelemetry/sdk-logs');\n}\n\n/\n Unified Error Handler Service\n * Handles all errors using the new unified error management system\n /\n@injectable()\nexport class ErrorHandlerService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private errorBuilder: ErrorBuilderBackendService\n ) {\n this.logDebug = this.logger.debugByType('ErrorHandlerService');\n this.logger.setDebugTypeLogging('ErrorHandlerService', false);\n }\n\n /\n Express error handling middleware with unified error system\n * Express requires exactly 4 parameters: (err, req, res, next)\n /\n expressErrorHandler(): (error: Error\|WildoError_Backend, req: Request, res: Response, next: NextFunction) => void {\n return (error: Error\|WildoError_Backend, req: Request, res: Response, next: NextFunction): void => {\n // Check if response has already been sent\n if (res.headersSent) {\n // If headers are already sent, delegate to Express default handler\n return next(error);\n }\n\n // Extract executionContext from request if available\n const executionContext = (req as any).executionContext as ExecutionContext<any> \| undefined;\n\n const errorToHandle = error instanceof Error\n ? this.errorBuilder.buildFromStandardError(error, executionContext)\n : error;\n errorToHandle.ipAddress = this.getClientIpAddress(req);\n\n // Single, central log for every HTTP error — emitted at the classified\n // operational severity rather than a blanket `error`. This is the one\n // true HTTP error boundary (mounted globally in http-server and per\n // sub-router), so logging here guarantees exactly one line per failed\n // request: expected client conditions (e.g. an expired token the client\n // will refresh) stay at `debug`, genuine server faults stay at `error`\n // with a stack. Per-controller boundaries no longer log — they forward\n // here — which removes the historic double-logging and the noise flood.\n logWildoBackendErrorAtClassifiedSeverity(\n this.logger,\n 'HTTP request failed',\n errorToHandle,\n // Boundary-specific extras only — the error's own fields (errorType,\n // statusCode, customMessageReference, operationPath, …) are projected\n // by the helper.\n {\n method: req.method,\n path: req.path,\n },\n );\n\n this.sendErrorResponse(errorToHandle, res);\n };\n }\n\n handleBatchesCronjobsError(error: Error\|WildoError_Backend, executionContext?: ExecutionContext<any>): void {\n const errorToHandle = error instanceof Error ? this.errorBuilder.buildFromStandardError(error, executionContext) : error;\n\n // Batch/cron is a non-HTTP boundary (no `expressErrorHandler` downstream),\n // so this is where the line must be emitted — at the classified severity.\n // The error's own fields are projected by the helper; the stack is attached\n // only when the level is `error`.\n logWildoBackendErrorAtClassifiedSeverity(this.logger, 'Batch/cronjob execution failed', errorToHandle);\n }\n\n\n private sendErrorResponse(saasError: WildoError_Backend, res: Response, initiatorIds?: ExecutionContext_InitiatorIds): void {\n // Double-check if headers are already sent\n if (res.headersSent) {\n this.logger.warn('Cannot send error response - headers already sent', {\n errorType: saasError.type,\n statusCode: saasError.statusCode\n });\n return;\n }\n\n try {\n // Build validationErrors for responses that carry field-level error information.\n // Values can be plain strings (Zod errors) or structured ValidationErrorEntry objects (unique constraints).\n //\n // C3: Intentional extraction order — validationErrors are extracted from the raw error\n // BEFORE sanitizeErrorForClient() runs. This is by design: zodIssues contain field-level\n // validation messages that must appear in the response for form UX, even though the\n // sanitization layer may strip them from `details`. If zodIssues are removed from the\n // sanitization allowlist in the future, validationErrors will still be included because\n // they are extracted independently above the sanitization call.\n let validationErrors: ValidationErrors \| undefined;\n\n // CONFLICT (409): Unique constraint violations — use structured i18n entries\n if (saasError.type === ErrorType.CONFLICT && saasError.context?.fieldName) {\n const fieldName = saasError.context.fieldName as string;\n const duplicateValue = saasError.context.duplicateValue as string \| undefined;\n const customErrorMessage = saasError.context.customErrorMessage as string \| undefined;\n const fallbackMessage = customErrorMessage\n ? customErrorMessage.replace('{fieldName}', fieldName)\n : duplicateValue\n ? `\"${duplicateValue}\" already exists`\n : 'Value already exists';\n\n const entry: ValidationErrorEntry = {\n key: 'validation.unique.conflict',\n message: fallbackMessage,\n params: {\n fieldName,\n ...(duplicateValue ? { value: duplicateValue } : {}),\n },\n };\n validationErrors = { [fieldName]: entry };\n }\n\n // VALIDATION (400): Zod validation errors — plain strings (already localized by Zod)\n if (saasError.type === ErrorType.VALIDATION && saasError.context?.zodIssues) {\n const zodIssues = saasError.context.zodIssues as Array<{ path: (string \| number)[]; message: string }>;\n validationErrors = zodIssues.reduce((acc, issue) => {\n const fieldPath = issue.path.join('.');\n acc[fieldPath] = issue.message;\n return acc;\n }, {} as ValidationErrors);\n }\n\n // H9 fix: Sanitize error at serialization boundary — backend logs retain full context,\n // but the HTTP response strips internal details (emails, stack traces, session IDs, etc.)