@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/data-seeding/data-seeding-config.shared.schemas.js

@@ -0,0 +1,118 @@
+/**
+ * `DataSeedingConfig` — application-level overrides for the data-seeding
+ * subsystem.
+ *
+ * Phase 7 / Item 47 (cron scheduler) — Slice 5. Mirrors
+ * {@link LifecycleConfigSchema} in shape and intent: a small, optional
+ * configuration block on the shared application configuration that lets
+ * operators tune the cron cadence of the engine-owned
+ * `data-seeding:scheduled-rerun` batch without having to fork the
+ * factory's built-in default.
+ *
+ * --------------------------------------------------------------------------
+ * Why the config lives in `saas-models` (not next to the batch)
+ * --------------------------------------------------------------------------
+ * The plan (`.cursor/plans/seeding-phase-7-cron-scheduler.md`, Slice 5)
+ * originally suggested placing this schema next to the batch factory in
+ * `engine/saas-backend-lib/src/data-seeding/models/`. We deviate from that
+ * because the runtime wiring (`StartApplicationBackendService.initialize`)
+ * reads operator-tunable configuration EXCLUSIVELY from
+ * `appConfigService.config?.*` — i.e. the
+ * {@link AppConfiguration_Shared_Schema} aggregate. The lifecycle batch's
+ * `dormancyCronSchedule` follows the same path and lives in
+ * `engine/saas-models/src/guidance/lifecycle-config.shared.schemas.ts`
+ * (mirroring it here keeps the two configurable engine batches symmetric
+ * and avoids splitting the "where does runtime config live" answer across
+ * two packages).
+ *
+ * The schema and its inferred type are re-exported from the
+ * `@wildo-ai/saas-models` package root so both the runtime wiring (which
+ * reads `appConfigService.config?.dataSeeding?.scheduledRerunCronSchedule`)
+ * and the cron batch factory (which receives the resolved cron string as a
+ * parameter) can share one source of truth.
+ *
+ * --------------------------------------------------------------------------
+ * Default cron schedule
+ * --------------------------------------------------------------------------
+ * `scheduledRerunCronSchedule` defaults to `'* * * * *'` (every minute).
+ * The minute-tick default is intentional: per-seed cadence is encoded on
+ * each {@link DataSeedDefinition}'s `schedule.cron`, not on the engine's
+ * tick. The engine's job is to wake up frequently enough that any
+ * declared per-seed cron expression can be honored without surprising
+ * operators with up-to-an-hour drift. A minute tick is the smallest
+ * useful resolution that 5-field crontab expressions can address — going
+ * sub-minute would force a 6-field "second-aware" expression we do not
+ * support today.
+ *
+ * Operators who want to relax the tick (e.g. a deployment whose only
+ * cron seeds run hourly or daily) override this string. The factory's
+ * built-in default also remains the manifest's declared cron so authored
+ * specifications stay consistent when the runtime override is absent.
+ */
+import { z } from 'zod';
+/**
+ * Application-level configuration for the data-seeding subsystem.
+ *
+ * Carries operator-tunable fields; kept as an object (not a bare
+ * primitive) so future settings (e.g. a global `enabled` master switch
+ * or a per-tick deadline) can land without renaming the surrounding key
+ * on {@link AppConfiguration_Shared_Schema}.
+ */
+export const DataSeedingConfigSchema = z.object({
+    /**
+     * Cron expression governing how often the engine-owned
+     * `data-seeding:scheduled-rerun` batch wakes up to evaluate each
+     * registered seed's `schedule.cron`. NOT the per-seed cadence — that
+     * is declared on each {@link DataSeedDefinition}.
+     *
+     * Default `'* * * * *'` (every minute) — the smallest resolution
+     * 5-field crontab expressions can address. Override to a coarser
+     * cadence when no registered seed needs minute-level precision.
+     *
+     * **Literal duplication note (Slice-5 follow-up #2 / L-NEW-1).** This
+     * `'* * * * *'` literal also lives as
+     * `DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON` in
+     * `engine/saas-backend-lib/src/base-classes/services/batches/engine-custom-batch-manifests.ts`.
+     * The duplication is intentional: `saas-models` cannot depend on
+     * `saas-backend-lib` (the dependency arrow points the other way), so
+     * we cannot import the constant here. Both literals MUST stay in
+     * sync — if you change one, change the other. The runtime fallback
+     * in `StartApplicationBackendService.initialize` reads from the
+     * backend-lib constant, so the value chosen there always wins when
+     * `dataSeeding.scheduledRerunCronSchedule` is absent; this Zod
+     * default applies only when the `dataSeeding` block is PRESENT but
+     * the field is omitted.
+     */
+    scheduledRerunCronSchedule: z.string().default('* * * * *'),
+    /**
+     * Retention window (in days) for terminal `DataSeedRun` ledger rows
+     * pruned by the engine-owned `data-seeding:run-cleanup` batch
+     * (post-Phase-7 close-out / audit L4-10).
+     *
+     * The cleanup batch deletes `DataSeedRun` rows whose `status` is
+     * terminal (`COMPLETED` / `PARTIAL` / `FAILED`) AND whose
+     * `finishedAt` is older than `runRetentionDays` days ago, with one
+     * critical safety carve-out: for each `(seedKey, scopeKind,
+     * relatedResourceType, relatedId)` business-key group the batch
+     * **always preserves the row carrying the MAX `seedVersion`** —
+     * deleting that row would defeat the dispatcher's idempotency
+     * check (`findByBusinessKey` against the current `seedVersion`
+     * would miss, re-running the seed unnecessarily on the next
+     * trigger). Older-version terminals AND non-most-recent terminals
+     * inside the same business-key group are eligible for prune.
+     *
+     * Default `30` (days). Increase if you want longer audit retention
+     * of partial / failed passes; decrease if your fan-out (e.g.
+     * USER-scoped seeds across millions of users) is producing too
+     * many rows. `RUNNING` rows are NEVER pruned by this batch — a
+     * RUNNING row that genuinely crashed is recovered by the dispatcher's
+     * own `findByBusinessKey` recover branch on the next pass.
+     *
+     * Set to `0` to disable retention pruning entirely (the batch still
+     * registers and ticks, but every row is kept). The batch is gated at
+     * registration time on `dataSeeds.length > 0`, so apps with no
+     * registered seeds skip the cron entirely regardless of this value.
