chore(docs): regenerate the api reference from the merged tree

The merge of `origin/main` brought fourteen newly registered error codes into
`ERROR_CODE_LEDGER`; this branch adds three. Neither side's bytes can be text
merged into the other — both files are generated — so `os-regen-merge.sh` took
main's side in the merge commit and this commit re-derives them from the merged
source with `gen:schema && gen:docs`.

`contract.mdx`'s `Enum<... +N more>` counter reads `+325` = main's `+322` plus
this branch's three. `error-code-ledger.mdx` carries both sides' rows; all four
hook-result codes (the three added here and the `find()` sibling) are present.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018rzQyhLGC5iVs11V3TzRs5

Author: claude

content/docs/references/api/contract.mdx

@@ -27,7 +27,7 @@ const result = ApiErrorSchema.parse(data);
 
 | Property | Type | Required | Description |
 | :--- | :--- | :--- | :--- |
-| **code** | `Enum<'VALIDATION_ERROR' \| 'INVALID_FIELD' \| 'MISSING_REQUIRED_FIELD' \| 'INVALID_FORMAT' \| 'VALUE_TOO_LONG' \| 'VALUE_TOO_SHORT' \| 'VALUE_OUT_OF_RANGE' \| … +311 more>` | ✅ | Error code (e.g. VALIDATION_ERROR; StandardErrorCode ∪ the ledger the serving side registers — ERROR_CODE_LEDGER for framework packages) |
+| **code** | `Enum<'VALIDATION_ERROR' \| 'INVALID_FIELD' \| 'MISSING_REQUIRED_FIELD' \| 'INVALID_FORMAT' \| 'VALUE_TOO_LONG' \| 'VALUE_TOO_SHORT' \| 'VALUE_OUT_OF_RANGE' \| … +325 more>` | ✅ | Error code (e.g. VALIDATION_ERROR; StandardErrorCode ∪ the ledger the serving side registers — ERROR_CODE_LEDGER for framework packages) |
 | **declaredCode** | `string` | optional | The producer-declared code, verbatim, when it is not a member of the closed `code` vocabulary — the open, author-authored channel (app-specific spellings; ADR-0112) |
 | **message** | `string` | ✅ | Readable error message |
 | **userMessage** | `string` | optional | Producer-marked user-facing refusal text, verbatim. Present exactly when the producer opted in at throw time; consumers render it to end users and keep their generic substitution for anything unmarked. Status-agnostic; never replaces `message`. |
@@ -142,6 +142,8 @@ const result = ApiErrorSchema.parse(data);