\n const sanitizedError = this.errorBuilder.sanitizeErrorForClient(saasError);\n const retryAfterSeconds = sanitizedError.context?.retryAfterSeconds;\n if (\n (typeof retryAfterSeconds === 'number' \|\| typeof retryAfterSeconds === 'string')\n && retryAfterSeconds !== ''\n && typeof res.getHeader === 'function'\n && typeof res.setHeader === 'function'\n && res.getHeader('Retry-After') === undefined\n ) {\n res.setHeader('Retry-After', String(retryAfterSeconds));\n }\n\n const response: ErrorResponse = {\n error: {\n type: saasError.type,\n severity: saasError.severity,\n message: saasError.customMessageReference,\n customMessage: saasError.customMessageReference,\n ...(saasError.customMessageReference && { customMessageReference: saasError.customMessageReference }),\n operationPath: saasError.operationPathKey,\n // A stable, operation-specific refusal code (e.g. `LAST_ORGANIZATION_OWNER`) is the\n // contract clients branch on. It is authored in `context.code` and allow-listed by the\n // sanitizer, so it also appears under `details.code`; hoisting it to the top-level field the\n // schema reserves is what lets the customer documentation say \"branch on `error.code`\".\n ...(typeof sanitizedError.context?.code === 'string' && { code: sanitizedError.context.code }),\n // Phase 3 (SD5) — a safe, non-PII support/trace id the user can quote; joins this response to\n // the backend logs + audit for the same request. The error's captured id, else the ambient frame.\n correlationId: saasError.correlationId ?? getCurrentCorrelationId(),\n timestamp: saasError.timestamp.toISOString(),\n initiatorIds: saasError.initiatorIds,\n // executionType: saasError.executionType,\n // stack: saasError.stack,\n ...(sanitizedError.context && { details: sanitizedError.context }),\n // FIX-P6-H1: Include validationErrors at top level for frontend parsing\n ...(validationErrors && { validationErrors }),\n // Phase 1b: Include user guidance if present on the error\n ...(saasError.userGuidance && { userGuidance: saasError.userGuidance }),\n }\n };\n\n res.status(saasError.statusCode).json(response);\n } catch (sendError) {\n // If sending the error response fails, log it but don't throw\n // This prevents Express default HTML error handler from being triggered\n this.logger.error('Failed to send error response', {\n originalError: saasError.type,\n sendError: describeCaughtError(sendError)\n });\n }\n }\n\n\n /\n Get client IP address\n /\n private getClientIpAddress(req: Request): string {\n const xForwardedFor = req.headers[WildoHeaderKeys.FORWARDED_FOR];\n if (xForwardedFor) {\n return Array.isArray(xForwardedFor) ? xForwardedFor[0] : xForwardedFor.split(',')[0];\n }\n\n return req.headers[WildoHeaderKeys.REAL_IP] as string \|\|\n req.connection?.remoteAddress \|\|\n req.socket?.remoteAddress \|\|\n 'unknown';\n }\n\n /\n Create async error wrapper for route handlers\n /\n asyncHandler(fn: Function): (req: Request, res: Response, next: NextFunction) => void {\n return (req: Request, res: Response, next: NextFunction): void => {\n Promise.resolve(fn(req, res, next)).catch(next);\n };\n }\n\n /\n Global unhandled rejection handler\n /\n handleUnhandledRejection(): void {\n process.on('unhandledRejection', (reason: any, promise: Promise<any>) => {\n const errorToHandle = this.errorBuilder.buildError(ErrorType.UNHANDLED_REJECTION, undefined, {\n stack: reason?.stack,\n context: {\n name: reason?.name,\n message: reason?.message,\n promise: promise.toString()\n }\n });\n this.logger.fatal('Unhandled Promise Rejection', { ...errorToHandle });\n\n // Graceful shutdown\n process.exit(1);\n });\n }\n\n /\n Global uncaught exception handler.\n \n Exits the process for every uncaught exception EXCEPT the narrow class\n * isolated by {@link isNonFatalTelemetryPipelineException}. Node's own\n * guidance (\"uncaught exception means unknown state, exit\") assumes the\n * failure came from the host's own request/business logic. A background\n * telemetry batch-flush timer (OTel's `BatchLogRecordProcessor`, ticking\n * every few seconds independently of any request) is a different failure\n * domain: its own state corruption says nothing about whether the host's\n * actual work is safe to continue, and `otel-preload.ts` already commits to\n * \"telemetry failures must never affect host availability\" for SDK-start\n * failures (Audit A-17) — this extends the same policy to a runtime\n * telemetry failure. Every other uncaught exception keeps today's hard-exit\n * behavior unchanged.\n \n NOTE: this method is not wired into any production entrypoint today (no\n * caller reaches `initializeGlobalHandlers`/`handleUncaughtException`) —\n * kept for any future/direct caller, and as the tested home of the shared\n * {@link isNonFatalTelemetryPipelineException} predicate. It cannot simply\n * become \"the\" global handler: it depends on DI (`ErrorBuilderBackendService`\n * via the container), so it is only constructible AFTER\n * `setupSaasBackendInjection()` — every real crash boundary below registers\n * a RAW `process.on(...)