+     */
+    runRetentionDays: z.number().int().min(0).default(30),
+});
+//# sourceMappingURL=data-seeding-config.shared.schemas.js.map

package/dist/esm/data-seeding/data-seeding-config.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-seeding-config.shared.schemas.js","sourceRoot":"","sources":["../../../../src/data-seeding/data-seeding-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC","sourcesContent":["/**\n * `DataSeedingConfig` — application-level overrides for the data-seeding\n * subsystem.\n *\n * Phase 7 / Item 47 (cron scheduler) — Slice 5. Mirrors\n * {@link LifecycleConfigSchema} in shape and intent: a small, optional\n * configuration block on the shared application configuration that lets\n * operators tune the cron cadence of the engine-owned\n * `data-seeding:scheduled-rerun` batch without having to fork the\n * factory's built-in default.\n *\n * --------------------------------------------------------------------------\n * Why the config lives in `saas-models` (not next to the batch)\n * --------------------------------------------------------------------------\n * The plan (`.cursor/plans/seeding-phase-7-cron-scheduler.md`, Slice 5)\n * originally suggested placing this schema next to the batch factory in\n * `engine/saas-backend-lib/src/data-seeding/models/`. We deviate from that\n * because the runtime wiring (`StartApplicationBackendService.initialize`)\n * reads operator-tunable configuration EXCLUSIVELY from\n * `appConfigService.config?.*` — i.e. the\n * {@link AppConfiguration_Shared_Schema} aggregate. The lifecycle batch's\n * `dormancyCronSchedule` follows the same path and lives in\n * `engine/saas-models/src/guidance/lifecycle-config.shared.schemas.ts`\n * (mirroring it here keeps the two configurable engine batches symmetric\n * and avoids splitting the \"where does runtime config live\" answer across\n * two packages).\n *\n * The schema and its inferred type are re-exported from the\n * `@wildo-ai/saas-models` package root so both the runtime wiring (which\n * reads `appConfigService.config?.dataSeeding?.scheduledRerunCronSchedule`)\n * and the cron batch factory (which receives the resolved cron string as a\n * parameter) can share one source of truth.\n *\n * --------------------------------------------------------------------------\n * Default cron schedule\n * --------------------------------------------------------------------------\n * `scheduledRerunCronSchedule` defaults to `'* * * * *'` (every minute).\n * The minute-tick default is intentional: per-seed cadence is encoded on\n * each {@link DataSeedDefinition}'s `schedule.cron`, not on the engine's\n * tick. The engine's job is to wake up frequently enough that any\n * declared per-seed cron expression can be honored without surprising\n * operators with up-to-an-hour drift. A minute tick is the smallest\n * useful resolution that 5-field crontab expressions can address — going\n * sub-minute would force a 6-field \"second-aware\" expression we do not\n * support today.\n *\n * Operators who want to relax the tick (e.g. a deployment whose only\n * cron seeds run hourly or daily) override this string. The factory's\n * built-in default also remains the manifest's declared cron so authored\n * specifications stay consistent when the runtime override is absent.\n */\n\nimport { z } from 'zod';\n\n/**\n * Application-level configuration for the data-seeding subsystem.\n *\n * Carries operator-tunable fields; kept as an object (not a bare\n * primitive) so future settings (e.g. a global `enabled` master switch\n * or a per-tick deadline) can land without renaming the surrounding key\n * on {@link AppConfiguration_Shared_Schema}.\n */\nexport const DataSeedingConfigSchema = z.object({\n  /**\n   * Cron expression governing how often the engine-owned\n   * `data-seeding:scheduled-rerun` batch wakes up to evaluate each\n   * registered seed's `schedule.cron`. NOT the per-seed cadence — that\n   * is declared on each {@link DataSeedDefinition}.\n   *\n   * Default `'* * * * *'` (every minute) — the smallest resolution\n   * 5-field crontab expressions can address. Override to a coarser\n   * cadence when no registered seed needs minute-level precision.\n   *\n   * **Literal duplication note (Slice-5 follow-up #2 / L-NEW-1).** This\n   * `'* * * * *'` literal also lives as\n   * `DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON` in\n   * `engine/saas-backend-lib/src/base-classes/services/batches/engine-custom-batch-manifests.ts`.\n   * The duplication is intentional: `saas-models` cannot depend on\n   * `saas-backend-lib` (the dependency arrow points the other way), so\n   * we cannot import the constant here. Both literals MUST stay in\n   * sync — if you change one, change the other. The runtime fallback\n   * in `StartApplicationBackendService.initialize` reads from the\n   * backend-lib constant, so the value chosen there always wins when\n   * `dataSeeding.scheduledRerunCronSchedule` is absent; this Zod\n   * default applies only when the `dataSeeding` block is PRESENT but\n   * the field is omitted.\n   */\n  scheduledRerunCronSchedule: z.string().default('* * * * *'),\n  /**\n   * Retention window (in days) for terminal `DataSeedRun` ledger rows\n   * pruned by the engine-owned `data-seeding:run-cleanup` batch\n   * (post-Phase-7 close-out / audit L4-10).\n   *\n   * The cleanup batch deletes `DataSeedRun` rows whose `status` is\n   * terminal (`COMPLETED` / `PARTIAL` / `FAILED`) AND whose\n   * `finishedAt` is older than `runRetentionDays` days ago, with one\n   * critical safety carve-out: for each `(seedKey, scopeKind,\n   * relatedResourceType, relatedId)` business-key group the batch\n   * **always preserves the row carrying the MAX `seedVersion`** —\n   * deleting that row would defeat the dispatcher's idempotency\n   * check (`findByBusinessKey` against the current `seedVersion`\n   * would miss, re-running the seed unnecessarily on the next\n   * trigger). Older-version terminals AND non-most-recent terminals\n   * inside the same business-key group are eligible for prune.\n   *\n   * Default `30` (days). Increase if you want longer audit retention\n   * of partial / failed passes; decrease if your fan-out (e.g.\n   * USER-scoped seeds across millions of users) is producing too\n   * many rows. `RUNNING` rows are NEVER pruned by this batch — a\n   * RUNNING row that genuinely crashed is recovered by the dispatcher's\n   * own `findByBusinessKey` recover branch on the next pass.\n   *\n   * Set to `0` to disable retention pruning entirely (the batch still\n   * registers and ticks, but every row is kept). The batch is gated at\n   * registration time on `dataSeeds.length > 0`, so apps with no\n   * registered seeds skip the cron entirely regardless of this value.\n   */\n  runRetentionDays: z.number().int().min(0).default(30),\n});\nexport type DataSeedingConfig = z.infer<typeof DataSeedingConfigSchema>;\n"]}

package/dist/esm/errors/errors.custom-message-ref.shared.definitions.d.ts

@@ -174,6 +174,200 @@ export declare enum ErrorCustomMessageReference {
     CONSUMABLE_TOKEN_FILE_SHARING_DISABLED = "consumable_token_file_sharing_disabled",
     /** W7.3b: ADDITIVE policy requires x-consumable-token header alongside JWT/API-key auth. */
     ADDITIVE_TOKEN_REQUIRED = "additive_token_required",
+    /** revocation-B1: requested one-off session `expiresIn` exceeds this user type's max-duration cap. */
+    ONE_OFF_SESSION_DURATION_EXCEEDS_MAX = "one_off_session_duration_exceeds_max",
+    /** Transient failure verifying the invitation's organization during accept; the single-use token is NOT consumed, so the invitee can safely retry. */
+    INVITATION_ORG_VERIFICATION_FAILED = "invitation_org_verification_failed",
+    /** The organization is directory-managed (SCIM): no local credential (password/passkey/magic-link) can be set. The invitee must sign in via SSO. */
+    AUTHENTICATION_SCIM_LOCAL_CREDENTIAL_BLOCKED = "authentication_scim_local_credential_blocked",
+    /**
+     * The invitation link cannot be used: it is unrecognised, has expired, was already used, or the
+     * invitation itself is no longer active. Ask the inviting administrator to send a new invitation.