 * `DOMAIN_VERIFICATION_DISABLED`
 * `DOMAIN_VERIFICATION_FAILED`
 * `DRIVER_UNAVAILABLE`
+* `DUPLICATE_ARTIFACT_OBJECT_NAME`
+* `DUPLICATE_ARTIFACT_PACKAGE`
 * `DUPLICATE_REQUEST`
 * `DUPLICATE_SOURCE_NOT_A_BASE`
 * `ELIGIBILITY_UNEVALUABLE`
@@ -197,6 +199,8 @@ const result = ApiErrorSchema.parse(data);
 * `IMPORT_JOB_CREATE_FAILED`
 * `IMPORT_ROW_FAILED`
 * `INTERNAL`
+* `INVALID_ARTIFACT_PACKAGES`
+* `INVALID_ARTIFACT_PACKAGE_ENTRY`
 * `INVALID_EMAIL`
 * `INVALID_EXPIRY`
 * `INVALID_METADATA`
@@ -223,17 +227,21 @@ const result = ApiErrorSchema.parse(data);
 * `MARKETPLACE_PROXY_FAILED`
 * `MARKETPLACE_STORAGE_FAILED`
 * `MARKETPLACE_UNAVAILABLE`
+* `MEMORY_MULTI_TENANT_UNSUPPORTED`
 * `METADATA_BRANCH`
 * `METADATA_CONFLICT`
 * `METADATA_NOT_FOUND`
 * `METADATA_SCHEMA_INVALID`
+* `MIXED_ARTIFACT_COLLECTION_SHAPE`
+* `MONGODB_MULTI_TENANT_UNSUPPORTED`
 * `MULTI_UPDATE_HOOK_KEY_DIVERGENCE`
 * `NAMESPACE_CONFLICT`
 * `NAMESPACE_PREFIX`
 * `NEEDS_PASSWORD`
 * `NODE_FAILURE`
 * `NOTHING_TO_PURGE`
 * `NOT_ATTEMPTED`
+* `NOT_COMPENSABLE`
 * `NOT_CREATABLE`
 * `NOT_FOUND`
 * `NOT_OVERRIDABLE`
@@ -243,6 +251,7 @@ const result = ApiErrorSchema.parse(data);
 * `NO_IDENTITY`
 * `NO_MATCH`
 * `NO_PENDING_VERIFICATION`
+* `NO_SUCH_RUN`
 * `OAUTH_REGISTER_FAILED`
 * `OBJECT_API_DISABLED`
 * `OBJECT_API_METHOD_NOT_ALLOWED`
@@ -262,10 +271,13 @@ const result = ApiErrorSchema.parse(data);
 * `PAYLOAD_TOO_LARGE`
 * `PERMISSION_NOT_ALLOWED`
 * `PHONE_NOT_ENABLED`
+* `PLAN_CHANGED`
+* `PLUGIN_CONTRACT_VIOLATION`
 * `PLUGIN_INSTALL_FAILED`
 * `PLUGIN_MANIFEST_INVALID`
 * `PLUGIN_REGISTER_FAILED`
 * `PLUGIN_UI_REQUIRED_KEY_MISSING`
+* `PREFLIGHT_FAILED`
 * `PROJECT_MEMBERSHIP_REQUIRED`
 * `PROJECT_NOT_FOUND`
 * `PROJECT_PROVISIONING`
@@ -304,6 +316,7 @@ const result = ApiErrorSchema.parse(data);
 * `SCHEDULES_LIST_FAILED`
 * `SCHEDULE_DELETE_FAILED`
 * `SELF_REGISTRATION_CLOSED`
+* `SERVICE_NOT_REGISTERED`
 * `SETTINGS_ACTION_FAILED`
 * `SETTINGS_CRYPTO_UNAVAILABLE`
 * `SETTINGS_ENGINE_NOT_BOUND`
@@ -354,6 +367,7 @@ const result = ApiErrorSchema.parse(data);
 * `VALIDATION_FAILED`
 * `VERSION_NOT_FOUND`
 * `VERSION_NOT_RESTORABLE`
+* `WALLED_MEMBERSHIP_POLICY_UNDECLARED`
 * `WRITABLE_PACKAGE_REQUIRED`
 * `WRONG_PASSWORD`
 