` listener at module load, before the container\n * exists, specifically so container-construction failures and early-startup\n * throws are still caught. The listeners that actually apply this predicate\n * in production, all against the SAME exported function:\n \n - `runPlatformServiceEntrypoint` (platform\n * `platform-shared-lib/src/core/startup/platform-service-process-boundary.ts`)\n * — protects `platform-apps-manager`, `platform-crontabs-batches-manager`,\n * `platform-module-registry`. This is the process that actually crashed\n * on 2026-08-06, on `this._flushOneBatch(...).then(...).catch is not a\n * function` inside `@opentelemetry/sdk-logs`'s batch timer.\n * - `WorkerShutdownManagerBackendService.registerSignalHandlers` (this\n * package, `queue/worker-shutdown-manager.backend.service.ts`) — the\n * engine-shared listener reached by every NON-PLATFORM host\n * (backend-api, workers, minions) that runs a queue worker OR has\n * telemetry active, via `StartApplicationBackendService`'s\n * `!isPlatformApplication`/`!isPlatformMode`-gated calls into\n * `ObservabilityBackendService.initialize`/`QueueWorkerInitializer.initialize`.\n * Platform hosts skip both gates entirely and are NOT covered by this\n * listener — they rely solely on the `runPlatformServiceEntrypoint` entry\n * above.\n * - The hand-rolled bootstrap `process.on('uncaughtException'/'unhandledRejection', ...)`\n * blocks in each application entrypoint (Wonder Todos:\n * `backend-api/src/index.ts`, `minions/marketing-scrapper/src/index.ts`,\n * `workers/my-node-worker/src/index.ts`) — these are hand-authored\n * per-app boilerplate, not generated from a shared template, so a future\n * app scaffolded the same way needs the same carve-out applied by hand\n * until this pattern is consolidated into a shared bootstrap helper.\n /\n handleUncaughtException(): void {\n process.on('uncaughtException', (error: Error) => {\n const errorToHandle = this.errorBuilder.buildError(ErrorType.UNCAUGHT_EXCEPTION, undefined, {\n stack: error.stack,\n context: {\n name: error.name,\n message: error.message,\n }\n });\n\n if (isNonFatalTelemetryPipelineException(error)) {\n this.logger.error('Uncaught exception isolated to the telemetry pipeline; host stays up', { ...errorToHandle });\n return;\n }\n\n this.logger.fatal('Uncaught Exception', { ...errorToHandle });\n\n // Graceful shutdown\n process.exit(1);\n });\n }\n\n /\n Initialize global error handlers\n */\n initializeGlobalHandlers(): void {\n this.handleUnhandledRejection();\n this.handleUncaughtException();\n }\n\n}\n"]}
1	+ {"version":3,"file":"error-handler.backend.service.js","sourceRoot":"","sources":["../../../../src/errors/services/error-handler.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,wCAAwC,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAC7J,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAExG,kCAAkC;AAClC,OAAO,EAEL,SAAS,EAKT,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAsB;IACxE,4EAA4E;IAC5E,+DAA+D;IAC/D,yBAAyB;IACzB,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,4DAA4D;IAC5D,4BAA4B;IAC5B,qEAAqE;IACrE,0BAA0B;IAC1B,4EAA4E;IAC5E,gEAAgE;IAChE,mCAAmC;IACnC,wCAAwC;IACxC,iCAAiC;CAClC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAsB;IAC7E,oEAAoE;IACpE,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,sEAAsE;IACtE,4EAA4E;IAC5E,uEAAuE;IACvE,+BAA+B;IAC/B,+BAA+B;IAC/B,wEAAwE;IACxE,yEAAyE;IACzE,gCAAgC;IAChC,wCAAwC;IACxC,qCAAqC;IACrC,yCAAyC;IACzC,sCAAsC;IACtC,2CAA2C;IAC3C,4EAA4E;IAC5E,iDAAiD;IACjD,oBAAoB;IACpB,yBAAyB;IACzB,qBAAqB;IACrB,6BAA6B;IAC7B,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,yBAAyB;IACzB,4EAA4E;IAC5E,0DAA0D;IAC1D,0BAA0B;IAC1B,qCAAqC;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAY;IAC/D,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,OAAO,uCAAuC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAIe;IACa;IAJhD,QAAQ,CAA+D;IAEjF,YAC6C,MAAqB,EACR,YAAwC;QADrD,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAEhG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,OAAO,CAAC,KAA+B,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAChG,0CAA0C;YAC1C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,mEAAmE;gBACnE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,qDAAqD;YACrD,MAAM,gBAAgB,GAAI,GAAW,CAAC,gBAAqD,CAAC;YAE5F,MAAM,aAAa,GAAG,KAAK,YAAY,KAAK;gBAC1C,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC;gBACnE,CAAC,CAAC,KAAK,CAAC;YACV,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAEvD,yEAAyE;YACzE,sEAAsE;YACtE,oEAAoE;YACpE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,wCAAwC,CACtC,IAAI,CAAC,MAAM,EACX,qBAAqB,EACrB,aAAa;YACb,qEAAqE;YACrE,sEAAsE;YACtE,iBAAiB;YACjB;gBACE,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CACF,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,KAA+B,EAAE,gBAAwC;QAClG,MAAM,aAAa,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEzH,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,kCAAkC;QAClC,wCAAwC,CAAC,IAAI,CAAC,MAAM,EAAE,gCAAgC,EAAE,aAAa,CAAC,CAAC;IACzG,CAAC;IAGO,iBAAiB,CAAC,SAA6B,EAAE,GAAa,EAAE,YAA4C;QAClH,2