+     *
+     * DELIBERATELY UNIFORM across every cause (unrecognised / expired / already-consumed token, wrong
+     * token type, missing invitation reference, non-INVITED or orphaned membership, or a revoke that
+     * raced the accept). All three PUBLIC token-based endpoints (`getInvitationInfo`,
+     * `acceptInvitation`, `rejectInvitation`) throw THIS single reference — and all throw
+     * `ErrorType.AUTHENTICATION` — so a token holder cannot distinguish "unrecognised token" from
+     * "recognised-but-superseded invite". A `customMessageReference` is a top-level field that SURVIVES
+     * error sanitization (unlike `context.message`), so a per-cause sibling WOULD be client-visible and
+     * would re-open that oracle: do NOT add one for those endpoints. The granular cause belongs in the
+     * backend logs. (Authenticated, ownership-gated in-app paths may use granular references — they are
+     * gated by userId, not token possession, so they leak nothing.)
+     */
+    INVITATION_NO_LONGER_VALID = "invitation_no_longer_valid",
+    /** The invitation is addressed to a different account than the authenticated caller. */
+    INVITATION_NOT_ADDRESSED_TO_CALLER = "invitation_not_addressed_to_caller",
+    /** The invitee already has an account: accept without setting a password, then sign in with the existing login method. */
+    INVITATION_EXISTING_ACCOUNT_NO_PASSWORD = "invitation_existing_account_no_password",
+    /** Self-service registration is disabled for this application / frontend service / user type. */
+    REGISTRATION_DISABLED = "registration_disabled",
+    /** Registration is by invitation only; a valid invitation is required to create an account. */
+    REGISTRATION_INVITATION_ONLY = "registration_invitation_only",
+    /** Registration for this user type is admin-provisioned only: accounts are created by an administrator, so there is no self-service sign-up or invitation-accept path. Distinct from REGISTRATION_DISABLED (registration off entirely) and REGISTRATION_INVITATION_ONLY (self-complete via an invitation token). */
+    REGISTRATION_ADMIN_ONLY = "registration_admin_only",
+    /** A password is required to complete this registration. */
+    REGISTRATION_PASSWORD_REQUIRED = "registration_password_required",
+    /** Registration could not be completed due to a transient server error; the user may retry. */
+    REGISTRATION_FAILED = "registration_failed",
+    /** The account exists but cannot be activated in its current state. */
+    ACCOUNT_ACTIVATION_NOT_ALLOWED = "account_activation_not_allowed",
+    /** A first authentication factor must be completed before this step. */
+    AUTHENTICATION_FIRST_FACTOR_REQUIRED = "authentication_first_factor_required",
+    /** Magic-link authentication is disabled for this application. */
+    AUTHENTICATION_MAGIC_LINK_DISABLED = "authentication_magic_link_disabled",
+    /** No verified phone number is available for SMS one-time-passcode delivery. */
+    AUTHENTICATION_NO_VERIFIED_PHONE = "authentication_no_verified_phone",
+    /** The current session state does not allow completing organization onboarding. */
+    AUTHENTICATION_ONBOARDING_STATE_INVALID = "authentication_onboarding_state_invalid",
+    /** The session was lost after magic-link verification; the user must restart sign-in. */
+    AUTHENTICATION_SESSION_LOST = "authentication_session_lost",
+    /** The session carries no associated email address. */
+    AUTHENTICATION_SESSION_NO_EMAIL = "authentication_session_no_email",
+    /** The session carries no associated user id. */
+    AUTHENTICATION_SESSION_NO_USER = "authentication_session_no_user",
+    /** SMS one-time-passcode authentication is disabled for this application. */
+    AUTHENTICATION_SMS_OTP_DISABLED = "authentication_sms_otp_disabled",
+    /** The refresh-token cookie is missing from the request. */
+    AUTHENTICATION_REFRESH_TOKEN_REQUIRED = "authentication_refresh_token_required",
+    /** The userId in the URL does not match the authenticated user. */
+    AUTHORIZATION_USER_ID_MISMATCH = "authorization_user_id_mismatch",
+    /**
+     * The scope in the URL (e.g. `/organizations/{id}/…`) does not match the authenticated MACHINE
+     * token's bound scope. Symmetric with {@link AUTHORIZATION_USER_ID_MISMATCH} for the machine arm:
+     * a machine token is bound to exactly one org/app, so a URL naming a different scope is rejected —
+     * this prevents the token's context map (URL-derived) from scoping a query to a different tenant
+     * than the token authorizes.
+     */
+    AUTHORIZATION_MACHINE_SCOPE_MISMATCH = "authorization_machine_scope_mismatch",
+    /** The current session state does not allow completing MFA enrollment. */
+    MFA_ENROLLMENT_STATE_INVALID = "mfa_enrollment_state_invalid",
+    /** No MFA method is enrolled for this account yet. */
+    MFA_NOT_ENROLLED = "mfa_not_enrolled",
+    /** A TOTP authenticator is already enrolled for this account. */
+    MFA_TOTP_ALREADY_ENROLLED = "mfa_totp_already_enrolled",
+    /** The provided TOTP code did not verify. */
+    MFA_TOTP_CODE_INVALID = "mfa_totp_code_invalid",
+    /** No pending TOTP setup exists; enrollment must be initiated first. */
+    MFA_TOTP_SETUP_NOT_INITIATED = "mfa_totp_setup_not_initiated",
+    /** The organization name is required. */
+    ORG_NAME_REQUIRED = "org_name_required",
+    /**
+     * An organization unit cannot be deleted because child units still hang off it.
+     *
+     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that expose
+     * `context` to the client, so the blocking dependent is surfaced by name — `blockingChildUnitId`
+     * when a child unit blocks, `blockingUnitMemberId` when a member assignment does. TWO distinct
+     * dependents share this one code; branch on the context key, not on the message.
+     *
+     * Unlike every other `ORGANIZATIONS` child, the unit tree's self-edge
+     * (`ORGANIZATION_UNITS -> ORGANIZATION_UNITS` on `parentUnitId`) declares NO `onParentDelete`
+     * cascade, so deleting an interior node would strand its whole subtree behind a dangling
+     * `parentUnitId` and a stale materialized `path`.
+     *
+     * MOVE is the remedy to point a client at: it re-parents a child onto another node and rewrites
+     * the materialized `path` of its whole subtree in one transaction. (Deleting the subtree
+     * bottom-up also works, leaf by leaf.) Since `parentUnitId` became `.excludeFromUpdate()` in the
+     * same pass that implemented MOVE, MOVE is the ONLY way to re-home a branch — so do not describe
+     * a plain update as an alternative.
+     *
+     * ⚠️ Direct per-unit DELETE only. Deleting the whole ORGANIZATION is a different path: that
+     * cascade IS enabled and removes every unit of the tenant at once (every unit carries the
+     * tenant's `organizationId`), and it runs at the repository level, so this guard is correctly
+     * not consulted there.
+     */
+    ORGANIZATION_UNIT_HAS_DEPENDENTS = "organization_unit_has_dependents",
+    /**
+     * A MOVE names a destination inside the moved unit's own subtree — one of its descendants, or the
+     * unit itself. Either detaches the branch into a cycle: a node below its own descendant has no
+     * route back to the root.