content/docs/references/api/error-code-ledger.mdx

@@ -161,10 +161,14 @@ best-effort catch that logs and continues. Its throw site and constant
 host boot matching is not wire vocabulary.
 ⚠️ That SECOND ground is superseded by #16404 ("Door or no door" above): a
 boot refusal that ships in `dist` is owed a row, so the codes left out or
-retired on the "not wire vocabulary" reasoning — the remaining
-`boot-refusal` rows of `dispatcher-error-vocabulary.ts` — are registrations
-owed under the ruling, not re-argued per card. What still retires a row is
-the FIRST ground only: no producer left anywhere in `packages/**` source.
+retired on the "not wire vocabulary" reasoning were registrations owed
+under the ruling, not re-argued per card — #16449 registered the nine
+measured on its tree, and #16649 the fourteen `boot-refusal` rows
+`dispatcher-error-vocabulary.ts` still carried, among them
+`MONGODB_MULTI_TENANT_UNSUPPORTED` itself, back under
+`@objectstack/driver-mongodb` with the #8035 removal reversed on the
+record. What still retires a row is the FIRST ground only: no producer
+left anywhere in `packages/**` source.
 Before deleting a row, check that no producer remains repo-wide AND
 that no consumer — including `objectui` and `cloud` — reads the literal;
 tests that merely CONSTRUCT the code are not producers, and a test pinned to
@@ -297,6 +301,8 @@ const result = ErrorCode.parse(data);
 * `DOMAIN_VERIFICATION_DISABLED`
 * `DOMAIN_VERIFICATION_FAILED`
 * `DRIVER_UNAVAILABLE`
+* `DUPLICATE_ARTIFACT_OBJECT_NAME`
+* `DUPLICATE_ARTIFACT_PACKAGE`
 * `DUPLICATE_REQUEST`
 * `DUPLICATE_SOURCE_NOT_A_BASE`
 * `ELIGIBILITY_UNEVALUABLE`
@@ -352,6 +358,8 @@ const result = ErrorCode.parse(data);
 * `IMPORT_JOB_CREATE_FAILED`
 * `IMPORT_ROW_FAILED`
 * `INTERNAL`
+* `INVALID_ARTIFACT_PACKAGES`
+* `INVALID_ARTIFACT_PACKAGE_ENTRY`
 * `INVALID_EMAIL`
 * `INVALID_EXPIRY`
 * `INVALID_METADATA`
@@ -378,17 +386,21 @@ const result = ErrorCode.parse(data);
 * `MARKETPLACE_PROXY_FAILED`
 * `MARKETPLACE_STORAGE_FAILED`
 * `MARKETPLACE_UNAVAILABLE`
+* `MEMORY_MULTI_TENANT_UNSUPPORTED`
 * `METADATA_BRANCH`
 * `METADATA_CONFLICT`
 * `METADATA_NOT_FOUND`
 * `METADATA_SCHEMA_INVALID`
+* `MIXED_ARTIFACT_COLLECTION_SHAPE`
+* `MONGODB_MULTI_TENANT_UNSUPPORTED`
 * `MULTI_UPDATE_HOOK_KEY_DIVERGENCE`
 * `NAMESPACE_CONFLICT`
 * `NAMESPACE_PREFIX`
 * `NEEDS_PASSWORD`
 * `NODE_FAILURE`
 * `NOTHING_TO_PURGE`
 * `NOT_ATTEMPTED`
+* `NOT_COMPENSABLE`
 * `NOT_CREATABLE`
 * `NOT_FOUND`
 * `NOT_OVERRIDABLE`
@@ -398,6 +410,7 @@ const result = ErrorCode.parse(data);
 * `NO_IDENTITY`
 * `NO_MATCH`
 * `NO_PENDING_VERIFICATION`
+* `NO_SUCH_RUN`
 * `OAUTH_REGISTER_FAILED`
 * `OBJECT_API_DISABLED`
 * `OBJECT_API_METHOD_NOT_ALLOWED`
@@ -417,10 +430,13 @@ const result = ErrorCode.parse(data);
 * `PAYLOAD_TOO_LARGE`
 * `PERMISSION_NOT_ALLOWED`
 * `PHONE_NOT_ENABLED`
+* `PLAN_CHANGED`
+* `PLUGIN_CONTRACT_VIOLATION`
 * `PLUGIN_INSTALL_FAILED`
 * `PLUGIN_MANIFEST_INVALID`
 * `PLUGIN_REGISTER_FAILED`
 * `PLUGIN_UI_REQUIRED_KEY_MISSING`
+* `PREFLIGHT_FAILED`
 * `PROJECT_MEMBERSHIP_REQUIRED`
 * `PROJECT_NOT_FOUND`
 * `PROJECT_PROVISIONING`
@@ -459,6 +475,7 @@ const result = ErrorCode.parse(data);
 * `SCHEDULES_LIST_FAILED`
 * `SCHEDULE_DELETE_FAILED`
 * `SELF_REGISTRATION_CLOSED`
+* `SERVICE_NOT_REGISTERED`
 * `SETTINGS_ACTION_FAILED`
 * `SETTINGS_CRYPTO_UNAVAILABLE`
 * `SETTINGS_ENGINE_NOT_BOUND`
@@ -509,6 +526,7 @@ const result = ErrorCode.parse(data);
 * `VALIDATION_FAILED`
 * `VERSION_NOT_FOUND`
 * `VERSION_NOT_RESTORABLE`
+* `WALLED_MEMBERSHIP_POLICY_UNDECLARED`
 * `WRITABLE_PACKAGE_REQUIRED`
 * `WRONG_PASSWORD`