CAA2C;QAC3C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,UAAU,EAAE,SAAS,CAAC,UAAU;aACjC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,iFAAiF;YACjF,4GAA4G;YAC5G,EAAE;YACF,uFAAuF;YACvF,yFAAyF;YACzF,oFAAoF;YACpF,sFAAsF;YACtF,wFAAwF;YACxF,gEAAgE;YAChE,IAAI,gBAA8C,CAAC;YAEnD,6EAA6E;YAC7E,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAmB,CAAC;gBACxD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,cAAoC,CAAC;gBAC9E,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAwC,CAAC;gBACtF,MAAM,eAAe,GAAG,kBAAkB;oBACxC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;oBACtD,CAAC,CAAC,cAAc;wBACd,CAAC,CAAC,IAAI,cAAc,kBAAkB;wBACtC,CAAC,CAAC,sBAAsB,CAAC;gBAE7B,MAAM,KAAK,GAAyB;oBAClC,GAAG,EAAE,4BAA4B;oBACjC,OAAO,EAAE,eAAe;oBACxB,MAAM,EAAE;wBACN,SAAS;wBACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD;iBACF,CAAC;gBACF,gBAAgB,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,qFAAqF;YACrF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAkE,CAAC;gBACvG,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACjD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC/B,OAAO,GAAG,CAAC;gBACb,CAAC,EAAE,EAAsB,CAAC,CAAC;YAC7B,CAAC;YAED,uFAAuF;YACvF,0FAA0F;YAC1F,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAC3E,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACpE,IACE,CAAC,OAAO,iBAAiB,KAAK,QAAQ,IAAI,OAAO,iBAAiB,KAAK,QAAQ,CAAC;mBAC7E,iBAAiB,KAAK,EAAE;mBACxB,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;mBACnC,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU;mBACnC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,SAAS,EAC7C,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,QAAQ,GAAkB;gBAC9B,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,OAAO,EAAE,SAAS,CAAC,sBAAsB;oBACzC,aAAa,EAAE,SAAS,CAAC,sBAAsB;oBAC/C,GAAG,CAAC,SAAS,CAAC,sBAAsB,IAAI,EAAE,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,EAAE,CAAC;oBACrG,aAAa,EAAE,SAAS,CAAC,gBAAgB;oBACzC,oFAAoF;oBACpF,uFAAuF;oBACvF,6FAA6F;oBAC7F,wFAAwF;oBACxF,GAAG,CAAC,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC9F,8FAA8F;oBAC9F,kGAAkG;oBAClG,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,uBAAuB,EAAE;oBACnE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,0CAA0C;oBAC1C,0BAA0B;oBAC1B,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;oBAClE,wEAAwE;oBACxE,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;oBAC7C,0DAA0D;oBAC1D,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;iBACxE;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,8DAA8D;YAC9D,wEAAwE;YACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBACjD,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGD;;OAEG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAW;YAC9C,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;YACzB,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAY;QACvB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAC/D,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAW,EAAE,OAAqB,EAAE,EAAE;YACtE,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,EAAE;gBAC3F,KAAK,EAAE,MAAM,EAAE,KAAK;gBACpB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM,EAAE,IAAI;oBAClB,OAAO,EAAE,MAAM,EAAE,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;iBAC5B;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAEvE,oBAAoB;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoDG;IACH,uBAAuB;QACrB,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;YAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,kBAAkB,EAAE,SAAS,EAAE;gBAC1F,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE;oBACP,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF,CAAC,CAAC;YAEH,IAAI,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;gBAChH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAE9D,oBAAoB;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;CAEF,CAAA;AA9SY,mBAAmB;IAD/B,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;qCADI,aAAa;QACM,0BAA0B;GALvF,mBAAmB,CA8S/B","sourcesContent":["import { NextFunction, Request, Response } from 'express';\nimport { inject, injectable } from 'inversify';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { ErrorBuilderBackendService } from './error-builder.backend.service';\nimport { logWildoBackendErrorAtClassifiedSeverity, describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { getCurrentCorrelationId } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\n\n// Import the unified error system\nimport {\n ErrorResponse,\n ErrorType,\n ExecutionContext_InitiatorIds,\n WildoError_Backend,\n ValidationErrors,\n ValidationErrorEntry,\n WildoHeaderKeys,\n} from '@wildo-ai/saas-models';\nimport { ExecutionContext, } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\n/*\n The package-path segments that identify Wildo's OTLP export pipeline in a\n * stack trace: the signal processors that own the background flush timers, the\n * exporters they hand batches to, and the shared OTLP serialize/send layer\n * every exporter delegates into.\n \n The membership criterion is NOT \"is this an OpenTelemetry package\" — it is\n * \"can a frame from this package ever appear in the stack of a HOST error?