+     *
+     * Distinct from {@link ORGANIZATION_UNIT_CONFLICT}: this one names the re-parenting operation, so
+     * an API client can branch on "the destination is illegal" without re-deriving it from a generic
+     * update conflict. Distinct from {@link ORGANIZATION_UNIT_CODE_EXISTS}, which a MOVE can also
+     * raise: there the destination is legal and the unit's own `code` is what collides, so renaming
+     * the unit is a remedy that picking another destination is not.
+     */
+    ORGANIZATION_UNIT_MOVE_CONFLICT = "organization_unit_move_conflict",
+    /**
+     * An archive/restore is not a legal transition from the node's current state — already archived;
+     * not archived; or a restore whose parent branch is still archived.
+     *
+     * Sibling-code collisions are NOT reported here; they carry
+     * {@link ORGANIZATION_UNIT_CODE_EXISTS}, which names the taken value.
+     */
+    ORGANIZATION_UNIT_CONFLICT = "organization_unit_conflict",
+    /**
+     * A lifecycle verb was invoked from a state it may not transition out of — suspending an
+     * already-suspended row, reactivating one that was never suspended, deactivating a terminal
+     * account.
+     *
+     * Raised by the shared status-transition implementation
+     * (`createResourceStatusTransitionFactory`) and therefore resource-agnostic by design: the same
+     * reference covers organizations, organization members, and users, because "this is not a legal
+     * transition from the current state" is one API-visible outcome regardless of which state machine
+     * refused it. The error context names the resource, operation, current status and permitted
+     * source statuses, so a client has everything it needs without a per-resource reference.
+     *
+     * Distinct from a generic {@link CONFLICT}: a client can branch on "the row is in the wrong state
+     * for this verb" and re-read to show the real state, rather than treating it as an opaque clash.
+     *
+     * NOTE: most of these transitions ALSO declare an `enabledCondition`, which rejects the same
+     * situation earlier with `SERVICE_RESOURCE_OPERATION_DISABLED`. This reference covers the cases
+     * that gate cannot: a transition reached through a non-URL path, and the re-check the
+     * implementation performs against the row it actually loaded.
+     */
+    RESOURCE_STATUS_TRANSITION_CONFLICT = "resource_status_transition_conflict",
+    /**
+     * A unit `code` is already used by a sibling under the same parent.
+     *
+     * Sibling-scoped, not org-wide: two teams called `sales` under different divisions are a
+     * legitimate org chart, so the identity is (`organizationId`, `parentUnitId`, `code`). Units
+     * carrying no `code` at all are unconstrained — any number of them may sit under one parent.
+     *
+     * Raised by every operation that can introduce the collision (CREATE, UPDATE rename, MOVE) and by
+     * the database unique index that backs them. Those must agree: the index cannot know which
+     * operation was running, so an operation-specific code would make the SAME condition report
+     * differently depending on which write won a race.
+     */
+    ORGANIZATION_UNIT_CODE_EXISTS = "organization_unit_code_exists",
+    /**
+     * The requested organization `slug` is already taken.
+     *
+     * The slug is the tenant's URL-safe identity and is `.excludeFromUpdate()` — creation-time
+     * identity, not an editable label. That is why this must be refused at CREATE rather than
+     * reconciled later: a collision that got written could not be resolved through the API at all.
+     *
+     * Raised by the database unique index on `slug`. Uniqueness is collection-wide, which IS
+     * per-application: an application's organizations live in that application's own database.
+     */
+    ORGANIZATION_SLUG_EXISTS = "organization_slug_exists",
+    /**
+     * The requested application `appSlug` is already taken.
+     *
+     * GLOBAL across the platform, deliberately NOT compounded with `organizationId`, even though
+     * `wildoApplication` is an organization-scoped resource. The slug is not a label — it is the sole
+     * input, alongside the environment id, from which every provisioned backing resource takes its
+     * name: `buildApplicationNamespace(appSlug, environmentId)` (no organization component), and from
+     * it the application database, the database username and the RabbitMQ vhost. Two applications
+     * sharing a slug in DIFFERENT organizations would therefore be handed the same database and the
+     * same vhost.
+     *
+     * Raised by the database unique index on `appSlug`, and reachable only at CREATE: the field is
+     * `.excludeFromUpdate()`, so it is creation-time identity rather than an editable name.
+     *
+     * Added 2026-08-19 after the absence of this constraint let a second live `wonder-todos` row be
+     * inserted beside the first. The upsert looks up `{ appSlug }` but the repository applies the
+     * resource's contextual primary-scope filter, so once the platform organization was re-minted the
+     * lookup could no longer see the existing row and INSERTED rather than resolved. The orphaned
+     * lineage then kept publishing into the queues of an application that was no longer live, which
+     * surfaced only as a RabbitMQ `403 ACCESS_REFUSED` — never as anything naming a duplicate.
+     */
+    APPLICATION_SLUG_EXISTS = "application_slug_exists",
+    /** The client must send the X-Frontend-Service-Name header. */
+    FRONTEND_SERVICE_HEADER_REQUIRED = "frontend_service_header_required",
+    /** Inbound webhook signature verification failed. */
+    WEBHOOK_SIGNATURE_INVALID = "webhook_signature_invalid",
     BILLING_NOT_INITIALIZED = "billing_not_initialized",
     BILLING_ACCOUNT_NOT_FOUND = "billing_account_not_found",
     BILLING_NO_PROVIDER_CUSTOMER = "billing_no_provider_customer",
@@ -195,7 +389,32 @@ export declare enum ErrorCustomMessageReference {
     BILLING_CREDIT_POOL_NOT_FOUND = "billing_credit_pool_not_found",
     BILLING_PROMOTION_INVALID = "billing_promotion_invalid",
     BILLING_PRODUCT_SCOPE_MISMATCH = "billing_product_scope_mismatch",
+    /**
+     * A purchase named a product and a price that do not belong together.
+     *
+     * `Price.productId` is a declared foreign key, so every price already knows its product. The
+     * purchase paths, however, used to resolve the two INDEPENDENTLY — product by key, price by id —
+     * and never consulted that FK. The provider is billed the price while the local subscription item
+     * records the product, and entitlements derive from the product: a caller pairing a premium
+     * product key with a cheap price id therefore received premium entitlements at the cheap price.
+     *
+     * Raised as `ErrorType.VALIDATION` (400) — the payload is internally inconsistent, not unauthorized.
+     */
+    BILLING_PRICE_PRODUCT_MISMATCH = "billing_price_product_mismatch",
     BILLING_SCOPE_NOT_ENABLED = "billing_scope_not_enabled",
+    /**
+     * Hard removal of a billing account was refused because retained financial children
+     * (subscriptions / invoice refs / usage records / credit pools) still reference it.
+     *
+     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that
+     * expose `context` to the client, so the blocking child families are surfaced by name.
+     *
+     * @see the billing-retention rationale at the `Scope -> BillingAccounts` declaration in
+     * `resources-registry.shared.core.definitions.ts` — the children are RETAINED on purpose,
+     * and this account row holds the only local `providerCustomerId` that maps them back to
+     * the provider customer.
