Enums never take a String raw value; CredentialRejectedError redesign; one typed error envelope; FOSTesting depth; review project-scope clauses

[foscomputerservices]

Summary

Seven commits, one arc: the first full customer review run and the review of one of our own types.

fosmvvm-review evaluates project-scope clauses once. A large area is partitioned by module explicitly, and the clauses that answer a question about the whole project ("no behavioral suite exists", "no committed .VersionedTestJSON", "the boot path never installs the error middleware") carry **Scope:** project and run in exactly one partition; the aggregator collapses any duplicate. Plugin 2.65.0.

Enums never take a String raw value. Truth statement in the architecture doc; no-string-backed-enums (cross-cutting, blocker; tools, not libraries, are exempt); LocalizableString.localized(case:parentType:) derives the YAML key from the case; the serverrequest, fields, and viewmodel generators and both DocC articles teach the plain-enum form. The framework's five FOSMVVM enums drop their raw values; FormInputType and FormInputOption.Autocomplete keep their HTML tokens as htmlAttributeValue. Plugin 2.66.0.

CredentialRejectedError is plain data. reason (Reason.missing / .invalid) and a typed CredentialChallenge (.bearer, .bearerRealm(_:), .basicRealm(_:)) with synthesized Codable; the hand-rolled discriminator envelope is gone. Every ServerRequest error body now crosses the wire inside one typed envelope encoded by FOSMVVMVapor.ErrorMiddleware and decoded by the client and the FOSTestingVapor harness — no trial decode. The rejection no longer conforms to AbortError: the middleware assigns its 401 and WWW-Authenticate (the error token follows the reason, RFC 6750 §3.1). The stale DocC that taught hand-rolled retry is rewritten around the refresh seam. Wire contract: a client and server on either side of this release see each other's error bodies as undecodable and fall to the status path; upgrade both together.

FOSTesting depth. expectFullViewModelTests(_:locales:version:); expectTranslations walks child ViewModels, optionals, and collections and names the failing path; the test encoder is strict (LocalizerError.missingTranslation), production encoding unchanged; setUp(bundles:) fails loudly when the bundles yield no YAML (bundles: [] opts into key-echo).

Ledger. Three framework gaps recorded in docs/deferrals.md (non-Fluent write door, socket-channel door, raw-bytes transfer) and one deferral (the rejection's localized message waits on a framework YAML bundle).

Verification

• Full package green: FOSMVVM 467 (four new: translation walk, strict encoder), Vapor suites 254 + 463 (envelope round-trips, dressing through the middleware, custom verifier), bootstrap 90, foundation 63.
• swiftformat and swiftlint clean on every changed Swift file.
• Diff audited for customer names: none on any added line.

Ships as 0.16.0 (public API added; wire contract changed).