\"\n * Every package listed here answers no: nothing in it invokes a caller-supplied\n * callback, so it is reached only from a telemetry export tick (or from\n * `sdk.shutdown()`). That is what makes a plain \"does the stack mention it\"\n * substring test sound: a frame from one of these packages cannot be\n * routed through, only raised in.\n \n `@opentelemetry/exporter-` is a PREFIX on purpose — it covers the three\n * exporters `otel-preload.ts` wires today (`exporter-trace-otlp-http`,\n * `exporter-metrics-otlp-http`, `exporter-logs-otlp-http`) and every transport\n * sibling (`-proto`, `-grpc`, zipkin, prometheus) a future provider selection\n * could swap in, without this list having to be revisited. Each is export-only\n * by construction.\n \n Kept in step with the package's real OpenTelemetry dependency set by the\n * totality pin in `__tests__/error-handler.backend.service.test.ts`, which\n * enumerates every `@opentelemetry/` entry in this package's own\n `package.json` and fails unless each one is either matched here or named in\n * {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A name list with no\n * link to whatever owns those names is the drift this carve-out already had\n * once; the pin is that link. It is test-time rather than compile-time because\n * the owning vocabulary is a JSON manifest, not a TypeScript symbol.\n /\nexport const TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS: readonly string[] = [\n // Log signal: `BatchLogRecordProcessor`'s periodic `_flushOneBatch` timer —\n // the frame the 2026-08-06 incident was raised in (see below).\n '@opentelemetry/sdk-logs',\n // Metric signal: `PeriodicExportingMetricReader`'s collect/export interval.\n // Safe as a whole-stack match only while this application declares no\n // OBSERVABLE instrument: an observable callback is host code invoked by the\n // reader, and would put host frames under an `sdk-metrics` frame. None exist\n // (no `createObservable`/`addCallback` call site in engine/, platform/ or\n // examples/ as of 2026-09-09), and such a callback would in any case be\n // telemetry-collection code failing on the collection tick.\n '@opentelemetry/sdk-metrics',\n // Every OTLP/zipkin/prometheus exporter — see the prefix note above.\n '@opentelemetry/exporter-',\n // The shared OTLP serialize + send layer the exporters above delegate into,\n // and where a transport/serialization fault is actually raised.\n '@opentelemetry/otlp-exporter-base',\n '@opentelemetry/otlp-grpc-exporter-base',\n '@opentelemetry/otlp-transformer',\n];\n\n/*\n The OpenTelemetry packages this carve-out deliberately does NOT isolate, each\n * with the reason. This is not a leftover list: it is the other half of the\n * totality pin, so that adding an OTel dependency forces a decision instead of\n * silently landing outside both sets.\n \n The reason is the same for the whole first group and it is the one that\n * matters: these packages invoke host code, so their frames appear in the\n * stack of ordinary host crashes. Matching them would not widen a telemetry\n * carve-out — it would suppress genuine host faults.\n /\nexport const TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED: readonly string[] = [\n // --- Runs host code, so a host crash's stack passes through it ---\n // `Tracer.startActiveSpan(name, fn)` calls `fn` — the host's own work — so\n // under HTTP auto-instrumentation practically EVERY synchronous server-side\n // crash carries an `sdk-trace-base` frame. Matching it would carve out the\n // whole application. The consequence is a stated gap, not an oversight: a\n // fault raised INSIDE `BatchSpanProcessor` itself (the span-tier analogue of\n // the 2026-08-06 log-tier incident) still hard-exits. Closing it needs a\n // discriminator this predicate does not have — either \"raised in the TOP\n // frame\" or \"the stack shows a timer tick\" — and neither is worth the\n // false-negative risk until a span-tier incident is actually evidenced. The\n // span EXPORT half is already covered, via `exporter-trace-otlp-http`.\n '@opentelemetry/sdk-trace-base',\n '@opentelemetry/sdk-trace-node',\n // Instrumentation WRAPS host handlers, middleware and driver calls; its\n // frames sit directly beneath host frames on every instrumented request.\n '@opentelemetry/instrumentation',\n '@opentelemetry/instrumentation-express',\n '@opentelemetry/instrumentation-http',\n '@opentelemetry/instrumentation-mongoose',\n '@opentelemetry/instrumentation-redis',\n '@opentelemetry/auto-instrumentations-node',\n // `context.with(ctx, fn)` runs the host callback; the API/core/context tier\n // is on the synchronous path of anything traced.\n '@opentelemetry/api',\n '@opentelemetry/api-logs',\n '@opentelemetry/core',\n // --- Not an export tick ---\n // The SDK facade. Its one dangerous call, `sdk.start()`, is already guarded\n // where it happens (`otel-preload.ts`, Audit A-17) and is a BOOT failure: a\n // host that cannot start telemetry has no export tick to isolate.\n '@opentelemetry/sdk-node',\n // Static data / attribute helpers, resolved at startup. Nothing periodic to\n // isolate, and their frames appear during host bootstrap.