+     */
+    BILLING_ACCOUNT_HAS_DEPENDENTS = "billing_account_has_dependents",
     SAML_ASSERTION_INVALID = "saml_assertion_invalid",
     SAML_SIGNATURE_INVALID = "saml_signature_invalid",
     SAML_AUDIENCE_MISMATCH = "saml_audience_mismatch",
@@ -225,6 +444,134 @@ export declare enum ErrorCustomMessageReference {
     AGGREGATION_MAX_BUCKETS_EXCEEDED = "aggregation_max_buckets_exceeded",
     AGGREGATION_FIELD_ACCESS_DENIED = "aggregation_field_access_denied",
     AGGREGATION_COMPUTED_EXPRESSION_ERROR = "aggregation_computed_expression_error",
-    AGGREGATION_JOIN_ACCESS_DENIED = "aggregation_join_access_denied"
+    AGGREGATION_JOIN_ACCESS_DENIED = "aggregation_join_access_denied",
+    /** User lacks permission to view a chart's aggregated data (missing LIST access, chart role restriction, or insufficient roles). */
+    AGGREGATION_ACCESS_DENIED = "aggregation_access_denied",
+    /** A required scope/context value (org id, user id, unknown primary scope, or context-filter value) could not be resolved to authorize the aggregation. */
+    AGGREGATION_SCOPE_UNRESOLVED = "aggregation_scope_unresolved",
+    /** A context filter conflicts with or would override the enforced primary-scope lock on the aggregation. */
+    AGGREGATION_SCOPE_CONFLICT = "aggregation_scope_conflict",
+    /** Aggregation execution requires an executionContext unless skipAuthorization is explicitly enabled. */
+    AGGREGATION_EXECUTION_CONTEXT_REQUIRED = "aggregation_execution_context_required",
+    /** Selected AI provider/protocol is not enabled in application configuration. */
+    AGENT_PROVIDER_NOT_ENABLED = "agent_provider_not_enabled",
+    /** Provider not found or its LLM runtime contract is unavailable. */
+    AGENT_PROVIDER_NOT_FOUND = "agent_provider_not_found",
+    /** Requested agent operation key is not supported by the provider/runtime. */
+    AGENT_OPERATION_NOT_SUPPORTED = "agent_operation_not_supported",
+    /** Image provider client does not expose image generation. */
+    AGENT_IMAGE_GENERATION_NOT_SUPPORTED = "agent_image_generation_not_supported",
+    /** Image generation requires a non-empty prompt on the invocation input. */
+    AGENT_IMAGE_PROMPT_REQUIRED = "agent_image_prompt_required",
+    /** CLI runtime returned output that was missing, malformed, or failed schema validation. */
+    AGENT_CLI_OUTPUT_INVALID = "agent_cli_output_invalid",
+    /** Structured-generation operation requires a Zod schema on the invocation input. */
+    AGENT_STRUCTURED_SCHEMA_REQUIRED = "agent_structured_schema_required",
+    /** AI provider client does not support any known model initialization pattern. */
+    AGENT_MODEL_INITIALIZATION_FAILED = "agent_model_initialization_failed",
+    /** No messages provided for the (multimodal) chat completion. */
+    AGENT_MESSAGES_REQUIRED = "agent_messages_required",
+    /** The referenced agent is not active. */
+    AGENT_NOT_ACTIVE = "agent_not_active",
+    /** The referenced system is not a flow. */
+    FLOW_INVALID_KIND = "flow_invalid_kind",
+    /** The referenced flow is not active. */
+    FLOW_NOT_ACTIVE = "flow_not_active",
+    /** The referenced system is not an actor. */
+    ACTOR_INVALID_KIND = "actor_invalid_kind",
+    /** The referenced actor is not active. */
+    ACTOR_NOT_ACTIVE = "actor_not_active",
+    /** Chart parent context resource is not accessible to the caller. */
+    CHART_PARENT_CONTEXT_INACCESSIBLE = "chart_parent_context_inaccessible",
+    /** Authentication is disabled for this frontend service + user type (a config gate, NOT session invalidation). */
+    AUTHENTICATION_DISABLED_FOR_SERVICE = "authentication_disabled_for_service",
+    /** The requested OAuth2/social provider is not registered or available. */
+    OAUTH_PROVIDER_NOT_FOUND = "oauth_provider_not_found",
+    /** The requested SSO connection was not found or is disabled. */
+    SSO_CONNECTION_NOT_FOUND = "sso_connection_not_found",
+    /** The frontendServiceName query parameter is required to fetch application configuration. */
+    APP_CONFIGURATION_FRONTEND_SERVICE_REQUIRED = "app_configuration_frontend_service_required",
+    /** The frontendServiceName does not match any configured frontend service identity. */
+    APP_CONFIGURATION_UNKNOWN_FRONTEND_SERVICE = "app_configuration_unknown_frontend_service",
+    /** The data-seeding admin endpoint secret header is missing. */
+    SEED_ADMIN_SECRET_REQUIRED = "seed_admin_secret_required",
+    /** The data-seeding admin endpoint secret header did not match. */
+    SEED_ADMIN_SECRET_INVALID = "seed_admin_secret_invalid",
+    /** Invalid query parameters for the data-seeding admin list-runs endpoint. */
+    SEED_ADMIN_INVALID_QUERY = "seed_admin_invalid_query",
+    /** Invalid request body for the data-seeding admin rerun endpoint. */
+    SEED_ADMIN_INVALID_PAYLOAD = "seed_admin_invalid_payload",
+    /** updateSeedMetadata targeted a row _id that does not exist for the resource. */
+    REPOSITORY_RESOURCE_SEED_METADATA_NOT_FOUND = "repository_resource_seed_metadata_not_found",
+    /** Email recipient/cc/bcc/replyTo list contains an address that failed format validation. */
+    EMAIL_INVALID_ADDRESS_FORMAT = "email_invalid_address_format",
+    /** The requested file does not exist or is not accessible. */
+    FILE_NOT_FOUND = "file_not_found",
+    /** File cannot move to the requested status from its current state. */
+    FILE_INVALID_STATUS_TRANSITION = "file_invalid_status_transition",
+    /** File must be in UPLOADED status before it can be linked to a resource. */
+    FILE_NOT_IN_UPLOADED_STATUS = "file_not_in_uploaded_status",
+    /** File is already linked to a different resource. */
+    FILE_ALREADY_LINKED = "file_already_linked",
+    /** File has already been deleted. */
+    FILE_ALREADY_DELETED = "file_already_deleted",
+    /** Access to the requested file is denied. */
+    FILE_ACCESS_DENIED = "file_access_denied",
+    /** File cannot be deleted while the AV scan is in progress. */
+    FILE_DELETE_WHILE_PROCESSING = "file_delete_while_processing",
+    /** A file linked to a resource cannot be deleted; unlink it first. */
+    FILE_DELETE_LINKED_BLOCKED = "file_delete_linked_blocked",
+    /** Only the original uploader can delete this file. */
+    FILE_DELETE_UPLOADER_ONLY = "file_delete_uploader_only",
+    /** The file share request body is invalid. */
+    FILE_SHARE_REQUEST_INVALID = "file_share_request_invalid",
+    /** No file was provided in the upload request. */
+    FILE_UPLOAD_NO_FILE = "file_upload_no_file",
+    /** Too many files provided for this field (exceeds the configured maximum). */
+    FILE_TOO_MANY_FILES = "file_too_many_files",
+    /** This file field is system-generated and cannot receive uploads/writes. */
+    FILE_GENERATED_FIELD_NOT_WRITABLE = "file_generated_field_not_writable",
+    /** This file field is not overridable; existing files cannot be replaced or removed. */
+    FILE_FIELD_NOT_OVERRIDABLE = "file_field_not_overridable",
+    /** The file field value has an unexpected type (expected string, array, null, or undefined). */
+    FILE_FIELD_VALUE_INVALID = "file_field_value_invalid",
+    /** A nested file field could not be updated safely because multiple array items changed at once. */
+    FILE_NESTED_UPDATE_AMBIGUOUS = "file_nested_update_ambiguous",
+    /** uploadedBy and uploadedByEntityType must both be set or both omitted. */
+    FILE_UPLOADER_FIELDS_INCONSISTENT = "file_uploader_fields_inconsistent",
+    /** Explicit uploader ownership does not match the current execution principal. */
+    FILE_UPLOADER_MISMATCH = "file_uploader_mismatch",
+    /** A required scope identifier (application/organization/user id) is missing for this file operation. */
+    FILE_SCOPE_IDENTIFIER_MISSING = "file_scope_identifier_missing",
+    /** The scope identifiers are invalid for the specified primary scope. */
+    FILE_SCOPE_IDENTIFIER_INVALID = "file_scope_identifier_invalid",
+    /** The file access scope could not be derived from the execution context. */
+    FILE_SCOPE_DERIVATION_FAILED = "file_scope_derivation_failed",
+    /** Text extraction is not supported for this file's MIME type. */
+    FILE_TEXT_EXTRACTION_UNSUPPORTED_TYPE = "file_text_extraction_unsupported_type",
+    /**
+     * The file's MIME type IS supported, but its bytes could not be parsed — corrupt, truncated,
+     * or password-protected.
