@wildo-ai/saas-models 1.1.4 → 1.1.5

package/dist/esm/errors/errors.custom-message-ref.shared.definitions.d.ts

@@ -60,6 +60,21 @@ export declare enum ErrorCustomMessageReference {
     AUTHORIZATIONS_VALIDATION_FAILED = "authorizations_validation_failed",
     AUTHORIZATIONS_ACCESS_DENIED = "authorizations_access_denied",
     AUTHORIZATIONS_NO_OPERATION_CONTEXT = "authorizations_no_operation_context",
+    /**
+     * The application declares purposes a person must grant before using it
+     * (`compliance.serviceConsentRequirement`), and this person has not granted them (#534). Refused on
+     * every user-initiated operation except the person's own preferences — where consent is recorded.
+     */
+    AUTHORIZATIONS_SERVICE_CONSENT_REQUIRED = "authorizations_service_consent_required",
+    /**
+     * ONE operation declares the purpose its own processing rests on
+     * (`ResourceOperationConsentGateDeclaration`, `refusal: WITHHOLD_CAPABILITY`, #1258 Step 3), and this
+     * person has not granted it. Refuses only THIS operation — distinct from
+     * {@link ErrorCustomMessageReference.AUTHORIZATIONS_SERVICE_CONSENT_REQUIRED}, which withholds the
+     * whole application, so a frontend can branch on the two differently (D2: a declared purpose costs
+     * the capability, not the product, unless the application says otherwise).
+     */
+    AUTHORIZATIONS_CAPABILITY_CONSENT_REQUIRED = "authorizations_capability_consent_required",
     JWT_SIGNING_FAILED = "jwt_signing_failed",
     JWT_VERIFICATION_FAILED = "jwt_verification_failed",
     JWT_TOKEN_GENERATION_FAILED = "jwt_token_generation_failed",
@@ -109,6 +124,13 @@ export declare enum ErrorCustomMessageReference {
     AUTHENTICATION_NOT_IMPLEMENTED = "authentication_not_implemented",
     /** W7.1: Operation requires re-authentication (step-up auth). Frontend should prompt re-auth dialog. */
     STEP_UP_REQUIRED = "step_up_required",
+    /**
+     * #1417: adding a way to sign in needs the account holder to re-prove who they are. Distinct from
+     * `STEP_UP_REQUIRED` because the proof is different (`ReAuthenticationPurpose.BIND_AUTHENTICATOR`:
+     * any held factor, whatever the step-up policy names), and a step-up refusal's context is stripped
+     * at the wire, so the code is the only channel that can tell the client which proof to ask for.
+     */
+    STEP_UP_REQUIRED_TO_BIND = "step_up_required_to_bind",
     /** W7.2: Cross-organization SSO access is disabled. User already has enterprise SSO link from another org. */
     CROSS_ORG_SSO_BLOCKED = "cross_org_sso_blocked",
     APP_CONFIGURATION_UNAUTHORIZED = "app_configuration_unauthorized",
@@ -124,6 +146,17 @@ export declare enum ErrorCustomMessageReference {
      * `organizationTypes[<org type>].userTypes`, and nothing in a method-shaped error points there.
      */
     INVITATION_ORGANIZATION_TYPE_UNRESOLVED = "invitation_organization_type_unresolved",
+    /**
+     * A member could not sign in (or re-authenticate) because one of their organizations yields no authentication
+     * policy: the organization is gone, carries no type, or carries a type the application no longer declares (#1036).
+     *
+     * Fail-closed on purpose — an organization's type is where its authentication restrictions live, and "could not
+     * tell" must never read as "no restrictions". What changed is that it is NAMED: it used to surface as an
+     * unhandled `500 INTERNAL` at `severity: critical`, which reads as an engine crash for what is an operator
+     * configuration state. The three causes have different remedies, so the log context carries
+     * `OrganizationAuthPolicyUnresolvedReason`; the member sees one message, because none of the remedies is theirs.
+     */
+    AUTHENTICATION_ORGANIZATION_POLICY_UNRESOLVED = "authentication_organization_policy_unresolved",
     FRONTEND_FORM_READ_OPERATION_NOT_AVAILABLE = "frontend_form_read_operation_not_available",
     FRONTEND_NAVIGATION_INVALID_URL_PARAMETERS = "frontend_navigation_invalid_url_parameters",
     FRONTEND_NAVIGATION_MISSING_REQUIRED_PARAMETERS = "frontend_navigation_missing_required_parameters",
@@ -226,6 +259,16 @@ export declare enum ErrorCustomMessageReference {
     /** Registration for this user type is admin-provisioned only: accounts are created by an administrator, so there is no self-service sign-up or invitation-accept path. Distinct from REGISTRATION_DISABLED (registration off entirely) and REGISTRATION_INVITATION_ONLY (self-complete via an invitation token). */
     REGISTRATION_ADMIN_ONLY = "registration_admin_only",
     /** A password is required to complete this registration. */
+    /**
+     * Self-service signup is open, but this application admits only certain email domains
+     * (`registration.allowedEmailDomains`) and the registrant's is not among them.
+     *
+     * Told PLAINLY rather than answered with the silent success the SSO-domain block uses, and the two
+     * differ for a reason: an anti-enumeration no-op exists to avoid disclosing whether an ACCOUNT
+     * exists, and this discloses nothing about any account — only the application's own published
+     * admission policy, which it chose to have and which its own signup page should already state.
+     */
+    REGISTRATION_EMAIL_DOMAIN_NOT_ALLOWED = "registration_email_domain_not_allowed",
     REGISTRATION_PASSWORD_REQUIRED = "registration_password_required",
     /** Registration could not be completed due to a transient server error; the user may retry. */
     REGISTRATION_FAILED = "registration_failed",
@@ -259,6 +302,14 @@ export declare enum ErrorCustomMessageReference {
      * than the token authorizes.
      */
     AUTHORIZATION_MACHINE_SCOPE_MISMATCH = "authorization_machine_scope_mismatch",
+    /**
+     * The signed-in account opened a link to an organization it cannot access, so the application sent it
+     * to its home page instead. Raised by the FRONTEND, not by an API response: the server's answer to the
+     * organization READ is a 403 or a deliberate 404, and this reference names the navigation outcome the
+     * person sees. The usual path is a session that expired on another account's organization page and a
+     * different account signing in to the saved redirect.
+     */
+    AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE = "authorization_organization_not_accessible",
     /** The current session state does not allow completing MFA enrollment. */
     MFA_ENROLLMENT_STATE_INVALID = "mfa_enrollment_state_invalid",
     /** No MFA method is enrolled for this account yet. */
@@ -271,31 +322,6 @@ export declare enum ErrorCustomMessageReference {
     MFA_TOTP_SETUP_NOT_INITIATED = "mfa_totp_setup_not_initiated",
     /** The organization name is required. */
     ORG_NAME_REQUIRED = "org_name_required",
-    /**
-     * An organization unit cannot be deleted because child units still hang off it.
-     *
-     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that expose
-     * `context` to the client, so the blocking dependent is surfaced by name — `blockingChildUnitId`
-     * when a child unit blocks, `blockingUnitMemberId` when a member assignment does. TWO distinct
-     * dependents share this one code; branch on the context key, not on the message.
-     *
-     * Unlike every other `ORGANIZATIONS` child, the unit tree's self-edge
-     * (`ORGANIZATION_UNITS -> ORGANIZATION_UNITS` on `parentUnitId`) declares NO `onParentDelete`
-     * cascade, so deleting an interior node would strand its whole subtree behind a dangling
-     * `parentUnitId` and a stale materialized `path`.
-     *
-     * MOVE is the remedy to point a client at: it re-parents a child onto another node and rewrites
-     * the materialized `path` of its whole subtree in one transaction. (Deleting the subtree
-     * bottom-up also works, leaf by leaf.) Since `parentUnitId` became `.excludeFromUpdate()` in the
-     * same pass that implemented MOVE, MOVE is the ONLY way to re-home a branch — so do not describe
-     * a plain update as an alternative.
-     *
-     * ⚠️ Direct per-unit DELETE only. Deleting the whole ORGANIZATION is a different path: that
-     * cascade IS enabled and removes every unit of the tenant at once (every unit carries the
-     * tenant's `organizationId`), and it runs at the repository level, so this guard is correctly
-     * not consulted there.
-     */
-    ORGANIZATION_UNIT_HAS_DEPENDENTS = "organization_unit_has_dependents",
     /**
      * A MOVE names a destination inside the moved unit's own subtree — one of its descendants, or the
      * unit itself. Either detaches the branch into a cycle: a node below its own descendant has no
@@ -337,6 +363,23 @@ export declare enum ErrorCustomMessageReference {
      * implementation performs against the row it actually loaded.