\n '@opentelemetry/resources',\n '@opentelemetry/semantic-conventions',\n];\n\n/\n Isolates an uncaught exception RAISED INSIDE the OTLP export pipeline —\n * the background machinery that flushes logs, metrics and spans to the\n * collector on a timer, independent of any request — from every other uncaught\n * exception, which still hard-exits via the default path.\n \n WHAT THIS SUPPRESSES: a failure whose stack mentions one of\n * {@link TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS}. Those packages never call\n * host code (see that constant's note), so a stack that mentions one of them\n * is a stack that was raised in one of them.\n \n WHAT IT MUST NOT SUPPRESS, and does not: anything raised in the host's own\n * request/business logic, anything raised in OTel INSTRUMENTATION (which wraps\n * host code), and anything in the trace/context tier a host stack routes\n * through — see {@link TELEMETRY_PACKAGES_DELIBERATELY_NOT_ISOLATED}. A\n * carve-out that swallowed a genuine fault into a silently degraded process\n * would be strictly worse than the crash it prevents, which is why the\n * criterion is \"cannot be on a host stack\" rather than \"is telemetry\".\n \n Root cause (2026-08-06): the timer callback in\n * `BatchLogRecordProcessorBase` does `this._flushOneBatch().then(...).catch(...)`\n * on a fixed interval, independent of any request. Observed in production dev\n * use as `TypeError: this._flushOneBatch(...).then(...).catch is not a\n * function`. The processor's own promise chain broke down before its internal\n * `globalErrorHandler` safety net could catch it, so the failure escaped as a\n * process-level uncaught exception — killing an otherwise-healthy host over a\n * background telemetry-export housekeeping tick.\n \n WIDENED 2026-09-09. The original predicate matched the single literal\n * `@opentelemetry/sdk-logs`, which is where that one incident happened to be\n * raised — so the identical promise-chain/transport failure arriving from the\n * METRIC reader or from ANY of the three OTLP exporters was not isolated and\n * hard-exited the host. Keying a carve-out on one package NAME makes its reach\n * an accident of which pipeline failed first; the property that actually\n * distinguishes the case is the export pipeline itself.\n /\nexport function isNonFatalTelemetryPipelineException(error: Error): boolean {\n if (typeof error.stack !== 'string') return false;\n const stack = error.stack;\n return TELEMETRY_EXPORT_PIPELINE_STACK_MARKERS.some((marker) => stack.includes(marker));\n}\n\n/\n Unified Error Handler Service\n * Handles all errors using the new unified error management system\n /\n@injectable()\nexport class ErrorHandlerService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private errorBuilder: ErrorBuilderBackendService\n ) {\n this.logDebug = this.logger.debugByType('ErrorHandlerService');\n this.logger.setDebugTypeLogging('ErrorHandlerService', false);\n }\n\n /\n Express error handling middleware with unified error system\n * Express requires exactly 4 parameters: (err, req, res, next)\n /\n expressErrorHandler(): (error: Error\|WildoError_Backend, req: Request, res: Response, next: NextFunction) => void {\n return (error: Error\|WildoError_Backend, req: Request, res: Response, next: NextFunction): void => {\n // Check if response has already been sent\n if (res.headersSent) {\n // If headers are already sent, delegate to Express default handler\n return next(error);\n }\n\n // Extract executionContext from request if available\n const executionContext = (req as any).executionContext as ExecutionContext<any> \| undefined;\n\n const errorToHandle = error instanceof Error\n ? this.errorBuilder.buildFromStandardError(error, executionContext)\n : error;\n errorToHandle.ipAddress = this.getClientIpAddress(req);\n\n // Single, central log for every HTTP error — emitted at the classified\n // operational severity rather than a blanket `error`. This is the one\n // true HTTP error boundary (mounted globally in http-server and per\n // sub-router), so logging here guarantees exactly one line per failed\n // request: expected client conditions (e.g. an expired token the client\n // will refresh) stay at `debug`, genuine server faults stay at `error`\n // with a stack. Per-controller boundaries no longer log — they forward\n // here — which removes the historic double-logging and the noise flood.\n logWildoBackendErrorAtClassifiedSeverity(\n this.logger,\n 'HTTP request failed',\n errorToHandle,\n // Boundary-specific extras only — the error's own fields (errorType,\n // statusCode, customMessageReference, operationPath, …) are projected\n // by the helper.\n {\n method: req.method,\n path: req.path,\n },\n );\n\n this.sendErrorResponse(errorToHandle, res);\n };\n }\n\n handleBatchesCronjobsError(error: Error\|WildoError_Backend, executionContext?: ExecutionContext<any>): void {\n const errorToHandle = error instanceof Error ? this.errorBuilder.buildFromStandardError(error, executionContext) : error;\n\n // Batch/cron is a non-HTTP boundary (no `expressErrorHandler` downstream),\n // so this is where the line must be emitted — at the classified severity.\n // The error's own fields are projected by the helper; the stack is attached\n // only when the level is `error`.