+     *
+     * Deliberately distinct from every storage/wiring failure that can also arise while extracting.
+     * This one is a permanent property of the BYTES, so a batch consumer may skip the file and move
+     * on; an unreachable storage backend is transient and must NOT be treated the same way. The RAG
+     * ingestion sweep branches on exactly this distinction — see `RagIngestionBackendService`.
+     */
+    FILE_TEXT_EXTRACTION_FAILED = "file_text_extraction_failed",
+    /** The file's blob was not found in the storage backend. */
+    FILE_NOT_FOUND_IN_STORAGE = "file_not_found_in_storage",
+    /** Access to the file in storage was denied. */
+    FILE_STORAGE_ACCESS_DENIED = "file_storage_access_denied",
+    /** The storage key/path could not be composed (missing file name/id). */
+    FILE_STORAGE_KEY_COMPOSITION_FAILED = "file_storage_key_composition_failed",
+    /** The provided storage reference is empty or invalid. */
+    FILE_STORAGE_REF_INVALID = "file_storage_ref_invalid",
+    /** The storage reference does not belong to the current application namespace. */
+    FILE_STORAGE_REF_FORBIDDEN = "file_storage_ref_forbidden",
+    /** The requested file path escapes the allowed storage directory. */
+    FILE_PATH_TRAVERSAL_DETECTED = "file_path_traversal_detected",
+    /** A bulk relationship operation must provide either _ids or a filter selector. */
+    BULK_RELATIONSHIP_SELECTOR_REQUIRED = "bulk_relationship_selector_required"
 }
 //# sourceMappingURL=errors.custom-message-ref.shared.definitions.d.ts.map

package/dist/esm/errors/errors.custom-message-ref.shared.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.custom-message-ref.shared.definitions.d.ts","sourceRoot":"","sources":["../../../src/errors/errors.custom-message-ref.shared.definitions.ts"],"names":[],"mappings":"AAGA,oBAAY,2BAA2B;IACrC,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,kBAAkB,uBAAuB;IACzC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,qCAAqC,0CAA0C;IAC/E,+BAA+B,oCAAoC;IAEnE,+BAA+B,oCAAoC;IACnE,2CAA2C,gDAAgD;IAE3F,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAE/E,6BAA6B,kCAAkC;IAG/D,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,4BAA4B,iCAAiC;IAC7D,gCAAgC,qCAAqC;IACrE,wBAAwB,6BAA6B;IAErD,kCAAkC,uCAAuC;IACzE,sCAAsC,2CAA2C;IACjF,4BAA4B,iCAAiC;IAC7D,iCAAiC,sCAAsC;IACvE,mCAAmC,wCAAwC;IAC3E,uCAAuC,4CAA4C;IAEnF,uCAAuC,4CAA4C;IAEnF,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,6BAA6B,kCAAkC;IAE/D,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAE3D,sCAAsC,2CAA2C;IACjF,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IAErE,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IAEjF,gDAAgD,qDAAqD;IAErG,qCAAqC,0CAA0C;IAC/E,uCAAuC,4CAA4C;IAEnF,iCAAiC,sCAAsC;IAEvE,uCAAuC,4CAA4C;IACnF,sCAAsC,2CAA2C;IACjF,gCAAgC,qCAAqC;IAErE,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;IACrE,4BAA4B,iCAAiC;IAC7D,mCAAmC,wCAAwC;IAE3E,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAE7C,mBAAmB,wBAAwB;IAE3C,wDAAwD,6DAA6D;IACrH,iBAAiB,sBAAsB;IACvC,uBAAuB,4BAA4B;IACnD,2CAA2C,gDAAgD;IAC3F,6CAA6C,kDAAkD;IAC/F,iDAAiD,sDAAsD;IACvG,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAE/E,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAE/D,4BAA4B,iCAAiC;IAE7D,yCAAyC,8CAA8C;IAEvF,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IAErF,0BAA0B,+BAA+B;IACzD,0BAA0B,+BAA+B;IAEzD,+BAA+B,oCAAoC;IAEnE,6BAA6B,kCAAkC;IAC/D,8BAA8B,mCAAmC;IAEjE,kCAAkC,uCAAuC;IACzE,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IAGnF,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,2BAA2B,gCAAgC;IAC3D,6BAA6B,kCAAkC;IAC/D,mCAAmC,wCAAwC;IAC3E,oHAAoH;IACpH,+BAA+B,oCAAoC;IACnE,mGAAmG;IACnG,iCAAiC,sCAAsC;IACvE,8BAA8B,mCAAmC;IACjE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC,8GAA8G;IAC9G,qBAAqB,0BAA0B;IAE/C,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IAIvE,0CAA0C,+CAA+C;IAGzF,0CAA0C,+CAA+C;IACzF,+CAA+C,oDAAoD;IACnG,+CAA+C,oDAAoD;IAGnG,qCAAqC,0CAA0C;IAC/E,4CAA4C,iDAAiD;IAC7F,0CAA0C,+CAA+C;IACzF,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,iCAAiC,sCAAsC;IACvE,4CAA4C,iDAAiD;IAG7F,yBAAyB,8BAA8B;IAGvD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,kCAAkC,uCAAuC;IAGzE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,8BAA8B,mCAAmC;IAGjE,2BAA2B,gCAAgC;IAC3D,gBAAgB,qBAAqB;IAGrC,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,+BAA+B,oCAAoC;IAEnE,+GAA+G;IAC/G,oCAAoC,yCAAyC;IAG7E,uBAAuB,4BAA4B;IACnD,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAE3D,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