      */
     RESOURCE_STATUS_TRANSITION_CONFLICT = "resource_status_transition_conflict",
+    /**
+     * A delete was refused because rows on an edge declaring `onParentDelete.strategy:
+     * REFUSE_WHILE_CHILDREN_EXIST` still reference the row being deleted.
+     *
+     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that expose
+     * `context` to the client, so `context.blockingDependents` names each blocking edge with its
+     * `childResourceType`, `foreignKeyField` and one `blockingChildId`. Branch on that, not on the
+     * message. When the only blocking children are impersonalized-and-retained (hidden from every ordinary
+     * read), the entry carries `blockingChildRetained: true` and NO `blockingChildId`: the refusal must say
+     * why the delete cannot proceed without revealing a retained row's identity (#1168). One code serves every resource because the posture is declared on the edge; what to do
+     * next (MOVE a unit's children onto another node, resolve a billing account's retained financial
+     * records) belongs to that resource's specification.
+     *
+     * Replaced `ORGANIZATION_UNIT_HAS_DEPENDENTS` and `BILLING_ACCOUNT_HAS_DEPENDENTS`, the codes of the
+     * two hand-written DELETE prefix guards this posture now derives (#1123).
+     */
+    RESOURCE_HAS_DEPENDENTS = "resource_has_dependents",
     /**
      * A unit `code` is already used by a sibling under the same parent.
      *
@@ -350,6 +393,21 @@ export declare enum ErrorCustomMessageReference {
      * differently depending on which write won a race.
      */
     ORGANIZATION_UNIT_CODE_EXISTS = "organization_unit_code_exists",
+    /**
+     * The write would change something an identity directory owns on a unit it provisioned — the
+     * unit's name, or who is in it — while that directory can still push (#1392).
+     *
+     * A unit created by SCIM `/Groups` (`externalSource: SCIM`) is reconciled by the directory: its
+     * name and its member set are re-asserted on every push, so an edit made in the application is
+     * reverted with no error. Refusing tells the administrator where the change belongs instead of
+     * letting it be typed and lost. Emitted as `ErrorType.CONFLICT` (409): the caller is authorized
+     * and the payload is valid; what refuses it is who owns the row.
+     *
+     * The refusal lifts on its own once the organization holds no usable SCIM token — no directory can
+     * push, so an edit made here sticks. Roles on an assignment, the unit's code, type, status and
+     * position are NOT directory-owned and are never refused here.
+     */
+    ORGANIZATION_UNIT_DIRECTORY_MANAGED = "organization_unit_directory_managed",
     /**
      * The requested organization `slug` is already taken.
      *
@@ -391,7 +449,6 @@ export declare enum ErrorCustomMessageReference {
     BILLING_ACCOUNT_NOT_FOUND = "billing_account_not_found",
     BILLING_NO_PROVIDER_CUSTOMER = "billing_no_provider_customer",
     BILLING_SUBSCRIPTION_NOT_FOUND = "billing_subscription_not_found",
-    BILLING_NO_ACTIVE_SUBSCRIPTION = "billing_no_active_subscription",
     BILLING_NO_PROVIDER_SUBSCRIPTION = "billing_no_provider_subscription",
     BILLING_NO_PROVIDER_PRICE = "billing_no_provider_price",
     BILLING_PRODUCT_NOT_FOUND = "billing_product_not_found",
@@ -423,8 +480,8 @@ export declare enum ErrorCustomMessageReference {
     /**
      * A purchase named a product that has been RETIRED from the code catalogue.
      *
-     * `Product.isActive` was the declared off-boarding path — `assertNoBillingAccountDependents`'s own
-     * comment calls the soft retire "the product off-boarding path" — and until 2026-09-09 no purchase
+     * `Product.isActive` was the declared off-boarding path — the billing-account specification's DELETE
+     * entry calls the soft retire "the product off-boarding path" — and until 2026-09-09 no purchase
      * path consulted it. `readProductByKey` returned an inactive product exactly like an active one, so
      * a product could be withdrawn and still be bought, granting entitlements frozen at whatever the
      * last catalogue sync wrote.
@@ -438,25 +495,20 @@ export declare enum ErrorCustomMessageReference {
      */
     BILLING_PRODUCT_RETIRED = "billing_product_retired",
     BILLING_SCOPE_NOT_ENABLED = "billing_scope_not_enabled",
-    /**
-     * Hard removal of a billing account was refused because retained financial children
-     * (subscriptions / invoice refs / usage records / credit pools) still reference it.
-     *
-     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that
-     * expose `context` to the client, so the blocking child families are surfaced by name.
-     *
-     * @see the billing-retention rationale at the `Scope -> BillingAccounts` declaration in
-     * `resources-registry.shared.core.definitions.ts` — the children are RETAINED on purpose,
-     * and this account row holds the only local `providerCustomerId` that maps them back to
-     * the provider customer.
-     */
-    BILLING_ACCOUNT_HAS_DEPENDENTS = "billing_account_has_dependents",
     SAML_ASSERTION_INVALID = "saml_assertion_invalid",
     SAML_SIGNATURE_INVALID = "saml_signature_invalid",
     SAML_AUDIENCE_MISMATCH = "saml_audience_mismatch",
     SAML_REPLAY_DETECTED = "saml_replay_detected",
     SAML_EXPIRED = "saml_expired",
-    SAML_DOMAIN_NOT_VERIFIED = "saml_domain_not_verified",
+    /**
+     * An enterprise assertion named an email domain the target organization has not VERIFIED.
+     *
+     * Protocol-neutral, and renamed from `SAML_DOMAIN_NOT_VERIFIED` when the OIDC lane gained the same
+     * check (#1231). It was SAML-named because only SAML asked the question — which was the defect: the
+     * identical assertion over OIDC was admitted. One question asked by two protocols is one refusal,
+     * and a protocol-specific name would have re-created the divergence in the vocabulary.
+     */
+    SSO_DOMAIN_NOT_VERIFIED = "sso_domain_not_verified",
     SAML_CERT_EXPIRED = "saml_cert_expired",
     SAML_DECRYPTION_FAILED = "saml_decryption_failed",
     SAML_SP_KEY_MISMATCH = "saml_sp_key_mismatch",
@@ -517,6 +569,20 @@ export declare enum ErrorCustomMessageReference {
     ACTOR_INVALID_KIND = "actor_invalid_kind",
     /** The referenced actor is not active. */
     ACTOR_NOT_ACTIVE = "actor_not_active",
+    /** An execution was requested for an actor the named system does not declare. */
+    ACTOR_NOT_IN_SYSTEM = "actor_not_in_system",
+    /**
+     * The actor runtime was asked to run an execution and no persistence is bound for the actor plane.
+     * The plane is REQUIRED (#1358): a run that cannot be recorded refuses before doing work, because a
+     * run nobody can find afterwards is worse than one that did not start.
+     */
+    ACTOR_EXECUTION_PERSISTENCE_UNBOUND = "actor_execution_persistence_unbound",
+    /** A resume was asked of an execution that is not waiting on a decision — already answered, never suspended, or settled. */
+    ACTOR_EXECUTION_NOT_SUSPENDED = "actor_execution_not_suspended",
+    /** A start was asked of an execution that is not `PENDING` — already started, waiting, or settled (#1359). */
+    ACTOR_EXECUTION_NOT_PENDING = "actor_execution_not_pending",
+    /** An execution was opened or resumed for an exclusive subject another running execution of the same system already holds (#1361). */
+    ACTOR_EXECUTION_SUBJECT_BUSY = "actor_execution_subject_busy",
     /** Chart parent context resource is not accessible to the caller. */
     CHART_PARENT_CONTEXT_INACCESSIBLE = "chart_parent_context_inaccessible",
     /** Authentication is disabled for this frontend service + user type (a config gate, NOT session invalidation). */
@@ -525,6 +591,15 @@ export declare enum ErrorCustomMessageReference {
     OAUTH_PROVIDER_NOT_FOUND = "oauth_provider_not_found",
     /** The requested SSO connection was not found or is disabled. */
     SSO_CONNECTION_NOT_FOUND = "sso_connection_not_found",
+    /**
+     * An enterprise SSO connection in TEMPLATE mode left a provider template placeholder unfilled, so
+     * the endpoint it appears in does not identify one identity provider.
+     *
+     * Refused rather than resolved, because the unresolved case is not a narrower trust boundary — it is
+     * a wider one. Microsoft's contract issuer is `https://login.microsoftonline.com/{tenantid}/v2.0`,
+     * and with no `tenantid` override the tenant was taken from the token being authenticated (#1148).