\n logWildoBackendErrorAtClassifiedSeverity(this.logger, 'Batch/cronjob execution failed', errorToHandle);\n }\n\n\n private sendErrorResponse(saasError: WildoError_Backend, res: Response, initiatorIds?: ExecutionContext_InitiatorIds): void {\n // Double-check if headers are already sent\n if (res.headersSent) {\n this.logger.warn('Cannot send error response - headers already sent', {\n errorType: saasError.type,\n statusCode: saasError.statusCode\n });\n return;\n }\n\n try {\n // Build validationErrors for responses that carry field-level error information.\n // Values can be plain strings (Zod errors) or structured ValidationErrorEntry objects (unique constraints).\n //\n // C3: Intentional extraction order — validationErrors are extracted from the raw error\n // BEFORE sanitizeErrorForClient() runs. This is by design: zodIssues contain field-level\n // validation messages that must appear in the response for form UX, even though the\n // sanitization layer may strip them from `details`. If zodIssues are removed from the\n // sanitization allowlist in the future, validationErrors will still be included because\n // they are extracted independently above the sanitization call.\n let validationErrors: ValidationErrors \| undefined;\n\n // CONFLICT (409): Unique constraint violations — use structured i18n entries\n if (saasError.type === ErrorType.CONFLICT && saasError.context?.fieldName) {\n const fieldName = saasError.context.fieldName as string;\n const duplicateValue = saasError.context.duplicateValue as string \| undefined;\n const customErrorMessage = saasError.context.customErrorMessage as string \| undefined;\n const fallbackMessage = customErrorMessage\n ? customErrorMessage.replace('{fieldName}', fieldName)\n : duplicateValue\n ? `\"${duplicateValue}\" already exists`\n : 'Value already exists';\n\n const entry: ValidationErrorEntry = {\n key: 'validation.unique.conflict',\n message: fallbackMessage,\n params: {\n fieldName,\n ...(duplicateValue ? { value: duplicateValue } : {}),\n },\n };\n validationErrors = { [fieldName]: entry };\n }\n\n // VALIDATION (400): Zod validation errors — plain strings (already localized by Zod)\n if (saasError.type === ErrorType.VALIDATION && saasError.context?.zodIssues) {\n const zodIssues = saasError.context.zodIssues as Array<{ path: (string \| number)[]; message: string }>;\n validationErrors = zodIssues.reduce((acc, issue) => {\n const fieldPath = issue.path.join('.');\n acc[fieldPath] = issue.message;\n return acc;\n }, {} as ValidationErrors);\n }\n\n // H9 fix: Sanitize error at serialization boundary — backend logs retain full context,\n // but the HTTP response strips internal details (emails, stack traces, session IDs, etc.)\n const sanitizedError = this.errorBuilder.sanitizeErrorForClient(saasError);\n const retryAfterSeconds = sanitizedError.context?.retryAfterSeconds;\n if (\n (typeof retryAfterSeconds === 'number' \|\| typeof retryAfterSeconds === 'string')\n && retryAfterSeconds !== ''\n && typeof res.getHeader === 'function'\n && typeof res.setHeader === 'function'\n && res.getHeader('Retry-After') === undefined\n ) {\n res.setHeader('Retry-After', String(retryAfterSeconds));\n }\n\n const response: ErrorResponse = {\n error: {\n type: saasError.type,\n severity: saasError.severity,\n message: saasError.customMessageReference,\n customMessage: saasError.customMessageReference,\n ...(saasError.customMessageReference && { customMessageReference: saasError.customMessageReference }),\n operationPath: saasError.operationPathKey,\n // A stable, operation-specific refusal code (e.g. `LAST_ORGANIZATION_OWNER`) is the\n // contract clients branch on. It is authored in `context.code` and allow-listed by the\n // sanitizer, so it also appears under `details.code`; hoisting it to the top-level field the\n // schema reserves is what lets the customer documentation say \"branch on `error.code`\".\n ...(typeof sanitizedError.context?.code === 'string' && { code: sanitizedError.context.code }),\n // Phase 3 (SD5) — a safe, non-PII support/trace id the user can quote; joins this response to\n // the backend logs + audit for the same request. The error's captured id, else the ambient frame.\n correlationId: saasError.correlationId ?? getCurrentCorrelationId(),\n timestamp: saasError.timestamp.toISOString(),\n initiatorIds: saasError.initiatorIds,\n // executionType: saasError.executionType,\n // stack: saasError.stack,\n ...(sanitizedError.context && { details: sanitizedError.context }),\n // FIX-P6-H1: Include validationErrors at top level for frontend parsing\n ...(validationErrors && { validationErrors }),\n // Phase 1b: Include user guidance if present on the error\n ...