,4BAA4B,iCAAiC;IAC7D,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,aAAa,kBAAkB;IAE/B,+BAA+B,oCAAoC;IACnE,+BAA+B,oCAAoC;IACnE,0BAA0B,+BAA+B;IAEzD,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAG7C,0BAA0B,+BAA+B;IACzD,wBAAwB,6BAA6B;IACrD,iCAAiC,sCAAsC;IACvE,wBAAwB,6BAA6B;IACrD,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE,2CAA2C,gDAAgD;IAC3F,+BAA+B,oCAAoC;IACnE,sCAAsC,2CAA2C;IACjF,4FAA4F;IAC5F,uBAAuB,4BAA4B;IAGnD,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IACvD,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IACzD,iCAAiC,sCAAsC;IACvE,0BAA0B,+BAA+B;IACzD,6BAA6B,kCAAkC;IAC/D,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,yBAAyB,8BAA8B;IACvD,8BAA8B,mCAAmC;IACjE,yBAAyB,8BAA8B;IAGvD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,YAAY,iBAAiB;IAC7B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAC/C,yBAAyB,8BAA8B;IACvD,2BAA2B,gCAAgC;IAC3D,0BAA0B,+BAA+B;IACzD,8BAA8B,mCAAmC;IACjE,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,yBAAyB,8BAA8B;IACvD,wHAAwH;IACxH,kBAAkB,uBAAuB;IAGzC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,gCAAgC,qCAAqC;IACrE,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAC/E,8BAA8B,mCAAmC;CAClE"}
+{"version":3,"file":"errors.custom-message-ref.shared.definitions.d.ts","sourceRoot":"","sources":["../../../../src/errors/errors.custom-message-ref.shared.definitions.ts"],"names":[],"mappings":"AAGA,oBAAY,2BAA2B;IACrC,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,kBAAkB,uBAAuB;IACzC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,qCAAqC,0CAA0C;IAC/E,+BAA+B,oCAAoC;IAEnE,+BAA+B,oCAAoC;IACnE,2CAA2C,gDAAgD;IAE3F,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAE/E,6BAA6B,kCAAkC;IAG/D,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,4BAA4B,iCAAiC;IAC7D,gCAAgC,qCAAqC;IACrE,wBAAwB,6BAA6B;IAErD,kCAAkC,uCAAuC;IACzE,sCAAsC,2CAA2C;IACjF,4BAA4B,iCAAiC;IAC7D,iCAAiC,sCAAsC;IACvE,mCAAmC,wCAAwC;IAC3E,uCAAuC,4CAA4C;IAEnF,uCAAuC,4CAA4C;IAEnF,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,6BAA6B,kCAAkC;IAE/D,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAE3D,sCAAsC,2CAA2C;IACjF,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IAErE,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IAEjF,gDAAgD,qDAAqD;IAErG,qCAAqC,0CAA0C;IAC/E,uCAAuC,4CAA4C;IAEnF,iCAAiC,sCAAsC;IAEvE,uCAAuC,4CAA4C;IACnF,sCAAsC,2CAA2C;IACjF,gCAAgC,qCAAqC;IAErE,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;IACrE,4BAA4B,iCAAiC;IAC7D,mCAAmC,wCAAwC;IAE3E,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAE7C,mBAAmB,wBAAwB;IAE3C,wDAAwD,6DAA6D;IACrH,iBAAiB,sBAAsB;IACvC,uBAAuB,4BAA4B;IACnD,2CAA2C,gDAAgD;IAC3F,6CAA6C,kDAAkD;IAC/F,iDAAiD,sDAAsD;IACvG,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAE/E,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAE/D,4BAA4B,iCAAiC;IAE7D,yCAAyC,8CAA8C;IAEvF,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IAErF,0BAA0B,+BAA+B;IACzD,0BAA0B,+BAA+B;IAEzD,+BAA+B,oCAAoC;IAEnE,6BAA6B,kCAAkC;IAC/D,8BAA8B,mCAAmC;IAEjE,kCAAkC,uCAAuC;IACzE,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IAGnF,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,2BAA2B,gCAAgC;IAC3D,6BAA6B,kCAAkC;IAC/D,mCAAmC,wCAAwC;IAC3E,oHAAoH;IACpH,+BAA+B,oCAAoC;IACnE,mGAAmG;IACnG,iCAAiC,sCAAsC;IACvE,8BAA8B,mCAAmC;IACjE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC,8GAA8G;IAC9G,qBAAqB,0BAA0B;IAE/C,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IAIvE,0CAA0C,+CAA+C;IAGzF,0CAA0C,+CAA+C;IACzF,+CAA+C,oDAAoD;IACnG,+CAA+C,oDAAoD;IAGnG,qCAAqC,0CAA0C;IAC/E,4CAA4C,iDAAiD;IAC7F,0CAA0C,+CAA+C;IACzF,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,iCAAiC,sCAAsC;IACvE,4CAA4C,iDAAiD;IAG7F,yBAAyB,8BAA8B;IAGvD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,kCAAkC,uCAAuC;IAGzE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,8BAA8B,mCAAmC;IAGjE,2BAA2B,gCAAgC;IAC3D,gBAAgB,qBAAqB;IAGrC,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,+BAA+B,oCAAoC;IAEnE,+GAA+G;IAC/G,oCAAoC,yCAAyC;IAG7E,uBAAuB,4BAA4B;IACnD,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAE3D,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,4BAA4B,iCAAiC;IAC7D,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,aAAa,kBAAkB;IAE/B,+BAA+B,oCAAoC;IACnE,+BAA+B,oCAAoC;IACnE,0BAA0B,+BAA+B;IAEzD,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAG7C,0BAA0B,+BAA+B;IACzD,wBAAwB,6BAA6B;IACrD,iCAAiC,sCAAsC;IACvE,wBAAwB,6BAA6B;IACrD,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE,2CAA2C,gDAAgD;IAC3F,+BAA+B,oCAAoC;IACnE,sCAAsC,