+     */
+    SSO_CONNECTION_TEMPLATE_UNRESOLVED = "sso_connection_template_unresolved",
     /** The frontendServiceName query parameter is required to fetch application configuration. */
     APP_CONFIGURATION_FRONTEND_SERVICE_REQUIRED = "app_configuration_frontend_service_required",
     /** The frontendServiceName does not match any configured frontend service identity. */
@@ -617,6 +692,28 @@ export declare enum ErrorCustomMessageReference {
     /** The requested file path escapes the allowed storage directory. */
     FILE_PATH_TRAVERSAL_DETECTED = "file_path_traversal_detected",
     /** A bulk relationship operation must provide either _ids or a filter selector. */
-    BULK_RELATIONSHIP_SELECTOR_REQUIRED = "bulk_relationship_selector_required"
+    BULK_RELATIONSHIP_SELECTOR_REQUIRED = "bulk_relationship_selector_required",
+    /**
+     * The request named BOTH `_ids` and `_match` (400). Refused rather than resolved by precedence:
+     * honouring one would make the other silently inert, and the caller cannot tell which acted.
+     */
+    BULK_SELECTOR_AMBIGUOUS = "bulk_selector_ambiguous",
+    /**
+     * A `_match` selector resolved to more rows than this operation may change in one synchronous
+     * request (400). A batch enforces its documented maximum; acting on more is the background lane's
+     * job, not a larger synchronous write.
+     */
+    BULK_SELECTION_TOO_LARGE = "bulk_selection_too_large",
+    /** The operation requires an `Idempotency-Key` header and the request sent none (400). */
+    IDEMPOTENCY_KEY_REQUIRED = "idempotency_key_required",
+    /** The `Idempotency-Key` header is not a String of 1 to 200 printable ASCII characters (400). */
+    IDEMPOTENCY_KEY_MALFORMED = "idempotency_key_malformed",
+    /** An `Idempotency-Key` header was sent to a mutation that does not take one (400). Refused so a retry is never silently undeduplicated; a read ignores it. */
+    IDEMPOTENCY_KEY_NOT_ACCEPTED = "idempotency_key_not_accepted",
+    /**
+     * The `Idempotency-Key` was already used for a DIFFERENT request to this operation (422). A 422 strips error context on
+     * the wire, so this reference is the client-branchable signal: it always reaches the response.
+     */
+    IDEMPOTENCY_KEY_REUSED = "idempotency_key_reused"
 }
 //# sourceMappingURL=errors.custom-message-ref.shared.definitions.d.ts.map

package/dist/esm/errors/errors.custom-message-ref.shared.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.custom-message-ref.shared.definitions.d.ts","sourceRoot":"","sources":["../../../src/errors/errors.custom-message-ref.shared.definitions.ts"],"names":[],"mappings":"AAGA,oBAAY,2BAA2B;IACrC,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,kBAAkB,uBAAuB;IACzC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,qCAAqC,0CAA0C;IAC/E,+BAA+B,oCAAoC;IAEnE,+BAA+B,oCAAoC;IACnE,2CAA2C,gDAAgD;IAE3F,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAE/E,6BAA6B,kCAAkC;IAG/D,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,4BAA4B,iCAAiC;IAC7D,gCAAgC,qCAAqC;IACrE,wBAAwB,6BAA6B;IAErD,kCAAkC,uCAAuC;IACzE,sCAAsC,2CAA2C;IACjF,4BAA4B,iCAAiC;IAC7D,iCAAiC,sCAAsC;IACvE,mCAAmC,wCAAwC;IAC3E,uCAAuC,4CAA4C;IAEnF,uCAAuC,4CAA4C;IAEnF,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,6BAA6B,kCAAkC;IAE/D,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAE3D,sCAAsC,2CAA2C;IACjF,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IAErE,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IAEjF,gDAAgD,qDAAqD;IAErG,qCAAqC,0CAA0C;IAC/E,uCAAuC,4CAA4C;IAEnF,iCAAiC,sCAAsC;IAEvE,uCAAuC,4CAA4C;IACnF,sCAAsC,2CAA2C;IACjF,gCAAgC,qCAAqC;IAErE,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;IACrE,4BAA4B,iCAAiC;IAC7D,mCAAmC,wCAAwC;IAE3E,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAE7C,mBAAmB,wBAAwB;IAE3C,wDAAwD,6DAA6D;IACrH,iBAAiB,sBAAsB;IACvC,uBAAuB,4BAA4B;IACnD,2CAA2C,gDAAgD;IAC3F,6CAA6C,kDAAkD;IAC/F,iDAAiD,sDAAsD;IACvG,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAE/E,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAE/D,4BAA4B,iCAAiC;IAE7D,yCAAyC,8CAA8C;IAEvF,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IAErF,0BAA0B,+BAA+B;IACzD,0BAA0B,+BAA+B;IAEzD,+BAA+B,oCAAoC;IAEnE,6BAA6B,kCAAkC;IAC/D,8BAA8B,mCAAmC;IAEjE,kCAAkC,uCAAuC;IACzE,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IAGnF,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,2BAA2B,gCAAgC;IAC3D,6BAA6B,kCAAkC;IAC/D,mCAAmC,wCAAwC;IAC3E,oHAAoH;IACpH,+BAA+B,oCAAoC;IACnE,mGAAmG;IACnG,iCAAiC,sCAAsC;IACvE,8BAA8B,mCAAmC;IACjE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC,8GAA8G;IAC9G,qBAAqB,0BAA0B;IAE/C,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE;;;;;;;;;OASG;IACH,uCAAuC,4CAA4C;IAInF,0CAA0C,+CAA+C;IAGzF,0CAA0C,+CAA+C;IACzF,+CAA+C,oDAAoD;IACnG,+CAA+C,oDAAoD;IAGnG,qCAAqC,0CAA0C;IAC/E,4CAA4C,iDAAiD;IAC7F,0CAA0C,+CAA+C;IACzF,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,iCAAiC,sCAAsC;IACvE,4CAA4C,iDAAiD;IAG7F,yBAAyB,8BAA8B;IAGvD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,kCAAkC,uCAAuC;IAGzE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,8BAA8B,mCAAmC;IAGjE,2BAA2B,gCAAgC;IAC3D,gBAAgB,qBAAqB;IAGrC,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,+BAA+B,oCAAoC;IAEnE,+GAA+G;IAC/G,oCAAoC,yCAAyC;IAG7E,uBAAuB,4BAA4B;IACnD,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAE3D,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,4BAA4B,iCAAiC;IAC7D,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,aAAa,kBAAkB;IAE/B,+BAA+B,oCAAoC;IACnE,+BAA+B,oCAAoC;IACnE,0BAA0B,+BAA+B;IAEzD,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAG7C,0BAA0B,+BAA+B;IACzD,wBAAwB,6BAA6B;IACrD,iCAAiC,sCAAsC;IACvE,wBAAwB,6BAA6B;IACrD,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE,2CAA2C,gDAAgD;IAC3F,+BAA+B,oCAAoC;IACnE,sCAAsC,2CAA2C;IACjF,8HAA8H;IAC9H,iCAAiC,sCAAsC;IACvE,8FAA8F;IAC9F,sCAAsC,2CAA2C;IACjF,wJAAwJ;IACxJ,qCAAqC,0CAA0C;IAC/E,oFAAoF;IACpF,