(saasError.userGuidance && { userGuidance: saasError.userGuidance }),\n }\n };\n\n res.status(saasError.statusCode).json(response);\n } catch (sendError) {\n // If sending the error response fails, log it but don't throw\n // This prevents Express default HTML error handler from being triggered\n this.logger.error('Failed to send error response', {\n originalError: saasError.type,\n sendError: describeCaughtError(sendError)\n });\n }\n }\n\n\n /\n Get client IP address\n /\n private getClientIpAddress(req: Request): string {\n const xForwardedFor = req.headers[WildoHeaderKeys.FORWARDED_FOR];\n if (xForwardedFor) {\n return Array.isArray(xForwardedFor) ? xForwardedFor[0] : xForwardedFor.split(',')[0];\n }\n\n return req.headers[WildoHeaderKeys.REAL_IP] as string \|\|\n req.connection?.remoteAddress \|\|\n req.socket?.remoteAddress \|\|\n 'unknown';\n }\n\n /\n Create async error wrapper for route handlers\n /\n asyncHandler(fn: Function): (req: Request, res: Response, next: NextFunction) => void {\n return (req: Request, res: Response, next: NextFunction): void => {\n Promise.resolve(fn(req, res, next)).catch(next);\n };\n }\n\n /\n Global unhandled rejection handler\n /\n handleUnhandledRejection(): void {\n process.on('unhandledRejection', (reason: any, promise: Promise<any>) => {\n const errorToHandle = this.errorBuilder.buildError(ErrorType.UNHANDLED_REJECTION, undefined, {\n stack: reason?.stack,\n context: {\n name: reason?.name,\n message: reason?.message,\n promise: promise.toString()\n }\n });\n this.logger.fatal('Unhandled Promise Rejection', { ...errorToHandle });\n\n // Graceful shutdown\n process.exit(1);\n });\n }\n\n /\n Global uncaught exception handler.\n \n Exits the process for every uncaught exception EXCEPT the narrow class\n * isolated by {@link isNonFatalTelemetryPipelineException}. Node's own\n * guidance (\"uncaught exception means unknown state, exit\") assumes the\n * failure came from the host's own request/business logic. A background\n * telemetry export tick (OTel's `BatchLogRecordProcessor` or\n * `PeriodicExportingMetricReader`, and the OTLP exporters they feed, ticking\n * every few seconds independently of any request) is a different failure\n * domain: its own state corruption says nothing about whether the host's\n * actual work is safe to continue, and `otel-preload.ts` already commits to\n * \"telemetry failures must never affect host availability\" for SDK-start\n * failures (Audit A-17) — this extends the same policy to a runtime\n * telemetry failure. Every other uncaught exception keeps today's hard-exit\n * behavior unchanged.\n \n NOTE: this method is not wired into any production entrypoint today (no\n * caller reaches `initializeGlobalHandlers`/`handleUncaughtException`) —\n * kept for any future/direct caller, and as the tested home of the shared\n * {@link isNonFatalTelemetryPipelineException} predicate. It cannot simply\n * become \"the\" global handler: it depends on DI (`ErrorBuilderBackendService`\n * via the container), so it is only constructible AFTER\n * `setupSaasBackendInjection()` — every real crash boundary below registers\n * a RAW `process.on(...)` listener at module load, before the container\n * exists, specifically so container-construction failures and early-startup\n * throws are still caught. The listeners that actually apply this predicate\n * in production, all against the SAME exported function:\n \n - `runPlatformServiceEntrypoint` (platform\n * `platform-shared-lib/src/core/startup/platform-service-process-boundary.ts`)\n * — protects `platform-apps-manager`, `platform-crontabs-batches-manager`,\n * `platform-module-registry`. This is the process that actually crashed\n * on 2026-08-06, on `this._flushOneBatch(...).then(...).catch is not a\n * function` inside `@opentelemetry/sdk-logs`'s batch timer.\n * - `WorkerShutdownManagerBackendService.registerSignalHandlers` (this\n * package, `queue/worker-shutdown-manager.backend.service.ts`) — the\n * engine-shared listener reached by every NON-PLATFORM host\n * (backend-api, workers, minions) that runs a queue worker OR has\n * telemetry active, via `StartApplicationBackendService`'s\n * `!isPlatformApplication`/`!isPlatformMode`-gated calls into\n * `ObservabilityBackendService.initialize`/`QueueWorkerInitializer.initialize`.\n * Platform hosts skip both gates entirely and are NOT covered by this\n * listener — they rely solely on the `runPlatformServiceEntrypoint` entry\n * above.\n * - The hand-rolled bootstrap `process.on('uncaughtException'/'unhandledRejection', ...)`\n * blocks in each application entrypoint (Wonder Todos:\n * `backend-api/src/index.ts`, `minions/marketing-scrapper/src/index.ts`,\n * `workers/my-node-worker/src/index.ts`) — these are hand-authored\n * per-app boilerplate, not generated from a shared template, so a future\n * app scaffolded the same way needs the same carve-out applied by hand\n * until this pattern is consolidated into a shared bootstrap helper.\n /\n handleUncaughtException(): void {\n process.on('uncaughtException', (error: Error) => {\n const errorToHandle = this.errorBuilder.buildError(ErrorType.UNCAUGHT_EXCEPTION, undefined, {\n stack: error.stack,\n context: {\n name: error.name,\n message: error.message,\n }\n });\n\n if (isNonFatalTelemetryPipelineException(error)) {\n this.logger.error('Uncaught exception isolated to the telemetry pipeline; host stays up', { ...errorToHandle });\n return;\n }\n\n this.logger.fatal('Uncaught Exception', { ...errorToHandle });\n\n // Graceful shutdown\n process.exit(1);\n });\n }\n\n /\n Initialize global error handlers\n */\n initializeGlobalHandlers(): void {\n this.handleUnhandledRejection();\n this.handleUncaughtException();\n }\n\n}\n"]}