2CAA2C;IACjF,4FAA4F;IAC5F,uBAAuB,4BAA4B;IACnD,sGAAsG;IACtG,oCAAoC,yCAAyC;IAG7E,sJAAsJ;IACtJ,kCAAkC,uCAAuC;IACzE,oJAAoJ;IACpJ,4CAA4C,iDAAiD;IAC7F;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,+BAA+B;IACzD,wFAAwF;IACxF,kCAAkC,uCAAuC;IACzE,0HAA0H;IAC1H,uCAAuC,4CAA4C;IACnF,iGAAiG;IACjG,qBAAqB,0BAA0B;IAC/C,+FAA+F;IAC/F,4BAA4B,iCAAiC;IAC7D,oTAAoT;IACpT,uBAAuB,4BAA4B;IACnD,4DAA4D;IAC5D,8BAA8B,mCAAmC;IACjE,+FAA+F;IAC/F,mBAAmB,wBAAwB;IAC3C,uEAAuE;IACvE,8BAA8B,mCAAmC;IAGjE,wEAAwE;IACxE,oCAAoC,yCAAyC;IAC7E,kEAAkE;IAClE,kCAAkC,uCAAuC;IACzE,gFAAgF;IAChF,gCAAgC,qCAAqC;IACrE,mFAAmF;IACnF,uCAAuC,4CAA4C;IACnF,yFAAyF;IACzF,2BAA2B,gCAAgC;IAC3D,uDAAuD;IACvD,+BAA+B,oCAAoC;IACnE,iDAAiD;IACjD,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,+BAA+B,oCAAoC;IACnE,4DAA4D;IAC5D,qCAAqC,0CAA0C;IAC/E,mEAAmE;IACnE,8BAA8B,mCAAmC;IACjE;;;;;;OAMG;IACH,oCAAoC,yCAAyC;IAG7E,0EAA0E;IAC1E,4BAA4B,iCAAiC;IAC7D,sDAAsD;IACtD,gBAAgB,qBAAqB;IACrC,iEAAiE;IACjE,yBAAyB,8BAA8B;IACvD,6CAA6C;IAC7C,qBAAqB,0BAA0B;IAC/C,wEAAwE;IACxE,4BAA4B,iCAAiC;IAG7D,yCAAyC;IACzC,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gCAAgC,qCAAqC;IACrE;;;;;;;;;;OAUG;IACH,+BAA+B,oCAAoC;IACnE;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IACzD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,mCAAmC,wCAAwC;IAC3E;;;;;;;;;;;OAWG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;;;;;OASG;IACH,wBAAwB,6BAA6B;IACrD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,4BAA4B;IACnD,+DAA+D;IAC/D,gCAAgC,qCAAqC;IAGrE,qDAAqD;IACrD,yBAAyB,8BAA8B;IAGvD,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IACvD,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IACzD,iCAAiC,sCAAsC;IACvE,0BAA0B,+BAA+B;IACzD,6BAA6B,kCAAkC;IAC/D,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,yBAAyB,8BAA8B;IACvD,8BAA8B,mCAAmC;IACjE;;;;;;;;;;OAUG;IACH,8BAA8B,mCAAmC;IACjE,yBAAyB,8BAA8B;IACvD;;;;;;;;;;;OAWG;IACH,8BAA8B,mCAAmC;IAGjE,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,YAAY,iBAAiB;IAC7B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAC/C,yBAAyB,8BAA8B;IACvD,2BAA2B,gCAAgC;IAC3D,0BAA0B,+BAA+B;IACzD,8BAA8B,mCAAmC;IACjE,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,yBAAyB,8BAA8B;IACvD,wHAAwH;IACxH,kBAAkB,uBAAuB;IAGzC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,gCAAgC,qCAAqC;IACrE,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAC/E,8BAA8B,mCAAmC;IACjE,oIAAoI;IACpI,yBAAyB,8BAA8B;IACvD,2JAA2J;IAC3J,4BAA4B,iCAAiC;IAC7D,4GAA4G;IAC5G,0BAA0B,+BAA+B;IACzD,yGAAyG;IACzG,sCAAsC,2CAA2C;IAGjF,iFAAiF;IACjF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,wBAAwB,6BAA6B;IACrD,8EAA8E;IAC9E,6BAA6B,kCAAkC;IAC/D,8DAA8D;IAC9D,oCAAoC,yCAAyC;IAC7E,4EAA4E;IAC5E,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,wBAAwB,6BAA6B;IACrD,qFAAqF;IACrF,gCAAgC,qCAAqC;IACrE,kFAAkF;IAClF,iCAAiC,sCAAsC;IACvE,iEAAiE;IACjE,uBAAuB,4BAA4B;IACnD,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,2CAA2C;IAC3C,iBAAiB,sBAAsB;IACvC,yCAAyC;IACzC,eAAe,oBAAoB;IACnC,6CAA6C;IAC7C,kBAAkB,uBAAuB;IACzC,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,qEAAqE;IACrE,iCAAiC,sCAAsC;IAGvE,kHAAkH;IAClH,mCAAmC,wCAAwC;IAC3E,2EAA2E;IAC3E,wBAAwB,6BAA6B;IACrD,iEAAiE;IACjE,wBAAwB,6BAA6B;IAGrD,8FAA8F;IAC9F,2CAA2C,gDAAgD;IAC3F,uFAAuF;IACvF,0CAA0C,+CAA+C;IACzF,gEAAgE;IAChE,0BAA0B,+BAA+B;IACzD,mEAAmE;IACnE,yBAAyB,8BAA8B;IACvD,8EAA8E;IAC9E,wBAAwB,6BAA6B;IACrD,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,kFAAkF;IAClF,2CAA2C,gDAAgD;IAC3F,6FAA6F;IAC7F,4BAA4B,iCAAiC;IAG7D,8DAA8D;IAC9D,cAAc,mBAAmB;IACjC,uEAAuE;IACvE,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,2BAA2B,gCAAgC;IAC3D,sDAAsD;IACtD,mBAAmB,wBAAwB;IAC3C,qCAAqC;IACrC,oBAAoB,yBAAyB;IAC7C,8CAA8C;IAC9C,kBAAkB,uBAAuB;IACzC,+DAA+D;IAC/D,4BAA4B,iCAAiC;IAC7D,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,uDAAuD;IACvD,yBAAyB,8BAA8B;IACvD,8CAA8C;IAC9C,0BAA0B,+BAA+B;IACzD,kDAAkD;IAClD,mBAAmB,wBAAwB;IAC3C,+EAA+E;IAC/E,mBAAmB,wBAAwB;IAC3C,6EAA6E;IAC7E,iCAAiC,sCAAsC;IACvE,wFAAwF;IACxF,0BAA0B,+BAA+B;IACzD,gGAAgG;IAChG,wBAAwB,6BAA6B;IACrD,oGAAoG;IACpG,4BAA4B,iCAAiC;IAC7D,4EAA4E;IAC5E,iCAAiC,sCAAsC;IACvE,kFAAkF;IAClF,sBAAsB,2BAA2B;IACjD,yGAAyG;IACzG,6BAA6B,kCAAkC;IAC/D,yEAAyE;IACzE,6BAA6B,kCAAkC;IAC/D,6EAA6E;IAC7E,4BAA4B,iCAAiC;IAC7D,kEAAkE;IAClE,qCAAqC,0CAA0C;IAC/E;;;;;;;;OAQG;IACH,2BAA2B,gCAAgC;IAC3D,4DAA4D;IAC5D,yBAAyB,8BAA8B;IACvD,gDAAgD;IAChD,0BAA0B,+BAA+B;IACzD,yEAAyE;IACzE,mCAAmC,wCAAwC;IAC3E,0DAA0D;IAC1D,wBAAwB,6BAA6B;IACrD,kFAAkF;IAClF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,4BAA4B,iCAAiC;IAE7D,mFAAmF;IACnF,mCAAmC,wCAAwC;CAC5E"}