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,uBAAuB,4BAA4B;IACnD,sGAAsG;IACtG,oCAAoC,yCAAyC;IAG7E,sJAAsJ;IACtJ,kCAAkC,uCAAuC;IACzE,oJAAoJ;IACpJ,4CAA4C,iDAAiD;IAC7F;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,+BAA+B;IACzD,wFAAwF;IACxF,kCAAkC,uCAAuC;IACzE,0HAA0H;IAC1H,uCAAuC,4CAA4C;IACnF,iGAAiG;IACjG,qBAAqB,0BAA0B;IAC/C,+FAA+F;IAC/F,4BAA4B,iCAAiC;IAC7D,oTAAoT;IACpT,uBAAuB,4BAA4B;IACnD,4DAA4D;IAC5D,8BAA8B,mCAAmC;IACjE,+FAA+F;IAC/F,mBAAmB,wBAAwB;IAC3C,uEAAuE;IACvE,8BAA8B,mCAAmC;IAGjE,wEAAwE;IACxE,oCAAoC,yCAAyC;IAC7E,kEAAkE;IAClE,kCAAkC,uCAAuC;IACzE,gFAAgF;IAChF,gCAAgC,qCAAqC;IACrE,mFAAmF;IACnF,uCAAuC,4CAA4C;IACnF,yFAAyF;IACzF,2BAA2B,gCAAgC;IAC3D,uDAAuD;IACvD,+BAA+B,oCAAoC;IACnE,iDAAiD;IACjD,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,+BAA+B,oCAAoC;IACnE,4DAA4D;IAC5D,qCAAqC,0CAA0C;IAC/E,mEAAmE;IACnE,8BAA8B,mCAAmC;IACjE;;;;;;OAMG;IACH,oCAAoC,yCAAyC;IAG7E,0EAA0E;IAC1E,4BAA4B,iCAAiC;IAC7D,sDAAsD;IACtD,gBAAgB,qBAAqB;IACrC,iEAAiE;IACjE,yBAAyB,8BAA8B;IACvD,6CAA6C;IAC7C,qBAAqB,0BAA0B;IAC/C,wEAAwE;IACxE,4BAA4B,iCAAiC;IAG7D,yCAAyC;IACzC,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gCAAgC,qCAAqC;IACrE;;;;;;;;;;OAUG;IACH,+BAA+B,oCAAoC;IACnE;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IACzD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,mCAAmC,wCAAwC;IAC3E;;;;;;;;;;;OAWG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;;;;;OASG;IACH,wBAAwB,6BAA6B;IACrD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,4BAA4B;IACnD,+DAA+D;IAC/D,gCAAgC,qCAAqC;IAGrE,qDAAqD;IACrD,yBAAyB,8BAA8B;IAGvD,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IACvD,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IACzD,iCAAiC,sCAAsC;IACvE,0BAA0B,+BAA+B;IACzD,6BAA6B,kCAAkC;IAC/D,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,yBAAyB,8BAA8B;IACvD,8BAA8B,mCAAmC;IACjE;;;;;;;;;;OAUG;IACH,8BAA8B,mCAAmC;IACjE;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IACvD;;;;;;;;;;;OAWG;IACH,8BAA8B,mCAAmC;IAGjE,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,YAAY,iBAAiB;IAC7B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAC/C,yBAAyB,8BAA8B;IACvD,2BAA2B,gCAAgC;IAC3D,0BAA0B,+BAA+B;IACzD,8BAA8B,mCAAmC;IACjE,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,yBAAyB,8BAA8B;IACvD,wHAAwH;IACxH,kBAAkB,uBAAuB;IAGzC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,gCAAgC,qCAAqC;IACrE,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAC/E,8BAA8B,mCAAmC;IACjE,oIAAoI;IACpI,yBAAyB,8BAA8B;IACvD,2JAA2J;IAC3J,4BAA4B,iCAAiC;IAC7D,4GAA4G;IAC5G,0BAA0B,+BAA+B;IACzD,yGAAyG;IACzG,sCAAsC,2CAA2C;IAGjF,iFAAiF;IACjF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,wBAAwB,6BAA6B;IACrD,8EAA8E;IAC9E,6BAA6B,kCAAkC;IAC/D,8DAA8D;IAC9D,oCAAoC,yCAAyC;IAC7E,4EAA4E;IAC5E,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,wBAAwB,6BAA6B;IACrD,qFAAqF;IACrF,gCAAgC,qCAAqC;IACrE,kFAAkF;IAClF,iCAAiC,sCAAsC;IACvE,iEAAiE;IACjE,uBAAuB,4BAA4B;IACnD,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,2CAA2C;IAC3C,iBAAiB,sBAAsB;IACvC,yCAAyC;IACzC,eAAe,oBAAoB;IACnC,6CAA6C;IAC7C,kBAAkB,uBAAuB;IACzC,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,qEAAqE;IACrE,iCAAiC,sCAAsC;IAGvE,kHAAkH;IAClH,mCAAmC,wCAAwC;IAC3E,2EAA2E;IAC3E,wBAAwB,6BAA6B;IACrD,iEAAiE;IACjE,wBAAwB,6BAA6B;IAGrD,8FAA8F;IAC9F,2CAA2C,gDAAgD;IAC3F,uFAAuF;IACvF,0CAA0C,+CAA+C;IACzF,gEAAgE;IAChE,0BAA0B,+BAA+B;IACzD,mEAAmE;IACnE,yBAAyB,8BAA8B;IACvD,8EAA8E;IAC9E,wBAAwB,6BAA6B;IACrD,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,kFAAkF;IAClF,2CAA2C,gDAAgD;IAC3F,6FAA6F;IAC7F,4BAA4B,iCAAiC;IAG7D,8DAA8D;IAC9D,cAAc,mBAAmB;IACjC,uEAAuE;IACvE,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,gJAAgJ;IAChJ,iBAAiB,sBAAsB;IACvC,iKAAiK;IACjK,qBAAqB,0BAA0B;IAC/C,sDAAsD;IACtD,mBAAmB,wBAAwB;IAC3C,qCAAqC;IACrC,oBAAoB,yBAAyB;IAC7C,8CAA8C;IAC9C,kBAAkB,uBAAuB;IACzC,+DAA+D;IAC/D,4BAA4B,iCAAiC;IAC7D,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,uDAAuD;IACvD,yBAAyB,8BAA8B;IACvD,8CAA8C;IAC9C,0BAA0B,+BAA+B;IACzD,kDAAkD;IAClD,mBAAmB,wBAAwB;IAC3C,kFAAkF;IAClF,6BAA6B,kCAAkC;IAC/D,sFAAsF;IACtF,sCAAsC,2CAA2C;IACjF,2FAA2F;IAC3F,0CAA0C,+CAA+C;IACzF,+EAA+E;IAC/E,mBAAmB,wBAAwB;IAC3C,6EAA6E;IAC7E,iCAAiC,sCAAsC;IACvE,wFAAwF;IACxF,0BAA0B,+BAA+B;IACzD,gGAAgG;IAChG,wBAAwB,6BAA6B;IACrD,oGAAoG;IACpG,4BAA4B,iCAAiC;IAC7D,4EAA4E;IAC5E,iCAAiC,sCAAsC;IACvE,kFAAkF;IAClF,sBAAsB,2BAA2B;IACjD,yGAAyG;IACzG,6BAA6B,kCAAkC;IAC/D,yEAAyE;IACzE,6BAA6B,kCAAkC;IAC/D,6EAA6E;IAC7E,4BAA4B,iCAAiC;IAC7D,kEAAkE;IAClE,qCAAqC,0CAA0C;IAC/E;;;;;;;;OAQG;IACH,2BAA2B,gCAAgC;IAC3D,4DAA4D;IAC5D,yBAAyB,8BAA8B;IACvD,gDAAgD;IAChD,0BAA0B,+BAA+B;IACzD,yEAAyE;IACzE,mCAAmC,wCAAwC;IAC3E,0DAA0D;IAC1D,wBAAwB,6BAA6B;IACrD,kFAAkF;IAClF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,4BAA4B,iCAAiC;IAE7D,mFAAmF;IACnF,mCAAmC,wCAAwC;CAC5E"}
+{"version":3,"file":"errors.custom-message-ref.shared.definitions.d.ts","sourceRoot":"","sources":["../../../../src/errors/errors.custom-message-ref.shared.definitions.ts"],"names":[],"mappings":"AAGA,oBAAY,2BAA2B;IACrC,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,kBAAkB,uBAAuB;IACzC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,qCAAqC,0CAA0C;IAC/E,+BAA+B,oCAAoC;IAEnE,+BAA+B,oCAAoC;IACnE,2CAA2C,gDAAgD;IAE3F,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAE/E,6BAA6B,kCAAkC;IAG/D,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,4BAA4B,iCAAiC;IAC7D,gCAAgC,qCAAqC;IACrE,wBAAwB,6BAA6B;IAErD,kCAAkC,uCAAuC;IACzE,sCAAsC,2CAA2C;IACjF,4BAA4B,iCAAiC;IAC7D,iCAAiC,sCAAsC;IACvE,mCAAmC,wCAAwC;IAC3E,uCAAuC,4CAA4C;IAEnF,uCAAuC,4CAA4C;IAEnF,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,6BAA6B,kCAAkC;IAE/D,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAE3D,sCAAsC,2CAA2C;IACjF,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IAErE,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IAEjF,gDAAgD,qDAAqD;IAErG,qCAAqC,0CAA0C;IAC/E,uCAAuC,4CAA4C;IAEnF,iCAAiC,sCAAsC;IAEvE,uCAAuC,4CAA4C;IACnF,sCAAsC,2CAA2C;IACjF,gCAAgC,qCAAqC;IAErE,