refactor: enforce enum machine codes #18

Use owner enums for known codes; preserve wire values and unknown fallbacks.

Verified npm ci and verify: 379 tests, 5 lint checks, app and Storybook builds.

src/shared/api/resource-query.ts

@@ -10,7 +10,7 @@ import type { components } from "./generated/schema";
 
 import { useAuthenticatedQuery } from "./authenticated-query";
 import { getAuthenticatedSessionSnapshot } from "./client";
-import { apiErrorCode } from "./problem-details";
+import { ApiErrorCode, apiErrorCode, isApiErrorCode } from "./problem-details";
 
 const accessEpochs = new WeakMap<QueryClient, Map<string, number>>();
 
@@ -23,13 +23,14 @@ function invalidateResourceAccess(
 	group: string,
 	error: unknown,
 ) {
+	const errorCode = apiErrorCode(error);
 	if (
-		![
-			"FORBIDDEN",
-			"INVALID_TBANK_TOKEN",
-			"NOT_FOUND",
-			"TBANK_NOT_CONNECTED",
-		].includes(apiErrorCode(error) ?? "")
+		[
+			ApiErrorCode.Forbidden,
+			ApiErrorCode.InvalidTbankToken,
+			ApiErrorCode.NotFound,
+			ApiErrorCode.TbankNotConnected,
+		].every(code => !isApiErrorCode(errorCode, code))
 	)
 		return;
 	const epochs = accessEpochs.get(client) ?? new Map<string, number>();