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;IACrE,4BAA4B,iCAAiC;IAC7D,mCAAmC,wCAAwC;IAC3E;;;;OAIG;IACH,uCAAuC,4CAA4C;IACnF;;;;;;;OAOG;IACH,0CAA0C,+CAA+C;IAEzF,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAE7C,mBAAmB,wBAAwB;IAE3C,wDAAwD,6DAA6D;IACrH,iBAAiB,sBAAsB;IACvC,uBAAuB,4BAA4B;IACnD,2CAA2C,gDAAgD;IAC3F,6CAA6C,kDAAkD;IAC/F,iDAAiD,sDAAsD;IACvG,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAE/E,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAE/D,4BAA4B,iCAAiC;IAE7D,yCAAyC,8CAA8C;IAEvF,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IAErF,0BAA0B,+BAA+B;IACzD,0BAA0B,+BAA+B;IAEzD,+BAA+B,oCAAoC;IAEnE,6BAA6B,kCAAkC;IAC/D,8BAA8B,mCAAmC;IAEjE,kCAAkC,uCAAuC;IACzE,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IAGnF,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,2BAA2B,gCAAgC;IAC3D,6BAA6B,kCAAkC;IAC/D,mCAAmC,wCAAwC;IAC3E,oHAAoH;IACpH,+BAA+B,oCAAoC;IACnE,mGAAmG;IACnG,iCAAiC,sCAAsC;IACvE,8BAA8B,mCAAmC;IACjE,wGAAwG;IACxG,gBAAgB,qBAAqB;IACrC;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD,8GAA8G;IAC9G,qBAAqB,0BAA0B;IAE/C,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE;;;;;;;;;OASG;IACH,uCAAuC,4CAA4C;IACnF;;;;;;;;;OASG;IACH,6CAA6C,kDAAkD;IAI/F,0CAA0C,+CAA+C;IAGzF,0CAA0C,+CAA+C;IACzF,+CAA+C,oDAAoD;IACnG,+CAA+C,oDAAoD;IAGnG,qCAAqC,0CAA0C;IAC/E,4CAA4C,iDAAiD;IAC7F,0CAA0C,+CAA+C;IACzF,yCAAyC,8CAA8C;IACvF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,iCAAiC,sCAAsC;IACvE,4CAA4C,iDAAiD;IAG7F,yBAAyB,8BAA8B;IAGvD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,kCAAkC,uCAAuC;IAGzE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,8BAA8B,mCAAmC;IAGjE,2BAA2B,gCAAgC;IAC3D,gBAAgB,qBAAqB;IAGrC,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,+BAA+B,oCAAoC;IAEnE,+GAA+G;IAC/G,oCAAoC,yCAAyC;IAG7E,uBAAuB,4BAA4B;IACnD,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAE3D,oBAAoB,yBAAyB;IAC7C,WAAW,gBAAgB;IAC3B,wBAAwB,6BAA6B;IACrD,iBAAiB,sBAAsB;IACvC,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,4BAA4B,iCAAiC;IAC7D,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,aAAa,kBAAkB;IAE/B,+BAA+B,oCAAoC;IACnE,+BAA+B,oCAAoC;IACnE,0BAA0B,+BAA+B;IAEzD,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAG7C,0BAA0B,+BAA+B;IACzD,wBAAwB,6BAA6B;IACrD,iCAAiC,sCAAsC;IACvE,wBAAwB,6BAA6B;IACrD,8BAA8B,mCAAmC;IACjE,iCAAiC,sCAAsC;IACvE,2CAA2C,gDAAgD;IAC3F,+BAA+B,oCAAoC;IACnE,sCAAsC,2CAA2C;IACjF,8HAA8H;IAC9H,iCAAiC,sCAAsC;IACvE,8FAA8F;IAC9F,sCAAsC,2CAA2C;IACjF,wJAAwJ;IACxJ,qCAAqC,0CAA0C;IAC/E,oFAAoF;IACpF,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,uBAAuB,4BAA4B;IACnD,sGAAsG;IACtG,oCAAoC,yCAAyC;IAG7E,sJAAsJ;IACtJ,kCAAkC,uCAAuC;IACzE,oJAAoJ;IACpJ,4CAA4C,iDAAiD;IAC7F;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,+BAA+B;IACzD,wFAAwF;IACxF,kCAAkC,uCAAuC;IACzE,0HAA0H;IAC1H,uCAAuC,4CAA4C;IACnF,iGAAiG;IACjG,qBAAqB,0BAA0B;IAC/C,+FAA+F;IAC/F,4BAA4B,iCAAiC;IAC7D,oTAAoT;IACpT,uBAAuB,4BAA4B;IACnD,4DAA4D;IAC5D;;;;;;;;OAQG;IACH,qCAAqC,0CAA0C;IAC/E,8BAA8B,mCAAmC;IACjE,+FAA+F;IAC/F,mBAAmB,wBAAwB;IAC3C,uEAAuE;IACvE,8BAA8B,mCAAmC;IAGjE,wEAAwE;IACxE,oCAAoC,yCAAyC;IAC7E,kEAAkE;IAClE,kCAAkC,uCAAuC;IACzE,gFAAgF;IAChF,gCAAgC,qCAAqC;IACrE,mFAAmF;IACnF,uCAAuC,4CAA4C;IACnF,yFAAyF;IACzF,2BAA2B,gCAAgC;IAC3D,uDAAuD;IACvD,+BAA+B,oCAAoC;IACnE,iDAAiD;IACjD,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,+BAA+B,oCAAoC;IACnE,4DAA4D;IAC5D,qCAAqC,0CAA0C;IAC/E,mEAAmE;IACnE,8BAA8B,mCAAmC;IACjE;;;;;;OAMG;IACH,oCAAoC,yCAAyC;IAC7E;;;;;;OAMG;IACH,yCAAyC,8CAA8C;IAGvF,0EAA0E;IAC1E,4BAA4B,iCAAiC;IAC7D,sDAAsD;IACtD,gBAAgB,qBAAqB;IACrC,iEAAiE;IACjE,yBAAyB,8BAA8B;IACvD,6CAA6C;IAC7C,qBAAqB,0BAA0B;IAC/C,wEAAwE;IACxE,4BAA4B,iCAAiC;IAG7D,yCAAyC;IACzC,iBAAiB,sBAAsB;IACvC;;;;;;;;;;OAUG;IACH,+BAA+B,oCAAoC;IACnE;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IACzD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,mCAAmC,wCAAwC;IAC3E;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,4BAA4B;IACnD;;;;;;;;;;;OAWG;IACH,6BAA6B,kCAAkC;IAC/D;;;;;;;;;;;;;OAaG;IACH,mCAAmC,wCAAwC;IAC3E;;;;;;;;;OASG;IACH,wBAAwB,6BAA6B;IACrD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,4BAA4B;IACnD,+DAA+D;IAC/D,gCAAgC,qCAAqC;IAGrE,qDAAqD;IACrD,yBAAyB,8BAA8B;IAGvD,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IACvD,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,4BAA4B,iCAAiC;IAC7D,0BAA0B,+BAA+B;IACzD,iCAAiC,sCAAsC;IACvE,0BAA0B,+BAA+B;IACzD,6BAA6B,kCAAkC;IAC/D,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,yBAAyB,8BAA8B;IACvD,8BAA8B,mCAAmC;IACjE;;;;;;;;;;OAUG;IACH,8BAA8B,mCAAmC;IACjE;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,4BAA4B;IACnD,yBAAyB,8BAA8B;IAGvD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,YAAY,iBAAiB;IAC7B;;;;;;;OAOG;IACH,uBAAuB,4BAA4B;IACnD,iBAAiB,sBAAsB;IACvC,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,yBAAyB,8BAA8B;IACvD,wBAAwB,6BAA6B;IACrD,qBAAqB,0BAA0B;IAC/C,yBAAyB,8BAA8B;IACvD,2BAA2B,gCAAgC;IAC3D,0BAA0B,+BAA+B;IACzD,8BAA8B,mCAAmC;IACjE,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,yBAAyB,8BAA8B;IACvD,wHAAwH;IACxH,kBAAkB,uBAAuB;IAGzC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,gCAAgC,qCAAqC;IACrE,+BAA+B,oCAAoC;IACnE,qCAAqC,0CAA0C;IAC/E,8BAA8B,mCAAmC;IACjE,oIAAoI;IACpI,yBAAyB,8BAA8B;IACvD,2JAA2J;IAC3J,4BAA4B,iCAAiC;IAC7D,4GAA4G;IAC5G,0BAA0B,+BAA+B;IACzD,yGAAyG;IACzG,sCAAsC,2CAA2C;IAGjF,iFAAiF;IACjF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,wBAAwB,6BAA6B;IACrD,8EAA8E;IAC9E,6BAA6B,kCAAkC;IAC/D,8DAA8D;IAC9D,oCAAoC,yCAAyC;IAC7E,4EAA4E;IAC5E,2BAA2B,gCAAgC;IAC3D,4FAA4F;IAC5F,wBAAwB,6BAA6B;IACrD,qFAAqF;IACrF,gCAAgC,qCAAqC;IACrE,kFAAkF;IAClF,iCAAiC,sCAAsC;IACvE,iEAAiE;IACjE,uBAAuB,4BAA4B;IACnD,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,2CAA2C;IAC3C,iBAAiB,sBAAsB;IACvC,yCAAyC;IACzC,eAAe,oBAAoB;IACnC,6CAA6C;IAC7C,kBAAkB,uBAAuB;IACzC,0CAA0C;IAC1C,gBAAgB,qBAAqB;IACrC,iFAAiF;IACjF,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,mCAAmC,wCAAwC;IAC3E,4HAA4H;IAC5H,6BAA6B,kCAAkC;IAC/D,8GAA8G;IAC9G,2BAA2B,gCAAgC;IAC3D,sIAAsI;IACtI,4BAA4B,iCAAiC;IAC7D,qEAAqE;IACrE,iCAAiC,sCAAsC;IAGvE,kHAAkH;IAClH,mCAAmC,wCAAwC;IAC3E,2EAA2E;IAC3E,wBAAwB,6BAA6B;IACrD,iEAAiE;IACjE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,kCAAkC,uCAAuC;IAGzE,8FAA8F;IAC9F,2CAA2C,gDAAgD;IAC3F,uFAAuF;IACvF,0CAA0C,+CAA+C;IACzF,gEAAgE;IAChE,0BAA0B,+BAA+B;IACzD,mEAAmE;IACnE,yBAAyB,8BAA8B;IACvD,8EAA8E;IAC9E,wBAAwB,6BAA6B;IACrD,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,kFAAkF;IAClF,2CAA2C,gDAAgD;IAC3F,6FAA6F;IAC7F,4BAA4B,iCAAiC;IAG7D,8DAA8D;IAC9D,cAAc,mBAAmB;IACjC,uEAAuE;IACvE,8BAA8B,mCAAmC;IACjE,6EAA6E;IAC7E,gJAAgJ;IAChJ,iBAAiB,sBAAsB;IACvC,iKAAiK;IACjK,qBAAqB,0BAA0B;IAC/C,sDAAsD;IACtD,mBAAmB,wBAAwB;IAC3C,qCAAqC;IACrC,oBAAoB,yBAAyB;IAC7C,8CAA8C;IAC9C,kBAAkB,uBAAuB;IACzC,+DAA+D;IAC/D,4BAA4B,iCAAiC;IAC7D,sEAAsE;IACtE,0BAA0B,+BAA+B;IACzD,uDAAuD;IACvD,yBAAyB,8BAA8B;IACvD,8CAA8C;IAC9C,0BAA0B,+BAA+B;IACzD,kDAAkD;IAClD,mBAAmB,wBAAwB;IAC3C,kFAAkF;IAClF,6BAA6B,kCAAkC;IAC/D,sFAAsF;IACtF,sCAAsC,2CAA2C;IACjF,2FAA2F;IAC3F,0CAA0C,+CAA+C;IACzF,+EAA+E;IAC/E,mBAAmB,wBAAwB;IAC3C,6EAA6E;IAC7E,iCAAiC,sCAAsC;IACvE,wFAAwF;IACxF,0BAA0B,+BAA+B;IACzD,gGAAgG;IAChG,wBAAwB,6BAA6B;IACrD,oGAAoG;IACpG,4BAA4B,iCAAiC;IAC7D,4EAA4E;IAC5E,iCAAiC,sCAAsC;IACvE,kFAAkF;IAClF,sBAAsB,2BAA2B;IACjD,yGAAyG;IACzG,6BAA6B,kCAAkC;IAC/D,yEAAyE;IACzE,6BAA6B,kCAAkC;IAC/D,6EAA6E;IAC7E,4BAA4B,iCAAiC;IAC7D,kEAAkE;IAClE,qCAAqC,0CAA0C;IAC/E;;;;;;;;OAQG;IACH,2BAA2B,gCAAgC;IAC3D,4DAA4D;IAC5D,yBAAyB,8BAA8B;IACvD,gDAAgD;IAChD,0BAA0B,+BAA+B;IACzD,yEAAyE;IACzE,mCAAmC,wCAAwC;IAC3E,0DAA0D;IAC1D,wBAAwB,6BAA6B;IACrD,kFAAkF;IAClF,0BAA0B,+BAA+B;IACzD,qEAAqE;IACrE,4BAA4B,iCAAiC;IAE7D,mFAAmF;IACnF,mCAAmC,wCAAwC;IAG3E;;;OAGG;IACH,uBAAuB,4BAA4B;IACnD;;;;OAIG;IACH,wBAAwB,6BAA6B;IAGrD,0FAA0F;IAC1F,wBAAwB,6BAA6B;IACrD,iGAAiG;IACjG,yBAAyB,8BAA8B;IACvD,+JAA+J;IAC/J,4BAA4B,iCAAiC;IAC7D;;;OAGG;IACH,sBAAsB,2BAA2B;CAClD"}

package/dist/esm/errors/errors.custom-message-ref.shared.definitions.js

@@ -63,6 +63,21 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["AUTHORIZATIONS_VALIDATION_FAILED"] = "authorizations_validation_failed";
     ErrorCustomMessageReference["AUTHORIZATIONS_ACCESS_DENIED"] = "authorizations_access_denied";
     ErrorCustomMessageReference["AUTHORIZATIONS_NO_OPERATION_CONTEXT"] = "authorizations_no_operation_context";
+    /**
+     * The application declares purposes a person must grant before using it
+     * (`compliance.serviceConsentRequirement`), and this person has not granted them (#534). Refused on
+     * every user-initiated operation except the person's own preferences — where consent is recorded.
+     */
+    ErrorCustomMessageReference["AUTHORIZATIONS_SERVICE_CONSENT_REQUIRED"] = "authorizations_service_consent_required";
+    /**
+     * ONE operation declares the purpose its own processing rests on
+     * (`ResourceOperationConsentGateDeclaration`, `refusal: WITHHOLD_CAPABILITY`, #1258 Step 3), and this
+     * person has not granted it. Refuses only THIS operation — distinct from
+     * {@link ErrorCustomMessageReference.AUTHORIZATIONS_SERVICE_CONSENT_REQUIRED}, which withholds the
+     * whole application, so a frontend can branch on the two differently (D2: a declared purpose costs
+     * the capability, not the product, unless the application says otherwise).
+     */
+    ErrorCustomMessageReference["AUTHORIZATIONS_CAPABILITY_CONSENT_REQUIRED"] = "authorizations_capability_consent_required";
     ErrorCustomMessageReference["JWT_SIGNING_FAILED"] = "jwt_signing_failed";
     ErrorCustomMessageReference["JWT_VERIFICATION_FAILED"] = "jwt_verification_failed";
     ErrorCustomMessageReference["JWT_TOKEN_GENERATION_FAILED"] = "jwt_token_generation_failed";
@@ -113,6 +128,13 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["AUTHENTICATION_NOT_IMPLEMENTED"] = "authentication_not_implemented";
     /** W7.1: Operation requires re-authentication (step-up auth). Frontend should prompt re-auth dialog. */
     ErrorCustomMessageReference["STEP_UP_REQUIRED"] = "step_up_required";
+    /**
+     * #1417: adding a way to sign in needs the account holder to re-prove who they are. Distinct from
+     * `STEP_UP_REQUIRED` because the proof is different (`ReAuthenticationPurpose.BIND_AUTHENTICATOR`:
+     * any held factor, whatever the step-up policy names), and a step-up refusal's context is stripped
+     * at the wire, so the code is the only channel that can tell the client which proof to ask for.
+     */
+    ErrorCustomMessageReference["STEP_UP_REQUIRED_TO_BIND"] = "step_up_required_to_bind";
     /** W7.2: Cross-organization SSO access is disabled. User already has enterprise SSO link from another org. */
     ErrorCustomMessageReference["CROSS_ORG_SSO_BLOCKED"] = "cross_org_sso_blocked";
     ErrorCustomMessageReference["APP_CONFIGURATION_UNAUTHORIZED"] = "app_configuration_unauthorized";
@@ -128,6 +150,17 @@ export var ErrorCustomMessageReference;
      * `organizationTypes[<org type>].userTypes`, and nothing in a method-shaped error points there.
      */
     ErrorCustomMessageReference["INVITATION_ORGANIZATION_TYPE_UNRESOLVED"] = "invitation_organization_type_unresolved";
+    /**
+     * A member could not sign in (or re-authenticate) because one of their organizations yields no authentication
+     * policy: the organization is gone, carries no type, or carries a type the application no longer declares (#1036).
+     *
+     * Fail-closed on purpose — an organization's type is where its authentication restrictions live, and "could not
+     * tell" must never read as "no restrictions". What changed is that it is NAMED: it used to surface as an
+     * unhandled `500 INTERNAL` at `severity: critical`, which reads as an engine crash for what is an operator
+     * configuration state. The three causes have different remedies, so the log context carries
+     * `OrganizationAuthPolicyUnresolvedReason`; the member sees one message, because none of the remedies is theirs.
+     */
+    ErrorCustomMessageReference["AUTHENTICATION_ORGANIZATION_POLICY_UNRESOLVED"] = "authentication_organization_policy_unresolved";
     // Frontend form errors
     ErrorCustomMessageReference["FRONTEND_FORM_READ_OPERATION_NOT_AVAILABLE"] = "frontend_form_read_operation_not_available";
     // Frontend navigation errors
@@ -242,6 +275,16 @@ export var ErrorCustomMessageReference;
     /** Registration for this user type is admin-provisioned only: accounts are created by an administrator, so there is no self-service sign-up or invitation-accept path. Distinct from REGISTRATION_DISABLED (registration off entirely) and REGISTRATION_INVITATION_ONLY (self-complete via an invitation token). */
     ErrorCustomMessageReference["REGISTRATION_ADMIN_ONLY"] = "registration_admin_only";
     /** A password is required to complete this registration. */
+    /**
+     * Self-service signup is open, but this application admits only certain email domains
+     * (`registration.allowedEmailDomains`) and the registrant's is not among them.
+     *
+     * Told PLAINLY rather than answered with the silent success the SSO-domain block uses, and the two
+     * differ for a reason: an anti-enumeration no-op exists to avoid disclosing whether an ACCOUNT
+     * exists, and this discloses nothing about any account — only the application's own published
+     * admission policy, which it chose to have and which its own signup page should already state.
+     */
+    ErrorCustomMessageReference["REGISTRATION_EMAIL_DOMAIN_NOT_ALLOWED"] = "registration_email_domain_not_allowed";
     ErrorCustomMessageReference["REGISTRATION_PASSWORD_REQUIRED"] = "registration_password_required";
     /** Registration could not be completed due to a transient server error; the user may retry. */
     ErrorCustomMessageReference["REGISTRATION_FAILED"] = "registration_failed";
@@ -276,6 +319,14 @@ export var ErrorCustomMessageReference;
      * than the token authorizes.
      */
     ErrorCustomMessageReference["AUTHORIZATION_MACHINE_SCOPE_MISMATCH"] = "authorization_machine_scope_mismatch";
+    /**
+     * The signed-in account opened a link to an organization it cannot access, so the application sent it
+     * to its home page instead. Raised by the FRONTEND, not by an API response: the server's answer to the
+     * organization READ is a 403 or a deliberate 404, and this reference names the navigation outcome the
+     * person sees. The usual path is a session that expired on another account's organization page and a
+     * different account signing in to the saved redirect.
+     */
+    ErrorCustomMessageReference["AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE"] = "authorization_organization_not_accessible";
     // MFA flow errors (user-directed)
     /** The current session state does not allow completing MFA enrollment. */
     ErrorCustomMessageReference["MFA_ENROLLMENT_STATE_INVALID"] = "mfa_enrollment_state_invalid";
@@ -290,31 +341,6 @@ export var ErrorCustomMessageReference;
     // Config / request-contract errors (user-directed)
     /** The organization name is required. */
     ErrorCustomMessageReference["ORG_NAME_REQUIRED"] = "org_name_required";
-    /**
-     * An organization unit cannot be deleted because child units still hang off it.
-     *
-     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that expose
-     * `context` to the client, so the blocking dependent is surfaced by name — `blockingChildUnitId`
-     * when a child unit blocks, `blockingUnitMemberId` when a member assignment does. TWO distinct
-     * dependents share this one code; branch on the context key, not on the message.
-     *
-     * Unlike every other `ORGANIZATIONS` child, the unit tree's self-edge
-     * (`ORGANIZATION_UNITS -> ORGANIZATION_UNITS` on `parentUnitId`) declares NO `onParentDelete`
-     * cascade, so deleting an interior node would strand its whole subtree behind a dangling
-     * `parentUnitId` and a stale materialized `path`.
-     *
-     * MOVE is the remedy to point a client at: it re-parents a child onto another node and rewrites
-     * the materialized `path` of its whole subtree in one transaction. (Deleting the subtree
-     * bottom-up also works, leaf by leaf.) Since `parentUnitId` became `.excludeFromUpdate()` in the
-     * same pass that implemented MOVE, MOVE is the ONLY way to re-home a branch — so do not describe
-     * a plain update as an alternative.
-     *
-     * ⚠️ Direct per-unit DELETE only. Deleting the whole ORGANIZATION is a different path: that
-     * cascade IS enabled and removes every unit of the tenant at once (every unit carries the
-     * tenant's `organizationId`), and it runs at the repository level, so this guard is correctly
-     * not consulted there.
-     */
-    ErrorCustomMessageReference["ORGANIZATION_UNIT_HAS_DEPENDENTS"] = "organization_unit_has_dependents";
     /**
      * A MOVE names a destination inside the moved unit's own subtree — one of its descendants, or the
      * unit itself. Either detaches the branch into a cycle: a node below its own descendant has no
@@ -356,6 +382,23 @@ export var ErrorCustomMessageReference;
      * implementation performs against the row it actually loaded.
      */
     ErrorCustomMessageReference["RESOURCE_STATUS_TRANSITION_CONFLICT"] = "resource_status_transition_conflict";
+    /**
+     * A delete was refused because rows on an edge declaring `onParentDelete.strategy:
+     * REFUSE_WHILE_CHILDREN_EXIST` still reference the row being deleted.
+     *
+     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that expose
+     * `context` to the client, so `context.blockingDependents` names each blocking edge with its
+     * `childResourceType`, `foreignKeyField` and one `blockingChildId`. Branch on that, not on the
+     * message. When the only blocking children are impersonalized-and-retained (hidden from every ordinary
+     * read), the entry carries `blockingChildRetained: true` and NO `blockingChildId`: the refusal must say
+     * why the delete cannot proceed without revealing a retained row's identity (#1168). One code serves every resource because the posture is declared on the edge; what to do
+     * next (MOVE a unit's children onto another node, resolve a billing account's retained financial
+     * records) belongs to that resource's specification.
+     *
+     * Replaced `ORGANIZATION_UNIT_HAS_DEPENDENTS` and `BILLING_ACCOUNT_HAS_DEPENDENTS`, the codes of the
+     * two hand-written DELETE prefix guards this posture now derives (#1123).
+     */
+    ErrorCustomMessageReference["RESOURCE_HAS_DEPENDENTS"] = "resource_has_dependents";
     /**
      * A unit `code` is already used by a sibling under the same parent.
      *
@@ -369,6 +412,21 @@ export var ErrorCustomMessageReference;
      * differently depending on which write won a race.
      */
     ErrorCustomMessageReference["ORGANIZATION_UNIT_CODE_EXISTS"] = "organization_unit_code_exists";
+    /**
+     * The write would change something an identity directory owns on a unit it provisioned — the
+     * unit's name, or who is in it — while that directory can still push (#1392).
+     *
+     * A unit created by SCIM `/Groups` (`externalSource: SCIM`) is reconciled by the directory: its
+     * name and its member set are re-asserted on every push, so an edit made in the application is
+     * reverted with no error. Refusing tells the administrator where the change belongs instead of
+     * letting it be typed and lost. Emitted as `ErrorType.CONFLICT` (409): the caller is authorized
+     * and the payload is valid; what refuses it is who owns the row.
+     *
+     * The refusal lifts on its own once the organization holds no usable SCIM token — no directory can
+     * push, so an edit made here sticks. Roles on an assignment, the unit's code, type, status and
+     * position are NOT directory-owned and are never refused here.
+     */
+    ErrorCustomMessageReference["ORGANIZATION_UNIT_DIRECTORY_MANAGED"] = "organization_unit_directory_managed";
     /**
      * The requested organization `slug` is already taken.
      *
@@ -412,7 +470,6 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["BILLING_ACCOUNT_NOT_FOUND"] = "billing_account_not_found";
     ErrorCustomMessageReference["BILLING_NO_PROVIDER_CUSTOMER"] = "billing_no_provider_customer";
     ErrorCustomMessageReference["BILLING_SUBSCRIPTION_NOT_FOUND"] = "billing_subscription_not_found";
-    ErrorCustomMessageReference["BILLING_NO_ACTIVE_SUBSCRIPTION"] = "billing_no_active_subscription";
     ErrorCustomMessageReference["BILLING_NO_PROVIDER_SUBSCRIPTION"] = "billing_no_provider_subscription";
     ErrorCustomMessageReference["BILLING_NO_PROVIDER_PRICE"] = "billing_no_provider_price";
     ErrorCustomMessageReference["BILLING_PRODUCT_NOT_FOUND"] = "billing_product_not_found";
@@ -444,8 +501,8 @@ export var ErrorCustomMessageReference;
     /**
      * A purchase named a product that has been RETIRED from the code catalogue.
      *
-     * `Product.isActive` was the declared off-boarding path — `assertNoBillingAccountDependents`'s own
-     * comment calls the soft retire "the product off-boarding path" — and until 2026-09-09 no purchase
+     * `Product.isActive` was the declared off-boarding path — the billing-account specification's DELETE
+     * entry calls the soft retire "the product off-boarding path" — and until 2026-09-09 no purchase
      * path consulted it. `readProductByKey` returned an inactive product exactly like an active one, so
      * a product could be withdrawn and still be bought, granting entitlements frozen at whatever the
      * last catalogue sync wrote.
@@ -459,26 +516,21 @@ export var ErrorCustomMessageReference;
      */
     ErrorCustomMessageReference["BILLING_PRODUCT_RETIRED"] = "billing_product_retired";
     ErrorCustomMessageReference["BILLING_SCOPE_NOT_ENABLED"] = "billing_scope_not_enabled";
-    /**
-     * Hard removal of a billing account was refused because retained financial children
-     * (subscriptions / invoice refs / usage records / credit pools) still reference it.
-     *
-     * Emitted as `ErrorType.CONFLICT` (409). CONFLICT is one of the few error types that
-     * expose `context` to the client, so the blocking child families are surfaced by name.
-     *
-     * @see the billing-retention rationale at the `Scope -> BillingAccounts` declaration in
-     * `resources-registry.shared.core.definitions.ts` — the children are RETAINED on purpose,
-     * and this account row holds the only local `providerCustomerId` that maps them back to
-     * the provider customer.
-     */
-    ErrorCustomMessageReference["BILLING_ACCOUNT_HAS_DEPENDENTS"] = "billing_account_has_dependents";
     // SAML Protocol Engine errors (AUTH-2)
     ErrorCustomMessageReference["SAML_ASSERTION_INVALID"] = "saml_assertion_invalid";
     ErrorCustomMessageReference["SAML_SIGNATURE_INVALID"] = "saml_signature_invalid";
     ErrorCustomMessageReference["SAML_AUDIENCE_MISMATCH"] = "saml_audience_mismatch";
     ErrorCustomMessageReference["SAML_REPLAY_DETECTED"] = "saml_replay_detected";
     ErrorCustomMessageReference["SAML_EXPIRED"] = "saml_expired";
-    ErrorCustomMessageReference["SAML_DOMAIN_NOT_VERIFIED"] = "saml_domain_not_verified";
+    /**
+     * An enterprise assertion named an email domain the target organization has not VERIFIED.
+     *
+     * Protocol-neutral, and renamed from `SAML_DOMAIN_NOT_VERIFIED` when the OIDC lane gained the same
+     * check (#1231). It was SAML-named because only SAML asked the question — which was the defect: the
+     * identical assertion over OIDC was admitted. One question asked by two protocols is one refusal,
+     * and a protocol-specific name would have re-created the divergence in the vocabulary.
+     */
+    ErrorCustomMessageReference["SSO_DOMAIN_NOT_VERIFIED"] = "sso_domain_not_verified";
     ErrorCustomMessageReference["SAML_CERT_EXPIRED"] = "saml_cert_expired";
     ErrorCustomMessageReference["SAML_DECRYPTION_FAILED"] = "saml_decryption_failed";
     ErrorCustomMessageReference["SAML_SP_KEY_MISMATCH"] = "saml_sp_key_mismatch";
@@ -541,6 +593,20 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["ACTOR_INVALID_KIND"] = "actor_invalid_kind";
     /** The referenced actor is not active. */
     ErrorCustomMessageReference["ACTOR_NOT_ACTIVE"] = "actor_not_active";
+    /** An execution was requested for an actor the named system does not declare. */
+    ErrorCustomMessageReference["ACTOR_NOT_IN_SYSTEM"] = "actor_not_in_system";
+    /**
+     * The actor runtime was asked to run an execution and no persistence is bound for the actor plane.
+     * The plane is REQUIRED (#1358): a run that cannot be recorded refuses before doing work, because a
+     * run nobody can find afterwards is worse than one that did not start.
+     */
+    ErrorCustomMessageReference["ACTOR_EXECUTION_PERSISTENCE_UNBOUND"] = "actor_execution_persistence_unbound";
+    /** A resume was asked of an execution that is not waiting on a decision — already answered, never suspended, or settled. */
+    ErrorCustomMessageReference["ACTOR_EXECUTION_NOT_SUSPENDED"] = "actor_execution_not_suspended";
+    /** A start was asked of an execution that is not `PENDING` — already started, waiting, or settled (#1359). */
+    ErrorCustomMessageReference["ACTOR_EXECUTION_NOT_PENDING"] = "actor_execution_not_pending";
+    /** An execution was opened or resumed for an exclusive subject another running execution of the same system already holds (#1361). */
+    ErrorCustomMessageReference["ACTOR_EXECUTION_SUBJECT_BUSY"] = "actor_execution_subject_busy";
     /** Chart parent context resource is not accessible to the caller. */
     ErrorCustomMessageReference["CHART_PARENT_CONTEXT_INACCESSIBLE"] = "chart_parent_context_inaccessible";
     // Auth-methods / SSO errors (user-directed)
@@ -550,6 +616,15 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["OAUTH_PROVIDER_NOT_FOUND"] = "oauth_provider_not_found";
     /** The requested SSO connection was not found or is disabled. */
     ErrorCustomMessageReference["SSO_CONNECTION_NOT_FOUND"] = "sso_connection_not_found";
+    /**
+     * An enterprise SSO connection in TEMPLATE mode left a provider template placeholder unfilled, so
+     * the endpoint it appears in does not identify one identity provider.
+     *
+     * Refused rather than resolved, because the unresolved case is not a narrower trust boundary — it is
+     * a wider one. Microsoft's contract issuer is `https://login.microsoftonline.com/{tenantid}/v2.0`,
+     * and with no `tenantid` override the tenant was taken from the token being authenticated (#1148).
+     */
+    ErrorCustomMessageReference["SSO_CONNECTION_TEMPLATE_UNRESOLVED"] = "sso_connection_template_unresolved";
     // Config / data-seeding / email errors (user-directed)
     /** The frontendServiceName query parameter is required to fetch application configuration. */
     ErrorCustomMessageReference["APP_CONFIGURATION_FRONTEND_SERVICE_REQUIRED"] = "app_configuration_frontend_service_required";
@@ -645,5 +720,29 @@ export var ErrorCustomMessageReference;
     ErrorCustomMessageReference["FILE_PATH_TRAVERSAL_DETECTED"] = "file_path_traversal_detected";
     /** A bulk relationship operation must provide either _ids or a filter selector. */
     ErrorCustomMessageReference["BULK_RELATIONSHIP_SELECTOR_REQUIRED"] = "bulk_relationship_selector_required";
+    // Bulk selector vocabulary (#1461) — `_ids` (this page) or `_match` (the query that finds the rows)
+    /**
+     * The request named BOTH `_ids` and `_match` (400). Refused rather than resolved by precedence:
+     * honouring one would make the other silently inert, and the caller cannot tell which acted.
+     */
+    ErrorCustomMessageReference["BULK_SELECTOR_AMBIGUOUS"] = "bulk_selector_ambiguous";
+    /**
+     * A `_match` selector resolved to more rows than this operation may change in one synchronous
+     * request (400). A batch enforces its documented maximum; acting on more is the background lane's
+     * job, not a larger synchronous write.
+     */
+    ErrorCustomMessageReference["BULK_SELECTION_TOO_LARGE"] = "bulk_selection_too_large";
+    // Request idempotency (`Idempotency-Key`, #535)
+    /** The operation requires an `Idempotency-Key` header and the request sent none (400). */
+    ErrorCustomMessageReference["IDEMPOTENCY_KEY_REQUIRED"] = "idempotency_key_required";
+    /** The `Idempotency-Key` header is not a String of 1 to 200 printable ASCII characters (400). */
+    ErrorCustomMessageReference["IDEMPOTENCY_KEY_MALFORMED"] = "idempotency_key_malformed";
+    /** An `Idempotency-Key` header was sent to a mutation that does not take one (400). Refused so a retry is never silently undeduplicated; a read ignores it. */
+    ErrorCustomMessageReference["IDEMPOTENCY_KEY_NOT_ACCEPTED"] = "idempotency_key_not_accepted";
+    /**
+     * The `Idempotency-Key` was already used for a DIFFERENT request to this operation (422). A 422 strips error context on
+     * the wire, so this reference is the client-branchable signal: it always reaches the response.
+     */
+    ErrorCustomMessageReference["IDEMPOTENCY_KEY_REUSED"] = "idempotency_key_reused";
 })(ErrorCustomMessageReference || (ErrorCustomMessageReference = {}));
 //# sourceMappingURL=errors.custom-message-ref.shared.definitions.js.map